4.1 Special Daisy Chained Sequential Configuration .......4-1 4.2 Point to Multi-point configuration ..........4-1 Chapter 5 Introduction to Aphelion Menus..........5-1 Chapter 6 Basic configurations with Aphelion 500........6-1 6.1 A look at Aphelion main menu............6-1 6.2 General Configuration ..............6-2 6.3 Advanced Setting................6-7 6.4 System Management ..............6-18...
If a material defect is incapable of correction, or if Aphelion determines that it is not practical to repair or replace the defective Hardware, the actual price paid by the original purchaser for the defective Hardware will be refunded by Aphelion upon return to Aphelion of the defective Hardware.
Page 4
Hardware defect or Software nonconformance in sufficient detail to allow Aphelion to confirm the same, along with proof of purchase of the product (such as a copy of the dated purchase invoice for the product) if the product is not registered.
Page 5
Expedited shipping is available upon request and provided shipping charges are prepaid by the customer. Aphelion may reject or return any product that is not packaged and shipped in strict compliance with the foregoing requirements, or for which an RMA number is not visible from the outside of the package.
If you are a qualified reseller of Aphelion, you will be getting usernames and passwords for supporting online where you will find many useful applications notes and FAQs to your needs.
500AGs together to meet the ever increasing needs of different network applications. With it’s break through technology innovations, the Aphelion 500AG can offer the following benefits to users in terms of Scalability, Range extension, Expansion in network capacity, powerful routing engine, easy installation and simple management.
Page 9
802.11a/b/g Intelligent Sequential Outdoor Wireless AP Harsh outdoor environments to keep operation Sturdy water-tight housing Built-in heater module to facilitate cold regions PoE module System Management Firmware upgrade through TFTP, FTP Interface status display SNMP v1/v2 Simple Installation and Deployment Alignment tools for technicians Deployment tools for RF analysis Getting Started...
If any of the above items are missing, please contact your reseller. 3.2 Hardware Description The content of the Aphelion 500AG are described below. 1. The outdoor unit The outdoor unit has one antenna port, one data/power port and one console port.
Page 12
Material: aluminums alloy Front view of RF antenna connector RF antenna connector :The major interfaces on the top of Aphelion 500AG is one female N-Type RF antenna connector with special water proof. Front view of Power / Signal connector port & Console port...
Page 13
802.11a/b/g Intelligent Sequential Outdoor Wireless AP 2. Antenna (Option) There are three kinds of optional antenna used for Aphelion 500AG. A. 12dBi Omni-directional antenna : This antenna is used in the point-to-Multi-points (PTMP) mode. The antenna is connected directly to the outdoor unit.
Page 14
802.11a/b/g Intelligent Sequential Outdoor Wireless AP C. 19dBi flat Dish antenna : 3. RF cable & Connector The RF cable is used to connect the outdoor unit and the Omni / panel / Dish antenna. The Male to Male N-type CFD 400 type RF cable with 1.5M length is provided.
Page 15
802.11a/b/g Intelligent Sequential Outdoor Wireless AP 4. RS-232 console cable (2M MIL-C-5015 IP67 RS-232 Consol Cable) The RS-232 cable is used to connect the console port of the outdoor unit and the antenna alignment tools or the workstation. The One (RS-232) console port has black color for setting up initial configuration information, another (RS-232) console port (blue color) for antenna alignment /deployment tools.
Page 16
802.11a/b/g Intelligent Sequential Outdoor Wireless AP 7. Mounting Kit The mounting kit is used to provide a good support for the outdoor unit and the flat panel antenna. Please follow the installation procedure to mount the outdoor unit and the flat panel antenna.
Page 17
802.11a/b/g Intelligent Sequential Outdoor Wireless AP 8. PoE Power Injector The PoE Power Injector is used to combine the data stream and power into one cable. It has three ports. The port named AC IN is for 100~240V power from AC Power via AC Power Cord.
