Resumen del contenido incluido en la página 1
Wireless LAN Security
Smart Wireless
Access Point 802.11b (95-10)
User Guide
100-408-01 Copyright © 2002 Madge Networks. All rights reserved. 20 Jul 2002
Resumen del contenido incluido en la página 2
Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiated radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio commun
Resumen del contenido incluido en la página 3
R&TTE Compliance Statement This equipment complies with all the requirements of DIRECTIVE 1999/5/CE OF THE EUROPEAN PARLIAMENT AND THE COUNCIL OF 9 March 1999 on radio equipment and telecommunication terminal equipment and the mutual recognition of their conformity (R&TTE). The R&TTE Directive repeals and replaces in the directive 98/13/EEC (Telecommunications Terminal Equipment and Satellite Earth Station Equipment) as of April 8,2000. Safety This equipment is designed with the utmost ca
Resumen del contenido incluido en la página 4
Contents 1 Introduction............................................................................................................................................ 1 1.1 Overview........................................................................................................................................ 1 1.2 Features.......................................................................................................................................... 1 2 First-Time Installation
Resumen del contenido incluido en la página 5
1 Introduction 1.1 Overview The Madge advanced Smart Wireless Access Point (advanced AP) enables IEEE 802.11b client computers to access the resources on an Ethernet network. Because it supports IEEE 802.1x and RADIUS (Remote Authentication Dial-In User Service) for user-based authentication and dynamic encryption key distribution, it is suitable for enterprises that need strong data security and WISPs (Wireless Internet Service Providers) that need accounting and billing support. In Sect
Resumen del contenido incluido en la página 6
Hardware Watchdog Timer. If the AP firmware enters an invalid state, the hardware watchdog timer will detect this situation and restart the advanced AP. Accordingly, the advanced AP can recover from certain error situations. 2 First-Time Installation and Configuration 2.1 Powering up the AP To power the AP with the supplied power adapter: 1. Plug the power adapter to an AC socket. 2. Plug the connector of the power adapter to the power jack of the AP. NOTE: This product is intended to
Resumen del contenido incluido en la página 7
2.3 Preparing for Configuration For the user (or administrator) to configure an advanced AP, a managing computer with a Web browser is needed. For first-time configuration of an advanced AP, an Ethernet network interface card (NIC) should have been installed in the managing computer. For maintenance-configuration of a deployed advanced AP, either a wireless computer or a wired computer can be employed as the managing computer. NOTE: If you are using the browser, Opera, to configure an advan
Resumen del contenido incluido en la página 8
2.4 Configuring the Advanced AP After the IP addressing issue is resolved, launch a Web browser on the managing computer. Then, go to “http://192.168.0.1” to access the Web-based Network Manager start page. TIP: For maintenance configuration of an advanced AP, the advanced AP can be reached by its host name using a Web browser. For example, if the advanced AP is named “advanced AP”, you can use the URL “http://advanced AP” to access the Web-based Network Manager of the advanced AP. 2.4.1 E
Resumen del contenido incluido en la página 9
Fig. 4. The Start page. 2.4.2 Step 1: Configure TCP/IP Settings Fig. 5. TCP/IP settings. Go to the TCP/IP, Addressing section to configure IP address settings. The IP address can be manually set or automatically assigned by a DHCP server on the LAN. If you are manually setting the IP Address, Subnet Mask, and Default Gateway settings, set them appropriately, so that they comply with your LAN environment. In addition, you can specify the Host Name and Domain (DNS suffix) of the advanced
Resumen del contenido incluido en la página 10
2.4.3 Step 2: Configure IEEE 802.11 Settings Fig. 6. IEEE 802.11b communication settings. Go to the IEEE 802.11, Communication section to configure IEEE 802.11b-related communication settings, including Regulatory Domain, Channel Number, and Network Name (SSID). The number of available RF channels depends on local regulations; therefore you have to choose an appropriate regulatory domain to comply with local regulations. The SSID of a wireless client computer and the SSID of the advanced
Resumen del contenido incluido en la página 11
On the start page, you can review all the settings you have made. Changes are highlighted in red. If they are OK, click Restart to restart the advanced AP for the new settings to take effect. NOTE: About 7 seconds are needed for the advanced AP to complete its restart process. 2.5 Deploying the Advanced AP After the settings have been configured, deploy the advanced AP to the field application environment. Connect Ethernet client computers to the Ethernet switch ports of the advanced AP. 2
