SparkLan WX-1520
Contents
1. Dynamic StatieIr WAN settings D Adress Subnet mask Gateway PPPpE WS erneame d Password psc 7 5erwce name D 4 Local IP address I Autamancalls detarmnine IF A rp a Remote P address 6 automatically datsrrmnina TP P ip _ I T Dynamic Static IP LAN settings Subnet mask Gateway Canal TT Figure 4 5 Network setup page 4 9 1 WAN Connection You only need to configure this part of the page to use the Access Point as a gateway 1 Check the WAN Connection check box The settings depend on information you get from your Internet Service Provider ISP If your ISP instructs you to Use DHCP select the Dynamic radio button If your ISP gives you IP settings select the Static IP radio button and 30 3 AP Conhgurabor Nrosoft Internet Explorer B x enter the IP address subnet mask and gateway address the ISP gave you If your ISP gives you PPPoE information select the PPPoE radio button and enter the user name password and Service name the ISP gave you If your ISP didn t give you a Service name leave that edit box empty 2 Check the NAPT check box This switches Network Address Port Translation on NAPT is also known as Internet Connection Sharing 3 The Share Ethernet option can be used for sharing the single ethernet port for both WAN and LAN in a situation like this Figure 4 6 Using the Share Ethernet option When the Share Ethernet option is O2. An Access Point may appear twice in the list you 1 see two items with the same MAC address but different IP addresses In this case select the one with the green icon The columns in the list contain the properties of all detected wireless devices Table 3 2 lists these properties Table 3 2 Description of the device data Column Name The name of the Access Point This cannot be changed The icon that precedes the name can be gray or green 16 A gray icon means that the Access Point s IP address needs to be changed it is not in the same subnet as your computer For more information on subnets A green icon means the Access Point s IP address does not need to be changed MAC address Every Ethernet device has a unique address that 1s permanently linked to that device It cannot be changed On most wireless devices the MAC address is printed on its type label IP address In order to access a TCP IP network a device must have an IP address in addition to its MAC address SSID The SSID is also known as Service Set ID This 1s the name of your wireless network Location The location of the Access Point See section 5 4 Identifying the Access Point on how to edit this field Contact The name of the contact person for the Access Point See section 5 4 Identifying the Access Point on how to edit this field 3 4 4 Change IP settings In the Change IP Settings dialog you can s
3. Using a DHCP server 25 4 6 Creating a gateway You can use an Access Point to set up a gateway to the internet e7 t Intgrnet Connectson Figure 4 4 Creating a wireless network with a gateway Install the components of the network 1 Prepare one computer install wireless network card and software 2 Install the Access Point 3 Connect the Access Point to your internet connection for example a cable modem or ADSL modem via the Ethernet port Configure the Access Point from the computer you just installed In this example we will use the DHCP server built into the Access Point 4 Use KickStart see chapter 3 Connecting to the Access Point to connect to the Access Point In your Web browser the Web Interface opens Go to the DHCP server page select the Enable DHCP radio button to start the DHCP server Click Apply Go to the Network Setup page and edit these LAN Settings Set the LAN address to Static 10 Make sure the IP address is in the range of the DHCP server 11 In the Gateway Address edit box enter the LAN IP address of the Access Point 12 Check the WAN Connection check box 13 The WAN settings the Connection Type radio buttons and the O On WN settings to their right depend on information you get from your 26 4 7 Internet Service Provider ISP If your ISP instructs you to use DHCP select the Dynamic radio button If your ISP gives you IP settings se
4. 1 4 1 1 4 2 Connecting an Access Point directly to a computer You can connect an Access Point directly to your computer Laptop Computer Figure 1 2 Connecting an Access Point directly to a computer You need to use a crossover cable to connect the Access Point directly to your computer Extending a wired network with one or more Access Points You can extend existing wired networks with wireless capability by adding Access Points to them Figure 1 3 Adding an Access Point to a wired network 1 4 3 Creating a wireless network You can use an Access Point to set up a wireless network Figure 1 4 Wireless network 1 4 4 Creating a gateway You can use an Access Point to set up a gateway to the internet Internet Connection Figure 1 5 Wireless network with internet gateway 2 Installing the Access Point 2 1 Introduction This chapter describes the physical installation of an Access Point Table 2 1 Overview of this chapter Where to install an Access Point 2 25 2301 2 5 How to install an Access Point 2 7 Explanation of the LEDs 2 8 How to unlock reset the Access Point How to connect the AccessPoint Z2 Access Point environment When you install an Access Point you must consider the following items connection to a power outlet connection to the network environment of the Access Point heat humidity range of the Access Point 2 3 2 4 Physical installation of
5. Enter the WEP Settings dialog appears To change the settings 1 Select the WEP mode 64 bit or 128 bit This 1s the length of the key you ll need to enter For WEP 64 bit the key is 10 characters long For WEP 128 bit the key is 26 characters long The longer the key the harder it is to crack the encryption 2 Enter a password WEP 64 the key must contain exactly 10 characters For example 02f4e62 lac WEP 128 the key must contain exactly 26 characters For example 02f4e621ac29183ac6b4f9a3el Only the following hexadecimal characters are allowed in the key 0to9 atof 3 Click OK Security against unauthorized configuration To prevent unauthorized people from making changes to the Access Point s configuration you can install a password the Write Community String WCS When you set a WCS you can only make changes to the Access Point if you supply the correct WCS You can also lock the Access Point when the Access Point 1s locked no one can change its configuration You need to press the Reset button on the Access Point itself to unlock it This increases security only people who can physically access the Access Point will be able to change its configuration To configure this go to the Unauthorized configuration page To set the WCS 1 Click Change Password A window opens 2 Enter the WCS twice 3 Click OK The change is applied 4 The next time you want to access the configuration pages a
