AirTight SS-300-AT-C-60 User manual
Installation Guide
SS-300-AT-C-60
3x3 802.11abgnAccess Point/Sensor
AirTight
®
Networks, Inc., 339 N. Bernardo Avenue, # 200, Mountain View, CA 94043
http://www.airtightnetworks.com
Product documentation is being enhanced continuously based on customer feedback. To obtain a latest copy of this document, visit
http://www.airtightnetworks.com/home/support.html
Thispagehasbeenintentionallyleftblank.
SS-300-AT-C-60Access Point/Sensor
InstallationGuide
SS‐300‐AT‐C‐60InstallationGuide
ENDUSERLICENSEAGREEMENT
PleasereadtheEndUserLicenseAgreementbeforeinstallingtheSS‐300‐AT‐C‐60AccessPoint/Sensor.TheEndUserLicense
Agreementisavailableatthefollowinglocation‐.http://www.airtightnetworks.com/fileadmin/pdf/AirTight‐EULA.pdf.
InstallingtheSS‐300‐AT‐C‐60AccessPoint/SensorconstitutesyouracceptanceofthetermsandconditionsoftheEndUser
LicenseAgreement.
DISCLAIMER
THEINFORMATIONINTHISGUIDEISSUBJECTTOCHANGEWITHOUTANYPRIORNOTICE.
AIRTIGHT®NETWORKS,INC.ISNOTLIABLEFORANYSPECIAL,INCIDENTAL,INDIRECT,ORCONSEQUENTIAL
DAMAGESWHATSOEVER(INCLUDING,WITHOUTLIMITATION,DAMAGESFORLOSSOFBUSINESSPROFITS,
BUSINESSINTERRUPTION,LOSSOFBUSINESSINFORMATION,ORANYOTHERPECUNIARYLOSS)ARISINGOUTOF
THEUSEOFORINABILITYTOUSETHISPRODUCT.
THISPRODUCTHASTHECAPABILITYTOBLOCKWIRELESSTRANSMISSIONSFORTHEPURPOSEOFPROTECTING
YOURNETWORKFROMMALICIOUSWIRELESSACTIVITY.BASEDONTHEPOLICYSETTINGS,YOUHAVETHE
ABILITYTOSELECTWHICHWIRELESSTRANSMISSIONSAREBLOCKEDAND,THEREFORE,THECAPABILITYTO
BLOCKANEXTERNALWIRELESSTRANSMISSION.IFIMPROPERLYUSED,YOURUSAGEOFTHISPRODUCTMAY
VIOLATEUSFCCPART15ANDOTHERLAWS.BUYERACKNOWLEDGESTHELEGALRESTRICTIONSONUSAGEAND
UNDERSTANDSANDWILLCOMPLYWITHUSFCCRESTRICTIONSASWELLASOTHERGOVERNMENT
REGULATIONS.AIRTIGHTISNOTRESPONSIBLEFORANYWIRELESSINTERFERENCECAUSEDBYYOURUSEOF
THEPRODUCT.AIRTIGHTANDITSAUTHORIZEDRESELLERSORDISTRIBUTORSWILLASSUMENOLIABILITYFOR
ANYDAMAGEORVIOLATIONOFGOVERNMENTREGULATIONSARISINGFROMYOURUSAGEOFTHEPRODUCT,
EXPECTASEXPRESSLYDEFINEDINTHEINDEMNITYSECTIONOFTHISDOCUMENT.
LIMITATIONOFLIABILITY
AirTightwillnotbeliabletocustomeroranyotherpartyforanyindirect,incidental,special,consequential,exemplary,or
reliancedamagesarisingoutoforrelatedtotheuseofSpectraGuard®Enterpriseunderanylegaltheory,includingbutnot
limitedtolostprofits,lostdata,orbusinessinterruption,evenifAirTightknowsoforshouldhaveknownofthepossibilityof
suchdamages.Regardlessofthecauseofactionortheformofaction,AirTight’stotalcumulativeliabilityforactualdamages
arisingoutoforrelatedtotheuseofSpectraGuard®EnterprisewillnotexceedthepricepaidforSpectraGuard®Enterprise.
Copyright©2012AirTight®Networks,Inc.AllRightsReserved.