Resumen del contenido incluido en la página 12
1. Launch the configuration/monitoring utility provided by the vendor of the installed WLAN NIC. 2. Check if the client computer is associated to an access point, and the access point is the advanced AP. If the check fails, see Appendix B-1, “Wireless Settings Problems” for troubleshooting. 2.7.2 Checking if the TCP/IP-Related Settings Work To check if a client computer can access the Internet: 1. Open a Windows Command Prompt window on the client computer. 2. Type “ping advap”, where adva
Resumen del contenido incluido en la página 13
3 Using the Web-Based Network Manager This section explains each management page of the Web-based Network Manager. 3.1 Overview Fig. 8. The Start page. The left side of the start page contains a menu for the user to carry out commands. Here is a brief description of the hyperlinks in the menu: Home. For going back to the start page. General. Global operations. Password. For gaining right to change the settings of the advanced AP. Firmware Upgrade. For upgrading the firmware of the
Resumen del contenido incluido en la página 14
Advanced. Advanced settings of the advanced AP. Management. UPnP and SNMP settings. Fig. 9. Save, Save & Restart, and Cancel. At the bottom of each page, there are up to three buttons—Save, Save & Restart, and Cancel. Clicking Save stores the settings changes to the memory of the advanced AP and brings the user back to the start page. Clicking Save& Restart stores the settings changes to the memory of the advanced AP and restarts the advanced AP immediately for the settings changes to
Resumen del contenido incluido en la página 15
3.2 General Operations 3.2.1 Changing Password Fig. 11. Password. On this page, the user could change the password for the right to modify the configuration of the advanced AP. The new password must be typed twice for confirmation. 3.2.2 Upgrading Firmware Fig. 12. Firmware Upgrade. The advanced AP can be triggered to download updated firmware from a specified TFTP server. On this page, the user specifies the IP address of the intended TFTP server, and then triggers the advanced AP t
Resumen del contenido incluido en la página 16
Fig. 13. TFTP Server. TIP: It's more convenient to use the Firmware Upgrade Wizard of Wireless Network Manager to upgrade the firmware of an advanced AP. See section 4. NOTE: After the dialog box of the TFTP server program appears, be sure to specify the working folder within which the downloaded firmware files reside. NOTE: The LAN IP address of the advanced AP and the IP address of the TFTP server must be in the same IP subnet for TFTP to work. NOTE: Due to the nature of wireless med
Resumen del contenido incluido en la página 17
The IP address of the AP can be manually set or automatically assigned by a DHCP server on the LAN. If you are manually setting the IP Address, Subnet Mask, and Default Gateway settings, set them appropriately, so that they comply with your LAN environment. In addition, you can specify the Host Name and Domain (DNS suffix) of the AP. 3.4 Configuring IEEE 802.11b-Related Settings 3.4.1 Communication IEEE 802.11b-related communication settings include Regulatory Domain, Channel Number, and
Resumen del contenido incluido en la página 18
802.1x EAP-MD5. The IEEE 802.1x functionality is enabled and the username/password-based EAP-MD5 authentication is used. No data encryption. 802.1x EAP-MD5 + 64-bit WEP. The IEEE 802.1x functionality is enabled and the username/password-based EAP-MD5 authentication is used. Data encryption is achieved by 64-bit WEP. 802.1x EAP-MD5 + 128-bit WEP. The IEEE 802.1x functionality is enabled and the username/password-based EAP-MD5 authentication is used. Data encryption is achieved by 128-bit
Resumen del contenido incluido en la página 19
The IEEE 802.1x functionality of the advanced AP is controlled by the security mode (see Section 3.4.2). The advanced AP supports two authentication mechanisms—EAP-MD5 (Message Digest version 5) and EAP-TLS (Transport Layer Security). If EAP-MD5 is used, the user has to give his or her user name and password for authentication. If EAP-TLS is used, the wireless client computer automatically gives the user’s digital certificate that is stored in the computer hard disk or a smart card for authe
Resumen del contenido incluido en la página 20
3.5 Configuring Advanced Settings 3.5.1 Management 3.5.1.1 SNMP Fig. 19. SNMP settings. The AP can be managed by SNMP (Simple Network Management Protocol), and the SNMP management functionality can be disabled. The user can specify the name (used as a password) of the read-only and read-write community. In addition, up to 5 SNMP trap targets can be set in the SNMP Trap table. 3.5.1.2 UPnP Fig. 20. UPnP settings. UPnP (Universal Plug and Play) enables a Windows XP user to automatical
