User manual US ROBOTICS USR5453 - REFERENCE GUIDE

Professional Access Point Administrator Guide R46.1224.00 rev 2.0 07/06 Professional Access Point Administrator Guide Professional Access Point Administrator Guide U.S. Robotics Corporation 935 National Parkway Schaumburg, Illinois 60173-5157 USA No part of this documentation may be reproduced in any form or by any means or used to make any derivative work (such as a translation, transformation, or adaptation) without written permission from U.S. Robotics Corporation. U.S. Robotics Corporation reserves the right to revise this documentation and to make changes in the products and/or content of this document from time to time without obligation to provide notification of such revision or change. U.S. Robotics Corporation provides this documentation without warranty of any kind, either implied or expressed, including, but not limited to, implied warranties of merchantability and fitness for a particular purpose. If there is any software on removable media described in this documentation, it is furnished under a license agreement included with the product as a separate document, in the hard copy documentation, or on the removable media in a directory named LICENSE. If you are unable to locate a copy, please contact USRobotics and a copy will be provided to you. UNITED STATES GOVERNMENT LEGEND If you are a United States government agency, then this documentation and the software described herein are provided to you subject to the following: All technical data and computer software are commercial in nature and developed solely at private expense. Software is delivered as "Commercial Computer Software" as defined in DFARS 252.227-7014 (June 1995) or as a "commercial item" as defined in FAR 2.101(a) and as such is provided with only such rights as are provided in USRobotics standard commercial license for the Software. Technical data is provided with limited rights only as provided in DFAR 252.227-7015 (Nov 1995) or FAR 52.227-14 (June 1987) whichever is applicable. You agree not to remove or deface any portion of any legend provided on any licensed program or documentation contained in, or delivered to you in conjunction with, this Administrator Guide. Copyright © 2005 U.S. Robotics Corporation. All rights reserved. U.S. Robotics and the USRobotics logo are registered trademarks of U.S. Robotics Corporation. Other product names are for identification purposes only and may be trademarks of their respective companies. Product specifications subject to change without notice. iii Professional Access Point Administrator Guide iv Professional Access Point Administrator Guide Contents About This Document . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .ix Getting Started Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 Features and Benefits . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12 What's Next? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14 Pre-Launch Checklist: Default Settings and Supported Administrator/ Client Platforms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 Professional Access Point . . . . . . . . . . . . . . . . . Administrator's Computer . . . . . . . . . . . . . . . . Wireless Client Computers . . . . . . . . . . . . . . . . Understanding Dynamic and Static IP Addressing ..... ..... ..... on the .............. .............. .............. Professional Access .... .... .... Point . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 18 19 20 Setting Up and Launching Your Wireless Network. . . . . . . . . . . . . . 23 Step 1. Unpack the access point . . . . . . . . . . . . . . . . . . . . . . . . . . . Step 2. Connect the access point to network and power . . . . . . . . . . Step 3. Run the Detection Utility to find access points on the network . Step 4. Log on to the Web User Interface . . . . . . . . . . . . . . . . . . . . Step 5. Configure Basic Settings and start the wireless network . . . . . Wall Mounting the Access Point. . . . . . . . . . . . . . . . . . . . . . . . . . . . What's Next? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .. .. .. .. .. .. .. 23 24 26 30 31 33 33 Web User Interface Basic Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35 Navigating to Basic Settings . . . . . . . . . . . . . . . . . . . . . . . . Review / Describe the Access Point . . . . . . . . . . . . . . . . . . . Provide Administrator Password and Wireless Network Name . Set Configuration Policy for New Access Points . . . . . . . . . . . Update Basic Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . Summary of Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . Basic Settings for a Standalone Access Point . . . . . . . . . . . . Your Network at a Glance: Understanding Indicator Icons . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36 37 38 39 40 40 41 41 Cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43 Access Points . . . . . . . User Management . . . . Sessions . . . . . . . . . . Channel Management . Wireless Neighborhood . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43 53 59 63 71 Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77 Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77 v Professional Access Point Administrator Guide Events . . . . . . . . . . . . . . . Transmit/Receive Statistics Client Associations . . . . . . Neighboring Access Points . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ... ... ... ... 79 82 83 85 Advanced . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89 Ethernet (Wired) Settings . . Wireless Settings . . . . . . . . Security . . . . . . . . . . . . . . . Guest Login . . . . . . . . . . . . Virtual Wireless Networks. . . Radio. . . . . . . . . . . . . . . . . MAC Filtering . . . . . . . . . . . Load Balancing . . . . . . . . . . Quality of Service . . . . . . . . Wireless Distribution System Time Protocol . . . . . . . . . . . SNMP . . . . . . . . . . . . . . . . Reboot. . . . . . . . . . . . . . . . Reset Configuration . . . . . . . Upgrade. . . . . . . . . . . . . . . Backup/Restore . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... . 89 . 97 101 121 125 129 135 139 143 153 161 165 171 171 172 174 Command Line Interface Class Structure, Commands, and Examples . . . . . . . . . . . . . . . . . . 177 Comparison of Settings Configurable with the CLI and Web User Interface. How to Access the CLI for an Access Point . . . . . . . . . . . . . . . . . . . . . . . Quick View of Commands and How to Get Help. . . . . . . . . . . . . . . . . . . . Command Usage and Configuration Examples . . . . . . . . . . . . . . . . . . . . Keyboard Shortcuts and Tab Completion Help . . . . . . . . . . . . . . . . . . . . CLI Class and Field Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 178 181 184 188 247 250 Class and Field Reference. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 253 Troubleshooting Installation and Connectivity Troubleshooting . . . . . . . . . . . . . . . 283 Configuration Troubleshooting. . . . . . . . . . . . . . . . . . . . . . . . . . . . 287 Wireless Distribution System (WDS) Problems and Solutions . . . . . . . . . . . . . . . . . . . . . . . . 287 Cluster Recovery. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 288 Support Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 291 Regulatory Information . . . . . . . . . . . . . . . . . . . . . . . . . 293 Declaration of Conformity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 293 For Canadian Users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 294 vi Professional Access Point Administrator Guide CE Compliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 295 U.S. Robotics Corporation Two (2) Year Limited Warranty . 299 1.0 2.0 3.0 4.0 5.0 6.0 7.0 GENERAL TERMS: . . . . . . . . . . . . CUSTOMER OBLIGATIONS: . . . . . . OBTAINING WARRANTY SERVICE: . WARRANTY REPLACEMENT: . . . . . LIMITATIONS:. . . . . . . . . . . . . . . DISCLAIMER: . . . . . . . . . . . . . . . GOVERNING LAW: . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 299 299 300 300 301 302 302 Glossary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 303 Index. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 323 vii Professional Access Point Administrator Guide viii Professional Access Point Administrator Guide About This Document This guide describes setup, configuration, administration and maintenance of one or more Professional Access Points on a wireless network. Administrator Audience This information is intended for the person responsible for installing, configuring, monitoring, and maintaining the Professional Access Point as part of a small-to-medium business information technology infrastructure. Online Help Features Online Help for the Professional Access Point Web User Interface provides information about all fields and features available in the interface. The information in the Online Help is a subset of the information available in the Administrator Guide. Online Help information corresponds to each tab on the Professional Access Point Web User Interface. To display help for the current tab, Click Help at the top of the Web User Interface page or click the More... link at the bottom of the tab's inline help panel. ix Professional Access Point Administrator Guide Recommended Settings, Notes and Cautions An arrow next to field description information indicates a recommended or suggested configuration setting for an option on the Access Point. A Note provides more information about a feature or technology and cross-references to related topics. A Caution provides information about critical aspects of access point configuration, combinations of settings, events, or procedures that can adversely affect network connectivity, security, and so on. Typographical Conventions This guide uses the following typographical conventions: italics Glossary terms, new terms, and book titles Screen text, URLs, IP addresses, and MAC addresses, UNIX file, command, and directory names, user-typed command-line entries Variables Menu titles, window names, and button names typewriter font typewriter font italics Bold Keywords PDF Links In addition to URL links, which are shown in blue and underscored, this document contains links to related sections and to glossary terms. Whenever your cursor turns into the pointing hand, a single click will take you to the referenced topic. x Professional Access Point Administrator Guide Getting Started This part of the Professional Access Point Administrator Guide provides the information that you need to establish a network by performing basic installation for one or more Professional Access Points: · · · Overview Pre-Launch Checklist: Default Settings and Supported Administrator/Client Platforms Setting Up and Launching Your Wireless Network Overview The Professional Access Point provides continuous, high-speed access between your wireless and Ethernet devices. It is an advanced, standards-based solution for wireless networking in small and medium-sized businesses. The Professional Access Point enables zero-administration wireless local area network (WLAN) deployment while providing state-of-the-art wireless networking features. The Professional Access Point provides best-of-breed security, ease-of-administration, and industry standards--providing a standalone and fully-secured wireless network without the need for additional management and security server software. The access point can broadcast in the following modes. · · IEEE 802.11b IEEE 802.11g The following sections list features and benefits of the Professional Access Point, and tell you what's next when you're ready to get started. · Features and Benefits · · · · · · IEEE Standards Support and Wi-Fi Compliance Wireless Features Security Features Guest Interface Clustering and Auto-Management Networking Overview - 11 Professional Access Point Administrator Guide · · Maintainability What's Next? Features and Benefits IEEE Standards Support and Wi-Fi Compliance · · · Support for IEEE 802.11b and IEEE 802.11g wireless networking standards Provides bandwidth of up to 11 Mbps for IEEE 802.11b and 54 Mbps for IEEE 802.11g Wi-Fi compliance required for certification Wireless Features · · · · Auto channel selection at startup Transmit power adjustment Wireless Distribution System (WDS) for connecting multiple access points wirelessly. Extends your network with less cabling and provides a seamless experience for roaming clients. Quality of Service (QoS) for enhanced throughput and better performance of time-sensitive wireless traffic like Video, Audio, Voice over IP (VoIP) and streaming media. The Professional Access Point QoS is Wi-Fi Multimedia (WMM) compliant. Load Balancing Built-in support for multiple SSIDs (network names) and multiple BSSIDs (basic service set IDs) on the same access point Channel management for automatic coordination of radio channel assignments to reduce accesspoint-to-access-point interference on the network and maximise Wi-Fi bandwidth Neighbouring access point detection finds nearby access points, including rogues. Support for multiple IEEE 802.11d Regulatory Domains (country codes for global operation) · · · · · Security Features · · · · Prohibit SSID Broadcast Station isolation Weak IV avoidance Wireless Equivalent Privacy (WEP) Overview - 12 Professional Access Point Administrator Guide · · · · · Wi-Fi Protected Access 2 (WPA2/802.11i) Advanced Encryption Standard (AES) User-based access control, local user database, and user life-cycle management with built-in RADIUS authentication server WPA/WPA2 Enterprise MAC address filtering Guest Interface · · Captive portal to guide guests to customized, guest-only Web page Implementation with dedicated access point or as VLAN with unique network name (SSID) Clustering and Auto-Management · · Automatic setup with the Professional Access Point Detection Utility Provisioning and auto-configuration of access points through clustering and cluster rendezvous The administrator can specify how new access points should be configured before they are added to the network. When new access points are added to the same wired network, they can automatically rendezvous with the cluster and securely download the correct configuration. The process does not require manual intervention, but is under the control of the administrator. · Single universal view of clustered access points and cluster configuration settings Configuration for all access points in a cluster can be managed from a single interface. Changes to common parameters are automatically reflected in all members of the cluster. · Self-managed access points with automatic configuration synchronization The access points in a cluster periodically ensure that the cluster configuration is consistent, and check for the presence and availability of the other members of the cluster. The administrator can monitor this information through the Web User Interface. · Enhanced local authentication using 802.1x without additional IT setup A cluster can maintain a user authentication server and database stored on the access points. This eliminates the need to install, configure, and maintain a RADIUS infrastructure and simplifies the administrative task of deploying a secure wireless network. Networking · Dynamic Host Configuration Protocol (DHCP) support for dynamically assigning network configuration information to systems on the LAN/WLAN. Overview - 13 Professional Access Point Administrator Guide · Virtual Local Area Network (VLAN) support SNMP Support The Professional Access Point includes the following standard Simple Network Protocol (SNMP) Management Information Bases (MIB): · · · SNMP v1 and v2 MIBs IEEE802.11 MIB Four USRobotics proprietary MIBs support product, system, channel, and wireless system statistics. Maintainability · · · · · · Status, monitoring, and tracking views of the network including session monitoring, client associations, transmit/receive statistics, and event log Link integrity monitoring to continually verify connection to the client, regardless of network traffic activity levels Reset configuration option Firmware upgrade Backup and restore of access point configuration Backup and restore of user database for built-in RADIUS server (when using IEEE 802.1x or WPA/ WPA2 Enterprise (RADIUS) security mode) What's Next? Are you ready to get started with wireless networking? Read through the "Pre-Launch Checklist: Default Settings and Supported Administrator/Client Platforms" on page 15, and then follow the steps in "Setting Up and Launching Your Wireless Network" on page 23. Overview - 14 Professional Access Point Administrator Guide Pre-Launch Checklist: Default Settings and Supported Administrator/Client Platforms Before you plug in and boot a new Access Point, review the following sections for hardware, software, and client configuration requirements and for compatibility issues. Make sure that you have everything you need for a successful launch and test of your new or extended wireless network. · Professional Access Point · · · · · Default Settings for the Professional Access Point What the Access Point Does Not Provide Administrator's Computer Wireless Client Computers Understanding Dynamic and Static IP Addressing on the Professional Access Point · · · How Does the Access Point Obtain an IP Address at Startup? Dynamic IP Addressing Static IP Addressing Professional Access Point The Professional