AP-500 / AP-1000

1. AP-500 / AP-1000

2. Module contents • Product description • Installation • Physical indicators • Configuration and Management using AP Manager • Loading new AP software using AP manager • Alternative configuration methods • Telnet Proxy • Using the Serial Interface • Problem solving

3. AP-1000 What is it? • Dual slot wireless Access Point and Ethernet MAC Bridge • Migration from earlier Wireless LANs • Double capacity • H/W: • 486-DX2 133 MHz based processor (4 MB RAM, 256 KB Flash ROM) • 10BaseT / 100Base-T (UTP) Ethernet • 2 slots for ORiNOCO PC Cards • 9-pin RS232 connector for optional configuration from local console • Can be powered via Active Ethernet, using splitter (or using Power Supply) • S/W: • Dedicated MAC-layer transparent bridge i.e. network protocol independent • Manageability • Dedicated Windows-based AP manager • CLI, via Telnet Proxy

4. AP-500 What is it? • Entry-level wireless Access Point and Ethernet MAC bridge • Connects wireless stations to Ethernet • Handles roaming stations • H/W: • 486-DX2 66 MHz based processor (4 MB memory, 256 KB Flash ROM) • 10BaseT (UTP) Ethernet • ORiNOCO PC Card inside (WorldCard) • Powered via Active Ethernet (or using wall plug Power Supply) • S/W: • Dedicated MAC-layer transparent bridge i.e. network protocol independent • Manageability • Dedicated Windows-based AP manager • CLI, via Telnet Proxy

5. AP-500 / AP-1000Comparison

6. AP-500/1000 Image file Con- figuration Data Kernel AP Firmware AP-500/ 1000 Flash ROM Boot loader ORiNOCO PC Card ORiNOCO PC Card RAM AP Firmware AP Firmware Buffers, Filter & bridge tables Con- figuration Data Kernel AP Firmware Port 1 Port 2 Port 3 RS232 Port Ethernet Interface AP-500 / AP-1000Functional diagram • Image file (referred to as bin file) contains: • Actual operational software (OS and Bridge kernel) • User configuration data (I.e. the operational parameters) • AP firmware (used by the PC card) • On image up-load, the complete file is transferred to the AP using the boot loader • The AP leaves factory with boot loader and initial bin file inside • Configuration data is maintained in Flash (still present after power down) • AP500 has one PC card only and does not have the RS232 Port

7. Kernel DHCP client Radius client IAPP SNMP agent Operating System UDP IP Proxy ARP ICMP 802.3d Bridging SW ORiNOCO PC Card driver 802.3 Ethernet driver Other device drivers AP-500 / AP-1000Functional diagram - Kernel software • Kernel portion of the image contains the heart of the AP • It includes: • The operating system that controls the operation and manages the resources • The devices drivers such as the ORiNOCO PC Card driver and the the Ethernet driver • The actual bridging software, that implements the filtering and forwarding of frames • The IP stack to allow the devices to be managed from other network locations • The UDP protocol to support the IAPP and SNMP functions • The Radius Client to allow Radius MAC based authentication • The IAPP protocol to support roaming • The SNMP agent to allow configuration and management • DHCP Client to dynamically obtain IP addresses

8. AP-1000 Mounting plate to mount the AP-1000 unit to a wall Mounting plate is ready to hold standard Power Supply or optional Active Ethernet Splitter (splits UTP input in Ethernet data, and DC Power) Power Supply AP-1000 Processor Module Cover ‘Getting Started’ user guide CD-ROM with software and documentation Accessories for mounting the unit AC Power Cord AP-500 Processor unit Wall plug power supply Table mount stand Wall mounting plate CD-ROM with software and documentation ‘Getting Started” user Guide AP-500 / AP-1000Kit Contents

9. 1 2 3 4 5 Installation of the AP-1000How to set it up? 1. Clip power supply unit (or power splitter when using Active Ethernet) to the mounting plate 2. Slide the processor module onto the mounting plate 3. Insert one or two ORiNOCO PC cards 4. Optionally attach the range extending antenna and connect the Ethernet cable 5. Attach the plastic cover plate and click it into position

10. 1 3 2 10 4 7 8 9 5 6 Installation of the AP-1000Processor module 1. Serial connector (9 Pin Male RS232) 2. 10/100BaseT Ethernet port (RJ45) 3. Power connector 4. Reset switch • To reboot and restart the AP-2000 5. Reload switch • Used during emergency reset procedure (re-setting the parameters to factory default values) 6. Power LED 7. Ethernet traffic LED 8. Traffic LED (ORiNOCO PC-Card A) 9. Traffic LED (ORiNOCO PC Card B) 10. Serial Number label