6. 33 5 3 5 4 Oo eeekaees See section 5 6 4 Firewall WAN Connection See section 4 9 Network Setup in general DHCP Server See section 4 7 Using a DHCPserver Event reporting logging The Access Point keeps a log of important events Go to the Event reporting page to access it The event log contains the following information Report level shows how important the event or how critical the error is ID an internal number for the event Description description for the event Count the number of times this event has occurred Occurrence when this event has occurred in months days a hours minutes since the Access Point was started Click Reset eventlog to remove all entries Identifying the Access Point You have a number of options for identifying the Access Point This is especially useful when you have multiple Access Points in your network To access the identity data of the Access Point go to the Identity page You can use the first two fields on this page to identify the Access Point for yourself These fields do not influence the behavior of the Access Point Location This field can be used to indicate the physical location of the device for example 2nd floor room 3 Contact This field can be used to indicate the person responsible for the device this can be an E mail address for example someone company com When you have entered or changed your data click Appl
7. slightly but will break backward compatibility with some older products With WDS you can link Access Points via a wireless link instead of using Ethernet cables See section 4 8 2 Connecting Access Points via wireless links The Access Point gives you a number of options to provide security for your network Security against unauthorized network access this allows you to control who can access the network Security against eavesdropping 35 5 6 1 5 6 1 1 this is encryption to prevent people from reading the traffic on the network Security against unauthorized configuration this 1s to prevent people from changing the settings of the Access Point Firewall this allows you to block unwanted traffic from the network Security against unauthorized network access This allows you to control access to the network There are two ways to do this MAC Address based This will only allow the clients you specify to access the network Port based In order for a client to access the network it must be authenticated by a RADIUS server on your network To configure this open the Unauthorized network access page To select a security method select its radio button Select None for no authorization anyone will have access to your network MAC Address based authorization With this option you can create a list of clients an Access Control List that have access to the network AII o
8. In the Set Gateway of Wireless Device dialog you can set the Gateway address of the Access Point A gateway is used to connect your network to the internet Setting a gateway address is only necessary if you use another router in your network If you use the gateway that is built into the Access Point you do not need to set this address Click Next to continue to the Changing IP settings dialog Changing IP settings KickStart will install the proper IP settings of the device If it cannot install the proper IP settings a warning is given With the Back button you can return to the Change IP settings dialog see section 3 4 4 where you can select another method for installing the IP settings 18 If the IP settings were set successfully the Next button is activated Click Next to continue to the Ready to start the Web Interface dialog 3 4 8 Ready to start the Web Interface If you click Finish in this screen KickStart will launch a Web browser and open the Web Interface for the Access Point you have chosen You can now configure the Access Point Chapters 4 Basic Configuration and 5 Advanced configuration tell you more about this When you use KickStart to find an Access Point that already has correct IP settings KickStart will go directly from the Select wireless ethernet device dialog to this page 3 5 Launching the Web Interface directly When you know the IP address of an Access Point you can manu
9. in which the traffic flows through the Access Point the source and destination IP address the source and destination port number 40 for TCP traffic flags These are settings within the packet that define the packet s purpose To create a rule 1 Click Add to create a rule 2 Select the Chain type 3 n the Enter Rule Number edit box enter a number This will be used to identify the rule the Id column in the list of rules and the order in which rules are applied 4 Click OK to continue to the next page 5 Check the Rule Enabled check box 6 Select the Target from the drop down menu this tells the firewall what to do with the traffic that meets the conditions in this rule Your choices are Accept traffic will be allowed Drop traffic will be stopped with no response to the sender Reject traffic will be stopped and a response will be returned to the sender Continue the traffic packet will be counted and testing will continue with the next rule Use this if you only want to count packets You can now enter the conditions for the rule 7 In the Source address mask area enter the IP address for the source You can enter an address range by giving the network lowest address and the net mask Select the All radio button to get the range of all IP addresses 8 In the Destination address mask area enter the IP address for the destination You can enter an address range by giving the
10. network lowest address and the net mask Select the All radio button to get the range of all IP addresses 9 In the Protocol area select the type of traffic you want to be affected by the rule If you select TCP or UDP you can click Advanced to select a specific port number or port number range To set a port range enter the first and last port number in the range into the edit boxes If you selected the TCP protocol you can also select specific flags 41 5 6 4 3 5 6 4 4 Test the firewall Once you have completed configuration you need to test the settings before using them with the firewall it is possible to block all traffic on the network making it unusable To test the settings click Test Settings The firewall will be activated for 15 seconds If you can reach the Access Point you ll see a new Web page that allows you to activate the firewall If the settings you made are so restrictive that you can t reach the Access Point you won t see this page Wait for the firewall to switch off and change the settings so you can reach the Access Point This test only makes sure you can reach the Access Point The test result doesn t say anything about other traffic types Example limit management access to the Access Point In this example the firewall is used to limit management access 1 e access to the web interface for changing the configuration To do this you need two rules one to limit access to
11. 38 5 6 4 dialog asking for a user name and password appears Leave the User name field empty and in the Password field enter the WCS you just chose If you forget the WCS or if you want to have access without supplying the password you need to unlock the Access Point see below To lock the Access Point 1 Click Lock Access Point A warning appears Are you sure you want to lock the Access Point 2 Click OK to lock the Access Point No more configuration changes to the Access Point are allowed To unlock the Access Point so that the configuration changes are allowed again 1 Insert the end of a paperclip into the reset hole 2 Press the button until the network LED the red one on the right goes from blinking to being on constantly This takes about one second 3 You can now use the Web Interface to manage the Access Point again This also removes the WCS password Firewall A firewall allows you to prevent unwanted network traffic from going through the Access Point between LAN and WAN This is useful to protect your network if you connect it to the internet The firewall tests each traffic packet the characteristics of a packet are compared to rules you create A rule consists of a set of conditions that describe what the packet must look like and a target a description of what to do with these packets If a packet meets the conditions of the rule it is processed according to the rule s t