Access Point provides continuous, high-speed access between your wireless and Ethernet devices in IEEE 802.11b and 802.11g modes. The Professional Access Point offers a Guest Interface feature that allows you to configure access points for controlled guest access to the wireless network. This can be accomplished by using Virtual LANs. For more information on the Guest interface, see "Guest Login" on page 121 and "A Note About Setting Up Connections for a Guest Network" on page 25. Pre-Launch Checklist: Default Settings and Supported Administrator/Client Platforms - 15 Professional Access Point Administrator Guide Default Settings for the Professional Access Point Option System Name Default Settings USR5453-AP Related Information "Setting the DNS Name" on page 91 in "Ethernet (Wired) Settings" on page 89 User Name admin The user name is read-only. It cannot be modified. Password admin "Provide Administrator Password and Wireless Network Name" on page 38 in "Basic Settings" on page 35 "Review / Describe the Access Point" on page 37 in "Basic Settings" on page 35 "Configuring Internal LAN Wireless Settings" on page 99 in "Wireless Settings" on page 97 "Configuring Guest Network Wireless Settings" on page 100 in "Wireless Settings" on page 97 Network Name (SSID) USR5453 Internal Network for the Internal interface USR5453 Guest Network for the Guest interface Network Time Protocol (NTP) IP Address None "Time Protocol" on page 161 "Understanding Dynamic and Static IP Addressing on the Professional Access Point" on page 20 192.168.1.10 The default IP address is used if you do not use a Dynamic Host Configuration Protocol (DHCP) server. You can assign a new static IP address through the Web User Interface. If you have a DHCP server on the network, then an IP address will be dynamically assigned by the server at access point startup. Connection Type Dynamic Host Configuration Protocol (DHCP) If you do not have a DHCP server on the Internal network and do not plan to use one, the first thing you must do after bringing up the access point is to change the connection type from DHCP to Static IP. The Guest network must have a DHCP server. "Understanding Dynamic and Static IP Addressing on the Professional Access Point" on page 20 For information on how to reconfigure the Connection Type, see "Configuring Internal Interface Ethernet Settings" on page 93. "Ethernet (Wired) Settings" on page 89 Subnet Mask 255.255.255.0 This is determined by your network setup and DHCP server configuration. Pre-Launch Checklist: Default Settings and Supported Administrator/Client Platforms - 16 Professional Access Point Administrator Guide Option Radio IEEE 802.11 Mode 802.11g Channel Beacon Interval DTIM Period Fragmentation Threshold Regulatory Domain RTS Threshold MAX Stations Transmit Power Rate Sets Supported (Mbps) Default Settings On 802.11g Auto 100 2 2346 FCC 2347 2007 100 percent · IEEE 802.11g: 54, 48, 36, 24, 18, 12, 11, 9, 6, 5.5, 2, 1 · IEEE 802.11b: 11, 5.5, 2, 1 Related Information "Radio" on page 129 "Radio" on page 129 "Radio" on page 129 "Radio" on page 129 "Radio" on page 129 "Radio" on page 129 "Radio" on page 129 "Radio" on page 129 "Radio" on page 129 "Radio" on page 129 "Radio" on page 129 Rate Sets (Mbps) (Basic/Advertised) Broadcast SSID · IEEE 802.1g: 11, 5.5, 2, 1 · IEEE 802.1b: 2, 1 Allow "Radio" on page 129 "Broadcast SSID, Station Isolation, and Security Mode" on page 107 in "Security" on page 101 "Broadcast SSID, Station Isolation, and Security Mode" on page 107 in "Security" on page 101 Security Mode None Authentication Type MAC Filtering Guest Login and Management Load Balancing WDS Settings SNMP None Allow any station unless in list Disabled Disabled None Enabled "MAC Filtering" on page 135 "Guest Login" on page 121 "Load Balancing" on page 139 "Wireless Distribution System" on page 153 "Enabling and Disabling Simple Network Management Protocol (SNMP)" on page 166 "Enabling and Disabling Simple Network Management Protocol (SNMP)" on page 166 SNMP SET Requests Disabled Pre-Launch Checklist: Default Settings and Supported Administrator/Client Platforms - 17 Professional Access Point Administrator Guide What the Access Point Does Not Provide The Professional Access Point is not designed to function as a gateway to the Internet. To connect your Wireless LAN (WLAN) to other LANs or the Internet, you need a gateway device. Administrator's Computer Configuration and administration of the Professional Access Point is accomplished with the Professional Access Point Detection Utility, which you run from the CD, and through a Web-based user interface. The following table describes the minimum requirements for the administrator's computer. Required Software or Component Ethernet Connection to the First Access Point Description The computer used to configure the first access point with the Detection Utility must be connected to the access point, either directly or through a hub, by an Ethernet cable. For more information on this step, see "Step 2. Connect the access point to network and power" on page 24 in Setting Up and Launching Your Wireless Network. Wireless Connection to the Network After initial configuration and launch of the first access point on your new wireless network, you can make subsequent configuration changes through the Web User Interface using a wireless connection to the internal network. For wireless connection to the access point, your administration device needs Wi-Fi capability: · Portable or built-in Wi-Fi client adapter that supports one or more of the IEEE 802.11 modes in which you plan to run the access point. IEEE 802.11b and 802.11g modes are supported. · Wireless client software such as Microsoft Windows XP or Funk Odyssey wireless client configured to associate with the Professional Access Point. For more details on Wi-Fi client setup, see "Wireless Client Computers" on page 19. Web Browser / Operating System Configuration and administration of the Professional Access Point is provided through a Web-based user interface hosted on the access point. USRobotics recommends using one of the following supported Web browsers to access the Web User Interface: · Microsoft Internet Explorer version 5.5 or 6.x (with up-to-date patch level for either major version) on Microsoft Windows XP or Microsoft Windows 2000 · Mozilla 1.7.x on Redhat 9 with 2.4 kernel The administration Web browser must have JavaScript enabled to support the interactive features of the Web User Interface. The browser must also support HTTP uploads to use the firmware upgrade feature. Pre-Launch Checklist: Default Settings and Supported Administrator/Client Platforms - 18 Professional Access Point Administrator Guide Required Software or Component Detection Utility Wizard on CD-ROM Description You can run the Installation CD-ROM on any Windows laptop or computer that is connected to the access point via wired or wireless connection. It detects Professional Access Points on the network. The wizard steps you through initial configuration of new access points, and provides a link to the Web User Interface where you finish the basic setup process in a step-by-step mode and launch the network. For more information about using the Detection Utility, see "Step 3. Run the Detection Utility to find access points on the network" on page 26 under "Setting Up and Launching Your Wireless Network". CD-ROM Drive Security Settings The administrator's computer must have a CD-ROM drive to run the Installation CD-ROM. Ensure that security is disabled on the wireless client used to initially configure the access point. Wireless Client Computers The Professional Access Point provides wireless access to any client with a properly configured Wi-Fi client adapter for the 802.11 mode in which the access point is running. Multiple client operating systems are supported. Clients can be laptops or desktops, personal digital assistants (PDAs), or any other hand-held, portable, or stationary device equipped with a Wi-Fi adapter and supporting drivers. In order to connect to the access point, wireless clients need the following software and hardware. Required Component Wi-Fi Client Adapter Description Portable or built-in Wi-Fi client adapter that supports one or more of the IEEE 802.11 modes in which you plan to run the access point. (IEEE 802.11b and 802.11g modes are supported.) Wi-Fi client adapters vary considerably. The adapter can be a PC card built in to the client device, a portable PCMCIA or PCI card, or an external device such as a USB or Ethernet adapter that you connect to the client by means of a cable. The access point supports 802.11b/g modes, but you will probably make a decision during network