Aphelion 500AG User Manual

802.11a/b/g multi-functional outdoor wireless access point
Hide thumbs Also See for 500AG:

Advertisement

Quick Links

Aphelion Series
Aphelion 500AG
802.11a/b/g Multi-functional
Outdoor Wireless Access Point

User Manual

V.05.09.06
August, 2005

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the 500AG and is the answer not in the manual?

Questions and answers

Summary of Contents for Aphelion 500AG

  • Page 1: User Manual

    Aphelion Series Aphelion 500AG 802.11a/b/g Multi-functional Outdoor Wireless Access Point User Manual V.05.09.06 August, 2005...
  • Page 2: Table Of Contents

    4.1 Special Daisy Chained Sequential Configuration .......4-1 4.2 Point to Multi-point configuration ..........4-1 Chapter 5 Introduction to Aphelion Menus..........5-1 Chapter 6 Basic configurations with Aphelion 500........6-1 6.1 A look at Aphelion main menu............6-1 6.2 General Configuration ..............6-2 6.3 Advanced Setting................6-7 6.4 System Management ..............6-18...
  • Page 3: Chapter 1 Warranty And Support

    If a material defect is incapable of correction, or if Aphelion determines that it is not practical to repair or replace the defective Hardware, the actual price paid by the original purchaser for the defective Hardware will be refunded by Aphelion upon return to Aphelion of the defective Hardware.
  • Page 4 Hardware defect or Software nonconformance in sufficient detail to allow Aphelion to confirm the same, along with proof of purchase of the product (such as a copy of the dated purchase invoice for the product) if the product is not registered.
  • Page 5 Expedited shipping is available upon request and provided shipping charges are prepaid by the customer. Aphelion may reject or return any product that is not packaged and shipped in strict compliance with the foregoing requirements, or for which an RMA number is not visible from the outside of the package.
  • Page 6 product.
  • Page 7: Technical Support

    If you are a qualified reseller of Aphelion, you will be getting usernames and passwords for supporting online where you will find many useful applications notes and FAQs to your needs.
  • Page 8: Chapter 2 Getting Started

    500AGs together to meet the ever increasing needs of different network applications. With it’s break through technology innovations, the Aphelion 500AG can offer the following benefits to users in terms of Scalability, Range extension, Expansion in network capacity, powerful routing engine, easy installation and simple management.
  • Page 9 802.11a/b/g Intelligent Sequential Outdoor Wireless AP Harsh outdoor environments to keep operation Sturdy water-tight housing Built-in heater module to facilitate cold regions PoE module System Management Firmware upgrade through TFTP, FTP Interface status display SNMP v1/v2 Simple Installation and Deployment Alignment tools for technicians Deployment tools for RF analysis Getting Started...
  • Page 10: Chapter 3 Hardware Installation

    802.11a/b/g Intelligent Sequential Outdoor Wireless AP Chapter 3 Hardware Installation This chapter describes the procedures for installing Aphelion 500AG 3.1 Preparing Installations Package Connects Hardware Installation...
  • Page 11: Hardware Description

    If any of the above items are missing, please contact your reseller. 3.2 Hardware Description The content of the Aphelion 500AG are described below. 1. The outdoor unit The outdoor unit has one antenna port, one data/power port and one console port.
  • Page 12 Material: aluminums alloy Front view of RF antenna connector RF antenna connector :The major interfaces on the top of Aphelion 500AG is one female N-Type RF antenna connector with special water proof. Front view of Power / Signal connector port & Console port...
  • Page 13 802.11a/b/g Intelligent Sequential Outdoor Wireless AP 2. Antenna (Option) There are three kinds of optional antenna used for Aphelion 500AG. A. 12dBi Omni-directional antenna : This antenna is used in the point-to-Multi-points (PTMP) mode. The antenna is connected directly to the outdoor unit.
  • Page 14 802.11a/b/g Intelligent Sequential Outdoor Wireless AP C. 19dBi flat Dish antenna : 3. RF cable & Connector The RF cable is used to connect the outdoor unit and the Omni / panel / Dish antenna. The Male to Male N-type CFD 400 type RF cable with 1.5M length is provided.
  • Page 15 802.11a/b/g Intelligent Sequential Outdoor Wireless AP 4. RS-232 console cable (2M MIL-C-5015 IP67 RS-232 Consol Cable) The RS-232 cable is used to connect the console port of the outdoor unit and the antenna alignment tools or the workstation. The One (RS-232) console port has black color for setting up initial configuration information, another (RS-232) console port (blue color) for antenna alignment /deployment tools.
  • Page 16 802.11a/b/g Intelligent Sequential Outdoor Wireless AP 7. Mounting Kit The mounting kit is used to provide a good support for the outdoor unit and the flat panel antenna. Please follow the installation procedure to mount the outdoor unit and the flat panel antenna.
  • Page 17 802.11a/b/g Intelligent Sequential Outdoor Wireless AP 8. PoE Power Injector The PoE Power Injector is used to combine the data stream and power into one cable. It has three ports. The port named AC IN is for 100~240V power from AC Power via AC Power Cord.
  • Page 18 RF equipments. Note: Use this console connection only if you are configuring the Aphelion 500AG via the console. (Or when you fail to configure the unit through the Web based utility). Power & Data Output Port Attach one end of the IP67 Cat-5 Ethernet cable to this port;...
  • Page 19: Outdoor Installations

