Planet WAP-4000 User Manual

Planet WAP-4000 User Manual

802.11g wireless access point/bridge
Hide thumbs Also See for WAP-4000:

Advertisement

802.11g Wireless Access Point / Bridge
WAP-4000
User's Manual

Advertisement

Table of Contents
loading

Summary of Contents for Planet WAP-4000

  • Page 1 802.11g Wireless Access Point / Bridge WAP-4000 User’s Manual...
  • Page 2: Federal Communication Commission Interference Statement

    Copyright Copyright© 2003 by PLANET Technology Corp. All rights reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language or computer language, in any form or by any means, electronic, mechanical, magnetic, optical, chemical, manual or otherwise, without the prior written permission of PLANET.
  • Page 3 All guidelines of this and of the computer manufacture must therefore be allowed at all times to ensure the safe use of the equipment. Revision User’s Manual for PLANET 802.11g Wireless Access Point Model: WAP-4000 Rev: 1.0 (August, 2003)
  • Page 4: Table Of Contents

    TABLE OF CONTENTS CHAPTER 1 INTRODUCTION ....................1 1.1 P ......................1 ACKAGE ONTENTS 1.2 S ....................1 YSTEM EQUIREMENTS 1.3 F ......................... 1 EATURES 1.4 S ........................2 PECIFICATION 1.5 W ....................3 IRELESS ERFORMANCE CHAPTER 2 HARDWARE INSTALLATION ................4 CHAPTER 3 CONFIGURING THE WIRELESS ACCESS POINT..........
  • Page 5 5.4 M ....................51 ULTIPLE RIDGE MODE CHAPTER 6 TROUBLESHOOTING..................52...
  • Page 6: Chapter 1 Introduction

    802.11g uses 2.4GHz frequency band, the same as IEEE 802.11b; but it provides more throughput rate than 802.11b. The maximum throughput rate of 802.11g can up to 54Mbps. WAP-4000 is also backward compatible and interoperable with IEEE 802.11b compliant wireless devices. Except for 64/128bit WEP encryption, WAP-4000 also integrates 802.1X authentication.
  • Page 7: Specification

    1.4 Specification Standard IEEE 802.11b, IEEE 802.11g Signal Type DSSS (Direct Sequence Spread Spectrum) Modulation BPSK / QPSK / CCK / OFDM Port 10/100Base-TX (RJ-45) * 1 Antenna Detachable Dipole Antenna * 1 Antenna Connector Reversed Polarity SMA Male Output Power 17dBm 11 Mbps (CCK): -82dBm 5.5 Mbps (QPSK): - 86dBm...
  • Page 8: Wireless Performance

    Keep the number of walls, or ceilings between AP and clients as few as possible; otherwise the signal strength may be seriously reduced. Place WAP-4000 in open space or add additional WAP-4000 as needed to improve the coverage.
  • Page 9: Chapter 2 Hardware Installation

    2. Assemble the antennas to WAP-4000. Try to place them to a position that can best cover your wireless network. The antenna’s position will enhance the receiving sensitivity.
  • Page 10: Chapter 3 Configuring The Wireless Access Point

    2. Enter the IP address of your WAP-4000 in the address field (default IP address is http://192.168.1.1). Please note that your PC’s IP address should be on the same IP subnet of the WAP-4000. For example, you can configure your PC’s IP address to 192.168.1.2 if WAP-4000 is with IP 192.168.1.1.
  • Page 11: Wizard

    3.1.1 Wizard Setup wizard provides a simple way to configure your WAP-4000. Clicking “Wizard” button on top panel of WAP-4000’s web page, Setup Wizard will pop up as below.. To quick configure WAP-4000, please follow the steps below to complete the configuration. Click “Next>”...
  • Page 12 You can enable WEP encryption and set WEP key in this screen. Click “Next>” to continue. Step 4. Restart Please click the “Restart” button to save the settings and restart WAP-4000. In the following web page, please click “Close” to close the Setup Wizard window.
  • Page 13: Status