AirTight®Networks,TheAirTightlogo,andSpectraGuard®areregisteredtrademarksofAirTight®Networks.Allother
productsandservicesaretrademarks,registeredtrademarks,andservicemarksorregisteredservicemarksoftheirrespective
owners.
ThisproductcontainscomponentsfromOpenSourcesoftware.Thesecomponentsaregovernedbythetermsandconditions
oftheGNUPublicLicense.Toreadthesetermsandconditionsvisithttp://www.gnu.org/copyleft/gpl.html.
ThisproductisprotectedbyoneormoreofU.S.patentNos.7,002,943,7,154,874,7,216,365,7,333,800,7,333,481,7,339,914,
7,406,320,7,440,434,7,447,184,7,496,094,7,536,723,7,558,253,7,710,933,7,751,393,7,764,648,7,804,808,7,856,209,7,856,656,
7,970,894,7,971,253,8,032,939;AustralianpatentNo.200429804;U.K.patentNo.2410154;JapanpatentNo.4639195,andany
otherslistedatwww.airtightnetworks.com/patents.Morepatentspending.
SS‐300‐AT‐C‐60InstallationGuide
FEDERALCOMMUNICATIONSCOMMISSIONINTERFERENCESTATEMENT
ThisequipmenthasbeentestedandfoundtocomplywiththelimitsforaClassBdigitaldevice,pursuanttopart15ofthe
FCCRules.Theselimitsaredesignedtoprovidereasonableprotectionagainstharmfulinterferenceinaresidentialinstallation.
Thisequipmentgenerates,usesandcanradiateradiofrequencyenergyand,ifnotinstalledandusedinaccordancewiththe
instructions,maycauseharmfulinterferencetoradiocommunications.However,thereisnoguaranteethatinterferencewill
notoccurinaparticularinstallation.Ifthisequipmentdoescauseharmfulinterferencetoradioortelevisionreception,which
canbedeterminedbyturningtheequipmentoffandon,theuserisencouragedtotrytocorrecttheinterferencebyoneor
moreofthefollowingmeasures:
‐Reorientorrelocatethereceivingantenna.
‐Increasetheseparationbetweentheequipmentandreceiver.
‐Connecttheequipmentintoanoutletonacircuitdifferentfromthattowhichthereceiverisconnected.
‐Consultthedealeroranexperiencedradio/TVtechnicianforhelp.
CAUTION
Anychangesormodificationsnotexpresslyapprovedbytheguaranteeofthisdevicecouldvoidtheuserʹsauthorityto
operatetheequipment.
Labelingrequirements
ThisdevicecomplieswithPart15oftheFCCRules.Operationissubjecttothefollowingtwoconditions:(1)thisdevicemay
notcauseharmfulinterference,and(2)thisdevicemustacceptanyinterferencereceived,includinginterferencethatmay
causeundesiredoperation.
RFexposurewarning
This equipment must be installed and operated in accordance with provided instructions and the antenna(s) used for this
transmitter must be installed to provide a separation distance of at least 20 cm from all persons and must not be co-located or
operating in conjunction with any other antenna or transmitter. End-users and installers must be provide with antenna
installation instructions and transmitter operating conditions for satisfying RF exposure compliance.
Thisdeviceisoperationin5.15–5.25GHzfrequencyrange,thenrestrictedinindooruseonly,Outdooroperationsinthe
5150~5250MHzisprohibit.
Canada,IndustryCanada(IC)Notices
ThisClassBdigitalapparatuscomplieswithCanadianICES‐003andRSS‐210.
Operationissubjecttothefollowingtwoconditions:(1)thisdevicemaynotcauseinterference,and(2)thisdevicemustaccept
anyinterference,includinginterferencethatmaycauseundesiredoperationofthedevice.
RadioFrequency(RF)ExposureInformation
TheradiatedoutputpoweroftheWirelessDeviceisbelowtheIndustryCanada(IC)radiofrequencyexposurelimits.The
WirelessDeviceshouldbeusedinsuchamannersuchthatthepotentialforhumancontactduringnormaloperationis
minimized.
ThisdevicehasalsobeenevaluatedandshowncompliantwiththeICRFExposurelimitsundermobileexposureconditions.
