HP M210 Configuration And Administration Manual

HP M210 Configuration And Administration Manual

802.11n access point
Table of Contents

Advertisement

HP M210 802.1 1n Access Point
Configuration and Administration Guide
HP Part Number: 5998-5756
Published: April 2014
Edition: 1

Advertisement

Table of Contents
loading

Summary of Contents for HP M210

  • Page 1 HP M210 802.1 1n Access Point Configuration and Administration Guide HP Part Number: 5998-5756 Published: April 2014 Edition: 1...
  • Page 2 © Copyright 2014 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty.
  • Page 3: Table Of Contents

    Contents 1 Deploying the M210 ................... 7 2 Using Quick setup ..................9 Overview..............................9 Automatically running Quick setup the first time you log in ................ 9 Accessing Quick setup after your first login ....................12 Quick setup wizard ..........................13 Step 1: Specify access point settings......................13 Step 2: Specify access point cluster settings....................15...
  • Page 4 Viewing wireless information ........................64 Viewing all connected wireless clients....................64 Viewing wireless statistics for the radio ....................65 6 Creating WDS links ................... 67 Key concepts............................67 Simultaneous AP and WDS support ..................... 67 Using the 5 GHz band for WDS links ....................68 Configuration considerations .......................
  • Page 5 Packet trace status..........................103 Packet trace file download ........................ 104 Ping ..............................105 11 Support and other resources ..............107 Online Documentation..........................107 Contacting HP ............................107 HP Websites ............................107 Conventions ............................108 A Resetting to factory defaults ..............109 Factory reset procedures ........................109 Using the reset button........................
  • Page 7: Deploying The M210

    1 Deploying the M210 In a small office, the M210 can be directly connected to a broadband router (DSL or cable) to provide wireless networking for all employees. In the following scenario, employees can share data and resources with each other and access the Internet at the same time:...
  • Page 8 In the following scenario, M210 #1 provides wireless network services to the employees in the main office, while M210 #2 and M210 #3 use the Wireless Distribution System (WDS) to create a wireless link between the main office network and a small network in a warehouse.
  • Page 9: Using Quick Setup

    Automatically running Quick setup the first time you log in The first time you log in to the management tool (see the HP M210 802.1 1n Access Point Quickstart for first time login procedure), the HP end user license agreement displays. When you accept the agreement, a page displays to enable you to select your country so that wireless radio settings are configured appropriately.
  • Page 10 For example, you could create two wireless networks, one for employees and one for guests. This option can be used to connect the M210 to a network using static IP, DHCP, or IPv6 addressing. This scenario also supports clustering mode, where multiple APs in the network are deployed and administered as a single entity.
  • Page 11 Authenticate user login credentials using a third-party RADIUS server. This option can be used to connect the M210 to a network using static IP, DHCP, or IPv6 addressing. This scenario also supports clustering mode, where multiple APs in the network are deployed and administered as a single entity.
  • Page 12: Accessing Quick Setup After Your First Login

    Add to wireless network with existing AP cluster Use this option if your network already has a defined cluster of M210 APs and you want this AP to join the cluster. Accessing Quick setup after your first login When you log in subsequent to completing or cancelling out of the Quick setup wizard, the System summary page displays by default.
  • Page 13: Quick Setup Wizard

    See also the HP M210 802.1 1n Access Point Quickstart, which describes the configuration procedure for a basic wireless network. Quick setup wizard To the Quick setup wizard, select one of the following options for the network environment, as described in the previous sections, and select OK: •...
  • Page 14: Ipv6 Addresses

    IPv6 Neighbor Discovery process. Enabling auto configuration When IPv6 auto configuration is enabled, the M210 builds a global IPv6 address by applying an algorithm to the device MAC address and the network prefix that is sent by routers in router advertisements.
  • Page 15: Step 2: Specify Access Point Cluster Settings

    Change administrator login credentials The M210 supports one administrator login. Use this section to change the password. Note As an immediate first step in securing your wireless network, it is recommended that you change the administrator password from the default.
  • Page 16: Step 3: Specify Wireless Network Settings