    3.1.2 Status: You can check your WAP-4000 settings and status in this screen. You can click the “View Log” button, and then the screen below will appear. You can view the logged message here. You can also clear or refresh the log record.
  • Page 14: Basic Settings

    You can set the AP Name, SSID, Channel and WEP function to this Access Point. After configuration, please click Apply to save your settings. AP Name: The host name of the WAP-4000. This can be any name for you to easily identify this access point.
  • Page 15 DHCP server. Or you can select Fixed IP to set the IP settings manually. WAP-4000 has build-in DHCP server. By default is “Off”. If you have a DHCP server in your network already, please disable the DHCP server function. When you assign an IP address to this access point, please ensure this IP address is on the same IP range as DHCP Server settings.
  • Page 16: Advanced Settings

    AP Mode: WAP-4000 has four operation modes. By default, it is set to AP mode. Access Point: This mode is set to WAP-4000 by default. This connects your wireless PCs to a wired network. In most cases, no change is necessary. Up to 63 wireless clients can be connected through WAP-4000.
  • Page 17: Security

    SSID Broadcast: Enable or disable a Service Set Identifier broadcast. When enabled, the SSID of the WAP-4000 is sent to wireless enabled devices on the area. Set the WAP-4000’s SSID in the Basic Setting screen. Enabling this function may cause unauthorized user to connect your wireless networks.
  • Page 18: 802.1X

    Password: Enter the new password in the "AP Password New" field and again in the next field to confirm. Click on "Apply" to execute the password change. The Password is case-sensitive, and can be made up of any keyboard characters. The new password must be between 0 and 15 characters in length.
  • Page 19 Enable/Disable: Enable or disable 802.1X authentication of WAP-4000. Encryption Key: Select one of the Encryption key length options. It should be set the same length as WEP key. Select one of the Encryption key lifetime options. Once the lifetime expires, RADIUS server will renew the Encryption key.
  • Page 20: Tools

    Browse button. 3.2 Configure through 54M AP Utility The 54M AP Utility is provided to configure the WAP-4000. It can be used to configure multiple WAP-4000s at the same time in an easiest way.
  • Page 21 You can click “Browse” to specify the Destination Folder that you want to install the utility. Or you can keep the default setting and click ”Next” to continue. Please click “Finish” to complete the software installation. - 16 -...
  • Page 22: Ap Utility Configuration

    When the configuration utility starts, it will show you the first option “Link Information”. You can view the first Access Point’s current setting. Note: If you have many WAP-4000, all the WAP-4000s will list in “Available AP”. You can select the WAP-4000 that you want to check, then you can see the settings of the WAP-4000.
  • Page 23 Mode Settings: Access Point: This mode is set to WAP-4000 by default. This connects your wireless PCs to a wired network. In most cases, no change is necessary. Up to 63 wireless clients can be connected through WAP-4000.
  • Page 24 Transmission Rates: Select the desired transmission rates by clicking on the drop down list. The default setting is “Auto”. 11G Only Mode: Enabling 11g only mode maximizes the performance of WAP-4000 in a pure 802.11g WLAN, but 802.11b clients are not allowed to connect to it. Disabling this option allows both 802.11g and 802.11b clients to connect to WAP-4000.
  • Page 25 3.2.2.3 IP Settings Fix IP Address: You may give a fixed IP address to WAP-4000 manually by choosing this radio button. IP Address: Set an IP address for the AP. Subnet mask: Set the Subnet Mask for the AP. Gateway: The IP address of a gateway device necessary for communication with devices outside the subnet of the Access Point.
  • Page 26 Note: If you have many WAP-4000s in LAN and you want to set them have the same WEP key. You can set one of them, and then select all the WAP-4000 in the “Available AP” and press Apply. You will see a dialog box appears as below. You can enter their User Name and Password in this dialog box and Click OK to apply.
  • Page 27 3.2.2.5 802.1x Settings 802.1X Function: Enable or disable 802.1X authentication of WAP-4000. Encryption Key: Select one of the Encryption key length options. It should be set the same length as WEP key. Select one of the Encryption key lifetime options. Once the lifetime expires, RADIUS server will renew the Encryption key.
  • Page 28: Chapter 4 802.1X Authentication Setup