11. Installation of the AP-500 Wall mounting or table top

12. Installation of the AP-500 Opening the AP-500 (to attach antenna) • The device may need to be opened to attach an external antenna To open: • Remove the table stand (if used) • Depress simultaneously the two latches on the short side of the device • When unlatched lift the cover • To attach the external antenna: • remove the protective round cap from the PC card exposing the antenna connector (a) • attach the antenna cable and route it through the slot (b)

13. Power Ethernet Wireless A Wireless B Installation of the AP-1000 Physical Indicators (LEDs on the AP-1000) • Run time, the LEDs show (from left to right): • Power Green - Power enabled • Ethernet Flicker Green - Ethernet LAN activity • Wireless A Flicker Green - Wireless LAN activity on slot A • Wireless B Flicker Green - Wireless LAN activity on slot B • start-up diagnostics takes 40 sec. • LEDs will show • Amber • Red • Green

14. Installation of the AP-500 Physical Indicators (LEDs on the AP-500) • Three LEDs are available to signal the status of the device: Power (when green the unit is operational) Ethernet Interface (flickering green when traffic passes the the Ethernet interface) Wireless Interface (flickering green when traffic passes the the Wireless interface)

15. Configuration and ManagementOut of box Defaults (AP-1000) • AP-1000 Identifiers: • IP Address: 153.69.254.254 • Sub-net mask: 255.255.0.0 • Read password: public • Read/Write password: public • Wireless Interfaces • RF Channel: Default setting of ORiNOCO PC Card • Network name: WaveLAN Network • Encryption: Disabled • RTS/CTS (Medium Reservation): Disabled • Multicast-rate: Auto select 1-2 Mbps

16. Configuration and ManagementOut of box Defaults (AP-500) • AP-500 Identifiers: • IP Address: 153.69.254.254 • Sub-net mask: 255.255.0.0 • Read password: public • Read/Write password: public • Wireless Interface • RF Channel: Channel 10 (2.457 GHz) • Network name: WaveLAN Network • Encryption: Disabled • RTS/CTS (Medium Reservation): Disabled • Multicast-rate: Auto select 1-2 Mbps

17. C(0103) A(0101) B(0102) AP-1000 AP-1000 AP-500 A(0101) B(0102) C(0103) Configuration and ManagementConfiguration setup via wired or wireless To access an AP one needs: • “physical” connection between the station and the AP or between the station and an AP that is on the same Ethernet • Physical being wired or wireless • “logical” connection (station and the AP on the same sub-net) • The station’s IP address may have to be set to the sub-net of the AP,or • The AP’s IP address is set to the sub-net of the station • Use DHCP client to obtain an IP address Configuration and management of the AP devices can be done by running ORiNOCO AP Manager on a station connected to the wired backbone, or on a mobile station.

18. Configuration and ManagementInstalling the AP Manager software • Using EZInstall: • Insert CD-ROM and let it auto start or execute the “Start.exe” program in the root of the CD-ROM (image) • Follow screen instructions: • Install Product • Install Base Station • Install AP500/AP1000 • Install Software • Follow screen instructions • Manual installation: • Browse through CD-ROM or its disk image (if downloaded to harddisk) • Locate directory “\software\AP\AP_mgr” • Execute “Setup.exe” • Follow screen instructions

19. Configuration and ManagementORiNOCO AP Manager • edit the configuration parameters • monitor AP-1000, AP-500 and older WavePOINT units • monitoring of: • remote statistics • interface statistics • system information • advanced information ORiNOCO info, IP info, bridge table etc..) • upgrade AP-1000, AP-500 and older WP-II firmware • monitor the link to associated stations

20. Configuration and ManagementExploring the segment • Starting the ORiNOCO AP Manager executes a “Scan” and shows all AP-1000s, AP-500s and WPs that can be accessed • Selecting “Refresh” from the “Access Point” menu re-executes the scan and refreshes the list NOTE: ‘Scan’ does NOT work over routers!

21. Configuration and ManagementInitial IP assignment Initial IP address assignment (only when AP has its factory default IP address): • AP-1000, AP-500 or WP-II is identified by an exclamation icon in front of its (default) IP address and the value “new” in the status column. • Selecting “Edit” or “Monitor” for that device will prompt the user to assign an IP address first.