    Step 3: Specify wireless network settings Use this section to define wireless networks and to configure the security settings for client access and encryption. This section displays different settings depending on the selected network environment. • For a Basic wireless network, the page displays fields for configuring the network name (SSID) and security settings: •...
  • Page 17 • For a Multiple wireless networks with wired VLANs configuration, an additional field displays to enable associating a VLAN with each wireless community: • For a Multiple wireless networks with RADIUS authentication configuration, an appropriate security method is selected and additional fields display to configure RADIUS server information: •...
  • Page 18 Specify a name to uniquely identify the wireless network associated with this community. Each wireless user that wants to connect to this community must use the network name. By default, the M210 will broadcast this name so that wireless users can see it when they try to connect to the wireless network.
  • Page 19 The name is case-sensitive and must include between 2 and 32 alphanumeric characters, including spaces. The following characters are not allowed: • ?, “, $, [, \, ], and + • only spaces • #, !, ;,and a space as the first character •...
  • Page 20: Security Methods

    Network environment Security methods Multiple wireless networks with If the wireless mode includes 802.1 1n: RADIUS authentication • WPA/WPA2 Personal • WPA/WPA2 Enterprise (default) If the wireless mode does not include 802.1 1n: • Static WEP (see note) • 802.1X/Dynamic WEP (see note) •...
  • Page 21: 802.1X/Dynamic Wep

    This mode is slightly less secure than using the pure WPA2 mode. The M210 uses the key you specify to generate the TKIP or AES keys that are used to encrypt the wireless data stream. Specify a key that is from 8 to 63 alphanumeric characters and re- enter the key in the Confirm key box.
  • Page 22: Wpa/Wpa2 Enterprise

    WPA/WPA2 Enterprise This option is available in the Quick setup wizard only when you select the Multiple wireless networks with RADIUS authentication network environment. WPA Enterprise with RADIUS is an implementation of the Wi-Fi Alliance IEEE 802.1 1i standard, which includes the TKIP and CCMP (AES) mechanisms. The Enterprise mode requires the use of a RADIUS server to authenticate users.
  • Page 23: Static Wep

    128 bits: The key can be 13 ASCII characters or 26 hexadecimal digits. When encryption is enabled, wireless clients that do not support encryption cannot communicate with the M210. The same encryption key must be used on the M210 and all wireless clients.
  • Page 24: Quick Setup Global Settings Page

    Quick setup global settings page If you manually launch Quick setup by selecting Home > Quick setup, you will see the Quick setup global settings page. This page will also display if you select Manually configure wireless network settings check box on the initial Quick setup page. This page enables you to configure the same settings as available in the Quick setup wizard.
  • Page 25: System Summary

    In the Configure system settings area, you can specify information that helps identify the System name Specify a name. System location Provide a description that identifies where the M210 is physically located. System contact Specify a person to contact for administrative purposes. Multiple RADIUS servers If you select 802.1X/Dynamic WEP or WPA/WPA2 Enterprise as the Security...
  • Page 26 MAC address The MAC address of the AP. This is the address by which the AP is known externally to other networks. This MAC address applies to the Ethernet port on the AP and to the first (default) wireless community, referred to as wlan0. The MAC address is incremented by 1 for each additional wireless community that you create.
  • Page 27: Managing The M210

    With https, it is acceptable to choose the option that allows you to proceed through the security warning. In a web browser, specify either: http://192.168.1.1 or https://192.168.1.1. For information on launching the management tool for the first time, see the HP M210 802.1 1n Access Point Quickstart. Configuring web server settings Select Management >...
  • Page 28: Administrator Login Credentials

    Read-only community name Confirm read-only community name This is the password that controls read-only access to SNMP information on the M210. A network management program must supply this name when attempting to get SNMP information from the M210. By default, the name is set to public.
  • Page 29: Supported Mibs

    • HP-WLAN-ACCESS-POINT-MIB System time Correct system time is important for proper operation of the M210, especially when using the logs to troubleshoot. Select Management > System time to open the System time page. This page enables you to configure time server and time zone information.
  • Page 30 Managing the M210...
  • Page 31: Set System Time