12. Area Network Access Points can be connected to a wired Ethernet network This allows wireless clients to communicate with computers on the wired network This type of network is called a LAN Local Area Network An Access Point can also act as a gateway You can connect the Access Point to your internet connection for example a cable modem or ADSL modem and use the wireless LAN to connect your computers to the internet The internet or any other network outside the gateway 1s called a WAN Wide Area Network Adding Access Points to your network environment Where to place and how to connect an Access Point depends entirely on your specific network environment The following sections give some guidelines on how to add Access Points to your environment An Access Point can be used to connect to a single computer see section 1 4 1 extend an existing wired network see section 1 4 2 create a wireless network see section 1 4 3 create a gateway to the internet see section 1 4 4 These are not the only ways you can use an Access Point You can adapt these basic scenarios for use in your network environment The scenarios listed below are described in more detail in chapter 4 Basic configuration The Access Point also has a number of advanced functions These are not required for the Access Point to function but are optional These functions are described in chapter 5 Advanced configuration
13. FF only traffic that has a destination outside your subnet i e traffic destined for the internet will be forwarded from the wireless LAN to the Ethernet port Use this setting 1f the Ethernet port 1s only connected to your internet connection e g ADSL modem When the Share Ethernet option is ON all traffic from the wireless LAN will be forwarded to the Ethernet port and vice versa This is useful if the Ethernet port is connected via a hub to both your internet connection and to clients on your LAN If you use this option both LAN and WAN traffic will pass through the Ethernet port In order to prevent your LAN traffic from leaking onto the internet you must use PPPoE for the WAN connection this depends on your ISP If you ISP doesn t offer PPPoE you can only use the Share Ethernet option if you use static IP addressing on your LAN In this configuration your 3l 4 9 2 LAN traffic will leak onto the internet If you want to use DHCP and the WAN connection doesn t use PPPoE you can t use the Access Point as a gateway you need a separate gateway LAN settings If your network has a DHCP server other than this Access Point or uses Auto IP select the Dynamic radio button If your network uses static IP addressing select the Static IP radio button and enter the IP subnet and gateway addresses for the Access Point If you want to use the DHCP server in this Access Point you need to set the LAN settings
14. N Point is connected to the electricity net ACT The ACT LED blinks when the Access Figure 2 5 shows the LEDs ACT Power Link Figure 2 5 Access Point LEDs The reset button The unlock reset button 1s found beneath the power and Ethernet ports It is a small hole that gives access to a pushbutton switch You can use this button in two ways to unlock or to reset the Access Point Unlocking makes the Access Point accessible for configuration changes Resetting removes all settings you made Unlocking the Access Point Doing this unlocks the Access Point 1 e the Lock Access Point setting and removes the WCS Write Community String password These settings are described in section 5 6 3 Security against unauthorized configuration 1 Insert the end of a paperclip into the hole 2 Press the button until the Radio LED the one on the right goes from blinking to being on constantly This takes about one second 12 2 8 2 3 Release the reset button when the LED is on constantly You can now use the Web Interface to manage the Access Point again Resetting to the default factory settings If you press the reset button for more than 5 seconds the Access Point will be reset to the default factory settings All changes you made to the configuration will be lost 1 Insert one end of a paperclip into the hole for the reset button and keep it pressed for more than five seconds After about one second
15. Points via wireless links When adding Access Points you must consider the placement of the Access Points Ideally you ll want to be able to access the network in the entire area e g your office building An Access Point s range depends on its environment an Access Point that is surrounded by reinforced concrete walls has less range than one that hangs in an open space You may need to experiment with Access Point placement to optimize coverage Connecting Access Points via Ethernet links You can link Access Points via a wired Ethernet network just like you would link computers via such a network This solution is suitable for larger networks Once you have added the first Access Point do the following for each 28 4 8 2 4 9 Access Point you want to add 1 Install and connect the Access Point to your network Configure the Access Point from a computer in your network 2 Use KickStart see chapter 3 Connecting to the Access Point to connect to the Access Point you just added In your Web browser the Web Interface opens 3 Go to the Wireless settings page 4 The Access Point must use a radio channel that does not interfere with other Access Points in range Radio channels 1 6 and 11 do not interfere with each other so these are the best to choose here Set the radio channel 5 If you want clients to be able to move their connection from one Access Point to another roaming the SSID must be the same o
16. WX 1520 11 Mbps WLAN Access Point User Manual 1 1 1 2 1 3 1 4 1 4 1 1 4 2 1 4 3 1 4 4 2 1 2 2 259 2 4 229 2 6 2 6 1 2 6 2 2 2 8 2 8 1 2 8 2 3 1 9 2 3 3 3 4 3 4 3 4 2 3 4 3 3 4 4 3 4 5 3 4 6 3 4 7 3 4 8 Contents Getme SCAr eG e v v So ee Utd aca CHR auge 4 IrtrOdHU e MO s 34st oe RAS PR NEIN RU P hee EN SRS E ERU RA 4 Contents of this THanual 2 293 dede Eco I Ru OS IC S 4 Wireless networking basics and advantages 00 00005 4 Adding Access Points to your network environment 5 Connecting an Access Point directly to a computer 6 Extending a wired network with one or more Access Points 6 Creating a wireless network 20 0 cece eee eee nee 7 Create d 9306 Way ia dee ree Bint ate a aed ra pt Bebes dag es 7 Installing the Access Point s 8 IMCOCUCHON 212 ioe dose ater cb ate obe S dS Oech dU E ea Ses 8 Access POINUENVITONMIME DD s voe ee bs yd a Se tO ae 8 Physical installation of the Access Point 2000 9 Desktop 10stallatiOli 4 2 25 vui e m Re eo Ee POR E Me m x do 9 Wall mount installation llle 10 Connecting the Access Point udi Ded dS S dS v he dts 11 POWer ada plet sta sc a x VUE OE Ie cu EU duke ped e Eh Pd 11 Ethernet DOE o ace x e ere ae PR ac D cer Ee ed CR eni oa 11 EEISS sache esu Gk Sak scele ut duco EE arie dor arab obra 12 Je TESC DOUNON uuo d eae bcd at EUN Are BUE eae oa 12 Unlo
