Enable-IT 8424 Manuale utente

A l l R i g h t s R e s e r v e d 1 9 9 7 - 2 0 0 8 E

N A B L E

-I T

-P r o p r i e t a r y a n d C o n f i d e n t i a l

Enable-IT 8424

802.11g / 802.11b / WPA

Wireless Access Point

User Manual



P a g e 2 o f 9 3

may be reproduced in any form or by any means or used to make any derivative work (such

as translation, transformation, or adaptation) without written permission from Enable-IT, Inc.

Enable-IT, Inc reserves the right to revise this documentation and to make changes in

content from time to time without obligation on the part of Enable-IT, Inc to provide

notification of such revision or change.

Enable-IT, Inc provides this documentation without warranty, term, or condition of any kind,

either implied or expressed, including, but not limited to, the implied warranties, terms or

conditions of merchantability, satisfactory quality, and fitness for a particular purpose.

Enable-IT, Inc may make improvements or changes in the product(s) and/or the

program(s) described in this documentation at any time.

If there is any software on removable media described in this documentation, it is furnished

under a license agreement included with the product as a separate document, in the hard

copy documentation. If you are unable to locate a copy, please contact Enable-IT, Inc and a

copy will be provided to you.

UNITED STATES GOVERNMENT LEGEND

If you are a United States government agency, then this documentation and the software

describedhereinareprovidedtoyousubjecttothefollowing:

All technical data and computer software are commercial in nature and developed solely at

private expense. Software is delivered as "Commercial Computer Software" as defined in

DFARS 252.227-7014 (June 1995) or as a "commercial item" as defined in FAR 2.101 (a)

and as such is provided with only such rights as are provided in Enable-IT, Inc's standard

commercial license for the Software.

Technical data is provided with limited rights only as provided in DFAR 252.227-7015 (Nov

1995) or FAR 52.227-14 (June 1987), whichever is applicable. You agree not to remove or

deface any portion of any legend provided on any licensed program or documentation

contained in, or delivered to you in conjunction with, this User Guide.

Unless otherwise indicated, Enable-IT, Inc registered trademarks are registered in the

United States and may or may not be registered in other countries

P a g e 3 o f 9 3

TABLE OF CONTENTS

CHAPTER 1 INTRODUCTION..................................................................................................................................4

Features of your Wireless Access Point ........................................................................................................4

Package Contents.............................................................................................................................................6

Physical Details.................................................................................................................................................6

CHAPTER 3 ACCESS POINT SETUP...................................................................................................................... 8

Over view ............................................................................................................................................................ 8

Setup using the Windows Utility .....................................................................................................................8

Access Control................................................................................................................................................12

Security Profiles..............................................................................................................................................14

Security Profile Screen...................................................................................................................................15

System Screen................................................................................................................................................25

Wireless Screens............................................................................................................................................26

Basic Settings Screen....................................................................................................................................26

Advanced Settings..........................................................................................................................................29

CHAPTER 4 PC AND SERVER CONFIGURATION ..............................................................................................31

Over view ..........................................................................................................................................................31

Using WEP.......................................................................................................................................................31

Using WPA-802.1x ..........................................................................................................................................32

802.1x Server Setup (Windows 2000 Server)............................................................................................... 33

802.1x Client Setup on Windows XP.............................................................................................................43

Using 802.1x Mode (without WPA)................................................................................................................ 51

Using WPA-PSK..............................................................................................................................................52

Using WPA-802.1x ..........................................................................................................................................53

802.1x Server Setup (Windows 2000 Server)............................................................................................... 54

802.1x Client Setup on Windows XP.............................................................................................................64

Using 802.1x Mode (without WPA)................................................................................................................ 72

CHAPTER 5 OPERATION AND STATUS..............................................................................................................72

Operation.........................................................................................................................................................72

Status Screen.................................................................................................................................................. 72

CHAPTER 6 ACCESS POINT MANAGEMENT.....................................................................................................78

Over view ..........................................................................................................................................................78

Admin Login Screen.......................................................................................................................................78

Auto Config/Update........................................................................................................................................80

Config File........................................................................................................................................................82

Log Settings (Syslog).....................................................................................................................................83

Rogue APs.......................................................................................................................................................84

SNMP................................................................................................................................................................85

Upgrade Firmware ..........................................................................................................................................86

APPENDIX A SPECIFICATIONS............................................................................................................................86

Wireless Access Point....................................................................................................................................86

APPENDIX B TROUBLESHOOTING .....................................................................................................................89

Over view ..........................................................................................................................................................89

General Problems...........................................................................................................................................89

P a g e 4 o f 9 3

C h a p t e r 1

I n t r o d u c t i o n

This Chapter provides an overview of the Wireless Access Point's features and capabilities.

