Home

WBSIac Access Point

1. WBSlac 1 0 10 00001 Load 0 48 0 77 0 64 Hostname WBSlac Unsaved Changes 9 VLAN FUNCTION Enable the function VLAN to use the two below functions VLAN Management and VLAN Ethernet Trunk Otherwise the below settings have no meaning VLAN ACTIVATION Enable VLAN O VLAN Management IEEE802 1q Compatible Select which VLAN ID to be able to access the webpage under Managed VLAN For each VLAN bridge you can change the IP address Netmask Gateway IP in Network Interfaces Note If there exist an entry with that SSID in VLAN management you would not be able to use this SSID untagged in VLAN Switch You can still use the SSID tagged If you want to use DHCP client please select the option DHCP under D HCP Client The input for IP Address and Netrnask are required in case of the option Static selected only VLAN entries ET VLAN 1D Priority DHCP Client IP address Netmask Bridge WIFI wifi Tagging Description MO A A MA E E A Deau LAN nero d VLAN Ethernet Trunk IEEE802 1q Compatible Add which Ethernet Trunk VLAN ID belonging to one wireless bridge under Bridge WIFI All the Wireless interfaces would be untagged Note If there exist an entry with that SSID untagged in VLAN managemen t you would not be able to use this SSID in VLAN Ethernet Trunk T VLAN Ethernet Trunk Entries Ethernet Trunk Priority ARTA Bridge WIFI This section contains no values yet Figure 2 85 VLAN Ma
2. 2 4 5 1 Device Configuration The Device Configuration section consists of the section tabs for General Setup and Advanced Settings 2 4 5 1 1 General Setup M Status Shows a summary of the wireless network Wireless Network Master AP2 4G 50 athO The Device Configuration section covers physical settings of the radio hardware such as channel transmit power or antenna selection which is shared among all defined wireless networks if the radio hardware is multi SSID capable Per network settings like encryption or operation mode are grouped in the Interface Configuration Device Configuration Status Mode Master SSID AP2 4G S0 BSSID 04 F0 21 10 16 2C Encryption None _ Channel 1 2 412 GHz Tx Power 26 dBm 100 Signal 95 dBm Noise 95 dBm Bitrate 300 0 Mbit s Domain Universal Wireless network is enabled Domain Universal y Wireless Profile 802 11g n v Channel Spectrum Width 20 40 MHz y Channel 1 2 412 GHz Transmit Power Max iv Max EIRP 30 Outdoor Channels Figure 2 75 Wifi Device Configuration M Wireless network is enabled disabled Enable Enables the wireless network Disable Disables the wireless network E Domain Universal M Wireless Profile Chooses the wireless standard used 802 11ac and 802 11g are older standards while 802 11n isa newer standard that offers higher data rates The choice of 802 11g n is a combination of 802 11g and 802
3. 3 pool ntp orq ia Figure 2 27 Time Synchronization Dale Administration Within the System gt Administration page you can configure the following settings MM Router Password WM SSH M Telnet E Web WBSlac Access Point User Manual as 2 2 2 1 Router Password Router Password Changes the administrator password for accessing the device os Searels cpp ee petit 1 a Parr amero a A ETA A Pp a Figure 2 28 WBSlac AP Password E Password Allows you to set the WBSlac AP password the default being password E Confirmation Requires you to re enter the password 2 2 2 2 SH r SSH pea rs es 3 ce A O lan SF Zee O wan no interfaces attached unspecified Listen only on the given interface or if unspecified on all s PEPEN anan To Specifies the listening port of this Dropbear instance Password authentication oo M Allow SSH password authentication Allow root logins with password MD Allow the root user to login with password Gateway ports I Allow remote hosts to connect to local SSH forwarded ports Figure 2 29 SSH SSH allows you to access the AP s Linux shell and file system using the Secure Shell protocol For example the programs PuTTY and WinSCP can be used Interface Lets the device listen on a given interface or all interfaces Port Specifies the listening port of the Dropbear instance the default being 22 Password authentication A
4. 3 second interval Peak 95 dBm SNR 0 dBm Peak 95 dBm 4 minute window 3 second interval Peak 0 Realtime Wireless Signal 43 dBm SNR 52 dBm Average 43 dBm SNR 51 dBm Noise 95 dBm Average 95 dBm Tx CCQ 85 Average 85 Figure 2 21 Realtime Wireless Graph ath4 WBSlac Access Point User Manual 3 minute window 3 second interval Peak 43 dBm SNR 52 dBm Peak 95 dBm 3 minute window 3 second interval Peak 85 interfaces Wifi VLANs 4 minute window 3 second interval Hostnames UDP 14 Average 14 Peak 15 Static Routes TCP 3 Average 3 Peak 9 Firewall Other 0 Average 0 Peak 0 Diagnostics IPV4 TCP 192 168 82 1 63282 WBSiac lan 80 1 37 KB 22 Pkts IPV4 TCP 192 168 82 1 63293 WBSiac lan 80 1 33 KB 21 Pkts IPV4 TCP 192 168 82 1 63296 WBSiac lan 80 1 33 KB 21 Pkts IPV4 UDP 131 168 1 2 42735 131 168 1 1 161 899 00 B 2 Pkts IPV4 UDP 131 168 1 2 48651 131 168 1 1 161 899 00 B 2 Pkts IPV4 UDP 131 168 1 2 51325 131 168 1 1 161 899 00 B 2 Pkts IPV4 UDP 131 168 1 2 40428 131 168 1 1 161 426 00 B 2 Pkts IPV4 UDP 131 168 1 2 42637 131 168 1 1 161 426 00 B 2 Pkts Pa UDP 131 168 1 2 42256 131 168 1 1 161 377 00 B 2 Pkts The IPV4 UDP 131 168 1 2 48349 131 168 1 1 161 377 00 B 2 Pkts IPV4 UDP 131 168 1 2 34830 131 168 1 1 161 377 00 B 2 Pkts IPV4 UDP WBSiac lan 20649 google public dns a google com 53 70 00 B 1 Pkts IPv4 UD
5. 982 27 KB 8815 Pkts eth TX 2 99 MB 9905 Pkts IPv4 10 10 226 27 24 Protocol DHCP chent v Hostname to send when requesting DHCP WBSlac Accept router advertisements Y Figure 2 58 General Setup for the WAN Zone WBSlac Access Point User Manual TR M Protocol Select from the following choices where the device should obtain its IP address automatically Static address Where you can specify the device IP address IPv4 address Sets the IP address of the device as seen from the WAN zone IPv4 netmask Sets the subnet mask e g 255 255 255 0 The IP address and netmask together determine the subnet or network ID e g 192 168 3 0 24 Two devices must be in the same subnet in order to establish a Layer 2 link between them IPv4 gateway Specifies the IP address of the remote AP that allows the device s shell to gain internet access IPv4 broadcast Specifies the Pv4 broadcast address optional Use custom DNS servers Configures the IP address of the DNS servers e g 165 21 100 88 for the SingNet DNS server or 8 8 8 8 for the Google DNS server The computers in the same subnet as this device can then set this device s IP address as their preferred DNS server to obtain the same DNS service DHCP Client default The Dynamic Host Configuration Protocol DHCP is a standardized networking protocol used by servers on an IP network to allocate IP addresses automatically to client devices Hostname to
6. E 8 8 8 8 E bing com When a user connects the mobile smart phone to the hotspot wireless network the hotspot login page should automatically appear Otherwise the user could open the default Internet browser app or Chrome app on their mobile phone to see the login page Possible Hotspot Scenarios The WAN interface could be set as one of the Ethernet ports This means that the wireless networks provided by the hotspot AP would be in the LAN zone Users can connect within the LAN zone to see the hotspot login page The wireless distribution system WDS can also be used to increase the coverage More information is found in Section 2 4 5 2 Interface Configuration WBSlac Access Point User Manual UE 2 3 3 Discovery WBSlac 1 0 6 00001 Load 0 19 0 24 0 33 Hostname WBSiac Changes 0 Discovery Enable Y Figure 2 53 Discovery MW Enable Allows the Device Name and Last IP address of the wireless station to be discovered by the wireless access point The functionality is similar to the Cisco Discovery Protocol Discovery is enabled by default WBSlac Access Point User Manual WN Network Tab The Network gt Interfaces tab shows an overview of the network interfaces You can view and configure the interfaces of the local area network LAN zone as well as the wide area network WAN zone Network address translation NAT occurs between these two network zones The AP that performs the
7. network access and bandwidth limitations WBSlac 1 0 6 00001 F Load 0 19 0 25 0 34 alvarion inessomistbevecend Changes 0 User s Configuration Bandwidth Limitation This configuration is only for mode Agreement and Password where no Radius Server is required For User Name Password please set up this limitations under Radius Server User s MAC Address DL Speed kbits s UL Speed kbits s 5000 5000 Always Blocked User s List This list works for all CoovaChilli Modes User s MAC Address This section contains no values yet ntertaces wif Authentication Free User s List VLANs This list works for all CoovaChilli Modes Hostnames User s MAC Address Static Routes Firewall Diagnostics This section contains no values yet joS APController Figure 2 49 User s Configuration Page WBSlac Access Point User Manual WN 2 3 2 7 1 Bandwidth Limitation Bandwidth Limitation This configuration is only for mode Agreement and Password where no Radius Server is required For User Name Password please set up this limitations under Radius Server User s MAC Address DL Speed kbits s UL Speed kbits s 5000 5000 Figure 2 50 Bandwidth Limitation This section only applies ifthe RADIUS Server is not required Ifthe RADIUS Server is required this section is ignored You may add entries consisting of the following three fields M User s MAC Address Default entry All Oth
8. wifid no wireless lo no wireless ethi no wireless aetho no wireless etho no wireless ifb1 no wireless br lan no wireless wifil no wireless ifbo no wireless 12tp avlan3316 gre0 no wireless wifid no wireless lo no wireless ethi no wireless aeth no wireless eth0 no wireless ifbl no wireless br lan no wireless wifil no wireless ifb no wireless 12tp avlan3316 gre0 no wireless wifi0 no wireless lo no wireless ethl no wireless aetho no wireless wireless etho no extensions extensions extensions extensions extensions extensions no wireless extensions extensions extensions extensions extensions extensions extensions extensions extensions extensions extensions no wireless extensions extensions extensions extensions extensions extensions extensions extensions extensions extensions extensions no wireless extensions extensions extensions extensions extensions extensions extensions extensions extensions extensions extensions no wireless extensions extensions extensiona extensions extensions extensions extensions Reaitime Load 4 minute window 3 second interval 1 Minute Load 0 70 Average 0 70 5 Minute Load 0 83 15 Minute Load 0 72 Figure 2 13 Realtime Load Graph 2 1 4 2 Traffic You can display the following types of Realtime Traffic graphs M 2 4 GHz RF M 5 GHzRF E ath4 M LAN Bridge M Right Port E Left Port W
9. 1 2 412 GHz DFS Status Disabled Bitrate 300 Mbit s BSSID 04 F0 21 10 16 2D Figure 2 3 Wireless Parameters The Wireless section shows a summary of the device operating as an 802 1 lac access point M SSID Displays the name of the wireless network that the access point AP is offering the Service Set Identifier SSID M Mode Thisis Master when the device isin AP mode or AP WDS mode WBSlac Access Point User Manual we Channel Shows the channel number and frequency that the APis using Bitrate This is the maximum bitrate supported by the radio in the current configuration BSSID This is the MAC address of the AP s radio Encryption Displays the wireless encryption used ACK Timeout Shows the maximum acknowledgment time in microseconds DFS Status If DFS is enabled the AP automatically switches channel if radar is detected on the current channel 2 1 1 2 Wireless for Station Mode The following describes the parameters for a device operating in Station mode SSID M7 Encryption None Mode Client ACK Timeout 15 Channel 48 5 240 GHz DFS Status Disabled Bitrate 1300 Mbit s TX CCQ 77 MAC Address 04 F0 21 15 21 59 RX Rate 1300 Mbit s BSSID 00 80 48 12 44 78 TX Rate 1300 Mbit s Figure 2 4 Wireless Parameters for Station Mode The Wireless section shows a summary of the device operating as an 802 1 1ac station SSID Displays the name of the wireless network that the station should be assoc
10. 838 32 Rescttiio 16 Factory Detalla ocio aA a s 88 5110 1151 ea a secede aca UE nn icon E TEEN TET 89 WBSlac Access Point User Manual UN Chapter 1 Overview In this Chapter Introduction Network Topology Language Supported Products System Requirements Getting Started Operating Modes Buttons and Changes Physical Hardware Button LEDs 1 1 Introduction WBSlac uses a free clean extensible and easily maintainable web user interface for embedded devices Itis high performance has a small installation size fast runtimes and good maintainability The content of this guide 1s organized the same way as presented on the WBSlac AP s web page After the Login and Language sections the following sections correspond to the top level tabs Status System Services Network Arena Controller The last chapter contains the Final Notes which include troubleshooting information Network Topology M ADHCP enabled network for the APto obtain an IP address as well as for the wireless clients after deployment M For MESH network MC or Cloud manager are running as Controller NOTE Controller Figure 1 1 Network Topology a In the illustration in Figure 1 1 WBSlac is used as an example WBSlac Access Point User Manual e 1 3 Language To change the language navigate to the System page look for the System Properties section click the Language and Style tab and click the drop down l
11. Auto Config Z O Enable this feature when changing device br lan s IP Figure 2 46 Network Parameters WBSlac Access Point User Manual WN 2 3 2 5 RADIUS Configuration dl WBSlIec 1 0 6 00001 3 Load 0 22 0 27 0 35 alvarion Hostname WBSiac Changes 0 Radius Parameters Radius Server 1 192 168 0 2 The IP address of radius server 1 Radius Server 2 192 168 0 2 The IP address of radius server 2 Radius Secret TTT Radius shared secret for both servers This secret should be changed in order not to compromise security Figure 2 47 RADIUS Parameters Here you can set the RADIUS parameters M Radius Server 1 Sets the IP address of Radius server 1 e g 127 0 0 1 M Radius Server 2 Sets the IP address of Radius server e g 127 0 0 1 M Radius Secret Sets the Radius shared secret for both servers This secret should be changed in order not to compromise security 2 3 2 6 Authentication WBSlIac 1 0 6 00001 e x Load 0 22 0 26 0 35 alvarion Hostname WBSiac Changes 0 UAM Parameters UAM Server hitp 192 168 0 2idashboa _ _ URL of web server to use for authenticating clients Dynamic DNS UAM Secret gt Shared secret between uamserver and chilli This secret should be set in order not to compromise security Walled Garden Domain coova org Comma separated list of resources the client can access without first authenticating Each entry in the list is a dom
12. Load Graph LAN Bridge _ UN Realtime Traffic Inbound 3 64 kbit s 0 46 kB s Outbound 0 73 kbit s 0 09 kB s WBSlac 1 0 6 00001 Load 0 30 0 36 0 46 Hostname WBSiac Changes 0 4 minute window 3 second interval Average 3 95 kbit s Peak 21 32 kbit s 0 49 kB s 2 67 kB s Average 5 02 kbit s Peak 129 16 kbit s 0 63 kB s 16 15 kB s Figure 2 17 Realtime Load Graph Right Port WBSlac Access Point User Manual 4 minute window 3 second interval Inbound 0 kbit s Average 0 kbit s Peak 0 kbit s 0 kB s 0 kB s 0 kB s Outbound 0 kbit s Average 0 26 kbit s Peak 3 42 kbit s 0 kB s 0 03 kB s 0 43 kB s Figure 2 18 Realtime Load Graph Left Port 2 1 4 3 Wireless You can display the following types of Realtime Wireless graphs M 24 GHz RF M 5 GHz RF M ath4 Realtime Wireless 4 minute window 3 second interval Signal 95 dBm SNR 0 dBm Average 95 dBm SNR 0 dBm Peak 95 dBm SNR 0 dBm Noise 95 dBm Average 95 dBm Peak 95 dBm 4 minute window 3 second interval Peak 0 Figure 2 19 Realtime Wireless Graph 2 4 GHz RF WBSlac Access Point User Manual Changes 0 Realtime Wireless Signal 95 dBm SNR 0 dBm Average 95 dBm SNR 0 dBm Noise 95 dBm Average 95 dBm Tx CCQ 0 Average 0 Figure 2 20 Realtime Wireless Graph 5 GHz RF 4 minute window
13. Max This is the total power supplied to the antennas of the radio The maximum power also depends on the frequency channel used M Outdoor Channels Limits the available channel frequency selections to 5500 5700 MHz if the country isin the European Union EU Based on the EU Rule 2005 513 EC regulation only this frequency band is allowed for outdoor use MM Country Code Selects the country Each country has its own transmit power and frequency regulations To ensure regulatory compliance you must select the country where the device is operating in The transmit power levels for each channel are tuned accordingly WBSlac Access Point User Manual WN E Obey Regulatory Power Obeys the power regulations specified by each country This would satisfy the legally permitted maximum for the equivalent isotropically radiated power EIRP limits of the selected country based on the specified Antenna Gain dBi The result is that the maximum transmit power may be less than the capability of the radio Once activated a refresh of the web page may be needed to show the settings correctly M Antenna Gain dBi Represents the gain relative to an isotropic antenna A higher antenna gain results in the transmit power more focused towards a certain direction When Obey Regulatory Power is checked the value of the antenna gain would be taken into account to limitthe selectable transmit power such that the EIRP limits of the country are satis