    Set system time This section displays the current system time. You can configure the time manually or have it automatically configured by a Network Time Protocol (NTP) server. Manually Select the date, time (in 24-hour notation), and timezone. Using network time protocol (NTP) NTP servers transmit Coordinated Universal Time (UTC, also known as Greenwich Mean Time) to their client systems.
  • Page 32 Managing the M210...
  • Page 33: Working With Wireless Communities And Authentication

    M210 communities can use third-party RADIUS servers to validate user login credentials for the WPA enterprise, 802.1X, or MAC-based authentication options. The M210 enables you to define up to four IPv4 and four IPv6 global RADIUS servers, which can be shared by each wireless community.
  • Page 34 RADIUS IP address/1/2/3 Enter up to four server IP addresses of the selected type. The first address is the primary RADIUS server. If it is unavailable, the M210 will attempt to use the others in sequence. RADIUS key/1/2/3 The RADIUS key is the shared secret key for the global RADIUS server. The first key corresponds to the first IP address, and so on.
  • Page 35: Managing Wireless Communities

    About the default wireless community By default, a single wireless community is defined. It is named HP, which is also its network name (SSID). You can modify settings for the default community, but you cannot delete it. You can create and delete additional communities.
  • Page 36: Wireless Community Configuration Options

    • RADIUS: Use the MAC authentication list on the external RADIUS server. The M210 uses the RADIUS servers configured for the Security method option selected for this wireless community. If no RADIUS servers are defined for the selected security method, the global RADIUS servers are used.
  • Page 37: Wireless Protection

    Wireless protection The M210 provides several methods to protect wireless transmissions from eavesdropping and to safeguard network access by unauthorized users. To choose the method that best meets the needs of your network, refer to the sections that follow.
  • Page 38 Key type Select the format used to specify the encryption key. The definition for the encryption key must be the same on the M210 and all wireless clients. • ASCII: ASCII keys are much weaker than carefully chosen hexadecimal keys. You can include ASCII characters from 32 to 126, inclusive, in the key, which includes upper and lower case alphabetic letters, the numeric digits, and special symbols such as @ and #.
  • Page 39 802.1X enables you to authenticate wireless clients via user accounts stored on a third-party RADIUS server. 802.1X is purely a protocol for user authentication. On the M210, it is paired with Dynamic WEP, which adds WEP encryption based on a set of dynamically generated keys.
  • Page 40 RADIUS IP or IPv6 address 1 to 3 Enter up to three IPv4 and/or IPv6 addresses to use as the backup RADIUS servers for this wireless community. The field label is RADIUS IP address when IPv4 is selected as the RADIUS IP address type, and RADIUS IPv6 address when IPv6 is selected.
  • Page 41: Wpa Personal

    WPA2 (AES) can be used. The M210 uses the preshared key (PSK) you specify to generate the WPA (TKIP) or WPA2 (AES) keys that are used to encrypt the wireless data stream. Specify a key that is from 8 to 63 alphanumeric characters in length.
  • Page 42: Wpa Enterprise

    WPA Enterprise WPA Enterprise with RADIUS is an implementation of the Wi-Fi Alliance IEEE 802.1 1i standard, which includes the CCMP (AES) and TKIP mechanisms. The Enterprise mode requires the use of a RADIUS server to authenticate users. WPA versions Select the types of wireless clients you want to support: •...
  • Page 43 Enable pre-authentication If for WPA versions you select only WPA2 (AES) or both WPA (TKIP) and WPA2 (AES), you can enable pre-authentication for WPA2 clients. Enable pre-authentication if you want WPA2 wireless clients to send pre-authentication packets. The pre-authentication information will be relayed from the AP the client is currently using to the target AP.
  • Page 44: Mac Authentication

    You can either block access or allow access, depending on your requirements. For each wireless community, you can select whether to disable MAC authentication, use a MAC authentication list stored locally on the M210, or use a list stored on a RADIUS server (see Wireless community configuration options on page...
  • Page 45: Local Mac Authentication

    Local MAC authentication Select Wireless > MAC authentication to display the Configure local MAC authentication list page. You can use this page to configure a local list, which applies to every wireless community on which local MAC authentication is enabled. Filter Select one of the following options: •...
  • Page 46 Working with wireless communities and authentication...
  • Page 47: Wireless Configuration