17. Web server Destination port 80 To delete a rule 1 Click Delete A list of rules appears 2 Check the check box for the rule s you want to delete 3 Click OK 45 5 8 Upgrading the Access Point firmware You can upgrade the firmware in the Access Point New firmware versions may become available to add features to the Access Point or to solve problems The following procedure assumes the new firmware is already present on your computer To upgrade the firmware 1 Make sure the firmware version you are about to install 1s newer than the version currently running on the Access Point on the Identity page check the firmware version 2 Click the firmware upgrader link at the top of the browser window A new window opens Click Browse to browse to the new firmware file 4 Click Upgrade The upgrade process begins This may take a few minutes Do not switch off the power from the Access Point while the upgrade is in progress 46 6 Troubleshooting KickStart does not find my Access Point Possible cause the Access Point is not powered up Solution 1 Make sure the power LED is on 2 Make sure the Access Point is connected to its power adapter and the adapter is plugged in 3 Make sure the power is switched on at the plug KickStart does not find my Access Point I am attempting to connect from a wireless client Possible cause the client cannot make connection Solution a wireless client is not y
18. ally open the Web Interface in a web browser just as you would open any other Web page 1 Open a web browser 2 Insert the IP address of the Access Point on the address bar as follows a sample IP address is used in the example http 192 168 0 1 Tip you can bookmark the web address for the Web Interface for easier access 3 6 Contents of the Web Interface With the Web Interface application you can configure the Access Point The settings are divided into pages These pages are listed in the frame on the left side of the browser window C ae i ESL De DA me eee Duk ie La se Toc ZacC ccond Ghee eae diee r ml 0 PHDIDEGEUUPTTESTTENT r Settings page le men FE rae Warme nig Links to all settings hoe oe Sr pages E bmi Figure 3 3 The Web interface 19 Basic configuration is described in chapter 4 Basic configuration Advanced settings are described in chapter 5 Advanced Configuration 20 4 Basic configuration 4 1 4 2 Introduction An Access Point can be used in a variety of ways This chapter guides you through common scenarios and gives general information on the basic configuration of the Access Point The Access Point can be used to connect to a single computer section 4 3 extend an existing wired network section 4 4 create a wireless network section 4 5 create a gateway to the internet section 4 6 At the end of the chapt
19. arget If it does not meet the conditions the rule is not applied The packet will be tested against the next rule When the packet doesn t satisfy any rule default policies will be applied The default policies allow you to accept or block the packet To configure the firewall go to the Firewall page This is the basic configuration procedure 39 5 6 4 1 5 6 4 2 1 Set the Default policies 2 Create Rules 3 Test the firewall 4 Set the firewall to Enabled The following sections first describe configuration in general and then give an example of a common firewall configuration Default policies The default policies allow you to accept or block all traffic for each traffic chain direction The directions are Input all traffic with the Access Point as destination Output all traffic with the Access Point as origin Forward all traffic between LAN and WAN that passes through the Access Point to another destination Input O Output forward Figure 5 1 Traffic directions For each of these directions you can select one of these settings Accept sends the traffic through Discard blocks the traffic 5 Once you have set the default policies click Apply Rules A rule consists of a set of conditions that describe what the packet must look like and a target a description of what to do with these packets The conditions you can specify are the traffic chain the direction
20. cking the Access Point llle 12 Resetting to the default factory settings llle 13 Connecting to the Access Point 14 IrtrOdUG H1 usui dopap Anse dea dud ted ytd Daan bw Deed aa ae wae oe 14 When to configure the Access Point 0 00000 e ee eee 14 Starting the Web Interface o ecse zac Sat ga eth ues mk 15 sime Kick barbs 1225 205 9 208 dpt eae oa eee eee SUA we eS Ree 15 Installing Kick Eabb E S Pe E ha tok 15 Launchi us KICKS Uso ucc qase Sto dedo e dee ere des n ooh SSB 15 Select wireless ethernet device 2l 16 Change IP Seltltig S usd ibd ouod se ede Sh aed ER C Pt p e T Bee 17 Static IP SCUINGS o o ea it Ue uice do De b eb daw tang b oe eut 17 Set Gateway address oo cear RS Ee SSE ERG hee gem ded 18 Ohansine IP settings css reete wae E HOT eL aoe CO ea abe 18 Ready to start the Web Interface 0 0 0 0 0 eee ees 18 3 5 3 6 4 1 4 2 4 3 4 4 4 5 4 6 4 7 4 8 4 8 1 4 8 2 4 9 4 9 1 4 9 2 5 1 5 2 5 3 5 4 5 5 5 6 5 6 1 5 6 2 5 6 3 5 6 4 5 7 5 8 Launching the Web Interface directly 0 000005 19 Contents of the Web Interfate a i adc 4a eee ea Oe ee ae ee ES 19 Basic configuration cs e wise ise bs SEE ea o eG 21 IN HOGU CU OM PPS 21 IP GCGtCSSING 23 E EeRERAWDe DRESSER E At REESE eee eee 21 Connecting an Access Point directly to a computer 27 Extending a wired network with one or more Access Points 24 Creati
21. elect to use either dynamic or static IP settings Select Dynamic IP settings when you install the Access Point in a network with an external DHCP server or Auto IP Select Static IP settings when you want to configure the IP settings manually You also need to do this if you want to use the DHCP server that is built into the Access Point Click Next to continue to the next screen If you selected the option Use dynamic IP settings you will continue to the Changing IP settings dialog directly see section 17 3 4 5 3 4 6 3 4 7 If you selected the option Use static IP settings you will continue to the Set IP address of Wireless Device dialog see section 3 4 5 Static IP settings If you selected the option Use static IP setting in the Change IP Settings dialog you will enter the Set IP Address of Wireless Device dialog KickStart Set IP Address of Wireless BU x Complete the IP address ar pu are unsure whatta da you can click the Suggest button IF address 155 108 deb Sinet mask eS 255 255 22d inest Mole Settings othis computer IF address 195 109 225 174 Sunet mask 255 255 255 224 wo ee Figure 3 2 KickStart IP settings Here you can either manually insert an IP address and Subnet mask or you can click Suggest to let the system find suitable IP settings Click Next to continue to the Set Gateway address dialog Set Gateway address