14. address the default being 100 M Limit Sets the maximum number of leased addresses the default being 150 E Leasetime States the expiry time of leased addresses the default being 12h 2 4 3 2 2 Advanced Settings DHCP Server Dynamic DHCP l l M Dynamically allocate DHCP addresses for clients If disabled only clients having static leases will be served Force l a ji i M Force DHCP on this network even if another server is detected l En i i Rua pia 7 l Saa Override the netmask sent to clients Normally it is calculated from the subnet that is served DHCP Options _ i Define additional DHCP options for example 6 192 168 2 1 192 168 2 2 which advertises different DNS servers to clients Figure 2 66 LAN DHCP Server Advanced Settings WBSlac Access Point User Manual WN E Dynamic DHCP Dynamically allocates DHCP addresses for clients If disabled only clients having static leases are served Checked by default M Force Forces DHCP on this network even if another server is detected unchecked by default E IPy4 Netmask Overrides the netmask sent to clients Normally it is calculated from the subnet that is served E DHCP Options Defines additional DHCP options for example 6 192 168 2 1 192 168 2 2 which advertises different DNS servers to clients Normally connected devices would take this board s IP address as the default gateway To set an alternative default gateway add the DH
15. an AP 3 1 4 The Mobile Phone Connects but cannot Access the Internet A mobile phone or any connected Wifi user would not be able to access the Internet if the default gateway isnot set correctly on the WBSlac AP If the WBSlac AP has enabled a DHCP server but the gateway is at a different IP address add a DHCP option according to Section 2 4 3 2 DHCP Server The DNS server should also be set 3 15 Unresponsive Web Page Symptom The XML Parsing Error may occur ifa certain option was changed and the web page did not update in time sl ainia File Edk Yew Hgtory Bookmarks Jods Hep E Mmoap Wf LUCI E ht 1192 168 21 Lf Jess ww o notre ee 19 2 168 21 1 cci bonfucil sto 26000551 4c8 e B Googe j 4 XML Parsing Error no element found Location http 192 168 21 1 cgi bin luci stok 7 266f0d55 Line Number 1107 Column 466 chi_d_add chi wireless cfq033579 pri ady Figure 3 1 XML Parsing Error Solution Re enter the IP address into the browser For example if the current URL is 192 168 21 1 cgi bin luci stok 7266f0d55 delete the right hand side to leave the IP address of 192 168 21 1 and press Enter This would bring you back to the login page of the device WBSlac Access Point User Manual WN 3 1 6 Unresponsive AP Symptom The WBSlac AP does not respond Solution Turn off the WBSlac AP for 10 seconds and then turn it on again 3 2 Resetting to Factory Default
16. complete security 2 4 5 2 2 WDS A Wireless Distribution System WDS is a system enabling the wireless interconnection of access points in an IEEE 802 11ac network It allows a wireless network to be expanded using multiple access points without the traditional requirement for a wired backbone to link them The notable advantage of WDS over other solutions is it preserves the MAC addresses of client frames across links between access points WDS may also be considered a repeater mode because it appears to bridge and accept wireless clients at the same time unlike traditional bridging However with this method throughput is halved for all clients connected wirelessly WBSlac Access Point User Manual 62 2 4 5 2 3 Setup for the WDS Modes The wireless distribution system WDS allows the Station WDS to bridge wireless traffic transparently providing the functionality of a repeater The Station WDS is a transparent client and would need to associate with an AP WDS The WDS protocol is not defined as a standard so there may be compatibility issues between devices from different vendors The following figures show an example of a setup l F EJ AR9344 802 11bgn Radio Eom pret apiece ne ego ii None pm o dia 200 Encypllom WPA2 EAP AUTO de Wireless E eta PP Figure 2 78 First Radio QCA9882 802 11ac an Radio EZI EK Channel 36 5 180 GHz Bitrate 866 7 Mbit s Braisil cena di SSID AP5G 50 Mode Mast
17. contains the wireless password in clear text M Reset to defaults Perform reset Resets the firmware to its initial state WBSlac Access Point User Manual on If the radio card is changed from an 802 1 lac card to a non 802 1lac card perform a reset This is because the configuration for the radio cards are different 2220 2 ERA M Restore backup Upload archive Lets you upload a previously generated backup archive to restore configuration files Flash New Firmware Flash new firmware Upload a firmware here to replace the running firmware Check Keep settings to retain the current configuration Keep settings l Y Firmware current ver WBSlac 1 0 6 00001 j Browse Flash firmware Figure 2 41 Flash New Firmware You can upload a new firmware to replace the currently running firmware E Keep settings Retains the current configuration M Firmware Shows the current version of the firmware and allows you to upload a new firmware Reboot Perform reboot Reboots the operating system of your device This is similar to the power off and power on cycle The system configuration remains the same Any changes that are not applied are lost WBSlac Access Point User Manual WN 2 3 Services Tab The Services top level tab contains the configuration pages for E Dynamic DNS E Hotspot E Discovery WBSlac 1 0 6 00001 Load 0 26 0 29 0 38 Hostname WBSiac Changes 0 D
18. devices called stations connect wirelessly to this access point These devices can be mobile phones printers IP cameras laptops or even other APs The stations obtain internet connection from the access point An access point WDS and a station WDS together extend the wireless coverage like a repeater 1 8 Buttons and Changes The WBSlac buttons are described here M Reset Clickto undo any change s M Save Saves any change s Do not use this button currently M Save amp Apply Saves and applies any change s Use this button instead of the Save button for the change s to apply immediately It is recommended to click this button before moving to a different page HM Logout Clickto log out of the WBSIac AP s web page Nop Atthe top right corner of the WBSlac AP s configuration web page there may be one of the following o texts displayed a E Changes 0 Means that all changes on the configuration web page have been applied to the WBSIac AP E Unsaved Changes Shows the number of changes that were not saved and applied WBSlac Access Point User Manual pos 1 9 Physical Hardware Button For more information refer to Section 2 2 5 Physical Hardware Button 1 10 LEDs LEDs are the light emitting diodes on the board After completing the connection check the status of the LEDs Indicator Name Normal Status 0 Power LED Continuously on B WAN LED Continuously on ae LAN LED Continuou
19. replaced The new APcan take on the MAC address of the previous AP in order to continue having internet access E Override MTU Sets the maximum transmission unit MTU the default being 1500 bytes Unless your ISP requires it is not recommended to change this setting The following options are specific to the PPTP and PPPoE protocols M LCP echo failure threshold Sets the number of link control protocol LCP echo failures before the peer is presumed to be dead Use O to ignore failures LCP echo interval Specifies the interval in seconds to send LCP echo requests This is only effective in conjunction with failure threshold E Inactivity timeout Sets the number of seconds of inactivity after which the connection is closed Use O to persist connection WBSlac Access Point User Manual TA 2 4 1 13 Physical Settings M Interface Chooses which physical interface to use for the WAN zone This can be the Ethernet Adapter ethO or eth1 that corresponds to each of the two ports on the device for example It could also be set as the Wireless Network If No Interface is selected all interfaces would be within the LAN zone BSlac 1 0 10 0000 PP hE pos So 0 94 0 71 alvarion Hostname WBSIac Changes 0 Interfaces WAN Common Configuration Interface Ethernet Adapter ethO Right Port PoE input lan Ethernet Adapter ethi Left Port PoE output wan MW Wireless Network Mas
20. send when requesting DHCP Specifies the name of this device as seen by the remote DHCP server PPTP The Point to Point Tunneling Protocol PPTP isa method for implementing virtual private net works PPTP uses a control channel over Transmission Control Protocol TCP and a Generic Rout ing Encapsulation GRE tunnel operating to encapsulate Point to Point Protocol PPP packets WBSlac Access Point User Manual as VPN Server Specifies the IP address of the remote PPTP server for the virtual private network VPN PAP CHAP username Sets the username for the Password Authentication Protocol PAP or the Challenge Handshake Authentication Protocol CHAP PAP CHAP password Sets the password for the PAP or CHAP Configure PPTP IP settings Upon clicking the Configure button the PPTP Common Configuration page would be displayed The protocol DHCP client or Static address can be selected The corresponding options are explained within this section Section 2 4 1 1 Common Configuration PPPoE The Point to Point Protocol over Ethernet PPPoE is a network protocol for encapsulating PPP frames inside Ethernet frames Most DSL providers use PPPoE which provides authentication encryption and compression The options PAP CHAP username and PAP CHAP password have been explained earlier Access Concentrator Identifies the PPPoE server Leave empty to autodetect Service Name Specifies the PPPoE service
21. the current LAN port status which includes Uptime MAC Address RX Received bytes and packets TX Transmitted bytes and packets IPv4 address WBSlac Access Point User Manual daa WBSlac 1 0 10 00001 ae Load 0 24 0 39 0 49 alvarion Hostname WBSlac Changes 0 Interfaces LAN Common Configuration Uptime 1h 4m 56s s MAC Address 04 F0 21 10 06 2C br ian RX 590 37 KB 6313 Pkts rtan TX 487 65 KB 2648 Pkts IPv4 192 168 50 99 24 Protocol Static address wj IPv4 address 192 168 50 99 IPv4 netmask 255 255 255 0 v IPv4 gateway IPv4 broadcast Use custom DNS servers Accept router advertisements Send router solicitations Y IPv6 address IPv6 gateway DHCP Server Ignore interface Disable DHCP for this interface Start 100 Lowest leased address as offset from the network address Limit 150 Maximum number of leased addresses Figure 2 62 LAN Zone General Setup Protocol Chooses between Static address where you can specify the device IP address or DHCP client where the device obtains it IP address automatically Static address is necessary if other devices obtain internet connection through this device Static address is also recommended if you wish to configure the device via the web interface Static Address DHCP Client The Dynamic Host Configuration Protocol DHCP is a standardized networking protocol used by servers on an IP network to allo
22. 11n and operates in the 2 4 GHz frequency band The choice of 802 1 la n is a combination of 802 1lac and 802 11n and operates in the 5 GHz frequency band The 802 1lac is the latest standard that offers even higher data rates up to 1300 Mbps and it also operates in the 5 GHz frequency band WBSlac Access Point User Manual WN MW Channel Spectrum Width Selects whether 20 MHz or 20 40 MHz bands are used A40 MHz band has twice the throughput of a 20 MHz band A smaller bandwidth may allow more devices to be connected The 20 40 MHz option allows both 20 and 40 MHz bands to be used When the 8 02 1lac wireless standard is used the 20 40 80 MHz band can be selected An 80 MHz band can carry twice the amount of data of a 40 MHz band MW Channel Chooses the frequency channel The default setting of Auto may be used For an AP it would select the channel with the least interference from other APs For a station it would automatically select the same channel as its AP The frequency channel may also be manually selected An AP and its station must have the same channel in order to communicate Auto 1 2 412 GHz 2 2 417 GHz 3 2 422 GHz 4 2 427 GHz 5 2 432 GHz 6 2 437 GHz 7 2 442 GHz 8 2 447 GHz 9 2 452 GHz 10 2 457 GHz 11 2 462 GHz 12 2 467 GHz 13 2 472 GHz E Transmit Power Chooses the transmit power of the radio e g 4 dBm 5 dBm 6 dBm up to 26 dBm or
23. 2TP LAN Layer 2 MAC Address Dynamic Host Configuration Protocol Thisis a protocol for allocating IP addresses dynamically so that addresses can be reused when hosts e g computers no longer need them Domain Name System This is a distributed and hierarchical naming system for computers services or any resource connected to the Internet or a private network Equivalent Isotropically Radiated Power Each country sets the legally permitted maximum for the EIRP limits on each channel Extended Service Set Identifier Thisis the name of the wireless network It is case sensitive and up to 32 alphanumeric characters in length The ESSID differentiates one wireless network from another All access points and devices trying to connect to a specific wireless network should use the same ESSID and password to enable effective roaming File Transfer Protocol This is a protocol for transferring files between network nodes Hypertext Transfer Protocol This is a protocol used by web browsers and web servers to transfer files Internet Protocol This is the primary communications protocol used for relaying network packets also known as datagrams across an internetwork using the Internet Protocol Suite IP is responsible for routing packets across network boundaries Itis the principle protocol that establishes the Internet Internet Service Provider Layer 2 Tunneling Protocol This is a tunneling protocol used to support virtual pr
24. 3iac WBSiac WESiac WBSiac WBSiac WBSiac WBSiac WESiac WBSisc WB3iac WBSiac WESiac WESiac WBSiac WESsiac WBSiac user info user info user info user info user info user info user info user info user info user info user info user info user info user info user info user info user info user info user info user info user info user info user info user info user info user info user info user info user info user info user info user info user info user info user info user info user info user info user info user info user info user info user info user info user info user info Realtime Graphs sysinit sysinit sysinit aysinit sysinit aysinit sysinit aysinit sysinit aysinit aysinit sysinit aysinit sysinit aysinit sysinit aysinit aysinit ayainit aysinit sysinit sysinit sysinit aysinit sysinit sysinit aysinit sysinit aysinit aysinit aysinit sysinit aysinit sysinit sysinit sysinit sysinit sysinit sysinit aysinit aysinit aysinit aysinit sysinit sysinit aysinit Figure 2 12 The System Log Page aetho no wireless etho no wireless 2fbi no wireless br lan no wireless wifil no wireless ifbo no wireless 12tp avlan331 gre0 no wireless wifid no wireless lo no wireless ethi no wireless aeth0 no wireless eth no wireless ifbi no wireless br lan no wireless wifil no wireless ifbo no wireless 12tp avlan3316 gre0 no wireless
25. 5 dBm 59 56 95 dBm 95 dBm 130 0 Mbit s 68 9 Mbit s 100 Figure 2 70 Wireless Overview In Figure 2 70 two tabs are shown at the top They correspond to the its two radios shown The buttons are explained as follows Spectrum Shows the Channel Scan Report and allows you to run the Interference Analyzer Add Allows you to add virtual access points VAPs to the radio By default there is only one VAP on the radio Each VAP corresponds to one network Enable Enables the radio Disable Disables the radio Edit Brings you to the configuration page of the network Clicking this button is equivalent to clicking the corresponding tab above e g wifil Master M7 for the radio with SSID given as M7 Remove Removes the radio WBSlac Access Point User Manual ven 2 4 4 1 Radio in AP Mode When a radio is operating as an AP the section for Associated Stations shows a list of stations connected to this device Associated Stations ih 00 1E 65 28 F0 12 AP2 4G 50 51 dBm 56 53 95 dBm 95 dBm 129 2 Mbit s 17 5 Mbit s 93 uil 5C 51 4F AE A9 BB AP2 4G 50 78 dBm 81 81 95 dBm 95 dBm 93 8 Mbit s 26 4 Mbit s 93 uk 04 F0 21 10 25 54 AP5G 50 44 dBm 46 49 33 dBm 95 dBm 866 7 Mbit s 866 7 Mbit s 93 ad 00 1E 65 28 F0 12 AP2 4G 50 50 dBm 55 52 95 dBm 95 dBm 129 2 Mbit s 6 4 Mbit s 93 Figure 2 71 Associated Stations The following Associated Station details are displayed MAC address Netwo
26. AGES OF ANY KIND WHETHER ARISING UNDER BREACH OF CONTRACT TORT INCLUDING NEGLIGENCE STRICT LIABILITY OR OTHERWISE AND WHETHER BASED ON THIS AGREEMENT OR OTHERWISE EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES b TO THE EXTENT PERMITTED BY APPLICABLE LAW IN NO EVENT SHALL THE LIABILITY FOR DAMAGES HEREUNDER OF ALVARION OR ITS EMPLOYEES OR AGENTS EXCEED THE PURCHASE PRICE PAID FOR THE PRODUCT BY PURCHASER NOR SHALL THE AGGREGATE LIABILITY FOR DAMAGES TO ALL PARTIES REGARDING ANY PRODUCT EXCEED THE PURCHASE PRICE PAID FOR THAT PRODUCT BY THAT PARTY EXCEPT IN THE CASE OF A BREACH OF A PARTY S CONFIDENTIALITY OBLIGATIONS Disposal of Electronic and Electrical Waste Disposal of Electronic and Electrical Waste Y Pursuant to the WEEE EU Directive electronic and electrical waste must not be disposed of with unsorted waste Please contact your local recycling authority for disposal of this product WBSlac Access Point User Manual Ey Important Notice This user manual is delivered subject to the following conditions and restrictions This manual contains proprietary information belonging to Alvarion Technologies Ltd Such information is supplied solely for the purpose of assisting properly authorized users of the respective Alvarion products No part of its contents may be used for any other purpose disclosed to any person or firm or reproduced by any means electronic and mechanical without the express prior written permi