    5 GHz band. Physical characteristics of the location To maximize coverage of an M210, install it in an open area with as few obstructions as possible. Try to choose a location that is central to the area being served.
  • Page 48: Configuring Overlapping Wireless Aps

    Configuring overlapping wireless APs When the radio is operating in the 2.4 GHz band and two or more APs may are within transmission range of each other, they may use overlapping channels. This may be under your control (for example, when you use several APs to cover a large location) or out of your control (for example, when your neighbors set up their own wireless networks).
  • Page 49 The solution to this problem is to set the two networks to different channels with as great a separation as possible in their operating frequencies. This reduces crosstalk and enables wireless clients connected to each M210 to transmit at the same time. AP 1...
  • Page 50 Sample channel selections For example, when operating in 802.1 1b mode, the M210 supports the following 14 channels in the 2.4 GHz band: Channel Frequency Channel Frequency 2412 2447 2417 2452 2422 2457 2462 2427 2432 2467 2437 2472 2442...
  • Page 51 In North America, you can reduce transmission delays by using different operating frequencies, as shown in the following figure: AP 1 AP 2 AP 3 Channel = 1 Channel = 6 Channel = 11 Alternatively, you can stagger APs to reduce overlap and increase channel separation, as shown in the following figure: AP 1 AP 2...
  • Page 52: 802.1 1N Best Practices

    This strategy can be expanded to cover an even larger area using three channels, as shown in the following figure: AP 1 AP 2 AP 3 AP 4 Channel = 1 Channel = 6 Channel = 11 Channel = 1 AP 5 AP 6 AP 7...
  • Page 53 The M210 will still signal associated clients to use protection when they send data. The M210 does this via a field in the beacons that it sends. So clients sending data to the M210 will use protection, but data sent from the M210 will not be protected.
  • Page 54: Channel Width

    Channel width When operating in an 802.1 1n mode, the M210 enables you to use the standard channel width of 20 MHz or a double width of 40 MHz. A width of 40 MHz is achieved by using two adjacent channels to send data simultaneously. The advantage of using a 40 MHz wide channel is that the available bandwidth is doubled, leading to much higher throughput for clients operating in that mode.
  • Page 55: Country

    The country of operation, also known as the regulatory domain, determines the availability of certain wireless settings on the M210. Once the country has been set, the M210 automatically limits the available wireless channels and channel width, and adjusts the radio power level in accordance with the regulations of the selected country.
  • Page 56 Note In 802.1 1n (2.4 GHz) and 802.1 1n (5 GHz) modes, the M210 does not permit non- 802.1 1n clients to associate. Also in this mode, the M210 does not use protection mechanisms (RTS/CTS or CTS-to-self) to enable legacy APs to operate on the same frequency. This can potentially cause problems with legacy (802.1 1a/b/g) APs operating on the same channel, but...
  • Page 57: Advanced Radio Settings

    This field displays the currently assigned channel. Station isolation When enabled, the M210 prevents communication between wireless clients associated with the same wireless community. Clients can still communicate with the wired network, across a WDS link, and with other wireless clients associated with a different wireless community. This selection is applied to all wireless communities on the AP.
  • Page 58 Note If SGI is enabled on the M210 but a wireless client does not support SGI, the client will be able to communicate with the M210 at a data rate that is about 10% slower than SGI-enabled clients. Select one of the following options: •...
  • Page 59 Sending smaller frames (by using lower fragmentation threshold) might help with some interference problems; for example, with microwave ovens. By default, fragmentation is off. HP recommends not using fragmentation unless you suspect radio interference. The additional headers applied to each fragment increase the overhead on the network and can greatly reduce throughput.
  • Page 60: Detecting Rogue Aps

    There is no prioritization or quality of service handling for multicast traffic because the M210 AP supports only one multicast queue. Select Auto to have the M210 choose the best rate automatically. The range of valid values is determined by the configured radio mode. The default value is Auto.
  • Page 61: Detected And Known Ap Lists

    Detected and Known AP lists When the M210 discovers an AP during a scan, it compares the MAC address of the AP against the Known AP list (a list that you create or import using the capabilities on this page).
  • Page 62 You can select Delete to remove an the AP from the Known AP list. Note The Detected rogue AP list and Known AP list provide information only. The M210 does not have control over the APs on these lists and cannot apply any security policies to them.
  • Page 63: Working With Saved Ap Lists

