Bluesocket BlueSecure 1800v2 Manuale utente
1
BlueSecureTM Access Point 1800v2
Installation Guide
Bluesocket, Inc
10 North Avenue
Burlington, MA 01803 USA
+1 781-328-0888
.bluesocket.com
Document Version 1.0
BlueSecure™ Access Point 1800 Installation Guide
2
Copyright Notice
Copyright © 2010 Bluesocket, Inc.
All rights reserved. No part of this docu ent ay be reproduced in any for or by
any eans, electronic or anual, including photocopying without the written
per ission of Bluesocket, Inc. The products described in this docu ent ay be
protected by one or ore U.S. patents, foreign patents, or pending patents. This
docu ent is provided “as is” without warranty of any kind, either express or
i plied, including, but not li ited to, the i plied warranties of erchantability,
fitness for a particular purpose, or non-infringe ent. This publication could include
technical inaccuracies or typographical errors. Changes are periodically added to
the infor ation herein; these changes will be incorporated in new editions of the
docu ent. Bluesocket inc. ay ake i prove ents or changes in the products or
the progra s described in this docu ent at any ti e.
Trademarks
Bluesocket, The Bluesocket Logo, Secure Mobility, BlueView, and BlueSecure are
trade arks or registered trade arks of Bluesocket, Inc. Bluetooth is a trade ark
owned by Bluetooth SIG, Inc., U.S.A. and is licensed to Bluesocket, Inc. All other
trade arks, trade na es and co pany na es referenced herein are used for
identification purposes only and are the property of their respective owners.
BlueSecure™ Access Point 1800 Installation Guide
3
Table of Contents
I. Overview ............................................................................................................................4
II. Familiarizing Yourself with the BSAP-1800 ardware................................................5
III. Provisioning Your Bluesocket WLAN for BSAPs ..........................................................8
IV. Selecting a BSAP Installation Location ......................................................................11
V. Wall Mounting the BSAP-1800.......................................................................................12
VI. Ceiling Mounting Kit for the BSAP-1800....................................................................13
VII. Connecting and Powering the BSAP..........................................................................16
VIII. Using the BSAP Command Line Interface (CLI) ...................................................18
IX. General Specifications.................................................................................................24
BlueSecure™ Access Point 1800 Installation Guide
4
I. Overview
The BlueSecure Access Point 1800 is an 802.11n-based “thin” access point that works in
conjunction with BlueSecure Controllers (BSCs) for enterprise wireless LAN (WLAN)
deployments. The BlueSecure Access Point 1800 features dual radios supporting 802.11a/n and
802.11b/g/n with a high performance internal antenna.
BSAPs are simple to configure and require only minimal provisioning to make them operational
on a WLAN secured and managed by a BlueSecure Controller
BSAPs can be directly attached to any existing Layer-2 or Layer-3 Ethernet switch and
communicate with the BSC across any subnet boundary. Once the BSAP has discovered and
established Layer-2 or Layer-3 communication with its home (i.e., host) BlueSecure Controller,
advanced configuration and provisioning may be applied either to individual BSAPs or globally
across the entire WLAN using the BSC’s web-based Administrator Console.
Figure 1: BSAPs Automatically Discover BSCs across L2/L Networks
Once the BlueSecure Access Point has downloaded its configuration from the BlueSecure
Controller, the BSAP initializes its radios and begins servicing clients.
This guide provides complete installation procedures for your BSAP including:
• Familiarizing yourself with the BSAP hardware
• Provisioning your Bluesocket WLAN for BSAPs
• Selecting a BSAP installation location
• Connecting and powering the BSAP
• Using the BSAP command line interface (CLI)
BlueSecure™ Access Point 1800 Installation Guide
5
II. Familiarizing Yourself with the BSAP-1800 Hardware
Make sure that you receive the following items in the package:
1 - BSAP-1800
1 - Wall-mounting ardware (Wall/table bracket/stand, 4 screws, 4 wall anchors)
8 - Adhesive rubber feet
1 - Ceiling mounting ardware
Please spend a few minutes familiarizing yourself with the BSAP-1800 enclosure.