27. BSlac Access Point User Manual 16 7 WBsSlac 1 0 6 00001 Load 0 24 0 49 0 60 Hostname WBSiac Changes 0 Realtime Traffic Wireless onnecnons Hotspot Users System 4 minute window 3 second interval Inbound 0 kbit s Average 0 kbit s Peak 0 kbit s 0 kB s 0 kB s 0 kB s Hostnames Outbound 0 kbit s Average 0 kbit s Peak 0 kbit s Sa 0 kB s 0 kB s 0 kB s SLauUC KOUTE Firewall Diagnostics jo APController out Figure 2 14 Realtime Load Graph 2 4 GHz RF WBSlac 1 0 6 00001 7 q Load 0 18 0 43 0 58 alvarion Hostname WBSiac Changes O Realtime Traffic oOnnection Hotspot Users Interfaces 4 minute window 3 second interval wifi VLANs Inbound 0 kbit s Average 0 kbit s Peak 0 kbit s whe 0 kB s 0 kB s 0 kB s Hostnames Outbound 0 kbit s Average 0 01 kbit s Peak 12 33 kbit s ee 0 kB s 0 kB s 1 54 kB s DIU toutes Firewall Diagnostics Figure 2 15 Realtime Load Graph 5 GHz RF WBSlac Access Point User Manual _ eaten WBSlac 1 0 6 00001 Load 0 43 0 39 0 50 Hostname WBSiac Changes 0 Realtime Traffic Inbound 5 47 kbit s 0 68 kB s Qutbound 1 41 kbit s 0 18 kB s 4 minute window 3 second interval Average 3 79 kbit s Peak 20 63 kbit s 0 47 kB s 2 58 kB s Average 4 57 kbit s Peak 42 34 kbit s 0 57 kB s 5 29 kB s Figure 2 16 Realtime
28. CP option 3 192 168 2 3 for example 2433 Static Leases In this section you can specify that a particular DHCP client obtain an IP address that you define The MAC address of the client 1s required Static Leases Static leases are used to assign fixed IP addresses and symbolic hostnames to DHCP clients They are also required for non dynamic interface configurations where only hosts with a corresponding lease are served Use the Add Button to add a new lease entry The MAC Address indentifies the host the IPv4 Address specifies to the fixed address to use and the Hostname is assigned as symbolic name to the requesting host Hostname MAC Address IPv4 Address This section contains no values yet Figure 2 67 LAN Static Leases Click the Add button to add a static DHCP lease then clickSave amp Apply to apply the changes Static Leases Static leases are used to assign fixed IP addresses and symbolic hostnames to DHCP clients They are also required for non dynamic interface configurations where only hosts with a corresponding lease are served Use the Add Button to add a new lease entry The MAC Address indentifies the host the IPv4 Address specifies to the fixed address to use and the Hostname is assigned as symbolic name to the requesting host Hostname MAC Address IPv4 Address Figure 2 68 Adding a Static Lease The static DHCP lease shows up on the Status gt Overview page ifthe client is active DHCP Leases tl
29. F NUCLEAR FACILITIES AIRCRAFT NAVIGATION OR COMMUNICATION SYSTEMS AIR TRAFFIC CONTROL LIFE SUPPORT MACHINES WEAPONS SYSTEMS OR OTHER APPLICATIONS REPRESENTING A SIMILAR DEGREE OF POTENTIAL HAZARD ALVARION SPECIFICALLY DISCLAIMS ANY EXPRESS OR IMPLIED WARRANTY OF FITNESS FOR HIGH RISK ACTIVITIES b PURCHASER S SOLE REMEDY FOR BREACH OF THE EXPRESS WARRANTIES ABOVE SHALL BE REPLACEMENT OR REFUND OF THE PURCHASE PRICE AS SPECIFIED ABOVE AT ALVARION S OPTION TO THE FULLEST EXTENT ALLOWED BY LAW THE WARRANTIES AND REMEDIES SET FORTH IN THIS AGREEMENT ARE EXCLUSIVE AND IN LIEU OF ALL OTHER WARRANTIES OR CONDITIONS EXPRESS OR IMPLIED EITHER IN FACT OR BY OPERATION OF LAW STATUTORY OR OTHERWISE INCLUDING BUT NOT LIMITED TO WARRANTIES TERMS OR CONDITIONS OF MERCHANTABILITY FITNESS FOR A PARTICULAR PURPOSE SATISFACTORY QUALITY CORRESPONDENCE WITH DESCRIPTION NON INFRINGEMENT AND ACCURACY OF INFORMATION GENERATED ALL OF WHICH ARE EXPRESSLY DISCLAIMED ALVARION WARRANTIES HEREIN RUN ONLY TO PURCHASER AND ARE NOT EXTENDED TO ANY THIRD PARTIES ALVARION NEITHER ASSUMES NOR AUTHORIZES ANY OTHER PERSON TO ASSUME FOR IT ANY OTHER LIABILITY IN CONNECTION WITH THE SALE INSTALLATION MAINTENANCE OR USE OF ITS PRODUCTS Limitation of Liability a ALVARION SHALL NOT BE LIABLE TO THE PURCHASER OR TO ANY THIRD PARTY FOR ANY LOSS OF PROFITS LOSS OF USE INTERRUPTION OF BUSINESS OR FOR ANY INDIRECT SPECIAL INCIDENTAL PUNITIVE OR CONSEQUENTIAL DAM
30. General Settings Enable SYN flood protection Y Drop invalid packets O Input accept Output accept y Forward accept Vv Zones Zone gt Forwardings Input Output Forward Masquerading MSS clamping laniian 1 S S gt wan accept v accept v accept v Y O Edit WaniWanl ACCEPT accept v accept lv accept v Y Y Edit Figure 2 91 Firewall Page WBSlac Access Point User Manual 2 4 9 1 General Settings The firewall creates zones over the network interfaces to control network traffic flow The Network gt Firewall gt General Settings page contains the zone settings General Settings Enable SYN flood protection Drop invalid packets Input l o o accept jae Petes ap ts e o e ee EEE OS Gia ean Figure 2 92 Firewall General Settings Enable SYN flood protection Checked by default Drop invalid packets Unchecked by default Input To accept by default Output To accept by default Forward To reject by default 2 4 9 1 1 Zones Zones Zone Forwardings Input Output Forward lan lan 2 2 wan accept Ty laccept accept M WaniWan El gt ACCEPT accept M accept mM lt lt accept Add Figure 2 93 Default Settings for the Firewall Zones Zone gt Forwardings Input Output Forward Masquerading MSS Clamping Edit Delete Add Delete WBSlac Access Point User Manual on 2 4 9 1 1 1 Editing a Zone Clicking t
31. Login Page Idle Timeout 300 Default idle timeout max idle time in second unless otherwise set by RADIUS defaults to 0 meaning unlimited Figure 2 45 Hotspot General Settings E Enable Hotspot Turns on the hotspot service You may wish to enable the hotspot after all the settings are completed E Hotspot Mode Selects your required mode of hotspot You can choose to use the hotspot together with a third party or external RADIUS authentication server NOTE Remote Authentication Dial In User Service RADIUS is a networking protocol that provides centralized Authentication Authorization and Accounting AAA management for users that connect and use a network service WBSlac Access Point User Manual WN The choices for the Hotspot Mode are User Name Password Radius Required Agreement Radius Required Password Radius Required Agreement Radius not Required Password Radius not Required MW Login Page Title Sets the title shown on the Login Page e g HotSpot E Idle Timeout Configures the default idle timeout max idle time in seconds unless otherwise set by RADIUS set as O to mean unlimited time 2 3 2 4 Network Configuration M Network Parameters Auto Config Automatically configures the network parameters It is recommended to keep this enabled WBSlac 1 0 6 00001 J Load 0 19 0 26 0 35 alvarion Hostname WBSiac Changes 0 Network Parameters
32. M Source Port Select a source port that only matches incoming traffic originating from the given source port or port range on the client host default is any MW External IP address Select an external IP address that only matches incoming traffic directed at the given IP address default is any MW External Port Matches the incoming traffic directed at the given destination port or port range on the host M Internal Zone Select an internal zone i e LAN WAN or a new zone WE Internal IP address The IP address where to redirect matched incoming traffic to the specified internal host E Enable NAT loopback Enabled by default M Extra arguments Passes additional arguments to iptables WBSlac Access Point User Manual WN 2 4 9 3 Traffic Rules The Network gt Firewall gt Traffic Rules page configures the traffic rules and source NAT 2 4 9 3 1 Traffic Rules Traffic rules define policies for packets travelling between different zones for example to reject traffic between certain hosts or to open WAN ports on the AP i Traffic Rules A E A Name Match Action Enable Sort IPv4 UDP Allow From any hostinwan Accept iv elle 2 Edit x Delete DHCP Renew To any router IP at port mput 68 on this device IPv4 ICMP with type echo request Allow Ping From any host in wan Accept Y e 2Edit Delete To any router IP on this mue device IPy6 UDP From IP range FE80 0 0 0 0 0 0 0 20 Allow in wan with s
33. NAT is called a gateway A gateway isa network point that acts as an entrance to another network dines WBSlIac 1 0 6 00001 Load 0 20 0 23 0 32 Hostname WBSiac Static Routes Firewall Diagnostics QoS APController Interfaces Interface Overview Network AVLAN3316 Ka i2tp avlan3216 Status Uptime 5h 37m 53s Protocol 12tp RX 1 24 MB 4760 Pkts TX 1 25 MB 4832 Pkts IPv4 131 168 1 2 32 Uptime 5h 37m 57s 7 es MAC Address 04 F0 21 10 05 54 cee br lan Protocol static RX 5 04 MB 64820 Pkts TX 7 75 MB 38451 Pkts IPv4 10 10 226 103 24 Network without interfaces Assign interfaces Logout Interface Overview Network AVLAN3316 S I2tp avlan3316 The Network column shows that the WAN zone has the physical port wan as An infotip is displayed when hovering the mouse over the icon Figure 2 54 Network gt Interfaces Page Status Uptime 5h 37m 53s Protocol 2tp RX 1 24 MB 4760 Pkts TX 1 25 MB 4832 Pkts IPv4 131 168 1 2 32 Uptime 5h 37m 57s MAC Address 04 F0 21 10 05 54 Protocol static RX 5 04 MB 64820 Pkts TX 7 75 MB 38451 Pkts IPv4 10 10 226 103 24 Network without interfaces Assign interfaces Figure 2 55 Interface Overview es Y 2 2 br po Master AP2 4G 50 Figure 2 56 Infotip Changes 0 Actions MTI ACT Actions 1ts interface In Figure 2 56 the LAN zone ico
34. P WBSiac lan 20649 172 17 10 1 53 70 00 8 1 Pkts IPV4 UDP WBSiac lan 65183 google public dns a google com 53 70 00 B 1 Pkts Ipv4 UDP WBSiac lan 58479 google public dns a google com 53 66 00 B 1 Pkts IPV4 UDP WBSiac lan 1701 10 10 226 98 1701 0 00 B 0 Pkts IPV4 TCP 192 168 82 1 63299 WBSiac lan 80 640 00 B 3 Pkts Ipv4 UDP 131 168 1 2 47700 131 168 1 1 161 426 00 B 2 Pkts IPV4 TCP 192 168 82 1 63282 WBSiac lan 80 1 37 KB 22 Pkts 2 1 4 5 Hotspot Users Figure 2 22 Realtime Connections Graph The Hotspot Users page shows the current online users and their status Interfaces Wifi VLANs Hostnames static Routes WBSIac 1 0 6 00001 Load 0 87 0 57 0 48 Hostname WBSiac Changes 0 WBSlac Access Point User Manual MAC Address This list shows currently online users and their status IP Address Online Time Downloaded This section contains no values yet Figure 2 23 The Current Online Users and their Status Users Uploaded Kick Ze System Tab This section is about the System top level tab Under this tab the following sub tabs are available System Administration Services SNMP Backup Flash Firmware Reboot en Deol System 2 2 1 1 System Properties WBSlac 1 0 6 00001 7 gt Load 0 33 0 47 0 45 alvarion Hostname WBSiac Changes 0 System Here you can configure the basic aspects of your device like its hostname or the timezone Administrat
35. PA2 PSK Mixed Mode encryptions we have the following options WE Cipher Can be set to Auto CCMP AES or TKIP and CCMP AES The Temporal Key Integrity Protocol TKIP was developed as a temporary replacement for WEP The Counter Mode Cipher Block Chaining Message Authentication Code Protocol CCMP is based on the Advanced Encryption Standard AES and is the most secure protocol M Key The pre shared key PSK is the password for the wireless network This may consist of 8 to 63 ASCII characters 2 4 5 2 4 3 WPA or WPA2 with EAP The Extensible Authentication Protocol EAP is encapsulated by the IEEE 802 1X authentication method IEEE 802 1X is equivalent to EAP over LAN or WLAN Enterprise networks commonly use this authentication method 2 4 5 2 4 4 WPA or WPA2 with EAP AP Mode Interface Configuration General Setup Wireless Security MAC Filter Advanced Settings Encryption IEEE802 1X WPA EAF v Cipher ET V Radius Authentication Server Radius Authentication Port AICA Default 1812 Radius Authentication Secret Ed Ja Radius Accounting Server Radius Accounting Port L Default 1813 Radius Accounting Secret a NAS ID Figure 2 81 Encryption Options for WPA EAP or WPA2 EAP in AP Mode M Cipher Can be set to the following Auto CCMP AES TKIP and CCMP AES E Radius Authentication Server Specifies the IP address of the RADIUS authentication server NOTE Remote Authenticati
36. Pa O Mr h WBS5lac Access Point Software Version January 2015 P N Cs Legal Rights Copyright 2015 Alvarion Technologies Ltd All rights reserved The material contained herein is proprietary privileged and confidential and owned by Alvarion or its third party licensors No disclosure thereof shall be made to third parties without the express written permission of Alvarion Technologies Ltd Alvarion Technologies Ltd reserves the right to alter the equipment specifications and descriptions in this publication without prior notice No part of this publication shall be deemed to be part of any contract or warranty unless specifically incorporated by reference into such contract or warranty Trade Names Alvarion BreezeCOM WALKair WALKnet BreezeNET BreezeACCESS BreezeMAX BreezeLITE 4Motion and or other products and or services referenced herein are either registered trademarks trademarks trade names or service marks of Alvarion Technologies Ltd All other names are or may be the trademarks of their respective owners WiMAX Forum isa registered trademark of the WiMAX Forum WiMAX the WiMAX Forum logo WiMAX Forum Certified and the WiMAX Forum Certified logo are trademarks of the WiMAX Forum Statement of Conditions The information contained in this manual is subject to change without notice Alvarion Technologies Ltd shall not be liable for errors contained her
37. SI Noise Floor and Channel Load E Min RSSI Shows the minimum received signal strength indicator due to the neighboring access points MW Max RSSI Shows the maximum received signal strength indicator due to the neighboring access points M Noise Floor Shows the level of the noise on the channel M Channel Load Shows how much the channel is utilized A lower channel load denotes a channel with less interference You can click Radio 1 Scan to do the full channel scan again and get the latest results The buttons for Radio 2 would be shown if Radio 2 is enabled on the device MW Return Brings you back to the Wireless Overview page WBSlac Access Point User Manual EN Channel Access Points Min RSSI Max RSSI Noise Floor Channel Load 2412 1 4 48 dBm 27 dBm 97 dBm 11 24171 2 1 72 dBm 72 dBm 97 dBm 26 2422 3 0 95 dBm 95 dBm 98 dBm 32 2427 4 0 95 dBm 95 dBm 97 dBm 15 2432 5 0 95 dBm 95 dBm 99 dBm 16 2437 6 7 71 dBm 32 dBm 100 dBm 19 2442 7 0 95 dBm 95 dBm 101 dBm 13 2447 8 0 95 dBm 95 dBm 100 dBm 6 2452 9 0 95 dBm 95 dBm 100 dBm 5 2457 10 0 95 dBm 95 dBm 97 dBm 6 2462 11 0 95 dBm 95 dBm 98 dBm 6 2467 12 0 95 dBm 95 dBm 92 dBm 1 2472 13 0 95 dBm 95 dBm 91 dBm 7 Figure 2 73 A Channel Scan Report for the 5 GHz Band 274A 3S Radio in Station Mode A radio can operate as a Station Thiscan be set in the Interface Configuration gt Gener
38. Settings Override MAC address 04 F0 21 10 06 2C_ Override MTU 1500 Use gateway metric p Boot as DHCP client l i Boot as DHCP client and switch to static if no offer is received Figure 2 63 LAN Zone Advanced Settings E Override MAC address Allows you to specify a different MAC address other than the AP s original MAC address This is useful if the ISP uses the MAC address of a AP to identify a customer Suppose that the AP needs to be replaced The new APcan take on the MAC address of the previous AP in order to continue having internet access M Override MTU Sets the maximum transmission unit MTU the default being 1500 bytes Unless your ISP requires it is not recommended to change this setting E Use gateway metric Allows you to specify a gateway metric This acts as a cost for choosing the gateway when a connected device has to select between multiple available gateways The gateway with the smallest metric is chosen M Boot as DHCP client Boot as DHCP client and switch to static if no offer is received E Use broadcast flag When sending DHCP requests a client can indicate if it wants an answer in unicast or broadcast by setting the broadcast flag This is required for certain ISPs Unchecked by default M Use default gateway Configures a default route Checked by default E Use DNS servers advertised by peer Uses the DNS settings advertised by the DHCP server Checked by default M C
39. Station Isolation is enabled the AP blocks communication between wireless clients on the same AP E Maximum Stations Specifies the maximum number of associated stations the default being 127 E Minimum Stations RSSI Sets the minimum received signal strength indicator for a station to be associated The default value of 0 means that the AP would allow a station to associate independent of its RSSI Mi 802 11n Only Forces the device to use only the IEEE802 11n standard unchecked by default MW HT 20 40 Coexistence Allows the network to use both 20 MHz and 40 MHz bands Required on AP side primarily to support co existence The station can also send intolerant bit status to APto signal use of 20 MHz channel The station follows the AP s channel bonding and channel switching HT 20 40 mechanism Disabling this setting forces the use of 40 MHz bandwidth channel bonding and results in high data rate E WMM Provides Quality of Service QoS features checked by default Wireless multimedia enables the classification of the network traffic into 4 main types voice video best effort and background in decreasing order of priority Higher priority traffic has a higher transmission opportunity and would have to wait less time to transmit Asa result an existing video stream would not be interrupted by additional background processes E Multicast Enhancements Tunneling Mode Translating Mode WBSlac Access Point User Manual os
40. To reset the WBSlac AP to factory default settings while the power is on hold down the reset button for 8 seconds and then release Another method isto enter the following command into the WBSlac AP s Linux terminal mtd r erase root s data After a while the flash would be erased and the WBSlac AP would reboot into its factory default state The firmware version remains the same as the latest firmware loaded onto the board WBSlac Access Point User Manual CHAP CPE DDNS Glossary Access Point A device that provides network access to associated stations connected wireless devices A wireless router can function as an AP Acknowledgment This is a response to a transmission to indicate that the data packet was received correctly Address Resolution Protocol This is a broadcast protocol for mapping IP addresses to MAC addresses Challenge Handshake Authentication Protocol This is a protocol for authenticating users to an ISP Customer Premises Equipment This is also known as a station Decibels Thisis a measure of intensity Decibel milliwatts Thisis a measure of power relative to 1 mW Itiscommonly used to measure wireless signal power A higher power leads to better signal quality Dynamic DNS This is a system for updating domain names in real time It allows a domain name to be assigned to a device with a dynamic IP address DHCP DNS EIRP ESSID FTP HTTP IP ISP L