(antennasaregreaterthan20cmfromapersonʹsbody).
SS‐300‐AT‐C‐60InstallationGuide
Canada,avisdʹIndustryCanada(IC)
CetappareilnumériquedeclasseBestconformeauxnormescanadiennesICES‐003etRSS‐210.
Sonfonctionnementestsoumisauxdeuxconditionssuivantes:(1)cetappareilnedoitpascauserdʹinterférenceet(2)cet
appareildoitacceptertouteinterférence,notammentlesinterférencesquipeuventaffectersonfonctionnement.
Informationsconcernantlʹexpositionauxfréquencesradio(RF)
Lapuissancedesortieémiseparl’appareildesansfilestinférieureàlalimitedʹexpositionauxfréquencesradiodʹIndustry
Canada(IC).Utilisezl’appareildesansfildefaçonàminimiserlescontactshumainslorsdufonctionnementnormal.
CepériphériqueaégalementétéévaluéetdémontréconformeauxlimitesdʹexpositionauxRFdʹICdansdesconditions
dʹexpositionàdesappareilsmobiles(lesantennessesituentàmoinsde20cmducorpsdʹunepersonne).
FCCNOTICE:
TocomplywithFCCpart15rulesintheUnitedStates,thesystemmustbeprofessionallyinstalledtoensurecompliancewith
thePart15certification.Itistheresponsibilityoftheoperatorandprofessionalinstallertoensurethatonlycertifiedsystems
aredeployedintheUnitedStates.Theuseofthesysteminanyothercombination(suchasco‐locatedantennastransmitting
thesameinformation)isexpresslyforbidden.
OnlytheantennaslistedbelowareallowedtobeusedwiththeEUToutputpower.
AntennaList
No.ManufacturerPartNo.PeakGainNOTE
1.JOYMAX
JWX‐614XRSXX‐3613dBifor2.4GHz
5dBifor5.15~5.25GHz
5dBifor5.725~5.850GHz
ExternalAntenna
(Dipole)
2.MAG.LAYERSMSA‐3810‐2G4C1‐A36
MSA‐3810‐2G4C1‐A37
MSA‐3810‐2G4C1‐A38
MSA‐3810‐2G4C1‐B3
MSA‐3810‐2G4C1‐B4
4.14dBifor2.4GHz
2.64dBifor5.15~5.25GHz
5.72dBifor5.725~5.850GHz
InternalAntenna
(PIFA)
TableofContents
SS‐300‐AT‐C‐60InstallationGuide
TableofContents
CHAPTER 1GETTING STARTED...................................................................................................................................1
1.1BEFORE YOU BEGIN.......................................................................................................................................................1
1.2HOWTO GET MORE INFORMATION ..................................................................................................................................1
1.3CONTACT INFORMATION.................................................................................................................................................1
CHAPTER 2PACKAGE CONTENTS..............................................................................................................................2
CHAPTER 3SS-300-AT-C-60 OVERVIEW......................................................................................................................3
CHAPTER 4INSTALLING SS-300-AT-C60.....................................................................................................................7
4.1ZERO CONFIGURATION OF SS-300-AT-C-60 AS SENSOR ................................................................................................7
4.2CONNECTING SS-300-AT-C-60......................................................................................................................................7
4.2.1Mount SS-300-AT-C-60 ..........................................................................................................................................7
4.2.1.1Ceiling Mounting..................................................................................................................................................................7
4.2.1.2Wall or Electrical Box Mounting ..........................................................................................................................................9
4.2.2Prerequisites to connect the device to the network.................................................................................................9
4.2.3Using SS-300-AT-C-60 with PoE..........................................................................................................................10
4.2.4Using SS-300-AT-C-60 with power adapter.........................................................................................................10
CHAPTER 5MANUALLY CONFIGURING THE SS-300-AT-C-60 AS SENSOR .....................................................12
5.1INTRODUCTION.............................................................................................................................................................12
5.2CONFIGURING SENSOR THROUGH CONFIG SHELL ........................................................................................................12
5.2.1Invoke HyperTerminal (or minicom)....................................................................................................................12
5.2.1.1Launching HyperTerminal ..................................................................................................................................................12
5.2.1.2Defining a New HyperTerminal Connection.......................................................................................................................13
5.2.1.3Specifying HyperTerminal Connection Details...................................................................................................................14
5.2.1.4Editing Serial Port Settings.................................................................................................................................................14
5.2.2Log in and Change the Default Password............................................................................................................15
