CB3000 Client Bridge Users Guide 72E-86492-01 Revision A July 2006...
Page 4
Symbol reserves the right to make changes to any product to improve reliability, function, or design. No license is granted, either expressly or by implication, estoppel, or otherwise under any Symbol Technologies, Inc., intellectual property rights. An implied license only exists for equipment, circuits, and subsystems contained in Symbol products.
About This Guide Introduction This guide provides configuration and setup information for the CB3000 model client bridge. Document Conventions The following document conventions are used in this document: NOTE Indicate tips or special requirements CAUTION Indicates conditions that can cause equipment damage or...
Symbol Technologies is not responsible for any damages incurred during shipment if the approved shipping container is not used. Shipping the units improperly can possibly void the warranty. If the original shipping container was not kept, contact Symbol to have another sent to you.
Ethernet ports and Symbol's wireless LAN switches and access points. Multiple devices can share one CB3000 using a 10BaseT Ethernet hub. This feature saves equipment costs when several devices require wireless Ethernet connectivity. The CB3000 has an on-board TCP/IP stack to...
The CB3000 can initiate a permanent client connection to your server or accept datagrams from multiple sources. Use the CB3000 to network devices that do not have a PC Card slot or PCI card slot (printers, scanners, Internet appliances etc.).
The access point is a dedicated device wired into the LAN backbone, while the CB3000 can be physically moved throughout the LAN. However, the CB3000 is designed to be placed in a single location for optimal use. Ethernet clients connected to the CB3000 communicate within the network by routing data through the associated access point.
Ad Hoc (Peer-to-Peer) mode allows two or more CB3000 units to communicate exclusively with one another without the use of an access point. In the simplest of terms, this mode uses the CB3000 to bridge two or more Ethernet devices.
(static). If CB3000 is configured to use DHCP, but there is no DHCP server to service the request, the CB3000 by default takes the address 10.10.1.1. If it is not (as per the Ethernet settings) then one needs to set the address manually.
1.2.5 Web Management Support Connect to the CB3000 by directly entering the CB3000’s IP address within a Web browser or by using the Symbol CB3000 Discovery Tool to locate the CB3000 within the network and launch the user interface from the Discovery Tool.
WEP is an encryption security protocol specified in the IEEE Wireless Fidelity (Wi-Fi) standard, 802.11b and supported by the CB3000. WEP encryption is designed to provide a wireless device with a level of security and privacy comparable to that of a wired LAN.
Page 18
CB3000 Client Bridge User Guide Table 1.1 summarizes the major differences between the protocols. Table 1.1 Detailed Comparison of TLS-based EAP Methods EAP Type TLS (RFC 2716) TTLS (Internet draft) PEAP (Internet draft) Software Supported Client Platforms Linux, Mac OS X,...
The server prompts the CB3000 for proof of identity (supplied to the CB3000 by the user) and then transmits the user data back to the server to complete the authentication. A client should not be able to access the network if not authenticated.
Getting Started Before installing the CB3000, review the installation guidelines in the following sections: • Prerequisite Requirements • Verifying the Package Contents • Observing Placement and Range Guidelines • Cabling the CB3000 • Logging into the CB3000 • Viewing CB3000 Information...
CB3000 Client Bridge User Guide 2.1 Prerequisite Requirements The following hardware and software resources are required to install and operate a CB3000: • Networked PC to be used during device configuration. The PC must have an RJ-45 Ethernet port and a CDROM drive.
4. Connect the plug end of the power adapter into a power outlet. The built-in power converter automatically selects and adjusts the power for the appropriate voltage. 5. Verify the installation by checking the status of the LEDs on the front of the CB3000.
Page 24
CB3000 Client Bridge User Guide Figure 2.2 Front of the CB3000 Table 2.1 describes the CB3000 LED indicators. If the CB3000’s LED functionality has been verified, log into the CB3000 console to begin basic device configuration (see Logging into the CB3000).
Client Bridge. This is password protected (use admin/symbol) To run the Discovery Tool: 1. Locate the Discovery Tool (discover.exe) on the CB3000 CD, and copy it to a desktop on the same network as the CB3000 you wish to access.