    The above graph shows the network topology of the solution we are going to introduce. As illustrated, a group of wireless clients is trying to build a wireless network with WAP-4000 in order to have access to both Internet and Intranet. With 802.1X authentication, each of these wireless clients would have to be authenticated by RADIUS server.
  • Page 29: Radius Server Setup

    8. The client and RADIUS server derive encryption keys. 9. The RADIUS server sends WAP-4000 a RADIUS ACCEPT message, including the client’s WEP key. 10. WAP-4000 sends the client an EAP Success message along with the broadcast key and key length, all encrypted with the client’s WEP key.
  • Page 30 6. Enter the information that you want for your Certificate Service, and click “Next” to continue. 7. Go to Start > Program > Administrative Tools > Certificate Authority. 8. Right-click on the “Policy Setting”, select “new”. 9. Select “Certificate to Issue”. 10.
  • Page 31 11. Go to Start > Program > Administrative Tools > Active Directory Users and Computers. 12. Right-click on domain, and select ”Properties” to continue. 13. Select “Group Policy” tab and click “Properties” to continue. - 26 -...
  • Page 32 14. Go to “Computer Configuration” > “Security Settings” > “Public Key Policies” 15. Right-click “Automatic Certificate Request Setting”, and select “New” 16. Click “Automatic Certificate Request ...” - 27 -...
  • Page 33 Certificate 17. The Automatic Certificate Request Setup Wizard will guide you through the Automatic Request setup, simply click “Next” through to the last step. 18. Click “Finish” to complete the Automatic Certificate Request Setup 19. Go to Start > Run, and type “command” and click “Enter” to open Command Prompt. 20.
  • Page 34 24. Go to Start > Program > Administrative Tools > Internet Authentication Service. 25. Right-click “Client”, and select “New Client”. 26. Enter the IP address of WAP-4000 in the Client address text field, a memorable name for WAP-4000 in the Client-Vendor text field, the access password used by WAP-4000 in the Shared secret text field.
  • Page 35 27. Click “Finish”. 28. In the Internet Authentication Service, right-click “Remote Access Policies” 29. Select “New Remote Access Policy”. 30. Select “Day-And-Time-Restriction”, and click “Add” to continue. - 30 -...
  • Page 36 31. Unless you want to specify the active duration for 802.1X authentication, click “OK” to accept for having 802.1x authentication enabled at all times. 32. Select “Grant remote access permission”, and click “Next” to continue. - 31 -...
  • Page 37 33. Click “Edit Profile”. For TLS Authentication Setup (Steps 34 ~ 35) 34. Select “Authentication” Tab. 35. Enable “Extensible Authentication Protocol”, and select “Smart Card or other Certificate” for TLS authentication. Click “OK”. Then go to step 38. - 32 -...
  • Page 38 For MD5 Authentication Setup (Steps 36 ~ 37) 36. Select “Authentication” Tab. 37. Enable “Extensible Authentication Protocol”. Select “MD5-Challenge” and enable “Encrypted Authentication (CHAP)” for MD5 authentication. Click “OK”. - 33 -...
  • Page 39 38. Select “Internet Authentication Service (Local)”, click on “Action” from top panel. Then click “Register Service in Active Directory”. 39. Go to Start > Program > Administrative Tools > Active Directory Users and Computers. 40. Right click on the domain, and select “Properties”. 41.
  • Page 40 42. Go to “Computer Configuration” > “Windows Settings” > “Security Settings” > “Account Policies” > “Password Policies”. Double click on “Store password using reversible encryption for all users in the domain”. - 35 -...
  • Page 41 43. Click “Define this policy setting”, select “Enabled”, and click “OK” to continue. 44. Go to Start > Program > Administrative Tools > Active Directory Users and Computers. 45. Go to Users. Right-click on the user that you are granting access, and select “Properties”. 46.
  • Page 42 48. Go to the “Dial-in” tab, and check “Allow access” option for Remote Access Permission and “No Call-back” for Callback Options. Then click “OK”. - 37 -...
  • Page 43: Authenticator Setup