41. WBSlac 1 0 10 00001 o y Load 0 15 0 31 0 31 alvarion Hostname WBSIac Unsaved Changes 21 Firewall Zone Settings Zone newzone Zone newzone This section defines common properties of newzone The input and output options set the default policies for traffic entering and leaving this zone while the forward option describes the policy for forwarded traffic between different networks within the zone Covered networks specifies which available networks are member of this zone Wif Name newzone VLANs Input accept Y ee Output accept y o Forward accept v Masquerading O MSS clamping O Covered networks O avian3316 raffic Rules lan 9049 Diagnostics wan Dos LJ create APController Inter Zone Forwarding The options below control the forwarding policies between this zone newzone and other zones Destination zones cover forwarded traffic originating from newzone Source zones match forwarded traffic from other zones targe ted at newzone The forwarding rule is unidirectional e g a forward from lan to wan does not imply a permission to forward from wan to lan as well Allow forward to destination zones lanilan o Want wam Allow forward from source zones Bibi ee ee pann Figure 2 95 Adding a Zone WBSlac Access Point User Manual UN The parameters are the same as when you are editing a zone only in this case you might have to provide the appropri
42. ain names Don t put www in domain name For example google com is good domain name www google com is bad domain name Walled Garden IP Address Comma separated list of resources the client can access without first authenticating Each entry in the list is a IP Address Must keep AP s IP Address here to make sure AP s Webpage ts always accessible Interfaces VLANs Hostnames Static Routes Firewall Diagnostics DoS APController Figure 2 48 Authentication WBSlac Access Point User Manual Here you can set the Universal Access Method UAM parameters Mm UAM Server Sets the URL of the web server to use for authenticating clients For example http 1 0 0 1 www login html Mm UAM Secret Configures the shared secret between uamserver and chilli This secret should be set so as not to compromise security E Walled Garden Domain Shows a comma separated list of resources the client can access without first having to authenticate Each entry in the listis a domain name Do not put www in the domain name Forexample google com isa good domain name www google com is not acceptable The default is coova org MW Walled Garden IP Address Shows a comma separated list of resources the client can access without having to authenticate first Each entry in the list is a IP Address The AP s web page is always accessible 2 3 2 7 User s Configuration Here you can configure the users
43. al Setup gt Mode option after clicking on the Edit button Wireless Overview AP AR9344 802 1 1bgn Radio Channel 1 2 412 GHz Bitrate 300 Mbit s amp SSID AP2 4G 50 Mode Master 100 BSSID 04 F0 21 10 16 2C Encryption None di SSID AP5G radius 50 Mode Master 100 BSSID 04 F0 21 10 16 2D Encryption WPA2 EAP AUTO a QCA9882 802 11ac an Radio Channel 36 5 180 GHz Bitrate 866 7 Mbit s di SSID APSG 50 Mode Master 50 BSSID 04 F0 21 10 26 2C Encryption None Figure 2 74 The Wireless Overview Page Showing a Radio as a Client Station The following buttons are for a radio operating as a station M Scan Scans for available wireless networks This button is available if the device is operating as a Station You can then select the network to connect to M Join Network Associates this device with the selected wireless network WBSlac Access Point User Manual WN 2 4 5 Wifi Wireless Network As mentioned earlier clicking on the Edit button for a network would bring you to the configuration page Thispage contains the sections Device Configuration and Interface Configuration The Device Configuration section covers the physical settings of the radio hardware such as channel transmit power or antenna selection These are shared among all defined wireless networks of the radio Per network settings like encryption or operation mode are grouped in the Interface Configuration
44. an to wan does not imply a permission to forward from wan to lan as well Allow forward to destination zones T wan wan lt Allow forward from source zones O wanwa Figure 2 94 Editing the Firewall Zone Settings E Zone lan General Settings tab Allows you to edit the following Firewall Zone Settings lan parameters Name Input Output Forward Masquerading MSS clamping Covered networks WBSlac Access Point User Manual Reed E Zone lan Advanced Settings tab Allows you to edit the following Firewall Zone Settings advanced lan parameters Restrict to address family Pv4 and IPv6 IPv4 only IPv6 only Restrict Masquerading to given source subnets Restrict Masquerading to given destination subnets Force connection tracking Enable logging on this zone E Inter Zone Forwarding section The Inter Zone Forwarding options control the forwarding policies between this zone lan and other zones Destination zones cover forwarded traffic originating from lan Source zones match for warded traffic from other zones targeted at lan The forwarding rule is unidirectional e g a for ward from lan to wan does not imply a permission to forward from wan to lan as well Allow forward to destination zones Allow forward to source zones 2 4 9 1 1 2 Adding a Zone Clicking the Add button allows you to add a zone in the Firewall y
45. anual WN 2 5 Arena Controller Tab APs running the WBSlac AP firmware can be managed by the Arena Controller The Arena Controller sends and receives information from the WBSlac APs using the SNMP protocol The settings can be seen by clicking the Arena controller top level tab WBSlac 1 0 10 00001 Load 0 23 0 26 0 29 Hostname WBSlac AP Controller L2TPv3 Settings Remote Server 10 10 226 98 Chap username Ltpv3 Chap secret meriitiitt 2 IPSec IPSec Pre shared key eevcecccceces 2 Figure 2 106 Arena Controller Tab When using the Arena Controller for the first time you only need to set the IP address of the Arena Controller This has to be done in the AP s configuration web page itself All other settings should remain as the default values for now Always click Save amp Apply Do not just click Save Thisis to apply the settings immediately 25 1 L2TPv3 Settings L2TPv3 Settings Remote Server 110 10 226 98 Chap username l H i I2tov3 Chap secret l l a l Peecccccce Jg Figure 2 107 L2TPv3 Settings The following are the settings for the Layer 2 Tunneling Protocol Version 3 L2TPv3 MW Remote Server Configures the IP address of the Arena Controller e g 192 168 3 178 MW Chap username Sets the username for the Challenge Handshake Authentication Protocol CHAP E Chap secret Sets the password for the Challenge Handshake Authentication Protocol CHAP WBSlac Access Point Use
46. anual eas 2 3 2 1 3 WAN Interface Physical Settings The hotspot has no effect if there isno WAN interface To use the hotspot set the WAN interface The WAN interface should be the zone where the Internet access is available It could be one of the Ethernet adapters or one of the wireless networks All interfaces other than the WAN interface are considered as in the LAN zone Any user in the LAN zone would see the hotspot login page after the hotspot is set up 2 3 2 1 4 Test Internet Connection At this point before setting up the hotspot it is good to test the Internet connection by connecting a mobile phone to a wireless network in the LAN zone of the hotspot AP The Internet browser may cache web pages so to be sure one may perform an Internet search of a random string of numbers If the search results are returned this means that the Internet connection is working fine 2 3 2 2 Setting up the Hotspot The hotspot can then be set up and enabled either by using the APitself or by using the Arena Controller The following sections show the Hotspot settings available in the AP s web page 2 3 2 3 General Settings By clicking on the Services gt Hotspot tab the general settings are displayed General settings Enable Hotspot l l i rj id Hotspot Mode User Name Passwor Y Select your desired mode of hotspot The current setting will be changed accordingly Login Page Title Hotspot xl 9 Title shown on the
47. are not visible Another person on the ground could adjust the threshold values for the LEDs There is some delay before the received signal strength gets reported by the alignment buzzer To turn off the beeping sounds click the Disable Alignment Buzzer button WBSlac Access Point User Manual ES 2 1 2 Routes When you click on the Status gt Routes tab the routing rules that are currently active on the device are displayed WBSlac 1 0 6 00001 Load 0 63 1 14 0 75 Hostname WBSiac Changes 0 Routes The following rules are currently active on this system ARP IPv4 Address MAC Address Interface 10 10 226 98 D0 0c 29 13 33 43 br lan 10 10 226 254 00 90 fb 29 0d 8d br lan Active IPv4 Routes Network Target IPv4 Gateway Metric lan 0 0 0 0 0 10 10 226 254 0 lan 10 10 226 0 24 0 0 0 0 o lan 10 10 226 98 0 0 0 0 0 avlan3316 131 168 1 1 0 0 0 0 0 Active IPv6 Routes Network Target IPv6 Gateway Metric loopback 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 FFFFFFFF loopback 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 00000000 aetho FFOO 0 0 0 0 0 0 0 8 0 0 0 0 0 0 0 0 0 00000100 lan FFOO 0 0 0 0 0 0 0 8 0 0 0 0 0 0 0 0 0 00000100 loopback 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 FFFFFFFF Figure 2 11 The Status gt Routes Page MM ARP Thisaddress resolution protocol ARP table shows the IP address and corresponding MAC address of each device on the network E Active IPv4 Routes This table shows the IPv4 gateway and network ID T
48. arget for each subnet E Active IPv6 Routes This table shows the IPv6 gateway and network ID Target for each subnet WBSlac Access Point User Manual ra 2 1 4 Under the tab for Realtime Graphs there are four sub tabs titled as follows WBSlac Access Point User Manual Realtime Gr Hotspot Us interfaces Wifi VLANs Hostnames 3phs tc Routes Firewall Diagnostics QoS A APController Logout Load Traffic Wireless Connections Dec Dec Dec Dec Dec e e Dec Dec Dec Dec Dec Dec Dec Dec Dec Dec Dec Dec Dec Dec Dec Dec Dec Dec Dec Dec Dec Dec Dec Dec Dec Dec Dec Dec Dec Dec Dec Dec Dec Dec Dec Dec Dec Dec Dec 0 000 0 0 000000 o ooo oso oso ooo vo oo am 21 38 06 21 38 06 21 38 06 21 36 06 21 38 06 21 38 06 21 38 08 21 38 08 21 38 08 21 38 08 21 36 08 21 38 08 21 36 06 21 38 08 21 38 06 21 38 08 21 36 10 21 38 10 21 38 10 21 38 10 21 38 10 21 38 10 21 38 10 21 38 10 21 38 10 21 38 10 21 38 10 21 38 12 21 36 12 21 38 12 21 38 12 21 38 12 21 38 12 21 38 12 21 38 12 21 38 12 21 38 12 21 38 12 21 38 15 21 36 15 21 36 15 21 38 15 21 38 15 21 38 15 21 36 15 21 38 15 WESiac WBSiac WESiac WESiac WESiac WESiac WBSiac WeSiac WBSiac WBSiac WBSiac NBSiac WBSiac WBSiac WESiac WBSiac WeSiac WBSiac WB3iac WB3iac WBSiac WESiac WBSiac WB3iac MBSiac WBSiac WBSiac WESiac WESiac WBSiac WB
49. ash operations Backup Restore Click Generate archive to download a tar archive of the current configuration files To reset the firmware to its initial state click Perform reset Download backup Generate archive Reset to defaults Pertorm reset restore configuration files you can upload a previously generated backup archive here Restore backup Browse EZE Interfaces Flash new firmware Wifi Upload a firmware here to replace the running firmware Check Keep settings to retain the current configuration VLANs Keep settings wv Firmware current ver WBSlac 1 0 6 00001 Browse Hostnames Static Routes Firewall Diagnostics APController Figure 2 39 The System gt Backup Flash Firmware Page The System gt Backup Flash Firmware page consists of the following sections E Backup Restore MM Flash new firmware 2 2 6 1 Backup Restore Backup Restore Click Generate archive to download a tar archive of the current configuration files To reset the firmware to its initial state click Perform reset Reset to defaults l l o restore configuration files you can upload a previously generated backup archive here i Browse Upload archive Restore backup Figure 2 40 Backup Restore E Download backup Generate archive Downloads a tar archive of the current configuration files O The backup archive file should be stored in a safe place because it
50. ate values for a new zone For more details on the parameters when defining a new zone see Section 2 4 9 1 1 1 Editing a Zone 2 4 9 2 Port Forwards Port forwarding allows remote computers on the Internet to connect to a specific computer or service within the private LAN The Network gt Firewall gt Port Forwards page lets you define the protocol and port number to access an internal IP address oy ajuin oa WBSIac 1 0 10 00001 Load 0 22 0 31 0 31 Hostname WBSIac Unsaved Changes 22 Firewall Port Forwards Port Forwards New port forward TCP UDP Name Protocol v wan Port forwarding allows remote computers on the Internet to connect to a specific computer or service within the private LAN Match Forward to This section contains no values yet New port forward External zone External port Internal zone Internal IP address Internal port lan y y n a Sort bl Figure 2 96 Adding a Port Forwarding Rule 2 4 9 2 1 Editing Fort Forwards Rule is enabled Name Protocol Source zone Source MAC address Traffic Rules Source IP address Diagnostics Oos Source port APController External IP address External port Internal zone Internal 1P address Internal port Enable NAT Loopback Extra arguments This page allows you to change advanced properties of the port forwarding entry In most cases there is no need to modify those settings Di
51. ble and Free Memory 2 1 1 6 Network The Network section displays the status of the LAN and WAN networks Network Network Status i Uptime 4h 48m 8s o AVLANS3160 S Protocol 2tp i RX 1 06 MB 4060 Pkts I2tp avlan3316 TX 1 07 MB 4124 Pkts IPv4 131 168 1 2 32 Uptime 4h 48m 12s MAC Address 04 F0 21 10 05 54 Protocol static RX 3 75 MB 49797 Pkts ee 208 TX 4 56 MB 29089 Pkts br lan IPv4 10 10 226 103 24 EthO RIGHT up Eth1 LEFT down Network without interfaces Assign interfaces Figure 2 8 Network Summary M Status Shows summaries of the interfaces for the LAN and WAN zones This may include the following information Uptime MAC address Protocol Bytes and packets received by the device Bytes and packets transmitted by the device IPv4 address WBSlac Access Point User Manual ES 2 1 1 7 DHCP Leases The DHCP Leases section shows a table of MAC and IP addresses of connected computers with static DHCP leases They are specified in the Network gt Interfaces gt LAN gt Static Leases section of the device s configuration web page DHCP Leases TLV DANNYS W7 192 168 50 146 tlv dannys pc7 192 168 500 137 192 168 50 212 TLV DANNYS W7 192 168 50 146 Figure 2 9 Currently Active Static DHCP Releases 2 1 1 8 Link Status for Station Mode The Link Status section only applies if the device operates as an 802 1 lac station Link S
52. cate IP addresses automatically to client devices Hostname to send when requesting DHCP Specifies the name of this device as seen by the remote DHCP server IPv4 address Sets the IP address of the device e g 192 168 21 1 where you can access the AP s configuration web page IPv4 netmask Sets the subnet mask e g 255 255 255 0 The IP address and netmask together determine the subnet or network ID e g 192 168 21 0 24 Two devices must be in the same subnet in order to establish a Layer 2 link between them IPv4 gateway Specifies the IP address of the remote AP that allows the device s shell to gain internet access IPv4 broadcast Specifies the IPv4 broadcast address optional Use custom DNS servers Configures the IP address of the DNS servers e g 165 21 100 88 for the SingNet DNS server or 8 8 8 8 for the Google DNS server The computers in the same subnet as this device can then set this device s IP address as their preferred DNS server to obtain the same DNS service Accept router advertisements Checkbox option unchecked by default WBSlac Access Point User Manual WN E Send router solicitations Checkbox option checked by default E IPv6 address E IPv6 gateway 2 4 3 1 2 Advanced Settings The following are options in the Advanced Settings section tab The options displayed depends on the protocol being used Interfaces LAN Common Configuration General Setup Advanced Settings Physical
53. d version e g WBSaci 1 01 00001 Py o RS Authorization Required Please enter your username and password Username admin Password a Devcccces Figure 1 2 The WBSlac Login Page The Login Page is presented when the WBSlac AP s IP Address is requested The default authorization details are E Username admin M Password password Advanced information There is a root user in the AP s Linux shell It cannot be used to login to the AP s web page Use the Arena Controller to change the password of the root user to a password of your choice Following that you can access the AP s Linux shell by using a serial cable or by SSH The PuTTY software can be used for either method The Arena Controller software is offered free of charge WBSlac Access Point User Manual Y 1 7 Operating Modes The WBSlac AP can operate in the following modes M Access Point Master M Station Client M Access Point WDS E Station WDS A wide area network WAN is a network that covers a broad area The world s most popular WAN is the Internet Ina commonly used setup the WAN port of an access point connects to a modem via an Ethernet cable A modem can be a cable digital subscriber line DSL or fiber optic modem A modem translates the signal from the internet service provider ISP to Ethernet signals that the access point can understand This allows the access point to have internet connection Other