Page 26
4. A Security Alert dialog box is displayed, click Yes to proceed. Figure 2.4 Security Alert Dialog Box 5. A CB3000 Login dialog box displays. Enter a username and password to log onto the CB3000 console. The default username and password is “admin” and “symbol”, respectively.
To log into the CB3000 console using an IP address: 1. The CB3000 console is accessible via a Web browser using HTTP over SSL (secure socket layer) protocol. Simply, this means you need to add an “s” in the intro of the URL. For example, https:// Enter the IP address URL for the CB3000 within your Web browser.
Page 28
Understanding and Configuring Ethernet Settings – This includes configuring identification settings for the CB3000 within the network. • Understanding and Configuring Wireless Settings – This includes configuring wireless network settings, as well as security policies for data received and transmitted through the CB3000.
Understanding and Configuring Ethernet Settings on page 3-17. • WLAN Settings – Includes wireless LAN settings for the network that the CB3000 is a part of. To modify any of these settings, see Understanding and Configuring Wireless Settings on page 3-1.
The CB3000 ships with antenna model ML-2452-APA1-01. This is an 802.11 a/b/g antenna allowing the CB3000 to connect to all the client types the CB3000 was intended to support. However, if you intend to use a different model antenna, that antenna needs to be selected from the Antenna Settings screen.
Network Configuration This chapter discusses the network configuration required for the CB3000 to communicate with network hosts, mobile units, access points, or other CB3000 devices. It includes the following sections: • Understanding and Configuring Wireless Settings • Understanding and Configuring Ethernet Settings •...
A Wireless Local Area Network (WLAN) is a data-communications system that flexibly extends the functionality of a wired LAN. A CB3000 can locate WLANs within its radio coverage area and connect to them. A WLAN does not require lining up devices for line-of-sight transmission. Roaming users can be handed off from one WLAN to another like a cellular phone system.
Network Configuration If an access point or peer supported WLAN provides a better CB3000 connection option than the WLAN that the CB3000 is currently connected to, change the CB3000 connection. See Network Configurations for more details. Table 3.1 Available Networks Parameters Descriptions...
Page 34
Figure 3.2 WLAN Settings—Infrastructure Network Configuration 3. Configure the ESSID (Wireless LAN Service ID) field, as appropriate: • Attach to any ESSID automatically – Select this radio button to enable the CB3000 to randomly select a target WLAN for connection.
Settings. 3.1.2.2 Configuring Ad Hoc Settings Ad hoc mode is used to form peer-to-peer CB3000 networks without access points. Use ad hoc mode to create networks within established network coverage areas or networks free of the physical constraints of access point provided radio coverage areas.
Page 36
The CB3000 must already be configured to run in ad hoc mode in order to set Note data rates. If the unit is configured for infrastructure mode, the Data Rate button is disabled. 4. To set data rates for the ad hoc configured CB3000, click the Data Rate button. The Set Data Rates screen displays.
Page 37
Figure 3.3 Set Data Rates (for Ad Hoc Configured Devices Only) Select at least one Basic Rate as a minimum transmit rate value for the CB3000 radio. Within the Supported Rates, select the data rate the CB3000 radio defaults to if a higher selected data rate cannot be maintained.
CB3000 security options. To set CB3000 security to Open (no data protection): 1. Select Settings > Wireless Settings > Security from the CB3000 menu tree. The Security screen is displayed. 2. Select Open from the Security Mode drop-down menu.
• Authentication Type – Specify whether a shared key is implemented between the CB3000 and its connected device or no key is used (Open System). If a shared key is used, both the CB3000 and its connected device are required to use the same key (1 through 4) to interoperate. A shared key increases the level of security within the network as opposed sending information without one.
• Symbol PassKey – Symbol proprietary algorithm the CB3000 can share with other Symbol clients capable of decoding it. The CB3000 decodes the PassKey into a set of 4 WEP keys using MD5 algorithms. The WEP keys display as alphanumeric text in the key fields until saved or the user navigates away from the WEP screen.
Page 41
5. Configure the remainder of the fields, as appropriate, per the following descriptions. WPA1 Personal Only Parameters follow: • WPA1 Shared Key – Specify a shared key both the CB3000 and its connected device must use to exchange data encrypted using WPA1.
