Home

Spectrum24 AP-4121 Access Point

1. 1 2 2 Cellular Coverage The AP establishes an average communication range with MUs called a Basic Service Set BSS or cell When in a particular cell the MU associates and communicates with the AP of that cell Each cell has a Basic Service Set Identifier BSS_ID In IEEE 802 11 the AP MAC Media Access Control address represents the BSS _ID The MU recognizes the AP it associates with using the BSS_ID Spectrum24 devices like other network devices have unique hardware encoded MAC or IEEE addresses MAC addresses determine the device sending or receiving the data A MAC address is a 48 bit number written as six hexadecimal bytes separated by colons For example OO AG F8 24 9A C8 An MU recognizes the access point it associates with using the BSS _ID Adding access points to a single LAN establishes more cells to extend the range of the network Configuring the same ESS ID Extended Service Set Identifier on all access points make them part of the same Wireless LAN Spectrum24 AP 4121 Access Point Product Reference Guide 9 Introduction 10 APs with the same Net_ID ESS define a coverage area The MU searches for APs with a matching N et_ID ESS and synchronizes with an AP to establish communications This allows MUs within the coverage area to move aboutor roam As the MU roams from cell to cell it switches APs The switch occurs when the MU analyzes the reception quality ata location and decides which AP to commun
2. The password is case sensitive Spectrum24 AP 4121 Access Point Product Reference Guide Configuring the AP Ifthe password is correct the AP displays the Main Menu with the Enter Admin Mode menu item changed to Exit Admin Mode Ifthe password is incorrect the AP continues to display the Main Menu with the Enter Admin Mode menu item d Set the System passwords in the Set System Configuration screen Mohi 2 2 2 Changing the Access to the UI To prevent unauthorized Telnet access change the configuration access to the UI This includes enabling or disabling the Telnet Logins or changing the System Passwords To change Telnet access to the AP 1 Select set system Configuration from the Main Menu 2 Select Telnet Logins 3 Press the SPACE BAR or LEFT RIGHT ARRO W keys to toggle between Enabled and Disabled 4 Use the TAB key to highlight the save function and press ENTER or press F1 to save 5 The system prompts Are you sure Y N Type v To change the system passwords 1 Select set system configuration from the Main Menu 2 Press TAB to select system Password Admin OF press F4 Spectrum24 AP 4121 Access Point Product Reference Guide 53 Configuring the AP 3 The Change System Passwords screen displays Symbol Access Point Change System Passwords User Password FoR KKK Admin Password FOR IK Ik Save F1 Cancel ESC Password for user access Monitor only 4 Change the pas
3. KRB_AP_ERR BADADDR 38 Incorrect net address KRB_AP_ERR BADVERSION 39 Protocol version mismatch KRB AP ERR MSG TYPE 40 Invalid message type KRB AP ERR MODIFIED 41 Message stream modified KRB AP ERR BADORDER 42 Message out of order KRB_AP_ERR_BADKEYVER 44 Specified key version not available KRB AP ERR NOKEY 45 Service key not available KRB AP ERR MUT FAIL 46 Mutual authentication failed KRB_AP_ERR_BADDIRECTION 47 Incorrect message direction Spectrum24 AP 4121 Access Point Product Reference Guide D 17 Configuring the Kerberos KSS Error Code Explanation KRB_AP_ERR_BADSEQ 49 Alternative authentication method required KRB_AP_ERR_INAPP_CKSUM 50 Incorrect sequence number in message KRB_ERR_GENERIC 60 Generic error description in le text KRB ERR FIELD TOOLONG 61 Field is too long for this implementation This error carries additional info D 6 2 Additional Kerberos Error Codes The following error codes and their explanations display on the AP Event Monitor screen if an error occurs D 18 Error Code rmation in the e data field Explanation SUCCESS 0 No error CANT _RESO LVE_KDC_NAME 1 Cannot recognize KDC name If KDC is not found by name a search begins by IP address CONNECT FAIL 2 IAP failed to connect to server check Ethernet connection READ_FAIL 3 WRITE_FAIL 4 Bad data or no
4. 1 Select the show mobile units screen from the Main Menu to display Symbol Access Point Show System Summary Show Interface Statistics Show Forwarding Counts Show Mobile Units Show Known APs Show Ethernet Statistics Show RF Statistics Show Misc Statistics Show Event History Enter Admin Mode Regular Home Agent MAIN MENU AP Installation Special Functions Se Se Se Set Se Set Se Foreign Agen System Configuration RF Configuration Access Control List Address Filtering Type Filtering SNMP Configuration Event Logging Configuration 2 Select Regular from the Show Mobile Units screen to display Symbol Access Point D AD F8 29 C9 E2 DD AD F8 18 4B AB OG aW F8 18 4A 13 DD AD F8 18 3C 85 Information CR C RELE P R11 P R11 C R11 Echo F1 Mobile Units Timed F2 Next F3 Exit ESC 3 Press TAB to highlight the MAC address of the station to ping Spectrum24 AP 4121 Access Point Product Reference Guide 137 Configuring the AP 4 Select Echo F1 to display the packet Ping setup screen Packet Ping Setup Station Address DD AD F8 18 4A 13 Number of Pings 18 Packet Length 18 Packet Data 55 Start CR Cancel ESC 5 Enter the MAC address of the station to ping 6 Enter the number of echo requests 1 to 539 length of packets in bytes 1 to 539 and data content in hex 0x00 to OxFF 7 Select start cr to begin The AP dyn
5. Key 1 0000 BODBOD BOBA BOBA BOBA BORG Key 2 DODDO BOLLLH BODO BODO BODO BODD Key 3 DODDO BOBBO BODO BODO BODO BODD Key 4 DODDO BOLLLH BODO BOBO BODO BODD NOTE Keys have WRITE ONLY access Active Key OK CR Save F1 Save All APs F2 Cancel ESC Each key has 104 bits available to the user for configuration and are displayed in two 20 bit segments and four 16 bit segments The remaining 24 IV initialization vector bits are factory set and not user configurable 1 Select the desired key and enter the new value to change the Key value 2 Verify and change the values as needed to reflect the network environment 3 Select ok or Save to register settings by writing changes to NVM Selecting save displays a confirmation prompt 4 Selectsave ALL APs Or press F2 to save the Encryption Key Maintenance information to all APs with the same Net_ID ESS This option saves the configuration changes for the current AP sends two WNMP messages to all other APs on the Known APs table to update their configuration and resets after the configuration has been modified This option is only used with the same hardware and firmware platforms 5 The system prompts Warning Update save and reset all APs in the Known AP Menu yes no Type Xe Spectrum24 AP 4121 Access Point Product Reference G uide Configuring the AP 6 Select cancel esc to disregard any changes made to this screen and return to the previous menu amp Wh
6. Optional e 2Mbps Required e 1Mbps Required open environment over 100 ft typical office or retail environment 30 to 50 ft US FCC part 15 247 Europe ETS 300 320 Japan RCR STD 33 Binary GFSK US FCC part 15 247 15 205 15 209 Europe ETS 300 320 Japan RCR STD 33 Spectrum24 AP 4121 Access Point Product Reference G uide Specifications A 3 Network Characteristics Driver Support NDIS v4 0 and v5 0 Ethernet Frame DIX Ethernet_Il and IEEE 802 3 Filtering Packet Rate 14 400 frames per second filtering and forwarding Ethernet Connection 10Base T AP 4121 model access point Serial PC AT serial port DB9 Male RS 232 using a DTE termination 19200 bps SNMP Version 1 Version 2 subset Symbol MIB 802 11 MIB and MIB II Spectrum24 AP 4121 Access Point Product Reference Guide A 3 Specifications A 4 Spectrum24 AP 4121 Access Point Product Reference G uide AppendixB Supported Modems The AP uses Hayes commands and is capable of working with various modems of 19200 baud or faster Symbol does not support modems the company has not qualified The following modems qualify to work with the AP 4121 HR access point e US Robotics Faxmodem v 90 56K e US Robotics Faxmodem v 33 6K e US Robotics Faxmodem v 34 and v 32 bis Sportster 28 8K e Diamond Supra Express 56K Spectrum24 AP 4121 Access Point Product Reference Guide B 1 Supported Modems B 2 Spectrum24 AP 4121 Access Point Product Reference Gu
7. Encrypted Pkts Rcvd The number of Encrypted packets out of the total packets transmitted Data Bytes Rcvd The total data packets received in bytes BC MC Packets Revd The broadcast multicast user data packets successfully received BC MC Bytes Rcvd The broadcast multicast user data bytes successfully received Sys Packets Rcvd The system packets successfully received SBC MC Packets Rcvd The broadcast multicast system packets successfully received Spectrum24 AP 4121 Access Point Product Reference G uide Succ Reass Packets Unsucc Reass Packets Fragments Rcvd Rcv Duplicate Pkts Undecryptable Pkts Rcv CRC Errors Rcv ICV Errors The packets successfully reassembled The packets unsuccessfully reassembled The packet fragments received The Duplicate packets received by the AP This indicates the AP sent an ACK but the MU did not receive it and transmitted the packet again The total data packets that could not be decrypted The Packets received that contained CRC Cyclic Redundancy Check errors An MU transmitted a corrupt data packet and failed to pass the CRC verification Ensure that any acknowledgment of the data packet contains the correct CRC word An incorrect CRC causes the AP to discard the data packet The Packets received containing ICV Identity Check Value errors An MU transmitted a corrupt data packet and failed to pass the ICV verification The calculated ICV value does not match with the ICV
8. Kerberos Key Width Current MUs Total Assoc System Up Time Identifies the AP name Identifies the unique 48 bit hard coded Media Access Control address Identifies the network assigned Internet Protocol address Identifies the unique 32 character alphanumeric case sensitive network identifier Identifies the direct sequence channel used by the access point The channel used is within the range required for the operating country Identifies AP country code thatin turn determines the AP direct sequence channel range Indicates if the AP is configured for Fu11 Diversity Primary Only Secondary Only OF Rx Diversity Enabled OF Disabled indicates whether or not the secret key used by the KSS and access point defined in the Configure Kerberos Authentication window is currently being used Enabled OF Disabled indicates whether or not the Kerberos encryption algorithm is being used with the access point Displays the encryption algorithm key width 4g bit OF 128 bit Currently being used by the access point Specifies the current number of associated MUs Specifies the total MU associations handled by this AP Specifies how long the system has been operational System Up Time resets to zero after 59 652 32 hours 6 8 years Spectrum24 AP 4121 Access Point Product Reference G uide AP Configuration Specifies the outcome of reading and processing the downloaded ap_cfg txt Messages displayed can be ACL amp Filte
9. PSP stations 25 TIM 26 BO OTP 16 bridge WLAP mode 7 8 85 bridging architecture 1 broadcast ESS ID 77 BSS ID 9 C carrier signal 3 configuration 39 ACL 101 address filtering 106 BC MC Q 76 beacon interval 77 broadcast ESSID 77 data transmission rate 78 dial up connection 42 55 DTIM packet frequency 76 encryption key maintenance 89 manually updating AP firmware 123 manually updating configuration 113 manually updating using TFTP 113 maximum retries 76 Mobile IP 155 MU 77 multicast mask data 77 multicast mask voice 77 Index 3 radio parameters 9 75 resetting 141 restoring 141 saving 140 Setting Logging Options 121 SNMP agent 94 special functions 140 system parameters 61 System Password Administration 73 TCP IP 39 Telnet 39 type filtering 108 UI 39 updating using Xmodem 117 wireless operation parameters 84 WLAP forward delay 80 88 WLAP hello time 80 87 WLAP manual BSS ID 80 87 WLAP Max Age 80 87 WLAP mode 79 86 WLAP priority 86 configuring ACL 101 range of MUs 101 removing allowed MUs 103 104 configuring the SNMP agent 94 access cntrl violation 96 all traps 96 authentication failure 96 cold boot 96 DHCP change 97 kerberos errors 97 radio restart 96 read write community 96 read only community 96 SNMP agent mode 96 trap hostl IP address 96 trap host2 IP address 96 WLAP connection change 97 connecting power adapter 177 coverage area 10 AP 10 Basic Service Set 9 BSS ID 9 cell 10
10. To bring up the WN MP Packet Ping Function screen press TAB to highlight the MU and select ping This allows the AP to ping an MU See section 2 15 Performing Pings on page 136 Select Timea to automatically update this display every two seconds Select Next to display the next screen 152 Spectrum24 AP 4121 Access Point Product Reference Guide Monitoring Statistics Press ESC to return to the previous menu e To bring up detailed information on an MU press TAB to highlight the MU and select Information to display Symbol Access Point Information for MU AQ F8 29 C9 E2 Interface RF Packets Sent 628 State Associated Packets Rcvd 237 Power Mode CAM Bytes Sent 899879 Station id 1 Bytes Rcvd 14388 Begin Current Assoc 16 37 51 Discard Pkts CRC a Supported Rates 1 2 5 5 amp 11 Mb s Current Xmt Rate 5 5 Mb s Last Activity 6 08 11 Priority Normal Last Data Activity 16 37 Encryption Off eyGuard in use No Refresh F1 Exit LESC Displayed information includes Interface The AP interface shows the MU connection as RF Ethernet or AP State The connection state between the AP and the MU Host indicates the unit is on the AP interface Associated indicates the current association on the radio interface Away indicates the unit is no longer associated with the AP Power Mode The MU power mode CAM PSP or N A Station ID The IEEE 802 11 specification requires that each AP assign a station ID to all as
11. 1 18 seconds RFConfig TIMInterval 16 1 255 number of beacons BCMCQMax 188 188 MaxRetriesData 15 EO 32 MaxRetriesVoice 5 7 Boe 32 MulticastMaskData BIGLGEBL MulticastMaskVoice D1005 EBS BeaconInterval 188 20 1868 AcceptBroadcastESSID Disabled Disabled Enabled MUInactivityTimeout 68 3 608 TransmitRatel Required NotUsed Optional Required TransmitRate2 Required NotUsed Optional Required TransmitRate5 5 Optional NotUsed Optional Required TransmitRatell Optional NotUsed Optional Required RTSThreshold 2347 B 2347 WLAPMode Disabled Disabled Enabled LinkRequired WLAPPriority 8008 O FREE WLAPManualBSSID 0B AG F8 08 B8 B9 Spectrum24 AP 4121 Access Point Product Reference G uide 111 Configuring the AP WLAPHel loTime WLAPMaxAge WLAPForwardDelay SharedKeyWEP WEPKeyWidt EncryptionKkeyID EncryptionKkeyl Encryptionkey2 Encryptionkey3 Encryptionkey4 eyGuardRequired ShortPreamble TxPowerControl Extended Range BlueToothCoexistence BlueToothBeaconDelay CSNMPConfig AgentMode TrapHostl TrapHost2 ReadOnlyCommunity ReadWriteCommunity AllTraps ColdBoot AuthenticationFailure RadioRestart AccessViolation MUStateChange 28 186 Disabled 1 B 9999 en 29999 J 9999 Disabled Enabled 4OBit 128Bit 1 4 18111213141516171819lalblc Handles both 4 bit 262122232425262728292a2b
12. 1 No operation Verify AP configuration through Telnet or UI Review procedures for Ethernet and serial connection of the AP Review AP firmware revisions and update procedures Verify network configuration by ensuring that there are no duplicate IP addresses Power down the device in question and ping the assigned address of the device Ensure no other device responds to that address 2 AP powered on but has no connection to the wired network Check connections for proper wiring 3 Verify network wiring and topology for proper configuration Check that the cables used have proper pinouts and connectors Verify router configuration and filtration setting Verify MU operations Confirm AP operation Confirm AP and MU Net ID ESS Spectrum24 AP 4121 Access Point Product Reference G uide 185 Hardware Installation Check that the radio driver loaded properly Check that the MU PROTO CO L INI or NET CFG file is compatible with the network operating system 4 Slow or erratic performance Check MU and RF communications range Check antenna connectors and cabling Verify that antenna diversity setting for AP is appropriate If using one antenna the setting is Primary Only if using both antennas the setting is Full Diversity in this setting the radio receives on the primary or secondary antenna and transmits on the last antenna to receive a signal or Rx Diversity in this setting the radio receives on the pri
13. CR Save F1 Save ALL APs F2 Cancel ESC Spectrum24 AP 4121 Access Point Product Reference Guide 121 Configuring the AP 122 2 Set Any Event Logging to Enab1ed to log all events Specify the events that do not require logging when disabling Any Event Logging Use SPACE BAR or LEFT RIGHT ARRO W keys to toggle between Enabled and Disabled Any Event Logs all events listed in the screen Logging Security ACL filter administrative password access Violations violations or Kerberos errors MU State Allows logging all MU state changes Changes WNMP Events WN MP events such as MUs using WNMP AP AP Msgs AP to AP communication Telnet Logins Telnet sessions for monitoring and administration System Events Internal use only Ethernet Events Events such as packet transmissions and errors Verify the values reflect the network environment Change them as needed Select ok or Save to register settings by writing changes to NVM Selecting save displays a confirmation prompt Select save ALL APs Or press F2 to save the Event Logging Configuration information to all APs with the same Net_ID ESS This option saves the configuration changes for the current AP sends two WNMP messages to all other APs on the Known APs table to update their configuration and resets once modified Users can perform this option only among the same hardware platforms and firmware version The system prompts Warning Update save and reset all
14. MU 10 WLAP mode 8 customer support C 1 additional information C 2 international contacts C 2 North American contacts C 1 D data decryption 26 types of authentication 27 WEP algorithm 26 data encryption 26 AP 27 types of authentication 27 WEP algorithm 26 DHCP support 16 acl file 17 configuration file 17 essid 17 firmware and html file 17 kdc name 17 kerberos enable 17 kss name 17 kss port number 17 digital data 3 direct sequence spread spectrum 3 disallowed address 15 access control 15 ACL15 Index 4 Spectrum24 AP 4121 Access Point Product Reference Guide AP 15 disallowed MUs 107 removal 107 DTIM AP 11 association process 11 root AP 11 E electromagnetic waves 3 encryption 26 128 Bit 92 40 Bit 90 administration 67 environment 3 ESSID 77 Ethernet interface 17 Ethernet statistics 159 Ethernet wired LAN 1 F features 2 10 100Base T 3 10 100baseT Ethernet port interface 2 antenna 3 Auto Channel Select 3 BO OTP support 2 builtin diagnostics 2 builtin dual antenna assembly 2 DHCP support 2 DNS support 2 increased MIB support 2 Kerberos security 3 PC AT serial port interface 2 power supply IEC connector 2 short RF preamble 2 SNMP support 2 Spectrum24 AP 4121 Access Point Product Reference G uide support for up to 127 MUs 2 tx power control 3 upgradable firmware 2 Web browser user interface 2 wireless AP 2 wireless MAC interface 2 filtering ACL15 introduction 15 firmware 12
15. Management Information Base The SNMP agent supports read write read only or disabled modes The AP supports traps that return to the SNMP manager when certain events occur The Symbol MIB is available on the Spectrum24 High Rate 11 Mbps Wireless LAN Software CDROM or from http www symbol com services downloads download_spec24 html Disable Kerberos Encryption to use SNMP to configure access point settings Increased MIB Support The MIB Management Information Base has ten categories defining what the management station needs to understand and which objects the station manages Spectrum24 AP 4121 Access Point Product Reference G uide Introduction Using the UI The UI User Interface is a maintenance tool integrated into the AP It provides statistical displays AP configuration options and firmware upgrades Access to the UI requires one of the following Telnet Client Access to the AP built in Telnet server from any interface including remote Ethernet connections See section 2 1 1 Using Telnet on page 39 Direct Serial The AP acts as a DTE device to connect directly to Connection another DTE device with a null modem serial cable The direct serial access method requires a communication program with ANSI emulation See section 2 1 2 Using a Direct Serial Connection on page 41 Dial Up Access The dial up access method requires a communication program with ANSI emulation on the remote terminal or PC The
16. site survey 174 antenna placement 175 AP 65 10 100Base T 3 adding filter types 108 antenna 3 Auto Channel Select 3 Bridge Protocol Data Unit 11 configuration 113 DTIM 11 IEEE 802 1d Spanning Tree support 12 kerberos security 3 manually updating configuration 113 radio parameters 9 removing allowed MUs 104 removing disallowed MUs 107 removing filter types 108 repeater 8 TIM 11 tx power control 3 type filtering 108 updating using Xmodem 117 wireless operation parameters 84 WLAP mode 7 8 11 85 148 WLAP mode LED display 183 removing disallowed MUs 107 Index 2 Spectrum24 AP 4121 Access Point Product Reference G uide WLAP priority value 11 WNMP function 9 AP installation 56 additional DNS 59 additional gateways 58 60 antenna selection 59 country config 58 dhcp disabled 60 dhcp bootp enabled 60 dhcp bootp options 60 DNS IP address 59 enable bootp only 60 enable only dhcp 60 gateway IP address 58 IP address 58 NetID 59 Net_ID ESS 59 subnet mask 59 unit name 58 AP AP State Xchg 65 association process 20 beacon 25 Bridge Protocol Data Unit 11 CCA 21 direct sequence systems 19 DTIM 11 25 IEEE 802 1d Spanning Tree support 12 MU 20 MU ACK 21 roaming 20 root AP 11 RSSI 22 scanning 21 TIM 11 WLAP mode 11 WLAP priority value 11 Spectrum24 AP 4121 Access Point Product Reference Guide auto fallback to wireless mode introduction 15 B Basic Service Set 9 BC MC Q configuration 76 beacon 25 CAM stations 25
17. the AP listens for information e LRN the AP learns the information FWD the AP forwards data e BLK the AP blocks transmission An abstract unit added to the Root Path Cost field in the Config BPDU received on this interface The unit represents a hop on the path to the Root AP An ID designated by the Root AP APs in WLAP mode negotiate the position of Root AP at power up The AP with the lowest Root ID path and WLAP ID becomes the Root AP The Root ID and the WLAP ID are 16 digit numbers The first 4 digits represent the Priority value and the remaining 12 digits represent the MAC address of the AP A path cost designated by the Root AP A WLAP ID assigned by the Root AP An Itf ID assigned by the Root AP Select refresh at the status display to update the values manually Select Timed to automatically update this display every two seconds Press ESC to return to the previous menu 166 Spectrum24 AP 4121 Access Point Product Reference G uide Monitoring Statistics 3 9 Miscellaneous Statistics The AP keeps statistics on WNMP and SNMP packets filtering and Mobile IP The Miscellaneous Statistics screen shows grouped statistics e Select Show Misc Statistics from the Main Menu to display Symbol Access Point Misc System Statistics WNMP Mobile IP Echos 5 Agent Ad Sent 5 Pings 5 Reg Request Rcvd a Passthrough Echos a Reg Reply Sent a SNMP Requests amp raps 7 Filters ACL Violations 5 Address D Auto Cha
18. 021 641 5 168 149 5 262 627 5 324 924 5 412 198 5 479 002 5 581 070 5 693 929 5 763 863 5 828 050 5 917 173 6 031 830 6 092 725 6 172 478 6 247 647 6 340 115 D383 124 D430 159 4 806 742 5 029 183 5 180 904 5 262 628 5 337 361 5 418 812 5 479 441 5 589 679 5 698 835 5 767 500 5 848 064 5 920 059 6 036 098 6 101 483 6 176 428 6 308 061 6 340 119 D391 250 D431 562 4 816 660 5 047 617 5 216 232 5 266 787 5 367 151 5 420 411 5 504 322 5 589 680 5 705 800 5 789 728 5 850 078 5 923 025 6 047 892 6 102 293 6 178 426 6 250 551 6 348 773 D405 077 D436 104 4 845 350 5 103 461 5 229 591 5 278 398 5 373 148 5 436 440 5 519 577 5 608 202 5 714 746 5 789 731 5 861 615 5 929 420 6 050 491 6 104 620 6 186 400 6 295 031 D305 885 D406 581 Invention No 55 358 62 539 69 060 69 187 Taiwan No 1 601 796 1 907 875 1 955 269 Japan European Patent 367 299 414 281 367 300 367 298 UK 2 072 832 France 81 03938 Italy 1 138 713 Symbol Technologies Inc One Symbol Plaza Holtsville N Y 11742 1300 Telephone 800 SCAN 234 631 738 2400 TLX 6711519 www symbol com Spectrum24 AP 4121 Access Point Product Reference Guide 3 02 About This Document Reference Documents This reference guide refers to the following documents Part Number Document Title 72E 51753 01 Wireless LAN Adapter 4100 Series PC Card amp PC
19. Access Point Product Reference Guide 3 Introduction Spectrum24 devices like other Ethernet devices have unique hardware encoded Media Access Control MAC or IEEE addresses MAC addresses determine the device sending or receiving data A MAC address is a 48 bit number written as six hexadecimal bytes separated by colons For example OO AG F8 24 9A C8 1 2 1 S24 Network Topology The variations possible in Spectrum24 network topologies depend on the following factors e the AP function in the network the data transfer rate e the wireless AP WLAP interface a A WLAP communicates only with its root AP through the wireless interface Moha 4 Spectrum24 AP 4121 Access Point Product Reference G uide Introduction Select from the following topologies e A single AP used without the wired network provides a single cell wireless network for peer to peer MUs e A single AP can bridge the Ethernet and radio networks Spectrum24 AP 4121 Access Point Product Reference Guide 5 Introduction e Multiple APs can coexist as separate individual networks at the same site without interference using different N et_IDs The N et_ID ESS can be thought of as a Wireless LAN Network Identifier These separate Wireless LANs may be configured to use different channel assignments to avoid RF interference e Multiple APs wired together provide a network with better coverage area and performance
20. Aiter Filename s HELP URL TFTP Server and press ENTER o9 Type the firmware filename in the Download Filename field dsap_fw bin Change the filename only if the user or system network administrator requires a different name The default firmware filename is dsap_fw bin and the default HTML filename is dsap_htm bin for the 4121 model access point For the 4121 AP ensure the firmware filename is dsap_fw bin and the HTML filename is dsap_htm bin unless the user changed the filename Verify the accuracy of the path for the filename See step one Spectrum24 AP 4121 Access Point Product Reference G uide 9 Type the TFTP Server IP address in the TFTP Server field 10 Press ENTER 11 Select save cri to save settings 12 Select special Functions from the Main Menu 13 Press F3 to view the Firmware Update Menu Symbol Access Point Firmware Update Menu Use TFTP to update Access Point s Firmware HTML file Firmware and HTML File Config Use XMODEM to update Access Point s Firmware HTML file Firmware and HTML File Config Use TFTP to update ALL Access Points Firmware HTML file Alter Filename s HELP URL TFTP Server Firmware Filename dsap_fw bin HTML Filename dsap_htm bin Config Filename ap_cfg txt ACL Filename ap_acl txt HELP URL TFTP Server 111 111 12 137 Previous F4 Exit LESC 14 Select use TFTP to update ALL Access Point s and press EN TER Are you sure yes no IS displayed Type Ya
21. From the remote terminal start the communication program 5 Select the correct serial port along with the following parameters emulation ANSI baud rate 19200 bps data bits 8 stop bits 1 parity none flow control none 6 Dial out to the AP with the correct telephone number No password is required Spectrum24 AP 4121 Access Point Product Reference Guide 55 Configuring the AP 2 2 4 23 56 7 Press ESC to refresh the display The AP displays the Main Menu Symbol Access Point Ow Ow Ow Ow Ow Ow Ow Ow Uy an A A A A A A Ow System Summary Interface Statistics Forwarding Counts Mobile Units Known APs Ethernet Statistics RF Statistics Misc Statistics Event History Enter Admin Mode MAIN MENU AP Installation Special Functions Set System Configuration Set RF Configuration Set Access Control List Set Address Filtering Set Type Filtering Set SNMP Configuration Set Event Logging Configuration Navigating the UI Using a Web Browser Refer to the online help file for information on Web Browser navigation and basic functionality For file download instructions and the associated file s refer to the Web page http www symbol com services downloads and select Spectrum24 11 Mbps DS Firmware Software Drivers Tools and Access Point Installation The AP UI includes an AP Installation screen to set basic parameters for a Spectrum24 network These paramet
22. M ode stations leave their radios on continuously to hear every beacon and message transmitted These systems operate without any adjustments by the AP A beacon is a uniframe system packet broadcast by the AP to keep the network synchronized A beacon includes the Net_ID ESS the AP address the Broadcast destination addresses a time stamp a DTIM Delivery Traffic Indication Message and the TIM Traffic Indication Map PSP Power Save Polling stations power off their radios for short periods When a Spectrum24 MU in PSP mode associates with an AP it notifies the AP of its activity status The Spectrum24 AP 4121 HR access point responds by buffering packets received for the MU The Spectrum24 adapters use a PSP performance index from 1 to 5 where 1 provides the quickest response time and 5 provides the most efficient power consumption The performance index determines how long the adapter stays in CAM after transmit or receive activity Regardless of the performance index used adapters switch to CAM for data reception transmission The awake interval in PSP performance index 1 is long enough to allow for round trip packet response times The packet response time in PSP performance index 5 is only 25 msec the adapter goes back to sleep and requires another wake up period to receive data When the MU wakes up and sees its bit set in the TIM itissues a short frame to the AP for the packets stored The AP sends them to the MU and the MU is
23. MU association requests Spectrum24 AP 4121 Access Point Product Reference Guide 13 Introduction 1 3 1 14 Motum MAC Layer Bridging The AP listens to all packets on all interfaces and builds an address database using the unique IEEE 48 bit address MAC address An address in the database includes the interface media that the device uses to associates with the AP The AP uses the database to forward packets from one interface to another The bridge forwards packets addressed to unknown systems to the Default Interface Ethernet Ethernet The AP internal stack interface handles all messages directed to the AP Each AP stores information on destinations and their interfaces to facilitate forwarding When a user sends an ARP Address Resolution Protocol request packet the AP forwards it over all enabled interfaces Ethernet radio and WLAP except over the interface the ARP request packet was received On receiving the ARP response packet the AP database keeps a record of the destination address along with the receiving interface With this information the AP forwards any directed packet to the correct destination The AP forwards packets for unknown destinations to the Ethernet interface Spectrum24 AP 4121 Access Point Product Reference G uide Introduction amp Transmitted ARP request packets echo back to other MUs Mohs The AP removes from its database the destination or interface information that is
24. Main Menu select special Functions and press EN TER Symbol Access Point Clear All Statistics Clear MU Table Clear ACL Clear Address Filters Clear Type Filters Load ACL from File via TF Load ACL from File via XM Load ACL from MU List Reset AP Configure Network Time Special Functions Menu Restore Factory Config Save Configuration Save Config to All APs Firmware Update Menu F3 TP ODEM 10 Press f3 to view the Firmware Update Menu Symbol Access Poin Firmware Update Menu Use TFTP to update Access Point s Firmware HTML file Use XMODEM to update Access Point s Firmware HTML file Use TFTP to update ALL Access Points Firmware HTML file Alter Filename s HELP URL TFTP Server Firmware Filename dsap_fw bin HTML Filename dsap_htm bin Config Filename ap_cfg txt ACL Filename HELP URL TFTP Server ITT TIT 125137 ap_acl txt Previous F4 11 Under the function heading use xMODEM to Update Access Points select Firmware and HTML File 12 Press EN TER Spectrum24 AP 4121 Access Point Product Reference G uide Firmware and HTML File Firmware and HTML File Config Config Exit LESC Configuring the AP gh Selecting Firmware and HTML File downloads the files separately Ensure both Mote files are located in the same directory before the download begins 13 At the confirmation prompt press y to display Downloading firmware using XMODEM Send fi