design phase as to which mode to use. The fundamental requirement for clients is that they all have configured adapters that match the 802.11 mode for which your access point is configured. Wireless Client Software Client software such as Microsoft Windows Supplicant or Funk Odyssey wireless client configured to associate with the Professional Access Point. Pre-Launch Checklist: Default Settings and Supported Administrator/Client Platforms - 19 Professional Access Point Administrator Guide Required Component Client Security Settings Description Security should be disabled on the client used to do initial configuration of the access point. If the Security mode on the access point is set to anything other than None, wireless clients will need to set a profile to the authentication mode used by the access point and provide a valid user name and password, certificate, or similar user identity proof. Security modes are Static WEP, IEEE 802.1x, WPA/WPA2 with RADIUS server, and WPA/WPA2-PSK. For information on configuring security on the access point, see "Security" on page 101. Understanding Dynamic and Static IP Addressing on the Professional Access Point Professional Access Points are designed to auto-configure, with very little setup required for the first access point and miminal configuration required for additional access points subsequently joining a preconfigured cluster. How Does the Access Point Obtain an IP Address at Startup? When you deploy the access point, it looks for a network DHCP server and, if it finds one, obtains an IP Address from the DHCP server. If no DHCP server is found on the network, the access point will continue to use its default Static IP Address (192.168.1.10) until you reassign it a new static IP address and specify a static IP addressing policy or until a DHCP server is brought online. · · If you configure both an Internal and Guest network and plan to use a dynamic addressing policy for both, separate DHCP servers must be running on each network. A DHCP server is a requirement for the Guest network. Note When you run the Detection Utility, it discovers the Professional Access Points on the network and lists their IP addresses and MAC addresses. The Detection Utility also provides a link to the Web User Interface of each access point using the IP address in the URL. For more information about the Detection Utility, see "Step 3. Run the Detection Utility to find access points on the network" on page 26. Dynamic IP Addressing The Professional Access Point generally expects that a DHCP server is running on the network where the access point is deployed. Most business networks already have DHCP service provided through either a gateway device or a centralized server. However, if no DHCP server is present on the Internal network, the access point will use the default Static IP Address for first-time startup. Similarly, wireless clients and other network devices will receive their IP addresses from the DHCP server, if there is one. If no DHCP server is present on the network, you must manually assign static IP addresses to your wireless clients and other network devices. Pre-Launch Checklist: Default Settings and Supported Administrator/Client Platforms - 20 Professional Access Point Administrator Guide The Guest network must have a DHCP server. Static IP Addressing The Professional Access Point ships with a default Static IP Address of 192.168.1.10. (See "Default Settings for the Professional Access Point" on page 16.) If no DHCP server is found on the network, the access point retains this static IP address at first-time startup. After access point startup, you have the option of specifying a static IP addressing policy on Professional Access Points and assigning static IP addresses to APs on the Internal network via the access point Web User Interface. (See information about the Connection Type field and related fields in "Configuring Internal Interface Ethernet Settings" on page 93.) If you do not have a DHCP server on the Internal network and do not plan to use one, the first thing you must do after bringing up the access point is change the Connection Type from DHCP to Static IP. You can either assign a new Static IP address to the access point or continue using the default address. USRobotics recommends assigning a new Static IP address so that if later you bring up another Professional Access Point on the same network, the IP address for each access point will be unique. Caution Recovering an IP Address If you experience trouble communicating with the access point, you can recover a Static IP Address by resetting the access point configuration to the factory defaults (see "Reset Configuration" on page 171), or you can get a dynamically assigned address by connecting the access point to a network that has DHCP. Pre-Launch Checklist: Default Settings and Supported Administrator/Client Platforms - 21 Professional Access Point Administrator Guide Pre-Launch Checklist: Default Settings and Supported Administrator/Client Platforms - 22 Professional Access Point Administrator Guide Setting Up and Launching Your Wireless Network Setting up and deploying one or more Professional Access Points is in effect creating and launching a wireless network. The Detection Utility wizard and corresponding Basic Settings Administration Web page simplify this process. Here is a step-by-step guide to setting up your Professional Access Points and the resulting wireless network. Have the Installation CD-ROM handy, and familiarise yourself with the "PreLaunch Checklist: Default Settings and Supported Administrator/Client Platforms" on page 15 if you haven't already. The topics covered here are: · · · · · · Step 1. Unpack the access point Step 2. Connect the access point to network and power Step 3. Run the Detection Utility to find access points on the network Step 4. Log on to the Web User Interface Step 5. Configure Basic Settings and start the wireless network Wall Mounting the Access Point Step 1. Unpack the access point Unpack the access point and familiarize yourself with its hardware ports, associated cables, and accessories. Access Point Hardware and Ports The Access Point includes: · · · · Ethernet port for connection to the Local Area Network (LAN) via Ethernet network cable Power port and power adapter Reset button Two 5 dB antennas What's inside the Access Point? An access point is a single-purpose device designed to function as a wireless hub. Inside the access point is a Wi-Fi radio system, a microprocessor, and a mini-PC card. The access point boots from FlashROM that contains USRobotics firmware with the configurable, runtime features summarized in "Overview" on page 11. Setting Up and Launching Your Wireless Network - 23 Professional Access Point Administrator Guide As new features and enhancements become available, you can upgrade the firmware to add new functionality and performance improvements to the access points that make up your wireless network. (See "Upgrade" on page 172.) Step 2. Connect the access point to network and power The next step is to set up the network and power connections. 1. Do one of the following to create an Ethernet connection between the access point and your computer: · Or · Connect one end of an Ethernet cable to the LAN port on the access point and the other end of the cable to the Ethernet port on your computer (see Figure 2). Connect one end of an Ethernet cable to the LAN port on the access point and the other end to the same networking device (such as a router) to which your computer is connected (see Figure 1). If you use a hub, the device that you use must permit broadcast signals from the access point to reach all other devices on the network. A standard hub should work fine. Some switches, however, do not allow directed or subnet broadcasts through. You may have to configure the switch to allow directed broadcasts. For initial configuration with a direct Ethernet connection and no DHCP server, be sure to set your computer to a static IP address in the subnet 255.255.255.0. (The default IP address for the access point is 192.168.1.10.) If for initial configuration you use a direct Ethernet (wired) connection between the access point and your computer, you will need to reconfigure the cabling for subsequent startup and deployment of the access point so that the access point is no longer connected directly to your computer but instead is connected to the LAN (either via a networking device as shown in Figure 1 or directly). It is possible to detect access points on the network (using the Detection Utility) with a wireless connection. However, USRobotics strongly advises against using this method. In your environment