54. d because it is self signed The certifi cate is only valid for WBSlac click Add Exception Confirm Security Exception and proceed M Port Specifies the listening port the default being 80 for HTTP and 443 for HTTPS WBSlac Access Point User Manual 26 WBSlac 1 0 6 00001 Load 0 21 0 31 0 39 Hostname WBSiac Changes O Here you can configure some services as Ping Watchdog Auto Reboot Ping Watchdog Enable Ping Watchdog E IP Address to Ping 192 168 11 Ping Interval 5 Startup Delay 60 Failure Count to Reboot 5 Auto Reboot Enable Auto Reboot LJ Mode By Time Time HH MM 24 Hours 12 41 Figure 2 32 System gt Services Page 2 2 3 1 Ping Watchdog Figure 2 33 Ping Watchdog E Ping Watchdog Configures the device to ping to a remote IP address and reboot ifthe connection is lost Itis disabled by default M IP Address to Ping Sets the remote IP address to ping e g 192 168 1 10 or 8 8 8 8 E Ping Interval Specifies the time between successive pings the default being 5 seconds M Startup Delay Sets the time delay after the WBSlac AP finishes rebooting before running the Ping Watchdog the default being 60 seconds E Failure Count to Reboot Specifies the number of failed pings before the WBSlac AP reboots automatically Ping Watchdog Enable Ping Watchdog f anina E A EOR e TT e i ane eee 7 Failure Count to Reboot _ RIAS 5 WBSlac Access Point U
55. dates D pool ntp ora xj Diagnostics Diagnost 4 pool ntp ora x j 2poolntp ora 2 APControll apoo mip ora J ArPLontr er gout Figure 2 25 Logging Logging specifies parameters used for the system log such as M System log buffer size M External system log server M External system log server port E Log output level Debug Info Notice Warning Error Critical Alert Emergency M Cron Log Level Debug Normal Warning WBSlac Access Point User Manual WN 2 2 1 1 3 Language and Style WBSlac 1 0 6 00001 z Load 0 33 0 47 0 45 alvarion Hostname WBSiac Changes 0 System Here you can configure the basic aspects of your device like its hostname or the timezone Administration System Properties Language w Time Synchronization Enable NTP client Y Provide NTP server O NTP server candidates 0 poolntp ora xj ipoolntipora________ 2 9001 ntp ora xj 3 poolntp ora J Figure 2 26 Language and Style Language and Style allows you to choose the language and design of the WBSlac AP s web pages 2 2 1 2 Time Synchronization E Enable NTP client Obtains the date and time from specified Network Time Protocol NTP servers M Provide NTP server Clickthe checkbox option to provide an NTP server Time Synchronization Sabie goo e ace ee oe qo NTP server candidates _ A 0 pool ntp ora Je 1 pool ntp org j 2 pool ntp ora Jae
56. e you can configure SNMP V2c and SNMP V3 parameters WBSlac Access Point User Manual EN 2 2 4 1 SNMP Information The following parameters are displayed in the SNMP Information section E SNMP Enterprise ID Contact SNMP Information SNMP Enterprise ID Contact Location 12394 htto www alvarion con Bd Dimitrie Pompei nr 104 2 2 4 2 SNMP Configuration 2 2 4 2 1 General Settings SNMP Configuration si Enable SNMP SNMP V2c Read Password SNMP V2c Write Password SNMP V3 Username SNMP V3 Auth Algorithm SNMP V3 Auth Password SNMP V3 Privacy Algorithm SNMP V3 Privacy Password public private admin Figure 2 36 SNMP Information Figure 2 37 SNMP Configuration General Settings Enable SNMP Enables SNMP SNMP V2c Read Password Sets the community string for read only access to the variables on the SNMP agent by the network management station NMS The NMS is the software which runs on the SNMP manager default public SNMP V2c Write Password Sets the community string for read write access by the SNMP manager default private A community string identifies a group of SNMP agents Itis sent in clear text It should be changed from the default string public or private The variables on the SNMP agent can be classified into read only or read write variables SNMP V3 Username Sets the username for authentication default admin SNMP V3 Auth Algorithm Shows the authentication a
57. e network by running the ping command to ping the IP address of the WBSlac AP Alternatively type the following in the AP s Linux terminal Ding LIZ lO dl if your computer s IP address is 192 168 3 77 for example There should be ping responses An IP address conflict would cause unstable pings Switch to another address and ping the conflicting address to check If using a Windows computer you should run the command arp d if the network configuration has changed Thisis to delete the address resolution protocol ARP table in Windows as it may not update fast enough If the ping stillcannot get responses try disabling the firewall on your Windows computer The Windows Firewall on your computer may prevent it from sending back a ping response Disabling the firewall may be a security risk so you should take the precaution of disconnecting the Internet first 3 1 2 PC Ethernet and Wifi Adapters If your PChas both Ethernet and Wifi adapters they must not have the same subnet Otherwise packets from the PC may not be directed to the correct network WBSlac Access Point User Manual Ta 3 1 3 The Mobile Phone Cannot Connect A mobile phone or any Wifi user would not be able to connect to a wireless AP ifa DHCP server on the network does not exist Ensure that there is one and only one DHCP server to assign IP addresses automatically to users You may refer to Section 2 4 3 2 DHCP Server to enable the DHCP server for
58. ein or for incidental or consequential damages in connection with the furnishing performance or use of this manual or equipment supplied with it Warranties and Disclaimers All Alvarion Technologies Ltd Alvarion products purchased from Alvarion or through any of Alvarion s authorized resellers are subject to the following warranty and product liability terms and conditions Exclusive Warranty a Alvarion warrant that the Product hardware it supplies and the tangible media on which any software is installed under normal use and conditions willbe free from significant defects in materials and workmanship for a period of fourteen 14 months from the date of shipment of a given Product to Purchaser the Warranty Period Alvarion will at its sole option and as Purchaser s sole remedy repair or replace any defective Product in accordance with Alvarion standard R amp R procedure b With respect to the Firmware Alvarion warrants the correct functionality according to the attached documentation for a period of fourteen 14 month from invoice date the Warranty Period During the Warranty Period Alvarion may release to its Customers firmware updates which include additional performance improvements and or bug fixes upon availability the Warranty Bug fixes temporary patches and or workarounds may be supplied as Firmware updates Additional hardware if required to install or use Firmware updates must be purchased by the C
59. eo eee er 32 Zar S VEES D a A E E TE A E 33 Deak e ECU E 34 ac ACCESS roin Ser anua Contents Rite OP FO OE A eee ee eee 35 Phe Pac D Oy eer ee ane eee Teta ON Tn Tee ene ee een eat A 42 Zi INGCOW OR TID rra 43 Zi MAPS ACs WAN croata 44 LA Meres AVLANG on A te sete eases oe eee T E EEEE 48 Des ee DEN el oh E Bi Uh a A E A N 49 2AA WiN VCE DW crecriri erder ORUE EREE ON EOT tone 54 24 39 Wih Wireless NetWork aer peers ket ese cin EEE EE EEEE ONE TAE 58 ZO IAN e E E E E 69 De HOE ee E EE E E A AE EERS 71 ZO SALE TEO a AEE E IA E E EA EA AA EEA E E AEE AEEA AEE 12 A A as 12 RIOD UN A E E T E O E E TA 79 NRO ias A eo no 81 22 peta COMO LC Mab errors e 82 2 ETP SS oro eat 82 De MS ao 83 2 5 3 Arena Controller SNMP Settings 2 0 0 0 cece cece ccc nc ene ecee ces eeceneeceneeaeesenseaeeseneeees 83 ee AP NNP Se AA o PA 84 220 ACG rasa wee ws ee we ese ee eae meee ee eee 84 Chapter gt Pinal NOS ssrassalinisionicaaoiaiassrolosisciniel suite aacmectaaeneeeusdidadhasorenneuniecesasest 85 SL TO SSO aoa genes ewe E aren eres eating sete lets 86 3 1 1 The PC Cannot Connect to the WbsSlac AP serias ia 86 31 2 VC Ethernetand Wilt ACA Ole tS a ii e 86 3 1 3 The Mobile Phone Cannot Connect cc ccc ccc cc cece eee eeceecensenceeseesensensenes 87 3 1 4 The Mobile Phone Connects but cannot Access the Internet ooooocccccnccccncono 87 Due Unresponsive Web Pase tano aser lcd 87 SO UMES PONEN A ee E E E EE E E EEE EEES
60. er 50 BSSID 04 F0 21 10 26 2C Encryption None Disable Edit Figure 2 79 Second Radio Multiple stations or Stations WDS can connect to an AP WDS In Figure 2 79 the Add button creates a virtual access point VAP on the second AP You should choose AP WDS mode for the VAP s wireless network e g M8 so that devices in Station WDS mode can connect to this network The pair of Station WDS and AP WDS on the same board extends the wireless coverage If the board has two radios one onboard and one card radio one radio can be the Station WDS and the other radio can be the AP WDS Therefore the Station WDS with AP WDS on the same board functions as a repeater In the non WDS mode the Station translates all the packets that pass through it to its own MAC address thus resulting in a lack of transparency A consequence is that the ARP table of the access point would show the MAC address of the Station assigned to IP addresses of both the Station and the computer connected to it WBSlac Access Point User Manual wg 2 4 5 2 4 Wireless Security Interface Configuration General Setup Wireless Security MAC Filter Advanced Settings Encryption Cipher Key IWPAPSK Auto MN a e Figure 2 80 Wifi Wireless Security E Encryption Chooses between the following encryptions gt gt gt gt 2 4 5 2 4 1 WEP No Encryption open WEP Open System WEP Shared Ke
61. ers MW Download DL Speed kbits s Default entry 5000 WE Upload UL Speed kbits s Default entry 5000 This means that all hotspot users are subjected to 5000 kbits s bandwidth limitation To prevent any limitation it may be set to a high value like 5000000 kbits s 2 3 2 7 2 Always Blocked User s List Always Blocked User s List This list works for all CoovaChilli Modes User s MAC Address This section contains no values yet Figure 2 51 Always Blocked User s List You may add entries for User s MAC Address These users would be blocked from accessing the network This list works for all Hotspot modes WBSlac Access Point User Manual 40 Pe EMN Ps PS 2 2 9 Authentication Free User s List Authentication Free User s List This list works for all CoovaChilli Modes User s MAC Address This section contains no values yet Add Figure 2 52 Authentication Free User s List You may add entries for User s MAC Address These users would not need any authentication at all and can get immediate access to the network For example the boss of the company could be in the authentication free list This list works for all Hotspot Modes Logging in to the Hotspot When a hotspot user opens an Internet browser on the computer it would automatically show the hotspot login page To quickly see the hotspot login page the user could enter a simple URL in the Internet browser e g MW 1 0 0 1
62. fail frequently The noise floor is monitored by the calibration logic When the noise floor is above a threshold the AP is performs an automatic channel selection It would disconnect from the stations it would already have due to the interference and move to a new channel The stations are expected to re associate with the APon their own 2 4 5 2 Interface Configuration The Interface Configuration section contains the section tabs for General Setup Wireless Security MAC Filter Advanced Settings 2 4 5 2 1 General Setup Interface Configuration General Setup Wireless Security P MAC Filter P Advanced Settings Mode Access Point ESSID i l AP2 4G 50 lt Guard Interval Er y Data Rate Mbps o Y Hide ESSID O Figure 2 77 Interface Configuration General Setup E Mode Selects whether the device is operating as Access Point Access Point WDS Station Station WDS NOTE Setting more than station on a board isnot supported because there can only be one default gateway This is true even ifa board has both an onboard radio and a card radio Both radios cannot be in Station mode at the same time WBSlac Access Point User Manual E E ESSID Specifies the name or extended service set identifier ESSID of the wireless network as it is provided in the beacon message The network name can be up to 32 characters in length and can contain spaces When running in AP mode it i
63. fied 2 4 5 1 2 Advanced Settings Wireless Network Master AP2 4G 50 ath0 The Device Configuration section covers physical settings of the radio hardware such as channel transmit power or antenna selection which is shared among all defined wireless networks if the radio hardware is m ulti SSID capable Per network settings like encryption or operation mode are grouped in the Interface Configuration Device Configuration General Setup Distance Optimization Auto ACK Timeout For Point to Multi Point customers please disable this Auto ACK Timeout and select the furthest distance of the client to this device Or else it would cause unstability Distance meters Min 300 Max 24000 Chainmask Selection 2x2 iv Beacon Interval 100 Adaptive noise immunity i Y Controls radio sensitivity in the face of noise sources Dynamic channel selection C Automatically switches channel to avoid interference Figure 2 76 Advanced Settings for the Wifi Device Configuration E Distance Optimization Auto ACK Timeout Determines the distance of the connected station from the AP and automatically adjusts the ACK timeout This is disabled by default If the stations are positioned over a wide area at different distances from the AP it is recommended to disable this option to prevent the ACK timeout from fluctuating widely E Distance meters Specifies the distance between the AP and the station ifthe
64. follows E MAC Address Displays the MAC address of the station s radio MW Network States the name of the wireless network M Device Name Shows the name of the station M Last IP States the most recent IP address of the station as seen by the AP M Signal Displays the received signal strength from the station e g 31 dBm E Signal Chains Shows the received signal strengths from the station on each antenna e g 52 35 34 dBm The value of 95 dBm is taken to mean no antenna if the radio has only 2 antennas M Noise Displays the received noise power at the AP M TX Rate Shows the transmit bit rate from the AP towards this station MW RX Rate Shows the receive bit rate at the AP from this station mM TX CCQ Indicates the wireless connection quality 2 1 1 4 System This System section shows the following information M Router Name The name of the Access Point Router Model The model of the Access Point Firmware Version The AP s firmware version Kernel Version The version of the kernel Local Time Displays the local time System Router Name WBSiac Router Model WBSIac Firmware Version WBsSlac 1 0 6 00001 Kernel Version 3 3 8 Local Time Mon Dec 8 21 36 03 2014 Figure 2 6 System Parameters WBSlac Access Point User Manual Ged 2 1 1 5 Memory Here the Total Available and Free memory are shown Memory Total Available 76 _ Free 76980 kB 126764 kB 60 Figure 2 7 Total Availa
65. h Password SNMP V3 Privacy Algorithm SNMP V3 Privacy Password 2 6 Logout 12394 hito Awww alvarion com Bd Dimite Pompei nr 10A Y public private admin MD5 ETT TT a DES enccecce e Figure 2 110 AP SNMP Settings Click the Logout tab to exit the WBSlac AP application WBSlac Access Point User Manual Chapter 3 Final Notes In this Chapter E Troubleshooting 3 1 Troubleshooting 3 1 1 The PC Cannot Connect to the WBSlac AP The configuration web page for the WBSlac AP would not be able to show up ifthe WBSlac AP and your computer are not connected Ifthe PC and the WBSlac AP are joined to the network by LAN cables they would not be able to connect if any of the network cable connections are loose A possible indicator is that there is no light at the LAN port of the PC In Windows if you click the network icon and click View network connections the LAN port shows Disconnected Ensure that all the connections are tight Sometimes disconnecting and reconnecting the LAN cable solves connection problems if DHCP is used because the DHCP server and DNS server are reset The WBSlac AP the computer and the gateway must have IP addresses on the same network For example if you use a subnet mask of 255 255 255 0 and the gateway IP address is 192 168 3 1 all the IP addresses must be unique and be of the form 192 168 3 X Check whether the WBSlac AP and your computer are connected on the sam
66. he Edit button allows you to edit the Firewall Zone Settings This section defines common lan properties The input and output options set the default policies for traffic entering and leaving this zone while the forward option describes the policy for forwarded traffic between different networks within the zone Covered networks specifies which available networks are member of this zone JS Traffic Rules Diagnostics QoS APController WBSlac 1 0 10 00001 Load 0 39 0 39 0 33 Hostname WBSlac Unsaved Changes 16 Firewall Zone Settings Zone lan Zone lan This section defines common properties of lan The input and output options set the default policies for traffic entering and leaving this zone while the forward option describes the policy for forwarded traffic between different netwo rks within the zone Covered networks specifies which available networks are member of this zone General Settings Al a ced Name lan Input accept y Output accept iv Forward accept lv Masquerading Y MSS clamping O Covered networks avlan3316 J lan 90899 wan e create Inter Zone Forwarding The options below control the forwarding policies between this zone lan and other zones Destination zones cover forwarded traffic originating from lan Source zones match forwarded traffic from other zones targeted at la n The forwarding rule is unidirectional e g a forward from l