    4.3 Authenticator Setup 1. For EAP-MD5 Authentication, WEP key must be set previously. Go to Basic Settings. Enable WEP key, and enter a desired key string. You can skip this step if using EAP-TLS Authentication. 2. Click on 802.1X for detailed configuration. - 38 -...
  • Page 44: Wireless Client Setup

    6. Enter the IP address, Port number, and Shared Secret Key used by the Secondary Radius Server. 7. Click “Apply”. The 802.1x settings will take effect right after WAP-4000 reboots itself. You can also use utility to configure 802.1X settings. The procedures are similar to above described.
  • Page 45: Eap-Md5 Authentication

    4.4.1 EAP-MD5 Authentication 1. Go to Start > Control Panel, double-click on “Network Connections”. 2. Right-click on the Wireless Network Connection which using WL-3555. 3. Click “Properties” to open up the Properties setting window. 4. Click on the “Wireless Network” tab. 5.
  • Page 46 6. Select “Data encryption (WEP enabled)” option, but leave other options unselected. 7. Enter the network key in “Network key” text box. The string must be the same as the first set of WEP key which you set to WAP-4000. 8. Click “OK”.
  • Page 47 11. Select “MD-5 Challenge” from the drop-down list box for EAP type. 12. Click “OK”. 13. When wireless client has associated with WAP-4000, a user authentication notice appears in system tray. Click on the notice to continue. 14. Enter the user name, password and the logon domain that your account belongs.
  • Page 48: Eap-Tls Authentication

    4.4.2 EAP-TLS Authentication Get Digital Certificate from Server The following procedures are based on obtaining a certificate from Windows 2000 Server which acts as a CA server. Furthermore, you must have a valid account/password to access the server. 1. Active web browser, enter “http://192.168.1.10/certsrv” in the Address field which 192.168.1.10 is the IP address of our server.
  • Page 49 4. Select “User Certificate request”, and click “Next” to continue. 5. Click “Submit >” to continue. - 44 -...
  • Page 50 6. The Certificate Service is now processing the certificate request. 7. The certificate is issued by the server, click “Install this certificate” to download and store the certificate to your local computer. - 45 -...
  • Page 51 8. Click “Yes” to store the certificate to your local computer. 9. Certificate is now installed. Wireless Adapter Setup 1. Go to Start > Control Panel, double-click on “Network Connections”. 2. Right-click on the Wireless Network Connection which using WL-3555. 3.
  • Page 52 5. Click “Properties” of one available wireless network, which you want to associate with. 6. Select “The key is provided for me automatically” option. - 47 -...
  • Page 53 9. Select “Enable network access control using IEEE 802.1X” option to enable 802.1x authentication. 10. Select “Smart Card or other Certificate” from the drop-down list box for EAP type. 11. Click “OK”. 12. When wireless client has associated with WAP-4000, Windows XP will prompt you to select a - 48 -...
  • Page 54 certificate for wireless network connection. If you only have one certificate in local computer, system will automatically use it for authenticate. If you have multiple certificates in local computer, click on the network connection icon in the system tray to continue. 13.
  • Page 55: Chapter 5 Application

    5.2 Wireless AP Client mode The WAP-4000 can also act as a client on a wireless LAN. When configured as AP Client mode, WAP-4000 soon makes your connected PC a wireless end node. This mode can be deployed if your end nodes (already installed with an Ethernet Adapter) do not want to make any change but want to move it somewhere not easy to have the wire.
  • Page 56: Wireless Bridge Mode

    Please be noted, key in the LAN MAC address to make the WAP-4000 communicate with a specific remote Access Point, you can find the MAC address either from the utility or from the label under the Access Point. It is suggested to fix the transmission rate when WAP-4000s are configured in bridge mode.
  • Page 57: Chapter 6 Troubleshooting

    Move the wireless client closer to WAP-4000. w Ensure WAP-4000 and the wireless client have the same SSID. w Ensure WAP-4000 and the wireless client have the same WEP encryption settings, if enabled. w Confirm the WLAN LED of WAP-4000 is on.

Table of Contents