22. er you 1 find more general information about Using a DHCP server section 4 7 Adding multiple Access Points to a network section 4 8 The scenarios don t cover every possible use of the Access Point With the information in Network Setup in general section 4 9 you can configure the Access Point for situations that haven t been covered by the scenarios In all scenarios there is one important piece of information you need the IP addressing method for the network The IP addressing section tells you more about that IP addressing Each computer and Access Point in your network has an address so other computers can talk to it This address 1s called an IP address There are three ways for assigning IP addresses to your computers and Access Points 1 Auto IP 2 DHCP 3 static IP addresses For now these are the most important differences 1 With Auto IP the computers automatically select an IP address This is convenient because you don t have to do anything But it can take a while for the computers to find an unused address 2 With DHCP a server gives each computer its address You will have to set up the DHCP server one is built into the Access Point but 21 4 3 once set up it takes care of all addressing issues 3 If you use static addresses you ll have to give each computer an address manually This is more work than the other methods Only use static addressing if you really need it In ge
23. et connected to the Access Point Refer to the manual of the wireless client on how to connect Possible cause The Access Point is not in range of the WLAN card in your computer Solution 1 Check the connection indication of your client 2 Move closer to the Access Point KickStart does not find my Access Point I am attempting to connect from a wired client Possible cause you are using an incorrect cable Solution f the Access Point is connected to a hub a normal not a crossover cable must be used If the Access Point is connected directly to a computer a crossover cable must be used After configuring the Access Point with an IP address I cannot access the web interface Possible cause your laptop may have an incorrect IP address Solution if you have enabled the DHCP server on the Access Point reboot your laptop to give it a correct IP address 47 Browser starts but window stays empty Possible cause your browser uses a proxy server to connect to the Web Interface Solution reconfigure the proxy settings in your browser To do this in Internet Explorer 1 Go to Tools gt Internet Options gt Connections gt LAN Settings 2 Enable Bypass Proxy Server for local address After configuring the Access Point with an IP address one of the computers on the network comes up with a message that says There is an IP address conflict with another system on the network Solution chan
24. ge the IP address to one that 1s not currently being used Other people are using my Access Point to connect to my network and read sensitive information Solution To prevent unauthorized access to your WLAN you can use an Access Control List see section 5 6 1 1 MAC Address based authorization In this list enter the MAC address of the network cards that are allowed access to your WLAN To prevent unauthorized changes to your configuration you should change the Write Community String password see section 5 6 3 Security against unauthorized configuration This password will be requested when a client accesses the web interface It is also possible to enable Port Based security if this is supported in your network environment see 5 6 1 2 Port based authorization I want to use another make of network card in combination with my Access Point and use WEP 64 bit security I m not able to connect to the Access Point or the network Solution WEP uses hexadecimal passwords which are long and hard to remember To make it easier to use WEP on some products you can use human readable passwords with all alphanumerical characters that are five characters long This 48 feature is not standardized so it may not work on your network If this is the case make sure you enter the same hexadecimal WEP password both on the client and the Access Point 49
25. heads into the small half of the keyholes 10 2 6 2 6 1 2 6 2 Connecting the Access Point Your Access Point is now ready to be connected to a power outlet and to your wired network You can find the power input and the Ethernet port on the left hand side of the Access Point Power Ethernet Port Reset Figure 2 4 Connecting the Access Point Power adapter The Access Point package contains a power adapter To connect it 1 Plug it into the Access Point 2 Plug the power cord into the adapter 3 Plug the power cord into a power outlet 4 Check the power LED the middle of the three LEDs If it is ON you are connected properly Ethernet port The Ethernet port an RJ45 socket can be found next to the power connector on the Access Point For a wired connection attach the Ethernet cable to the Access Point and connect the cable on the other end to either a hub in the network or a computer If you want to connect to an Access Point via a wired connection it must be connected correctly if the Access Point is connected to a hub or switch a Normal not a crossover cable must be used if the Access Point is connected directly to a computer a crossover l1 2 7 2 8 2 8 1 cable must be used LEDs The Access Point has three LEDs Table 2 2 LEDs Link The link LED 1s on when the Access Point 1s connected to a wired network Power The power LED is on when the Access IN
26. lect the Static IP radio button and enter the IP address subnet mask and gateway address the ISP gave you If your ISP gives you PPPoE information select the PPPoE radio button and enter the user name password and Service name the ISP gave you If your ISP didn t give you a Service name leave that edit box empty 14 Check the NAPT check box This switches Network Address Port Translation on NAPT is also known as Internet Connection Sharing 15 Make sure the Share Ethernet check box 1s unchecked 16 Click Apply 17 On your computer open the network settings on a Windows 98 computer open the Network control panel 18 Find the TCP IP properties on a Windows 98 computer select TCP IP then click Properties 19 Make sure the IP address settings are set to Obtain an IP address automatically 20 Prepare all other computers install wireless network card and software 21 Repeat steps 17 to 19 for each computer on the network Using a DHCP server A DHCP server contains a list of IP addresses the DHCP range that can be used on the network When a client wants to access the network the DHPC server checks its list and gives the client an IP address that is not in use by another client You can have only one DHCP server on your network To configure the internal DHCP server in the Access Point 1 Go to the DHCP server page 2 Select the Enable DHCP radio button to start the DHCP server 3 In the Subnet Min a
27. n Thank you for purchasing your 11 Mbps WLAN Access Point The package you have received contains the following items user manual 11 Mbps WLAN Access Point power adapter CD containing configuration software and this manual 1 2 Contents of this manual Table 1 1 Contents of this manual This chapter Getting Started Read this chapter for general information on wireless networks Chapter 2 Installing the Read this for information on how to install and connect the Access Access Point on page 8 Point to your network environment Chapter 3 Connecting to the Access Read this chapter when you want to connect to an Access Point to Point on page 14 configure it Chapter 4 Basic Read this chapter when you want to configure the Access Point for Configuration page 20 use in common situations the ones listed in section 1 4 Adding Access Points to your network environment Chapter 5 Advanced Read this chapter when you want to make full use of the Access Configuration on page 31 Point s advanced capabilities Chapter 6 Trouble shooting on page Read this chapter when the Access Point does not function 43 properly 1 3 Wireless networking basics and advantages A wireless network connects computers to each other using radio technology This offers you the freedom to move around the area and work anywhere within range of an Access Point Such a wireless network 1s called a WLAN Wireless Local