C o n g r a t u l a t i o n s o n t h e p u r c h a s e o f y o u r n e w W i r e l e s s A c c e s s P o i n t . T h e W i r e l e s s A c c e s s P o i n t l i n k s y o u r 8 0 2 . 1 1 g o r

8 0 2 . 1 1 b W i r e l e s s S t a t i o n s t o y o u r w i r e d L A N . T h e W i r e l e s s s t a t i o n s a n d d e v i c e s o n t h e w i r e d L A N a r e t h e n o n t h e s a m e

n e t w o r k , a n d c a n c o m m u n i c a t e w i t h e a c h o t h e r w i t h o u t r e g a r d f o r w h e t h e r t h e y a r e c o n n e c t e d t o t h e n e t w o r k v i a a

W i r e l e s s o r w i r e d c o n n e ct i o n .

Figure 1: Wireless Access Point

T h e a u t o -s e n s i n g c a p a b i l i t y o f t h e W i r e l e s s A c c e s s P o i n t a l l o w s p a c k e t t r a n s m i s s i o n u p t o 5 4 M b p s f o r m a x i m u m

t h r o u g h p u t , o r a u t o m a t i c s p e e d r e d u c t i o n t o l o w e r s p e e d s w h e n t h e e n v i r o n m e n t d o e s n o t p e r m i t m a x i m u m t h r o u g h p u t .

F e a t u r e s o f y o u r W i r e l e s s A c c e s s P o i n t

T h e W i r e l e s s A c c e s s P o i n t i n c o r p o r a t e s m a n y a d v a n c e d f e a t u r e s , c a r e f u l l y d e s i g n e d t o p r o v i d e s o p h i s t i c a t e d f u n c t i o n s

w h i l e b e i n g e a s y t o u s e .

•Standards Compliant. The Wireless Router complies with the IEEE802.11g (DSSS) specifications for Wireless

LANs.

•Supports both 802.11b and 802.11g Wireless Stations. The 802.11g standard provides for backward compatibility

with the 802.11b standard, so both 802.11b and 802.11g Wireless stations can be used simultaneously.

•108Mbps Wireless Connections. On both the 2.4GHz (802.11b & 802.11g) and 5GHz (802.11a) bands,

108Mbps connections are available to compatible clients.

•Bridge Mode Support. The Wireless Access Point can operate in Bridge Mode, connecting to another Access

Point. Both PTP (Point to Point) and PTMP (Point to Multi-Point) Bridge modes are supported.

And you can even use both Bridge Mode and Access Point Mode simultaneously!

•Client/Repeater Access Point. The Wireless Access Point can operate as a Client or Repeater Access Point,

sending all traffic received to another Access Point.

•Simple Configuration. If the default settings are unsuitable, they can be changed quickly and easily.

•DHCP Client Support. Dynamic Host Configuration Protocol provides a dynamic IP address to PCs and other

devices upon request. The Wireless Access Point can act as a DHCP Client, and obtain an IP address and

related information from your existing DHPC Server.

•Upgradeable Firmware. Firmware is stored in a flash memory and can be upgraded easily, using only your Web

Browser.

P a g e 5 o f 9 3

S e c u r i t y F e a t u r e s

•Security Profiles. For maximum flexibility, wireless security settings are stored in Security Profiles. Up to 8

Security profiles can be defined, and up to 4 used as any time.

•Multiple SSIDs.Because each Security Profile has it own SSID, and up to 4 Security Profiles can be active

simultaneously, multiple SSIDs are supported. Different clients can connect to the Wireless Access Point

using different SSIDs, with different security settings.