    802.11a/b/g Intelligent Sequential Outdoor Wireless AP 3.3 Outdoor Installations Aphelion 500AG can be mounted on the side of building or mounted on an antenna mast as shown in following: Step 1 To compose the holder of Aphelion 500AG Step 2 Plug the female end of the power cord into the PoE Injector and then plug the male end of the power cord into a power outlet or power strip.
  • Page 20 802.11a/b/g Intelligent Sequential Outdoor Wireless AP Step 4 Run the crossover Ethernet cable from Data Input Port(on the front of the PoE Power Injector)to the Ethernet Port on the PC or notebook. Step 5 Plug the MIL-C-5015 RJ-45 Ethernet cable into the MIL-C-5015 Ethernet port on the back of the access point.
  • Page 21 802.11a/b/g Intelligent Sequential Outdoor Wireless AP NOTE: This connection is required for setting up initial configuration information. After configuration is completed, this cable may be removed and put on water proof hat until additional configuration is required via the Serial Port.
  • Page 22 802.11a/b/g Intelligent Sequential Outdoor Wireless AP Special Notice for Waterproofing Installation Most outdoor model problems are caused from the connector connections that loosen due to vibration or other forces,even allowing moisture to penetrate the connector will seriously affect the data & radio single transmit. The following recommendation is used for all outdoor installation to be waterproofed.
  • Page 23: Antenna Concepts And Installations

    802.11a/b/g Intelligent Sequential Outdoor Wireless AP 3.4 Antenna concepts and Installations RF Path Loss Transmission Distance Calculations Explanation of Terms Before getting to the nuts and bolts of designing a link, some fundamental terms and concepts need to be reviewed. Transmit Power The transmit power is the RF power coming out of the antenna port of a transmitter.
  • Page 24 802.11a/b/g Intelligent Sequential Outdoor Wireless AP EIRP (Effective Isotropically Radiated Power) (dBm) performance of transmitting system = Total Output Power of device – Cable Loss + Antenna Gain Free Space Loss As signals spread out from a radiating source, the energy is spread out over a larger surface area.
  • Page 25 802.11a/b/g Intelligent Sequential Outdoor Wireless AP Take into calculations System Gain (dBm) Total gain of radio without antenna/cable System Gain = Tx power – Rx Sensitivity Free Space Loss (FSL) FSPL(dB) = Transmit Power + Gain of the Transmit Antenna + Gain of the Receive Antenna –Receiver Sensitivity = 32.4 + 20Log10F(MHz) + 20Log10D(km) = 36.4 + 20Log10F(MHz) + 20Log10D(mile)
  • Page 26 802.11a/b/g Intelligent Sequential Outdoor Wireless AP Example of Aphelion 500G Here is an example of Aphelion 500G with 12 dBi Gain antenna ( We ignore the cable loss in this case ). As we know the specification of Aphelion 500G below :...
  • Page 27: Chapter 4 Wireless Network Topologies

    In the following diagram, Aphelion 500s are configured as daisy chained, point to point and point to multi-points. You will be able to engage multiple Aphelion 500 in a daisy chained topology and yet be maintaining a stable throughput and performance.
  • Page 28: Chapter 5 Introduction To Aphelion Menus

    802.11a/b/g Intelligent Sequential Outdoor Wireless AP Chapter 5 Introduction to Aphelion Menus General Configuration System General Setup (Menu 11) Device Name Description System Operation Mode Set System Date Set System Time Interface Configuration (Menu 12) Interface selection Interface shutdown/enable RIP enable/disable...
  • Page 29 DHCP Server : Enabled/Disabled DNS Enabled Primary DNS Server Address Secondary DNS Server Address DHCP Subnet Scope Setup Subnet Mask IP Start IP End Lease(D) Lease(M) NAT Configuration (Menu 24) 1.Port Forwarding NAT(Server Set) 2.Static NAT(one-to-one mapping) Introduction to Aphelion Menus...
  • Page 30 Interface selection Hide ESSID : Enable/Disable Encryption Mode : (WEP/EAP_MD5/EAP_TLS) MAC Address Filter MAC Filter : Disable/Enable Filter Policy : Block/Accept RADIUS Server Authentication Server: Server Address Port Shared Secret Accounting Server: Server Address Port Shared Secret Introduction to Aphelion Menus...
  • Page 31: System Management