Page 18
RF equipments. Note: Use this console connection only if you are configuring the Aphelion 500AG via the console. (Or when you fail to configure the unit through the Web based utility). Power & Data Output Port Attach one end of the IP67 Cat-5 Ethernet cable to this port;...
802.11a/b/g Intelligent Sequential Outdoor Wireless AP 3.3 Outdoor Installations Aphelion 500AG can be mounted on the side of building or mounted on an antenna mast as shown in following: Step 1 To compose the holder of Aphelion 500AG Step 2 Plug the female end of the power cord into the PoE Injector and then plug the male end of the power cord into a power outlet or power strip.
Page 20
802.11a/b/g Intelligent Sequential Outdoor Wireless AP Step 4 Run the crossover Ethernet cable from Data Input Port(on the front of the PoE Power Injector)to the Ethernet Port on the PC or notebook. Step 5 Plug the MIL-C-5015 RJ-45 Ethernet cable into the MIL-C-5015 Ethernet port on the back of the access point.
Page 21
802.11a/b/g Intelligent Sequential Outdoor Wireless AP NOTE: This connection is required for setting up initial configuration information. After configuration is completed, this cable may be removed and put on water proof hat until additional configuration is required via the Serial Port.
Page 22
802.11a/b/g Intelligent Sequential Outdoor Wireless AP Special Notice for Waterproofing Installation Most outdoor model problems are caused from the connector connections that loosen due to vibration or other forces,even allowing moisture to penetrate the connector will seriously affect the data & radio single transmit. The following recommendation is used for all outdoor installation to be waterproofed.
802.11a/b/g Intelligent Sequential Outdoor Wireless AP 3.4 Antenna concepts and Installations RF Path Loss Transmission Distance Calculations Explanation of Terms Before getting to the nuts and bolts of designing a link, some fundamental terms and concepts need to be reviewed. Transmit Power The transmit power is the RF power coming out of the antenna port of a transmitter.
Page 24
802.11a/b/g Intelligent Sequential Outdoor Wireless AP EIRP (Effective Isotropically Radiated Power) (dBm) performance of transmitting system = Total Output Power of device – Cable Loss + Antenna Gain Free Space Loss As signals spread out from a radiating source, the energy is spread out over a larger surface area.
Page 25
802.11a/b/g Intelligent Sequential Outdoor Wireless AP Take into calculations System Gain (dBm) Total gain of radio without antenna/cable System Gain = Tx power – Rx Sensitivity Free Space Loss (FSL) FSPL(dB) = Transmit Power + Gain of the Transmit Antenna + Gain of the Receive Antenna –Receiver Sensitivity = 32.4 + 20Log10F(MHz) + 20Log10D(km) = 36.4 + 20Log10F(MHz) + 20Log10D(mile)
Page 26
802.11a/b/g Intelligent Sequential Outdoor Wireless AP Example of Aphelion 500G Here is an example of Aphelion 500G with 12 dBi Gain antenna ( We ignore the cable loss in this case ). As we know the specification of Aphelion 500G below :...
In the following diagram, Aphelion 500s are configured as daisy chained, point to point and point to multi-points. You will be able to engage multiple Aphelion 500 in a daisy chained topology and yet be maintaining a stable throughput and performance.
802.11a/b/g Intelligent Sequential Outdoor Wireless AP Chapter 5 Introduction to Aphelion Menus General Configuration System General Setup (Menu 11) Device Name Description System Operation Mode Set System Date Set System Time Interface Configuration (Menu 12) Interface selection Interface shutdown/enable RIP enable/disable...
Page 29
DHCP Server : Enabled/Disabled DNS Enabled Primary DNS Server Address Secondary DNS Server Address DHCP Subnet Scope Setup Subnet Mask IP Start IP End Lease(D) Lease(M) NAT Configuration (Menu 24) 1.Port Forwarding NAT(Server Set) 2.Static NAT(one-to-one mapping) Introduction to Aphelion Menus...