25. Root AP channel DTIM Delivery Traffic Indication M essage and TIM Traffic Indication Map interval Q0 A0 F8 00 21 96 T GW A0 F8 00 25 6B Ethernet II In this configuration the WLAP Priority value is the default 8a Hex On concatenating this value to the MAC addresses of the APs AP A on Ethernet has the lowest WLAP ID with 8 228A8F89181A making it the Root AP AP C uses the APA channel DTIM and TIM interval Spectrum24 AP 4121 Access Point Product Reference Guide 11 Introduction If AP D on Ethernet II has data for a device on Ethernet it requires a bridge or a repeater In this configuration AP C functions as a repeater To ensure transmission to devices on Ethernet AP D has to use the AP A channel DTIM and TIM interval The AP with lowest WLAP priority value is the Root AP To manually designate AP B as the Root AP assign it a WLAP Priority value less than 8gg Hex See section 2 5 Configuring Radio Parameters on page 75 IEEE 802 1d Spanning Tree Support This protocol creates a loop free topography with exactly O NE path between every device and LAN This is the shortest path from the Root AP to each WLAP and LAN If the connection between a WLAP and LAN fails a new route is calculated and added to the tree All packet forwarding follows the spanning tree path determined APs in a network have to choose one AP as the Root AP 1 2 3 Site Topography 12 For optimal performance locate MUs and APs aw
26. WLAPs 88 Spectrum24 AP 4121 Access Point Product Reference G uide Configuring the AP 2 5 2 WEP Encryption Configuration The Encryption Key Maintenance screens allow the user to configure the encryption keys used for the site network The WEP Algorithm used determines which encryption Key screen displays To enable the O pen System option select Disabled for WEP privacy on the RF Configuration screen This table shows the AP association capability with the selected WEP Algorithm AP Selected WEP MU Selected WEP Association Status Algorithm Algorithm O pen disable Open Associated O pen disable 40 No Association O pen disable 128 No Association 40 Open No Association 40 40 Associated 40 128 Associated but cannot transmit data 128 Open No Association 128 40 Associated but cannot transmit data 128 128 Associated Each 40 bit encryption key is a subset of the respective 128 bit encryption key The first 40 bits of each encryption key is the same for the respective 40 bit and 128 bit encryption keys When a 40 bit encryption key is changed the first 40 bits of the respective 128 bit key is also changed Consequently when a 128 bit encryption key is changed the first 40 bits of the 40 bit encryption key is changed Moreover configuring the encryption Keys using the SNMP Trap Manager overrides the Key value s for the AP s accessed by the SNMP Trap Manager Symbol provides a total of four Encryption Keys Each
27. between the two WLAPs The recommended value is a multiple of the WLAP Hello Time The default is 188 seconds The WLAP Max Age of the Root AP overwrites the WLAP Max Age of designated WLAPs Allowable WLAP Mobile Unit aging timeout in minutes The time out limit is from 1 to 86400 minutes Default is 24g minutes Enabled OF Disabled indicates whether or not the secret key used by the KSS and access point defined in the Configure Kerberos Authentication window is currently being used Displays the encryption algorithm key width 49 bit Or 128 bit Currently being used by the access point If set to Yes only MUs using MU firmware 2 7 or higher or 3 7 MU firmware or higher are able to associate KeyG uard is supported only when 128 bit WEP is enabled If set to No any MU can associate however ifan MU is KeyGuard capable KeyG uard is used for that MU Allows the user to change the active Key number Admin privileges are required to make changes to this parameter The default key ID is 1 Reset the AP for the new key value to become the active key Allows the user to create or change the values for each encryption key Admin privileges are required to make changes to this parameter Spectrum24 AP 4121 Access Point Product Reference Guide 81 Configuring the AP 82 BlueTooth Coexistence BlueTooth Beacon Delay Short RF Preamble Allows users the ability to reserve a portion of the access points transmission bandwidth
28. data received from KDC Verify KDC enabled and setup correctly Failed writing Kerberos data to the KDC Verify the KDC is using the correct name lor IP address EXCEED_RETRY_LIMIT 6 The AP reached its retry limit in attempting to contact the KDC The APs waits for 10 minutes and attempts to contact the KDC again Verify the KDC is using the correct name or IP address Spectrum24 AP 4121 Access Point Product Reference G uide Configuring the Kerberos KSS Error Code Explanation OBTAIN _PDATA_FAIL 7 AP failed to obtain pre authentication data Verify the KDC is using the correct name or IP address ENCODE AS REQ FAIL 8 The access point was unable to send an AS request DECODE_REPLY_FAIL 9 The access point was unable to decode a replay from the KDC Check the KDC setup and verify the KDC is using the correct name or IP address PREAUTH_REQUIRED 10 The KDC indicates preauthorization is required Turn off preauthorization on the KDC ERRO R_REPLY 11 Improper setup on either data on AP or KDC An example could be the wrong Realm or User Name on the KDC or AP DECODE AS REP FAIL 12 Problem decoding AS reply from KDC Check KDC setup and verify the KDC is using the correct name or IP address WRONGTYPE_IN_ASREP 13 Problem decoding AS reply from KDC Check KDC setup and verify the KDC is using the correct name or IP address PROCESS PDATA FAIL 14 Access
29. information http www symbol com services howto howto_contact_us html C 3 Web Support Sites MySymbolCare http www symbol com services msc Symbol Services Homepage http symbol com services Symbol Software Updates http symbol com service downloads Symbol Developer Program http software symbol com devzone Symbol Knowledge Base http kb symbol com C 4 Additional Information O btain additional information by contacting Symbol at e 1 800 722 6234 inside North America e 1 631 738 5200 in outside North America htto www symbol com C 2 Spectrum24 AP 4121 Access Point Product Reference Guide Appendixd Configuring the Kerberos KSS The Kerberos Setup Service KSS is an optional program running on the Key Distribution Center KDC server The KSS can be used optionally to administer Spectrum24 access points authorized on the network For example an AP on the Access Control List ACL is lost or stolen The KSS marks the AP using the MAC address of the AP as not authorized and notifies the administrator if the missing AP appears elsewhere on the network attempting authentication All clients MUs KDC and services APs participating in the Kerberos authentication system are required to have their internal clocks synchronized within a specified maximum amount of time known as clock skew The KSS uses Network Time Protocol NTP or the system clock on the Kerberos server to provide clock synchronization
30. key enables encryption between the AP and an associated MU with the same encryption Key and Key value Spectrum24 AP 4121 Access Point Product Reference Guide 89 Configuring the AP 90 Mote Two screens are available one for 40 bit encryption and one for 128 bit encryption Considerable care is required when assigning keys Keys have to be in the same order with the same value per key for the AP and MU to authenticate data transmission using encryption Example An AP uses Key 1 with a value of 1911121314 The associated MU requires the same Key 1 to have the value of 1211121314 To access the Encryption Key Maintenance screen determined by the WEP algorithm chosen select Encryption Key Maintenance from the RF Configuration Menu Key values are displayed in plain text while being entered After saving the keys are displayed as all zeros default display is all zeros Keys are saved only if they are not all zeros 40 Bit Encryption If 40 bit encryption is the selected WEP Algorithm this screen is displayed The KeyG uard security option does not support 40 bit WEP encryption Symbol Access Point Encryption Key Maintenance Key 1 BOBBO BOBDA Key 2 BOOOD BOOBA Key 3 DOBOD BOOBA Key 4 DOBOD BOOBA NOTE Keys have WRITE ONLY access Active Key OK CR Save F1 Save All APs F2 Cancel ESC Spectrum24 AP 4121 Access Point Product Reference G uide Configuring the AP Each key has 40 bits avai
31. mobility agents See section 1 3 7 Mobile IP on page 22 e Select Home Agent from the Show Mobile Units prompt to display Symbol Access Point Home Agent Table Mobile Unit Foreign Agent Mobile Unit Foreign Agent 157 235 95 184 157 235 96 141 157 235 95 111 157 235 97 157 157 235 95 125 157 235 96 141 157 235 95 34 157 235 93 245 Refresh F1 Timed F2 Next F3 Exit LESC e Select Foreign Agent from the Show Mobile Units prompt to display Symbol Access Point Foreign Agent Table Mobile Unit Home Agent Mobile Unit Home Agent 157 235 95 184 157 235 95 188 157 235 95 125 157 235 95 188 157 235 97 114 157 235 97 27 Refresh F1 Timed F2 Next F3 Exit ESC Spectrum24 AP 4121 Access Point Product Reference G uide 155 Monitoring Statistics 3 6 Known APs The AP displays a list of the known APs derived from AP to AP communication The list includes the MAC and IP addresses and configuration information for each AP The first AP on the list provides the information The AP recognizes other APs listed in subsequent lines A broadcast message to APs every 12 seconds determines this list amp The Save a11 APs function from the Special Functions Menu updates all AP Heba firmware and HTML files shown in the Known APs menu to all APs with the same Net_ID ESS Users can perform this option only among the same hardware platforms and firmware versions e Select Known APs from the Main Menu to display Symbol Access P
32. networked server The same server as the KDC server can be used From the Windows Control Panel click Add Remove Programs Click Add Remove Windows Components double click Networking Services and select Simple TCP IP Services Click OK and Next The Win2k Server CD is required to add this component Create user accounts for the access points and Kerberos Clients The username for the access point user account should be the same as the access point ESSID Therefore only one AP user account for each WLAN or ESSID is required After creating each account right click on an account and click properties Click the Account tab Select Do not require Kerberos Pre Authentication Spectrum24 AP 4121 Access Point Product Reference G uide Configuring the Kerberos KSS The access point can now be configured for Kerberos support via the Serial or Telnet interfaces a The Kerberos Configuration parameters have been moved to the Special Heba Functions screen in the Serial and Telnet UI 6 From the Configure Kerberos screen set Kerberos to Enabled 7 Setthe KDC Server Name IP to the IP Address where the KDC is setup 8 Optional Set the Backup KDC Name IP to the Name or the IP Address of the backup or redundant KDC if any 9 Setthe Realm Name to the Domain Name of the Win2k Server used as the KDC 10 Set the User ID and Password fields exactly the same as the Username and Password set in Active Directory for the AP user accou
33. not used for a specified time The AP refreshes its database when it transmits or receives data from these destinations and interfaces Filtering and Access Control The AP provides facilities to limit the MUs that associate with it and the data packets that can forward through it Filters provide network security and improve performance by eliminating broadcast multicast packets from the radio network The ACL Access Control List contains MAC addresses for MUs allowed to associate with the AP This provides security by preventing unauthorized access The AP uses a disallowed address list of destinations This feature prevents the AP from communicating with specified destinations This can include network devices that do not require communication with the AP or its MUs Depending on the setting the AP can keep a list of frame types that it forwards or discards The Type Filtering option prevents specific frames indicated by the 16 bit DIX Ethernet Type field from being processed by the AP These include certain broadcast frames from devices that consume bandwidth but are unnecessary to the wireless LAN Filtering out frames can also improve performance 1 3 2 Auto Fallback to Wireless Mode The AP supports an Auto Fallback to wireless mode when the hardware Ethernet connection fails or becomes broken The Auto Fallback function operates only with an AP in WLAP mode and connected to the Ethernet network The AP resets itself and during
34. point did not process pre authentication data Check KDC and verify the KDC is using the correct name or IP address DECRYPT_AS REP FAIL 15 Error decrypting AS reply from KDC Check KDC setup and password between AP and KDC an incorrect password at either end could account for error VERIFY_AS REP FAIL 16 Problem verifying AS reply from KDC Check KDC setup Spectrum24 AP 4121 Access Point Product Reference Guide D 19 Configuring the Kerberos KSS Error Code Explanation STASH_AS REP FAIL 17 Problem storing reply in memory reply data out of bounds Check KDC GEN BCMC KEY FAIL 24 Failure generating BC MC key DECODE_PREAUTH_FAIL 25 Problem decoding pre authorization data Check KDC setup KRB_ERR_KDC_OPEN 80 Unable to proxy to KDC on behalf of MU Check KDC KRB_ERR_KDC_WRITE 81 Unable to proxy to KDC on behalf of MU Check KDC KRB_ERR_KDC_READ 82 Unable to proxy to KDC on behalf of MU Check KDC KRB_ERR_ NOBUF 83 A warning that access point buffers are full No I O can take place until memory is freed KRB_ERR_IS AP_REQ 84 Access point request not recognized or invalid KRB_ERR_DECODE_AP_REQ 85 Error decoding session ticket from MU KRB_ERR_RD_REQ_DECODED Access point request decoded but 86 processing failed KRB_ERR ENCODE _AP_ REP __ Error encoding access point request to ENC 87 MU This is an access point internal error KRB_ERR ENCRYPT HELPER 8
35. points have been granted access Disable O pen Enrollment to prevent foreign access points from getting information from the KSS O nly APs that were successful gaining access to Mote the KSS during Open Enrollment are given Kerberos authentication information after it is disabled Spectrum24 AP 4121 Access Point Product Reference Guide D 11 Configuring the Kerberos KSS D 4 Manually Creating an Access Point Setup Account D 12 Mota Moba Manually create an AP Setup Account for the AP and create a Kerberos account with the KDC The AP Setup Account database stores validation information for an AP Manually create an access point setup account only if the user does not want to use the O pen Enrollment option When O pen Enrollment is disabled and an access point is manually added to a Kerberos account entry enter the ESSID Password KDC Name Realm Domain and KDC IP Address values The ESSID and password are required to match the AP Kerberos configuration If either value is incorrect the AP cannot communicate with the KSS no error messages are displayed Spectrum24 AP 4121 Access Point Product Reference G uide Configuring the Kerberos KSS To create an access point setup account 1 From the Edit menu select AP Setup ACL Earp Setup Account Database mj E E Pee 2 Enter the AP MAC Address as a Primary Key in the AP Setup Account Database dialog box 3 Enter the ESSID The ESSID is us
36. process for an MU is similar to an AP authentication The difference being that the MU client sends all requests through the AP with one additional step The additional step is sending the KDC a TGS_REQ for RF services The TGS_REQ message is encrypted with the encryption key that the MU received during the first part of the authentication process The ticket the MU received in the AS_REP includes the ESSID of the AP whose RF services it wishes to access The AP proxies forwards the MU request to the KDC The KDC verifies the request and responds with a TGS REP sent to the MU through the AP which proxies the reply to the MU The AP proxy does not read the MU TGS REQ but replaces the header information with an IP header the AP IP address Conversely the AP replaces the TGS_REP header 30 Spectrum24 AP 4121 Access Point Product Reference G uide Introduction with a WNMP header and forwards the response to the MU Once the MU has verified the message it prepares an Application Request AP_REQ for the AP This AP_REQ contains the ticket the KDC has sent to the MU The AP decrypts the ticket If the ticket is valid the AP responds with an AP_REP the AP generates and includes128 bit WEP encryption key in the reply and permits the MU to bridge data amp The KDC cannot authenticate an MU with administrator as the username Mota Kerberos Server Kerberos Kerberos Setup Service Ticket Granting Service TGS Kerberos Authenticatio
37. the association process and minimizes confusion when more than two WLAPs try to associate with each other Sets the time lapse in seconds between Config BPDU packets sent to the Root AP by a designated WLAP The default is 28 seconds If the Root AP fails to hear from the designated WLAP within the WLAP Max Age time it removes the designated WLAP from its interface table The WLAP Hello Time of the Root AP overwrites the WLAP Hello Time of designated WLAPs The WLAP Hello Time does not refer to the time lapse between beacons sent by the Root AP If a designated WLAP fails to receive a beacon it knows that its Root AP has lost the Root status Specifies the time in seconds to prevent an AP from forwarding data packets to and from an interface during initialization The WLAPs involved and the wireless operation state see section 3 8 Radio Statistics on page 161 affect the WLAP Forward Delay time This delay ensures that all WLAP nodes are heard The default is 5 seconds per wireless operation state The WLAP Forward Delay of the Root AP overwrites the WLAP Forward Delay of designated WLAPs Spectrum24 AP 4121 Access Point Product Reference G uide WLAP Max Age WLAP MU Table Aging Time Shared Key Key Width KeyG uard Required Encryption Key ID Encryption Key Maintenance Configuring the AP Defines the time interval in seconds before discarding aged configuration messages This causes a disconnection
38. try to associate with each other WLAP Hello Time Sets the time lapse in seconds between Config BPDU packets sent to the Root AP bya designated WLAP The default is 24 seconds If the Root AP fails to hear from the designated WLAP within the WLAP Max Age time it removes the designated WLAP from its interface table The WLAP Hello Time of the Root AP overwrites the WLAP Hello Time of designated WLAPs The WLAP Hello Time does not refer to the time lapse between beacons sent by the Root AP Ifa designated WLAP fails to receive a beacon it knows that its Root AP has lost the Root status WLAP Max Age Defines time in seconds before discarding aged configuration messages This causes a disconnection between the two WLAPs The recommended value is a multiple of the WLAP Hello Time The default is 19 seconds The WLAP Max Age of the Root AP overwrites the WLAP Max Age of designated WLAPs Spectrum24 AP 4121 Access Point Product Reference Guide 87 Configuring the AP WLAP Forward Specifies the time in seconds to prevent an AP Delay from forwarding data packets to and from an interface during initialization The WLAPs involved and the wireless operation state affect the WLAP Forward Delay time see section 3 8 Radio Statistics on page 161 This delay ensures all WLAP nodes are heard The default is 5 seconds per wireless operation state The WLAP Forward Delay of the Root AP overwrites the WLAP Forward Delay of designated
39. uide Configuring the AP Tx Power Control Allows the system administrator to reduce the coverage area to facilitate greater AP density resulting in greater wireless network capacity Available settings are Fu11 default 3am 15mW 5mW and im These values are approximate 3 Verify the values set to reflect the network environment Change them as needed 4 Select ox or Save to register settings by writing changes to NVM Selecting save displays a confirmation prompt 5 Select save ALL APs Or press F2 to save the RF Configuration information to all APs with the same Net_ID ESS This option saves the configuration changes for the current AP sends two WNMP messages to all other APs on the Known APs table to update their configuration and resets after the configuration has been modified Users can perform this option only among the same hardware platforms and firmware version 6 The system prompts Warning Update save and reset all APs in the Known AP Menu yes no Type Ne 7 Select cancel esc to disregard any changes made to this screen and return to the previous menu Spectrum24 AP 4121 Access Point Product Reference Guide 83 Configuring the AP 2 5 1 84 Wireless O peration Parameters The AP supports up to four WLAP interfaces Symbol recommends using one WLAP as an interface on high traffic networks and no more than two WLAPs for low traffic networks Excessive channel contention causes the WLAP to miss beacons f
40. value in the received packet Select refresh at the status display to update the values manually Select Timed to automatically update this display every two seconds Select wae to display the wap RF statistics page Select Link Test to display a signal strength graph The AP sends WNMP packets once per second the graph displays the signal strength of each reply the received packet TX rate and the number of retries required This feature is useful for testing high gain WLAN bridge installations and MU throughput Press ESC to return to the previous menu Spectrum24 AP 4121 Access Point Product Reference Guide 163 Monitoring Statistics e To display the WLAP RF Statistics screen select wLAP F31 Symbol Access Point WLAP RF Statistics Current WLAP Itf J Root Interface 1 Root Priority 1808 hex Current State Functional Root MAC Addr DD AD F8 73 51 F2 Priority 8888 hex Root Path Cost 1 Seog pa en ee Wireless AP Interface Table Itf WLAP Itf Itf Path Designated Designated ID MAC Addr State Cost Root ID Cost WLAP ID 8001 O0 A8 F8 8A 38 77 FWD 1 10000GawF88a3077 8 a f88a3 77 8001 8002 B0 00 08 00 08 88 DIS 1 8000GGawF88b7221 8 a f88b7221 8 2 8003 BB 00 08 00 08 88 DIS 1 80000GawF88b7221 8 a f88b7221 8003 8004 BB DB DB BO B0 0 DIS 1 8 a f88b7221 BWGLLGaWF88b7221 8 4 Refresh F1 Timed F2 Previous F4 Exit CESC 164 Spectrum24 AP 4121 Ac
41. versions There are three mutually exclusive modes used by the AP to control association Disabled Allowed and Disallowed Access __AddressFiltering Access Control List Results Control List Disabled The presence or The presence or No Filtering All MAC absence of MAC absence of MAC addresses are allowed to addresses does addresses does not associate not affect the affect the results results Allowed The presence or MAC addresses Only MAC addresses in absence of MAC present the Access Control list are addresses does allowed to associate not affect the results Disallowed MAC addresses The presence or Only MAC addresses present absence of MAC NOT in the Address addresses does not Filtering list are allowed to affect the results associate Allowed The presence or Empty No Associations absence of MAC addresses does not affect the results Disallowed Empty The presence or No Filtering All MAC absence of MAC addresses are allowed to addresses does not associate affect the results Spectrum24 AP 4121 Access Point Product Reference G uide Configuring the AP 2 7 1 Configuring the ACL The ACL supports adding MU entries by individual MAC address or bya range of MAC addresses 1 Select the Set Access Control List option from the Main Menu to display Address Type range individual 2 Use the UP DOWN ARRO W keys to toggle between range and individual 2 7 2 Range of MUs To select a
42. when using the same Net_IDs 6 Spectrum24 AP 4121 Access Point Product Reference G uide Introduction In WLAP mode a wireless AP to AP connection functions e asa bridge to connect two Ethernet networks Spectrum24 AP 4121 Access Point Product Reference Guide 7 Introduction In WLAP mode APs and MUs are required to have the same Preamble Mote settings to interoperate asa repeater to extend coverage area without additional network cabling When using a wireless AP to AP connection use the optimal antenna Heba configuration for the site For example use a directional antenna when establishing a dedicated wireless bridge or repeater Each wireless AP can have connections with up to four other wireless APs Spectrum24 AP 4121 Access Point Product Reference G uide Introduction Using more than two WLAPs to establish a connection slows network performance for all topologies To increase WLAP performance disable WNMP Functions and AP AP State Xchg parameters under the Set System Configuration screen To setup an AP for wireless operation automatically select the Enabl ed option for the WLAP Mode parameter To set these values see section 2 5 Configuring Radio Parameters on page 75 amp The WLAP initialization process length depends on the time specified in Moba the WLAP Forward Delay field See section 2 5 Configuring Radio Parameters on page 75
43. 2c and 128 bit 383132333435 3637 38393a3b3c 404142434445464748494a4b4c No Enabled Full 5 4 46 ReadWrite 157 235 181 181 157 235 181 182 public admin Enabled TrapHost20nly TrapHostl0nly TrapHost20nly AllTrapHosts TrapHostlOnly No Yes Disabled Enabled Full 3 mW 15mW 5mW 1mW B 58 refer to manual B 48 Disable ReadOnly ReadWrite ip address or name ip address or name up to 31 chars up to 13 chars Disabled Enabled Disabled rapHostlOnly TrapHost20nly All TrapHosts Disabled TrapHostlonly TrapHost20nly All TrapHosts Disabled TrapHostlonly TrapHost20nly All TrapHosts Disabled TrapHostl0nly TrapHost20nly All TrapHosts Disabled TrapHostlonly TrapHost20nly 112 Spectrum24 AP 4121 Access Point Product Reference G uide Configuring the AP AllTrapHosts WLAPConnectionChange TrapHost20nly Disabled TrapHostlonly TrapHost20nly AllTrapHosts DHCPChange AllTrapHosts Disabled TrapHostlOnly TrapHost20nly All TrapHosts ServerAuthError TrapHost20nly Disabled TrapHostlOnly TrapHost20nly All TrapHosts CEventLogConfig AnyEventLogging Enabled Disabled Enabled SecurityViolation Disabled Disabled Enabled MUStateChanges Enabled Disabled Enabled WNMPEvents Enabled Disabled Enabled APIntervalEvents D
44. 3 auto upgrade all APs via messaging 132 manually updating 123 update using TFTP 123 updating using Xmodem 127 firmware version 148 frequency range 3 G gigahertz 1 H hardware installation 173 10 100Base T 174 antenna coverage 175 mounting the AP 177 network connection 174 package contents 173 power adapter 177 power options 176 precautions 173 single cell connection 175 site survey 174 Help file network Web server 44 ICMP 136 Index 5 IEEE 802 1d Spanning Tree support association process 12 LAN 12 IEEE address 4 MAC 4 IP forwarding address 23 roaming across routers 23 IP Address 151 AP 151 MU 151 K Kerberos AP proxy 30 authentication 27 authentication service AS 29 default setting 32 disabling 32 implementation 27 Key Distribution Center KDC 29 key distribution center KDC 29 kss function 29 1 manual authentication configuration 70 MU authentication 30 realm 28 TGS REP 30 TGS REQ 30 Ticket Granting Ticket Server 29 known APs 156 MAC and IP addresses 156 statistics 156 KSS databases 33 disable open enrollment 32 enable open enrollment 32 Index 6 open enrollment period 32 L LAN IEEE 802 1d Spanning Tree support 12 LED indicators 182 description 182 flashing all LEDs 148 special cases 183 184 WLAP mode LED display 183 M MAC Layer Bridging 14 address database 14 MAC address 14 management options 35 SNMP 35 Telnet 35 WLAN 35 manually updating configuration kerber
45. 3 851 5 808 287 5 874 720 5 945 658 6 053 413 6 114 712 6 188 681 6 308 061 D341 584 D414 171 4 603 262 4 897 532 5 130 520 5 235 167 5 280 163 5 396 053 5 449 891 5 532 469 5 619 028 5 734 152 5 811 785 5 875 415 5 945 659 6 056 200 6 115 678 6 209 788 6 308 892 D344 501 D414 172 4 607 156 4 923 281 5 140 144 5 243 655 5 280 164 5 396 055 5 449 893 5 543 610 5 627 359 5 734 153 5 811 787 5 900 617 5 946 194 6 065 678 6 119 944 6 209 789 6 321 990 D359 483 D418 500 4 652 750 4 933 538 5 142 550 5 247 162 5 280 498 5 399 846 5 468 949 5 545 889 5 637 852 5 742 043 5 815 811 5 902 989 5 959 285 6 067 297 6 123 265 6 216 951 6 328 213 D362 453 D419 548 4 673 805 4 992 717 5 149 950 5 250 791 5 304 786 5 408 081 5 471 042 5 552 592 5 664 229 5 745 794 5 821 519 5 907 146 6 002 918 6 082 621 6 131 814 6 220 514 6 330 244 D363 700 D423 468 4 736 095 5 015 833 5 157 687 5 250 792 5 304 788 5 410 139 5 478 998 5 557 093 5 668 803 5 754 587 5 821 520 5 912 450 6 021 947 6 084 528 6 138 180 6 243 447 6 336 587 D363 918 D424 035 4 758 717 5 017 765 5 168 148 5 260 553 5 306 900 5 410 140 5 479 000 5 578 810 5 675 139 5 762 516 5 823 812 5 914 478 6 029 894 6 088 482 6 142 379 6 244 513 6 340 114 D370 478 D430 158 4 760 248 5
46. 6 PST Time Server Racheal Clock Skew 388 3 Configure the settings as required Time Server Time Current time and time zone Time Server Name or IP address of the time server Clock Skew Allowable time difference from the server in seconds The access point assumes the clock skews one minute per hour and re synchronizes with the time server after the clock skew period multiplied by 60 142 Spectrum24 AP 4121 Access Point Product Reference Guide Configuring the AP To ensure server and access point time syncopation the timeserver selected within the Configure Network Time screen is queried first Should there be no response the Primary KDC is queried second and the Secondary KDC is queried last Consequently it is important to have a timeserver set up on the KDC to provide verification of time requests in order to ensure secured data transmissions over the network Should the access point encounter problems contacting a time server the following error codes display in the access point Event History screen Error Code 1 Can t resolve time server name 2 Connect error 3 Write error 4 Read error Reason for Error Host unreachable Timeout 11 12 13 Hardware error 14 Connection aborted 15 Out of buffers amp The reasons for error listed can be responsible for any particular error code Heia Spectrum24 AP 4121 Access Point Product Reference G uide 143 Configuring the AP 144 Spectru
47. 76 4 6 Mo n ng he AP iraniana ea E iat andes 177 4 7 Connecting the Power Adapter eeeeeeereeeeeeirieririrrrrrrrrreeeeee 177 4 8 BIAS T Low Power Distribution System ccceeeeeeeeeeeeeeeeeeeeeeeeee 178 4 9 LED Indicators seipso iin ce atly ely Guat feac Lael ees 182 4 9 1 WLAP mode LED display ccceceeseeeteteteee teen teeeeeeeeeees 183 4 10 Troubleshooting eee eae aA 185 4 10 1 Ensure wired network is operating cceeeceeeeeeeeeeeeeees 185 A IE Seting Up MUS na ie eve teeedee puedes ainnues EEA Tana FEAT 186 Appendix A Specifications iiwecrnicirtltecasiiecerchtecaricuiea inal ditinPassnbumtinns A 1 A 1 Physical Characteristics ge a aiisc unicameral a A 1 A 2 Radio CharacteristicSi ccc ce is eet deeded eens A 2 A 3 Network Characteristics A 3 Appendix B Supported Modems ccccccccsssscssessscscsserssrsssssseeseenes B 1 Appendix C Customer SUD PONE svijet ssnatscionseastuatgntenndlvasdarsgans cedar eon and C 1 Appendix D Configuring the Kerberos KSS cc cccceceetretenenenees D 1 D 1 Creating a Windows 2000 Environment for the KSS D 1 D 2 Installing the KSS in a Windows 2000 Environment D 2 D 3 Preparing the KSS for Access Point Validation D 5 D 4 Manually Creating an Access Point Setup Account D 12 D 5 Implementing Kerberos without the KSS D 14 viii Spectrum24 AP 4121 Access Point Product Reference G uide D0 Kerberos Error COd S ameoa a tees ak San eee se
48. 8 Error encrypting access point replies to MU KRB_ERR_ ENCODE _AP_REP 89 Error encoding access point request to MU This is an access point internal error KRB_ERR_SERVER_TIME 90 Kerberos error time is out of bounds in relation to server time Check server time and reset as required KRB_ERR_MK_ERROR 92 Failed to encode error reply KRB_ERR_GEN_SESS KEY 93 Failed to generate session key for MU D 20 Spectrum24 AP 4121 Access Point Product Reference Guide Configuring the Kerberos KSS Spectrum24 AP 4121 Access Point Product Reference Guide D 21 Configuring the Kerberos KSS D 22 Spectrum24 AP 4121 Access Point Product Reference Guide Index A access control 15 disallowed address 15 MU 15 unauthorized access 15 access point 1 10 100Base T connection 174 access control 148 access control list 1 adding allowed MUs 103 adding disallowed MUs 107 advanced radio theory 13 analyzing retries 170 antenna selection 146 ARP request packet 14 ARP response packet 14 Basic Service Set 9 BSS ID 9 CAM 25 cell 9 cellular coverage 9 characteristics A 1 chipping sequence 19 clear statistics 172 clearing MUs 109 clearing statistics 172 configure 23 country code 146 data encryption 2 data rate 1 decryption 26 dial up access 37 Spectrum24 AP 4121 Access Point Product Reference G uide direct sequence 20 disallowed address 15 encryption 26 Ethernet device 4 Ethernet statistics 159 Ethernet traffic 1 E