    TFTP Server IP Address TFTP Server Port Number Firmware File Name Transfer Type : FTP Transfer FTP Server IP Address FTP Server Port Number Login UserName Login Password Remote Directory Firmware File Name System reboot (Menu 34) Introduction to Aphelion Menus...
  • Page 32: System Monitoring

    Level 2.View System Log System Information (Menu 44) Command Line (Menu 45) alt (Software Alignment tool) arp (Show arp information) date (System time) ping (Ping) reboot (System reboot) tracert (Routing path trace) ver (Show firmware version) Introduction to Aphelion Menus...
  • Page 33: Chapter 6 Basic Configurations With Aphelion 500

    802.11a/b/g Intelligent Sequential Outdoor Wireless AP Chapter 6 Basic configurations with Aphelion 500. 6.1 A look at Aphelion main menu The main menu is organized into 4 major functions: 1. General Configuration 2. Advanced Setting 3. System Management 4. System Monitoring...
  • Page 34: General Configuration

    13. Assign WAN interface 14. Routing Configuration 6.2.1 System General Setup On this menu you will be able to: 1. Assign name to Aphelion 500 2. description of Purpose 3. Select routing or bridging mode 4. Set system time Basic Configurations with Aphelion 500...
  • Page 35 Remark.1 Introduce two operation mode in menu "12.Interface Configuration". As we know, there are two operation mode of wireless interface in APHELION 500AG, one is "Access Point" and the other is "Wireless Station". When you configure the wireless interface into "Access Point" mode, it means...
  • Page 36 The wireless client (just like a wireless notebook) is only looking for the access point which is configured same ESSID exactly. In "Wireless Station" mode, the wireless interface won't accept any connection requirements from other wireless clients. Example 1: Basic Configurations with Aphelion 500...
  • Page 37 802.11a/b/g Intelligent Sequential Outdoor Wireless AP Example 2: 6.2.3 Assign WAN Interface Basic Configurations with Aphelion 500...
  • Page 38 802.11a/b/g Intelligent Sequential Outdoor Wireless AP This menu allows you to assign your exit for WAN for the Aphelion 500. The Aphelion 500 has 2 interfaces; one Ethernet and one RF interface, you can specify any one to be as WAN; Example, by configuring Ethernet as WAN, you can serve two hotspots simultaneously.
  • Page 39: Advanced Setting

    24. NAT Configuration 25. SNMP configuration 26. Wireless Security Setting 6.3.1 System Password In this menu, you will be able to change your admin password. The new password will effect when you login next time. Basic Configurations with Aphelion 500...
  • Page 40 Aphelion 500s. There are two bandwidth limit types in Aphelion system (Symmetrical and Asymmetrical) for network administrator to manage the bandwidth of client connections. Once the bandwidth limit is enabled, the limitation will be applied to every client connection.
  • Page 41 In Asymmetrical bandwidth limit type, network administrator can be able to limit download and upload rate of client connections specifically. For specific client connection, Aphelion system provides a specific table for network administrator to limit bandwidth of individual client by MAC address.
  • Page 42 Lease (M) is maximum. In routing mode configuration, each interface (including Ethernet and Wireless) can be the gateway of its own subnet. It means administrator can have two subnet domains in Aphelion 500AG in routing mode. Basic Configurations with Aphelion 500 6-10...
  • Page 43 In this menu, there are 4 sub menus as related to NAT configurations. 1. Port forwarding (Server sets) 2. Static NAT (One to One Mapping) 3. Dynamic NAT (Many to Many Mapping) 4. Single Address (NAT/PAT) Basic Configurations with Aphelion 500 6-11...
  • Page 44 TCP or UDP port that you have defined for your applications. 6.3.4.2 Static NAT In this menu, you will be able to map internal private IP address to a global WAN IP address. Basic Configurations with Aphelion 500 6-12...
  • Page 45 In this menu, you will be able to configure the general NAT, many to one mapping; you will be able to map a range of internal IP addresses to a single global WAN IP address. Basic Configurations with Aphelion 500 6-13...
  • Page 46 6.3.5 SNMP configuration In this menu, you will be able to configure SNMP for simple network management, Aphelion 500 supports SNMP v1, v2 as well as version 3. Aphelion has experience working with ILECs, CLECs, WISPs and MSOs, for customized MIB requirements, please contact support@aphelions.com for assistance.
  • Page 47 In this menu, you will be able to configure wireless security where you will be able to HIDE ESSID and turn on encryption. Aphelion 500 supports 64 bit and 128 bit encryption. WPA1 and WPA2 (TKIP and AES) will be supported in later firmware release, please check www.aphelions.com for firmware updates.
  • Page 48 802.11a/b/g Intelligent Sequential Outdoor Wireless AP In this menu, for EAP-TLS, you will be able to upload the digital certificates. 6.3.6.2 MAC Address filtering Basic Configurations with Aphelion 500 6-16...
  • Page 49 Accept or block the traffic from the specific MAC. 6.3.6.3 RADIUS Server In this menu, you will be able to configure your radius settings for 802.1x protocol authenticating with the remote radius server for AAA ( Authenticating, Authorization and Accounting. Basic Configurations with Aphelion 500 6-17...
  • Page 50: System Management