28. n all Access Points Connecting Access Points via wireless links With the Wireless Distribution System WDS you can link Access Points via a wireless link This way you can extend the range of your network without having to use cables to link the Access Points You can use up to eight links per Access Point To use WDS 1 Go to the Wireless Settings page 2 Click Add then enter the MAC address of an Access Point you want to add to the WDS 3 f you want to add more Access Points repeat step 2 until you have added all Access Points to the WDS 4 Check the Radio channel all Access Points in a WDS must use the same radio channel 5 If you want clients to be able to move their connection from one Access Point to another roaming the SSID must be the same on all Access Points 6 Repeat steps 1 5 for all other Access Points in the WDS Network Setup in general The scenarios don t cover every possible use of the Access Point With the information in this section you can configure the Access Point for Situations that haven t been covered by the scenarios Network setup is done on the Network setup page This page is divided into two areas the upper area is for the WAN connection this is your link to the 20 internet the lower one is for the LAN connection these settings govern how the Access Point appears on your own network Network Setup Tl Enable Yan connection WAN settings
29. n the network to which the Access Point will be connected Follow the instructions of the installation wizard Launching KickStart Launch KickStart via the Start menu The application starts up When you click Next KickStart will search for all Access Points within range whether they have been configured properly or not 15 3 4 3 Select wireless ethernet device In the Select wireless ethernet device dialog select the Access Point you want to configure from the list Once you have selected an Access Point click Next to continue lt Kickstart Select Wireless Ethernet Device E E M x Be ectthe wireless ethernet device you wantto manage Harme WAI Address IF Andiesza Eee Lacgiion none OTS deh 153254173128 defeut 3 wnknown npna nb 10 81 de ad l 195 106 225 194 defauk unknown o o o LLL E l Basran MEM Cancel Help Figure 3 1 KickStart Select wireless ethernet device dialog If the Access Point you are looking for does not appear in the list click Rescan KickStart will search for Access Points again For example use this to find Access Points that have just been switched on or reset These devices may take up to a minute to find an IP address and they won t appear in the list until then If the device that you want to manage is not in the list and 1s not found after clicking the Rescan button go to chapter 6 Troubleshooting
30. nd Subnet Max edit boxes enter IP addresses these are the upper and lower bounds of the DHCP range If default values have been supplied you can use these The DHCP range must be in the same subnet as the Access Point s own LAN address 27 4 8 4 8 1 4 In the Gateway Address edit box enter the LAN IP address of the Access Point Click Apply Go to the Network Setup page and edit these LAN Settings Set the LAN address to Static Make sure the IP address is in the range of the DHCP server O On QN tA Click Apply You may lose the network connection to the Access Point If that happens reboot your computer Optionally you can add reservations A reservation 1s an IP address that will always be used by the same computer identified by MAC address To add a reservation 1 Go to the DHCP server page 2 Click Add A new window opens 3 In the MAC address edit box enter the MAC address of the computer you want to reserve an address for 4 In the IP address to reserve edit box enter the IP address you want to reserve for that computer 5 Click OK The reservation is added to the list Adding multiple Access Points to a network When you want to extend the range of your network you can add more Access Points When you have multiple Access Points in your network you need to connect them to each other You can do this in two ways connect the Access Points to a wired Ethernet connect the Access
31. neral Auto IP and DHCP are the easiest to use In an existing network you may want to keep the existing addressing method Connecting an Access Point directly to a computer You can connect an Access Point directly to a computer 1 and use it to make a wireless connection from a laptop computer 2 Computer Figure 4 1 Connecting an Access Point directly to a computer Install the components of your network 1 Install a network card in the computer 1 and install the software for the card 2 Install the Access Point Note You need to use a crossover cable to connect the Access Point to the computer 3 Connect the Access Point to the computer using the crossover cable 4 Prepare the wireless client s install their network card and software Configure the Access Point from the computer 1 In this example we will use Auto IP 5 Use KickStart see chapter 3 Connecting to the Access Point to connect to the Access Point In your Web browser the Web Interface opens 6 Go to the Network Setup page 7 Make sure the LAN settings radio button is set to Dynamic 8 On your computer open the network settings on a Windows 98 computer open the Network control panel 9 Find the TCP IP properties on a Windows 98 computer select TCP IP then click Properties 22 10 Make sure the IP address settings are set to Obtain an IP address automatically 11 Repeat steps 8 to 10 for each computer on the network 12 To sec
32. ng a wireless network 0 0 2 0 c cee eee eens 25 Creatine eale Way ua ude edd dedu Ru te do d os bero fci ero 26 Usine a DACP Sever sacas temi etuer a i oe aiu ed al VH bins 27 Adding multiple Access Points to a network 000 28 Connecting Access Points via Ethernet links 28 Connecting Access Points via wireless links 04 29 Network Setup 1n Pelle Ell cs s au na wah iat pie Son Ae a date x 20 WAN COMME COON iiie teu dex im Noi vor oc alae eS ga 30 LANSE S ee irure fed uem han fen m leto bie rii ae A rale a nue eR 32 Advanced configuration eee 33 IBttoduecllOl st em nds cae ges named Ed Met seri cas 33 SelMimMes SUMMALY ars araa devo o me Deus dc duse a e ar Bad d 33 Event reporting logging 2 0 ee eee tenes 34 Identifying the Access Point l l 34 WiITClIESS SCINGS 2 cans tin doa ndr Ae ae beet Bae Gone Wh aa qai 35 DEGUEID v hati a ibs Be oes Bread chen oe a a a eto e 35 Security against unauthorized network access 04 36 Security against eavesdropping 1 0 0 ee ee ene 37 Security against unauthorized configuration 0008 38 PCW alll rescore boota a Sea gy dee ears ee ent oe ch Oe ae eee eta 39 POLE TOL W an NO con hgh obo d d Ro RERO io oed bed SMe oh aaa E 45 Upgrading the Access Point firmware 0 0 0 0 eee eee 46 Troubleshooting ccc ccc cc cece cere nn 47 1 Getting started 1 1 Introductio