3-12 CB3000 Client Bridge User Guide The shared key can be any alphanumeric string. The CB3000, other proprietary routers and Symbol devices use the shared key to convert an ASCII string to the same hexadecimal number. Wireless devices without Symbol adapters need to use a shared key manually configured as hexadecimal numbers.
Page 43
The Cipher Block Chaining Message Authentication Code (CBC- MAC) component of CCMP provides data integrity and authentication. • Both – Select Both to enable the CB3000 to interoperate with both TKIP and CCMP supported clients. This setting is recommended in coverage areas populated by numerous devices 5.
6. Click Apply to apply and save the settings, or Cancel to exit the screen without saving your changes. 3.1.3.5 Configuring Secure 802.1x Security Settings The Secure 802.1x security option provides the CB3000 and its associated clients an additional measure of security for data transmitted over the wireless network. Secure 802.1x uses (EAP) as an authentication mechanism between devices that is achieved through the exchange and verification of certificates.
Page 45
Network Configuration Figure 3.7 Secure 802.1x Configuration 3. Use the EAP Type drop-down menu to select the authentication mechanism used between the CB3000 and a target device to exchange and verify certificates. Options include: • MD5 – The MD5 authentication method takes a message of arbitrary length as input and produces a 128-bit fingerprint.
Page 46
• Symbol PassKey – Symbol proprietary algorithm the CB3000 can share with other Symbol clients capable of decoding it. The CB3000 decodes the PassKey into a set of 4 WEP keys using MD5 algorithms. The WEP keys display as alphanumeric text in the key fields until saved or the user navigates away from the WEP screen.
2. Assign a CB3000 device name and set CB3000 network address information. • Device Name – A device name for the CB3000. A suggestion is to use a name representative of the CB3000 user base (for example, eng1, eng2, SF_retail, NY_retail, etc.).
Once located and added to the client prioritization list, clients can be moved off of the list in order to maintain the maximum of 16 devices. Of the maximum 16 devices supported by the CB3000 client prioritization list, only one can be a POS (point-of-sale) device.
Page 49
2. Define the CB3000 Bridging Mode as either Single or Multi Client Bridging Mode • Single Client Bridging Mode: In this mode, the CB3000 provides bridging functionality to support legacy devices. Only one client per CB3000 is supported. In this mode, the MAC address of the MU is visible on the network.
CB3000. If the list is full, remove devices as necessary to free-up room for high priority connections. 5. Click the Move to ACL button to move a MAC address directly into the CB3000’s list of device MAC addresses approved for operation with the CB3000. For more information on ACL operation, see Configuring a Wired Ethernet ACL on page 3-20.
Page 51
3-21 Network Configuration 2. To add a MAC address range, enter the client MAC address range in the MAC Address field (in both the start and stop MAC address fields). Click Add. The MAC address range is added to an Ethernet Access Control List 3.
Management Options This chapter describes the statistic tracking functionality included with the CB3000. This includes Ethernet statistics, wireless, and client-related displays. A CB3000-specific event log is also continually maintained. This chapter also discusses a number of management protocols that have specific settings to support monitored statistics and logs.
CB3000‘s radio RF utilization and the level of RF interference currently within the radio coverage area. Use the CB3000 log to view an event timeline with each event or potential error condition defined. This information is useful when troubleshooting broken device connections and unexpected network events.
Management Options 4.1.1 Viewing Wireless Statistics Wireless Statistics include CB3000 radio traffic, status, and errors. To view CB3000 Ethernet statistics, select from the CB3000 menu tree. Statistics > Wireless Statistics Figure 4.1 Wireless Statistics Screen The Wireless Statistics screen is partitioned into four detailed fields: •...
Page 56
Avg MU Noise Average RF noise for all devices interoperating with the CB3000 radio. If the noise level is excessive, consider moving the MUs closer to your CB3000, or to an area with less conflicting network traffic. Avg MU SNR Average Signal to Noise Ratio (SNR) for all devices interoperating with the CB3000 radio.