Antenna
The BSAP-1800 has a high-performance internal antenna (no external antenna is required)
LED Indicators
The following LED indicators are located on the top of the BSAP-1800 housing.
BlueSecure™ Access Point 1800 Installation Guide
6
Table 1: Status and Radio LED Definitions
Status 2.4Ghz LED 5Ghz LED Description
Yellow Solid Off Off Initial power-up
Green Solid Off Off Initializing software and acquiring an IP
address
Green Blink Off Off Discovering Bluesocket controller
Green Solid Green
Solid/Blink
Green
Solid/Blink
Radios Activated and passing traffic
Orange Solid Off Off Software Upgrade
Table 2: Network LED Definitions
Network LED Description
Off No Link Detected
Amber - ON 10/100 Link Detect with No Activity
Amber - Blinking 10/100 Link Detect with with Activity
Green - ON 1000 Link Detect with No Activity
Green - Blinking 1000 Link Detect with with Activity
The BSAP does not have a power switch. It’s powered on when connected to a Power over
Ethernet (PoE) from a PoE injector (BSAP-POE-001-00-0), switch or other network device that
supplies power over the network cable based on the IEEE 802.3af standard.
Ethernet/PoE Connector
The BSAP-1800 has one auto-sensing 10BASE-T/100BASE-TX/1000BaseT RJ-45 connector that
can be attached directly to 10BASE-T/100BASE-TX/1000BaseT switches to provide a full-duplex
link. These segments must conform to the IEEE 802.3 or 802.3u specifications.
This connector uses an MDI (i.e., internal straight-through) pin configuration. You can use
straight-through twisted-pair cable to connect this port to most network interconnection devices
BlueSecure™ Access Point 1800 Installation Guide
7
such as a switch or router that provide MDI-X ports. This connector will sense the correct wiring
polarity, so no crossover cable is required.
The BSAP appears as an Ethernet node and performs a bridging function by moving packets
from the wired LAN to remote workstations on the wireless infrastructure.
The Ethernet/PoE RJ-45 connector also supports Power over Ethernet (PoE) based on the IEEE
802.3af standard.
802.3af specifies Power over Ethernet for “mid-span”, where a PoE injector is located in the
path between the network and the AP, as well as “PSE”, where the power is supplied by the
network switch the AP is attached to. Mid-span devices typically provide power on the unused
pairs (4+5 & 7+8) and only provide 100Mbps maximum throughput. To realize the full benefit
of 802.11n, the BSAP-1800 should be connected to a Gigabit Ethernet PoE switch or injector,
such as Bluesocket model BSAP-POE-001-00-0.
Reset Button
Use this button to reset the BSAP or restore its factory default configuration. If you hold down
the button for less than 5 seconds, the BSAP will perform a hardware reset. If you hold down
the button for 5 seconds or more, any configuration changes you may have made are removed,
and the factory default configuration is restored to the BSAP.
Serial Console Port
Use this port to connect a console device to the BSAP-1800 via special rollover serial cable. The
console device can be a laptop running a program like Tera-Term or yper-terminal. The
default settings are 115200, 8 data bits, no parity (N), and 1 stop bit (no flow control).
Kensington Security Slot
The BSAP includes a Kensington security slot on the side panel. You can prevent unauthorized
removal of the BSAP by wrapping a Kensington security cable (not provided) around an
unmovable object, inserting the lock into the slot, and turning the key.
BlueSecure™ Access Point 1800 Installation Guide
8
III. Provisioning Your Bluesocket WLAN for BSAPs
There are prerequisites that must be met before deploying BSAPs in a live network
environment. These prerequisites ensure that the BSAPs are able to discover and connect to a
BlueSecure Controller. Implementing these prerequisites also relieves you from needing to
manually configure each BSAP-1800.
The deployment prerequisites for BSAPs are:
• BSAP IP Address - Each BSAP requires a unique IP address.
• Host BlueSecure Controller IP Address - Each BSAP also needs the IP address of
the host BSC to which it will connect and from which it will obtain its software image
and configuration.