5.2.3Set Server Discovery ............................................................................................................................................15
5.2.4Set Sensor Mode...................................................................................................................................................15
5.2.5Configure Network Settings..................................................................................................................................16
5.2.5.1Configure IPv6 settings.......................................................................................................................................................16
5.2.5.2How to configure Communication Key or Passphrase........................................................................................................16
CHAPTER 6SS-300-AT-C-60 CONFIG SHELL COMMANDS ..................................................................................17
CHAPTER 7SS-300-AT-C-60 TROUBLESHOOTING.................................................................................................19
CHAPTER 8APPENDIX A: SERVER SENSOR MUTUALAUTHENTICATION ...................................................21
TableofFigures
SS‐300‐AT‐C‐60InstallationGuide
TableofFigures
FIGURE 1.SS-300-AT-C-60 PACKAGE CONTENTS.......................................................................................................................................2
FIGURE 2.FRONT PANEL OF SS-300-AT-C-60.............................................................................................................................................3
FIGURE 3.REAR PANEL OF SS-300-AT-C-60...............................................................................................................................................5
FIGURE 4.SIDE PANEL OF SS-300-AT-C-60................................................................................................................................................6
FIGURE 5.ATTACHING THE METAL SLIDER..................................................................................................................................................8
FIGURE 6.CLIPPING THE METAL CEILING-BRACKET....................................................................................................................................8
FIGURE 7.SLIDING THE MOVABLE SECTION .................................................................................................................................................8
FIGURE 8.FINAL POSITIONING OF THE SENSOR ............................................................................................................................................9
FIGURE 9.HOLES FOR INSERTING SCREWS...................................................................................................................................................9
FIGURE 10.POWER UPAND CONNECT SS-300-AT-C-60 USING POE.............................................................................................................10
FIGURE 11.POWER UP SS-300-AT-C-60.....................................................................................................................................................10
FIGURE 12.CONNECT SS-300-AT-C-60 TO THE NETWORK.......................................................................................................................... 11
FIGURE 13.CONNECTING SS-300-AT-C-60 TO YOUR COMPUTER USING A SERIAL CABLE ............................................................................12
FIGURE 14.OPENING HYPERTERMINAL ......................................................................................................................................................13
FIGURE 15.DEFINE A NEW HYPERTERMINAL CONNECTION FOR SENSOR.....................................................................................................13
FIGURE 16.SPECIFY HYPERTERMINAL CONNECTION DETAILS.....................................................................................................................14
FIGURE 17.EDIT SERIAL PORT SETTINGS FOR SENSOR SS-300-AT-C-60.....................................................................................................15
FIGURE 18.SET SERVER DISCOVERY COMMAND ...........................................................................................................................................15
FIGURE 19.SET SENSOR MODE COMMAND FOR SS-300-AT-C-60.................................................................................................................16
SS‐300‐AT‐C‐60InstallationGuide
1
Chapter1GettingStarted
1.1BeforeYouBegin
ThankyouforpurchasingSS‐300‐AT‐C‐60fromAirTight®Networks,Inc.TheSS‐300‐AT‐C‐60isa3x3802.11abgnAccess
Point/Sensor.
PleasereadtheEULAbeforeinstallingtheSS‐300‐AT‐C‐60.Installingthesensorconstitutesyouracceptanceofthetermsand
conditionsoftheEULAmentionedaboveinthisdocument.Thisproductcannotberentedorleased–youarethesoleownerof
theproduct.
ThisinstallationguidegivesanoverviewofthepackagecontentsandexplainshowtomountandconfiguretheSS‐300‐AT‐
C60.Thisguidecontainsthefollowingchapters:
• PackageContents:Liststhecomponentsincludedinthesystempackage.
• SS‐300‐AT‐C‐60Overview:Providesanoverviewofsensor.
• Installingthedevice:DescribeshowtoconnectandinstallSS‐300‐AT‐C‐60.
• ManuallyConfiguringthedevice:DescribeshowtoconfigureSS‐300‐AT‐C‐60throughtheconfigshell.