49. APs in the Known AP Menu yes no Type Y Select Cance1 ESC to disregard any changes made to this screen and return to the previous menu Spectrum24 AP 4121 Access Point Product Reference G uide Configuring the AP 2 13 Updating AP Firmware When updating or downgrading the files the user is required to use the Firmware and HTML File Option under the function heading use XMODEM to update Access Point s Both the firmware and HTML files are required to be loaded on the TFTP server or users hard disk AP 4131 access points with firmware version 3 00 or higher cannot be downgraded to the 2 70 XX firmware level Additionally AP 4111 access Warning points cannot be upgraded past the 2 52 XX firmware level O ptions for manually updating the firmware A TFTP host Any computer using the Xmodem file transfer protocol The files required for firmware updates to a AP 4121 model access point are dsap_fw bin 2 13 1 Update Using TFTP The Ethernet TFTP upgrade method requires a connection between the AP and PC on the same Ethernet segment Verify the PC has a TFTP server running on it Running the server requires third party software like FTP PC TCP for DOS or OnNet for Windows The wireless TFTP upgrade method requires a connection between the AP and a TFTP server The TFTP server can be running on a Symbol Spectrum24 device Spectrum24 AP 4121 Access Point Product Reference G uide 123 Configuring the AP a
50. B or DOWN ARROW key to select the HELP uRL field Type the IP address URL Universal Request Locator of the Web server and the directory folder of the Web server for the Help file location http XXX XXx xXXXx XXxx WebH elp Where xxx xxx xxx xxx is the IP address of the server Save the new setting by selecting save F1 option Select yes at the confirmation prompt Spectrum24 AP 4121 Access Point Product Reference G uide Configuring the AP To access the AP UI using a Web browser from a workstation 1 From the NCPA properties window set the IP address of the workstation and the subnet mask The system tells the user to reboot for property changes to take effect amp The workstation in this case is the workstation or laptop computer running Mote the Web browser 2 To verify the connection ping the AP At the default DOS prompt type Ping At MRK KKK KX KE XXX Ifthe ping receives no response verify that the hardware connections IP address gateway address and subnet mask are correct If correct contact the site System Administrator for network assistance 3 Starta Web browser such as Internet Explorer 4 0 or greater or Netscape 3 0 or greater Type the IP Address for the associated AP to access the AP using a Web browser http XXX XXX XXX XXX Spectrum24 AP 4121 Access Point Product Reference Guide 47 Configuring the AP 48 ie 4 The Spectrum24 Access Point Configuration Management S
51. Configuration Management System Web pages This procedure applies to the Microsoft Internet Information Server The network Web server can be different if so some of the procedures differ O nly Network or System Administration personnel should configure the network Web server To create the Help file on a network Web server 1 Create a directory on the network Web server for the AP Web Site Help Files to reside O ften this subdirectory is C InetPub wwwRoot 2 Copy the gif and htm files to this directory folder The files are found in the x firmware AP AP Web Site Help File directory Where x is the letter assigned to the computer CDROM drive This installation example is for Windows NT 4 0 3 From the windows Task Bar select Start 4 From the drop down menu select Programs 5 From this menu select Microsoft Internet Server common Spectrum24 AP 4121 Access Point Product Reference Guide 6 7 Configuring the AP From this menu select Internet Service Manager to launch the Internet Information Server Service Manager Click on the Web service amp Ensure the server WWW service is running Mote 10 11 Select Properties Select Service Properties to display the WWW service properties for the server The WWW Service Properties window opens Select Directories Select Add button to open the Directories window 12 13 14 15 16 17 18 Type the Directory F
52. F2 to remove an entry after selecting the desired entry using the TAB key e Select next to display the next screen e Select previous to display the previous screen e Select switch to view each known AP by Unit Name e Press ESC to return to the Main Menu 158 Spectrum24 AP 4121 Access Point Product Reference Guide Monitoring Statistics 3 7 Ethernet Statistics The AP keeps Ethernet performance statistics including packet transmission and data retries until reset Select Ethernet Statistics from the Main Menu to display Symbol Access Point Ethernet Statistics Packets Seen 5 Packets Sent 138 Packets Forwarded a Any Collisions 5 Discarded NoMatch amp 1 Collisions 5 Discarded Forced Lal Maximum Collisions 5 Discarded Buffer B Late Collisions 5 Discarded CRC ral Defers 5 Broadcast Multicast Lal Individual Address D Refresh F1 Timed F2 Exit ESC Packet display for Ethernet statistical units Packets Seen The packets received on Ethernet interface Packets Forwarded The packets forwarded from Ethernet interface to other interfaces Discarded NoMatch The packets discarded because of unknown destinations destinations not in the known list of database entries Discarded Forced The packets discarded because of the applied address filters Discarded Buffer The packets discarded because insufficient buffers in AP Discarded CRC The packets discarded because of data errors Broadcast Multicast The total broadcast or m
53. Flashing indicates data transfers on wired connection K Wireless LAN Activity Flickering indicates beacons and data transfers with MUs 182 Spectrum24 AP 4121 Access Point Product Reference G uide Hardware Installation 4 9 1 WLAP mode LED display When in the WLAP mode the chart below signifies the APs LED indicator status For the IEEE 802 11 protocol and APs using firmware version 2 7 2X or above only 1 After power up system initialization begins LED State Power On Wired LAN Activity O ff Wireless LAN Activity Blinks slowly When a WLAP begins a full scan LED State Power On Wired LAN Activity O ff Wireless LAN Activity Blinks slowly When one or more WLAPs are found but still in full scan state LED State Power On Wired LAN Activity O ff Wireless LAN Activity Blinks slowly When the WLAP is in functional state but one or more WLAP connections are notin Forward state LED State Power Blinks regularly Wired LAN Activity Blinks if activity occurs Wireless LAN Activity Blinks slowly Spectrum24 AP 4121 Access Point Product Reference Guide 183 Hardware Installation 5 When all WLAP connections are in Forward state LED State Power On Wired LAN Activity Blinks if activity occurs Wireless LAN Activity Blinks regularly Special cases e If the WLAP manual BSS _ID is NOT set and no other WLAP is found the WLAP goes to the functional state e If the WLAP manual BSS _ID is set and the
54. I Adapter Product Reference Guide Conventions Keystrokes are indicated as follows ENTER identifies a key FUNC CTRL C identifies a key sequence Press and release each key in turn Press A B press the indicated keys simultaneously Hold A B press and hold the indicated keys while performing or waiting for another function Used in combination with another keystroke Typeface conventions used include lt angles gt indicates mandatory parameters in syntax brackets for command line indicates available parameters in configuration files brackets act as separators for options GUI Screen text indicates the name of a control in a GUI based application Italics indicates the first use of a term book title variable or menu title Screen indicates monitor screen dialog Also indicates user input A screen is the hardware device on which data appears A display is data arranged on a screen indicates text shown on a radio terminal screen URL indicates Uniform Resource Locator This document uses the following for certain conditions or information Spectrum24 AP 4121 Access Point Product Reference Guide iii amp i Caution sail Warning Indicates tips or special requirements Indicates conditions that can cause equipment damage or data loss Indicates a potentially dangerous condition or procedure that only Symbol trained personnel should attempt to correct or perform Spectr
55. LAP resets and starts over When the Ethernet connection is broken the AP clears the MU table and disables the RF interface until the Ethernet connection comes up Telnet Logins Specifies if the AP accepts or rejects Telnet Logins The default value is Enabied Spectrum24 AP 4121 Access Point Product Reference Guide 63 Configuring the AP 64 Encryption Admin Agent Ad Interval S24 Mobile IP M obile Home MD5 key MU MU Disallowed Inactivity Timeout Modem Connected Indicates which interface can change the encryption keys and the encryption key index Without admin privileges users cannot access the encryption maintenance page to change the encryption keys Any allows users with admin privileges to change encryption keys through any interface Serial allows users with admin privileges to change this parameter and encryption keys only through the Serial port See section 2 4 1 Encryption Administration on page 67 for all AP encryption administration parameters for all interfaces Serial Telnet HTML Web browser and SN MP Specifies the interval in seconds between the mobility agent advertisement transmission If enabled this feature allows MUs to roam across routers Secret key used for Mobile Home registration and authentication If enabled mobile units associated with the same AP are not allowed to communicate with each other The inactivity time on the UI that causes the AP to terminate the
56. NS server In addition to the KDC a Kerberos Setup Service KSS can be optionally installed on the Kerberos server The KSS runs as a client on the KDC server when initially launched The KSS can be used to administer Spectrum24 devices authorized on the network For example an AP on the Access Control List ACL is lost or stolen The KSS marks the AP using the MAC address of the AP as not authorized and notifies the administrator if the missing AP appears elsewhere on the network attempting authentication All clients MUs KDC and services APs participating in the Kerberos authentication system must have their internal clocks synchronized within a specified maximum amount of time known as clock skew The KSS uses Network Time Protocol NTP or the system clock on the Kerberos server to provide clock synchronization timestamp between the KDC and APs as part of the authentication process Clock synchronization is essential since the expiration time is associated with each ticket If the clock skew is exceeded between any of the participating hosts requests are rejected Additionally the KSS provides a list of authorized APs and other security setup information that the KDC uses to authenticate clients When setting up KSS assign APs an ESSID as the User ID to authenticate with the KDC Spectrum24 AP 4121 Access Point Product Reference Guide 29 Introduction When the AP boots up it contacts the KSS to obtain KDC information The AP
57. O nly dotl1smt dotl1PrivacyTable dotl1Authentication 802dotl1 mib View Only View O nly Algorithm dotl1smt dotl1Authen Algorit Table dotl1Authentication 802dotl1 mib View O nly View O nly AlgorithmEnable dotl1smt dotl1Authen Algorit Table dotl 1WEPDefaultKey 802dotl1 mib Modify Only No Access Value dotl1smt dotl1WEPDefualtKey Table Spectrum24 AP 4121 Access Point Product Reference Guide 69 Configuring the AP 70 Hoba Manual Kerberos Authentication Configuration The Configure Kerberos Authentication screen allows the network administrator to change or verify the AP parameters for Kerberos authentication If a DHCP server is not available use the Configure Kerberos Authentication screen to manually configure and enable Kerberos save and reset the AP If an optional KSS has been installed on the Kerberos server resetting the AP allows the KSS to complete the Kerberos configuration and start the Kerberos authentication services If a DHCP server is available enable Kerberos using DHCP server options found in section 1 3 3 DHCP Support on page 16 These options can enable Kerberos on the AP and setup the KDC name KSS name and port number Configure the AP through a direct serial connection Disabling Kerberos returns Kerberos Disabled is the default setting Telnet SNMP and Web services to their previous setting If an AP cannot be accessed through a serial connection and SNMP is not
58. P 1 Select special Functions from the M ain Menu 2 Select ciear mu Tabie The AP removes the MUs associated with it MUs cleared from the AP try to reassociate with the AP or another nearby AP 2 11 Manually Updating AP Configuration O ptions for manually updating the AP configuration A TFTP host e Any computer using the Xmodem file transfer protocol Spectrum24 AP 4121 Access Point Product Reference G uide 109 Configuring the AP Edit the following AP_CFG TXT file required for manual configuration of the AP to match the site specific network settings APInstallation CountryConfig UnitName IPAddress Gateway1 SubNetMask NetID AntennaSelect DHCP DNSServer1 DNSServer2 DNSServer3 SpecialFunction FWFileName HTMLFi1leName ConfigFileName ACLFileName HelpURL TFTPServer TimeServerName ClockSkew SystemConfig Channel AutoChannelSelect EthernetTimeOut TelnetLogins AgentAdInterval S24MobileIP Mobil eHomeMD5Key USA testhost symbol com 57 235 181 33 D D D D 255 255 255 8 Engineering Primary Only Enabled 157 235 181 1 157 235 181 2 157 235 181 3 dsap_fw bin dsap_html bin ap_cfg txt ap_acl txt www symbol com tftp apfw symbol com tms 388 11 Disabled 5 Enabled 5 Disabled Symbol full country name up to 31 chars up to 32 chars Full Diversity Primary Only Secondary Only Rx Diversity Disabled Enabled Disable
59. P BOOTP Enabled D D D D OK CR Save F1 Save All APs F2 Cancel ESC Most parameters take effect only after being saved and AP is reset Spectrum24 AP 4121 Access Point Product Reference Guide 57 Configuring the AP Moha Yorning 58 If this is the first time the AP has been installed or has been moved to a new country verify that the proper country specific code is entered for the AP Refer to Appendix D for a list of supported country codes Verify that the proper country specific code is entered for the AP to conform to the set of rules defined in national or international regulations Where Country Config Unit Name IP Address Gateway IP Address Additional Gateways Configure the AP for the user s country This item displays a list of country names Use the TAB key to highlight the appropriate country and press enter The AP displays Are You Sure Enter Y for yes The display refreshes and displays the new country Prior to setting the Country Config code certain AP features are not available See Appendix D for AP country code information The AP name The network assigned Internet Protocol address of the AP IP address of a router the AP uses on the Ethernet as its default gateway The IP address of the additional gateways used Access up to seven gateways Spectrum24 AP 4121 Access Point Product Reference G uide Subnet Mask DNS IP Address Additional DNS Net_ID ES
60. Power O ptions Power options are as follows e Standard 24 volt 1 amp power Part Number 50 24000 024 supply115 230VAC 50 60Hz e US line cord Part Number 23844 00 00 A Symbol BIAS T system can also be used to combine low voltage DC with Ethernet data in a single cable connecting to an access point For information on the BIAS T system go to www symbol com and search for the BIAS T low power distribution system Spectrum24 AP 4121 Access Point Product Reference G uide Hardware Installation 4 6 Mounting the AP The AP rests on a flat surface or attaches to a wall or any hard flat stable surface Use the standard mounting kit provided with the Spectrum24 AP 4121 Access Point Choose one of the options based on the environment Resting flat Rests on the four rubber pads on the underside of the AP Place on a surface clear of debris and away from traffic Attaching on the wall Rests on screws Orient the AP in a downward position on the wall so the LEDs face the floor 4 7 Connecting the Power Adapter The power adapter connects to the rear of the AP and to a power outlet 1 Verify the power adapter is correct according to the country 2 Plug the power adapter cable into the socket at the back of the AP 3 Plug the adapter into an outlet The AP is functional when the Status indicator on the front of the AP reaches a consistent flashing and the Wireless LAN Activity indicator begins flickering This indicates tha
61. Product Reference G uide Configuring the AP WLAP Mode Specifies the APs wireless AP operation status Enabled e the AP sets up automatically for wireless operation The AP can operate in any of these configurations Wireless Repeater or Ethernet Bridge Disabled no wireless operation possible Default setting Link Required At power up ifthe WLAP is the Root AP an Ethernet connection is required e Ifthe WLAP is a designated WLAP association to the Root AP is required During normal operation e Ifthe Ethernet connection is lost the Root AP resets Ifthe WLAP association is lost the designated WLAP resets WLAP Priority Allows a user to determine the Root and the designated WLAP in wireless operation Concatenate the priority value as the most significant portion of the MAC address An AP with a lower numerical value for priority is more likely to become the root AP The default is 8922 hex from the xFFFF range Spectrum24 AP 4121 Access Point Product Reference Guide 79 Configuring the AP 80 WLAP M anual BSS ID WLAP Hello Time WLAP Forward Delay Specifies the BSS ID of a particular WLAP and forces the current AP to associate only with that WLAP If setting the WLAP Manual BSS ID to the current BSS ID the current AP jumps into Functional State immediately and waits for an Association Request from the other WLAP See section 3 8 Radio Statistics on page 161 This feature speeds up
62. Product Reference G uide Introduction IEEE 802 11 defines two types of authentication O pen System and Shared Key O pen system authentication is a null authentication algorithm Shared key authentication is an algorithm where both the AP and the MU share an authentication key to perform a checksum on the original message Both 40 bit and 128 bit shared key encryption algorithms are supported in the Symbol Spectrum24 Access Point Devices are required to use the same encryption algorithm to interoperate APs and MUs cannot transmit and receive if the AP is using 128 bit encryption and the MU is using a 40 bit encryption algorithm By default IEEE 802 11 devices operate in an open system network where any wireless device can associate with an AP without authorization A wireless device with a valid shared key is allowed to associate with the AP Authentication management messages packets are unicast meaning authentication messages transmit from one AP to one MU only not broadcast or multicast 1 3 10 Kerberos Authentication a Kerberos can be installed on devices supporting Windows 2000 NT 4 0 and 95 98 The Spectrum24 Plus Pack is required on all devices supporting Hohe i Kerberos Authentication is critical for the security of any wireless LAN device including a Spectrum24 device operating on a wireless network Traditional authentication methods are not suitable for use in wireless networks where an unauthorized user can m
63. QB QB QB QB QB QB SSSS SSS SSS SSRESEEES F8 F8 F8 F8 F8 F8 F8 F8 F8 F8 F8 F8 F8 F8 F8 F8 F8 F8 F8 Delete F1 208 200 218 3 203 AG A2 208 786 BB Ae 54 23 OLS BC 228 AG 209 Add F2 Disallowed Addresses DD AD F8 FF FF C7 DD AD F8 FF FF 89 Next F3 Save All APs F4 Exit ESC Spectrum24 AP 4121 Access Point Product Reference G uide Configuring the AP 2 8 1 Adding Disallowed MUs The Disallowed Addresses screen provides a facility to add MUs to the list 1 Select Add F2 The AP prompts for a MAC address BO 08 08 88 88 88 2 Enter the MAC address w Users can enter MAC addresses without colons Mote 2 8 2 Removing Disallowed MUs The Disallowed Addresses screen provides a facility to remove MUs from the list 1 Highlight the MAC address using the UP DO WN ARRO W keys 2 Select delete cF1 to delete the MAC address Spectrum24 AP 4121 Access Point Product Reference G uide 107 Configuring the AP 2 9 Configuring Type Filtering Packet types supported for the type filtering function include the 16 bit DIX Ethernet types The list can include up to 16 types 2 9 1 Adding Filter Types The Type Filtering screen provides a facility to add types to the list 1 Select Add F21 2 Enter the packet type 2 9 2 Removing Filter Types The Type Filtering screen provides a facility to remove types from the list 1 Hig
64. S Antenna Selection Configuring the AP The first two sets of numbers specify the network domain the next set specifies the subset of hosts within a larger network and the final set specifies an individual computer These values help divide a network into subnetworks and simplify routing and data transmission The subnet mask defines the size of the subnet Primary Domain Name Server IP address The IP address of the additional DNS servers available A maximum of two additional DNS servers are available The unique 32 character alphanumeric case sensitive wireless network identifier of the AP Enables selection of antenna diversity O ptions are s Full Diversity the radio receives on the primary or secondary antenna which ever has the best signal strength and transmits on the last antenna it received on bd Primary only the radio transmits and receives on the primary antenna only a Secondary only the radio transmits and receives on the secondary antenna only Rx Diversity the radio receives on the primary or secondary antenna whichever has the best signal strength and transmits on the primary only Spectrum24 AP 4121 Access Point Product Reference Guide 59 Configuring the AP 60 ay Additional The IP address of the additional gateways used Gateways Access up to seven gateways DHCP BO OTP Enables or Disables selection of DHCP BO OTP The options are g Enabled DHCP and BO OTP int
65. SI received signal strength indicator of a potential AP exceeds the current AP e the ratio of good transmitted packets to attempted transmitted packets falls below a threshold An MU selects the best available AP and adjusts itself to the AP direct sequence channel to begin association O nce associated the AP begins forwarding any frames it receives addressed to the MU Each frame contains fields for the current direct sequence channel The MU uses these fields to resynchronize to the AP The scanning and association process continues for active MUs This process allows the MUs to find new APs and discard out of range or deactivated APs By testing the airwaves the MUs can choose the best network connection available 1 3 7 Mobile IP 22 The Internet Protocol identifies the MU point of attachment to a network through its IP address The AP routes packets according to the location information contained in the IP header If the MU roams across routers to another subnet the following situations occur e The MU changes its point of attachment without changing its IP address causing forthcoming packets to become undeliverable e The MU changes its IP address when it moves to a new network causing it to lose connection Mobile IP enables an MU to communicate with other hosts using only its home IP address after changing its point of attachment to the internet intranet Spectrum24 AP 4121 Access Point Product Reference G uide I
66. Spectrum24 AP 4121 Access Point Product Reference Guide 72E 51751 01 Revision C February 2003 www symbol com Copyright Copyright 2003 by Symbol Technologies Inc All rights reserved No part of this publication may be modified or adapted in any way for any purposes without permission in writing from Symbol The material in this manual is subject to change without notice Symbol reserves the right to make changes to any product to improve reliability function or design No license is granted either expressly or by implication estoppel or otherwise under any Symbol Technologies Inc intellectual property rights An implied license only exists for equipment circuits and subsystems contained in Symbol products Symbol the Symbol logo and Spectrum24 are registered trademarks of Symbol Technologies Inc Other product names mentioned in this manual may be trademarks or registered trademarks of their respective companies and are hereby acknowledged IBM is a registered trademark of International Business Machine Corporation Microsoft Windows and Windows NT are registered trademarks of Microsoft Corporation Novell and LAN Workplace are registered trademarks of Novell Inc Toshiba is a trademark of Toshiba Corporation Patents This product is covered by one or more of the following U S and foreign Patents 4 593 186 4 896 026 5 113 445 5 230 088 5 280 162 5 378 882 5 444 231 5 528 621 5 612 531 5 72
67. The Telnet session ends when the user answers y atthe prompt To view the file transfer log switch to the TFTP application Mote The AP resets when the file transfer and FLASH programming completes 15 Telnet to the AP using its IP address 16 At the prompt type the case sensitive password Symbol Spectrum24 AP 4121 Access Point Product Reference Guide 135 Configuring the AP The AP displays the Main Menu Symbol Access Point Special Functions Menu Clear All Statistics Restore Factory Config Clear MU Table Save Configuration Clear ACL Save Config to All APs Clear Address Filters Clear Type Filters Firmware Update Menu F3 Load ACL from File via TFTP Load ACL from File via XMODEM Load ACL from MU List Reset AP Configure Network Time 17 Verify the accuracy of the version number on the System Summary screen 18 Press CTRL D to end the Telnet session 2 15 Performing Pings An access point sends a ping packet to an MU and waits for a response Use pings to evaluate signal strength between two stations The other station can exist on any AP interface a This ping operates at the MAC level and not at the ICMP Internet Control Mote Message Protocol level No pings returned or fewer pings returned than sent can indicate a communication problem between the AP and the other station 136 Spectrum24 AP 4121 Access Point Product Reference Guide To ping another station Configuring the AP
68. amically displays packets transmitted and received Echo Test in Progress Station Address DD AD F8 18 4A 13 Requests Transmitted 1 Responses Received 1 Press any key to stop 138 Spectrum24 AP 4121 Access Point Product Reference Guide Configuring the AP 2 16 Mobile IP Using MD5 Authentication Users can achieve authentication by using the M D5 algorithm with a shared key configured into the AP and its MU MD5 is a message digest algorithm that takes an arbitrarily long message and computes a fixed length digest version consisting of 16 bytes 128 bits of the original message Users can think of the message digest as a fingerprint of the original message Since the message digest is computed using a mathematical formula or algorithm the probability of an entity reproducing the message digest is equivalent to two people having the same fingerprints The message digest is the authentication checksum of a message from a mobile MU to an AP during the Home Agent registration process The MD5 algorithm purpose therefore prevents an MU from impersonating an authenticated MU Spectrum24 AP 4121 Access Point Product Reference G uide 139 Configuring the AP 2 17 Saving the Configuration The AP keeps only saved configuration changes after a reset To make configuration changes permanent save changes as needed To save all changes Press F1 in the configuration screens displaying the save option or complete the following pro
69. ation theft and improving data security Encryption entails scrambling and coding information typically with mathematical formulas called algorithms before the information is transmitted An algorithm is a set of instructions or formula for scrambling the data A key is the specific code used by the algorithm to encrypt or decrypt the data Decryption is the decoding and unscrambling of received encrypted data The same device host computer or frontend processor usually performs both encryption and decryption The data transmit or receive direction determines whether the encryption or decryption function is performed The device takes plain text encrypts or scrambles the text typically by mathematically combining the key with the plain text as instructed by the algorithm then transmits the data over the network At the receiving end another device takes the encrypted text and decrypts or unscrambles the text revealing the original message An unauthorized user can know the algorithm but cannot interpret the encrypted data without the appropriate key Only the sender and receiver of the transmitted data know the key Symbol uses the Wired Equivalent Privacy WEP algorithm specified in IEEE 802 11 section 8 for encryption and decryption WEP uses the same key for both encrypting and decrypting text Typically an external key service distributes the key Users should change the key often for added security Spectrum24 AP 4121 Access Point
70. ation ANSI baud rate 19200 bps data bits 8 stop bits 1 parity none flow control none 6 Dial out to the AP with the correct telephone number No password is required 7 Press ESC to refresh the display The AP displays the Main Menu Symbo Ow Ow Ow Ow Ow Ow Ow Ow ANnNnNnnnuninunn Ow Enter 2 1 4 Using a We Access Point MAIN MENU System Summary nterface Statistics Forwarding Counts Mobile Units nown APs Ethernet Statistics RF Statistics Misc Statistics Event History Admin Mode b Browser AP Installation Special Functions Set System Configuration Set RF Configuration Set Access Control List Set Address Filtering Set Type Filtering Set SNMP Configuration Set Event Logging Configuration A Web browser is a program used to view Web documents or pages The browser retrieves the requested page interprets its textand displays the page on a computer screen Using a Web browser to gain access to the UI requires the workstation to have a TCP IP stack and a Web browser The remote station can be on the wired or wireless LAN Spectrum24 AP 4121 Access Point Product Reference Guide 43 Configuring the AP 44 amp Mote Mote Mota The Web browser Internet Explorer 4 0 or greater or Netscape requires JavaScript to gain access to the Ul Setup Network Web Server Help File Access A network Web server is required to access the Help file from the Access Point
71. auto channel select 62 clock skew 71 72 configuration 62 configure kerberos 65 default interface 66 Encryption Admin 64 ethernet interface 66 Ethernet timeout 63 Inactivity Timeout 64 kss name 71 MD5 key 64 Modem Connected 64 MU MU Disallowed 64 password 71 72 realm name 71 rf Interface 66 S24 Mobile IP 64 System Password Admin 65 Telnet logins 63 time of day 71 type filtering 65 user id 71 72 User Password 74 Web Server 65 WNMP functions 65 system password 49 system summary 145 access control 148 antenna selection 146 country code 146 current MUs 146 firmware version 148 IP address 146 MAC address 142 143 146 model number 148 Net ID 142 143 146 serial number 148 WLAP mode 148 T TIM association process 11 root AP 11 Traffic Indicator Message See TIM transmission medium 3 troubleshooting 185 AP does not power up 185 no connection 185 slow or erratic performance 186 SRAM test 185 wired network operation 185 wired network problems 185 type filtering adding filter types 108 configuration 108 removing filter types 108 U UI 39 access 39 changing access 53 configuration 39 dial up access 37 direct serial access 37 navigation 50 password 40 Telnet 37 Spectrum24 AP 4121 Access Point Product Reference Guide Index 9 Web browser 37 W Web browser 43 WEP algorithm 26 WEP privacy 78 wireless operation 79 wireless operation parameters configuration 84 IEEE 802 1d Spanning Tre