you may have no way of knowing whether you are connecting to the intended access point, and the initial configuration changes required may cause you to lose connectivity with the access point over a wireless connection. Initial Connection Notes Setting Up and Launching Your Wireless Network - 24 Professional Access Point Administrator Guide Figure 1. Ethernet Connections When Using DHCP for Initial Configuration. Switch Administrator Computer Professional Access Point Figure 2. Ethernet Connections When Using Static IP Address for Initial Configuration. Administrator Computer (This computer must have an IP address on the same subnet as the access point.) Professional Access Point 2. Connect the power adapter to the power port on the back of the access point, and then plug the other end of the power adapter into a power outlet (preferably, via a surge protector). Replace the plug on the power adapter with the UK standard plug that is supplied in your USRobotics package. Apply enough pressure to cause a click and firmly seat the new plug in the adapter. Note to UK Users Note The access point may take up to one minute to boot. To ensure a smooth installation process, USRobotics recommends that you wait one minute before proceeding with "Step 3. Run the Detection Utility to find access points on the network". A Note About Setting Up Connections for a Guest Network The Professional Access Point offers a Guest Interface that allows you to configure an access point for controlled guest access to the network. The same access point can function as a bridge for two different Setting Up and Launching Your Wireless Network - 25 Professional Access Point Administrator Guide wireless networks: a secure Internal LAN and a public Guest network. This can be done virtually, by defining two different Virtual LANs in the Web User Interface. Hardware Connections for a Guest VLAN If you plan to configure a guest network using VLANs, do the following: · · Connect the LAN port on the access point to a VLAN-capable switch. Define VLANs on that switch. Once you have the required physical connections set up, the rest of the configuration process is accomplished through the Web User Interface. For information on configuring Guest interface settings in the Web User Interface, see "Guest Login" on page 121. If you plan to configure the access point for guest access only, without maintaining separate Internal and Guest networks, you do not need a VLAN-capable switch. Step 3. Run the Detection Utility to find access points on the network The Detection Utility is an easy-to-use utility for discovering and identifying new Professional Access Points. The Detection Utility scans the network looking for access points, and displays ID details on those it finds. · · · Keep in mind that the Detection Utility recognizes and configures only USRobotics Professional Access Points. The Detection Utility will not find any other devices. Run the Detection Utility only in the subnet of the internal network (SSID). Do not run the Detection Utility on the guest subnetwork. The Detection Utility will find only those access points that have IP addresses. IP addresses are dynamically assigned to APs if you have a DHCP server running on the network. Keep in mind that if you deploy the access point on a network with no DHCP server, the default static IP address (192.168.1.10) will be used. Use caution with non-DHCP enabled networks: Do not deploy more than one new access point on a non-DHCP network because they will use the same default static IP addresses and conflict with each other. (For more information, see "Understanding Dynamic and Static IP Addressing on the Professional Access Point" on page 20 and "How Does the Access Point Obtain an IP Address at Startup?" on page 20.) Run the Installation CD-ROM on a laptop or computer that is connected to the same network as your access points and use it to step through the discovery process as follows: 1. Insert the Installation CD-ROM into the CD-ROM drive on your computer and select Setup from the menu. If the CD-ROM does not start automatically, navigate to the CD-ROM drive and double-click setup.exe. If you receive a Windows Security Alert from your Windows Firewall, click Unblock to enable the java Notes and Cautions Setting Up and Launching Your Wireless Network - 26 Professional Access Point Administrator Guide program to access your network. If network access is blocked, the Detection Utility cannot find your access point. The Detection Utility Welcome screen is displayed. 2. Click Next to search for access points. Wait for the search to complete, or until the Detection Utility has found your new access points. Setting Up and Launching Your Wireless Network - 27 Professional Access Point Administrator Guide If no access points are found, the Detection Utility indicates this and presents troubleshooting information about your LAN and power connections. Once you have checked hardware power and Ethernet connections, you can click the Detection Utility Back button to search again for access points. 3. Review the list of access points found. The Detection Utility will detect the IP addresses of Professional Access Points. Access points are listed with their locations,MAC addresses, and IP Addresses. If you are installing the first access point on a single-access-point network, only one entry will be displayed on this screen Verify the MAC addresses shown here against the Professional Access Point's LAN MAC address. (You can find the LAN MAC on the label on the bottom of the access point.) This will be especially helpful later in providing or modifying the descriptive Location name for each access point. Note Setting Up and Launching Your Wireless Network - 28 Professional Access Point Administrator Guide Click Next. 4. Go to the Access Point Web User Interface by clicking the link provided on the Detection Utility page. Setting Up and Launching Your Wireless Network - 29 Professional Access Point Administrator Guide The Detection Utility provides a link to the Web User Interface via the IP address of the first Professional Access Point.The Web User Interface is a management tool that you can access via the IP address for any access point in a cluster. (For more information about clustering see "Understanding Clustering" on page 44.) Step 4. Log on to the Web User Interface When you follow the link from the Detection Utility to the Professional Access Point Web User Interface, you are prompted for a user name and password. The defaults for user name and password are as follows. Field Username Password Enter the user name and password and click OK. Viewing Basic Settings for Access Points When you first log in, the Basic Settings page for Professional Access Point administration is displayed. These are global settings for all access points that are members of the cluster and, if automatic configuration is specified, for any new access points that are added later. Note Default Setting admin admin Setting Up and Launching Your Wireless Network - 30 Professional Access Point Administrator Guide Step 5. Configure Basic Settings and start the wireless network Provide a minimal set of configuration information by defining the basic settings for your wireless network. These settings are all available on the Basic Settings page of the Web User Interface, and are categorized into steps 1-4 on the Web page. For a detailed description of these Basic Settings and how to properly configure them, please see "Basic Settings" on page 35. Summarized briefly, the steps are: 1. Review Description of this Access Point. Provide IP addressing information. For more information, see "Review / Describe the Access Point" on page 37. 2. Provide Network Settings. Setting Up and Launching Your Wireless Network - 31 Professional Access Point Administrator Guide Provide a new administrator password for clustered access points. For more information, see "Provide Administrator Password and Wireless Network Name" on page 38. 3. Set Configuration Policy for New Access Points. Choose to configure new access points automatically (as new members of the cluster) or ignore new access points. If you set a configuration policy to configure new access points automatically, new access points added to this network will join the cluster and be configured automatically based on the settings you defined here. Updates to the Network settings on any cluster member will be shared with all other access points in the group. If you chose to ignore new access points, any additional access points will run in standalone mode. In standalone mode, an access point does not share the cluster configuration with other access points; it must be configured manually. You can always update the settings on a standalone access point to have it join the cluster. You can also remove an access point from a cluster thereby switching it to run in standalone mode. For more information, see "Set Configuration Policy for New Access Points" on page 39. 