67. iated with Mode Thisis Client when the device is in Station mode or in Station WDS mode Channel Shows the channel number and frequency that this station is using Normally it would automatically select the same channel as the AP Bitrate This is the maximum bitrate supported by the radio in the current configuration MAC Address States the MAC address of the device s radio BSSID This is the MAC address of the AP s radio Encryption Displays the wireless encryption used ACK Timeout Shows the maximum acknowledgment time in microseconds DFS Status If DFS is enabled the AP automatically switches channel when radar is detected on the current channel TX CCQ Displays the transmission quality in A higher percentage means a better wireless connection quality RX Rate Shows the receive bit rate of this station TX Rate Shows the transmit bit rate of this station WBSlac Access Point User Manual o 2 1 1 3 Associated Stations for AP Mode This section shows the connected devices if the WBSlac APis in the AP mode Associated Stations 1 dis 04 F0 21 10 25 54 AP5G 50 192 168 50 4 40 dBm 44 45 33 dBm 95 dBm 866 7 Mbit s 866 7 Mbit s 97 aid 04 F0 21 10 25 54 AP5G 50 192 168 50 4 40 dBm 44 44 33 dBm 95 dBm 866 7 Mbit s 866 7 Mbit s 97 Figure 2 5 List of Associated Stations If there are no associated stations the text No information available is displayed The parameters shown are as
68. ion System Properties Services SNMP Local Time Mon Dec 8 22 14 54 2014 Backup Flash Firmware Hostname WBSiac teboot Timezone UTC v Time Synchronization Enable NTP client Y Provide NTP server O NTP server candidates D pool ntp ora J pool _ntp org 2j 2 pool_ntp ora 23 3 pool_ntp org a Figure 2 24 System Page Within the System page you can configure the device parameters such as the hostname and timezone The System Properties section includes the following tabs M General Settings E Logging MW Language and Style WBSlac Access Point User Manual WN 2 2 1 1 1 General Settings In the System Properties General Settings tab you can configure the following device parameters E Local Time Displays the local time according to the Timezone E Hostname Configures the name of the device MM Timezone Sets the timezone 2 2 1 1 2 Logging WBSlac 1 0 6 00001 a Load 0 33 0 47 0 45 alvarion Hostname WBSiac Changes 0 System Here you can configure the basic aspects of your device like its hostname or the timezone System Properties ngs Logging Language and Style System log buffer size 16 W kiB External system log server 0000 External system log server port 514 Network Log output level Debug wy Interfaces Cron Log Level Normal w Wifi VLANs Time Synchronization Hostnames S Enable NTP client Y Static Routes Provide NTP server rirewal NTP server candi
69. ist for Language You can change the language from English to another language e g Chinese 1 4 Supported Products The WBSlac software resides in the following models E WBSlac 2450 UN E WBSlac 2450 EU M WBSlac 2450 US 1 5 System Requirements WBSlac supports the following operating systems Microsoft Windows XP Windows Vista Windows 7 Windows 8 Linux Mac OS X WBSlac supports the following web browsers M Mozilla Firefox HM Google Chrome MW Apple Safari E Microsoft Internet Explorer 8 or above WBSlac Access Point User Manual e 1 6 Getting Started To access the WBSlac configuration interface perform the following steps 1 Connect the local area network LAN port of the WBSlac APto the network port of your computer using an Ethernet cable Ethernet cables are also known as LAN cables or network cables They connect devices such as computers APs and switches on wired networks 2 Next take the power adapter that comes with the set and connect it to a power socket as well as the WBSlac AP 3 Assign the Ethernet adapter on your computer with a static IP address on the 192 168 1 x network e g 192 168 1 10 and with a subnet mask 255 255 255 0 4 Launch a web browser and enter the default IP address of the AP 192 168 1 1 into the address bar The AP s configuration web page is displayed The first page that you see is the login page The words on the top left denote the firmware buil
70. ivate networks VPNs or as part of the delivery of services by ISPs Itdoes not provide any encryption or confidentiality by itself Rather it relies on an encryption protocol that it passes within the tunnel to provide privacy Local Area Network Data link layer of the Open Systems Interconnection OSI model This corresponds to the Link layer of the Internet protocol suite Media Access Control Address Thisis a globally unique identifier attached to a network adapter It also identifies the hardware manufacturer WBSlac Access Point User Manual WN Mbps MiniPCle MTU NAT NMS NTP PAP PPPoE PPTP QoS RADIUS Megabits per second Also Mbit s This isa measure of the data rate Mini Peripheral Component Interconnect Express A miniPCIe radio is a radio card that can be inserted into a AP s circuit board Maximum Transmission Unit This is the size in bytes of the largest packet that can be passed on The MTU for Ethernet is a 1500 byte packet Network Address Translation This is the process of rewriting IP addresses as a packet passes through a controller or firewall NAT enables multiple computers or hosts on a LAN to access the Internet using the single public IP address of the LAN s gateway controller Network Management Station This is a software which runs on the SNMP manager Itis sometimes simply referred to as an SNMP manager Network Time Protocol This is a protocol for synchroni
71. l WN 2 4 6 3 VLAN Ethernet Trunk The VLAN Ethernet Trunk uses a wireless network as a trunk link to connect physically separate VLANs having the same VLAN ID Within the subsection for the VLAN Ethernet Trunk Entries each row represents one VLAN ID VLAN Ethernet Trunk IEEE802 1q Compatible Add which Ethernet Trunk VLAN ID belonging to one wireless bridge under Bridge WIFI All the Wireless interfaces would be untagged Note If there exist an entry with that SSID untagged in VLAN managemen t you would not be able to use this SSID in VLAN Ethernet Trunk VLAN Ethernet Trunk Entries Ethernet Trunk ee e VLAN ID Priority Bridge WIFI This section contains no values yet Figure 2 88 VLAN Entries in the VLAN Ethernet Trunk Section M Add Inserts a new row corresponding to a new VLAN The IP address field should be distinct for different devices E Ethernet Trunk VLAN ID Sets the VLAN ID of the separate VLANs to connect M Priority Chooses the priority for transmitting packets Thisis a number from 0 to 7 The number 7 represents the highest priority M Bridge WIFI Selects the wireless network that would act as a trunk link 2 4 7 Hostnames Inthe Network gt Hostnames page you can specify custom hostnames URLs with their respective IP addresses Thisis an additional local DNS v WBSlac 1 0 10 00001 o 7 Load 0 34 0 39 0 49 alvarion Hostname WBSlac Unsaved Changes 16 Hostnames Host entrie
72. lgorithm used e g MDS SNMP V3 Auth Password Configures the password for user authentication default password SNMP V3 Privacy Algorithm Shows the data encryption algorithm used e g DES SNMP V3 Privacy Password Sets the password for data encryption default password WBSlac Access Point User Manual 29 2 2 4 2 2 Trap SNMP Configuration fil Saati eee en SNMP Trap IP Address 192 168 1 10 ST ER A Figure 2 38 SNMP Configuration Trap E Enable SNMP Trap Allows the SNMP agent to notify the SNMP manager of events E SNMP Trap IP Address Sets the IP address of the SNMP manager which receives the trap messages E SNMP Trap Port Sets the port number 22 Physical Hardware Button There is a physical button on the Access Point hardware board Depending on how long the button is pressed you can reboot the board or reset it to factory default First make sure then power is on The following table shows the duration of the button press and the corresponding action Duration of button press Action 0 3 seconds Reboot 4 30 seconds Reset to factory default more than 30 seconds Does nothing WBSlac Access Point User Manual 30 2 2 6 Backup Flash Firmware The System gt Backup Flash Firmware page lets you perform backup and restore or flash a new firmware P WBSIac 1 0 6 00001 dilan Load 0 23 0 30 0 38 Hostname WBSiac Changes 0 Fl
73. lient ID to send when requesting DHCP Sets the identifier that may be required by the ISP or network administrator If not stated the MAC address of the client willbe sent M Vendor Class to send when requesting DHCP Identifies the vendor of a DHCP client for the enhancement of vendor specific DHCP functionality WBSlac Access Point User Manual EN 2 43 13 Physical Settings MM Enable STP Enables the Snanning Tree Protocol on this bridge Itis unchecked bv default Interfaces LAN Common Configuration General Setup Advanced Settings Physical Settings Enable STP Enables the Spanning Tree Protocol on this bridge Figure 2 64 LAN Physical Settings 2 4 3 2 DHCP Server This section allows you to configure the device as a DHCP server 2 4 3 2 1 General Setup E Ignore interface Disables DHCP for this interface You should uncheck this to enable DHCP DHCP Server General Setup Advanced Settings Ignore interface a eae ee LT Disable DHCP for this interface Start l l AE i 400 hi l Lowest leased address as offset from the network address Limit 150 aii Maximum number of leased addresses Leasetime 2h Expiry time of leased addresses minimum is 2 Minutes 2m Figure 2 65 LAN DHCP Server General Setup NOTE All the following options in this DHCP Server section depend on DHCP being enabled M Start Specifies the lowest leased address as offset from the network
74. llows SSH password authentication Allow root logins with password Thisis enabled by default Gateway ports Allow remote hosts to connect to local SSH forwarded ports WBSlac Access Point User Manual UN 2 2 2 3 Telnet Telnet Provides administrator tools to control the device Enable Telnet _ AS AS Port A IA Specifies the listening port of this Telnet instance Figure 2 30 Telnet E Enable Telnet When enabled it provides administrator tools for controlling the device or network debugging over an unencrypted connection M Port Specifies the listening port the default being 23 To start using Telnet enter the command telnet 192 168 1 1 or telnet 192 168 1 1 23 into a Command Prompt when using Windows or into a Terminal if using Linux or Mac OS X This is assuming that 192 168 1 1 is the IP address of your AP The splash page of WBSlac appears after login Commands can then be entered into the Linux shell of the AP e g ifconfig iwconfig iwpriv uci show Is bin Is sbin ls usr bin or Is usr sbin 2 2 2 4 Web Web Provides administrator tools to control the device Web Server Mode i i l HTTP v Pot 80 Specifies the listening port of this Web Server Mode instance Figure 2 31 Web mM Web Server Mode This can be set to Hypertext Transfer Protocol HTTP or Hypertext Transfer Protocol Secure HTTPS For HTTPS if you see the warning The certificate is not truste
75. mes set by managing applications Service Set Identifier Thisis also known as the ESSID or the wireless network name A device that connects wirelessly to an access point A portion of a network that shares a common address component On TCP IP networks subnets are defined as all devices whose IP addresses have the same prefix For example all devices with IP addresses that start with 192 168 7 belong to the same subnet Transmission Control Protocol This is a protocol for transmitting data over the Internet with guaranteed reliability and in order delivery User Datagram Protocol This is a protocol for transmitting data over the Internet quickly but with no guarantee of reliability or in order delivery WBSlac Access Point User Manual WN
76. n with four Ethernet ports has the bridged interface br lan which consists of one physical port icon with two Ethernet port and two wireless networks each icon looking like a short standing fan on the device Hovering the mouse over each icon would give the name of the WBSlac Access Point User Manual aa interface it represents In this example the infotip shows that there is a virtual access point on the device with M78 as its network name 2 4 1 Interfaces WAN The Network gt Interfaces gt WAN page configures the interface for the WAN zone WBSlac 1 0 10 00001 IN r y Load 1 30 0 94 0 71 alvarion Hostname WBSlac Changes 0 Interfaces WAN Common Configuration Status Uptime Oh im 28s MAC Address 04 F0 21 10 06 2D pr RX 982 27 KB 8815 Pkts emi TX 2 99 MB 9905 Pkts IPv4 10 10 226 27 24 Protocol DHCP client v Hostname to send when requesting DHCP WBSlac Accept router advertisements Y Figure 2 57 Common Configuration for the WAN Zone 2 4 1 1 Common Configuration 2 4 1 1 1 General Setup M Status Shows a summary of the interface for the WAN zone This includes the following Uptime MAC Address RX Bytes and packets received by the device TX Bytes and packets transmitted by the device IPv4 address Interfaces WAN Common Configuration General Setup Advanced Settings Status Uptime 0h im 28s MAC Address 04 F0 21 10 06 2D a RX
77. nable Enables the dynamic DNS Event interface Chooses the interface e g LAN or WAN for which interface up would run the DDNS script process Service Chooses the DDNS service provider e g no ip com Hostname Specifies the hostname e g yOO33 no ip biz Username Sets the username registered for the DDNS service Password Sets the password registered for the DDNS service Source of IP Address Configures the source of the IP address information the default is URL URL Sets the URL of the source of the IP address information e g http checkip dyndns com Check for changed IP every The default is to check the IP address every 1 minute Check time unit The default is min minute Force update every The default is to force update every 72 hours Force time unit The default is h hour WBSlac Access Point User Manual ven 2 3 2 Hotspot The Hotspot service allows you to control the access and usage of the Internet by connected devices Y WBSlac 1 0 6 00001 ho Load 0 19 0 27 0 36 alvarion Hostname WBSiac Changes 0 General settings Enable Hotspot Hotspot Mode User Name Password w Select your desired mode of hotspot The current setting will be changed accordingly Login Page Title Hotspot x Title shown on the Login Page Idle Timeout 300 Default idle timeout max idle time in second unless otherwise set by RADIUS defaults to 0 meaning unlimited Fig
78. nagement 2 4 6 1 VLAN Function VLAN FUNCTION Enable the function VLAN to use the two below functions VLAN Management and VLAN Ethernet Trunk Otherwise the below settings have no meaning VLAN ACTIVATION Sire e e aes O IA Figure 2 86 VLAN Activation E Enable VLAN Activate this checkbox option to enable the VLAN Management and Managed VLAN functions If this option is disabled the VLAN Management and Managed VLAN functions are inactive WBSlac Access Point User Manual 2 4 6 2 VLAN Management The VLAN Management section controls individual VLANs according to the IEEE802 1Q standards Within the subsection for VLAN entries each row represents one VLAN ID VLAN Management IEEE802 1q Compatible Select which VLAN ID to be able to access the webpage under Managed VLAN For each VLAN bridge you can change the IP address Netmask Gateway IP in Network Interfaces Note If there exist an entry with that SSID in VLAN management you would not be able to use this SSID untagged in VLAN Switch You can still use the SSID tagged If you want to use DHCP client please select the option DHCP under D HCP Client The input for IP Address and Netmask are required in case of the option Static selected only VLAN entries ary VLAN ID Priority DHCP Client IP address Netmask Bridge WIFI Wifi Tagging Description oa EE A AAA eee Default LAN network Figure 2 87 VLAN Ent
79. name The server accepts clients which send an initialization message with the service name that matches the server s configuration Leave empty to autodetect L2TP The Layer 2 Tunneling Protocol L2TP is a tunneling protocol used to support virtual private net works VPNs or as part of the delivery of services by ISPs It does not provide any encryption or confidentiality by itself Rather it relies on an encryption protocol that it passes within the tunnel to provide privacy The options PAP CHAP username and PAP CHAP password have been explained earlier L2TP Server Specifies the IP address of the remote L2TP server Configure L2TP IP settings Upon clicking the Configure button the L2TP Common Configuration page would be displayed The protocol DHCP client or Static address can be selected The corresponding options are explained within this section Section 2 4 1 1 Common Configuration 2 4 1 1 2 Advanced Settings The following are options in the Advanced Settings section tab Thee options that are displayed depends on the protocol that is used WBSlac 1 0 10 00001 ee p Load 1 30 0 94 0 71 alvarion Hostname WBSlac Changes 0 Interfaces WAN Common Configuration Use broadcast flag Required for certain ISPs e g Charter with DOCSIS 3 Use default gateway M If unchecked no default route Is configured Use DNS servers advertised by peer M If unchecked the advertised DNS serve
80. on Dial In User Service RADIUS is a networking protocol that provides centralized o Authentication Authorization and Accounting AAA management for users that connect and use a network service WBSlac Access Point User Manual 6s MW Radius Authentication Port Sets the port number for the RADIUS authentication server Normally the port number is 1812 MW Radius Authentication Secret Configures the password for the authentication transaction E Radius Accounting Server Specifies the IP address of the RADIUS accounting server MW Radius Accounting Port Sets the port number for the RADIUS accounting server Normally the port number is 1813 E Radius Accounting Secret Configures the password for the accounting transaction E NAS ID Specifies the identity of the network access server NAS 2 4 5 2 4 5 WPA or WPA2 with EAP Station Mode Interface Configuration General Setup Wireless Security Advanced Settings Encryption IEEE802 1X WPA2 EA v Cipher Auto vy EAP Method E l TLS MN Path to CA Certificate Ss A Browse i Path to Client Certificate j A Browse Path to Private Key Browse Password of Private Key Figure 2 82 Encryption Options for WPA EAP or WPA2 EAP in Station Mode M Cipher Can be set to the following Auto CCMP AES TKIP and CCMP AES MW EAP Method The authentication protocol can be set to Transport Layer Security TLS Tunneled TLS TTLS or Pr