72. ay from transformers heavy duty motors fluorescent lights microwave ovens refrigerators and other industrial equipment Signal loss can occur when metal concrete walls or floors block transmission Locate APs in open areas or add APs as needed to improve coverage Site Surveys A site survey analyzes the installation environment and provides users with recommendations for equipment and its placement The optimum placement of 11 Mbps access points differs for 1 or 2 Mbps access points because the locations and number of access points required are different Spectrum24 AP 4121 Access Point Product Reference G uide Introduction Symbol recommends conducting a new site survey and developing a new Moba coverage area floor plan when switching from 1 or 2 Mbps frequency hopping access points to 11 Mbps direct sequence access points 1 3 Access Point Functional Theory To improve AP management and performance users need to understand basic AP functionality and configuration options The AP includes features for different interface connections and network management The AP provides MAC layer bridging between its interfaces The AP monitors traffic from its interfaces and based on frame address forwards the frames to the proper destination The AP tracks the frames sources and destinations to provide intelligent bridging as MUs roam or network topologies change The AP also handles broadcast and multicast messages and responds to
73. ble Open Enrollment fi Do you want to enable Open Enrollment MES No 15 Click Yes If Yes is selected the KSS tests the configuration parameters by creating a test account on the KDC If the testis successful the test account is deleted and a dialog box displays notifying the user that O pen Enrollment is now enabled If the test fails check the Admin info or default O pen Enrollment values i 16 From the File pull down menu select Listen or click on the Listen icon Spectrum24 AP 4121 Access Point Product Reference Guide D 9 Configuring the Kerberos KSS The Listen For Connection Box displays Pt Listen For Connection a Current status Connection Serine Disabled Open Enrolment Enabled ATE YOU sure YOU Want bo Service a connection at port 345677 Fes 17 Select Yes if this is the correct connection port The Kerberos Setup Service window displays The next step is to configure the access points for Kerberos support if they have not already been configured i 18 Reboot the access points Refer to the AP 4131 Access Point Product Reference Guide for Kerberos setup information The connection portis required to match the AP connection port Refer to the Manual Kerberos Authentication Configuration section of this document for additional information The Listener Port is required to remain open for the access point to receive network time every eight hours ie D 10 S
74. cate with the KDC When an AP requests information from the KSS the KSS queries the AP Setup database to validate the AP If the AP is valid the KSS will query its Kerberos Entry account database for the AP s Kerberos information The KSS packages the information and sends it to the AP APs with the same ESSID will share common Kerberos Entry account information since the ESSID is used as an AP Kerberos Principal 1 3 13 Roaming and Authentication When an MU authenticates through the KDC it specifies that it wants access to the AP that it has associated with When the MU completes the full AS REQ AS REP TGT REQ TGT REP and AP REQ AP REP hand shake sequence it possesses a ticket and a session key WEP encryption key for use in communicating with that AP However since the password and the username are the same for all APs that ticket decrypts and validates with any AP When a MU roams after it has associated with the new AP it sends to that AP the same AP REQ thatit sent to the AP that it first authenticated with The new AP decrypts the ticket and validates the authenticator in the AP REQ message It then sends back an AP REP with a new session key to the MU and normal communication through the new AP can continue Spectrum24 AP 4121 Access Point Product Reference Guide 33 Introduction 1 3 14 Mixed Mode Security Mixed mode security allows a single access point to transmit and receive with mobile units operating with different en
75. cedure 1 Select Special Functions from the Main M enu to display Symbol Access Point Special Functions Menu Clear All Statistics Restore Factory Config Clear MU Table Save Configuration Clear ACL Save Config to All APs Clear Address Filters Clear Type Filters Load ACL from File via TFTP Load ACL from File via XMODEM Load ACL from MU List Reset AP Configure Network Time Next F3 Exit EESC 2 Select Save Configuration and press ENTER The Save Config to All APs function saves the five preceding items The function does not save other configuration parameters when selected Users can perform this option only among the same hardware platforms and firmware versions The NVRAM stores saved configuration information To clear the NVRAM stored configuration see section 2 19 Restoring the Factory Configuration on page 141 140 Spectrum24 AP 4121 Access Point Product Reference Guide Configuring the AP 2 18 Resetting the AP Resetting an AP clears statistics and restores the last saved configuration If users make unsaved changes the AP clears those changes and restores the last saved configuration on reset e Select Special Functions from the Main Menu e Select Reset AP The AP flashes its LEDs as if powering up and returns to a STATUS flashing state 2 19 Restoring the Factory Configuration If the AP fails to communicate due to improper settings restore the factory configuration defaults Restoring c
76. cess Point Product Reference Guide Monitoring Statistics Where Current WLAP Itf Refers to the current Wireless AP interfaces in use in a 1 4 range Current State On initialization the AP can be in any of the following states of wireless operation e starting the initializing process Initializing Sending Probe Send Assoc Req association request Send Cfg BPDU configuration Bridge Protocol Data Unit Wait for Probe Send Probe Rsp probe response Send Assoc Rsp association response Send Cfg Rsp configuration response Received Root Rsp Root response operating in wireless mode Root WLAP lost Disabled Functional Priority States the WLAP priority value assigned to the AP under section 2 5 Configuring Radio Parameters on page 75 Root Interface States the interface leading to the Root AP Root Priority States the priority value of the Root AP Root MAC Address States the MAC address of the Root AP Root Path Cost Indicates the hops between the current WLAP and the Root AP Itf ID Identifies the wireless interface the AP uses to communicate with another device Spectrum24 AP 4121 Access Point Product Reference Guide 165 Monitoring Statistics WLAP Itf MAC Addr Itf State Path Cost Designated Root ID Designated Cost Designated WLAP ID Designated Itf ID States the MAC address of the associated WLAP Identifies the state of the interface from DIS the interface is disabled LIS
77. configured for read write use DHCP option 131 1 To access and enable the Kerberos configuration select configure Kerberos F3 from the System Configuration Menu The Configure Kerberos Authentication screen displays Symbol Access Point Configure Kerberos Authentication Kerberos Enabled KDC Server Name IP Address krbtgt Backup KDC Name IP Address kdc2 Realm Name APFW SYMBOL COM User ID same as ESS Password REE KDC Timeout 2 OK CR Save F1 KSS Setup Optional F3 Cancel CESC Enable Kerberos Spectrum24 AP 4121 Access Point Product Reference Guide Configuring the AP 2 Verify the KDC name The MU does not display the Kerberos login password screen if the wrong KDC name is entered in the AP Authentication screen 3 Verify the user 10 matches the ESSID 4 Verify the password matches the password in the KDC and AP Kerberos KDC Server Name Backup KDC Server Name Realm Name User ID Password KDC Timeout Allows the user to enable Kerberos authentication Default setting is Disabled Name of the Kerberos Setup Service for the AP Name of the backup Kerberos Setup Service for the AP The Kerberos Realm Name similar to a DHCP domain name The KDC user ID the AP uses to authenticate ESSID of the associated AP A user account is required on the server matching the ESSID of the associated access point The KDC password the AP uses to authenticate The maximum wait time in seconds for a r
78. connection while using a modem The default is 5 minutes from a g to 18 minute range The value indicates no time out The default setting is No Set to yes when using a dial up configuration Spectrum24 AP 4121 Access Point Product Reference G uide Web Server Configure Kerberos System Password Admin Access Control Type Filtering WNMP Functions AP AP State Xchg Configuring the AP Enables the use of a Web based browser to access the Ul An AP Reset is required for this feature to take effect Allows the user to enable and configure Kerberos authentication Allows the user to change the passwords for the AP This screen can be accessed only when the AP is in Telnet mode Serial mode provides read only privileges and does not allow the user to view this screen Allows the user to set one of three Access Control modes Disabled Allowed or Disallowed e When Disabled default is selected no filtering is performed e When attowea is selected only MAC addresses specified in the Access Control List are allowed to associate with the AP e When Disallowed is selected only MAC addresses not specified in the Disallowed Addresses List Address Filtering are allowed to associate with the AP Specifies filter type for packets received either Forward Discard or Disabled The default value is Disabled Specifies if the AP can perform WNMP functions The default value is Enabled Specifies AP to AP commu
79. cryption algorithms Using mixed mode additional access points are not needed to support mobile units simply because they are using different encryption schemes 1 3 15 Web Management Support 34 A Symbol Spectrum24 Access Point includes an HTTP Web server to allow the user to access and manage the AP with a standard J ava compatible browser This capability provides the user with a Web based interface for configuration and firmware download Using either NetScape Navigator 4 5 or greater or Microsoft Internet Explorer 4 0 or greater point the browser at either the IP address of the AP or if the AP is defined in DNS at the DNS name of the AP A window opens that allows the user to access configuration setup and performance information for the AP as well as additional diagnostic information Disable Kerberos Encryption to use a Web server to configure access point settings Spectrum24 AP 4121 Access Point Product Reference G uide Introduction 1 3 16 Management Options Managing Spectrum24 includes viewing network statistics and setting configuration options Statistics track the network activity of associated MUs and data transfers on the AP interfaces The AP requires one of the following to perform a custom installation or maintain the Spectrum24 network SNMP Simple Network Management Protocol e wired LAN workstation with a Telnet client e terminal or PC with RS 232 connection and ANSI emulation Make configuratio
80. ct Per Channel Statistics to display Chnl Sent Revd Retry i 5 5 g Ze 5 5 5 si 88 89 3 4 5 5 g 5s 5 5 g 6 5 5 g 7 5 5 5 8 5 5 5 9 5 5 5 15 5 5 5 ll 5 5 g Press any key to continue The display shows counters for the packets sent received and retries for each channel 3 Press any key to continue Spectrum24 AP 4121 Access Point Product Reference G uide 169 Monitoring Statistics 3 9 2 170 Analyzing Retries The AP keeps statistics of packets with multiple retries Use these statistics to identify severe occurrences of retries Retries occur when the transmitting station fails to receive an acknowledgment for a transmitted packet This lack of acknowledgment can result from e two or more stations transmitting simultaneously and causing collisions e the receiving station moving out of range e the receiving station being powered off Any one of these results causes both devices to suspend transmitting and retries Too many retries can indicate a system problem To view retry severity 1 Select Show Misc Statistics from the Main Menu 2 Select Retry Histogram to display the packets that experience up to 15 retries Retries Packets D 65795 1 328 2 112 3 86 4 21 5 12 6 8 7 3 8 5 g 5 18 1 11 5 12 5 13 5 14 5 1G 5 3 Press any key to return to the Main Menu Spectrum24 AP 4121 Access Point Product Reference G uide 3 10 Event History Monitoring Statistics The AP tracks specific e
81. d disabled up to 49 ip address or name DHCP Only BOOTP Only up to 49 chars up to 49 chars up to 49 chars up to 49 chars chars comment out if DHCP enabled up to 128 characters 99999 seconds ae aan l Enab 1 hw detection 2 3 4 WLAP detec 38 255 seconds Disabled Enab 1288 seconds Disabled Enab up to 13 chars ed jon sw detection ed ed Spectrum24 AP 4121 Access Point Product Reference G uide Configuring the AP WebServer Enabled Disabled Enabled AccessControl Disabled Disabled Allowed Disallowed TypeFiltering Disabled Disabled Forward Discard WNMPFunctions Enabled Disabled Enabled APAPStateExchange Enabled Disabled Enabled 1 4 EthernetInterface On gt Off On RFInterface On gt Off On DefaultInterface Ethernet Ethernet WLAP MUMUDisal1 owed Off Off 0n AdminPassword admin up to 13 chars UserPassword user up to 13 chars ModemConnected No No Yes InactivityTimeout 5 9999 erberos isabled Disabled Enabled SSName SSSrv up to 127 chars SSPort 34567 1824 65535 SSSecret Symbol up to 16 chars DCName rbtgt up to 127 chars DCBackupName dc2 up to 127 chars RealmName localrealm up to 127 chars erberosUserID erberosTest up to 32 chars should match NETID erberosPassword Symbol up to 31 chars DCTimeout 2
82. d by selecting a check box in the Kerberos Setup Service Property page KSS provides the default AP Setup Account and the corresponding Kerberos Account to the AP A new AP Setup Account record is created for the AP using the default O pen Enrollment properties The KSS continues to do this until O pen Enrollment is disabled Access points with a Disabled status or expired range entries in the KSS are not allowed to accept O pen Enrollment information This provides a tool to block APs that are known to have been stolen or missing Spectrum24 AP 4121 Access Point Product Reference G uide Introduction 1 3 12 KSS Databases The optional KSS has two databases O ne database stores valid access points AP setup account The other database stores Kerberos account information Kerberos entry account The AP setup account database stores validation information for an AP This database uses the AP MAC address as a Primary Key The entry includes the range of time the AP is allowed access and status information A Foreign Key entry for a record in the AP setup account is the Kerberos Principal for this AP This Foreign Key is used as an index to the Kerberos Entry account database to retrieve other Kerberos information for the AP The Kerberos Entry account database stores specific Kerberos information for APs It uses the Kerberos Principal AP s ESSID as its Primary Key and it includes other Kerberos network information that an AP needs to authenti
83. d return to the previous menu When users enable the Access Control option all MUs within the specified range can associate with the AP Specify additional ranges as needed or add to the ACL using individual address entries 102 Spectrum24 AP 4121 Access Point Product Reference G uide Configuring the AP 2 7 3 Adding Allowed MUs The Access Control List screen provides a facility to add MUs to the ACL 1 Select the Set Access Control List option from the Main Menu to display Address Type range individual 2 Use the UP DOWN ARROW keys to toggle between range and individual Select individual 3 Press Add F2 The AP prompts for a MAC address QB BB BD BB 00 80 4 Enter the MAC address amp Users can enter MAC addresses without colons Moha 5 Selectsave ALL APs or press F4 to save the Adding Allowed MU information to all APs with the same Net_ID ESS This option saves the configuration changes for the current AP sends two WNMP messages to all other APs on the Known APs table to update their configuration and resets after the configuration has been modified Users can perform this option only among the same hardware platforms and firmware version 6 The system prompts Warning Update save and reset all APs in the Known AP Menu yes no Type Y 7 Select cancel esc to disregard any changes made to this screen and return to the previous menu 2 7 4 Removing Allowed MUs The Allowed Mobile Units scree
84. d ACL from MU List 104 2 7 8 Load ACL from File cece cess eee ee reese seen na aaaeaaaeae nee 105 2 8 Configuring Address Filtering 106 2 8 1 Adding Disallowed MUS cecccceeeeteeteeeeee neat eee teneneeees 107 2 8 2 Removing Disallowed MUS eeceeecccteceteteeee eset ee eeneneeees 107 2 9 Configuring Type Filtering eneee 108 2 9 1 Adding Filter Types cceeeseseeeeeeeeeeeeeeee aaa aaaanaaaaa ees 108 Spectrum24 AP 4121 Access Point Product Reference G uide 2 9 2 Removing Filter TYPOS este sees eee eee ae 108 2 9 3 Controlling Type Filters eee eee e eee ee eee ee 108 2 10 Clearing MUS from the AP nee 109 2 11 Manually Updating AP Configuration 109 2 11 1 Updating Using TRIP nirengi inoin 113 2 11 2 Updating Using XMOdeM cece eeteeneeees 117 2 12 Setting Logging Options eee ee reer ee ee ee eae aa rrn rra 121 2 13 Updating AP Firmware vi ce diene ieee cenieeediieenes 123 2 13 1 Update Using TFTP i ciii eat tee eae laren eta 123 2 13 2 Updating Using Xmodem cece eeeteneeees 127 2 14 Auto Upgrade all APs Through Messaging cceeeeeeeeeeeeeee ates 132 2 15 Performing PINGS eskerren e a tenia ea a ETEA AAA EREA 136 2 16 Mobile IP Using MD5 Authentication 139 2 17 Saving the Configuration nren 140 2 18 Resetting the APsari naia a aaa aaa iak 141 2 19 Restoring the Factory Configuration eeeeeeeeeeeeeeeeeees 141 2 20 Configuring Network TIME cece e eee e ee eeeeeeeeeeeee
85. e Exit CESC Press F3 to view the Firmware Update M enu Access Point Firmware Update Menu Use TFTP to update Access Point s Firmware HTML file Firmware and HTML File Use XMODEM to update Access Point s Firmware HTML file Firmware and HTML File Use TFTP to update ALL Access Points Firmware HTML file Alter Filename s HELP URL TFTP Server Firmware Filename dsap_fw bin HTML Filename dsap_html bin Config Filename ap_cfg txt ACL Filename HELP URL TFTP Server ap_acl txt 111 111 12 137 Previous F4 Spectrum24 AP 4121 Access Point Product Reference Guide Restore Factory Config Save Configuration Save Config to All APs Firmware Update Menu F3 Config Config Exit CESC 125 Configuring the AP 126 Hote a Piian tiu har N Select Alter Filename s HELP URL TFTP Server 8 Press ENTER 9 Enter the firmware filename in the firmware field Firmware Filename Change this only if the user or system network administrator requires a new filename The default for a 4121 model access point is dsap_fw bin and dsap_htm bin dsap_fw bin or dsap_htm bin Verify the path for the filename is accurate See step one 10 Select trrp server field and enter the TFTP Server IP address 11 Press EN TER 12 Select save F13 to save settings 13 The system prompts Are you sure Y N Type v If using telnet to connect to the AP through an Ethernet interfac
86. e but the coverage area is less than a 1 or 2 Mbps access point since coverage area decreases as bandwidth increases MU Association Process APs recognize MUs as they associate with the AP The AP keeps a list of the MUs it services MUs associate with an AP based on the following conditions e the signal strength between the AP and MU e MUs currently associated with the AP e the MUs encryption and authentication capabilities and the type enabled e the MUs supported data rates 1 Mbps 2 Mbps 5 5 Mbps or 11 Mbps MUs perform preemptive roaming by intermittently scanning for APs and associating with the best available AP Before roaming and associating with APs MUs perform full or partial scans to collect AP statistics and determine the direct sequence channel used by the AP Spectrum24 AP 4121 Access Point Product Reference G uide Introduction Scanning is a periodic process where the MU sends out probe messages on all channels defined by the country code The statistics enable an MU to reassociate by synchronizing its channel to the AP The MU continues communicating with that AP until it needs to switch cells or roam MUs perform full scans at startup In a full scan an MU uses a sequential set of channels as the scan range For each channel in range the MU tests for CCA Clear Channel Assessment When a transmission free channel becomes available the MU broadcasts a probe with the Net_ID ESS and the broadcast BSS ID An AP dir
87. e do not use the Use XMODEM to Update Access Point s Firmware option This option causes the AP to reset and look for the firmware file over the serial interface 14 Under the function heading Use TFTP to Update Access Point s select Firmware and HTML File and press ENTER 15 The system prompts Are you sure Y N Type vy u s5 The Telnet session ends when the user answers y at the prompt Spectrum24 AP 4121 Access Point Product Reference G uide Configuring the AP The WIRED LAN ACTIVITY indicator on the AP does NOT flash To view the file transfer log switch to the TFTP application The AP resets when the file transfer and FLASH programming completes 16 Telnet to the AP using its IP address 17 Atthe prompt type the password Symbol F The password is case sensitive The AP displays the Main Menu 18 Verify the accuracy of the version number on the System Summary screen 19 Press CTRL D to end Telnet session 20 Repeat process for other APs in the network 2 13 2 Updating Using Xmodem The Xmodem upgrade method requires a direct connection between the AP and PC using a Null modem serial cable and terminal emulation software like HyperTerminal Xmodem supports file transfers between terminal emulation programs and the AP UI Xmodem transfers require more time than TFTP transfers To update the AP firmware 1 Copy the firmware files dsap_fw bin and dsap_
88. e Protocol 84 WLAP forward delay 80 88 WLAP hello time 79 80 87 WLAP interfaces 84 WLAP manual BSS ID 79 80 87 WLAP Max Age 79 80 87 WLAP mode 79 86 WLAP priority 79 86 WLAP priority value 11 WLAP forward delay configuration 80 88 WLAP hello time configuration 81 87 Index 10 WLAP manual BSS ID configuration 81 87 WLAP Max Age configuration 81 87 WLAP mode AP 7 8 85 association process 11 bridge 7 8 85 configuration 79 86 repeater 8 root AP 11 system summary 148 WLAP mode LED display special cases 184 WLAP priority configuration 86 WNMP function AP 9 X Xmodem 127 updating configuration 117 Spectrum24 AP 4121 Access Point Product Reference G uide
89. e version The radio type used by the access point Begins a test routine to check the LED functionality and allows the user to determine the AP location Clears the APs statistics and restores the last saved configuration 3 Press ESC to return to the previous menu Spectrum24 AP 4121 Access Point Product Reference G uide Monitoring Statistics 3 2 Interface Statistics The Interface Statistics screen provides e packet forwarding statistics for each interface Ethernet or RF e performance information for each interface in packets per second pps and bytes per second bps The AP interface indicates packets sent to the AP protocol stack configuration requests SN MP Telnet e Select Interface Statistics from the Main Menu to display Symbol Access Point Interface Statistics Packets Packets Bytes Bytes Sent Revd Sent Revd Ethernet 14866 5 1268844 5 RF g g g g AP 13975 5 1257758 5 PPS PPS BPS BPS Sent Rcvd Sent Rcvd Ethernet 5 5 5 5 RF a a a a AP a 7 7 7 Refresh F1 Timed F2 Exit LESC Select refresh atthe status display to update values manually Select Timed to automatically update this display every two seconds Press ESC to return to the previous menu Spectrum24 AP 4121 Access Point Product Reference G uide 149 Monitoring Statistics 3 3 Forwarding Counts Forwarding Counts provides information on packets transmitted from one interface to another Ethernet radio or AP Forwarding Count
90. ected probe response generates an MU ACK Mobile Unit Acknowledgment and the addition of the AP to the AP table with a proximity classification An unsuccessful AP packet transmission generates another MU probe on the same channel If the MU fails to receive a response within the time limit it repeats the probe on the next channel in the sequence This process continues through all channels in the range MUs perform partial scans at programmed intervals when missing expected beacons or after excessive transmission retries In a partial scan the MU scans APs classified as proximate on the AP table For each channel the MU tests for CCA The MU broadcasts a probe with the Net_ID ESS and broadcast BSS_ID when the channel is transmission free It sends an ACK to a directed probe response from the AP and updates the AP table An unsuccessful AP packet transmission causes the MU to broadcast another probe on the same channel The MU classifies an AP as outof range in the AP table if it fails to receive a probe response within the time limits This process continues through all APs classified as proximate on the AP table Spectrum24 AP 4121 Access Point Product Reference Guide 21 Introduction An MU can roam within a coverage area by switching APs Roaming occurs when an unassociated MU attempts to associate or reassociate with an available AP e the supported rate changes or the MU finds a better transmit rate with another AP e the RS
91. ed as the Kerberos Principal for the AP The AP Setup Account is used to control which access points are permitted Kerberos Setup information Kerberos restrictions prohibit the length of the ESSID from exceeding 20 Maha characters O nly alphabetic and numeric characters are allowed Spectrum24 AP 4121 Access Point Product Reference Guide D 13 Configuring the Kerberos KSS Enter the AP access range set the time and status information using the Setup Start Time and Setup Expire Time pull down menus Set the SNMP Setting Click Add when all the parameters have been entered After the AP initializes the AP list view window displays the Connection Events APs successful in gaining access to KSS D 5 Implementing Kerberos without the KSS Kerberos support is available for the AP 4131 access point without the use of the KSS This configuration requires Windows 2000 Server with SP2 D 14 To configure Kerberos support without the KSS 1 Install Active Directory making the server a domain controller preferably a Primary Domain Controller Configuring an Additional Domain Controller requires the presence of a PDC and synchronization of the user database Choose defaults for Domain Controller configuration if itis a PDC Record the Domain name as it would be needed for configuring the AP Enable DNS if no other DNS server is available on the network Enable network time services Daytime or SNTP on this server or another
92. eeeeeaeas 142 Chapter 3 Monitoring SEALISUCS wi ssisavsyrniccsxsiciurusntniaciys ciuzamabdtodeadesianadd vaarpiys 145 3 L System SUMMANY s neepa vatti einai ian colander titan 145 322 Interface Statistics ia eeii AOA T a ani 149 3 3 Forwarding COUNTS ieseni aane EE A 150 34 Mobile Units ech eeaecdt peed epyeneny oriei erates bel cehnbicehtehenies 151 3 5 Mobile IPS rsa ea a cena de ean Pee ale EEA AEE ERa 155 3 O KNOWN APS iye aeaa ana a aE aA Matis NAAA A EEEE N NEELSIE 156 3 7 Ethernet Statstcss ts accic aiai atia aa hi oobi dander 159 3 8 Radio Statistics 6s 0 ie dries Si a tear astieniees 161 3 9 Miscellaneous Statistics renren nenene 167 3 9 1 Analyzing Channel Use cece etter eeeeeeeeees 169 3 9 2 Analyzing RetrieS 0 ei edad 170 3 TO Event History aiaiai ateriaa E AE Maerua 171 B11 Clearing Sta tistes s siccce cs icese aAa N AARE 172 Spectrum24 AP 4121 Access Point Product Reference Guide vii Chapter 4 Hardware Installation cccccsscccsssssesessesse essere 173 o NE Ere AO a La a EE r EE E ha EE EEE 173 4 2 Package Content eri ae o a teenage 173 4 3 Req irem ents eironi aa aa aaa akad ARNE aE 174 4 3 1 Network Connection sseseseeeeesseessssesssisisrsrrrrrrrererereee 174 4 3 2 10 100Base T UTPa neinean ni a aea i 174 43 3 SINGIE Cell risinn aia anaie a a AE aS 175 AA Placing the AP kerosene ution ween ona oreen EA NAE wert 175 4 5 Power O pU NS heriua inienn anai Seis A midis hina bias 1
93. en Kerberos is enabled the AP communicates with each MU using a different 128 bit session key When Kerberos is disabled the access point defaults to previous Encryption algorithm set in the RF Statistics page Reset the access point twice to ensure the access point Encryption algorithm is the same as the associated MU s 2 5 3 Configuring KeyGuard Use KeyG uard to shield the master encryption keys from being discovered through hacking KeyGuard negotiation takes place between the access point and MU upon association with no MU client tool configuration required The access point can use KeyG uard with every MU it supports KeyG uard works on a level below authentication schemes such as Kerberos Refer to Configuring Radio Parameters on page 75 for information on configuring KeyG uard support KeyG uard is compatible with Kerberos and Pre Shared Key 128 bit WEP KeyG uard can be configured as either optional or required In required mode the access point only grants association to the MUs supporting KeyG uard KeyG uard is not supported in O pen no security or 40 bit WEP encryption Spectrum24 AP 4121 Access Point Product Reference Guide 93 Configuring the AP 2 5 4 Configuring Mixed Mode Security Mixed mode security allows a single access point to transmit and receive with mobile units operating with different encryption algorithms In mixed mode additional APs are not needed to support mobile units simply because they are us
94. erlapping channel with the fewest APs The AP saves the channel in FLASH the power LED flashes during this process and turns off ACS The AP flashes its LEDs as if powering up and returns to a STATUS flashing state when complete Non overlapping channels have 25Mhz separation beginning at the first allowed channel for the country for the US and most of Europe channels 1 6 amp 11 are used The channel selection process groups all APs heard over RF into non overlapping bands Then compares the quantities of APs with received signal strengths above the average signal strength Ties are broken based on the AP s MAC address Spectrum24 AP 4121 Access Point Product Reference G uide Configuring the AP Ethernet Disables radio interface if no activity is detected Timeout on the Ethernet line after the seconds indicated 30 255 The AP disassociates MUs and prevents further associations until it detects Ethernet activity The default value g disables this feature The 1 value detects if the 10 100Base T line goes down If the value is set to 2 and the WLAP has connected to the Root AP the WLAP sends a WLAP Alive BPDU on the Ethernet line every WLAP Hello Time seconds to allow WLAPs on the Ethernet line to detect its existence If the value is set to 3 the WLAP tracks the WLAP Alive BPDU If the BPDU is missing for WLAP Hello Time seconds the WLAP state changes to WLAP Lost on Ethernet O nce the WLAP Alive BPDU is detected the W
95. eroperate whichever response the AP selects first becomes the server allocating the information h DHCP Only Only DHCP responses will be accepted by the AP gt BOOTP Only Only BO OTP responses will be accepted by the AP If both DHCP and BO OTP services are required do not selected BootP on1y When BO OTP is enabled the access point ACL and configuration file cfg txt are uploaded ha Disabled Disables BOOTP and DHCP network configuration is manually entered In the Antenna Selection field use the SPACE BAR or LEFT RIG HT ARRO W keys to toggle between Full Diversity Primary Only Secondary Only OF Rx Diversity Select ok or Save to register settings by writing changes to NVM Selecting save displays a confirmation prompt Select Save ALL APs or press F2 to save the AP installation configuration information to all APs with the same Net_ID ESS This option saves the configuration changes for the current AP on the Known APs table to update their configuration and reset after the Spectrum24 AP 4121 Access Point Product Reference G uide Configuring the AP configuration has been modified Users can perform this option only among the same hardware platforms and firmware version 8 The system prompts Warning Update save and reset all APs in the Known AP Menu yes no Type NB 9 Select cancel eESC to disregard any changes made to this screen and return to the previous menu 2 4 Configuring System Param