33. s all other traffic Firawall status Enabled Tack setings Disablad Default polices Input i Arcant i xXsrarrd UL i i r D E Farearr Accent Discard Id chain Target Source Src Port Count Enabled Destination Dest Port xigw 110 Input theo accept 192 168 10 299 255 2595 255 255 z t au Hew iO Input udp accept 192 1868 1D 0 255 235 255 0 i 161 Figure 5 4 Firewall example 1 44 5 7 Port forwarding You can use Port Forwarding to allow the outside world to reach other computers on your network Port Forwarding is only used if you use the Access Point as a gateway TCP IP traffic packets have a port number that is an indication of what type of traffic it is For each service you want to make available you must create a Port Forwarding rule that says where to send the traffic to This rule contains the port number of the traffic and the IP address of the destination 1 Click Add to create a rule 2 Enter the following data Source port the port number that is used to access the service from the internet Protocol the kind of traffic TCP and or UDP you want to forward Destination IP the address of the host on your network that provides the service Destination port the port number of the host that provides the Service 3 Click OK For example to make your Web server available you set a rule with Source port 80 Protocol TCP Destination IP the address of your
34. sed security 802 1x both the operating system Windows XP some Linux variants and the network card must support it To add a RADIUS server 1 Click Add to add a RADIUS server 2 In the window that appears enter the following data IP Address the IP address of the RADIUS server UDP Port the UDP port number of the RADIUS server Secret the password for access to the RADIUS server 3 Click OK The server is now added to the list You can add more than one RADIUS server The first server in the list will be used by default the second will be used if the first is not available etc Checking the Require reauthentication check box forces the Access Point to check all connected clients with the RADIUS server at the nterval you specify To delete a RADIUS server from the list 1 Click Delete 2 Select the RADIUS server that you want to remove from the list 3 Click OK The list is updated Security against eavesdropping The Access Point provides encryption to secure the data flow from and to the Access Point This can be configured on the Eavesdropping page These are your choices Open System when you select this option data is not encrypted WEP when you select this option you activate WEP security When you select this the Enter the WEP Settings dialog appears see 37 5 6 2 1 5 6 3 below Change WEP settings When you select the WEP radio button or click the Change Settings link the
35. t the LAN settings radio button to Dynamic If you want to use the DHCP server in the Access Point see section 4 7 Using a DHCP server 6 Prepare the wireless client s install their network card and software To add more Access Points see section 4 8 Adding multiple Access 24 Points to a network 4 5 Creating a wireless network You can use an Access Point to set up a wireless network Figure 4 3 Creating an all wireless network Install the components of the network l rA Prepare one computer install wireless network card and software Install the Access Point Configure the Access Point from the computer you just installed In this example we will use Auto IP J Use KickStart see chapter 3 Connecting to the Access Point to connect to the Access Point In your Web browser the Web Interface opens 4 Go to the Network Setup page 10 Set the LAN settings radio button to Dynamic On your computer open the network settings on a Windows 98 computer open the Network control panel Find the TCP IP properties on a Windows 98 computer select TCP IP then click Properties Make sure the IP address settings are set to Obtain an IP address automatically Prepare all other computers install wireless network card and software Repeat steps 6 to 8 for each computer on the network If you want to use a DHCP server instead of Auto IP see section 4 7
36. the Access Point For best performance install the Access Point in a vertical position Figure 2 1 The Access Point The Access Point can be installed in 2 different ways ona desktop mounted to a wall The stand is used for desktop placement Desktop installation Determine where you want to place the Access Point Make sure you have a clear area on a desktop You can insert the Access Point into the stand as shown in Figure 2 2 Figure 2 2 Access Point for desktop use No mounting materials are required 2 5 Wall mount installation Note Before you start drilling holes into a wall make sure that part of the wall is clear of electricity water and gas pipes The wall mount package contains two screws and plugs to fasten the Access Point to the wall Figure 2 3 Mounting the Access Point on a wall Step by step wall mount installation 1 Determine the position of the screws The screws must be 5 cm apart to fit the keyholes at the back of the Access Point 2 Drill the holes in the wall at the appropriate size for the plugs 3 Insert the plugs into the holes 4 Fasten the screws into the plugs and leave about 3 mm of space between wall and screw head 5 Attach the Access Point to the screws there are two keyholes in the back of the Access Point The screwheads fit into the large half of the keyholes Once the screwheads are inside the keyholes the Access Point can drop locking the screw
37. the Radio LED the one on the right goes from blinking to being on constantly After about five seconds the LED goes off 2 Release the reset button when the LED has gone off All settings are deleted You will need to reconfigure the Access Point 13 3 Connecting to the Access Point 3 1 3 2 Introduction The Access Point 1s a ready to use device It is delivered with default settings which allow you to use its basic functions without configuring it Whether you need to configure the Access Point or not depends entirely on how you use the Access Point in your network environment Section 3 2 When to configure the Access Point discusses the consequences of configuring the Access Point You configure the Access Point via Web pages that are built into the Access Point These are accessible via any Web browser The KickStart application helps you access this Web Interface Table 3 1 Overview of this chapter When to configure the Access Point 3 3 3 4 Starting the Web Interface Launching the Web Interface manually Contents of the Web Interface When to configure the Access Point Configuring the Access Point means installing settings with respect to the use of radio channels security identification etc Out of the box the Access Point 1s configured so you can use it as a basic Access Point a Hub for your wireless network In scenarios like section 1 4 1 Connecting an Access Point directl
38. the web interface via HTTP one to limit access via SNMP The Simple Network Management Protocol is a standard for managing network components The Access Point can be configured via SNMP These are the rules 110 incoming HTTP tcp 80 traffic is only allowed from IP address 192 168 10 254 42 E Firewall Rule Properties Microsoft Internet Explorer Firewall Rule Properties Rule iLO Chain Input Rule enabled Target Source ddressiMHask Destinadan Address mask DOUCES port Destination port Mabch TCP flans TCP PT Accept ali Addritissk 92 168 10 254 p 255 255 255 255 all Sddr Mask if All iemp trn Advanced lt lt udp Advanced ses other All Single port Port ranga rl all Single port fag Port range l Figure 5 2 Example Firewall rule 110 120 incoming SNMP udp 161 traffic is only allowed from all hosts in the subnet 192 168 10 0 24 43 Firewall Rule Properties Rule i20 Chain Input lv Rule enabled Target Accept Enurrm Address Mask all Audi masas 182 1081 0 0 fe55 295 255 0 Destination Address mask RT Addrj mask Pratacual AI ten Advanced zz udp nthar Source port All Single port eee Port range ET it Eee ee Destination port all Single port t62 Potranga 77 lo o d p o OK cancal Figure 5 3 Example Firewall rule 120 The default policy for incoming traffic 1s Discard This block