Page 30
Interface selection Hide ESSID : Enable/Disable Encryption Mode : (WEP/EAP_MD5/EAP_TLS) MAC Address Filter MAC Filter : Disable/Enable Filter Policy : Block/Accept RADIUS Server Authentication Server: Server Address Port Shared Secret Accounting Server: Server Address Port Shared Secret Introduction to Aphelion Menus...
TFTP Server IP Address TFTP Server Port Number Firmware File Name Transfer Type : FTP Transfer FTP Server IP Address FTP Server Port Number Login UserName Login Password Remote Directory Firmware File Name System reboot (Menu 34) Introduction to Aphelion Menus...
Level 2.View System Log System Information (Menu 44) Command Line (Menu 45) alt (Software Alignment tool) arp (Show arp information) date (System time) ping (Ping) reboot (System reboot) tracert (Routing path trace) ver (Show firmware version) Introduction to Aphelion Menus...
802.11a/b/g Intelligent Sequential Outdoor Wireless AP Chapter 6 Basic configurations with Aphelion 500. 6.1 A look at Aphelion main menu The main menu is organized into 4 major functions: 1. General Configuration 2. Advanced Setting 3. System Management 4. System Monitoring...
13. Assign WAN interface 14. Routing Configuration 6.2.1 System General Setup On this menu you will be able to: 1. Assign name to Aphelion 500 2. description of Purpose 3. Select routing or bridging mode 4. Set system time Basic Configurations with Aphelion 500...
Page 35
Remark.1 Introduce two operation mode in menu "12.Interface Configuration". As we know, there are two operation mode of wireless interface in APHELION 500AG, one is "Access Point" and the other is "Wireless Station". When you configure the wireless interface into "Access Point" mode, it means...
Page 36
The wireless client (just like a wireless notebook) is only looking for the access point which is configured same ESSID exactly. In "Wireless Station" mode, the wireless interface won't accept any connection requirements from other wireless clients. Example 1: Basic Configurations with Aphelion 500...
Page 37
802.11a/b/g Intelligent Sequential Outdoor Wireless AP Example 2: 6.2.3 Assign WAN Interface Basic Configurations with Aphelion 500...
Page 38
802.11a/b/g Intelligent Sequential Outdoor Wireless AP This menu allows you to assign your exit for WAN for the Aphelion 500. The Aphelion 500 has 2 interfaces; one Ethernet and one RF interface, you can specify any one to be as WAN; Example, by configuring Ethernet as WAN, you can serve two hotspots simultaneously.
24. NAT Configuration 25. SNMP configuration 26. Wireless Security Setting 6.3.1 System Password In this menu, you will be able to change your admin password. The new password will effect when you login next time. Basic Configurations with Aphelion 500...
Page 40
Aphelion 500s. There are two bandwidth limit types in Aphelion system (Symmetrical and Asymmetrical) for network administrator to manage the bandwidth of client connections. Once the bandwidth limit is enabled, the limitation will be applied to every client connection.
Page 41
In Asymmetrical bandwidth limit type, network administrator can be able to limit download and upload rate of client connections specifically. For specific client connection, Aphelion system provides a specific table for network administrator to limit bandwidth of individual client by MAC address.
Page 42
Lease (M) is maximum. In routing mode configuration, each interface (including Ethernet and Wireless) can be the gateway of its own subnet. It means administrator can have two subnet domains in Aphelion 500AG in routing mode. Basic Configurations with Aphelion 500 6-10...
Page 43
In this menu, there are 4 sub menus as related to NAT configurations. 1. Port forwarding (Server sets) 2. Static NAT (One to One Mapping) 3. Dynamic NAT (Many to Many Mapping) 4. Single Address (NAT/PAT) Basic Configurations with Aphelion 500 6-11...
Page 44
TCP or UDP port that you have defined for your applications. 6.3.4.2 Static NAT In this menu, you will be able to map internal private IP address to a global WAN IP address. Basic Configurations with Aphelion 500 6-12...
Page 45
In this menu, you will be able to configure the general NAT, many to one mapping; you will be able to map a range of internal IP addresses to a single global WAN IP address. Basic Configurations with Aphelion 500 6-13...