•Multiple SSID Isolation.If desired, PCs and devices connecting using different SSIDs can be isolated from

each other.

•VLAN Support. The 802.1Q VLAN standard is supported, allowing traffic from different sources to be

segmented. Combined with the multiple SSID feature, this provides a powerful tool to control access to your

LAN.

•WEP support. Support for WEP (Wired Equivalent Privacy) is included. Both 64 Bit and 128 Bit keys are

supported.

•WPA support. Support for WPA is included. WPA is more secure than WEP, and should be used if possible.

Both TKIP and AES encryption methods are supported.

•802.1x Support. Support for 802.1x mode is included, providing for the industrial-strength wireless security of

802.1x authentication and authorization.

•Radius Client Support. The Wireless Access Point can login to your existing Radius Server (as a Radius client).

•Radius MAC Authentication. You can centralize the checking of Wireless Station MAC addresses by using a

Radius Server.

•Rogue AP Detection.The Wireless Access Point can detect unauthorized (Rouge) Access Points on your LAN.

•Access Control. The Access Control feature can check the MAC address of Wireless clients to ensure that only

trusted Wireless Stations can use the Wireless Access Point to gain access to your LAN.

•Password - protected Configuration. Optional password protection is provided to prevent unauthorized users

from modifying the configuration data and settings.

A d v a n c e d F e a t u r e s

•Auto Configuration. The Wireless Access Point can perform self-configuration by copying the configuration data

from another Access Point. This feature is enabled by default.

•Auto Update. The Wireless Access Point can automatically update its firmware, by downloading and installing

new firmware from your FTP server.

•Command Line Interface. If desired, the command line interface (CLI) can be used for configuration. This

provides the possibility of creating scripts to perform common configuration changes.

•NetBIOS & WINS Support. Support for both NetBIOS broadcast and WINS (Windows Internet Naming Service)

allows the Wireless Access Point to easily fit into your existing Windows network.

•Radius Accounting Support. If you have a Radius Server, you can use it to provide accounting data on Wireless

clients.

•Syslog Support. If you have a Syslog Server, the Wireless Access Point can send its log data to your Syslog

Server.

•SNMP Support. SNMP (Simple Network Management Protocol) is supported, allowing you to use a SNMP

program to manage the Wireless Access Point.

•UAM Support. The Wireless Access Point supports UAM (Universal Access Method), making it suitable for use

in Internet cafes and other sites where user access time must be accounted for.

•WDS Support. Support for WDS (Wireless Distribution System) allows the Wireless Access Point to act as a

Wireless Bridge. Both Point-to-Point and Multi-Point Bridge modes are supported.

P a g e 6 o f 9 3

P a c k a g e C o nt e n t s

T h e f o l l o w i n g i t e m s s h o u l d b e i nc l u d e d :

•Wireless Access Point

I f a n y o f t h e a b o v e i t e m s a r e d a m a g e d o r m i s s i n g , p l e a s e c o n t a c t y o u r d e a l e r i m m e d ia t e l y .

P h y s i c a l D e t a i l s

F r o n t P a n e l L E D s

Figure 2: Front Panel

S t a t u s

O n - E r r o r c o n d it i o n .

O f f - N o r m a l o p e r a t i o n .

B l i n k i n g - D u r i n g s t a r t u p , a n d w h e n t h e F i r m w a r e i s b e i n g u pg r a d e d .

P o w e r

O n - N o r m a l o p e r a t i o n .

O f f - N o p o w e r

L A N

O n - T h e L A N ( E t h e r n e t ) p o r t i s a c t i v e .

O f f - N o a c t i v e c o n n e c t i o n o n t h e L A N ( E t h e r n e t ) p o r t .

F l a s h i n g - D a t a i s b e i n g t r a n s m i t t e d o r r e c e i v e d v i a t h e c o r r es p o n d i n g

L A N ( E t h e r n e t ) p o r t .

W i r e l e s s

L A N

O n - I d l e

O f f - E r r o r - W i r e l e s s c o n n e c t i o n i s n o t a v a i l a b l e .

F l a s h i n g - D a t a i s b e i n g t r a n s m i t t e d o r r e c e i v e d v i a t h e W i r e l e s s

a c c e s s p o i n t . D a t a i n c l u d e s " n e t w o r k t r a f f i c " a s w e l l a s u s e r d a t a .