96. ers include designating a gateway address that provides the ability to forward messages across routers on the wired Ethernet To install an AP 1 From the Main Menu select enter admin Mode The system displays Enter System Password 2 Enter the default password unless the password has been changed Symbol Spectrum24 AP 4121 Access Point Product Reference G uide Configuring the AP 3 Select AP Installation from the Main Menu Symbol Access Point MAIN MENU Show System Summary Show Interface Statistics Show Forwarding Counts Show Mobile Units Show Known APs Show Ethernet Statistics Show RF Statistics Show Misc Statistics Show Event History Enter Admin Mode AP Installation Special Functions Set System Configuration Set RF Configuration Set Access Control List Set Address Filtering Set Type Filtering Set SNMP Configuration Set Event Logging Configuration 4 Verify the AP parameters reflect the network environment Change them as needed 5 Press TAB to scroll to the item and press ENTER to select Symbol Access Point Access Point Installation Country Config CR United States Unit Name Symbol Access Point Additional Gateways IP Address 157 235 95 174 B B O 8 Gateway IP Address 0 8 8 8 D D D D B B O 8 Subnet Mask 255 255 8 8 D D D D B B O 8 DNS IP Address D D D D B B O 8 B B O 8 Net_ID ESS 181 Additional DNS Antenna Selection Full Diversity B B O 8 DHC
97. es independently Each cell provides an 11 Mbps bandwidth Adding cells to the network provides increased coverage area and total system capacity The AP supports MUs operating in Power Save Polling PSP mode or Continuously Aware Mode CAM without user intervention Spectrum24 AP 4121 Access Point Product Reference Guide 17 Introduction 18 The DB 9 9 pin RS 232 serial port provides a UI User Interface connection The UI provides basic management tools for the AP The serial link supports short haul direct serial or long haul telephone line connections The AP is a DTE Data Terminal Equipment device with male pin connectors for the RS 232 port Connecting the AP to a PC requires a null modem cable Spectrum24 AP 4121 Access Point Product Reference G uide Introduction 1 3 5 Direct Sequence Spread Spectrum Spread spectrum broadband uses a narrowband signal to spread the transmission over a segment of the radio frequency band or spectrum Direct sequence is a spread spectrum technique where the transmitted signal is spread over a particular frequency range The Spectrum24 AP 4121 access point uses Direct Sequence Spread Spectrum DSSS for radio communication Direct sequence systems communicate by continuously transmitting a redundant pattern of bits called a chipping sequence Each bit of transmitted data is mapped into chips by the access point and rearranged into a pseudorandom spreading code to form the chipping seq
98. esponse from the KDC 5 Select ok or Save to register settings by writing changes to NVM Selecting Save displays a confirmation prompt 6 Select kss Setup Optional F3 if using KSS to implement Kerberos Spectrum24 AP 4121 Access Point Product Reference Guide 71 Configuring the AP Symbol Access Point Configure Kerberos Setup Server Tf using a KSS please configure the following items KSS Port 34567 KSS Secret EARAARS KSS Name IP Address ksssrv OK CR Save F1 Cancel L ESC KSS Port The TCP number the AP uses to transmit and communicate with the KSS KSS Secret Shared secret key used with KSS to generate an Encryption key Allows the user to change the default Encryption key KSS Name IP Name IP Address of the Kerberos Setup Service for the Address access point 7 Select cancel Cesc to disregard any changes made and return to the previous menu 72 Spectrum24 AP 4121 Access Point Product Reference G uide Configuring the AP 2 4 2 System Password Administration This screen allows the network administrator to configure the passwords for the AP The user password allows the user to Telnet into the AP or use the serial port and have read only privileges Accessing the UI in an Admin mode session through the serial port the session does not time out Entering the Admin mode with Telnet and Serial Port interfaces enabled allows the Admin mode on both interfaces This can cause a security breach Coulton if a use
99. et ere eeeeeeeeeeeeeeeaeaeas 39 2 LL USING Teln etar Senay Wants i dente dts ied we 39 2 1 2 Using a Direct Serial Connection 41 Spectrum24 AP 4121 Access Point Product Reference G uide v vi 2 1 3 Using a Dial Up Connection eee 42 2 1 4 Using a Web Browser eee eee tree 43 2 2 Navigating the Wl vic cai eiaeia aaea e E E a 50 2 2 1 Entering Admin Mode ssssssssssssisisrrerereresssesesrststrrrrrrrrrrrens 52 2 2 2 Changing the Access to the Ul eee 53 2 2 3 Configuring for Dial Up to the Ulese 55 2 2 4 Navigating the UI Using a Web Browser ee 56 2 3 Access Point Installation se cece deen esieseeeed tees es edeaeeeesedeeersinpeeesaneee 56 2 4 Configuring System Parameters 61 2 4 1 Encryption Administration eee eee 67 2 4 2 System Password Administration 73 2 5 Configuring Radio Parameters c eee eee ee eee eeeeeee eae aeaaaaaaee 75 2 5 1 Wireless O peration Parameters 84 2 5 2 WEP Encryption Configuration eeen 89 2 5 3 Configuring KeyG Uard etree ett eee 93 2 5 4 Configuring Mixed Mode Security 94 2 6 Configuring the SNMP Agent 94 2 7 ACL and Address Filtering neee 99 2 7 1 Configuring the AC Lesierse eindde 101 27 2 Range Of MUS nirssl aua ne aie 101 2 7 3 Adding Allowed MUS 20 eeeeee ae iieie 103 2 7 4 Removing Allowed MUS ccccccceeeeeeeeeeectetetetettteeeeeeeeeees 103 21S ACL O PlONS reri aoa Aaa ae RENTAR EA 104 2 7 6 Removing All Allowed MUS ssassn 104 2 7 7 Loa
100. eters The AP provides configuration options for how the unit operates including security access and interface control Some parameters do not require modification 1 Select Set System Configuration from the Main Menu to display Symbol Access Point System Configuration Channel 9 Access Control Disabled Auto Channel Select Disabled Type Filtering Disabled Ethernet Timeout 5 WNMP Functions Enabled Telnet Logins Enabled AP AP State Xchg Enabled Encryption Admin Any Ethernet Interface On RF Interface On Agent Ad Interval 5 S24 Mobile IP Disabled Default Interface Ethernet Mobile Home MD5 key MU MU Disallowed Off Web Server Enabled Modem Connected No Configure Kerberos F3 Inactivity Timeout 5 System Password Admin F4 OK CR Save F1 Save All APs F2 Cancel ESC Save then reset AP for new value to take effect Spectrum24 AP 4121 Access Point Product Reference Guide 61 Configuring the AP amp Once the country has been configured country Config on the AP Hohe Installation screen the channel can be set manually or automatically 2 Configure the AP system settings as required Auto Channel Select 62 Normally run once during initial installation 1 Power up the AP and select auto Channel select ACS Press lt spacebar gt or lt gt to enable or disable To save configuration select F1 On the next power up the AP scans all channels and selects a non ov
101. exclusively for BlueTooth terminal low bandwidth traffic Default is 0 ms If a value is entered the firmware generates an event to interrupt the AP allowing BlueTooth transmissions exclusively for the duration of the interval Set a Bluetooth Beacon Delay to configure the interval the access point waits to transmit beacons after the Bluetooth transmission period The Bluetooth Beacon Delay is useful when several access points transmit Bluetooth data at different intervals The delay allows the APs to re sync transmissions after the Bluetooth interval The Bluetooth Beacon Delay is entered as a unit 0 40 with each unit representing 64 microseconds Determines whether the AP uses a short or long preamble The preamble is approximately 8 bytes of the packet header generated by the AP and attached to the packet prior to transmission The preamble length is transmission data rate dependant The short preamble is 50 shorter than the long preamble This feature is only available on high rate DSSS hardware Non high rate DSSS hardware e g the BAY Stack 660 can not enable the short preamble function and can not see receive or acknowledge messages from short preamble enabled version 2 0 hardware Disable this feature in a mixed hardware network and use the long preamble MUs and APs are required to have the same Short RF Preamble settings for interoperability The default is Disabled Spectrum24 AP 4121 Access Point Product Reference G
102. ey entered in the Preference dialog box is required in the KSS Secret field of the access point Configure Kerberos Authentication Warning screen The Network Port default setting is 34567 Modify the setting if device conflicts occur Click OK to continue 1 From the Edit pull down menu select Kerberos Account or click the Kerberos Account O ptions icon on the top right hand side of the Kerberos Setup Service dialog box D 6 Spectrum24 AP 4121 Access Point Product Reference Guide Configuring the Kerberos KSS EDE rrim Acre mrp ML3 amam The Kerberos Account Entry dialog box displays Select the Edit O pen Enrollment Default Properties checkbox Enter the KDC Name Realm Domain and KDC IP Address values Do not set an ESSID or create a Password at this time Enrollment APs with the same ESSID share common Kerberos account iii information The ESSID is the Kerberos Principal for APs amp The ESSID Principal and Password are sent from the AP during O pen Spectrum24 AP 4121 Access Point Product Reference Guide D 7 Configuring the Kerberos KSS 10 Click Save The Kerberos Account Entry property page displays the new values 11 Click Exit to return to the Kerberos Setup Service window 12 Click the AP ACL icon second icon from the top right hand side Earp Setup Account Database g EENEN TE S Enable Start Expire ee a E Poe Pe ea ees fee ee The AP Setup Accou
103. fined password up to 13 characters for users with read write privileges Ensure the password used matches the Admin Password used to gain access to the System Password Administration screen Enables or disables all trap operations The default value is Disabled Send a trap to the manager when the AP cold boots The default value is Disabled Indicates that community strings other than those specified for the Read O nly and Read Write Community were submitted The default value is Disabled Sends a trap to the manager for radio restart The default is value Disabled Sends a trap to the manager when an ACL violation occurs The default value is Disabled The Trap Hostl IP address or Name The Trap Host2 IP address or Name Spectrum24 AP 4121 Access Point Product Reference G uide Configuring the AP DHCP Change If enabled this trap generates the following enterprise specific traps Gateway Address change Indicates the gateway address for the router has changed IP Address Change Indicates the IP address for the AP has changed IP Address Lease is up Informs the user the IP address leased from the DHCP server is about to expire WLAP If enabled this trap generates the following enterprise Connection specific traps Change e Root WLAP Up Kerberos Errors Indicates that the Root AP connection is setup and ready to forward data Root WLAP Lost If the current WLAP fails to receive a Beacon packet from its Ro
104. g it has finished installing KSS Clear the Yes want view the Read Me file now checkbox or leave it selected to view the Read Me file 7 Click Finish to complete the installation D 2 1 Creating a User Account and Password in Active Directory Before configuring the KSS create a user account on the KDC with domain administration privileges This account allows the KSS to interface with Active Directory to enable KSS configuration To create a user account and password in active directory 1 Select Users from the Active Directory window 2 Rightclick and select N ew Select User The New Object User dialog box displays Create in ML3 symbol com Users First name fence O Initials Last name fs ymbol Full name George Symbol User logon name acorad ML3 symbol com g User logon name pre Windows 2000 Mao oorge omen Spectrum24 AP 4121 Access Point Product Reference G uide D 3 Configuring the Kerberos KSS 3 Enter the user name 20 characters maximum in the First name and Last name fields Click N ext 4 Enter and confirm a password for the user 5 Select the Password never expires checkbox and click N ext A confirmation dialog box displays Click Finish 6 Right click the newly created user account from the Active Directory window Select Properties 7 Select the Members Of tab and click Add 8 Select Domain Admins and click Add Click OK 9 Select the Account tab A Pr
105. gh An area lit sharply might minimize coverage and creates dark areas Uniform antenna placement in an area like even placement of a light bulb provides even efficient coverage Place an AP using the following guidelines e Install the AP as high as practical e Orient the AP vertically for best reception e Point the AP antenna downward if attaching the AP to the ceiling The AP requires one antenna and can use two Two antennas provide diversity that can improve performance and signal reception Attach antennas to ANTENNA connectors on the back of the AP For a single antenna use the PRIMARY ANTENNA connector and set the Antenna Diversity setting to Primary O nly This is the left antenna connector when viewed from the front of the unit It is identified by one vertical bar on the bottom of the unit The secondary antenna is marked with two vertical bars Spectrum24 AP 4121 Access Point Product Reference G uide 175 Hardware Installation 4 5 176 The standard antenna performs well in most office environments O btain additional or higher performance antennas from Symbol Technologies Inc Contact Symbols representative to order the following models e standard rubber antenna e single high performance antenna e twin high performance diversity antennas e mountable F plane antenna If installing two antennas enable the Antenna Selection in the User Interface found in section 2 3 Access Point Installation on page 56
106. he AP using its IP address a The password is case sensitive Set the System Passwords in the Set System Meha Configuration screen The AP displays the Main Menu Symbol Access Point Show Show Show Show Show Show Show Show Show MAIN MENU System Summary nterface Statistics Forwarding Counts Mobile Units nown APs Ethernet Statistics RF Statistics Misc Statistics Event History Enter Admin Mode AP Installation Special Functions System Configuration RF Configuration Access Control List Set Address Filtering Se Type Filtering Set SNMP Configuration Se Event Logging Configuration 4 Select enter Admin Mode and type the password Symbol Spectrum24 AP 4121 Access Point Product Reference G uide 133 Configuring the AP 134 Cauhon Mote ul Select special Functions from the Main Menu and press ENTER oO Press F3 to view the Firmware Update Menu Symbol Access Poin Firmware Update Menu Use TFTP to update Access Point s Firmware HTML file Firmware and HTML File Config Use XMODEM to update Access Point s Firmware HTML file Firmware and HTML File Config Use TFTP to update ALL Access Points Firmware HTML file Alter Filename s HELP URL TFTP Server Firmware Filename dsap_fw bin HTML Filename dsap_htm bin Config Filename ap_cfg txt ACL Filename ap_acl txt HELP URL TFTP Server 111 111 12 137 Previous F4 Exit ESC N Select
107. hlight the packet type using the UP DO WN ARRO W keys 2 Select delete 2 9 3 Controlling Type Filters Set the type filters to forward or discard the types listed To control the type filtering mode 1 Select set System Configuration from the Main Menu 2 Select Type Filtering 3 Press the SPACE BAR to toggle between the Forward Discard OF Disable type filtering and press ENTER to confirm the choice 4 Selectsave ALL APs or press F2 to save the Type Filtering Setup information to all APs with the same Net_ID ESS This option saves configuration changes for the current AP sends two WNMP messages to all other APs on the Known APs table to update their configuration and issues a reset once the configuration is modified Users can perform this option only among the same hardware platforms and firmware version 5 The system prompts Warning Update save and reset all APs in the Known AP Menu yes no Type y 108 Spectrum24 AP 4121 Access Point Product Reference G uide Configuring the AP 6 Select cancel esc to disregard any changes made to this screen and return to the previous menu Users can only enable one type filtering option ata time Moba 2 10 Clearing MUs from the AP Clear the MU association table for diagnostic purposes Clear MUs from the AP if the AP has many MU associations no longer in use Use this option to ensure that MUs associating with the AP are active To clear MUs associated with the A
108. ht unit with a RJ 45 patch cord input connector from the hub on the left hand side and a RJ 45 patch cord output connector via the wiring infrastructure to an access point on the right hand side Also on the lefthand side of the BIAS T is a 24 volt DC connector used to input DC power from the power supply A separate BIAS T is required for each access point comprising the Spectrum24 network The BIAS T has one LED showing solid green when the unit is receiving power from a standard 24 volt power supply Power Input R 45 Connector Connector Connector Bias T Bias T LEFT VIEW RIGHT VIEW At the HUB end an Ethernet patch cable connects to the DATA port on the BIAS T and DC power is connected using a DC power plug The data signal and DC are combined within the BIAS T and connected to the CABLE port An additional patch cable connects the CABLE port to the Ethernet infrastructure Use an Ethernet 4 pair patch cable to connect the individual access points to the BIAS T power distribution system Spectrum24 AP 4121 Access Point Product Reference G uide 179 Hardware Installation 180 Mote RJ 45 RJ 45 Patch Cords Patch Cord 5 50 ft ACCESS POINT Punch down Power Cord termination box SYMBOL Standard 24 Volt 1 amp Power Supply To install a BIAS T system using a single BIAS T unit and access point Steps 1 3 could involve running Ethernet cabling through industrial walls
109. htm bin for a 4121 model access point to the PC hard disk that runs a terminal emulation program Spectrum24 AP 4121 Access Point Product Reference Guide 127 Configuring the AP 2 Attach a null modem serial cable from the AP to the PC serial port 3 On the PC start the emulation program 4 Name the session Spectrum24 AP and select O K amp The procedure described below is for Windows 98 Moho 128 Spectrum24 AP 4121 Access Point Product Reference Guide Configuring the AP 5 Select the correct communication port typically Direct to Com1 along with the following parameters emulation ANSI baud rate 19200 bps data bits 8 stop bits 1 parity none flow control none 6 Select OK 7 Press ENTER to display the Main Menu Symbo Show Show Show Show Show Show Show Show Show Enter Access Point MAIN MENU System Summary nterface Statistics Forwarding Counts Mobile Units nown APs Ethernet Statistics RF Statistics Misc Statistics Event History Admin Mode AP Installation Special Functions Set Set Set Set Set Set Set System Configuration RF Configuration Access Control List Address Filtering Type Filtering SNMP Configuration Event Logging Configuration 8 Select enter Admin Mode and type the password Symb ol Ps The password is case sensitive Mote Spectrum24 AP 4121 Access Point Product Reference G uide 129 Configuring the AP 9 From the
110. icate with based on the best signal strength and lowest MU load distribution If the MU does not find an AP with a workable signal it performs a scan to find any AP As MUs switch APs the AP updates the association table The user can configure the N et_ID ESS A valid Net_ID ESS is an alphanumeric case sensitive identifier up to 32 characters Ensure all nodes within one LAN use the same Net_ID ESS to communicate on the same LAN Multiple wireless LANs can coexist in a single environment by assigning different N et_IDs ESS for APs Spectrum24 AP 4121 Access Point Product Reference Guide Introduction The Root AP and Association Process By default APs with WLAP Mode enabled and within range of each other automatically associate and configure wireless operation parameters at power up This association process determines the wireless connection viability and establishes the Root AP and subsequently designated WLAPs APs communicating wirelessly with one another require the same Net_ID Mohs ESS Encryption mode Data Rate and Short RF Preamble settings The root AP maintains the wireless connection among WLAPs by sending out beacons sending and receiving configuration BPDU Bridge Protocol Data Unit packets between each designated WLAP The WLAP with the lowest WLAP ID becomes the Root AP A concatenation of the WLAP Priority value and the MAC address becomes the WLAP ID All WLAPs associated with the a Root AP use the
111. ide Appendix CCustomer Support Symbol Technologies provides its customers with prompt and accurate customer support Use the Symbol Support Center as the primary contact for any technical problem question or support issue involving Symbol products If the Symbol Customer Support specialists cannot solve a problem access to all technical disciplines within Symbol becomes available for further assistance and support Symbol Customer Support responds to calls by email telephone or fax within the time limits set forth in individual contractual agreements When contacting Symbol Customer Support please provide the following information e serial number of unit e model number or product name e software type and version number C 1 North American Contacts Inside North America contact Symbol by e Symbol Technologies Inc One Symbol Plaza Holtsville New York 11742 1300 Telephone 1 631 738 2400 1 800 SCAN 234 Fax 1 631 738 5990 Symbol Support Center for warranty and service information telephone 1 800 653 5350 fax 631 563 5410 Email support symbol com Spectrum24 AP 4121 Access Point Product Reference Guide C 1 Customer Support C 2 International Contacts Outside North America contact Symbol by e Symbol Technologies Symbol Place Winnersh Triangle Berkshire RG 41 5TP United Kingdom 0800 328 2424 Inside UK 44 118 945 7529 O utside UK For other sales offices use the Symbol Services Web Site for
112. ied by the DHCP server to renew the IP address lease as long as the AP is running This parameter is programmed at the DHCP server For example Windows NT servers typically are set for 3 days 16 Spectrum24 AP 4121 Access Point Product Reference Guide Introduction Program the DHCP or BO OTP server to transfer these files Kerberos security information HTML firmware or network configuration files with these DHCP options for the specific file or information to download Description of DHCP Options Option Number Firmware and HTML file 67 filenames are separated by a space ESSID 128 Configuration filename 129 ACL filename 130 Kerberos enable disable flag 131 set to 0 for disable or 1 for enable on the DHCP server KDC name 132 KSS name 133 KSS port number 134 When the AP receives a network configuration change or is not able to renew the IP address lease the AP sends out an SNMP trap if SN MP is configured 1 3 4 Media Types The AP supports bridging between Ethernet and radio media The Ethernet interface fully complies with Ethernet Rev 2 and IEEE 802 3 specifications The AP supports 10 100Base T wired connections The data transfer rate over radio waves is 11 Mbps The radio interface conforms to IEEE 802 11 specifications The interface operates at 11 Mbps using direct sequence radio technology The AP supports multiple cell operations with fast roaming between cells With the direct sequence system each cell operat
113. ing different encryption schemes To configure mixed mode security 1 In the access point RF Configuration screen set the Shared Key option to Enabled and the Key Width to 128 bit Click F1 to save the settings 2 From the System Configuration screen select lt F3 gt to display the Configure Kerberos Authentication screen Set the Kerberos option to Enabled Enter the KSS IP address If using a DNS server enter the KSS name 3 Click F1 to save the settings Reboot If the Key Width is not set to 128 bit an error message displays once the settings are saved and Kerberos is enabled stating 128 bit must be enabled Consequently 128 bit is required for mixed mode security to be used 2 6 Configuring the SNMP Agent An SNMP manager application gains access to the AP SNMP agent if it has the AP IP address An AP can be accessed through the SNMP Trap Manager to configure settings and parameters Symbol does not recommend this process a Configuring the encryption Keys using the SNMP Trap Manager overrides Piste the Key values for the AP or APs accessed by the SNMP Trap Manager The agent configures as read only read write or disabled to provide security when using SNMP The AP sends specific traps for some conditions Ensure the SNMP trap manager recognizes how to manage these traps 94 Spectrum24 AP 4121 Access Point Product Reference Guide Configuring the AP amp Refer to the Symbol MIB available on the Spect
114. initialization attempts to associate with any other WLAP in the network Spectrum24 AP 4121 Access Point Product Reference Guide 15 Introduction See section 2 4 Configuring System Parameters on page 61 and section 2 5 1 Wireless O peration Parameters on page 84 a To enable this feature set the WLAP Mode to Link Required Mota 1 3 3 DHCP Support The AP can use Dynamic Host Configuration Protocol DHCP to obtain a leased IP address and configuration information from a remote server DHCP is based on BO OTP protocol and can coexist or interoperate with BO OTP Configure the AP to send outa DHCP request searching for a DHCP BO OTP server to acquire Kerberos security information HTML firmware or network configuration files when a boot an AP boot takes place Because BO OTP and DHCP interoperate whichever responds first becomes the server that allocates information When BO OTP is enabled the access point ACL and configuration file cfg txt are uploaded d The AP can be setto only accept replies from DHCP or BO OTP servers or Piste both this is the default setting Setting DHCP to disabled disables BO OTP and DHCP configure network settings manually If running both DHCP and BO OTP do not select BO OTP Only BOOTP should only be used when the server is running BO OTP exclusively See section 2 3 Access Point Installation on page 56 The DHCP client automatically sends a DHCP request at an interval specif
115. isabled Disabled Enabled APAPMessages jsabled Disabled TelnetLogins Enabled Disabled E SystemEvents Enabled Disabled EthernetEvents isabled Disabled E 2 11 1 Updating Using TFTP The Ethernet TFTP update method requires a connection between the AP and a computer on the same Ethernet segment Verify the computer has a TFTP server running on it Running the server requires third party software like FTP PC TCP for DOS or OnNet for Windows The wireless TFTP update method requires a connection between the AP and a TFTP server The TFTP server can be running on a Symbol Spectrum24 device Updating the configuration requires a TFTP server running in the background To update the AP configuration 1 Copy the configuration file AP_CFG TXT to the terminal or computer hard disk Spectrum24 AP 4121 Access Point Product Reference Guide 113 Configuring the AP 2 Telnet to the AP using its IP address 3 Atthe prompt enter the password Symbol a The password is case sensitive Set the System Passwords in the Set System Heta Configuration screen The AP displays the Main M enu Symbol Access Point MAIN MENU Show System Summary AP Installation Show Interface Statistics Special Functions Show Forwarding Counts Set System Configuration Show Mobile Units Set RF Configuration Show Known APs Set Access Control List Show Ethernet Statistics Set Address Filtering Show RF S
116. lable to the user for configuration and are displayed in two 20 bit segments The remaining 24 IV initialization vector bits are factory set and not user configurable 1 Select the desired key and enter the new value to change the Key value 2 Verify and change the values set as needed to reflect the network environment 3 Select ok or Save to register settings by writing changes to NVM Selecting save displays a confirmation prompt 4 Select save ALL APs or press F2 to save the Encryption Key Maintenance information to all APs with the same Net_ID ESS This option saves the configuration changes for the current AP sends two WNMP messages to all other APs on the Known APs table to update their configuration and resets after the configuration has been modified Users can perform this option only among the same hardware platforms and firmware version 5 The system prompts Warning Update save and reset all APs in the Known AP Menu yes no Type X 6 Select cance1 Esc to disregard any changes made to this screen and return to the previous menu Key values are displayed in plain text while being entered O nce saved the keys are displayed as all zeros default display is all zeros Spectrum24 AP 4121 Access Point Product Reference Guide 91 Configuring the AP 92 128 Bit Encryption If 128 bit encryption is the selected WEP Algorithm this screen is displayed Symbol Access Point Encryption Key Maintenance
117. load of a new operating image over the network instead of using a local nonvolatile drive All multicast downstream data packets that match the top 32 bits of the multicast mask are forwarded immediately instead of being queued for transmission at the next DTIM interval Multicast Mask Supports broadcast or party line voice v communications All multicast downstream data packets that match the top 32 bits of the multicast mask are forwarded immediately instead of being queued for transmission at the next DTIM interval Beacon Interval The time between beacons in Kilo microseconds The default is 19a Avoid changing this parameter as it can adversely affect performance Accept Allows the AP to respond to any station sending Broadcast ESSID probe packets with the industry standard broadcast ESS If Enabled this feature allows industry standard devices interoperability The AP probe response includes the ESS and information about the network By default this feature is Enabled and the AP responds only to stations that know the ESSID This helps preserve network security MUs require using Broadcast ESS to use this function MU inactivity Allows industry standard device interoperability by Timeout specifying the time the AP allows for MU inactivity A Spectrum24 AP recognizes MU activity through data packet transmission and reception and through scanning Spectrum24 MUs conduct active scanning O ther industry standard MUs might cond
118. located in the top right hand corner of each page e For access to the Easy Setup and Configuration pages this pop up dialogue box appears Username and Password Required x Enter username for Secure Realm at 157 235 100 686 User Name Password Cancel 1 Type the AP name Symbol Access Point 2 Type the password Symbol amp The password is case sensitive Moha Exit the browser to manually terminate the session Spectrum24 AP 4121 Access Point Product Reference Guide 49 Configuring the AP 2 2 50 Navigating the UI The AP displays a Main Menu when gaining access to the UI Symbol Access Point ow System Summary ow Interface Statistics ow Forwarding Counts ow Mobile Units nown APs ow Ethernet Statistics ow RF Statistics ow Misc Statistics AnNnananinauneiunaunna O E ow Event History Enter Admin Mode MAIN MENU AP Installation Special Functions Set System Configuration Set RF Configuration Set Access Control List Set Address Filtering Set Type Filtering Set SNMP Configuration Set Event Logging Configuration The top line displays the System Name for the AP default is Symbol Access Point and the name of the configuration screen The UI uses the following keystrokes to navigate through the menus and screens depending on the terminal emulation For terminal emulation programs that do not support arrow or function keys use the control cha
119. m cable part number 61383 00 0 by contacting a Symbol sales representative Test and use the radio network with an MU 1 Network Connection amp Mote Locate connectors for Ethernet and power on the back of the AP Ethernet configurations vary according to the environment Determine the Ethernet wiring to connect the AP 10 100Base T UTP or single cell The site survey determines the number of APs to install and their location 10 100Base T UTP Use a 10 100Base T connection for an AP attached to a wired UTP Ethernet hub Normal 10 100Base T limitations apply To connect 10 100Base T UTP 1 Plug the data cable RJ 45 connector into the AP RJ 45 connector 2 Plug the other end of the data cable into the LAN access port possibly a hub or wall connection Spectrum24 AP 4121 Access Point Product Reference Guide 3 Add more access points as needed When connecting the AP 4121 model access point to an Ethernet switch Meha ensure switch port parameters are set to Half Duplex Severe performance degradation may result from mis matched speed or duplex mode Refer to the rear of the access point for product model information 4 3 3 Single Cell The single cell connection option allows a single AP to bridge MUs without a wired network MUs appear as peers in any Ethernet environment 4 4 Placing the AP Antenna coverage is analogous to lighting Users might find an area lit from far away to be not bright enou