This section describes how to provision your Bluesocket WLAN when deploying BSAPs:
• On the same Layer-2 subnet as the BSC
• Across a routed network with Layer-3 connectivity to the BSC
Deploying BSAPs on the Same Layer-2 Subnet as the BSC
If the BSAPs are on the same subnet as the home BlueSecure Controller, you can run a D CP
server on the BSC to manage IP address assignment to BSAPs. In this scenario, the BlueSecure
Controller must be the only D CP server for the subnet.
Alternatively, you can configure the BlueSecure Controller to run a D CP relay agent to relay
D CP communications between the BSAPs and a D CP server on your network.
Figure 2: Deploying BSAPs on the same Layer-2 subnet as the BSC
When you run a D CP server or a D CP relay agent on the BSC to assign IP addresses to
BSAPs on the managed side, the BSC will also pass its IP address to the BSAPs automatically
using vendor-specific option 43. The BSAP will then connect to the IP provided by the D CP
vendor option as its host BSC.
BlueSecure™ Access Point 1800 Installation Guide
9
See the
BlueSecure Controller Setup and Administration Guide
for detailed D CP server and
D CP relay agent configuration procedures.
In this deployment scenario, simply connect and power on the BSAPs. They will automatically
discover and communicate with their home BSC.
Deploying BSAPs with Layer- Connectivity to the BSC
You can also deploy BSAPs on a routed network with Layer-3 connectivity to the BSC
Figure : Deploying BSAPs across a routed network
In this deployment scenario, you must ensure that each BSAP is able to communicate with the
BSC across the routed network by verifying that:
• There are no NAT devices between the BSAPs and the BSC
• Protocol 97, UDP Port 53 (DNS), and TCP/UDP Port 33333 traffic is allowed between the
BSAPs and the BSC
Each BSAP will receive its IP address from your existing network D CP server.
The BSAP also needs the IP address of the home BSC to which it will connect and from which it
will obtain its software image and configuration. Again, this is not needed if the BSAP is on the
managed side getting a relayed IP address from the BSC. You can provide the home BSC IP
address to a BSAP using one of the following methods:
• DHCP Server Option 4
You can manually configure the D CP server on your network to send BSC IP addresses
to BSAPs using D CP vendor-specific option 43.
In D CP requests sent from the BSAP, the BSAP uses option 60 Vendor class identifier
with a value of BlueSecure.AP1500 to identify itself to the D CP server (Note that all
BSAPs —1500,1540, 1800, and 1800 —identify as AP1500 for option 43).
BlueSecure™ Access Point 1800 Installation Guide
10
Option 43 is configured as a comma-separated list, for example
"192.168.100.23,192.168.100.98,F192.168.100.25 "
ere the “F” denotes failover BSC. If all the primary BSCs fails (those without F
in front of their IP), the AP associates to the failover BSC.
Refer to the documentation supplied with your D CP server when configuring vendor-
specific option 43
• DNS Server Configuration
BSAPs are factory configured with apdiscovery as the DNS hostname. You can configure
a DNS server on your network with an entry for apdiscovery with the home BSC
Controller IP address as the resolution.
To configure this, add a NAME record to the DNS server for apdiscovery (at the domain
server that the BAP will receive). Point this name to one or more BSC IP addresses
(managed, protected or VLAN depending on the network configuration).
So for example, if there are two BSCs (192.168.100.23 and 192.168.100.28), and the
domain is customer.com, add two NAME records to customer.com, for the name
apdiscovery.customer.com. One should resolve to 192.168.100.23 and one to
192.168.100.28. PTR (i.e., pointer) records are not needed for this portion of discovery.
Indice
Altri manuali Bluesocket Punto di accesso wireless
Bluesocket
Bluesocket BlueSecure 1840 Manuale utente
Bluesocket
Bluesocket BlueSecure 1500 Manuale utente
Bluesocket
Bluesocket BlueSecureBSAP-1500 Manuale utente
Bluesocket
Bluesocket BlueSecure Access Point 1540 Manuale utente
Bluesocket
Bluesocket BlueSecure 1840 Manuale utente
Bluesocket
Bluesocket BlueSecure 1700 Manuale utente
Bluesocket
Bluesocket BlueSecure 1800 Manuale utente
Bluesocket
Bluesocket BlueSecure Access Point 1500 Manuale utente