22. Configuration and ManagementLoading the configuration file • AP configuration parameters are embedded in the software of the AP • To change them the configuration data needs to be retrieved from the AP. • To effectuate them the changed data is saved back into the AP • Alternatively the parameters can be loaded from disk (stored previously as *.cnf file)

23. Configuration and ManagementConfiguring the AP-1000 or AP-500 • Select an AP from the scan list (this moves its IP address to the “Connect to” box) • Press “Edit” or select “Edit Access Point” from the Access Point menu on the menu bar • Enter the “read/write” password when prompted (default = public)

24. Configuration and ManagementChanging the parameters • When proper connection is established, a 7-tab window displays to allow configuration: • Wireless (Radio) parameter settings • IP address settings for the AP • Settings for to allow SNMP access • Bridging parameters • Access control parameters • IP address settings to assess link integrity • Ethernet settings

25. Configuration and ManagementWireless parameters -Advanced parameters • Advanced parameters: • Frequency channel • Interference Robustness • DTIM period • Medium reservation (RTS/CTS) • Distance between APs • Multicast rate • Possible selections are impacted by the selected value for “Distance between APs” (when set to “large”, 5.5 Mbps and 11 Mbps cannot be selected)

26. Configuration and ManagementWireless parameters -Security settings • AP Mode security settings • Closed system option • Enabling encryption (will make key entry field available) • Four fields for encryption keys (accepting ASCII and Hex values) • For hex values prefix the string with 0x • Checkbox to deny non-encrypted data • Key index drop-list to identify the active key

27. Configuration and ManagementBridge Parameters • Protocol filtering • MAC Filtering • Spanning tree • Storm thresholds • Advanced Bridging

28. Configuration and ManagementBridge Parameters - Protocol filtering Protocol filtering • To reduce unnecessary traffic in the cell, protocol filtering can be applied • Filters can be defined to stop traffic of the selected protocol(s), or allow traffic of the selected protocol(s) only.

29. Configuration and ManagementBridge Parameters - Protocol filtering Protocol filtering • Selecting profiles to bridge or deny, is done by clicking Edit and selecting one or more of the protocols listed

30. Configuration and ManagementBridge Parameters - Protocol filtering Protocol filtering • Protocols not listed on the selection screen can be bridged or denied by manually adding the protocol number associated with it

31. Configuration and ManagementBridge Parameters - MAC Filtering MAC Address filtering • MAC address pair filtering can be applied to reduce unnecessary traffic in the cell • Traffic between identified address pairs can be denied or bridged. • Adding address pairs (typically used to filter out multi-cast traffic)

32. Configuration and ManagementBridge Parameters - MAC Filtering MAC Address filtering • Adding address pairs (typically used to filter out multi-cast traffic) is done by clicking ADD and enter the MAC addresses. • MAC address pairs consist of • One address on the wired side of the Bridge • One address on the wireless side of the bridge

33. Configuration and ManagementBridge Parameters - Spanning Tree Spanning Tree • Spanning Tree protocols can be applied to avoid loops in network topology • Multiple paths between source and destination • Parallel links between source and destination could be required to provide backup capability for a failing link • Spanning Tree allows this kind of “loop” by providing a preferred route: • Providing different priority and cost for parallel links

34. Configuration and ManagementBridge Parameters - Storm Thresholds Storm Thresholds • To prevent overload as result of Broad-cast and Multi-cast traffic thresholds can be set • When threshold is reached Broadcast or Multi-cast traffic will not be forwarded

35. Configuration and ManagementBridge Parameters - Proxy ARP Proxy ARP • ARP (Address Resolution Protocol) Broadcast messages are frequently issued to obtain the MAC address for a given IP address • Stations that recognize the IP address as theirs, will reply • Proxy ARP function in the AP: • reduces the overhead of this broadcast traffic • AP builds a table (in cache) of known IP addresses and their associated MAC address • AP detects ARP request and filters it; does not pass it to the other Interface(s). • AP consults the IP-MAC address table and finds the MAC address for the IP address in the ARP request • AP returns a ARP response using as Ethernet source address the MAC address of the station with the matching IP address, obtained from the table ARP Request ARP Response Proxy ARP disabled ARP Request ARP Response Proxy ARP enabled

36. Configuration and ManagementBridge Parameters - Advanced Bridging Advanced Bridging • Proxy ARP can be enabled using the Advanced Bridging tab of the AP manager • Additional IP/ARP filtering possible to allow ARP requests to pass that meet the filter address criteria as set by: • IP/ARP Filtering Address • IP/ARP Subnet Mask • Broadcasts associated with different protocols can be stopped (filtered) by the AP • Filtering possible from Wireless to Ethernet and/or vice versa • Pre-set values are programmed and can be selected using “Permit Conservative”