    Working with saved AP lists You can save the Known AP list and import a saved list to the M210. A saved list can show APs that you previously identified as known APs but that may not be showing in the current Detected rogue AP list (because they are not currently operational, for example).
  • Page 64: Viewing Wireless Information

    Viewing wireless information The M210 provides several pages where you can view information related to wireless operation. Viewing all connected wireless clients Select Wireless > Client connections. The following information is displayed for each client currently connected to the M210:...
  • Page 65: Viewing Wireless Statistics For The Radio

    Viewing wireless statistics for the radio Select Status > Wireless to display the Wireless status page. This page displays the following information: Field Description WLAN packets Total packets received by the AP. received WLAN bytes received Total bytes received by the AP. WLAN packets Total packets transmitted by the AP.
  • Page 66 Field Description Fragments transmitted Number of transmitted MPDU with an individual address or an MPDU with a multicast address of type data or management. Multicast frames Count of MSDU frames received with the multicast bit set in the received destination MAC address. Multicast frames Count of successfully transmitted MSDU frames where the transmitted...
  • Page 67: Creating Wds Links

    Ethernet port on each M210. For example, in the following figure, M210 #2 and M210 #3 use the WDS to create a wireless link between the main office network and a small network in a warehouse:...
  • Page 68: Using The 5 Ghz Band For Wds Links

    When the M210 uses WDS only to extend the network by providing a dedicated link to another M210 (that is, it does not simultaneously act as an AP for wireless clients), it is recommended that, whenever possible, the WDS links use 802.1 1n or 802.1 1a in the 5 GHz band.
  • Page 69: Wds Configuration

    To view or add a WDS link, select Wireless > WDS. General Local address Shows the MAC address of the wireless port on the M210. This address needs to be entered on the M210 to which this link will connect. Spanning tree mode The Spanning-Tree Protocol (STP) can be enabled to prevent undesirable loops from occurring in the network that may result in decreased throughput.
  • Page 70 WDS link 1/2/3/4 You can link the M210 with up to four other M210 devices. Specify the following settings for each WDS interface: Remote address Specify the MAC address of the wireless port on the remote M210 to which this link will connect.
  • Page 71: Sample Wds Deployment

    1. Click the left arrow next the Remote address text box and select the MAC address of the remote M210. Or, if you cannot identify it in the list, connect to the management tool on M210 #2, open the home page, and write down its MAC address.
  • Page 72 6. Select Wireless > WDS. 7. Under WDS link 1, configure the following settings: • If not already selected, set Remote address to the MAC address of M210 #2. • Set Encryption to WPA (PSK). • Set the Link name to M210_WDS1.
  • Page 73 Test the link and make performance adjustments The WDS link should now be active. 16. Select Tools > Ping on M210 #1 and ping the address of M210 #2 (192.168.5.20). If the ping succeeds, it means that the WDS link is working.
  • Page 74 Creating WDS links...
  • Page 75: Configuring Ethernet, Ip, And Vlan Settings

    VLAN ID, you must change the VLAN ID of the management VLAN on the M210 accordingly. The VLAN ID can be any value from 1 to 4094. Any management traffic received on a different VLAN is ignored.
  • Page 76: Ipv4 Configuration

    Select Static IP from the list to manually configure an IPv4 Ethernet address. IP address Set an address that is on the same subnet as the network to which the M210 will connect once installed. Respect any DHCP server-mandated static address ranges.
  • Page 77: Ipv6 Configuration

    DNS nameserver addresses. IPv6 configuration If the attached network uses the IPv6 protocol, you can enable IPv6 support on the M210. IPv6 functionality is enabled by default. To configure IPv6 functionality, select Network > IP and configure the following fields:...
  • Page 78: Vlan Configuration

    IPv6 auto configuration When IPv6 auto configuration is enabled, the M210 processes the Router Advertisements received on the LAN port to determine its IPv6 addresses. The M210 can have multiple autoconfigured IPv6 addresses. The autoconfigured addresses coexist with the statically configured address.
  • Page 79: Vlan Assignment Via Radius