4. Start Wireless Networking Click the Update button to activate the wireless network with these new settings. For more information, see "Update Basic Settings" on page 40. Default Configuration If you follow the steps above and accept all the defaults, the access point will have the default configuration described in "Default Settings for the Professional Access Point" on page 16. Setting Up and Launching Your Wireless Network - 32 Professional Access Point Administrator Guide Wall Mounting the Access Point The access point has keyhole openings for easy wall mounting. To expose the openings, remove the pads from the rear feet. You can then mount the access point to the wall with two anchored screws, as shown in the following illustration: What's Next? Next, make sure the access point is connected to the LAN, bring up your wireless clients, and connect the clients to the network. Once you have tested the basics of your wireless network, you can enable more security and fine-tune the access point by modifying its advanced configuration features. Make Sure the Access Point is Connected to the LAN If you configured the access point and administrator PC by connecting both into a network hub, then your access point is already connected to the LAN. If you configured the access point using a direct wired connection via Ethernet cable from your computer to the access point, do the following: 1. Disconnect the Ethernet cable from the computer. 2. Connect the free end of the cable to the LAN. 3. Connect your computer to the LAN either via Ethernet cable or wireless client card. Setting Up and Launching Your Wireless Network - 33 Professional Access Point Administrator Guide Test LAN Connectivity with Wireless Clients Test the Professional Access Point by trying to detect it and associate with it from a wireless client device. (See "Wireless Client Computers" on page 19 in the Pre-Launch Checklist: Default Settings and Supported Administrator/Client Platforms for information on requirements for these clients.) Secure and Fine-Tune the Access Point Using Advanced Features Once the wireless network is operational and has been tested with a wireless client, you can add more security, add users, configure a Guest interface, and fine-tune the access point performance settings. Setting Up and Launching Your Wireless Network - 34 Professional Access Point Administrator Guide Web User Interface This part of the Professional Access Point Administrator Guide covers usage of the Web User Interface with each section corresponding to a menu section: · · · · "Basic Settings" on page 35 "Cluster" on page 43 "Status" on page 77 "Advanced" on page 89 Basic Settings The basic configuration tasks are described in the following sections: · · · · · · · · Navigating to Basic Settings Review / Describe the Access Point Provide Administrator Password and Wireless Network Name Set Configuration Policy for New Access Points Update Basic Settings Summary of Settings Basic Settings for a Standalone Access Point Your Network at a Glance: Understanding Indicator Icons Basic Settings - 35 Professional Access Point Administrator Guide Navigating to Basic Settings To configure initial settings, click Basic Settings. If you use the Detection Utility to link to the Web User Interface, the Basic Settings page is displayed by default. Fill in the fields on the Basic Settings page as described below. Basic Settings - 36 Professional Access Point Administrator Guide Review / Describe the Access Point Field IP Address Description The IP address assigned to this access point. This field is not editable because the IP address is already assigned (either via DHCP, or statically through the Ethernet (wired) settings as described in "Configuring Guest Interface Ethernet (Wired) Settings" on page 95). The MAC address of the access point. A MAC address is a permanent, unique hardware address for any device that represents an interface to the network. The MAC address is assigned by the manufacturer. You cannot change the MAC address. It is displayed for informational purposes as a unique identifier for an interface. The address shown here is the MAC address for the bridge (br0). This is the address by which the access point is known externally to other networks. To see MAC addresses for Guest and Internal interfaces on the access point, go to the Status menu and view the Interface tab. MAC Address Firmware Version Version information about the firmware currently installed on the access point. As new versions of the Professional Access Point firmware become available, you can upgrade the firmware on your access points to take advantages of new features and enhancements. For instructions on how to upgrade the firmware, see "Upgrade" on page 172. Location Specify a location description for this access point. Basic Settings - 37 Professional Access Point Administrator Guide Provide Administrator Password and Wireless Network Name Field Administrator Password Description Enter a new administrator password. The characters you enter will be displayed as "·" characters to prevent others from seeing your password as you type. The Administrator password must be an alphanumeric string of up to 8 characters. Do not use special characters or spaces. As an immediate first step in securing your wireless network, USRobotics recommends that you change the administrator password from the default. Administrator Password (again) Wireless Network Name (SSID) Re-enter the new password to confirm that you typed it as you intended. Enter a name for the wireless network. This name will apply to all access points on this network. As you add more access points, they will share this SSID. The Service Set Identifier (SSID) must be an alphanumeric string of up to 32 characters Note: If you are connected as a wireless client to the access point that you are administering, resetting the SSID will cause you to lose connectivity to the access point. You will need to reconnect using the new SSID. The Professional Access Point is not designed for multiple, simultaneous configuration changes. If more than one administrator is making changes to the configuration at the same time, all access points in the cluster will stay synchronized, but there is no guarantee that all changes specified by all of the administrators will be applied. Note Basic Settings - 38 Professional Access Point Administrator Guide Set Configuration Policy for New Access Points Field New Access Points Description Choose the policy that you want to put in effect for adding New Access Points to the network. · If you choose are configured automatically, then when a new access point is added to the network it automatically joins the existing cluster. The cluster configuration is copied to the new access point, and no manual configuration is required to deploy it. · If you choose are ignored, new access points will not join the cluster; they will be considered standalone. You need to configure standalone access points manually via the Detection Utility and the Web User Interface residing on the standalone access points. (To get to the Web page for a standalone access point, use its IP address in a URL as follows: http://IPAddressOfAccessPoint.) Note: If you change the policy so that new access points are ignored, then any new access points you add to the network will not join the cluster. Existing clustered access points will not be aware of these standalone APs. Therefore, if you are viewing the Web User Interface via the IP address of a clustered access point, the new standalone APs will not show up in the list of access points on the Cluster menu's Access Points page. The only way to see a standalone access point is to browse to it directly by using its IP address as the URL. If you later change the policy back to the default so that new access points are configured automatically, all subsequent new APs will automatically join the cluster. Standalone APs, however, will stay in standalone mode until you explicitly add them to the cluster. For information on how to add standalone APs to the cluster, see "Adding an Access Point to a Cluster" on page 50. Basic Settings - 39 Professional Access Point Administrator Guide Update Basic Settings When you have reviewed the new configuration, click Update to apply the settings and deploy the access points as a wireless network. Summary of Settings When you