37. Configuration and ManagementIP set-up Access Point IP setup • To change the IP parameters of the AP • IP Address of the AP • IP Submask • IP Address of default router • Alternatively IP address can be obtained from DHCP server

38. Configuration and ManagementSNMP set-up SNMP setup • Parameters to allow the AP to be managed according to SNMP protocols • Read Password, used during access of the AP by ORiNOCO AP Manager required to be entered in order to read the config and tally information • Read/Write Password, to be used to authorize changes to the config file • IP Address of the Central Management Host (for sending traps) • Password used by the Network Management program to access the AP (MIB queries)

39. Configuration and ManagementAccess Control Access Control setup • To program the AP to only accept stations with known MAC addresses (in the Access Control table) • Entries are to be added manually once, and can be saved to disk • Saved file can be imported in other APs to avoid manual re-entry of data.

40. Configuration and ManagementRADIUS Access Control RADIUS based Access Control • Enable the AP to execute the RADIUS protocol: • Identify the IP address of the primary and secondary RADIUS servers • Select the Authentication Port number (1645 or 1812), being the UDP port used by the RADIUS server • Authorization Lifetime: the interval between “automatic re-authorization” • Authorization Password, used as • user password with the MAC address of the Station • Shared secret to allow the AP to determine validity of the RADIUS server

41. Configuration and ManagementLink Integrity Link Integrity setup • Link Integrity allows the AP to detect a loss of connection on its wired side and to disassociate its wireless stations when this condition is detected (forcing them to re-associate to another AP that still may have wired connection operational) • When enabled enter IP address(es) of test partners that can be PING-ed • Enter poll interval and retry count

42. Configuration and ManagementEthernet Interface Ethernet setup • Selection of setting on the wireless interface • Fixed speed setting (10 Mbps or 100 Mbps) • Fixed duplex setting (half- or full-) • Autosensing setting for speed and duplex • Not all AP devices can accommodate all combinations: • AP-500 does not support 100 Mbps

43. Configuration and ManagementMonitoring the AP • Select an AP from the scan list (this moves its IP address to the “Connect to” box) • Press “Monitor” or select “Monitor Access Point” from the Access Point menu on the menu bar • Enter the “read” password when prompted (default = public)

44. Configuration and ManagementMonitoring functions System Information • Version level of the software; part of the description • Version number in front of the Serial Number shows is the version of the software load module (bin file) inside the AP (e.g. V3.83) • Version number after the Serial Number shows Bootloader version (e.g V3.70) • Up-time since last power up • Name as it is displayed in the scan list • Location (to find the device) • Contact person name

45. Configuration and ManagementMonitoring functions Bridge learn table • Dynamically built table to hold MAC addresses of all stations whose traffic passed this AP • Interface indicates the port at which the traffic came in • Interface 1 - Ethernet • Interface 2 - Wireless cell driven by ORiNOCO adapter in left hand slot • Interface 3 - Wireless cell driven by ORiNOCO adapter in right hand slot (AP-1000 only)

46. Configuration and ManagementMonitoring functions IP ARP Table • lists the IP-to-MAC address mapping that the AP has made based on a resolved ARP request. • If Proxy ARP is enabled it shows the IP addresses for stations that the AP will issue ARP responses for

47. Configuration and ManagementMonitoring functions Remote statistics • several tally statistics maintained for each of the active interfaces (Ethernet, slot A, slot B) • interface to monitor is selected from the drop list • Table can be sorted by clicking the column header • Totals = count since last start of the AP • Rate = count in the polling interval (set in the “options” on the “tools” menu)

48. Configuration and ManagementMonitoring functions Interface statistics • Other tally statistics maintained for each of the active interfaces (Ethernet, slot A, slot B) • interface to monitor is selected from the drop list • Table can be sorted by clicking the column header • Totals = count since last start of the AP • Rate = count in the polling interval (set in the “options” on the “tools” menu)

49. Configuration and ManagementMonitoring functions SNMP • Various SNMP related tallies and counters • Table can be sorted by clicking the column header • Totals = count since last start of the AP • Rate = count in the polling interval (set in the “options” on the “tools” menu)

50. Configuration and ManagementMonitoring functions ICMP • Various ICMP related tallies and counters • Table can be sorted by clicking the column header • Totals = count since last start of the AP • Rate = count in the polling interval (set in the “options” on the “tools” menu)