120. m24 AP 4121 Access Point Product Reference Guide Monitoring Statistics Chapter3 Monitoring Statistics The AP keeps statistics of its transactions during operation These statistics indicate traffic transmission success and the existence of other radio network devices Clear statistics as needed 3 1 System Summary The Show System Summary screen displays information about the APs configuration To view information about the AP configuration 1 Select Show System Summary from the Main Menu to display Symbol Access Point Unit Name MAC Address BSS IP Address Net_ID ESS Channel Country Antenna Selection Shared Key Kerberos Key Width Current MUs Total Assoc System Up Time AP Configuration ACL amp Filters System Summary Symbol Access Point D AD F8 8D 4A 7D 157 235 181 154 Kerb 11 USA Full Diversity Enabled Enabled 128 bit 1 23 5 83 11 Unchanged Unchanged Exit CESC Spectrum24 AP 4121 Access Point Product Reference Guide Access Control Disabled WLAP Mode Disabled Model Number AP4121 Serial Number BBABF88D4A7D Hardware Revision REV 4 AP Firmware Ver 82 78 86 RF Firmware Ver V2 78 21 HTML File Ver 82 78 1 Radio Type T2 Start Flashing All LEDs Reset AP 145 Monitoring Statistics 2 146 Configure the AP system settings as required Unit Name MAC Address BSS IP Address Net_ID ESS Channel Country Antenna Selection Shared Key
121. m24 High Rate 11 Mbps Wireless LAN Software CDROM or go to the Symbol Website http www symbol com services downloads download_wireless htm If internet access is unavailable contact a sales representative for a CD O nce downloaded extract the files to the computer hard drive Java Runtime is required on the Windows 2000 server before the KSS is installed Java Runtime is on the Spectrum24 High Rate 11 Mbps Wireless LAN Software CDROM within the KSS directory 1 Insert the Spectrum24 High Rate 11 Mbps Wireless LAN Software CDROM optional if itis being used in the installation 2 Specify the location of the KSS install folder The KSS files either reside on the CDRO M or computer hard drive if they were downloaded from the Symbol Website 3 Double click Setup exe from the KSS Install folder The KSS Welcome screen displays Click N ext 4 When the Software License Agreement screen displays click Yes if accepting all the terms of the license agreement or No to exit and cancel the KSS installation Spectrum24 AP 4121 Access Point Product Reference Guide Configuring the Kerberos KSS 5 Click Next when the Choose Destination Location dialog box displays to install KSS to the default destination folder The user has the option of clicking Browse and selecting a different folder if necessary A progress bar displays showing the progress of the KSS files installation 6 The Setup Complete dialog box displays statin
122. mary or secondary antenna but transmits on the primary antenna only Verify network traffic does not exceed 37 of bandwidth Check to see that the wired network does not exceed 10 broadcast messages per second Verify wired network topology and configuration 4 11 Setting Up MUs Refer to the LA 4100 Series PC Card amp PCI Adapter Product Reference Guide for installing drivers client software and testing Use the default values for the Net_ID ESS and other configuration parameters until network connection verification MUs attach to the network and interact with the AP transparently 186 Spectrum24 AP 4121 Access Point Product Reference G uide Appendix A Specifi cations A 1 Physical Characteristics Dimensions 1 75 H x6 Lx8 5 W 4 45 cm H x15 24 cm Lx 21 59 cm W Weight 1 Ibs 0 454 kg w power supply O perating 42 F to 1312 F 202 C to 552 C Temperature Storage Temperature 402 F to 1492 F 402 C to 652 C Humidity 10 to 95 noncondensing Shock 40 G 11 ms half sine ESD meets CE Mark Drop withstands up to a 30 in 76 cm drop to concrete with possible surface marring Spectrum24 AP 4121 Access Point Product Reference Guide A 1 Specifications A 2 Radio Characteristics Frequency Range country dependent within 2400 MHz to 2500 MHz A 2 Radio Data Rate 11 Mbps Range TX Max Radiated EIRP Modulation TX O ut of Band Emissions e 11Mbps_ Optional e 5 5 Mbps
123. maximum combined entries are available for the ACL and Disallowed Address Filtering The three modes available Disabled Allowed and Disallowed are selected in the Access Control section of the System Configuration Menu Configuring the AP amp When using the save a11 Aps F2 option only a portion of the access point ACL Mote is saved and passed on to the access points Symbol Access Point System Configuration Channel 11 Auto Channel Select Disabled Ethernet Timeout Lil Telnet Logins Enabled Encryption Admin Any Agent Ad Interval 5 S24 Mobile IP Disabled Mobile Home MD5 key Web Server Enabled Configure Kerberos F3 System Password Admin F4 OK CR Save Fl Access Contro Type Fi tering WNMP Functions AP AP S Ethernet RF Inter Default ate Xchg Interface face nterface MU MU Disallowed Modem Connected Save All APs F2 Save then reset AP for new value alue to take effect Spectrum24 AP 4121 Access Point Product Reference Guide Disabled Disabled Enabled Enabled On On Ethernet off No Cancel ESC 99 Configuring the AP 100 The dot in front of certain parameters functions or options for example Access Control indicates these items update to all APs with the same Net_ID ESS when choosing the save ALL APs CF2 option Users can perform this option only among the same hardware platforms and same firmware
124. mmary AP Installation Show Interface Statistics Special Functions Show Forwarding Counts Set System Configuration Show Mobile Units Set RF Configuration Show Known APs Set Access Control List Show Ethernet Statistics Set Address Filtering Show RF Statistics Set Type Filtering Show Misc Statistics Set SNMP Configuration Show Event History Set Event Logging Configuration Enter Admin Mode Regular Home Agent Foreign Agen Spectrum24 AP 4121 Access Point Product Reference Guide 151 Monitoring Statistics Use TAB or arrow keys to highlight the desired screen Press ENTER to display the selected screen Select Regular from the Mobile Units prompt to display Symbol Access Point Mobile Units DD AD F8 29 C9 E2 C R11 DD AD F8 10 4A 13 P R11 Information CR Echo F1 Timed F2 Next F3 Exit CESC The display shows the currently associated MUs listed by MAC address The list appears as follows addr p i e V Where addr MU MAC address in XX XX XX XX XX XX format p MUs power mode P for PSP C for CAM An unassociated MU does not display any character i MU location on AP interfaces R for radio MUs with an A were associated with the AP in the past but no longer associate with it at time of verifying status AP current Radio transmit rate for the messages sent to this MU 11 for 11 Mbps e Encryption is enabled for this device Indicates a Symbol Voice enabled device NK MU failed to obtain a session key
125. mp Use the TAB key to scroll through menu items Mota Updating the firmware requires a TFTP server running in the background To update the AP firmware 1 Copy the Firmware files dsap_fw bin and dsap_htm bin on the terminal or PC hard disk 2 Telnet to the AP using its IP address 3 Atthe prompt type the password Symb ol a The password is case sensitive Set the System Passwords in the Set System Note Configuration screen The AP displays the Main Menu Symbo Ow Ow Ow Ow Ow Ow Annunnuneununn Ow Enter Access Point MAIN MENU System Summary nterface Statistics Forwarding Counts Mobile Units nown APs Ethernet Statistics RF Statistics Misc Statistics Event History Admin Mode AP Installation Special Functions Set Set Se Se Set Se Set System Configuration RF Configuration Access Control List Address Filtering Type Filtering SNMP Configuration Event Logging Configuration 4 Select enter Admin Mode and enter the password Symb 124 ol Spectrum24 AP 4121 Access Point Product Reference G uide Configuring the AP 5 Select special Functions from the Main Menu and press ENTER Symbol Access Point Special Functions Menu Clear All Statistics Clear MU Table Clear ACL Clear Address Filters Clear Type Filters Load ACL from File via TFTP Load ACL from File via XMODEM Load ACL from MU List Reset AP Configure Network Tim
126. n Service AS Ethernet Spectrum24 AP 4121 Access Point Product Reference Guide 31 Introduction Mohs Configure the AP through a direct serial connection if needed Configure SNMP to be Read Only or Read Write from the KSS Disabling Kerberos returns Kerberos disabled is the default setting Telnet SNMP and Web services to their previous setting If an AP cannot be accessed through a serial connection and SNMP is not configured for read write use of DHCP option 131 is another way to disable Kerberos The optional KSS in a Spectrum24 environment runs only on a Windows 2000 server with Active Directory enabled Future supported platforms include Linux Solaris SCO Unixware and HP UX 1 3 11 KSS Open Enrollment 32 When the KSS startup and KDC authentication completes successfully the KSS opens a listening TCP IP connection port and waits for any AP several APs can connect to the KSS concurrently that requests KSS AP setup services Each AP requires an AP Setup Account entry O pen Enrollment mode allows the system administrator to enter information for APs with the same ESSID therefore the same Kerberos Principal The system administrator creates an AP Setup Account entry enter all the O pen Enrollment properties including a Kerberos Principal in O pen Enrollment mode Complete the Kerberos account with this Principal in the Kerberos Account database When the KSS Listening mode and Open Enrollment is enable
127. n changes to APs individually Each AP requires an individual IP address Programmable SNMP Trap Support The SNMP protocol defines the method for obtaining information about networks operating characteristics and changing router and gateway parameters The SNMP protocol consists of three elements management stations management information MIB a management protocol SNMP Nodes can perform as hosts routers bridges or other devices that can communicate status information An SNMP Manager is a node that runs the SNMP management process to systematically monitor and manage the network The management station performs network management by running application management software An SNMP trap is an alert to all configured management stations of some significant event that occurred on the network The management station queries all stations for details of each specific event including what when and where the event took place and the current status of the node or network The format or structure is defined in the SNMP protocol The MIB defines what and who monitors the variables Spectrum24 AP 4121 Access Point Product Reference Guide 35 Introduction 36 Using SNMP The AP includes SN MP agent versions accessible through an SNMP manager application such as HP O pen View or Cabletron Spectrum MIB browser The SNMP agent supports SN MP versions 1 and a subset of version 2 MIB II the 802 11 MIB and one Symbol proprietary MIB
128. n provides a facility to remove MUs from the ACL 1 Highlight the entry using the UP DO WN ARRO W keys 2 PresS Delete F1 Spectrum24 AP 4121 Access Point Product Reference G uide 103 Configuring the AP 2 7 5 ACLOptions To switch between allowed Disallowed OF Disabled options locate the ACL in the System Configuration screen Use ACL options from the Set System Configuration menu Where Option Description Allowed to allow only MUs with their MAC address in the ACL to associate with AP Disallowed to prevent MUs in the Address Filters list from associating with the AP Disabled allows any MU to associate with the AP no ACL filters are in effect 1 Select set System Configuration from the Main Menu 2 Press TAB to select access Control 3 Press SPACE BAR to select Allowed Disallowed OF Disabled 4 Select save to save changes 2 7 6 Removing All Allowed MUs The AP provides a facility to remove all MUs from the ACL 1 Select special Functions from the Main Menu 2 Select ciear ACL 2 7 7 Load ACL from MU List This option from the Special Functions menu takes all associated MUs and creates an ACL from them This builds an ACL without having to manually type addresses Edit the ACL using the add and delete functions 1 Select special Functions from the Main Menu 2 Select Load ACL from mu List to add addresses of associated MUs to the ACL 104 Spectrum24 AP 4121 Access Point Product Reference G
129. nfigured time the session terminates Press CTRL D to manually terminate the session 4 Proceed to section 2 13 1 Update Using TFTP on page 123 to update the AP firmware or HTML file or to section 2 2 Navigating the UI on page 50 40 Spectrum24 AP 4121 Access Point Product Reference Guide Configuring the AP 2 1 2 Using a Direct Serial Connection The factory configured AP accepts a dial up connection between the AP and a modem A UI connection requires a straight through cable between the modem and the AP See section 2 2 3 Configuring for Dial Up to the UI on page 55 The AP serial port is a DB 9 9 pin male connector The serial port allows a UI connection to a configuration PC Connecting the AP directly to a PC with a 9 pin serial port requires a null modem cable with the following configuration Assuming the UI and serial port are enabled on the AP 1 Apply Power to the AP 2 Attach a null modem serial cable from the AP to the terminal or PC serial port 3 From the terminal start the communication program such as HyperTerminal for windows 4 Select the correct COM port along with the following parameters emulation ANSI baud rate 19200 bps data bits 8 stop bits 1 parity none flow control none There is no password requirement Spectrum24 AP 4121 Access Point Product Reference Guide 41 Configuring the AP 2 1 3 42 amp Mota 5 Press ESC to refresh the display The AP display
130. nfiguring the AP 2 4 1 Encryption Administration The ability to change view or restrict access to encryption administration settings depends on the Encryption Admin configuration parameter The options for this parameter are serial and Any These options are configurable via the Serial UI located in the System Configuration screen The Encryption Admin parameter effects all interfaces supported by the AP Serial Telnet HTML Web browser and SN MP The tables in this section are useful for determining the access level to encryption parameters available to the user through each type of interface For example if the Encryption Admin Configuration parameter is selected in the System Configuration screen the user with admin privileges sets the option to Serial The user can View Modify through the Serial UI and can View Only through the Telnet UI A Telnet client can change the setting from any to Serial Once setto Serial a Telnet has no access to this parameter When the Encryption Admin configuration parameter is set to Any WEP Encryption configuration is allowed on all interfaces Mota Spectrum24 AP 4121 Access Point Product Reference Guide 67 Configuring the AP Encryption Parameters for Telnet and Serial Interfaces Parameter Access Method Interface Serial Encryption Admin System Configuration Telnet Serial Serial UI View Modify Screen View Modify Telnet UI View O nly WEP Privacy RF Config
131. ngs as required WLAP Mode WLAP Priority Specifies the APs wireless AP operation status Enabled e the AP sets up automatically for wireless operation The AP can operate in any of these configurations Wireless Repeater or Ethernet Bridge Disabled e no wireless operation possible Default setting Link Required At power up e Ifthe WLAP is the Root AP an Ethernet connection is required Ifthe WLAP is a designated WLAP association to the Root AP is required During normal operation e Ifthe Ethernet connection is lost the Root AP resets ifthe WLAP association is lost the designated WLAP resets Allows a user to determine the Root and the designated WLAP in wireless operation Concatenate the priority value as the most significant portion of the MAC address An AP with a lower numerical value for priority is more likely to become the root AP The default is saag hex from the xFFFF range Spectrum24 AP 4121 Access Point Product Reference G uide Configuring the AP WLAP Manual Specifies the BSS_ID of a particular WLAP and BSS ID forces the current AP to associate only with that WLAP If setting the WLAP Manual BSS ID to the current BSS _ID the current AP jumps into Functional State immediately and waits for an Association Request from the other WLAP See section 3 8 Radio Statistics on page 161 This feature speeds up the association process and minimizes confusion when more than two WLAPs
132. nication exchanged Spectrum24 AP 4121 Access Point Product Reference Guide 65 Configuring the AP 66 To enable or disable interfaces on the AP modify the following parameters Ethernet Enables or disables wired Ethernet Interface The default value is On RF Interface Enables or disables radio The default value is On Default Interface Specifies the default interface Ethernet WLAP OF Reserved that the AP forwards a frame to if the AP cannot find the address in its forwarding database The default interface is Ethernet The AP defaults to Ethernet when Reserved is selected Verify the values set reflect the network environment Change as needed Select ok or Save to register settings by writing changes to NVM Selecting save displays a confirmation prompt Select Save ALL APs or press F2 to save the System Configuration information to all APs with the same Net_ID ESS This option saves the configuration changes for the current AP sends two WNMP messages to all other APs on the Known APs table to update their configuration and resets after the configuration has been modified Users can perform this option only among the same hardware platforms and firmware version The system prompts Warning Update save and reset all APs in the Known AP Menu yes no Type Y Select cance1 ESC to disregard any changes made to this screen and return to the previous menu Spectrum24 AP 4121 Access Point Product Reference G uide Co
133. nnel Select Statistics ype 5 Per Channel Statistics Retry Histogram Refresh F1 Timed F2 Exit LESC Spectrum24 AP 4121 Access Point Product Reference Guide 167 Monitoring Statistics WNMP statistics include Echoes echo requests received by the AP Pings ping requests received by the AP Passthrough Echoes echoes for MUs associated with the AP SN MP statistics include Requests configuration requests received from the SNMP manager Traps AP messages sent to the SNMP manager Filter statistics include ACL Violations attempts by MU notin ACL list to associate with this AP Address packets discarded by address filter Type packets discarded by type filter Mobile IP statistics include Agent Ad Sent number of agent advertisements sent from the AP Reg Request number of Mobile IP registration requests received Received Reg Reply Sent number of Mobile IP registration replies sent Select refresh atthe status display to update values manually Select Timed to automatically update this display every two seconds Press ESC to return to the previous menu 168 Spectrum24 AP 4121 Access Point Product Reference G uide Monitoring Statistics 3 9 1 Analyzing Channel Use The AP keeps statistics for individual Channels frequencies These identify channels that have difficulty transmitting or receiving due to retries To view statistics for individual channels 1 Select Show Misc Statistics from the Main Menu 2 Sele
134. nt Ps It is recommended that all APs have the same username and password so the same configuration steps apply to all APs and only one account in Active Directory is needed Network time can be obtained from a time server SNTP or Daytime other than the same Win2k Server where the KDC resides In the N etwork Time screen enter the IP address of the time server in the Time Server field Spectrum24 AP 4121 Access Point Product Reference Guide D 15 Configuring the Kerberos KSS D 6 Kerberos Error Codes D 6 1 KDC Error Codes The following error codes and their explanations display on the AP Event D 16 Monitor screen when if an error occurs Error Code Explanation KDC ERR NONE O No error KDC ERR NAME EXP 1 Client entry in database expired KDC ERR SERVICE EXP 2 Server entry in database expired KDC ERR BAD PVN 3 Requested protocol version number not supported KDC ERR C OLD MAST KVNO 4 KDC ERR S OLD MAST KVNO 5 Client s key encrypted in old master key Server s key encrypted in old master key KDC ERR C PRINCIPAL UNKNOWN 6 Client not found in Kerberos database KDC ERR S PRINCIPAL UNKNOWN 7 Server not found in Kerberos database KDC_ERR PRINCIPAL NOT UNIQUE 8 Multiple principal entries in database KDC ERR NULL KEY 9 KDC_ERR_CANNOT_POSTDATE 10 Ticket not eligible for postdating The client or server has a null key KDC ERR NEVER VALID 11 Re
135. nt Database dialog box displays Select the Edit Open Enrollment Default Properties checkbox If required select Enable Read Write from the SN MP Setting field If the Edit O pen Enrollment Default Properties checkbox is not selected the user has the ability to restrict KSS authentication for the single access point displayed in the MAC Address Hex field Use the Setup Status Setup Start Time and Setup Expire Time pull down menus to specify the time period the selected access point is allowed to authenticate with the KSS D 8 Spectrum24 AP 4121 Access Point Product Reference G uide Configuring the Kerberos KSS Selecting Enable Always from the Setup Status pull down menu enables KSS authentication for the selected access point at all times Selecting Enable Start Expire from the Setup Status pull down menu enables KSS authentication for the selected access point only during the time period specified within the Setup Start Time and Setup Expire Time pull down menus Selecting Disable prohibits the selected access point from authenticating with the KSS 13 Click Save The AP Setup Account Database property page displays the new settings Click Exit to return to the Kerberos Setup Service window 14 From the File menu select Enable O pen Enrollment or click on the Enable Open Enrollment icon to enable the KSS to discover Kerberos enabled access points on the network The Enable Open Enrollment info box appears Ena
136. ntroduction Mobile IP is like giving an individual a local post office forwarding address when leaving home for an extended period When mail arrives for the individual home address it is forwarded by the local post office to the current care of address Using this method only the local post office requires notification of the individual current address While this example represents the general concept of Mobile IP operation and functionality it does not represent the implementation of Mobile IP used A tunnel is the path taken by the original packet encapsulated within the payload portion of a second packet to some destination on the network A Home Agentis an AP acting as a router on the MU home network The home agent intercepts packets sent to the MU home address and tunnels the message to the MU atits current location This happens as long as the MU keeps its home agent informed of its current location on some foreign link A Foreign Agent is an AP acting as a router at the MU location on a foreign link The foreign agent serves as the default router for packets sent out by the MU connected on the same foreign link A care of address is the IP address used by the MU visiting a foreign link This address changes each time the MU moves to another foreign link It can also be viewed as an exit point of a tunnel between the MU home agent and the MU itself The 24 Mobile IP roaming across routers feature enables an MU on the Interne
137. oint Known Access Points Net_ID 181 MAC Address IP Address CH HST HSQ MUS KBIOS FW Ver Away DD A0 F8 8A 2F FF 111 111 12 62 3 7 5 5 D2 D B8 D AD F8 8A 3 CD 111 111 12 63 6 A 4 5 51 58 18 D AD F8 8A 3 49 111 111 12 64 11 4 5 51 8 31 Echo CF1 Delete F2 Next F3 Previous F4 Switch Exit ESC 156 Spectrum24 AP 4121 Access Point Product Reference G uide Monitoring Statistics e Select switch to view the Unit Name for each known AP Symbol Access Point Known Access Points Net_ID 101 IP Address Unit Name 111 111 12 62 ENG_ONE 111 111 12 63 PUBS_TWO 111 111 12 64 CAD_THREE Echo F1 Delete F2 Next F3 Previous F4 Switch Exit LESC Spectrum24 AP 4121 Access Point Product Reference Guide 157 Monitoring Statistics The AP displays for each known AP MAC Address The unique 48 bit hard coded Media Access Control address known as the devices station identifier IP Address The network assigned Internet Protocol address DS Channel The direct sequence channel used by the AP MUS The MUs associated with the AP KBIOS The data traffic handled by the AP in kilobytes in and out per second FW_Ver The firmware version used by the specified AP Away Determines if the AP functions as a part of the network or away Away indicates the last known transmission that took place in 12 or more seconds e Select echo cr1 to ping an entry after selecting the desired entry using the TAB key e Select peiete r
138. older path of the directory created in step one Select Virtual Directory Type a folder alias such as WebHelp and select OK Check Enable Default Document option Type S24apHelp htm as the default document and select Apply Select O K to exit the window Test the accessibility to the Help file using a Web browser with a URL similar to http xxx xxx xxx xxx WebH elp Where xxx Xxx XXX Xxx is IP address of the server Accessing Web Browser UI Using a Web browser to gain access to the UI requires the workstation to have a TCP IP stack and access to a Web browser The remote station can be on the wired or wireless LAN Spectrum24 AP 4121 Access Point Product Reference Guide 45 Configuring the AP To ensure the web Server option is enabled for the AP 1 2 3 4 Access the UI using a Serial or Telnet connection From the main menu select System Configuration Verify the web Server option on the system Configuration Screen is enabled Select save F1 to save the configuration To reset the AP for changes to take effect 1 2 3 Select the special Functions Screen Select Reset AP Select yes at the confirmation prompt To enable Help file access change the Help URL parameter 1 2 3 46 Select the special Functions screen Press F3 to view the Firmware Functions Update Menu Use the TAB or UP DOWN ARRO W key to select the Aiter Filename s HELP URL TFTP Server Press EN TER Use the TA
139. on programs and the AP UI Xmodem transfers require more time than TFTP transfers Hoha To update the AP configuration 1 Copy the configuration file AP_CFG TXT to the computer hard disk that runs a terminal emulation program 2 Attach a null modem serial cable from the AP to the computer serial port 3 On the computer start the communication program 4 Name the session Spectrum24 AP and select O K d The procedure described below is for Windows 9x Hoha 5 Select the correct communication port typically Direct to Com1 along with the following parameters emulation ANSI baud rate 19200 bps data bits 8 stop bits 1 parity none flow control none 6 Select OK Spectrum24 AP 4121 Access Point Product Reference G uide 117 Configuring the AP 7 Press ENTER to display the Main Menu Symbol Access Point MAIN MENU Show System Summary AP Installation Show Interface Statistics Special Functions Show Forwarding Counts Set System Configuration Show Mobile Units Set RF Configuration Show Known APs Set Access Control List Show Ethernet Statistics Set Address Filtering Show RF Statistics Set Type Filtering Show Misc Statistics Set SNMP Configuration Show Event History Set Event Logging Configuration Enter Admin Mode 8 Select enter Admin Mode and enter the password Symbol go The password is case sensitive Hohe 118 Spectrum24 AP 4121 Access Point Product Reference Guide 9 From
140. onfiguration settings clears all configuration and statistics for the AP depending on the DHCP setting DHCP Disabled All AP configuration and statistics are reset except the AP Installation screen DHCP Enabled All AP configuration and statistics are reset To restore factory configuration 1 Select Special Functions from the Main Menu 2 Select Restore Factory Config The AP erases all configuration information and replaces it with the factory configuration 3 The AP automatically resets PS When the factory configuration is restored the ACL listis erased The Country Mote Configuration and Channel Setting are not erased Spectrum24 AP 4121 Access Point Product Reference G uide 141 Configuring the AP 2 20 Configuring Network Time The access point is able to display the local time of the Kerberos server used to validate requests for secured password protected resources Kerberos allows for some clock skew between servers and access points as set in both the KDC and access points to account for clock discrepancies To view the access point network time 1 From the main menu select Special Functions amp O nly use the Configure Network Time screen when the optional KSS utility is not being used Network time is needed to associate the time of day to mobile unit requests for access point resources 2 Select Configure Network Time Symbol Access Point Configure Network Time Time Server Time 14 8
141. onitor network traffic and intercept passwords The use of strong authentication methods that do not disclose passwords is necessary Symbol uses the Kerberos authentication service protocol specified in RFC 1510 to authenticate users clients in a wireless network environment and to securely distribute the encryption keys used for both encrypting and decrypting plain text Spectrum24 AP 4121 Access Point Product Reference Guide 27 Introduction 28 amp Hohe For a detailed description of the Kerberos authentication service protocol refer to RFC 1510 Kerberos Network Authentication Service V5 A basic understanding of RFC 1510 Kerberos Network Authentication Service V5 is helpful in understanding how Kerberos functions Kerberos optionally uses the KSS on a Windows 2000 server By default Spectrum24 devices operate in an open system network where any wireless device can associate with an AP without authorization Kerberos requires Spectrum24 device authentication before access to the wired network is permitted Kerberos cannot operate when the AP is in wireless WLAP mode If DHCP is disabled or a DHCP server is not available use the Kerberos Authentication screen to manually configure Kerberos See section Manual Kerberos Authentication Configuration page 70 Kerberos can be enabled automatically in an AP physically attached to an Ethernet network from a DHCP server on the same network Program the DHCP server
142. operties dialog box displays for the user George Symbol i 10 Select the Use DES encryption types for this account and Do not require Kerberos preauthentication checkboxes 11 Click OK D 4 Spectrum24 AP 4121 Access Point Product Reference G uide Configuring the Kerberos KSS D 3 Preparing the KSS for Access Point Validation To prepare the KSS to validate access points 1 Click Start select Programs WLAN WLAN KSS and Start KSS The Kerberos Setup Service dialog box displays S Kerberos Setup Service 2 Using the user account created in the previous section select Admin Info from the File menu or click the Key icon from the top left hand corner of the Kerberos Setup Service dialog box Enter Admin info and password information 3 Click OK to continue 4 Select the Preference icon third icon from the right from the Kerberos Setup Service dialog box Spectrum24 AP 4121 Access Point Product Reference Guide D 5 Configuring the Kerberos KSS The Preference dialog box displays Eeg f4Preference Network Port 34567 gt Default Secret Key User Defined Secret Key Secret Key Confirm Secret Key cae ok fence 5 Select User Defined Secret Key to enter and confirm a secret key different from the default key If the default secret key is acceptable leave the Default Secret Key checkbox selected The same secret k
143. or ceilings Only a qualified contractor should perform this kind of cabling 1 Attach one end of a RJ 45 patch cord 5 50 ft to the access point Run the other end of the RJ 45 patch cord through a ceiling or wall into a punch down termination box 2 Runa CAT 5 Ethernet cable from the punch down termination box to another punch down termination box in the wall or ceiling near the intended location of the BIAS T unit 3 Secure a second RJ 45 5 50 ft patch cord from the punch down termination box to the output connector on the righthand side of the BIAS T unit 4 Attach a third RJ 45 patch cord from the input connector on the left hand side of the BIAS T unit to the HUB supporting the Spectrum24 component installation Spectrum24 AP 4121 Access Point Product Reference Guide Hardware Installation 5 Attach the cable supplied with the Symbol Standard 24 volt power supply to the power input connector on the left hand side of the BIAS T unit 6 Repeat steps 1 through 5 for each additional BIAS T unit and Spectrum24 access point connected to the HUB as part of the same Spectrum24 component installation Spectrum24 AP 4121 Access Point Product Reference Guide 181 Hardware Installation 4 9 LED Indicators The top panel LED indicators provide a status display indicating transmission and other activity The indicators are Power Flashing indicates AP initialization Steady Green during operation Wired LAN Activity