update the Basic Settings, a summary of the new settings is shown along with information about next steps. At initial startup, no security is in place on the access point. An important next step is to configure security, as described in "Security" on page 101. Basic Settings - 40 Professional Access Point Administrator Guide At this point if you click Basic Settings again, the summary of settings page is replaced by the standard Basic Settings configuration options. Basic Settings for a Standalone Access Point The Basic Settings page for a standalone access point indicates that the mode is standalone and provides a link for adding the access point to a cluster (group). If you click on any of the Cluster tabs on the Web User Interface pages for an access point in standalone mode, you will be redirected to the Basic Settings page because Cluster settings do not apply to standalone APs. For more information see "Standalone Mode" on page 47 and "Adding an Access Point to a Cluster" on page 50. Your Network at a Glance: Understanding Indicator Icons All the Cluster settings tabs on the Web User Interface include icons that show current network activity. Icon Description When one or more APs on your network are available for service, the Wireless Network Available icon is shown. The clustering icon indicates whether the current access point is Clustered or Not Clustered (that is, standalone). For information about clustering, see "Understanding Clustering" on page 44. The number of access points available for service on this network is indicated by the Access Points icon. For information about managing access points, see "Access Points" on page 43. The number of user accounts created and enabled on this network is indicated by the User Accounts icon. For information about setting up user accounts on the access point for use with the built-in authentication server, see "User Management" on page 53. See also "IEEE 802.1x" on page 114 and "WPA/WPA2 Enterprise (RADIUS)" on page 117, which are the two security modes that offer the option of using the built-in authentication server. Basic Settings - 41 Professional Access Point Administrator Guide Basic Settings - 42 Professional Access Point Administrator Guide Cluster This section covers the Web User Interface Cluster items: · · · · · "Access Points" on page 43 "User Management" on page 53 "Sessions" on page 59 "Channel Management" on page 63 "Wireless Neighborhood" on page 71 Access Points The Professional Access Point shows current basic configuration settings for clustered access points (location, IP address, MAC address, status, and availability) and provides a way of navigating to the full configuration for specific APs if they are cluster members. Standalone access points or those which are not members of this cluster do not show up in this listing. To configure standalone access points, you must discover (via the Detection Utility) or know the IP address of the access point and by using its IP address in a URL (http://IPAddressOfAccessPoint). The Professional Access Point is not designed for multiple, simultaneous configuration changes. If you have a network that includes multiple access points, and more than one administrator is logged on to the Web User Interface and making changes to the configuration, all access points in the cluster will stay synchronized but there is no guarantee that all configuration changes specified by multiple users will be applied. Note The following topics are covered: · · Navigating to Access Points Management Understanding Clustering · · · · · · · What is a Cluster? How Many APs Can a Cluster Support? What Kinds of APs Can Cluster? Which Settings are Shared as Part of the Cluster Configuration and Which Are Not? Cluster Mode Standalone Mode Cluster Formation Access Points - 43 Professional Access Point Administrator Guide · · · · · · · · Cluster Size and Membership Intra-Cluster Security Auto-Synchronization of Cluster Configuration Understanding Access Point Settings Modifying the Location Description Removing an Access Point from the Cluster Adding an Access Point to a Cluster Navigating to the Web User Interface for a Specific Access Point Navigating to Access Points Management To view or edit information on access points in a cluster, click the Cluster menu's Access Points tab. Understanding Clustering A key feature of the Professional Access Point is the ability to form a dynamic, configuration-aware group (called a cluster) with other Professional Access Points in a network in the same subnet. Access points can Access Points - 44 Professional Access Point Administrator Guide participate in a self-organizing cluster which makes it easier for you to deploy, administer, and secure your wireless network. The cluster provides a single point of administration and lets you view the deployment of access points as a single wireless network rather than a series of separate wireless devices. What is a Cluster? A cluster is a group of access points which are coordinated as a single group via Professional Access Point administration. You cannot create multiple clusters on a single wireless network (SSID). Only one cluster per wireless network is supported. How Many APs Can a Cluster Support? Up to eight access points are supported in a cluster at any one time. If a new access point is added to a network with a cluster that is already at full capacity, the new access point is added in standalone mode. Note that when the cluster is full, extra APs are added in stand-alone mode regardless of the configuration policy in effect for new access points. For related information, see "Cluster Mode" on page 47, "Standalone Mode" on page 47, and "Set Configuration Policy for New Access Points" on page 39. What Kinds of APs Can Cluster? A single Professional Access Point can form a cluster with itself (a cluster of one) and with other Professional Access Points of the same model. In order to be members of the same cluster, access points must be on the same LAN. Having a mix of APs on the network does not adversely affect Professional Access Point clustering in any way. However, access points of other types will not join the cluster. Those APs must be administered with their own associated administration tools. Which Settings are Shared as Part of the Cluster Configuration and Which Are Not? Most configuration settings defined via the Professional Access Point Web User Interface will be propagated to cluster members as a part of the cluster configuration. Settings Shared in the Cluster Configuration The cluster configuration includes: · · · · · · · Network name (SSID) Administrator Password Configuration policy User accounts and authentication Wireless interface settings Guest Welcome screen settings Network Time Protocol (NTP) settings Access Points - 45 Professional Access Point Administrator Guide · Radio settings The following radio settings are synchronized across clusters: · · Mode Channel When Channel Planning is enabled, the radio Channel is not synchronized across the cluster. See "Stopping/Starting Automatic Channel Assignment" on page 66. Note · · · Fragmentation Threshold RTS Threshold Rate Sets The following radio settings are not synchronized across clusters: · · · · · · · Beacon Interval DTIM Period Maximum Stations Transmit Power Security settings QoS queue parameters MAC address filtering Settings Not Shared by the Cluster The few exceptions (settings not shared among clustered access points) are the following; most of these, by their nature, must be unique: · · · · · · · IP addresses MAC addresses Location descriptions Load Balancing settings WDS bridges Ethernet (Wired) Settings, including enabling or disabling Guest VLAN access Guest VLAN interface configuration Settings that are not shared must be configured individually in the Web User Interface for each access Access Points - 46 Professional Access Point Administrator Guide point. To access the Web User Interface for an access point that is a member of the current cluster, click the Cluster menu's Access Points tab in the Web User Interface of the current access point, then click the member access point's IP Address link. Cluster Mode When an access point is a cluster member, it is considered to be in cluster mode. You define whether you want new access points to join the cluster or not via the configuration policy you set in the Basic Settings. (See "Set Configuration Policy for New Access Points" on page 39.) You can reset an access point in cluster mode to standalone mode. (See "Removing an Access Point from the Cluster" on page 49.) When the cluster is full (eight APs is the limit), extra APs are added in stand-alone mode regardless of