P a g e 7 o f 9 3

R e a r P a n e l

Figure 3 Rear Panel

A n t e n n a

O n e a n t e n n a ( a e r i a l ) i s s u p p l i e d . B e s t r e s u l t s a r e u s u a l l y o bt a i n e d

w i t h t h e a n t e n n a i n a v e r t i c a l p o s it i o n .

C o n s o l e p o r t

D B 9 f e m a l e R S 2 3 2 p o r t .

R e s e t B u t t o n

T h i s b u t t o n h a s t w o ( 2 ) f u n c t i o n s :

•Reboot. When pressed and released, the Wireless Access

Point will reboot (restart).

•Reset to Factory Defaults. This button can also be used to

clear ALL data and restore ALL settings to the factory

default values.

T o C l e a r A l l D a t a a n d r e s t o r e t h e f a c t o r y d e f a u l t v a l u e s :

1. Power Off the Access Point

2. Hold the Reset Button down while you Power On the Access

Point.

3. Continue holding the Reset Button until the Status (Red)

LED blinks TWICE.

4. Release the Reset Button.

The factory default configuration has now been restored,

and the Access Point is ready for use.

E t h e r n e t

U s e a s t a n d a r d L A N c a b l e ( R J 4 5 c o n n e c t o r s ) t o c o n n e c t t h i s p o r t t o

a 1 0 B a s e T o r 1 0 0 B a s e T h u b o n y o u r L A N .

P o w e r p o r t

C o n n e c t t h e s u p p l i e d p o w e r a d a p t e r h e r e .

P a g e 8 o f 9 3

C h a p t e r 3

A c c e s s P o i n t S e t u p

This Chapter provides details of the Setup process for Basic Operation of your Wireless Access

Point.

O v e r v i e w

T h i s c h a p t e r d e s c r i b e s t h e s e t u p p r o c e d u r e t o m a k e t h e W i r e l e s s A c c e s s P o i n t a v a l i d d e v i c e o n y o u r L A N , a n d t o

f u n c t i o n a s a n A c c e s s P o i n t f o r y o u r W i r e l e s s S t a t i o n s .

W i r e l e s s S t a t i o n s m a y a l s o r e q u i r e c o n f i g u r a t i o n . F o r d e t a i l s , s e e C h a p t e r 4 - W i r e l e s s S t a t i o n C o n f i g u r a t i o n .

T h e W i r e l e s s A c c e s s P o i n t c a n b e c o n f i g u r e d u s i n g e i t h e r t h e s u p p l i e d W i n d o w s u t i l i t y o r y o u r W e b B r o w s e r

S e t u p u s i n g t h e W i n d o w s U t i l i t y

A s i m p l e W i n d o w s s e t u p u t i l i t y i s s u p p l i e d o n t h e C D -R O M . T h i s u t i l i t y c a n b e u s e d t o a s s i g n a s u i t a b l e I P a d d r e s s t o t h e

W i r e l e s s A c c e s s P o i n t . U s i n g t h i s u t i l i t y i s r e c o mm e n d e d , b e c a u s e i t c a n l o c a t e t h e W i r e l e s s A c c e s s P o i n t e v e n i f i t h a s

a n i n v a l i d I P a d d r e s s .

I n s t a l l a t i o n

5. Insert the supplied CD-ROM in your drive.

6. If the utility does not start automatically, run the SETUP program in the root folder.

7. Follow the prompts to complete the installation.

M a i n S c r e e n

•Start the program by using the icon created by the setup program.

•When run, the program searches the network for all active Wireless Access Points, then lists them on screen,

as shown by the example below.

Figure 4: Management utility Screen

Wireless Access Points

T h e m a i n p a n e l d i s p l a y s a l i s t o f a l l W i r e l e s s A c c e s s P o i n t s f o u n d o n t h e n e tw o r k . F o r e a c h A c c e s s P o i n t , t h e f o l l o w i n g

d a t a i s s h o w n :

S e r v e r N a m e

T h e S e r v e r N a m e i s s h o w n o n a s t i c k e r o n t h e b a s e o f t h e d e v i c e .