81. on zone To source IP To source port New SNAT rule _ o lan vJiwan M Please choose V Do not rewrite _ MA dd and edit Figure 2 100 Source NAT 2 4 10 Diagnostics 2 4 10 1 Network Utilities Diagnostics Network Utilities alvanion com alvanon com alyarion com IPv4 v VLANs a Install iputils traceroute6 for IPv6 traceroute Hostnames Static Routes Firewall QoS APController Figure 2 101 Network Utilities Network Utilities consists of the following M Ping M Traceroute E Nslookup WBSlac Access Point User Manual 2 4 10 1 1 Ping Diagnostics Network Utilities 10 10 226 27 alvarion com alvarion com Install iputils traceroute6 for IPv6 traceroute PING 10 10 226 27 10 10 226 27 56 data bytes 64 bytes from 10 10 226 27 seq 0 tt1 64 time 0 321 ms 64 bytes from 10 10 226 27 seq 1 ttl 64 time 0 242 ms 64 bytes from 10 10 226 27 seq 2 tt1 64 time 0 206 ms 64 bytes from 10 10 226 27 seq 3 tt1 64 time 0 202 ms 64 bytes from 10 10 226 27 seq 4 tt1 64 time 0 201 ms 10 10 226 27 ping statistics 5 packets transmitted 5 packets received 0 packet loss round trip min avg max 0 201 0 234 0 321 ms Figure 2 102 Result of Ping 2 4 10 1 2 Traceroute Diagnostics Network Utilities 110 10 226 27 E a A 110 10 226 27 alvarion com Install iputils traceroute6 for IPv6 traceroute traceroute
82. otected EAP PEAP M Path to CA Certificate Selects the file for the CA certificate NOTE The certificate authority CA is a trusted third party that issues digital certificates Ina public key infrastructure scheme a digital certificate certifies the ownership of a public key by the named subject of the certificate MW Path to Client Certificate Selects the file for the client certificate Options for TLS as the EAP method M Path to Private Key Selects the file for the private key E Password of Private Key Configures the password for the private key WBSlac Access Point User Manual EP Options for TTLS or PEAP as the EAP method MW Authentication Selects the authentication method used by the AP e g PAP CHAP MSCHAP or MSCHAPV2 M Identity Sets the identity used by the supplicant for EAP authentication M Password Sets the password used by the supplicant for EAP authentication 2 4 5 2 5 MAC Filter This section tab is only available for a device operating as an AP Interface Configuration General Setup Wireless Security MAC Filter Advanced Settings MAC Address Filter Disable v Figure 2 83 Wifi AP MAC Filter E MAC Address Filter Lets you allow only devices with the listed MAC address to associate with this AP or lets you block devices with the listed MAC address M MAC List Adds the MAC address of the remote device to either block or allow 2 4 5 2 6 Advanced Settings Inte
83. ource port Accept Sma 547 ale M lt Edit x Delete To IP range FE80 0 0 0 0 0 0 0 10 at port 546 on this device IPv6 ICMP with types echo request echo reply destination unreachable packet too big Accept time exceedec input bad header unknown and Allow header type router limit to ICMPv6 Input solicitation neighbour 1000 pe He 4 Edit 2 Delete solicitation router pkts advertisement per neighbour second advertisement From any bost in wan To any router IP on this device IPv6 ICMP with types echo request Accept echo reply destination forward unreachable packet and mee eid imitto Edit x Delet a y time exceeded 1000 ee bad header unknown pkts header type per From any host in wan second To any host in any zone Figure 2 98 Firewall Traffic Rules Default Settings WBSlac Access Point User Manual WN Open ports on router Name Protocol External port New input rule TCP UDP i Add New forward rule Name Source zone Destination zone New forward rule lan v wan v Add and edit Figure 2 99 Firewall Traffic Rules Lower Part 249392 Sanrce NAT Source NAT S Source NAT is a specific form of masquerading which allows fine grained control over the source IP used for outgoing traffic for example to map multiple WAN addresses to internal subnets E n fo Name Match Action a Sort bl e This section contains no values yet New source NAT Name Source zone Destinati
84. previous option is unchecked Min 300 Max 12000 80MHz 24000 40MHz 48000 20MHz This value may be set to slightly more than the physical distance between the APand the farthest station MW Chainmask Selection Sets the antenna port selection on the radio For example 2x2 means that 2 antennas are being used NOTE The following options are for the device operating as an access point AP MW Beacon Interval Specifies the interval between beacon transmissions by the AP in ms A beacon isa frame broadcast by the AP to synchronize the wireless network For the multiple VAP case the beacons are transmitted evenly within this interval Thus if four VAPs are created and the beacon interval is 200 ms a beacon is transmitted from the radio portion every 50 ms from each VAP ina round robin fashion The default value of the interval is 100 ms WBSlac Access Point User Manual Tm Adaptive noise immunity Controls radio sensitivity in the face of noise sources Adaptive noise immunity allows the AP to reject spurs and non WLAN noise An advantage is that the AP would have to spend less time decoding the signal resulting in lower packet loss rate Dynamic channel selection Automatically switches channel to avoid interference Dynamic channel selection is feature to detect and avoid continuous wave CW interference CW interference or spurs cause the noise floor to be high This stops transmissions as well as causes receives to
85. r Manual WN PAS IPSec IPSec IPSec Pre shared key ni Peceecsccseses G Figure 2 108 IPSec By default the Internet Protocol Security IPsec is disabled for the WBSlac boards to decrease the usage of the CPU resources Itcan also be enabled The L2TPv3 itself already provides data channel protection against malicious data insertion M Pre shared key Sets the password for the IPsec Arena Controller SNMP Settings The SNMPv3 AP to ARENA CONTROLLER section contains the Arena Controller SNMP settings WBSlac 1 0 10 00001 J Load 0 20 0 29 0 31 alvarion Hostname WBSlac SNMPv3 AP to APC User Name admin Auth Password eeecceee e Privacy Password eeececee Figure 2 109 SNMPv3 AP to ARENA CONTROLLER Currently the following default values must be used MM User Name admin M Auth Password password M Auth Password password WBSlac Access Point User Manual gs Administration Services e 4 Backup Flash Firmware 00 Network interfaces Wifi VLANs Hostnames Static Routes Firewall Diagnostics WBSlac 1 0 10 00001 Load 0 19 0 25 0 29 Hostname WBSlac SNMP Here you can configure your SNMP V2c and SNMP V3 read and write password SNMP Information SNMP Enterprise ID Contact Location SNMP Configuration General Sings Enable SNMP SNMP V2c Read Password SNMP V2c Write Password SNMP V3 Username SNMP V3 Auth Algorithm SNMP V3 Aut
86. r addresses are ignored Use gateway metric 0 Client ID to send when requesting DHCP Vendor Class to send when requesting DHCP f Override MAC address 04 F0 21 10 06 2D Override MTU 1500 Figure 2 59 WAN Zone Advance Settings WBSlac Access Point User Manual a MW Use broadcast flag When sending DHCP requests a client can indicate if it wants an answer in unicast or broadcast by setting the broadcast flag This is required for certain ISPs Unchecked by default E Use default gateway Configures a default route Checked by default E Use DNS servers advertised by peer Uses the DNS settings advertised by the DHCP server Checked by default MW Use gateway metric Allows you to specify a gateway metric This acts as a cost for choosing the gateway when a connected device has to select between multiple available gateways The gateway with the smallest metric is chosen E Client IDto send when requesting DHCP Sets the identifier that may be required by the ISP or network administrator If not stated the MAC address of the client willbe sent M Vendor Class to send when requesting DHCP Identifies the vendor of a DHCP client for the enhancement of vendor specific DHCP functionality E Override MAC address Allows you to specify a different MAC address other than the AP s original MAC address This is useful if the ISP uses the MAC address of the AP to identify a customer Suppose that the AP needs to be
87. r friendly web interface for the AP configuration This manual describes the WBSlac indoor access point and provides step by step instructions on how to get started operate and manage the AP This manual contains the following chapters NW Chapter 1 Overview M Chapter 2 Management MW Chapter 3 Final Notes M Glossary ac ACCESS roin Ser anua Contents Contents Chapter WM aa os sn ee ess Sueno A ss ess pia 1 LE TU Oe oo cea eae a ee se ee Se ee eee 2 Le PCO OOO yar etre ccna UA 2 ko A a e E E E E a A EAE 3 LA Supported OC e E E T ER O 3 Lo System is COMTI SINS 2 ian cnc ane sutnn ce ac scteneon4casueeaaus A AER 3 WG CCC Stanedl sist delicioso 4 157 Operatine MOdes sssrnincacaa bado idol arios 5 las Boron a a CHIN ES rt eee 5 1 9 Physical Hardware BOO ismeojrssnsirtarncrrcr il iia 6 LATAS e aaa 6 Chapter Minafon 1 osteo ah tewdudcesecsusadeinccteuseatsneceasaaaesacoleunbelsesdausensttecciemaaenses 7 eM Status Tab ssa seas tg ess eae ese ree ein see eee ene ees 8 DoW MOVE VICW coer ace cee oe eee E E sae ceteniesanecaecine E A seacaeeetauetecoetcees 9 NA ee ee re ee ee ee 14 ES A NU Pe 15 2AA AS Grea NG sica 15 Dee DV Sle td LAW ricas 22 IT SS A A O E E TE E A 22 2 OIE CATO eerren aa E sae auenaneneneaeatancnenaaeemesenneaarene 24 DO MES RA ee ROE A 27 LA A T E A A EA 28 2 2 5 Physical Hardware Button scarico riera d aci iadds 30 AER tel iaa A A S ER N E E ER 31 ESA A E E A E
88. rface Configuration General Setup Wireless Security MUS E Advanced Settings RTS Threshold 2346 _ Station Isolation O O Prevents station to station communication Maximum Stations 127 Minimum Stations RSSI 0 802 11n Only HT 20 40 Coexistence O WMM i ii i i M Provides Quality of Service features Multicast Enhancement Tunneling Mode y Figure 2 84 Advanced Settings for the Wifi Interface RTS Threshold Sets the threshold for the packet size above which the request to send RTS mechanism is used The default is 2346 octets There is a trade off to consider when setting this parameter On the one hand using a small value causes RTS packets to be sent more often consuming more of the available bandwidth and therefore reducing the throughput of the network packet On the other hand when more RTS packets are sent the system recovers faster from interference or collisions This is useful in a heavily loaded network or a wireless network with high electromagnetic interference The following options for Station Isolation Maximum Stations Minimum Stations RSSI and 802 11n NOTE Only are available only for a device operating as an AP WBSlac Access Point User Manual TA E Station Isolation Prevents station to station communication unchecked by default When Station Isolation is disabled wireless clients can communicate with one another normally by sending traffic through the AP When
89. ries in the VLAN Management Section The first row is given by default Itis the native or untagged VLAN M Add Inserts a new row corresponding to a new VLAN The IP address field should be distinct for different devices E Managed VLAN Allows computers on this VLAN to access the device s configuration web page E VLAN ID Specifies the identifier for the VLAN Itis an integer from 2 to 4094 Let VID be this number The ethO port is tagged with VID to give ethO VID This port can have multiple tags corresponding to different VLANs An eth0 VID port would only accept frames that have been tagged with the VLAN ID VID M Priority Chooses the priority for transmitting packets Thisis a number from 0 to 7 The number 7 represents the highest priority DHCP Client Displays the DHCP client IP address Sets the IP address of the APas seen by other devices on this VLAN Netmask States the netmask of the subnet defined by this VLAN Bridge WIFI Selects the wireless network for which its interface would be bridged to the ethO VID port The choice All Others would select all other wireless networks that are currently not selected M Wifi Tagging Should be set to Enabled This tags the Ethernet frames sent over Wifi This does not add a second tag QinQ The wireless interface athO of this VLAN would be tagged to give ath0 VID for example E Description Provides a short description of the VLAN WBSlac Access Point User Manua
90. rk name Received signal strength Noise power Transmit rate Receive rate Transmission quality for each station are displayed WBSlac Access Point User Manual UN 2 4 4 2 Spectrum Interference Analyzer For a radio in AP mode clicking the Spectrum button would bring up the Channel Scan Report Channel Scan Report Please click Radio 1 View or Radio 2 View to see the latest results This may be necessary if cookies are not enabled Please click Radio 1 Scan or Radio 2 Scan to run the Interference Analyzer The scan takes about 20 30 seconds to complete During this time all communications with the radio is disabled Please click Return to return to the Wireless Overview page Channel Access Points Min RSSI Max RSSI Noise Floor Channel Load 2412 1 4 64 dBm 44 dBm 96 dBm 36 2417 2 0 95 dBm 95 dBm 98 dBm 64 2422 3 0 95 dBm 95 dBm 97 dBm 63 2427 4 0 95 dBm 95 dBm 97 dBm 24 2432 5 0 95 dBm 95 dBm 100 dBm 20 2437 6 8 86 dBm 47 dBm 101 dBm 23 2442 7 0 95 dBm 95 dBm 100 dBm 18 2447 8 0 95 dBm 95 dBm 100 dBm 7 23321 9 0 95 dBm 95 dBm 100 dBm 19 2457 10 0 95 dBm 95 dBm 98 dBm 38 2462 11 0 95 dBm 95 dBm 98 dBm 10 2467 12 0 95 dBm 95 dBm 92 dBm 1 2472 13 0 95 dBm 95 dBm 91 dBm 15 Figure 2 72 The Channel Scan Report The Radio 1 View button shows the number of neighboring access points for each channel the Min RSSI Max RS
91. s Hostname IP address abed com 10 10 226 254 00 90 f v samplehost com 192 168 21 7 onemoe org 192 169 21 7 v v Figure 2 89 Custom Hostname Entries The computers in the same subnet need to set the IP address of this device as their preferred DNS NOTE l server in order to interpret these custom hostnames WBSlac Access Point User Manual O 2 4 8 Static Routes The Network gt Static Routes page shows the static IPv4 routes WBSlac 1 0 10 00001 Load 0 13 0 29 0 44 Hostname WBSlac Unsaved Changes 16 Routes Routes specify over which interface and gateway a certain host or network can be reached Static IPv4 Routes Interface Target IPv4 Netmask IPv4 Gateway Metric MTU Host IP or Network if target is a network This section contains no values yet Static IPv6 Routes Interface Target IPv6 Gateway Metric MTU IPv6 Address or Network CIDR This section contains no values yet Figure 2 90 Static IPv4 and IPv6 Routes Each row shows the interface and gateway over which a certain host or network can be reached 2 4 9 Firewall The Network gt Firewall page consists of the following tabs E General Settings E Port Forwards M Traffic Rules WBSlac 1 0 10 00001 Load 0 17 0 26 0 41 Hostname WBSlac Unsaved Changes 16 Firewall Zone Settings The firewall creates zones over your network interfaces to control network traffic flow
92. sable TCP UDP ve lanklan A newzone empty d Want Want A Only match incoming traffic from these MACs any v Only match incoming traffic from this IP or range any Only match incoming traffic originating from the given source port or port range on the client host any v W Only match incoming traffic directed at the given IP address Match incoming traffic directed at the given destination port or port range on this host fans lan 004 v Redirect matched incoming traffic to the specified internal host any Redirect matched incoming traffic to the given port on the internal host Passes additional arguments to iptables Use with care Figure 2 97 Editing Firewall Port Forwards WBSlac Access Point User Manual The Firewall Port Forwards page allows you to change advanced properties of the port forwarding entry In most cases there is no need to modify the settings The following are the Firewall Port Forwards parameters that can be edited Rule is enabled Enabled by default Name The name of the port forwarding entry Protocol Select from the following protocols TCP UDP TCP UDP ICMP or custom Source zone Select the source zone WAN LAN or a new zone Source MAC address Select a MAC address that only matches incoming traffic from these MACs Source IP address Select an IP address that only matches incoming traffic from the IP or range default is any M
93. ser Manual ar 2 2 4 Chapter 2 Management System Tab Auto Reboot Auto Reboot e p e a Time HH MM 24 Hours 2 41 Figure 2 34 Auto Reboot E Auto Reboot Allows the WBSlac AP to reboot itself automatically disabled by default M Mode Chooses the Auto Reboot mode By Time or By Number of Hours M Time HH MM 24 Hours Sets the time of day to reboot if the Mode is By Time SNMP prod Rowe eS I SNMP Here you can configure your SNMP V2c and SNMP V3 read and write password SNMP Information SNMP Enterprise ID 12394 Contact http weww alvarion conv Location Bd Dimitrie Pompei nr 104 SNMP Configuration aie sis Enable SNMP Y SNMP V2c Read Password public z SNMP V2c Write Password pavate OS SNMP V3 Username admin Firewall SNMP V3 Auth Algorithm MD5 SNMP V3 Auth Password Pooncovse E SNMP V3 Privacy Algorithm DES APController SNMP V3 Privacy Password ELITTTTTT 2 Figure 2 35 SNMP Page The Simple Network Management Protocol SNMP is an Internet standard protocol for managing devices on IP networks It consists of a set of standards for network management including an application layer protocol a database schema and a set of data objects SNMP exposes management data in the form of variables on the managed systems which describe the system configuration These variables can then be queried and sometimes set by managing applications In the System gt SNMP pag