39. ther clients will be denied access The client is identified by the MAC address of his network card The MAC address consists of six groups of two digits each e g 00 10 91 00 00 00 If you have multiple Access Points you will need to create this list for every Access Point through which a network card may access your network Follow these steps to add a client to the list 1 Click on the button Add client a new dialog opens 2 In the field MAC Address enter the MAC address of the client that you want to allow access to 3 Click OK The client is now added to the list To delete a client from the list 1 Click Delete a new dialog opens in which the list is displayed 2 Select the MAC address es of the client s that you want to remove from the list 3 Click OK The list is updated 36 5 6 1 2 5 6 2 Port based authorization With this option you use a RADIUS server to handle access control RADIUS Remote Authentication Dial In User Service 1s a standard for user authentication The RADIUS server contains a database with users and their access rights When a user wants to use the Access Point the Access Point contacts the RADIUS server to see if this is permitted Port based security uses the 802 1x standard When you use a RADIUS server the only thing you need to do on the Access Point is to tell it where to find the RADIUS server To be able to use port based security you also need clients that support port ba
40. to Static IP See section 4 7 Using a DHCP server 32 5 Advanced configuration 5 1 5 2 Introduction Once your network is up and running you can configure a number of advanced settings These are not required for the Access Point to function but are optional The options are Table 5 1 Configuration options 52 ene Summary a quick overview of essential D Event reporting logging keeping track of what S rete a 5 4 Identifying the Access Point information that helps you find a specific Access Point handy 1f you have a lot of them 5 5 Wireless Settings how to make multiple Access Points cooperate Security how to protect your network 5 7 Port forwarding allows you to reach computers on your network from the internet Upgrading the Access Point firmware Settings Summary This page contains a summary of the settings of the Access Point You cannot change any of the settings on this page Table 5 2 shows you how these settings can be changed Table 5 2 Web Interface page Settings Summary Setting How to change the setting SSID See section 5 5 Wireless Settings IP address Either use KickStart section 3 4 Using KickStart or edit the LAN settings on the Network Setup page section 4 9 Network Setup in general Security against See section 5 6 2 Security against Eavesdropping Eavesdropping method Access Control See section 5 6 1 Security against unauthorized
41. ure your network we recommend you configure these security settings To prevent unauthorized access to your WLAN you can use an Access Control List see section 5 6 1 1 MAC Address based Authorization In this list enter the MAC address of the network cards that are allowed access to your WLAN To prevent unauthorized changes to your configuration change the Write Community String password see section 5 6 3 Security against unauthorized configuration This password will be requested when a client accesses the web interface For even tighter security you can use the other features described in section 5 6 Security If you want to use a DHCP server instead of Auto IP see section 4 7 Using a DHCP server 23 4 4 Extending a wired network with one or more Access Points When you want to extend a wired network with wireless capability you can connect Access Points to it Wired Metweork Figure 4 2 Adding an Access Point to a wired network To add the first Access Point to a network 1 Make sure the wired network is completely functional 2 Install the Access Point and connect it to your wired network Configure the Access Point from a computer in your existing network 3 Use KickStart see chapter 3 Connecting to the Access Point to connect to the Access Point In your Web browser the Web Interface opens 4 Go to the Network Setup page 5 If the network uses Auto IP or DHCP se
42. y to a computer where there s no gateway the Access Point will probably function without additional configuration If it doesn t you need to change the IP address settings Not configuring your Access Point will make your network accessible to anyone Once your network is up and running we recommend you 14 3 3 3 4 3 4 1 3 4 2 read section 5 6 Security and secure your network When you want to use the more advanced functions e g use the Access Point as a gateway to the internet you need to change the configuration Starting the Web Interface The first time you want to access the Web Interface you need to use KickStart to find it For subsequent access you can go to the Web Interface directly see section 3 5 and you don t need KickStart Tip you can bookmark the web address for the Web Interface for even easier access You also need to use KickStart after you have reset the Access Point to factory defaults Using KickStart KickStart helps you start the Web Interface it finds all Access Points in your network and it points your Web browser to the Web Interface of the Access Point you selected If your network uses DHCP or Auto IP to assign IP addresses KickStart retrieves the address assigned to the Access Point If your network uses static IP addresses KickStart allows you to change the IP address settings for an Access Point Installing KickStart You can install KickStart on any PC i
43. y to apply the changes to the Access Point The following fields cannot be changed they are factory set or controlled by the Access Point s firmware MAC address the MAC address of the Access Point Access Point Type information on your type of Access Point Firmware Version the version number of the software that controls 34 5 5 5 6 the Access Point Wireless Settings On this page you can configure items such as the network name SSID of the device and the radio channel Table 5 3 Web Interface page Wireless Settings SSID Radio Channel Regulatory Domain High Rate Peer AP s for Wireless Distribution System WDS Wireless Settings Every wireless network has a network name also called SSID or Service Set IDentification Only Access Points and wireless clients that share the same SSID are able to communicate with each other Your networking client allows you to choose to which network you connect The network names you see there are SSIDs This is the channel that the Access Point uses to transmit and receive information The channel that you select here is restricted to the channels that can be used within your Regulatory Domain This is the organization that certifies the Access Point for use in your country It determines which radio channels can be used to transmit and receive signals This is a factory setting and cannot be changed Switching this option ON improves performance
Download Pdf Manuals
Related Search