• ConfigShellCommands:Listsapre‐definedsetofcommandsthatallowyoutoconfigureandviewthestatusofthe
sensors.
• Troubleshooting:Providestroubleshootingtipswhileinstallingthesensor.
1.2Howtogetmoreinformation
Toreceiveimportantnewsonproductupdates,pleasevisitourwebsiteatsupport@airtightnetworks.com.
1.3ContactInformation
AirTight®Networks,Inc.
339N,BernardoAvenue,Suite#200,
MountainView,CA94043
Tel:(650)961‐1111
Fax:(650)963‐3388
Fortechnicalsupportsendanemailtosupport@airtightnetworks.com.
SS‐300‐AT‐C‐60InstallationGuide
2
Chapter2PackageContents
ThischapterliststhecomponentsincludedintheSS‐300‐AT‐C‐60devicepackage.SS‐300‐AT‐C‐60isa3x3802.11abgnAccess
Point/Sensor.ItcanfunctioneitherasanAPorasasensordependingonhowitisconfigured.
PleaseensurethatthefollowingitemsareincludedintheSS‐300‐AT‐C‐60devicepackage.Ifthepackageisnotcomplete,
pleasecontactAirTight®Networks,Inc.TechnicalSupportatsupport@airtightnetworks.com,orreturnthepackagetothe
vendorordealerwhereyoupurchasedtheproduct.
ThecontentsoftheSS‐300‐AT‐C‐60packageareasfollows:
• SS‐300‐AT‐C‐60
• MountingBracketandAccessories
Figure 1. SS-300-AT-C-60 Package Contents
SS‐300‐AT‐C‐60InstallationGuide
Chapter3SS‐300‐AT‐C‐60Overview
ThischapterprovidesanoverviewoftheSS‐300‐AT‐C‐60anddescribesindetailaboutthefollowing.
• FrontpanelofSS‐300‐AT‐C‐60
• RearpanelofSS‐300‐AT‐C‐60
SS‐300‐AT‐C‐60isa802.11naccesspoint/sensordevicewithaCiscocompatibleconsoleport.Ithasfiveexternalantennaports‐
threeatthetopandtwoatthebottom.Itisadualradiodevicecapableofactingasanaccesspointorasensor.Thetopthree
antennasareforradio1andthebottomtwoantennasareforradio2.
ThefrontpaneloftheSS‐300‐AT‐C‐60hasLEDsthatindicatetheworkingofthedevice.
Figure 2. Front Panel of SS-300-AT-C-60
Note:LED5,thatisnotvisibleinthezoomed‐inviewintheabovefigure,isnotinuse.OnlyLED1,LED2,LED3andLED4areinuse.
ThefollowingtableindicatesvariousdevicestatesusingtheLEDsonthedevice,whenthedeviceisinAPmode.
Table 1. LED details for SS-300-AT-C-60 in AP mode
LED1 or
Power
LED2 or
WLAN1
LED3 or
WLAN2
LED4 or
LANDescription
Solid Green Any Any Solid Green The AP is receiving power and is working
normally. The AP is connected to the Server.
Solid Green Off Slow Blink Slow Blink The AP upgrade is in progress.
Solid Orange Any Any Solid Green The AP is unable to get Ethernet link.
Solid Orange Any Any Fast Blink The AP did not receive a valid IP address via the
DHCP.
Solid Orange Any Any Slow Blink The AP is unable to connect to the Server.
Off Off Off Off The AP is not powered on or it is in the process
of starting up.
WLAN1andWLAN2LEDswillblinkwhenthereisactivityontherespectiveradios.
ThefollowingtableindicatesvariousdevicestatesusingtheLEDsonthedevice,whenthedeviceisinsensormode.
SS‐300‐AT‐C‐60InstallationGuide
Table 2. LED details for SS-300-AT-C-60 in sensor mode
LED1 or
Power
LED2 or
WLAN1
LED3 or
WLAN2
LED4 or
LANDescription
Solid Green Solid Green Solid Green Solid Green The Sensor is receiving power and is working
normally. The Sensor is connected to the
Server.
Solid Green Solid Green Fast Blink Solid Green The Sensor is performing troubleshooting on
802.11a/n.