144. os 70 using TFTP 113 Media Access Control 9 miscellaneous statistics 167 Mobile IP 22 configuration 140 foreign agent 23 155 mapping 155 roaming across routers 23 using MD5 authentication 139 mobile unit MU ESS 9 model number 148 monitoring statistics 145 ethernet statistics 159 interface statistics 149 miscellaneous statistics 167 Spectrum24 AP 4121 Access Point Product Reference G uide radio statistics 161 MU 9 access control 15 ACL15 association process 24 authentication 27 CAM 25 cellular coverage 9 clearing MUs from the AP 109 current transmit rate 154 data decryption 26 data encryption 26 DTIM 26 filtering 15 home agent 24 known APs 156 Mobile IP 22 155 performing pings 136 power mode 153 priority 154 removing allowed MUs 104 scanning 24 security 26 statistics 151 supported rates 154 MU association process 20 multiple APs 6 N network topology 4 P programmable SNMP trap 35 management stations 35 MIB 35 SN MP agent 35 PSP stations 25 beacon 25 MU 25 radio basics 3 center frequency 3 digital data 3 electromagnetic waves 3 environment 3 ethernet device 4 IEEE address 4 MAC 4 radio links 3 receiving antenna 3 wireless network 5 radio interface 17 radio parameters 75 AP 9 75 BC MC Q maximum 76 beacon interval 77 broadcast ESS 77 configuration 9 configure 75 data transmission rate 78 DTIM interval 76 Encryption Key ID 81 Encryption Key Maintenance 81 max retrie
145. ot AP within one second it considers the Root AP lost The WLAP eventually resets itself to reestablish the network topology Designated WLAP Up Indicates that the Designated WLAP connection is setup and ready to forward data Designated WLAP Lost If the current WLAP fails to receive a Config BPDU packet from its Designated WLAP for MAX AGE time it considers the Designated WLAP lost AP failed to authenticate MU exceeded time allowed to authenticate 3 Verify the values reflect the network environment Change them as needed Spectrum24 AP 4121 Access Point Product Reference Guide 97 Configuring the AP 98 Select ok or Save to register settings by writing changes to NVM Selecting save displays a confirmation prompt Select Save ALL APs Or press F2 to save the SNMP Configuration information to all APs with the same Net_ID ESS This option saves the configuration changes for the current AP sends two WNMP messages to all other APs on the Known APs table to update their configuration and resets after the configuration has been modified Users can perform this option only among the same hardware platforms and firmware version The system prompts Warning Update save and reset all APs in the Known AP Menu yes no Type Ya Select cance1 ESC to disregard any changes made to this screen and return to the previous menu Spectrum24 AP 4121 Access Point Product Reference G uide 2 7 ACLand Address Filtering Only 512
146. pectrum24 AP 4121 Access Point Product Reference Guide Configuring the Kerberos KSS ed Kerberos Setup Service 111 111 12 103 Access Granted Valid 2001 9 13 1 111 111 12 101 Access Granted Valid 2001 9 13 1 N 111 111 12 102 Access Granted Valid 2001 9 13 1 Symbol Access Point 111 111 12 182 Access Granted Defa Symbol Access Point 1114 111 12 122 Access Granted De Symbol Access Point 111 111 12 183 Symbol Access Point 111 111 12 183 Access Granted Valid 9 MLA Symbol Access Point 111 111 12 182 Access Granted Valid 2001 9 13 1 MLA Symbol Access Point 111 111 12 122 Access Granted Valid 2001 9 13 1 ML1 I Symbol Access Point 111 111 12 183 Access Granted Valid 2001 9 13 1 ML1 Symbol Access Point 111 111 12 183 Access Granted Valid 2001 9 13 1 MLA Symbol Access Paint 111 111 12 182 Access Granted Valid 2001 9 14 1 MLA Symbol Access Paint 111 111 12 183 Access Granted Valid 2001 9 14 1 OOAQF8902 ML1 OP ML2 102 111 111 12 102 Access Granted Valid 2001 9 15 1 OOAOF8364 When the APs initialize the AP list view window displays the Connection Events APs that were either successful or were not granted access to KSS 19 When the access points have successfully initialized select Disable O pen Enrollment from the File pull down menu or click on the Locked Padlock icon once the access
147. quested start time is later than end time KDC_ERR POLICY 12 KDC policy rejects request KDC_ERR_BADOPTION 13 Cannot execute requested option KDC_ERR ETYPE_NOSUPP 14 No support for encryption type KDC_ERR_SUMTYPE_NOSUPP 15 No support for checksum type KDC_ERR PADATA TYPE NOSUPP 16 No support for PA data type KDC ERR TRTYPE NOSUPP 17 No support for transited type Spectrum24 AP 4121 Access Point Product Reference G uide Configuring the Kerberos KSS Error Code Explanation KDC_ERR CLIENT REVOKED 18 Clients credentials revoked KDC_ERR SERVICE_REVO KED 19 Credentials for server revoked KDC_ERR TGT REVOKED 20 TGT has been revoked KDC_ERR CLIENT NOTYET 21 Client not valid try again later KDC_ERR SERVICE NOTYET 22 Server not valid try again later KDC_ERR KEY EXPIRED 23 Password expired change password to reset KDC_ERR_PREAUTH_FAILED 24 KDC_ERR_PREAUTH REQUIRED 25 Pre authentication data invalid Additional pre authentication required KRB_AP_ERR BAD_INTEGRITY 31 Integrity check on decrypted field failed KRB_AP_ERR TKT EXPIRED 32 Ticket expired KRB_AP_ERR TKT NYV 33 KRB AP ERR REPEAT 34 Ticket not yet valid Request is a replay KRB_AP_ERR NOT US 35 The ticket isn t for requestor KRB_AP_ERR BADMATCH 36 Ticket and authenticator dont match KRB_AP ERR SKEW 37 Clock skew too great
148. r without admin privileges Telnets into the AP while the admin security level is enabled To access and change the System Passwords select System Password Admin CF4 from the System Configuration M enu The Change System Passwords screen displays Symbol Access Point Change System Passwords User Password FOR III Admin Password FRR RIK Save F1 Cancel ESC Password for user access Monitor only Spectrum24 AP 4121 Access Point Product Reference Guide 73 Configuring the AP 74 2 Change the passwords using the following parameters User Password Allows the user to monitor or view the screens Select any alphanumeric case sensitive entry up to 13 characters the characters selected are displayed as asterisks The default password is symbol Admin Allows the user to view and change the parameters Password on each screen Select any alphanumeric case sensitive entry up to 13 characters the characters selected are displayed as asterisks The default password is Symbol Select save to register settings by writing changes to NVM Selecting save displays a confirmation prompt Select cance1 ESC to disregard any changes made to this screen and return to the previous menu Spectrum24 AP 4121 Access Point Product Reference G uide Configuring the AP 2 5 Configuring Radio Parameters The AP automatically configures most radio parameters O nly advanced users Symbol trained users or Symbol representative
149. racter equivalents UP ARRO W DOWN ARROW LEFT ARRO W RIGHT ARRO W Fl F2 F3 F4 CTRL O CTRL CTRL U CTRL P CTRL Q CTRL W CTRL E CTRL R Spectrum24 AP 4121 Access Point Product Reference G uide Configuring the AP The following conventions also apply when navigating screens and menus To select menu items press the key corresponding to the bold letter for the item case sensitive hot key Press ENTER to select the item Press TAB to scroll through menu items To change menu items note the bottom line on the screen for configuration options For multiple choice options press the bold letter to select To change values type in the value and press ENTER If the value is invalid the AP beeps and restores the original value Press TAB to scroll to next menu item The bottom line on the menu enables menu screen changes to take effect Press TAB to scroll to the item and press ENTER to select When changing values such as System Name or System Passwords accept values by scrolling to the next field or pressing ENTER Some screens use function keys to initiate commands For example statistic screens include refresh CF1 and Timed cCF2 commands to update the display Some options listed at the bottom of screens indicate possible commands for a selected item For example in the Known APs screen highlighting an AP on the list and pressing the F1 key brings up the Ping function to Ping that AP P
150. range of MAC addresses 1 Type in the minimum MAC address as the top value BO 0A F8 FO 81 81 2 Press ENTER to accept the value use the DO WN ARRO W key to select the maximum value 3 Type in the maximum MAC address in the bottom value OO OA F8 FO 82 FF 4 Press ENTER to accept the value use the DO WN ARRO W key to select O K 5 Press ENTER The UI displays Symbol Access Point Ranges of Allowed Mobile Units Min Address Max Address BO AB F8 FO 01 81 AD F8 F 82 FF BB AB F8 29 18 82 AD F8 29 11 88 Delete F1 Add F2 Save All APs F3 Exit ESC 6 Verify values reflect the network environment Change them as needed Spectrum24 AP 4121 Access Point Product Reference G uide 101 Configuring the AP 7 Select Delete F1 to delete a range of Mobile Units 8 Select add cF2 to add a range of Mobile Units 9 Selectsave ALL APs or press F3 to save the Ranges of Allowed M obile Units information to all APs with the same Net_ID ESS This option saves the configuration changes for the current AP sends two WNMP messages to all other APs on the Known APs table to update their configuration and resets after the configuration has been modified Users can perform this option only among the same hardware platforms and firmware version 10 The system prompts Warning Update save and reset all APs in the Known AP Menu yes no Type Y 11 Select cancei Cesc to disregard any changes made to this screen an
151. reeraadevaans D 16 ghee QURAN etare Ue UNA Ree Ov eR ARN ET ORS OPiS a eo cn et aier 10R a ee Pet Index 1 Spectrum24 AP 4121 Access Point Product Reference Guide ix Spectrum24 AP 4121 Access Point Product Reference G uide Chapter1 ntroduction Spectrum24 is a spread spectrum cellular network that operates between 2 4 and 2 5 GHz gigahertz This technology provides a high capacity network using multiple access points within any environment The Symbol AP 4121 access point AP is a Spectrum24 direct sequence DS product Spectrum24 DS products use direct sequence technology to provide a high capacity high data rate wireless network Spectrum24 DS infrastructure products include e bridging architecture to provide communication between radio and wired multiple network segments a design based on the IEEE 802 11 standard e an11 Mbps data rate for fast operation seamless roaming for mobile users with devices such as laptops wireless PCs scanning terminals and other computers with PCMCIA slots 1 1 Access Point AP The Access Point AP provides a bridge between Ethernet wired LANs and wireless networks It provides connectivity between Ethernet wired networks and radio equipped mobile units MUs MUs include the full line of Symbol Spectrum24 terminals PC Cards bar code scanners and other devices a This guide provides configuration and setup information for the AP 4121 access point Refer to http www symbol com ser
152. ress ESC to exit from submenus Spectrum24 AP 4121 Access Point Product Reference Guide 51 Configuring the AP 2 2 1 52 Motu Administration screens include options for saving or clearing data that appear on the bottom line of the screen Confirmation prompts include the following OK Save Save ALL APs Cancel Registers settings but does not save them in NVM nonvolatile memory A reset command returns to previously saved settings Saves all settings including ones not on that screen to NVM This is the same as Save Configuration in the Special Functions screen Saves the AP installation configuration information to all APs with the same Net_ID ESS This option saves the configuration changes for the current AP on the Known APs table to update their configuration and reset after the configuration has been modified Users can perform this option only among the same hardware platforms and same firmware versions Does not register settings changed in a screen Entering Admin Mode The UI defaults to User when in Serial mode allowing read only access to the APs functions e g view statistics Entering Admin mode provides access to configuration menus and allows the user to configure the AP Entering Admin mode requires the administration password 1 Select Enter Admin Mode from the Main Menu The AP prompts for the administration password Enter System Password 2 Type the default password Symbol
153. rk devices The AP receives data from its wired interfaces and forwards the data to the proper interface The AP has connections for the wired network and power supply The AP attaches to a wall or ceiling depending on installation site requirements 1 1 1 New Features e 10 100Base T Ethernet e Tx Power Control e Kerberos Security e Auto Channel Select e Antenna diversity 1 2 Radio Basics Spectrum24 devices use electromagnetic waves to transmit and receive electric signals without wires Users communicate with the network by establishing radio links between MUs and APs Spectrum24 products use DSSS direct sequence spread spectrum to transmit digital data from one device to another Using FM a radio signal begins with a Carrier signal that provides the base or center frequency The digital data signal is encoded onto the carriers using a DSSS chipping algorithm The radio signal propagates into the air as electromagnetic waves A receiving antenna in the path of the waves absorbs the waves as electrical signals The receiving device demodulates the signal by reapplying the direct sequence chipping code This demodulation results in the original digital data Spectrum24 uses the environment the air and certain objects as the transmission medium Spectrum24 radio devices transmit in the 2 4 to 2 5 GHz frequency range a license free range throughout most of the world The actual range is country dependent Spectrum24 AP 4121
154. rmware with XMODEM now Where dsap_fw bin and dsap_htm bin are the firmware files for a 4121 model access point When using Xmodem verify the accuracy of the file before a send An incorrect file can render the AP inoperable Cauhen 14 From the emulation program menu bar select Transfer 15 Select Send File 16 Select Browse and locate the file s 17 Select XModem protocol from the drop down list 18 Click Send The terminal or PC displays the transfer process through a progress bar 19 If downloading both the firmware and HTML files the screen flashes Downloading HTML file using XMODEM Send HTML file with XMODEM now If downloading both files repeat the steps beginning at step 13 to download the next file and avoid a transfer time out error If not continue to step 20 Spectrum24 AP 4121 Access Point Product Reference G uide 131 Configuring the AP 20 The download is complete when the UI displays Download Successful Updating AP Update Successful If the firmware update fails the UI displays an error code indicating the cause The AP automatically resets after all file transfers are completed Exit the communication program to terminate the session e Repeat this process for other APs in the network 2 14 Auto Upgrade all APs Through Messaging 132 The Update ALL access points option upgrades or downgrades the firmware of all associated APs with the same Net_ID ESS on the same s
155. rom the Root APs shown in the example High Traffic Network Low Traffic Network Ethernet Ethernet Two Hops The Kerberos Encryption algorithm is not available when the access point is operating in WLAP mode See section 4 9 LED Indicators on page 182 for indication of AP status If more than two WLAPs operate in a repeater configuration Symbol recommends the WLAPs with the lowest WLAP IDs be placed on the wired network To avoid forming a loop per the IEEE 802 1d Spanning Tree Protocol the Wireless WLAP associates with only one wired WLAP 1 Set the default interface for AP A to Ethernet 2 Set the default interface for AP B to Ethernet Spectrum24 AP 4121 Access Point Product Reference G uide Configuring the AP 3 Setthe default interface for AP C to wLAR This allows the MUs to roam and transmit data between AP B and C Ethernet 00 AG F8 00 18 1A O0 AG F8 00 23 5D A F8 1 21 8C If an AP functions as a bridge between wired LANs Symbol recommends one LAN contain all the lower WLAP IDs Ethernet I Q0 A0 F8 00 18 1A 90 A0 F8 00 23 5D 00 AG F8 18 21 9C Ethernet II In WLAP mode APs and MUs are required to have the same Preamble Hohe settings for interoperability Spectrum24 AP 4121 Access Point Product Reference Guide 85 Configuring the AP To configure the AP for wireless operation 1 2 86 Select Set RF Configuration from the Main Menu Configure the setti
156. rs Unchanged File Download Failed Set Successfully Unknown Menu Page Unknown Menu Item Syntax Error Invalid Item Value Specifies the outcome of reading and processing the downloaded ap_acl ttt files Spectrum24 AP 4121 Access Point Product Reference Guide Unchanged Loading File Download Failed Set Successfully Unknown O ption Address Not Found O ut of Space Invalid Range Range Not Found Type Not Found 147 Monitoring Statistics Access Control WLAP Mode M odel Number Serial Number Hardware Revision AP Firmware Ver RF Firmware Ver HTML File Ver Radio Type Start Flashing All LEDs Reset AP Specifies if the access control feature is set to one of three Access Control modes Disabled Allowed or Disallowed When Disabled default is selected no filtering is performed e When Allowed is selected only MAC addresses specified in the Access Control List are allowed to associate with the AP e When Disallowed is selected only MAC addresses not specified in the Disallowed Addresses List Address Filtering are allowed to associate with the AP Specifies if enabling the wireless AP operation status If enabled the AP sets up automatically for wireless operation This feature is Disabled by default Identifies the model number States the APs unique identifier Specifies the hardware version Specifies the firmware version Specifies the Radio firmware version Specifies the HTML fil
157. rum24 High Rate 11 Mbps Moba Wireless LAN Software CDRO M or from http www symbol com services downloads download_spec24 html The AP supports SN MP Version 1 a limited feature set of SN MP Version 2 the IEEE 802 11 MIB II and the SYMBO L MIB 1 Select Set SNMP Configuration from the Main Menu to AP display Symbol Access Point SNMP Configuration SNMP Agent Mode Read Write Trap Hostl Trap Host2 Read Only Community KAKK ERK Read Write Community KAKK ERA A11 Traps Disabled Generic Traps Cold Boot Disabled Authentication failure Disabled Enterprise Specific Traps Radio Restart Disabled Access Cntr Violation Disabled MU State Change Disabled DHCP Change Disabled WLAP Connection Change Disabled Kerberos Errors Disabled OK CR Save F1 Save All APs F2 Cancel ESC Use the space bar or left right cursor keys to change Spectrum24 AP 4121 Access Point Product Reference Guide 95 Configuring the AP Configure the settings as required SNMP Agent Mode Read O nly Community Read Write Community All Traps Cold Boot Authentication failure Radio Restart Access Cntrl Violation Trap Hostl Trap Host2 Defines the SN MP agent mode Disabled disables SNMP functions Readonly allows get and trap operations Read Write default allows get set and trap operations User defined password string up to 31 characters identifying users with read only privileges User de
158. s Antenna amp Selection Primary Only indicates these items update to all APs with the same Net_ID ESS when choosing the Save ALL APs F2 option Users can perform this option only among the same hardware platforms and same firmware versions Mote 2 1 Gaining Access to the UI The method for establishing access to the UI depends on the connection used Select the setup that best fits the network environment 2 1 1 Using Telnet Using a Telnet session to gain access to the UI requires that a remote station have a TCP IP stack The remote station can be on the wired or wireless LAN To access the AP from the workstation 1 From the DOS prompt Telnet to the AP using its IP address Telnet XXX XXX XXX XXX Spectrum24 AP 4121 Access Point Product Reference Guide 39 Configuring the AP 2 Atthe prompt type the password Symbol amp The password is case sensitive Mote 3 Press the ESC key The AP displays the Main Menu Symbol Access Point MAIN MENU Show System Summary AP Installation Show Interface Statistics Special Functions Show Forwarding Counts Set System Configuration Show Mobile Units Set RF Configuration Show Known APs Set Access Control List Show Ethernet Statistics Set Address Filtering Show RF Statistics Set Type Filtering Show Misc Statistics Set SNMP Configuration Show Event History Set Event Logging Configuration Enter Admin Mode If the session is idle e g no input for the co
159. s also displays the broadcast packets Bcast transmitted from the AP Select Forwarding Counts from the Main Menu to display Symbol Access Point Forwarding Counts SCRPOMos pet TOP EE te Shoe eee SS Ethernet RF AP Ethernet 5 5 5 RF 1 al 7 AP 1 a a Bcast 14885 14885 a Refresh F1 Timed F2 Exit ESC Select Refresh at the status display to update values manually Select Timed to automatically update this display every two seconds Press ESC to return to the previous menu 150 Spectrum24 AP 4121 Access Point Product Reference Guide Monitoring Statistics 3 4 Mobile Units Mobile Units MU statistics provide information on MUs associated with the AP The statistics include information on data sent and received activity and association An MU shows only in the Home Foreign Agent Table screens when an MU has roamed to another AP on a different subnet Once an MU has roamed the MU IP Address displays on the Home Agent Table screen of the MU home AP with the IP Address of the Foreign Agent to tell the home AP where to forward packets The MU IP Address is also shown in the Foreign Agent Table and Regular screens of the new foreign AP to tell the new AP where to expect packets from for newly associated MUs The AP Regular screen shows the MUs associated locally on the same subnet e Select Show Mobile Units from the Main Menu to display Symbol Access Point MAIN MENU Show System Su
160. s data 76 max retries voice 76 multicast mask 77 reassembly timeout 76 RTS threshold 78 Short RF Preamble 82 Tx Power Control 82 Spectrum24 AP 4121 Access Point Product Reference G uide Index 7 WEP Privacy 78 WLAP MU table aging time 81 radio performance statistics 162 packets reassembled 163 packets received 162 packets transmitted 162 retries 162 radio statistics 161 AP 161 viewing 161 rate control 78 repeater AP 8 coverage area 8 WLAP mode 8 roaming across routers 23 AP 24 home agent 24 IP address 23 Mobile IP 22 MU 24 TIM 25 root AP association process 11 Bridge Protocol Data Unit 11 DTIM 11 TIM 11 WLAP mode 11 S security 26 clock 71 72 decryption 26 encryption 26 kss name 71 realm name 71 Index 8 user id 71 72 WEP algorithm 26 site survey 12 antenna coverage 175 AP 175 floor plan 13 hardware installation 173 site topography 12 AP 12 MU 12 signal loss 12 SNMP 35 configurtion 35 manager 35 support 36 trap 35 Spectrum24 1 introduction 1 management options 35 network topologies 4 radio basics 3 regulatory requirements 2 wireless network 1 spread spectrum 2 4GHz 1 2 5GHz 1 Statistics 145 ethernet 159 filter 168 forwarding counts 150 interface statistics 149 IP address 158 known APs 156 Mobile IP 155 RF Statistics 161 SNMP 168 Spectrum24 AP 4121 Access Point Product Reference G uide WNMP 168 system parameters 61 access control 65 Admin Password 74 AP AP State Xchg 65
161. s should adjust the radio parameters for the AP the options in the RF Configuration screen or fine tune the radio and WLAP functions 1 Select Set RF Configuration from the Main Menu to display Symbol Access Point RF Configuration DTIM Interval 18 WLAP Mode Disabled BC MC Q Max 18 Max Retries d 15 WLAP Priority 80008 hex Max Retries v 5 WLAP Manual BSS ID 00 88 08 00 20 28 Multicast Mask d 9 E hex WLAP Hello Time 28 Multicast Mask v S1 Q5E hex WLAP Max Age 186 Beacon Interval 188 K us WLAP Forward Delay 5 Accept Broadcast ESSID Enabled WLAP MU Table Aging Time 248 min MU Inactivity Timeout 68 min Rate Control Shared Key Enabled 1 Mb s Optional Key Width 128 bit 5 5 Mb s Optional KeyGuard Required Yes 2 Mb s Required Encryption Key ID 1 Mb s Required Encryption Key Maintenance RTS Threshold 2347 bytes BlueTooth Coexistence ms BlueTooth Beacon Delay 48 Extended Range mi Short RF Preamble Disabled Tx Power Control Full OK CR Save F1 Save All APs F2 Cancel ESC The frequency of DTIM packets as a multiple of TIM packets Range 1 255 CCA Mode ANA CCA Energy Threshold are not user configurable parameters Mote Spectrum24 AP 4121 Access Point Product Reference Guide 75 Configuring the AP control indicates these items update to all APs with the same Net_ID ESS The dot in front of certain parameters functions or options for example ra
162. s the Main Menu Symbol Access Point MAIN MENU Show System Summary AP Installation Show Interface Statistics Special Functions Show Forwarding Counts Set System Configuration Show Mobile Units Set RF Configuration Show Known APs Set Access Control List Show Ethernet Statistics Set Address Filtering Show RF Statistics Set Type Filtering Show Misc Statistics Set SNMP Configuration Show Event History Set Event Logging Configuration Enter Admin Mode 6 Refer to section 2 11 2 Updating Using Xmodem on page 117 to update the AP firmware or HTML file or to section 2 2 Navigating the UI on page 50 7 Exit the communication program to terminate the session Using a Dial Up Connection A dial up connection requires a straight through cable between the modem and the AP The remote PC requires a modem and a communication program Microsoft Windows Terminal program See Appendix B for information on the modems supported by the AP 1 Set Modem Connected to Yes in the System Configuration screen 2 Attach a straight through serial cable from the AP to the modem 3 Verify the modem connects to the telephone line and has power Refer to the modem documentation for information on verifying device power 4 From the remote terminal start the communication program Spectrum24 AP 4121 Access Point Product Reference Guide Configuring the AP 5 Select the correct serial port along with the following parameters emul
163. sends an Authentication Service Request AS_REQ to the KDC The KDC looks up the username ESSID in the case of APs the associated password and other authentication information including the current time stamp If the AP has provided the correct information the KDC responds with an Authentication Service Response AS_REP These initial Kerberos messages are used to obtain the client credentials and session key known as the Ticket Granting Ticket The AP verifies the information and is authenticated with the KDC After the AP validates the message it turns on its RF services but does not bridge data packets until the MU has been authenticated An MU is required to authenticate with the KDC before the AP allows any RF bridging The MU appears to associate but because it has not been authenticated the AP does not bridge any non Kerberos authentication type packets to the network The AP acts as a conduit the AP will proxy the MU requests replies to and from the KDC passing AS_REQ AS REP Ticket Granting Service Request TG S_ REQ and Ticket Granting Service Reply TG S_REP between the clients and the KDC until authentication is successful Once a ticket is issued and the authentication process is completed the AP W continues to bridge data with the MU even if the KDC KSS are unavailable O nce the ticket expires the AP MU stop passing Kerberos data if the KDC KSS are still unavailable to issue tickets Moba The authentication
164. sociated MUs regardless of the MU power mode PSP or CAM Spectrum24 AP 4121 Access Point Product Reference G uide 153 Monitoring Statistics Begin Current Assoc Supported Rates Current Xmt Rate Priority Encryption Packets Sent Packets Rcvd Bytes Sent Bytes Rcvd Discard Pkts CRC Last Activity Last Data Activity KeyG uard in use The time the current association begins in hours minutes and seconds Data transmission rates the station supports The current rate the AP transmits data to the station Indicates whether the MU is a voice or data type device Voice indicates packet delivery is time critical and a high priority Normal indicates packet delivery is not time critical MU encryption support O n or Off The packets sent by the AP to the MU The packets received by the AP from the MU The bytes sent by the AP to the MU The bytes received by the AP from the MU The packets discarded because of data error The time in hours minutes and seconds since the last communication with the MU The time in hours minutes and seconds since the last data transfer Indicates if the adapter is configured for multi security scheme KeyG uard support e Select Refresh at the status display to update values manually e Press ESC to return to the previous menu Spectrum24 AP 4121 Access Point Product Reference G uide Monitoring Statistics 3 5 Mobile IP The following tables display the mapping of MUs to
165. specified WLAP is not found the WLAP remains in FULL Scan state permanently The LEDs have the following indicator status permanently LED State Power On Wired LAN Activity O ff Wireless LAN Activity Blinks slowly e Ifthe WLAP manual BSS _ID is set with the broadcast bit ON i e the first Byte is 1 and the specified WLAP is not found the WLAP tries to associate with another WLAP If it still cannot find another WLAP it goes to Functional State e Ifthe Ethernet Timeout in the System Configuration menu is set to 3 the WLAP will keep track of the WLAP Alive BPDU If the BPDU is missing for WLAP Hello Time seconds the WLAP state changes to WLAP Lost on Ethernet and the LEDs have the following states LED State Power On Wired LAN Activity Blinks slowly Wireless LAN Activity O ff 184 Spectrum24 AP 4121 Access Point Product Reference Guide Hardware Installation 4 10 Troubleshooting Check the following symptoms and their possible causes before contacting the Symbol Support C enter 4 10 1 Ensure wired network is operating Verify AP operation 1 AP does not power up faulty AP power supply failed AC supply Electrical Management System EMS operating outlet 2 After the AP resets and hardware is initialized it performs an SRAM test If the test passes the LEDs turn on If the test fails the LEDs all turn off and the AP resets The LEDs turn off sequentially as each test passes Identify wired network problems
166. statistics Mote 172 Spectrum24 AP 4121 Access Point Product Reference G uide Hardware Installation Chapter 4 Hardware Installation AP installation includes connecting the AP to the wired network AP placement and power up Installation procedures vary for different environments 4 1 Precautions Before installing the AP verify the following e Do not install in wet or dusty areas without additional protection Contact a Symbol representative for more information e Verify the environment has a temperature range between 20 C to 55 C e If attaching to a wired Ethernet network keep AP on the same subnet or configure the APs for the Mobile IP Roaming Across Routers feature 4 2 Package Contents amp Heia Check package contents for AP power adapter Contact the Symbol Support Center to report missing or improperly functioning items Verify the AP model indicated on the bottom of the unit and packaging Spectrum24 AP 4121 Access Point Product Reference G uide 173 Hardware Installation 4 3 4 3 4 3 2 174 Requirements amp Mota The minimum installation requirements for a single cell peer to peer network a power outlet e an AP antenna The AP supports 10 100Base T unshielded twisted pair UTP wired LAN cabling connections For management user interface access to the serial connector use a standard null modem cable for direct serial connection Order a null mode