    Under System Management, you will be able to operate the system by following: 31. Configuration Management 32. Security File Management 33. Firmware Upgrade 34. System reboot 6.4.1 Configuration management 6.4.1.1 Back up and Restore Configuration Basic Configurations with Aphelion 500 6-18...
  • Page 51 802.11a/b/g Intelligent Sequential Outdoor Wireless AP In this menu, you will be able to backup and restore your configurations; in a daisy chained sequential configurations using Aphelion 500s in a chain, it is recommended that you backup all configurations before uploading firmware.
  • Page 52 In this menu, system allowed administrators to upload these Certificate files through TFTP server to the access point. (For learning more about wireless security, please refer to Annotations “Wireless Security Concept” in the end of this document.) Basic Configurations with Aphelion 500 6-20...
  • Page 53 During the upgrade, you will see the upgrading rate of progress show on the page by percentage. To prevent unexpected fail of system, please do not shutdown the system during the upgrade. After the upgrade, system will automatically reboot. New firmware will take effect after system reboot. Basic Configurations with Aphelion 500 6-21...
  • Page 54 802.11a/b/g Intelligent Sequential Outdoor Wireless AP 6.4.4 System Reboot By selecting menu “34.System reboot”, administrator can be able to reboot the system. Systems will pop-up a confirming dialogue to confirm the reboot requirement. Basic Configurations with Aphelion 500 6-22...
  • Page 55: System Monitoring

    6.5.1 Interface Link Status In this menu, administrators can monitor the real-time information of all interfaces of Aphelion 500AG. It will include System Uptime, System Temperature, Tx rate, Rx rate and Noise Level, Data Link Rate, Signal Level in wireless interfaces.
  • Page 56 802.11a/b/g Intelligent Sequential Outdoor Wireless AP 6.5.2 Connecting Client List In this menu, administrators can monitor all the client connections form wireless interfaces. The connections will show by listing MAC address in this table. 6.5.3 System Log Basic Configurations with Aphelion 500 6-24...
  • Page 57 Through setting Syslog server IP address, all the system log will send back to the specific log server for centralizing monitoring all the Aphelion devices in the network. 6.5.4 System Information In this menu, administrators can summarize all the configuration and hardware information of the unit.
  • Page 58 802.11a/b/g Intelligent Sequential Outdoor Wireless AP 6.5.5 Command Line In this menu, Aphelion System provides few command for network administrators doing the debug when manage. Software Alignment tool, by applying this command, system will show the real-time "Link Quality", "RSSI"(Receive Signal Strength Indication)" and "Noise Level"...
  • Page 59 802.11a/b/g Intelligent Sequential Outdoor Wireless AP Reboot the system. tracert Trace the remote destination IP address to check the routing path. To check the system firmware version Basic Configurations with Aphelion 500 6-27...
  • Page 60: Chapter 7 Specifications

    802.11a/b/g Intelligent Sequential Outdoor Wireless AP Chapter 7 Specifications IEEE802.11a IEEE802.11b Wireless IEEE802.11g IEEE802.11b/g IEEE802.3 Standard Ethernet IEEE802.3u support IEEE802.3af 1×10/100 Base-T RJ-45 Power over Ethernet(PoE) Ethernet Antenna Connector: 1 × Reversed Female N-type Wireless 32Mbyte SDRAM Memory 8Mbyte Flash Full Duplex: 200Mbps (for 100BASETX), 20Mbps (for 10BaseT) Max.
  • Page 61 802.11a/b/g Intelligent Sequential Outdoor Wireless AP 802.11b 18 dBm 802.11g 18dBm @6Mbps Output Power 15dBm @54Mbps 802.11a 17dBm @6Mbps 13dBm @54Mbps IEEE 802.11b/g Mode Selection Enable / Disable Broadcast SSID MAC Address Filtering Wireless Fixed Channel DHCP Client / Server, Fixed IP Other Setting Static Routing SNMP v1v2...
  • Page 62: Chapter 8 Annotations