Solid GreenSolid GreenSlow BlinkSolid GreenThe Sensor is performing intrusion prevention
on 802.11a/n.
Solid GreenFast BlinkSolid GreenSolid GreenThe Sensor is performing troubleshooting on
802.11b/g/n.
Solid GreenFast BlinkFast BlinkSolid GreenThe Sensor is performing troubleshooting on
802.11b/g/n and 802.11a/n.
Solid GreenFast BlinkSlow BlinkSolid GreenThe Sensor is performing troubleshooting on
802.11b/g/n and intrusion prevention on
802.11a/n.
Solid GreenSlow BlinkSolid GreenSolid GreenThe Sensor is performing intrusion prevention
on 802.11b/g/n.
Solid GreenSlow BlinkFast BlinkSolid GreenThe Sensor is performing intrusion prevention
on 802.11b/g/n and troubleshooting on
802.11a/n.
Solid GreenSlow BlinkSlow BlinkSolid GreenThe Sensor is performing intrusion prevention
on 802.11b/g/n and 802.11a/n.
Solid Green Off Slow Blink Slow Blink The Sensor upgrade is in progress.
Solid Orange Any Any Solid Green The Sensor is unable to get Ethernet link.
Solid Orange Any Any Fast Blink The Sensor did not receive a valid IP address
via the DHCP.
Solid Orange Any Any Slow Blink The Sensor is unable to connect to the Server.
Solid OrangeSolid GreenAnyAnyThere is an error on 802.11a/b/g/n interfaces.
Solid OrangeAnySolid GreenAnyThe Sensor is experiencing a software error.
OffOffOffOffThe Sensor is not powered on or it is in the
process of starting up.
ThefollowingtableindicatesvariousdevicestatesusingtheLEDsonthedevice,whenthedeviceisinAP/sensorcombomode,
thatisoneradioisconfiguredtofunctionasanAPandtheotherradioisconfiguredtofunctionasasensor.
Table 3. LED details for SS-300-AT-C-60 in AP/sensor combo mode
LED1 or
Power LED2 or
WLAN1 LED3 or
WLAN2 LED4 or
LAN Description
Solid Green Solid Green Any Solid Green The AP-Sensor is receiving power and is working
normally. The AP-Sensor is connected to the
Server.
Solid Green Fast Blink Any Solid Green The Sensor is performing Troubleshooting on
802.11a/b/g/n
Solid Green Slow Blink Any Solid Green The Sensor is performing Prevention on
802.11a/b/g/n
Solid Green Off Slow Blink Slow Blink The AP upgrade is in progress.
Solid Orange Any Any Solid Green The AP is unable to get Ethernet link.
Solid Orange Any Any Fast Blink The AP did not receive a valid IP address via the
DHCP.
SS‐300‐AT‐C‐60InstallationGuide
Solid Orange Any Any Slow Blink The AP is unable to connect to the Server.
Off Off Off Off The AP is not powered on or it is in the process of
starting up.
WLAN2LEDwillblinkwhenthereisactivityontheAPradio.
Note:Ifnochannelsarespecifiedformonitoringandpreventiononthesensorradio,therespectiveLEDwillhavenoactivityanditwill
notglow.
TherearpaneloftheSS‐300‐AT‐C‐60hastwoEthernetports‐LAN1andLAN2,thatenablesthedevicetobeconnectedtothe
wiredLANthroughaswitchorahubandprovidesthepowerforthedeviceusing802.3afstandard.
Figure 3. Rear Panel of SS-300-AT-C-60
Table 4. Rear Panel Port Settings for SS-300-AT-C-60
Port Description Connector
Type Speed/Protocol
Ethernet
(LAN1)
This enables the device to be connected to
the wired LAN through a switch or a hub.
This connection allows the SpectraGuard
Sensor to communicate with the
SpectraGuard Enterprise® Server.
This port also provides the power for the
device using 802.3af standard
RJ-45 10/100/1000 Mbps Ethernet
Power over Ethernet
Ethernet
(LAN2)
This enables the device to be connected to
the wired LAN through a switch or a hub.
This connection allows the SpectraGuard
Sensor to communicate with the
SpectraGuard Enterprise® Server.