Statistics > RF Statistics from the CB3000 menu tree. Figure 4.2 RF Statistics 1. Refer to the Packet Retry Histrogram field for an overview of the retries transmitted by the CB3000 radio and whether those retries contained any data packets. Use this information to assess overall radio performance.
The Ethernet Statistics screen is partitioned into three detailed fields. • Information – Displays basic device address information and link connection status. • Received – Displays statistics for the cumulative packets, bytes, and errors received since the CB3000 was last rebooted or the data collection statistics refreshed.
Page 59
Table 4.2 Ethernet Statistics Screen Details Statistic Description Information Panel Details Physical Address The MAC address of the CB3000. The MAC address is hard-coded into the device at the factory and cannot be changed. Subnet Mask Subnet mask IP address for the CB3000. Link Status of the connection link.
CB3000 Client Bridge User Guide 4.1.4 Viewing Event Log The CB3000 keeps a log of network events updated every time an event occurs. Use the log file to troubleshoot network problems that could result from broken device connections between the CB3000 and networked clients.
The CB3000 supports both HTTP and HTTPS Web access mechanisms. This configuration sets the minimum requirement for access. If you select HTTPS (default), then only HTTPS can access the CB3000. If you select HTTP, then either HTTP or HTTPS will be able to access the CB3000. The Discovery Tool always launches HTTPS pages.
The CB3000 supports SNMP management functions for gathering information from its network components, and communicating that information to specified users. The CB3000 SNMP agent functions as a command responder and is a multilingual agent responding to SNMPv1 and v2c managers (command generators). The factory default configuration maintains SNMPv1/2c support of the community names, and thus provides backward compatibility.
• Wireless Time Adopt Failure - Trap generated when the adoption threshold (limit) has been exceeded for a device adoption operation. • Rf Threshold Throughput - Trap generated when the defined RF throughout for the CB3000 has been exceeded. • Rf Average Retries - Trap generated when the defined number of device retry attempts has been exceeded.
Page 64
4. Enter a 4-32 character string for read/write SNMP permissions in the Read Write field. The default is "private". 5. Enter Start IP and End IP addresses to specify a range of users that can access the CB3000 SNMP interface. Use just the Starting IP Address to specify a single SNMP user. To leave access unrestricted, do not enter an IP address.
Once added those IP addresses with an allowed designation display within the Allowed IP Addresses table. 4.2.2.3 SNMP Destination Traps generated by the CB3000 can be sent to one or more destinations. To configure a SNMP trap destination for receiving SNMP traps generated by the CB3000: 1. Select from the CB3000 menu tree.
CB3000 Client Bridge User Guide 4.2.3 DHCP Server Settings A CB3000 in an ad hoc network can serve as a DHCP server to allocate IP addresses to other devices comprising the ad hoc network. This feature is only relevant for Ad Hoc networks.
The CB3000 (an NTP client) periodically synchronizes its time with a master clock (an NTP server). For example, the CB3000 sets its clock to 07:04:59 upon reading a time of 07:04:59 from its designated NTP server. Support for both of these options is available in the Time Settings screen.
• Second Alternate time Server – Optionally, specify the IP address and port of yet another NTP server for the greatest assurance of uninterrupted time synchronization. 3. Select the Enable Wireless Network Time Adoption on CB 3000 checkbox to enable the CB3000 to obtain its system time from its associated switch.
Page 69
• 7 - Debugging purposes only. • saved locally – Select this radio button to save the log file to the host to which the CB3000 is physically connected. Log entries are not saved in the CB3000. While the CB3000 is in operation, log data temporarily resides in memory.
Administrative Options This chapter discusses administrative options to configure support settings of the CB3000 rather than central operational settings. These include: • Changing the Password • Rebooting or Restoring a Device • Importing or Exporting the Configuration File • Loading Firmware •...
5.2 Rebooting or Restoring a Device If the CB3000 stops responding correctly or is acting sluggish, sometimes the best and easiest thing to do is to reboot the device, (much like one reboots a PC).
Figure 5.2 Reset / Restore CB3000 Screen 2. Click the Reboot button to restart the CB3000. The CB3000’s network connection is disrupted for a few moments while the CB3000 reboots. If rebooting the CB3000 does not alleviate the device’s poor performance.