94. sly on Flashing 0001 Signal Strength Increase from left to right WBSlac Access Point User Manual uE Chapter 2 Management In this Chapter Status Tab System Tab Services Tab Network Tab Arena controller Tab Logout After login when you clickon the Status top level tab the second level tabs are displayed Status Tab Overview Routes System Log Realtime Graphs Hotspot Users alvarion Wireless AR9344 802 11bgn Radio 22 53D ap 8 50 Mode Master AP Channel 1 2 412 GHz Bitrate 300 Mbit s BSSID 04 F0 21 10 16 2C SSID AP2 4 radius 50 Mode Master Channel 1 2 412 GHz Bitrate 300 Mbit s BSSID 04 F0 21 10 16 2D QCA9882 802 1 1ac an Radio s stp a5 Mode Master LAP Channel 36 5 180 GHz Bitrate 866 7 Mbit s BSSID 04 F0 21 10 26 2C Associated Stations 1 Encryption None ACK Timeout 64 DFS Status Disabled Encryption None ACK Timeout 64 DFS Status Disabled Encryption None ACK Timeout 15 DFS Status Disabled a 04 F0 21 10 25 54 APSG 50 192 168 50 4 40 dBm 44 45 33 dBm 95 dBm 866 7 Mbit s ad 04 F0 21 10 25 54 APSG 50 192 168 50 4 40 dBm 44 44 33 dBm 95 dBm 866 7 Mbit s System Router Name WBSlac Router Model wBSlac Firmware Version WBSlac 1 0 10 00001 Kernel Version 3 3 8 Local Time Mon Jan 5 22 14 43 2015 Memory Total Available 74 AS Figure 2 1 Status Page 866 7 Mbit s 866 7 Mbit s No
95. ssion of Alvarion Technologies Ltd The text and graphics are for the purpose of illustration and reference only The specifications on which they are based are subject to change without notice The software described in this document is furnished under a license The software may be used or copied only in accordance with the terms of that license Information in this document is subject to change without notice Corporate and individual names and data used in examples herein are fictitious unless otherwise noted Alvarion Technologies Ltd reserves the right to alter the equipment specifications and descriptions in this publication without prior notice No part of this publication shall be deemed to be part of any contract or warranty unless specifically incorporated by reference into such contract or warranty The information contained herein is merely descriptive in nature and does not constitute an offer for the sale of the product described herein Any changes or modifications of equipment including opening of the equipment not expressly approved by Alvarion Technologies Ltd will void equipment warranty and any repair thereafter shall be charged for It could also void the user s authority to operate the equipment WBSlac Access Point User Manual Uy Aboutthis Manual This user manual isa guide to the WBSlac AP firmware on a wireless AP WBSIac combines with the most advanced chipsets WBSlac also includes a use
96. sthe name of the network as advertised in the beacon message In Station mode it isthe network name that the station associates with E BSSID Sets the MAC address of the AP This option is available for a device operating as a station This is useful because there can be multiple APs with the same ESSID Setting the MAC address would prevent the station from roaming to other APs E Guard Interval Chooses between Short and Long guard intervals Guard intervals are used to ensure that distinct transmissions do not interfere with one another Data rate is improved in downlink and uplink if both APand station use the Short Guard Interval MW Data Rate Mbps Selects the data rate or the modulation and coding scheme MCS The default setting of Auto is recommended The MCS and data rates are adjusted automatically depending on the wireless channel conditions 6 9 12 18 24 36 48 54 Mbps MCS 0 13 5 Mbps MCS 1 27 Mbps MCS 2 40 5 Mbps MCS 3 54 Mbps MCS 4 81 Mbps MCS 5 108 Mbps MCS 6 121 5 Mbps MCS 7 150 Mbps MCS 8 27 Mbps MCS 9 54 Mbps MCS 10 81 Mbps MCS 11 108 Mbps MCS 12 162 Mbps MCS 13 216 Mbps MCS 14 243 Mbps MCS 15 300 Mbps E Hide ESSID Hides the network name ESSID from being broadcast publicly This option is for a device operating as an AP If the goal is securing your network use WPA or preferably WPA2 encryption Hiding the ESSID does NOTE i not provide
97. tatus Enable Alignment Buzzer Bb 25 dbm 00 1e 65 28 f0 12 5c 51 4f ae a9 bb 04 f0 21 10 25 54 00 1e 65 28 f0 12 Signal Strength dbm TX CCQ Figure 2 10 The Link Status Section 5h 52m 4s Sh 41m 51s 11h 21m 46s 5h 52m 9s In the Link Status section on the Status gt Overview web page the value on the top left box denotes the current received signal strength e g 48 dBm The box directly below it shows the current TX CCQ transmission client connection quality e g 71 The bottom left box shows a realtime graph of the received signal strength over the last 60 seconds The box directly to its right shows a realtime graph of the TX CCQ over the past 60 seconds On the right of this section there are 3 vertical bars Each bar shows the current received signal strength of each antenna e g 53 dBm 44 dBm and 48 dBm If the radio has only 2 antennas the third vertical bar is given a default value of 95 dBm E Enable Alignment Buzzer When enabled the board would continually emit beeping sounds to indicate the received signal strength Every 3 seconds the board would emit a number of beeps 1 to 4 in quick succession The number of beeps is the same as the number of lighted Signal strength indicator LEDs Just like for LEDs more beeps indicate a higher received signal strength This is useful for a person aligning directional antennas at a height in an outdoor scenario if the LEDs
98. ter AP2 4G 50 lan MW Wireless Network Master APSG radius 50 lan Wireless Network Master APSG 50 lan No Interface Figure 2 60 WAN Zone Physical Settings NOTE For boards with 2 ethernet ports both ports would be LAN ports in the default configuration You can o still designate the WAN port in the firmware For APs with power over Ethernet PoE only the port further away from the DC Jack right port would be the PoEinput port ethY The port nearer to the DC Jack left port would be the PoE output port ethX ZE Interfaces AVLAN3316 2 4 2 1 Common Configuration 2 4 2 1 1 General Setup WBSlac 1 0 10 00001 _ E Load 0 29 0 34 0 49 alvarion Hostname WBSlac Changes 0 System Interfaces AVLAN3316 Common Configuration Status i2tp avian3316 Protocol Static address v Really switch protocol Figure 2 61 AVLAN3316 Common Configuration WBSlac Access Point User Manual as M Status M Protocol Static Address DHCP Client M Really Switch Protocol Switch Protocol button 2A Interfaces LAN The LAN interface consists of the following sections E Common Configuration E DHCP Server M Static Leases 2 4 3 1 Common Configuration The LAN interface Common Configuration section has the following tabs M General Setup M Advanced Settings M Physical Settings 2 4 3 1 1 General Setup WE Status Shows a summary of
99. tice in the figure that the radio is using the latest and fastest 802 1lac wireless standard that supports a data rate of up to 866 7 Mbit s Changes 0 Status Uptime 4d 10h 32m 23s 97 97 WBSlac Access Point User Manual 2 1 1 Overview The Status gt Overview page is divided into the following sections Wireless Associated Stations System Memory Network DHCP Leases Uptime displays the duration of time since the WBSlac AP was turned on or rebooted 2 1 1 1 Wireless Wireless AR9344 8 Lt Radio CNWNWs SID AP2 4G 50 Encryption None Mode Master ACK Timeout 64 ar Channel 1 2 412 GHz DFS Status Disabled Bitrate 300 Mbit s BSSID 04 F0 21 10 16 2C SSID AP5G radius 50 Encryption WPA2 EAP AUTO Mode Master ACK Timeout 64 Channel 1 2 412 GHz DFS Status Disabled Bitrate 300 Mbit s BSSID 04 F0 21 10 16 2D SSID AP4 Mode Master Channel 1 0 000 GHz Bitrate Mbit s Wireless is disabled or not associated QCA9882 802 11ac an Radio gt SSID AP5G 50 Encryption None Mode Master ACK Timeout 15 ar Channel 36 5 180 GHz DFS Status Disabled Bitrate 866 7 Mbit s BSSID 04 F0 21 10 26 2C Figure 2 2 Wireless Chipset Model The Wireless section in the Status gt Overview page shows a summary of the wireless parameters The following describes the parameters SSID AP5G radius 50 Encryption WPA2 EAP AUTO Mode Master ACK Timeout 64 Channel
100. to 10 10 226 27 10 10 226 27 30 hops max 38 byte packets 1 10 10 226 27 0 052 ms Figure 2 103 Result of Traceroute 2 4 10 1 3 Nslookup Diagnostics Network Utilities 110 10 226 27 110 10 226 27 110 10 226 27 Install iputils traceroute6 for IPv6 traceroute Server 127 0 0 1 Address 1 127 0 0 1 localhost Name 10 10 226 27 Address 1 10 10 226 27 Figure 2 104 Result of Nslookup WBSlac Access Point User Manual 2 4 11 Quality of Service The Network gt QoS page configures the quality of service QoS With QoS you can prioritize network traffic selected by addresses ports or services You can limit the download and upload speeds Network QoS is disabled by default WBSlac 1 0 10 00001 Ss ho Load 0 25 0 29 0 30 alvarion Hostname WBSlac Quality of Service With QoS you can prioritize network traffic selected by addresses ports or services Interfaces WAN Enable Classification group default iv Calculate overhead L Half duplex CI Download speed kbit s 20000 Upload speed kbit s 20000 i Figure 2 105 Network QoS Settings Enable Clickto enable this QoS option Classification group Calculate overhead Clickto enable calculating the overhead option Half duplex Disabled by default Download speed kbit s Default is 20000 kbit s Upload speed kbit s Default is 20000 kbit s WBSlac Access Point User M
101. ure 2 44 Hotspot 2 3 2 1 Setting up the Connections The following subsections contain advice on configuring the WBSlac APto implement the hotspot The WBSlac AP is referred to here as the hotspot AP Itis recommended to configure the LAN Wifi and WAN then test it before enabling the hotspot setting 2 3 2 1 1 LAN Interface DHCP Server It is recommended to enable the DHCP server because network address translation NAT occurs between the WAN zone and the LAN zone To do this you may go to the Network tab to disable the Ignore interface Disable DHCP for this interface option Devices or computers that connect to this hotspot AP can then obtain their IP addresses automatically In addition the default gateway IP address and the DNS server IP address are automatically configured for these connected devices If the DHCP server is left disabled it is still possible for devices to connect to the hotspot Each device would need a unique static IP address on the same subnet as this hotspot AP Set the default gateway and DNS server for the device both to be the IP address of this hotspot AP Itis not necessary to set the hotspot AP s default gateway and DNS server in the Network page This information 1s obtained automatically from the WAN interface 2 3 2 1 2 Wifi Settings The wireless networks should be set up to allow any user to access the Internet assuming that the hotspot is not yet enabled WBSlac Access Point User M
102. ustomer Alvarion willbe obligated to support solely the two 2 most recent Software major releases ALVARION SHALL NOT BE LIABLE UNDER THIS WARRANTY IF ITS TESTING AND EXAMINATION DISCLOSE THAT THE ALLEGED DEFECT IN THE PRODUCT DOES NOT EXIST OR WAS CAUSED BY PURCHASER S OR ANY THIRD PERSON S MISUSE NEGLIGENCE IMPROPER INSTALLATION OR IMPROPER TESTING UNAUTHORIZED ATTEMPTS TO REPAIR OR ANY OTHER CAUSE BEYOND THE RANGE OF THE INTENDED USE OR BY ACCIDENT FIRE LIGHTNING OR OTHER HAZARD WBSlac Access Point User Manual Ey Legal Rights Disclaimer a The Software is sold on an AS IS basis Alvarion its affiliates or its licensors MAKE NO WARRANTIES WHATSOEVER WHETHER EXPRESS OR IMPLIED WITH RESPECT TO THE SOFTWARE AND THE ACCOMPANYING DOCUMENTATION ALVARION SPECIFICALLY DISCLAIMS ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE AND NON INFRINGEMENT WITH RESPECT TO THE SOFTWARE UNITS OF PRODUCT INCLUDING ALL THE SOFTWARE DELIVERED TO PURCHASER HEREUNDER ARE NOT FAULT TOLERANT AND ARE NOT DESIGNED MANUFACTURED OR INTENDED FOR USE OR RESALE IN APPLICATIONS WHERE THE FAILURE MALFUNCTION OR INACCURACY OF PRODUCTS CARRIES A RISK OF DEATH OR BODILY INJURY OR SEVERE PHYSICAL OR ENVIRONMENTAL DAMAGE HIGH RISK ACTIVITIES HIGH RISK ACTIVITIES MAY INCLUDE BUT ARE NOT LIMITED TO USE AS PART OF ON LINE CONTROL SYSTEMS IN HAZARDOUS ENVIRONMENTS REQUIRING FAIL SAFE PERFORMANCE SUCH AS IN THE OPERATION O
103. v dannys pc7 192 168 50 137 5c 51 4f ae a9 bb 11h 59m 29s 192 168 50 212 04 f0 21 10 25 54 1ih 39m 24s tlv dannys pc7 192 168 50 137 5c 51 4f ae a9 bb 11h 59m 34s Figure 2 69 Static DHCP Lease WBSlac Access Point User Manual UN 2 4 4 Wifi Overview Clicking on the Network gt Wifi tab would bring you to the Wireless Overview page This page shows the radios present on the device These may include the on board radio and the miniPCI miniPCle radio card The wireless local area networks WLANs are displayed under each radio WBSlac 1 0 10 00001 s gt Load 0 78 0 96 0 90 alvarion Hostname WBSlac Unsaved Changes 1 Wireless Overview AR9344 802 11bgn Radio Channel 1 2 412 GHz Bitrate 300 Mbit s s amp SSID AP2 4G 50 Mode Master 100 BSSID 04 F0 21 10 16 2C Encryption None ae e able di SSID APSG radius 50 Mode Master 100 BSSID 04 F0 21 10 16 2D Encryption WPA2 EAP AUTO QCA9882 802 11ac an Radio EZI ae Channel 36 5 180 GHz Bitrate 866 7 Mbit s das do SSID AP5G 50 Mode Master Di 0 BSSID 04 F0 21 10 26 2C Encryption None Associated Stations e 00 1 65 28 F0 12 AP2 4G 50 55 dBm 59 57 95 dBm 95 dBm 130 0 Mbit s 71 3 Mbit s 100 pa 5C 51 4F AE A9 BB AP2 4G 50 72 dBm 78 74 95 dBm 95 dBm 129 6 Mbit s 29 2 Mbit s 95 a 04 F0 21 10 25 54 APSG 50 44 dBm 46 50 33 dBm 95 dBm 866 7 Mbit s 866 7 Mbit s 92 0 1 65728 F0 12 AP2 4G 50 5
104. y WPA PSK WPA2 PSK WPA PSK WPA2 PSK Mixed Mode TEEE802 1X WPA EAP TEEE802 1X WPA2 EAP Wired Equivalent Privacy WEP is the oldest and least secure encryption algorithm Stronger encryption using WPA or WPA2 should be used where possible For the WEP Open System and WEP Shared Key encryptions you can specify up to 4 keys and only 1 would be used at a time We have the following options MW Used Key Slot Chooses between Key 1 to Key 4 M Key 1 Specifies a string of characters to be used as the password It may consist of 5 ASCII characters or 10 HEX characters implying a 64 bit WEP key length Otherwise it may consist of 13 ASCII or 26 HEX characters implying a 128 bit key length E Key 2 Key 3 and Key 4 Similar to Key 1 NOTE Valid HEX characters are numbers 0 9 and letters A F case insensitive Valid ASCII characters are o numbers and the letters of the English alphabet case sensitive Based on the number of characters the key is automatically checked for validity Invalid keys are represented by red dots while valid keys are represented by black dots Clickthe green arrows icon beside the text field to reveal hide the password WBSlac Access Point User Manual fers 2 4 5 2 4 2 WPAor WPA2 with PSK Wifi protected access WPA isa stronger encryption than WEP Furthermore WPA2 was developed to strengthen the security of WPA and is stronger than WPA and WEP For WPA PSK WPA2 PSK WPA PSK W
105. ynamic DNS Dynamic DNS allows that your router can be reached with a fixed hostname while having a dynamically changing IP address MYDDNS Delete Enable O Event interface tan v On which interface up should start the ddns script process Interfaces Service no ip com N Hostname VLANs Username Hostnemes Password 2 g Source of IP address URL y al URL hitp checkip dyndns com ae Check for changed IP every 1 cee Her Check time unit min N Force update every 72 Force time unit h y Figure 2 42 Services Tab WBSlac Access Point User Manual 2 3 1 Dynamic DNS The domain name system DNS translates a URL like www yahoo com to an IP address like 206 190 36 45 Dynamic DNS DDNS allows the WBSlac AP with the public IP address to be reached from the internet via a URL even if its IP address is dynamically changing WBSlac 1 0 6 00001 P Load 0 26 0 29 0 38 alvarion Hostname WBSiac Changes 0 Dynamic DNS Dynamic DNS allows that your router can be reached with a fixed hostname while having a dynamically changing IP address MYDDNS Delete Enable Event interface lan yj O On which interface up should start the ddns script process Service no ip com iv Hostname Username Password a Source of IP address URL iv URL htto checkio dvndns conv Check for changed 1P every 1 Check time unit min iv Force update every 72 Force time unit h iv Figure 2 43 Dynamic DNS E E
106. zing a controller to a single clock on the network known as the clock master Password Authentication Protocol This is a protocol for authenticating users to a remote access server or ISP Point to Point Protocol over Ethernet This is a protocol for connecting a network of hosts to an ISP without the ISP having to manage the allocation of IP addresses Point to Point Tunneling Protocol Thisis a protocol for the creation of VPNs for the secure transfer of data from remote clients to private servers over the Internet Quality of Service This is the prioritization of network traffic Voice traffic gets the highest priority followed by video best effort and background traffic in this order Remote Authentication Dial In User Service This is a networking protocol that provides Authentication Authorization and Accounting AAA management for remote users The RADIUS provides centralized management of usernames and passwords WBSlac Access Point User Manual Ta SNMP SSID Station Subnet TCP UDP Simple Network Management Protocol This is an Internet standard protocol for managing devices on IP networks It consists of a set of standards for network management including an application layer protocol a database schema and a set of data objects SNMP exposes management data in the form of variables on the managed systems which describe the system configuration These variables can then be queried and someti

WBSIac Access Point

Contents

Download Pdf Manuals

Related Search

Related Contents