167. sues another short frame when the data has been received and is ready to go back to PSP A DTIM field also called a countdown field informs MUs of the next window for listening to broadcast and multicast messages When the AP has buffered broadcast or multicast messages for associated MUs it sends the next DTIM with a DTIM Interval value To prevent a PSP mode MU from sleeping through a DTIM notification select a PSP mode value less than or equal to the DTIM value PSP mode MUs hear the beacons and awaken to receive the broadcast and multicast messages Spectrum24 AP 4121 Access Point Product Reference Guide 25 Introduction A TIM is a compressed virtual bitmap identifying the AP associated MUs in PSP mode that have buffered directed messages MUs issue a poll request when APs issue a TIM A beacon with the broadcast indicator bit set causes the MU to note DTIM Count field value The value informs the MU of the beacons remaining before next DTIM This ensures the MU turns on the receiver for the DTIM and the following BC MC packet transmissions 1 3 9 Data Encryption 26 Any wireless LAN device including Spectrum24 devices operating ona wireless network faces possible information theft Theft occurs when an unauthorized user eavesdrops to obtain information illegally The absence of a physical connection makes wireless links particularly vulnerable to this form of theft Encryption becomes the most efficient method in preventing inform
168. swords using the following parameters User Allows the user to only monitor or view the screens Password Select any alphanumeric case sensitive entry up to 13 characters the characters selected are displayed as asterisks The default password is Symbol Admin Allows the user to view and change the parameters Password on each screen Select any alphanumeric case sensitive entry up to 13 characters the characters selected are displayed as asterisks The default password is Symbol 5 Select ok or save to register settings by writing changes to NVM Selecting save displays a confirmation prompt 6 The system prompts Are you sure Y N Type vY 7 Select cancel or press esc to disregard any changes made to this screen and return to the previous menu 54 Spectrum24 AP 4121 Access Point Product Reference G uide Configuring the AP 2 2 3 Configuring for Dial Up to the UI A dial up connection requires a straight through cable between the modem and the AP The remote PC requires a modem and a communication program e g Microsoft Windows Terminal program amp Refer to Appendix B for information on the modems supported by the AP Mote 1 SetModem Connected to Yes in the System Configuration screen 2 Attach a straight through serial cable from the AP to the modem 3 Verify the modem connects to the telephone line and has power Refer to the modem documentation for information on verifying device power 4
169. t the AP is ready for MUs to associate with it The AP works without user intervention after setup See the AP LED indicators to verify that the unit operates properly Spectrum24 AP 4121 Access Point Product Reference Guide 177 Hardware Installation 4 8 178 BIAS T Low Power Distribution System The BIAS T system provides an economical and reliable method for powering access point s from a remote location The BIAS T system combines low voltage DC with Ethernet data in a single cable connecting to an access point An Ethernet cabling infrastructure is required with the BIAS T system but the BIAS T system single DC and Ethernet data cable creates a modified Ethernet cabling environment When users purchase a Spectrum24 network they often need to place access points in obscure locations In the past a dedicated 24 hour 90 264 VAC power source was required for each Access Point as users connected the access points directly to an existing wired Ethernet infrastructure This often required an electrical contractor to install power drops at each access point location The BIAS T conversion feature eliminates the cost of retaining an electrical contractor to install the infrastructure With the BIAS T system centralized power can be provided for numerous access points without a local power supply for each access point Spectrum24 AP 4121 Access Point Product Reference Guide Hardware Installation The BIAS T is a small lightweig
170. t to move from one subnet to another while keeping its IP address unchanged w To configure this feature see section 2 4 Configuring System Parameters Meba on page 61 Spectrum24 AP 4121 Access Point Product Reference Guide 23 Introduction The scanning and association process continues for active MUs This allows the MUs to find new APs and discard out of range or deactivated APs By testing the airwaves the MUs can choose the best network connection available The following diagram illustrates Mobile IP roaming across routers Host Host SS Router Router Internet Mobile Node Mobile Node Set the MU for Mobile IP as specified in the MU user documentation Hoba Security has become a concern to mobile users Enabling the M obile Home M D5 key option in the System Configuration menu generates a 16 byte checksum authenticator using an MD5 algorithm The MU and AP share the checksum called a key to authenticate transmitted messages between them The AP and MU share the key while the MU is visiting a foreign subnet The MU and AP have to use the same key If not the AP refuses to become the Home Agent for the MU The maximum key length is 13 characters The AP allows all printable characters 24 Spectrum24 AP 4121 Access Point Product Reference Guide Introduction 1 3 8 Supporting CAM and PSP Stations CAM Continuously Aware
171. tatistics Set Type Filtering Show Misc Statistics Set SNMP Configuration Show Event History Set Event Logging Configuration Enter Admin Mode 4 Select special Functions from the Main Menu and press enter 114 Spectrum24 AP 4121 Access Point Product Reference G uide uo Access Point Firmware Update Menu Use TFTP to update Access Point s Firmware HTML file Firmware and HTML File Use XMODEM to update Access Point s Firmware HTML file Firmware and HTML File Use TFTP to update ALL Access Points Firmware HTML file Alter Filename s HELP URL TFTP Server Firmware Filename dsap_fw bin HTML Filename Config Filename ACL Filename HELP URL TFTP Server dsap_html bin ap_cfg txt ap_acl txt 111 111 12 137 Configuring the AP At the Special Functions Menu PF SS F3 to view the Firmware Update Menu Config Config Previous F4 Exit ESC a O Select Alter Filename s HELP URL TFTP Server and press ENTER Enter the configuration filename in the Config Filename field Change this only if the user or system network administrator requires a new filename The default is AP_CFG TXT aP Ensure the Filename is AP_CFG TXT unless the user changed the Filename Cauhen amp Verify the paths accuracy for the filename See step one 8 Enter the TFTP Server IP address or name in the TFTP Server field 9 Press F1 to save settings 10 The Firmware Update Menu displays Are You Sure
172. te Hate when choosing the Save ALL APs F2 Option Users can perform this option only among the same hardware platforms and same firmware versions 2 Configure the settings as required DTIM Interval BC MC Q Max Reassembly timeout M ax Retries d M ax Retries v 76 Configure DTIM packet frequency as a multiple of beacon packets The DTIM Interval indicates how many beacons equal one cycle Users should not modify this setting or risk damaging the configuration Determines the memory allocated for the queue used in the AP to temporarily hold broadcast multicast messages Unit measure is in packets and corresponds to maximum sized Ethernet packets The default is 1 Sets the time in 2 5 ms units before a time out occurs during a packet reassembly Packet reassembly occurs when a large RF packet is fragmented into smaller wireless network packets The default is 98gg The maximum allowed retries before aborting a single data packet transmission The default is 15 Users should not modify this setting or risk damaging the configuration The maximum allowed retries before aborting a single voice packet transmission The default is 5 Users should not modify this setting or risk damaging the configuration Spectrum24 AP 4121 Access Point Product Reference G uide Configuring the AP Multicast Mask Supports broadcast download protocols for any MU d typically Point of Sale terminals requiring the expedited down
173. terminal or PC dials to an AP with a modem connection The AP supports connection to a Hayes compatible 28 800 baud or faster modem See section 2 1 3 Using a Dial Up Connection on page 42 SNMP Using a Access to the AP SNMP function using a MIB Browser MIB Browser Typically a Network Manager uses this feature however Symbol does not recommend accessing the AP using this interface method Web Browser Access to the AP builtin Web server from any AP interface including Ethernet connections See section 2 1 4 Using a Web Browser on page 43 Spectrum24 AP 4121 Access Point Product Reference Guide 37 Introduction 38 Spectrum24 AP 4121 Access Point Product Reference G uide Chapter2 Configuring the AP AP configuration requires setting up a connection to the AP and gaining access to the UI User Interface The methods of accessing the UI are Serial Telnet Web and SNMP DHCPis enabled on the AP by default Initial network configuration can be obtained from a DHCP server All except Serial require the configuration of an IP address To access the AP through the serial port and terminal emulation program connect to the DB9 serial port using a null modem cable Set the terminal emulation program for 19 200 bps 8 bits No parity 1 Stop Bit and No flow control Select the AP Installation screen and enter the appropriate IP configuration parameters for the network The dot in front of certain parameters functions or option
174. the Main Menu select special Functions Symbol Access Point Special Functions Menu Configuring the AP Clear All Statistics Restore Factory Config Clear MU Table Save Configuration Clear ACL Save Config to All APs Clear Address Filters Clear Type Filters Firmware Update Menu F3 Load ACL from File via TFTP Load ACL from File via XMODEM Load ACL from MU List Reset AP Configure Network Time Exit CESC 10 Press F3 to view the Firmware Update M enu Access Point Firmware Update Menu Use TFTP to update Access Point s Firmware HTML file Firmware and HTML File Use XMODEM to update Access Point s Firmware HTML file Firmware and HTML File Use TFTP to update ALL Access Points Firmware HTML file Alter Filename s HELP URL TFTP Server Firmware Filename dsap_fw bin HTML Filename dsap_html bin Config Filename ap_cfg txt ACL Filename ap_acl txt HELP URL TFTP Server 111 111 12 137 Config Config Previous F4 Exit ESC 11 Under the function heading use xmonem to update Access Point s Select Config 12 Press ENTER Spectrum24 AP 4121 Access Point Product Reference Guide 119 Configuring the AP 120 amp Mote a Louhen Selecting Config downloads the file AP_CFG TXT 13 The Special Functions Menu displays Are You sure yes no Type Y Downloading Configuration file using XMODEM Send Configuration file with XMODEM now When using Xmodem verify
175. the file is correct before a send An incorrect file can render the AP inoperable From the emulation program menu bar select Transfer Select Send File Select Browse and locate the file AP_CFG TXT Select XModem protocol from the drop down list Select Send The terminal or computer displays the transfer process through a progress bar and the screen flashes Downloading Configuration file using XMODEM Send Configuration file with XMODEM now The download is complete when the UI displays Download Successful Updating AP Set Successful If the Config update fails the UI displays an error message The AP automatically resets after the file transfer completes Exit the communication program to terminate the session Repeat this process for other APs in the network Spectrum24 AP 4121 Access Point Product Reference Guide Configuring the AP 2 12 Setting Logging Options The event log kept by the AP depends on settings for logging options The event log allows the administrator to log important events This option keeps the log concise through the 128 entry circular buffer 1 Select Set Event Logging Configuration from the Main Menu to display Symbol Access Point Event Logging Configuration Any Event Logging Enabled Security Violations Enabled MU State Changes Enabled WNMP Events isabled AP AP Msgs Enabled Telnet Logins Enabled System Events Enabled Ethernet Events isabled OK
176. thernet wired LANs 1 event history 171 features 2 filtering 15 firmware version 148 foreign agent 151 155 forwarding counts 150 hardware installation 173 hardware version 148 home agent 155 IEEE 802 119 interface 149 interface statistics 149 Introduction 1 known APs 156 LED indicators 182 MAC address 14 management options 35 manually updating the firmware 123 media types 17 miscellaneous statistics 167 Mobile IP 23 model number 148 monitoring statistics 145 mounting 177 network connection 174 Index 1 power adapter 177 power options 176 PSP 25 radio characteristics A 2 radio performance statistics 161 removing allowed MUs 103 RF statistics 161 roaming across routers 23 RSSI 22 shared key authentication 27 single cell connection 175 site survey 12 site topography 12 SNMP management 35 supported modems B 1 system password 53 system summary 145 TCP IP 43 telnet 39 topologies 5 troubleshooting 185 type filtering option 15 UI 37 web browser 43 wired network 185 WNMP statistics 168 ACL101 adding allowed MUs 103 configuring 101 disallowed address 15 filtering 15 load ACL from MU list 104 options 104 removing allowed MUs 103 104 removing disallowed MUs unauthorized access 15 address filtering 106 configuration 108 disallowed addresses 106 MAC addresses 106 remove MUs 107 removing disallowed MUs 107 advanced radio theory 13 MAC layer bridging 13 analyzing retries 170 antenna
177. timestamp between the KDC and APs as part of the authentication process Clock synchronization is essential since the expiration time is associated with each request for resources If the clock skew is exceeded between any of the participating hosts requests are rejected Additionally the KSS provides a list of authorized APs and other security setup information that the KDC uses to authenticate clients When setting up the KSS assign APs an ESSID to authenticate with the KDC In Open Enrollment mode the KSS dynamically creates an AP Setup Account for the AP and creates a Kerberos account with the KDC The KSS continues to do this until the administrator disables O pen Enrollment For additional information on KSS and KDC functionality refer to the sections of this document D 1 Creating a Windows 2000 Environment for the KSS The KSS runs only on a Windows 2000 server with Active Directory enabled and Java Runtime Environment version 1 3 or higher running Spectrum24 AP 4121 Access Point Product Reference Guide D 1 Configuring the Kerberos KSS amp Java Runtime is on the Spectrum24 High Rate 11 Mbps Wireless LAN Software CDROM within the KSS directory For information on installing Windows 2000 Server setting up the KDC and enabling ActiveDirectory services refer to the documentation shipped with Windows 2000 server D 2 Installing the KSS in a Windows 2000 Environment D 2 Install the optional KSS from the Spectru
178. ubnet and includes all recognized hardware platforms regardless of firmware version The initiating AP sends the correct filename for each Symbol platform The initiating AP does not send update commands to non Symbol platforms Users can find the specific APs that have firmware upgraded or downgraded on the Known APs screen The time interval between the WNMP update firmware commands for updating each AP is 2 seconds This interval prevents more than one AP from accessing the TFTP server and causing network congestion The Ethernet TFTP upgrade method requires a connection between the AP and PC on the same Ethernet segment Verify the PC has a TFTP server running on it Running the server requires third party software like FTP PC TCP for DOS or OnNet for Windows The wireless TFTP upgrade method requires a connection between the AP and a TFTP server The TFTP server can be running on a Symbol Spectrum24 device Updating the firmware requires a TFTP server running in the background Spectrum24 AP 4121 Access Point Product Reference G uide To update the AP firmware Configuring the AP rA AP 4131 access points with firmware version 3 00 or higher cannot be downgraded to the 2 70 XX firmware level Additionally AP 4111 access Worning points cannot be upgraded past the 2 52 XX firmware level Ww NY e Symbol At the prompt type the password Copy the Firmware files on the terminal or PC hard disk Telnet to t
179. ucc Reass Packets a Fragments Sent 5 Fragments Rcvd 4 Packets w o Retries il Rev Duplicate Pkts 5 Packets w Retries a Undecryptable Pkts 4 Packets w Max Retries Lal Total Retries 5 Rev CRC Errors 54 Rev ICV Errors D Refresh F1 Timed F2 WLAP F3 Link Test F4 Exit LESC Spectrum24 AP 4121 Access Point Product Reference Guide 161 Monitoring Statistics 162 Radio performance statistics include Data Packets Sent The total data packets transmitted Data Bytes Sent The total data packets transmitted in bytes BC MC Packets Sent The broadcast multicast user data packets successfully transmitted BC MC Bytes Sent The broadcast multicast user data bytes successfully transmitted Sys Packets Sent The system packets successfully transmitted SBC MC Packets Sent The broadcast multicast system packets successfully transmitted Succ Frag Packets The fragmented packets successfully transmitted Unsucc Frag Packets The fragmented packets unsuccessfully transmitted Fragments Sent The packet fragments transmitted Packets w o Retries The transmitted packets not affected by retries Packets w Retries The transmitted packets affected by retries Packets w Max Retries The transmitted packets affected by the maximum limit of retries Total Retries The retries occurring on the interface A retry occurs if the device fails to receive an acknowledgment ACK from a destination Data Packets Rcvd The total data packets received
180. uct passive scans and a Spectrum24 AP can classify them as inactive Spectrum24 AP 4121 Access Point Product Reference Guide 77 Configuring the AP 78 Rate Control RTS Threshold Extended Range WEP Privacy Defines the data transmission rate the defaults are e 11Mbps Optional e 5 5 Mbps Optional e 2Mbps Required e 1Mbps Required The defaults allow the AP to automatically select the the best transmit rate allowed by the conditions These settings allow a mixture of 1 Mbps 2 Mbps 5 5 Mbps and 11 Mbps radios in the same network Any combination of the data rates can be selected as O ptional Required or Not Used but it is essential to set the lowest selected rate to Required All IEEE 802 11 broadcast and management frames are sent out on the lowest required data rate Request to send threshold 256 2347 Allows the AP to use RTS Request To Send on frames longer than the specified length The default is 2347 Bytes Enables APs to bridge over long distances using high gain antennas The Extended Range setting adds 11 microseconds per mile to the ACK timeout value Should be used for coverage areas greater than one mile RF propagation through the air is about 5 5 microseconds per mile one way Use 11 microseconds as a round trip value per mile Defines the WEP algorithm Admin privileges are required to make changes to this parameter The default is Disabled Spectrum24 AP 4121 Access Point
181. uence The chipping sequence is combined with a transmitted data stream to produce the AP output signal Direct Sequence lt 2 4 GHz Band gt lt 10011101011101 Data Stream Chipping Sequence Only 3 non overlapping Channels of Direct Sequence information fit into defined 2 4 GHz band Spectrum24 AP 4121 Access Point Product Reference Guide 19 Introduction 1 3 6 20 Mobile Units receiving a direct sequence transmission use the spreading code to map the chips within the chipping sequence back into bits to recreate the original data transmitted by the access point Intercepting and decoding a direct sequence transmission requires a predefined algorithm to associate the spreading code used by the transmitting access point to the receiving MU This algorithm is established by IEEE 802 11b specifications The bit redundancy within the chipping sequence enables the receiving MU to recreate the original data pattern even if bits in the chipping sequence are corrupted by interference The ratio of chips per bit is called the spreading ratio A high spreading ratio increases the resistance of the signal to interference A low spreading ratio increases the bandwidth available to the user The access point uses a constant chip rate of 11Mchips s for all data rates but uses different modulation schemes to encode more bits per chip at the higher data rates The access point is capable of an 11 Mbps data transmission rat
182. uide Configuring the AP Load ACL from File This option creates an ACL from a user defined ACL file AP_ACL TXT entered on the secondary screen of the Special Functions Menu The following is an example of the AP_ACL TXT ACLindividual Flush Add 00 A0 F8 FF 01 FB Add 00 A0 F8 FF 01 FC Add 00 A0 F8 FF 01 FD Add 00 A0 F8 FF 01 FE Add 00 A0 F8 FF 01 FF DeleteO00 A0 F8 FF 00 0A DeleteO00 A0 F8 FF 00 1A DeleteO00 A0 F8 FF 00 2A AC LRange Add 00 A0 F8 FD 01 00 00 A0 F8 FF 01 20 Add 00 A0 F8 FD 02 00 00 A0 F8 FD 02 20 Add 00 A0 F8 FD 03 00 00 A0 F8 FD 03 20 Add 00 A0 F8 FD 04 00 00 A0 F8 FD 04 20 Add 00 A0 F8 FD 08 00 00 A0 F8 FD 08 20 Delete 00 A0 F8 FD 05 00 AddressFilter Flush Add 00 A0 F8 FF 00 03 Add 00 A0 F8 FF 00 04 Add 00 A0 F8 FF 00 05 TypeFilter Add 807e Add 6006 Add 8001 1 Select special Functions from the Main Menu 2 Select Load act from File to load site specific ACL 00 A0 F8 FD 05 20 Spectrum24 AP 4121 Access Point Product Reference Guide 105 Configuring the AP 2 8 106 Configuring Address Filtering The AP can keep a list of MU MAC addresses not allowed to associate The Disallowed Addresses option provides security by preventing unauthorized access by known devices Use it for preferred association of MUs to APs e Select set Address Filtering from the Main Menu to display Symbol Access Point QB QB QB QB QB QO QB QB QB QB QB QB QB
183. ulticast packets received Individual Address The packets received with designated individual addresses Spectrum24 AP 4121 Access Point Product Reference Guide 159 Monitoring Statistics Packets Sent The total packets sent out Any Collision The packets affected by at least one collision 1 Collisions The packets affected by more than one collision Maximum Collisions The packets affected by the maximum number of collision Late Collisions The collisions occurring after the first 64 bytes Defers The the times the AP had to defer transmit requests on the Ethernet because of a busy medium Select refresh atthe status display to update values manually Select Timed to automatically update this display every two seconds Press ESC to return to the previous menu 160 Spectrum24 AP 4121 Access Point Product Reference Guide Monitoring Statistics 3 8 Radio Statistics The AP keeps radio performance statistics including packet and communication information To view RF statistics Select Show RF Statistics from the Main Menu to display Symbol Access Point RF Statistics Data Pkts Sent 5 Data Pkts Rcvd 494 Data Bytes Sent 5 Encrypted Pkts Rcvd 467 ata Bytes Rcvd 36524 BC MC Packets Sent 28 BC MC Packets Rcvd 23 BC MC Bytes Sent 2984 BC MC Bytes Rcvd a Sys Packets Sent 5 Sys Packets Rcvd 4 SBC MC Packets Sent 14128 SBC MC Packets Rcvd 528 Succ Frag Packets a Succ Reass Packets 4 UnSucc Frag Packets a UnS
184. um24 AP 4121 Access Point Product Reference Guide Contents Chapter 1 Introduction1 1 1 Access Point AP secs sacsiecavadinavesincatadbeustininadd a Aa ENER 1 LLA New Fea UES inin nuten rn orreen ee EE EEEE 3 12 Radio BaSiCS urieni ane aa a EEan Eatas 3 1 2 1 S24 Network Topology ssssssssssssisisrrrrrrrrrrrrrreereeeennnenes rn rnnnna 4 1 2 2 Cellular Coverage s ssssssssssrsrrrirrririririttttttststststitrtrnrrnerena 9 1 2 3 Site Topography 0 aaa 12 1 3 Access Point Functional TN Ory 0 cccceeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeees 13 1 3 1 MAC Layer Bridging eet eee ieee 14 1 3 2 Auto Fallback to Wireless Mode ieee 15 L3 DACP SUPPO ineine ead A A ated oad ete 16 1 23 4 Media Type Scs a a narai Ea 17 1 3 5 Direct Sequence Spread SpecTUM ceee 19 1 3 6 MU Association ProCe SS cie eee eee eeeeeee aaa aeaeaeaiae 20 1237 Mobile IP ween eines weaved hae vin ieee aes nee tats 22 1 3 8 Supporting CAM and PSP Stations 25 1 3 9 Data Encrypt niece tiki aaa aaiae 26 1 3 10 Kerberos Authentication center 27 1 3 11 KSS O pen Enrollment eee eerie 32 1 3 12 KSS Databases ee annie 33 1 3 13 Roaming and Authentication eects 33 1 3 14 Mixed Mode Security eee eee eter 34 1 3 15 Web Management Support ete eee 34 1 3 16 Management Options eee eerie 35 Chapter 2 Configuring the APs cicilicocniniedeis sataseatedinsntiete iisney tintin teireaaitnte ales 39 2 1 Gaining Access to the Ul oo eect eee
185. uration Telnet Serial Serial UI View Modify Screen View Modify Telnet UI View O nly WEP Algorithm RF Configuration Telnet Serial Serial UI View Modify Screen View Modify Telnet UI View O nly Encryption Key ID RF Configuration Telnet Serial Serial UI View Modify Screen View Modify Telnet UI View O nly Encryption Key RF Configuration Telnet Serial Serial UI Modify Maintenance Screen Modify Telnet UI No Access Encryption Parameters for Web Interface Parameter Access Method Interface Serial WEP Algorithm Configuration Security Setup View Modify View Only Encryption Key Configuration Security Setup View Modify View Only Encryption Configuration Security Setup Modify Only No Access Key Setup Encryption Configuration Security Setup View Only View Only Administration WEP Privacy Configuration Security Setup View Modify View Only 68 Spectrum24 AP 4121 Access Point Product Reference G uide Encryption Parameter Access for SNMP Interface Configuring the AP Parameter Access M ethod Interface Serial apEncryptAdmin s24dsap mib View O nly View O nly apConfigMgmt apSystemC onfig group apWEPAlgorithm s24dsap mib View Modify View O nly apConfigMgmt apRFConfig group ap128WEPKeyValue s24dsap mib Modify Only No Access 1 4 apConfigMgmt ap128WEPKeyTable dotl1Privacylnvoked 802dotl1 mib View Modify View
186. vents The types of events logged are configurable The log isa 128 entry circular buffer After the 128th entry the earliest event entry deletes The Event History displays the most recent event at the top of the list Each event lists a time stamp recorded in hh mm ss from the time the AP powered up or reset The type of event logged follows the time stamp If the event involves an MU or AP the unit MAC address displays Symbol Access Point Event History pg 2 Warning Event logging is frozen while this screen is displayed 77 786 786 781 281 781 708 708 700 708 708 708 708 708 Beng zgqgeeexe xexeaxex eeexeeasees Previous 44 42 700 51 38 38 42 18 18 2 B B B B CF3 U Assoc A F8 12 59 C3 elnet Session Start From 111 111 12 169 4 Telnet Session End U Assoc 06 AQ F8 12 59 E8 U Assoc 06 AQ F8 12 59 9B U Assoc 06 AQ F8 12 5A 85 Telnet Session Start From 111 111 12 169 LAP Assoc Q A F8 8A 38 77 U Assoc 06 AG F8 12 59 C3 RF Initialized Ethernet Initialized ultitasker Initialized AP Driver Initialized Event Log Initialized Next F4 Exit ESC Spectrum24 AP 4121 Access Point Product Reference G uide 171 Monitoring Statistics 3 11 Clearing Statistics To clear statistics 1 Select Special Functions from the Main M enu 2 Select Clear All Statistics The AP zeroes all statistics a Resetting the AP also clears
187. vices downloads for configuration and setup information for the AP 4131 and AP 4111 model access points Spectrum24 AP 4121 Access Point Product Reference Guide 1 Introduction The AP provides an 11 Mbps data transfer rate on the radio network It monitors Ethernet traffic and forwards appropriate Ethernet messages to MUs over the Spectrum24 network It also monitors MU radio traffic and forwards MU packets to the Ethernet LAN The AP meets the following e the regulatory requirements for Europe and many other areas of the world e FCC part 15 class A with no external shielding e FCC part 15 class B ETS 300 339 compliance including CE mark The AP has the following features builtin diagnostics including a power up self check e builtin dual antenna assembly with optional diversity e wireless MAC interface e field upgradable Firmware e 10 100Base T Ethernet port interface with full speed filtering e power supply IEC connector and a country specific AC power cable e PC AT Serial Port Interface support for up to 127 MUs e data encryption e supports multiple MIBs e SNMP support e support for roaming across routers e DHCP support BOOTP e DNS support Web browser user interface support e short RF preamble e wireless AP mode Spectrum24 AP 4121 Access Point Product Reference G uide Introduction When properly configured an MU communicating with an AP appears on the network as a peer to other netwo
188. with the Kerberos and KSS options found in section 1 3 3 DHCP Support on page 16 When the AP boots up it automatically requests the KSS for Kerberos parameters If a DHCP server is not present manually enable Kerberos in the AP see section Manual Kerberos Authentication Configuration page 70 A Key Distribution Center KDC contains a database of authorized users and passwords within its realm a realm is the Kerberos equivalent of a Windows domain The KDC is responsible for user authentication the distribution of session service keys tickets The KSS requires restarting whenever the KDC is rebooted Spectrum24 AP 4121 Access Point Product Reference G uide Introduction The KDC contains two components e Authentication Service AS Provides the authentication ticket containing information about the client and the session key used with the KDC e Ticket Granting Ticket Service TG S Permits devices to communicate with a service this could be any application or service such as the AP PF services The default expiration time of a ticket is 12 hours for the AP and is not user amp configurable If the lifetime of a ticket in the KDC s security policy is different than what is requested the KDC selects the shortest expiration time between the two Each time a ticket is generated a new session and WEP encryption key is generated The KDC resides on the Kerberos server the Kerberos server can also be the D
189. yes no Type Y Spectrum24 AP 4121 Access Point Product Reference G uide 115 Configuring the AP 116 a Tauhan Moba Nocha If using telnet to connect to the AP through an Ethernet interface do not use the use XMODEM to Update Access Point s Firmware option This option causes the AP to reset and look for the configuration file over the serial interface 11 Under the function heading use TFTP to update Access Point s Select Config 12 Press EN TER 13 The Firmware Update Menu displays Are You sure yes no Type Y The Telnet session ends when the user answers Y at the prompt The WIRED LAN ACTIVITY indicator on the AP does NOT flash To view the file transfer log switch to the TFTP application The AP resets when the file transfer completes 14 Telnet to the AP using its IP address 15 At the prompt enter the password Symbol The password is case sensitive The AP displays the Main Menu 16 Verify the network settings are correct on the System Summary screen 17 Press CTRL D to end Telnet session 18 Repeat process for other APs in the network Spectrum24 AP 4121 Access Point Product Reference Guide Configuring the AP 2 11 2 Updating Using Xmodem The Xmodem upgrade method requires a direct connection between the AP and a computer using a null modem serial cable and using software like HyperTerminal for Windows 9x Xmodem supports file transfers between terminal emulati
190. ystem main page displays vertion 03 00 03 Tho BAD frer conia e eo kam Die cokta o ih Spec ic oes Pin we une en stem bows hrag behes by checking cs an ios ip apend or Ova Te eed The fee od Be ee Per pes pees RA aire pou le wer ae Tey moman ni fer Boas Pan The Web pages look different than the Telnet Direct Serial or Dial Up Connections but the contents are the same Access the different pages using the links located in the left frame Refer to the online help file for Web page navigation page contents and parameter use e To view configuration function or option changes on the Web page s turn off the caching function for the browser being used For Netscape from the menu bar select Edit Properties Advanced and Cache Select Document in cache is compared to document on network Every time Spectrum24 AP 4121 Access Point Product Reference Guide Configuring the AP For Internet Explorer from the menu bar select View Internet O ptions Temporary Internet files and Settings Select Check for newer versions of stored pages Every visit to the page a If this property option is not turned off the browser returns the previous view of the page without the changes To ensure the latest version of a Web page Meiha i i j is viewed set this option in the browser e To access help from any Spectrum24 Access Point Configuration Management System web page select the Help button

Spectrum24 AP-4121 Access Point

Contents

Download Pdf Manuals

Related Search

Related Contents