Page 46
6.3.5 SNMP configuration In this menu, you will be able to configure SNMP for simple network management, Aphelion 500 supports SNMP v1, v2 as well as version 3. Aphelion has experience working with ILECs, CLECs, WISPs and MSOs, for customized MIB requirements, please contact support@aphelions.com for assistance.
Page 47
In this menu, you will be able to configure wireless security where you will be able to HIDE ESSID and turn on encryption. Aphelion 500 supports 64 bit and 128 bit encryption. WPA1 and WPA2 (TKIP and AES) will be supported in later firmware release, please check www.aphelions.com for firmware updates.
Page 48
802.11a/b/g Intelligent Sequential Outdoor Wireless AP In this menu, for EAP-TLS, you will be able to upload the digital certificates. 6.3.6.2 MAC Address filtering Basic Configurations with Aphelion 500 6-16...
Page 49
Accept or block the traffic from the specific MAC. 6.3.6.3 RADIUS Server In this menu, you will be able to configure your radius settings for 802.1x protocol authenticating with the remote radius server for AAA ( Authenticating, Authorization and Accounting. Basic Configurations with Aphelion 500 6-17...
Under System Management, you will be able to operate the system by following: 31. Configuration Management 32. Security File Management 33. Firmware Upgrade 34. System reboot 6.4.1 Configuration management 6.4.1.1 Back up and Restore Configuration Basic Configurations with Aphelion 500 6-18...
Page 51
802.11a/b/g Intelligent Sequential Outdoor Wireless AP In this menu, you will be able to backup and restore your configurations; in a daisy chained sequential configurations using Aphelion 500s in a chain, it is recommended that you backup all configurations before uploading firmware.
Page 52
In this menu, system allowed administrators to upload these Certificate files through TFTP server to the access point. (For learning more about wireless security, please refer to Annotations “Wireless Security Concept” in the end of this document.) Basic Configurations with Aphelion 500 6-20...
Page 53
During the upgrade, you will see the upgrading rate of progress show on the page by percentage. To prevent unexpected fail of system, please do not shutdown the system during the upgrade. After the upgrade, system will automatically reboot. New firmware will take effect after system reboot. Basic Configurations with Aphelion 500 6-21...
Page 54
802.11a/b/g Intelligent Sequential Outdoor Wireless AP 6.4.4 System Reboot By selecting menu “34.System reboot”, administrator can be able to reboot the system. Systems will pop-up a confirming dialogue to confirm the reboot requirement. Basic Configurations with Aphelion 500 6-22...
6.5.1 Interface Link Status In this menu, administrators can monitor the real-time information of all interfaces of Aphelion 500AG. It will include System Uptime, System Temperature, Tx rate, Rx rate and Noise Level, Data Link Rate, Signal Level in wireless interfaces.
Page 56
802.11a/b/g Intelligent Sequential Outdoor Wireless AP 6.5.2 Connecting Client List In this menu, administrators can monitor all the client connections form wireless interfaces. The connections will show by listing MAC address in this table. 6.5.3 System Log Basic Configurations with Aphelion 500 6-24...
Page 57
Through setting Syslog server IP address, all the system log will send back to the specific log server for centralizing monitoring all the Aphelion devices in the network. 6.5.4 System Information In this menu, administrators can summarize all the configuration and hardware information of the unit.
Page 58
802.11a/b/g Intelligent Sequential Outdoor Wireless AP 6.5.5 Command Line In this menu, Aphelion System provides few command for network administrators doing the debug when manage. Software Alignment tool, by applying this command, system will show the real-time "Link Quality", "RSSI"(Receive Signal Strength Indication)" and "Noise Level"...
Page 59
802.11a/b/g Intelligent Sequential Outdoor Wireless AP Reboot the system. tracert Trace the remote destination IP address to check the routing path. To check the system firmware version Basic Configurations with Aphelion 500 6-27...