To restore the CB3000 to the out-of-box default configuration: 1. Save the CB3000’s current configuration before updating the firmware. After the firmware update, the configuration file can be imported in order to restore the CB3000 to the configuration saved before the update. See Importing or Exporting the Configuration File for more information.
5.3 Importing or Exporting the Configuration File A CB3000 configuration file can be saved and downloaded (exported) to be used later for importing to other CB3000 units, or to restore a CB3000 temporarily reset to factory defaults. Using the file-based configuration feature speeds up the setup process at sites using multiple CB3000s.
To import or export a CB3000 configuration file using an FTP server: 1. Select Tools > Configuration File Settings from the CB3000 menu tree. The Config Import/Export screen displays. If using FTP, only the top panel of the screen is used.
FTP or TFTP server with the specified filename and login information. • If importing, click the FTP Import or TFTP Import button. The system displays a confirmation window indicating the administrator must log out of the CB3000 after the operation completes for the changes to take effect.
If the CB3000 firmware version displayed on the Information or Troubleshooting screens are older than the version on the Web site, Symbol recommends updating the CB3000 to the latest firmware for full feature functionality. The firmware file must be available from an FTP or TFTP site, or a locally Note networked machine to perform the update.
Page 79
2. Select Tools > Load Firmware from the CB3000 menu tree. The Load Firmware screen displays. Figure 5.6 Load Firmware Screen 3. Refer to the CB3000 Version displayed at the top of the screen to assess whether a firmware update is required. Compare the installed version with the version available at: http://www.symbol.com/services/downloads...
Page 80
6. If loading the firmware file from a locally stored file (getting firmware file from HTTP), click the Browse button to navigate to the locally stored firmware update file. Continue with step 7. 7. Click the Upgrade button to initiate the update. Upon confirming the firmware update, the CB3000 reboots and completes the update.
The CB3000 console includes utilities for testing IP network or local network communication issues between the device and host. These utilities (as well as a button to restore the CB3000 to its factory configuration) are available in the CB3000 Troubleshooting screen.
Page 82
• Ping the Host – The CB3000 can verify its link with its host by sending WNMP ping packets to the host’s IP address. To conduct an ICMP ping test with the CB3000’s host: a.
CB3000 Specifications The CB3000 client bridge has the following technical specifications: Table A.1 CB3000 Technical Specifications Weight (with antenna) 0.65 lbs (0.30 kg) Dimensions 7 in. wide x 4 in. deep x 1.2 in. high (17.78 cm. wide x 10.16 cm. deep x 3.05 cm high)
Page 87
SNMP manager applications such as HP Open View, MIB browsers. The SNMP agent WILL support read-write, read only or disabled modes. The following are the supported SNMP MIBs. Additional MIBs will be supported as needed for minimum functioning of the CB3000 for Symbol Enterprise Mobility Management (SEMM) support.
Page 88
CB3000 Client Bridge Users Guide Table B.1 SNMP MIB Support (Continued) MIB Name Description Supported IF-MIB MIB module for managing objects for network .1.3.6.1.2.1.2.2.1.1 interface sub-layers. This is an updated version of the MIB-II Table. IP-FORWARD-MIB Module for managing CIDR multipath routes .1.3.6.1.2.1.4.24...
Customer Support Symbol Technologies provides its customers with prompt and accurate customer support. Use the Symbol Support Center as the primary contact for any technical problem, question or support issue involving Symbol products. If the Symbol Customer Support specialists cannot solve a problem, access to all technical disciplines within Symbol becomes available for further assistance and support.
Page 90
44 800 328 2424 (toll free UK) 042 053 333 6123 (Brno) + “in country” local numbers in EMEA For other sales offices use the Symbol Services Web site for contact information http://www.symbol.com/services/howto/howto_contact_us.html Web Support Sites Comprehensive On-line support is available at the MySymbolCare Web site. Registration is free and a variety of services can be linked through this web-portal.
Page 91
Additional Information Obtain additional information by contacting Symbol at: 1-800-722-6234 (Inside North America) +1-631-738-5200 (Inside/Outside North America) http://www.symbol.com/...
Need help?
Do you have a question about the CB3000 and is the answer not in the manual?
Questions and answers