Summary of the content on the page No. 1
WS 2000 Wireless Switch
System Reference
WS 2000 Wireless Switch Version 1.0
72E-67701-01
Rev A
March 2004
www.symbol.com
Summary of the content on the page No. 2
Copyright Copyright © 2004 by Symbol Technologies, Inc. All rights reserved. No part of this publication may be modified or adapted in any way, for any purposes without permission in writing from Symbol Technologies, Inc. (Symbol). The material in this manual is subject to change without notice. Symbol reserves the right to make changes to any product to improve reliability, function, or design. No license is granted, either expressly or by implication, estoppels, or otherwise under any Sy
Summary of the content on the page No. 3
WS 2000 Wireless Switch System Reference Guide Table of Contents Chapter 1. Overview............................................................................................ 6 WS 2000 Wireless Switch System Reference Guide....................................................6 About this Document .............................................................................................6 Document Conventions ..............................................................................
Summary of the content on the page No. 4
WS 2000 Wireless Switch System Reference Guide Mobile Unit Access Control List (ACL) ................................................................37 Step 7: Configure Access Ports...................................................................................37 Step 8: Configure Subnet Access ...............................................................................39 The Access Overview Table................................................................................40 The A
Summary of the content on the page No. 5
WS 2000 Wireless Switch System Reference Guide Chapter 7. A Field Office Example.................................................................. 111 Background................................................................................................................111 The Plan ....................................................................................................................112 Configuring the System Settings ..........................................................
Summary of the content on the page No. 6
WS 2000 Wireless Switch System Reference Guide Chapter 1. Overview WS 2000 Wireless Switch System Reference Guide This guide is intended to support administrators responsible for understanding, configuring and maintaining the Wireless Switch. This document provides information for the system administrator to use during the initial setup and configuration of the system. It also serves as a reference guide for the administrator to use while updating or maintaining the system. About this
Summary of the content on the page No. 7
System Overview GUI Screen text Indicates monitor screen dialog / output from the graphical user interface accessed from any web browser on the network. System Overview The WS 2000 Wireless Switch provides a low-cost, feature-rich wireless switch for sites with one to six Access Ports. The WS 2000 Wireless Switch works at the center of a network’s infrastructure to seamlessly and securely combine wireless LANs (WLANs) and wired networks. The switch sits on the network. Wireless Access Po
Summary of the content on the page No. 8
Hardware Overview Hardware Overview The WS 2000 Wireless Switch provides a fully integrated solution for managing every aspect of connecting wireless LANs (WLANs) to a wired network. This wireless switch can connect directly to a cable or DSL modem, and can also connect to other wide area networks through a Layer 2/3 device (such as a switch or router). It includes the following features: • One WAN (RJ-45) port for connection to a DSL modem, cable modem, or any other Layer 2/3 network
Summary of the content on the page No. 9
Software Overview Power Specifications • Maximum Power Consumption: 90-256 VAC, 47-63 Hz, 3A • Operating Voltage: 48 VDC • Operating Current: 1A • Peak Current: 1.6A Environmental Specifications • Operating Temperature: 0ºC to 40ºC • Storage Temperature: -40ºC to 70ºC • Operating Humidity: 10% to 85% Non-condensing • Storage Humidity: 10% to 85% Non-condensing • Operating Altitude: 2.4 km • Storage Altitude: 4.6 km Software Overview The WS 2000 Wireless Switch software provides a f
Summary of the content on the page No. 10
Software Overview Gateway Services Gateway services provide interconnectivity between the Cell Controller and the wired network, and include the following: • System management through a web-based Graphical User Interface (GUI) and SNMP • 802.1x RADIUS client • Security, including Secure Sockets Layer (SSL) and Firewall • Network Address Translation (NAT), DHCP services, and Layer 3 Routing Copyright © 2004 Symbol Technologies, Inc. All Rights Reserved 10 WS 2000 Wireless Switch: 1.0 Da
Summary of the content on the page No. 11