802.11a/b/g Intelligent Sequential Outdoor Wireless AP Chapter 8 Annotations 8.1 Wireless Security Concept 1 Security For 802.11 Network 2 Why 802.1X 3 EAP 3.1 EAP Types 4 RADIUS overview 5 How EAP-TLS works with FreeRADIUS and Windows XP Security For 802.11 Network Security for 802.11 networks can be simplified into two main components: authentication and encryption.
Page 63
802.11a/b/g Intelligent Sequential Outdoor Wireless AP controlling user traffic to a protected network, as well as dynamically varying encryption keys. 802.1X ties a protocol called EAP (Extensible Authentication Protocol) to both the wired and wireless LAN media and supports multiple authentication methods, such as token cards, Kerberos, one-time passwords, certificates, and public key authentication.
Page 64
802.11a/b/g Intelligent Sequential Outdoor Wireless AP EAP Types Different types of EAP have been defined to support authentication methods and associated network security policies. Here are few widely-deployed EAP types below: EAP-MD5 EAP-Message Digest 5 Challenge Handshake Authentication Protocol (EAP-MD5 CHAP) is a required EAP type that uses the same challenge handshake protocol as PPP-based CHAP, but the challenges and responses are sent as EAP messages.
Page 65
802.11a/b/g Intelligent Sequential Outdoor Wireless AP PEAP (Protected EAP) PEAP is an EAP extension for Windows CE .NET that enhances the security of the authentication phase. PEAP provides the security framework for mutual authentication between an EAP client and an EAP server. PEAP is not as secure as Transport Level Security (TLS), but has the advantage of being able to use username/password authentication instead of client certificate authentication.
Page 66
802.11a/b/g Intelligent Sequential Outdoor Wireless AP Access-challenge A message sent by a RADIUS client to specify accounting information for a connection that was accepted. Accounting-Request A message sent by a RADIUS client to specify accounting information for a connection that was accepted. Accounting-Response A message sent by access server to acknowledge the successful receipt and processing of the Accounting-Request message...
Page 67
802.11a/b/g Intelligent Sequential Outdoor Wireless AP Initial 802.1X communications begins with an unauthenticated supplicant (wireless station) attempting to connect with an authenticator (802.11 access point). The access point responds by enabling a port for passing only EAP packets from the client to an authentication server located on the wired side of the access point.
Page 68
802.11a/b/g Intelligent Sequential Outdoor Wireless AP 3. The client sends an EAP-response packet containing the identity to the authentication server. The leader in our example will provide their name and drivers license, and the gatekeeper forwards this information to the group tour manager (RADIUS server) who determines whether the group has rights to enter the park.
802.11a/b/g Intelligent Sequential Outdoor Wireless AP automatically change encryption keys as often as necessary to minimize the possibility of eavesdroppers having enough time to crack the key in current use. 8.2 Firmware Upgrade In order to upgrade firmware, please prepare a TFTP (Trivial File Transfer Protocol) or FTP server first, make it available via the data-in port on the PoE device.
Page 70
802.11a/b/g Intelligent Sequential Outdoor Wireless AP Annotations...
Page 71
802.11a/b/g Intelligent Sequential Outdoor Wireless AP Upgrade firmware via TFTP server and FTP sever A. TFTP server upgrade Boot the device; enter to the user interface as below, after the password screen: To upgrade the firmware, please select “33. Firmware Upgrade”. iii.
Page 72
802.11a/b/g Intelligent Sequential Outdoor Wireless AP Move cursor to the line of “Upgrade new firmware?” press “Y” to confirm and begin the firmware upgrade process. While the firmware has been upgraded after few minutes, system will automatically reboot. vii. If encounter any problem to upgrade firmware with message “Upgrade new firmware fail, Press 'N' to continue ...”...
Page 73
802.11a/b/g Intelligent Sequential Outdoor Wireless AP B. FTP server upgrade This option is available from the firmware version 0.971, In order to upgrade firmware, please prepare a FTP server first, make it available via the data-in port on the PoE device. Choose the Transfer type by pressing the space bar, till the FTP transfer shows.
Need help?
Do you have a question about the 500AG and is the answer not in the manual?
Questions and answers