the configuration policy in effect for new access points. Note Note Standalone Mode The Professional Access Point can be configured in standalone mode. In standalone mode, an access point is not a member of the cluster and does not share the cluster configuration, but rather requires manual configuration that is not shared with other access points. (See "Set Configuration Policy for New Access Points" on page 39 and "Removing an Access Point from the Cluster" on page 49.) Standalone access points are not listed on the Cluster menu's Access Points page in the Web User Interfaces of APs that are cluster members. You need to know the IP address for a standalone access point in order to configure and manage it directly. (See "Navigating to an Access Point by Using its IP Address in a URL" on page 50.) The Basic Settings tab for a standalone access point indicates that the mode is standalone and provides a link for adding the access point to a cluster (group). If you click any of the Cluster tabs in the Web User Interface for a standalone access point, you will be redirected to the Basic Settings page because Cluster settings do not apply to standalone APs. When the cluster is full, new APs are added in standalone mode regardless of the configuration policy in effect for new access points. A cluster supports a maximum of eight access points. You can re-enable cluster mode on a standalone access point. (See "Adding an Access Point to a Cluster" on page 50.) Cluster Formation A cluster is formed when the first Professional Access Point is configured. (See "Setting Up and Launching Your Wireless Network" on page 23 and "Basic Settings" on page 35.) If a cluster configuration policy in place, when a new access point is deployed, it attempts to rendezvous with an existing cluster. If it is unable to locate a cluster, then it establishes a new cluster on its own. If it locates a cluster but is rejected because the cluster is full or because the clustering policy is to ignore new access points, then the access point deploys in standalone mode. Access Points - 47 Professional Access Point Administrator Guide Cluster Size and Membership The upper limit of a cluster is eight access points. The Cluster Web User Interface pages provide a visual indicator of the number of access points in the current cluster and warn when the cluster has reached capacity. Intra-Cluster Security To ensure that the security of the cluster as a whole is equivalent to the security of a single access point, communication of certain data between access points in a cluster is accomplished through Secure Sockets Layer (typically referred to as SSL) with private key encryption. Both the cluster configuration file and the user database are transmitted among access points using SSL. Auto-Synchronization of Cluster Configuration If you are making changes to the access point configuration that require a relatively large amount of processing (such as adding several new users), you may encounter a synchronization progress bar after clicking Update on any of the Web User Interface pages. The progress bar indicates that the system is busy performing an auto-synchronization of the updated configuration across all APs in the cluster. The Web User Interface pages are not editable during the auto-synch. Note that auto-synchronization always occurs during configuration updates that affect the cluster, but the processing time is usually negligible. The auto-synchronization progress bar is displayed only for longerthan-usual wait times. Understanding Access Point Settings The Access Points tab provides information about all access points in the cluster. From this tab, you can view location descriptions, IP addresses, enable (activate) or disable (deactivate) clustered access points, and remove access points from the cluster. You can also modify the location description for an access point. The IP address links provide a way to navigate to configuration settings and data on an access point. Standalone access points (those which are not members of the cluster) are not shown on this page. Access Points - 48 Professional Access Point Administrator Guide The following table describes the access point settings and information display in detail. Field Location MAC Address Description Description of the access point's physical location. Media Access Control (MAC) address of the access point. A MAC address is a permanent, unique hardware address for any device that represents an interface to the network. The MAC address is assigned by the manufacturer. You cannot change the MAC address. It is provided here for informational purposes as a unique identifier for the access point. The address shown here is the MAC address for the bridge (br0). This is the address by which the access point is known externally to other networks. To see MAC addresses for Guest and Internal interfaces on the access point, see the Status menu's Interfaces page. IP Address Specifies the IP address for the access point. Each IP address is a link to the Web User Interface for that access point. You can use the links to navigate to the Web User Interface for a specific access point. This is useful for viewing data on a specific access point to make sure a cluster member is picking up cluster configuration changes, to configure advanced settings on a particular access point, or to switch a standalone access point to cluster mode. Modifying the Location Description To make modifications to the location description: 1. Navigate to the Basic Settings page. 2. Update the Location description in section 1 under Review Description of this Access Point. 3. Click Update button to apply the changes. Removing an Access Point from the Cluster To remove an access point from the cluster, do the following. 1. Select the check box next to the access point. 2. Click Remove from Cluster. The change will be reflected under Status for that access point; the access point will now show as standalone (instead of cluster). In some situations, it is possible for the cluster to lose synchronization. If, after removing an access point from the cluster, the access point list still reflects the deleted access point or shows an incomplete display, refer to the information on Cluster Recovery in "Troubleshooting". Note Access Points - 49 Professional Access Point Administrator Guide Adding an Access Point to a Cluster To add a standalone access point into a cluster, do the following. 1. Go to the Web User Interface for the standalone access point. (See "Navigating to an Access Point by Using its IP Address in a URL" on page 50.) The Web User Interface pages for the standalone access point are displayed. 2. Click the Basic Settings tab in the Administration pages for the standalone access point. The Basic Settings tab for a standalone access point indicates that the mode is standalone and provides a link for adding the access point to a cluster (group). If you click any of the Cluster tabs in the Web User Interface for an access point in standalone mode, you will be redirected to the Basic Settings page because Cluster settings do not apply to standalone APs. Note 3. Click the Access Point tab. A Join Cluster button appears. 4. Click the Join Cluster button. The access point is now a cluster member. Its Status (Mode) on the Cluster menu's Access Points page now indicates cluster instead of standalone. Navigating to the Web User Interface for a Specific Access Point In general, the Professional Access Point is designed for central management of clustered access points. All access points in a cluster reflect the same configuration. In this case, it does not matter which access point you actually connect to for administration. There may be situations, however, when you want to view or manage information on a particular access point. For example, you might want to check status information such as client associations or events for an access point. You can navigate to the Web User Interface for an individual access point by clicking the access point's IP address link on the Access Points tab. All clustered access points are shown on the Cluster menu's Access Points page. To navigate to clustered access points, you can simply click on the IP address for a specific cluster member shown in the list. Navigating to an Access Point by Using its IP Address in a URL You can also link to the Web User Interface of a specific access point by entering the IP address for that access point as a URL directly into a Web browser address bar in the following form: http://IPAddressOfAccessPoint where IPAddressOfAccessPoint is the address of the particular access point that you want to monitor or configure. Access Points - 50