    • The Employee wireless community is configured with VLAN 10. All employee traffic exits the M210 on VLAN 10, providing access to the company file server, shared printer, and the Internet. • The Guest wireless community is configured with VLAN 20. All traffic from the Guest community exits the M210 on VLAN20, providing access to the shared printer and the Internet.
  • Page 80: Port Statistics

    Employee wireless community • R&D employees are assigned to VLAN 10 via attributes in their RADIUS account. • Accounting employees are assigned to VLAN 15 via attributes in their RADIUS account. • Employees without a VLAN assignment in their RADIUS account get assigned to the VLAN that is configured for the wireless community, which in this example is 20.
  • Page 81: Clustering Multiple M210S

    When clustering is enabled, some configuration items are shared by the entire cluster, and other items remain unique to each M210. In the management tool, an icon displays next to items that are shared. When clustering is disabled, the icon does not display.
  • Page 82: Ipv4 And Ipv6 Clusters

    • Broadcast/multicast rate limiting Wireless community settings MAC authentication Basic SNMP settings Channel planning Admin password to secure any new cluster members Email alert settings IPv4 and IPv6 clusters The M210 supports IPv4 and IPv6 mode clusters. Clustering multiple M210s...
  • Page 83: Cluster Formation

    Cluster formation Cluster criteria A cluster can be formed between two or more M210 APs if the following conditions are met: • The APs have the same part number. For example, part number J9798A cannot be clustered with part number J9799A. You can view the part number on the System summary page.
  • Page 84 Clustering will not work with mixed address versions. 6. Select Save. The M210 begins searching for other APs in the subnet that are configured with the same cluster name and IP version. A potential cluster member sends advertisements every 10 seconds to announce its presence.
  • Page 85: Client Connections

    Removing an AP from the cluster To remove an AP from the cluster: 1. On the M210 that you want to remove from the cluster, select Cluster > Access points. 2. For the Clustering setting, select Disabled, then select Save.
  • Page 86: Channel Planning

    The percentage of time frames are dropped during transmission to or from this client. Channel planning When channel planning is enabled, the M210 automatically assigns radio channels used by clustered APs. Automatic channel assignment reduces mutual interference (or interference with other APs outside of its cluster) and maximizes Wi-Fi bandwidth to help maintain the efficiency of communication over the wireless network.
  • Page 87: Current Channel Assignments

    Channel planning Enable or disable channel planning. It is disabled by default. Channel change interval Select the schedule for automated updates. At the selected interval, channel usage is reassessed and the resulting channel plan is applied. A range of intervals is provided, from 30 minutes to 6 months.
  • Page 88 • The channel is locked because the Locked checkbox is selected. • The proposed channel has not yet been applied (there is a small window of time between the proposal and the application of the proposed channel). Status Indicates whether the channel is up or down. Locked You can select to lock the AP onto the current channel.
  • Page 89: Maintenance

    9 Maintenance Configuration file management The configuration file contains all the settings that customize the operation of the M210. You can save and restore the configuration file by selecting Maintenance > Config file management. Reset Resetting to factory defaults on page 109.
  • Page 90: Restore

    For maintenance purposes or as a troubleshooting measure, you can reboot the M210 by selecting Reboot. The process may take several minutes during which time the AP will be unavailable. The M210 resumes normal operation with the same configuration settings it had before the reboot.
  • Page 91: Software Updates

    See Configuration file management on page To update the M210 software using HTTP, select Browse to locate the software file (with the extension .img) and then select Upgrade. To update the software using TFTP, specify the file path and file name on the TFTP server, and enter the TFTP server address.
  • Page 92: System Information

    System information The System page enables you to download logs, settings, system tools outputs, and other information that customer support may find helpful in diagnosing problems. To download system information, select Maintenance > System. In the Show tech area, you can download a file that can be read in a text editor. The file contains configuration settings, including those that have been customized by the user.
  • Page 93: 10 Tools

    The M210 stores up to 512 system error messages in volatile memory (RAM). You can view these events using the M210 management tool, and you can configure M210 to relay them as syslog messages to a syslog server residing on the network.
  • Page 94: Remote Syslog Configuration