    802.11a/b/g Intelligent Sequential Outdoor Wireless AP Chapter 8 Annotations 8.1 Wireless Security Concept 1 Security For 802.11 Network 2 Why 802.1X 3 EAP 3.1 EAP Types 4 RADIUS overview 5 How EAP-TLS works with FreeRADIUS and Windows XP Security For 802.11 Network Security for 802.11 networks can be simplified into two main components: authentication and encryption.
  • Page 63 802.11a/b/g Intelligent Sequential Outdoor Wireless AP controlling user traffic to a protected network, as well as dynamically varying encryption keys. 802.1X ties a protocol called EAP (Extensible Authentication Protocol) to both the wired and wireless LAN media and supports multiple authentication methods, such as token cards, Kerberos, one-time passwords, certificates, and public key authentication.
  • Page 64 802.11a/b/g Intelligent Sequential Outdoor Wireless AP EAP Types Different types of EAP have been defined to support authentication methods and associated network security policies. Here are few widely-deployed EAP types below: EAP-MD5 EAP-Message Digest 5 Challenge Handshake Authentication Protocol (EAP-MD5 CHAP) is a required EAP type that uses the same challenge handshake protocol as PPP-based CHAP, but the challenges and responses are sent as EAP messages.
  • Page 65 802.11a/b/g Intelligent Sequential Outdoor Wireless AP PEAP (Protected EAP) PEAP is an EAP extension for Windows CE .NET that enhances the security of the authentication phase. PEAP provides the security framework for mutual authentication between an EAP client and an EAP server. PEAP is not as secure as Transport Level Security (TLS), but has the advantage of being able to use username/password authentication instead of client certificate authentication.
  • Page 66 802.11a/b/g Intelligent Sequential Outdoor Wireless AP Access-challenge A message sent by a RADIUS client to specify accounting information for a connection that was accepted. Accounting-Request A message sent by a RADIUS client to specify accounting information for a connection that was accepted. Accounting-Response A message sent by access server to acknowledge the successful receipt and processing of the Accounting-Request message...
  • Page 67 802.11a/b/g Intelligent Sequential Outdoor Wireless AP Initial 802.1X communications begins with an unauthenticated supplicant (wireless station) attempting to connect with an authenticator (802.11 access point). The access point responds by enabling a port for passing only EAP packets from the client to an authentication server located on the wired side of the access point.
  • Page 68 802.11a/b/g Intelligent Sequential Outdoor Wireless AP 3. The client sends an EAP-response packet containing the identity to the authentication server. The leader in our example will provide their name and drivers license, and the gatekeeper forwards this information to the group tour manager (RADIUS server) who determines whether the group has rights to enter the park.
  • Page 69: Firmware Upgrade

    802.11a/b/g Intelligent Sequential Outdoor Wireless AP automatically change encryption keys as often as necessary to minimize the possibility of eavesdroppers having enough time to crack the key in current use. 8.2 Firmware Upgrade In order to upgrade firmware, please prepare a TFTP (Trivial File Transfer Protocol) or FTP server first, make it available via the data-in port on the PoE device.
  • Page 70 802.11a/b/g Intelligent Sequential Outdoor Wireless AP Annotations...
  • Page 71 802.11a/b/g Intelligent Sequential Outdoor Wireless AP Upgrade firmware via TFTP server and FTP sever A. TFTP server upgrade Boot the device; enter to the user interface as below, after the password screen: To upgrade the firmware, please select “33. Firmware Upgrade”. iii.
  • Page 72 802.11a/b/g Intelligent Sequential Outdoor Wireless AP Move cursor to the line of “Upgrade new firmware?” press “Y” to confirm and begin the firmware upgrade process. While the firmware has been upgraded after few minutes, system will automatically reboot. vii. If encounter any problem to upgrade firmware with message “Upgrade new firmware fail, Press 'N' to continue ...”...
  • Page 73 802.11a/b/g Intelligent Sequential Outdoor Wireless AP B. FTP server upgrade This option is available from the firmware version 0.971, In order to upgrade firmware, please prepare a FTP server first, make it available via the data-in port on the PoE device. Choose the Transfer type by pressing the space bar, till the FTP transfer shows.

Table of Contents