I P a d d r e s s

T h e I P a d d r e s s f o r t h e W i r e l e s s A c c e s s P o i n t .

M A C A dd r e s s

T h e h a r d w a r e o r p h y s i c a l a d d r e s s o f t h e W i r e l e s s A c c e s s P o i n t .

I E E E S t a nd a r d

T h e w i r e l e s s s t a n d a r d o r s t a n d a r d s u s e d b y t h e W i r e l e s s A c c e s s

P o i n t ( e . g . 8 0 2 . 1 1 b , 8 0 2 . 1 1 g )

F W V e r s i o n

T h e c u r r e n t F i r m w a r e v e r s i o n i n s t a l l e d i n t h e W i r e l e s s A c c e s s P o i n t .

P a g e 9 o f 9 3

D e s c r i p t i o n

A n y e x t r a i n f o r m a t i o n f o r t h e W i r e l e s s A c c e s s P o i n t , e n t e r e d b y t h e

a d m i n i s t r a t o r .

N o t e : I f t h e d e s i r e d W i r e l e s s A c c e s s P o i n t i s n o t l i s t e d , c h e c k t h a t t h e d e v i c e i s i n s t a l l e d a n d O N , t h e n u p d a t e t h e l i s t b y

c l i c k i n g t h e R e f r e s h b u t t o n .

Buttons

R e f r e s h

C l i c k t h i s b u t t o n t o u p d a t e t h e W i r e l e s s A c c e s s P o i n t d e v i c e

l i s t i n g a f t e r c h a n gi n g t h e n a m e o r I P A d d r e s s .

D e t a i l I n f o

W h e n c l i c k e d , a d d i t i o n a l i n f o r m a t i o n a b o u t t h e s e l e c t e d A c c e s s

P o i n t w i l l b e d i s p l a y e d .

W e b M a n a g em e n t

U s e t h i s b u t t o n t o c o n n e c t t o t h e W i r e l e s s A c c e s s P o i n t ' s W e b -

b a s e d m a n a g e m e n t i n t e r f a c e .

S e t I P A d d r e s s

C l i c k t h i s b u t t o n i f y o u w a n t t o c h a n g e t h e I P A d d r e s s o f t h e

W i r el e s s A c c e s s P o i n t .

E x i t

E x i t t h e M a n a g e m e n t u t i l i t y p r o g r a m b y c l i c k i n g t h i s b u t t o n .

P a g e 1 0 o f 9 3

Se t u p P r o c e d u r e

8. Select the desired Wireless Access Point.

9. Click the Set IP Address button.

10. If prompted, enter the user name and password. The default values are admin for the User Name, and

password for the Password.

11. Ensure the IP address, Network Mask, and Gateway are correct for your LAN. Save any changes.

12. Click the Web Management button to connect to the selected Wireless Access Point using your Web

Browser. If prompted, enter the User Name and Password again.

13. Check the following screens, and configure as necessary for your environment. Use the on-line help if

necessary.

The later sections in this Chapter also provides more details about each of these screens.

•Access Control - MAC level access control.

•Security Profiles - Wireless security.

•System - Identification, location, and Network settings

•Wireless - Basic & Advanced

14. You may also wish to set the admin password and administration connection options. These are on the Admin

available on the Management menu.

15. Use the Apply/Restart button on the menu to apply your changes and restart the Wireless Access Point.

S e t u p i s n o w c o mp l e t e .

W i r e l e s s s t a t i o n s m u s t n o w b e s e t t o m a t c h t h e W i r e l e s s A c c e s s P o i n t . S e e C h a p t e r 4 f o r d e t a i l s .

S e t u p u s i n g a W e b B r o w s e r

Y o u r B r o w s e r m u s t s u p p o r t J a v a S c r i p t . T h e c o n f i g u r a t i o n p r o g r a m h a s b e e n t e s t e d o n t h e f o l l o w i n g b r o w se r s :

•Netscape V4.08 or later

•Internet Explorer V4 or later

S e t u p P r o c e d u r e

B e f o r e c o m m e n c i n g , i n s t a l l t h e W i r e l e s s A c c e s s P o i n t i n y o u r L A N , a s d e s c r i b e d p r e v i o u s l y .