    To view a longer history of messages, you must set up a remote syslog server that acts as a syslog log relay host on your network. Then, you can configure the M210 to send syslog messages to the remote server. The Severity level setting configured in the System log configuration section determines which messages are stored in RAM and are available for relay to a remote syslog server.
  • Page 95: Events

    Remote syslog Use this setting to enable or disable this feature. When enabled, messages of the selected Severity level or higher are sent to the configured syslog server. When disabled, a limited number of these messages will be stored locally and can be viewed in the Events section of the System log page.
  • Page 96 From address Specify the email address that appears in the From field of alert messages sent from the AP, for example AP23@company.com. It is recommended that you use an email address that exits on your own network, so that the address will receive a notification if an email from the AP is undeliverable, and to prevent spam filters on the network from blocking the sending or delivery of emails from the AP.
  • Page 97: Mail Server Configuration

    Mail server configuration Mail server address Specify the IP address or hostname of the SMTP server on the network. Mail server security Specify whether to use SMTP over SSL (TLSv1) or no security (Open) for authentication with the mail server. The default is Open. Mail server port Configure the TCP port number for SMTP.
  • Page 98: Sending A Test Message

    Sending a test message To validate the configured email server credentials, select Test Mail. The following text shows an example of an email alert sent from the AP to the network administrator: From: AP-192.168.1.1@mailserver.com Sent: Wednesday, February 08, 2014 11:16 AM To: administrator@mailserver.com Subject: log message from AP TIME...
  • Page 99: Network Trace Configuration

    Network trace operates in two modes: • Packet file trace mode: Captured packets are stored in a file on the M210. The M210 can transfer the file to a TFTP server. The file is formatted in pcap format and can be examined using tools such as Wireshark and OmniPeek.
  • Page 100: Packet File Trace

    Packet file trace In packet file trace mode, the M210 stores captured packets in a file on the device. Upon activation, the packet trace proceeds until one of the following occurs: •...
  • Page 101: Remote Packet Trace

    Wireshark tool. A Windows PC running Wireshark enables you to display, log, and analyze captured traffic. When the remote trace mode is in use, the M210 does not store any captured data locally in its file system.
  • Page 102 Due to performance and security issues, the packet trace mode is not saved in nonvolatile memory on the M210. If the M210 resets, the trace mode is disabled and you must re-enable it to resume capturing traffic. Packet trace parameters (other than mode) are saved in nonvolatile memory.
  • Page 103: Packet Trace Status

    Setting up Wireshark sessions on page 101. 2. On the M210 management tool, select Tools > Network trace. 3. In the Remote packet trace section, specify the Remote trace port. Specify the remote port to use as the destination for packet captures. The range is 1 to 65530 and the default port is 2002.
  • Page 104: Packet Trace File Download

    Packet trace file download This section enables you to download the trace file by TFTP to a configured TFTP server, or by HTTP(S) to a PC. A trace is automatically stopped when the trace file download command is triggered. HTTP download Select HTTP to download to your PC or a network location.
  • Page 105: Ping

    Ping The M210 supports ping functionality to enable basic diagnostics of network devices. To ping another device, select Tools > Ping. Address to ping You can specify an IPv4 address, an IPv6 address, or a hostname. Timeout Specify the amount of time in seconds after which an unsuccessful ping will time out.
  • Page 106 Tools...
  • Page 107: Support And Other Resources

    1 1 Support and other resources Online Documentation You can download documentation from the HP Support Website at: www.hp.com/support/manuals. Search by product number or name. Contacting HP For worldwide technical support information, see the HP Support Website: www.hp.com/networking/support Before contacting HP, collect the following information: •...
  • Page 108: Conventions

    Conventions The following conventions are used in this guide. Management tool This guide uses specific syntax when directing you to interact with the management tool user interface. Refer to the following image for identification of key user-interface elements and then the table below for example directions: Main Sub-menu...
  • Page 109: A Resetting To Factory Defaults

    A Resetting to factory defaults Factory reset procedures To force the M210 into its factory default state, follow the procedures in this section. Caution Resetting the M210 to factory defaults deletes all configuration settings, resets the manager user name and password to admin, and enables the DHCP client on the Ethernet port. If no DHCP server assigns an address to the M210, its address defaults to 192.168.1.1.

Table of Contents