802.11a Support Chapter 2. Features 802.11a Support 802.11 is a family of specifications for wireless local area networks (WLANs) developed by a working group of the Institute of Electrical and Electronics Engineers (IEEE). The four current specifications include: 802.11, 802.11a, 802.11b, and 802.11g. All four use the Ethernet protocol and carrier sense multiple access with collision avoidance (CSMA/CA) for path sharing, which allows a number of network users to pass packets on the netwo
Summary of the content on the page No. 12
Access Ports The 802.11b standard, also called Wi-Fi (Wireless Fidelity), is backward compatible with 802.11. 802.11b uses complimentary code keying (CCK) modulation to provide higher data speeds (up to 11 Mbps) with less multipath-propagation interference. 802.11b operates at the 2.4 to 2.5 GHz range. The WS 2000 Wireless Switch fully supports the 802.11b specification for association with Symbol’s suite of compatible Access Ports and mobile units (MUs). Specifically, the WS 2000 Wirel
Summary of the content on the page No. 13
Gateway Services Gateway Services Network Address Translation (NAT) NAT provides the translation of an Internet Protocol (IP) address within one network to a different, known IP address within another network. One network is designated the private network, while the other is the public. NAT provides a layer of security by translating local, private network addresses to one or more global, public IP addresses through a corporate firewall. The translation process provides an opportunity to
Summary of the content on the page No. 14
Layer 3 Routing DHCP Client and Server The WS 2000 Wireless Switch can act as a DHCP client on the WAN and each of its three subnets. It also act as an independent DHCP server on each of the three subnets. Layer 3 Routing Overview The WS 2000 Wireless Switch provides Layer 3 routing support to the Network Address Translation (NAT) and Firewall modules. Layer 3 refers to a network layer that selects routes and quality of service based on knowing the address of the neighboring nodes in the
Summary of the content on the page No. 15
WEP 64 (40-bit key) WEP 64 (40-bit key) Wired Equivalency Privacy (WEP) uses a key, or string of case-sensitive characters, to encrypt and decrypt data packets transmitted between a mobile unit (MU) and the WS 2000 Wireless Switch. The administrator configures mobile units (MUs) and the WS 2000 Wireless Switch to use the same key. WEP encrypts the wireless transmissions, but still allows communication among compatible wireless LAN clients and MUs from third-party manufacturers that are 8
Summary of the content on the page No. 16
802.1x with Shared Key Authentication The pair-wise master keys (PMK) generated by this negotiation are used to generate keys used in MAC encryption. In the absence of a RADIUS server, 802.1x is used in a pre- shared key configuration. Administrators configure the master key statically through the configuration or the key is obtained through negotiation from an external RADIUS server in compliance with 802.1x. The WS 2000 Wireless Switch uses the Remote Authentication Dial-In User Service
Summary of the content on the page No. 17
KeyGuard-MCM Support When a Kerberos-enabled mobile unit (MU) authenticates with WS 2000 Wireless through an Access Port, the switch initially performs Kerberos authentication, even though the Kerberos server exists as a separate entity on the wired LAN. On initial request from a Kerberos-enabled MU, the WS 2000 Wireless Switch acts as a proxy to the external KDC. The switch passes initial Kerberos authentication information to the external KDC until the MU authenticates in the manner desc
Summary of the content on the page No. 18
Getting Started Overview Chapter 3. Getting Started Getting Started Overview Installing the Switch To install the WS 2000 Wireless Switch hardware, follow the directions in the WS 2000 Wireless Switch Quick Installation Guide found in the box with the switch and on the CD- ROM that is distributed with the switch. These instructions describe how to: • Select a site (desk, wall, or rack) for the switch • Install the switch using the appropriate accessories for the selected location • Conne
Summary of the content on the page No. 19
Getting Started Overview 4. Log in using “admin” as the username and “symbol” as the password. 5. If the login is successful, the following prompt will be displayed. Enter a new admin password in both fields, and click the Update Password Now button. 6. Once the admin password has been updated, the System Settings screen is displayed. Copyright © 2004 Symbol Technologies, Inc. All Rights Reserved 19 WS 2000 Wireless Switch: 1.0 Date of last Revision: March 2004
Summary of the content on the page No. 20
Getting Started Overview 7. Enter a System Name for the wireless switch. The specified name appears in the lower-left corner of the configuration screens, beneath the navigation tree. This name can be a useful reminder if multiple Symbol wireless switches are installed. 8. Enter a text description of the location of the switch in the System Location field. This text is used as a reminder to the network administrator and is also used to set the location variable if the switch is administe