This port also provides the power for the
device using 802.3af standard
RJ-45 10/100/1000 Mbps Ethernet
Power over Ethernet
SS‐300‐AT‐C‐60InstallationGuide
Figure 4. Side Panel of SS-300-AT-C-60
Thesidepanelhasthefollowingports:
• Serialport:ConnectstheSS‐300‐AT‐C‐60devicetoserialterminalemulationprogramssuchasHyperTerminalfor
WindowsorminicomforLinux.
• USBport:ConnectstheSS‐300‐AT‐C‐60devicetoaUSBdevice.
• Resetswitch:ResetstheSS‐300‐AT‐C‐60devicetofactorydefaults.ToresettheSS‐300‐AT‐C‐60device,pressthe
Resetswitchandpowercycle(removethepowercableonceandconnectitbackagain)thedevice,untilallLEDs
blinkgreen.Pressing<Reset>whilethedeviceisrunningwillnothaveanyeffect.Thefollowingsettingsarereset:
ConfigShellPasswordisresettoconfig.
ServerDiscoveryvalueiserasedandchangedtothedefault,wifi‐security‐server.
AlltheVLANconfigurationsarelost.
DevicemodeischangedtoSensorOnly.
IfstaticIPwasconfiguredonthedevice,theIPiserasedandDHCPmodeisset.
Afterreset,alltheLEDswillblinkonce,implyingthattheresetissuccessful.
Note:ForSS‐300‐AT‐C‐60,theuserisexpectedtopressandholdtheresetswitchwhileapower‐cyclefor30seconds(actuallytakes26
secondsfortheresettocomplete).
Table 5. Side Panel Port Settings for SS-300-AT-C-60
Port Description Connector Type Speed/Protocol
Reset Allows resetting of
SpectraGuard Sensor™ to
factory settings.
Pin-hole
push-button Hold down and power
cycle the Sensor to
reset
USB Connects the SS-300-AT-C-60
device to a USB device
Console Enables a serial connection to
establish terminal sessions.
Used for launching Config Shell
sessions.
RJ-45 RS 232 Serial
Bits per second:
115200
Data Bits: 8
Parity: None
Stop Bits: 1
Flow Control: None
SS‐300‐AT‐C‐60InstallationGuide
Chapter4InstallingSS‐300‐AT‐C60
WhentheSS‐300‐AT‐C‐60functionsasaWIPSsensor,itmonitorsyournetworkandcommunicateswiththeServertoguard
yourcorporatenetworkagainstover‐the‐airattacks.
WhentheSS‐300‐AT‐C‐60functionsasanaccesspoint(AP),clientscanconnecttoyourcorporatenetworkinwirelessmode
throughtheAPs.
TheSS‐300‐AT‐C‐60mustbepluggedtoyourcorporatenetworktoperformtheaboveoperations.
AsaWIPSsensor,SS‐300‐AT‐C‐60canbeconfiguredinoneofthefollowingtwomodes:
• SensorMode:Thisisthedefaultmode.Inthismode,theSensorshouldbeconnectedintoatrunkport(802.1Q
capable)onaswitch.ItthenmonitorsmultipleVLANsthatareconfiguredonthattrunkportandarechosenbythe
userusingtheNDCLI.ThewirelessinterfaceoftheSensorisenabled.Similarly,aSS‐300‐AT‐C‐60canmonitorupto
16VLANs.
• NetworkDetector(ND)Mode:Thismodeneedstobeexplicitlyconfigured.Inthismode,theNDshouldbe
connectedintoatrunkport(802.1Qcapable)onaswitch.ItthenmonitorsmultipleVLANsthatareconfiguredon
thattrunkportandarechosenbytheuserusingtheNDCLI.ThewirelessinterfaceoftheNDisdisabled.ASS‐300‐
AT‐C‐60canmonitorupto100VLANs.
Important:TopreventabuseandintrusionbyNon‐authorizedpersonnel,itisextremelyimportanttoinstalltheSensorsuchthatitis
difficulttounplugthedevicefromthenetworkorfromthepoweroutlet.
4.1ZeroConfigurationofSS‐300‐AT‐C‐60asSensor
Zeroconfigurationissupportedifthefollowingconditionsaresatisfied:
• Thedeviceisin‘Sensor’mode.
• ADNSentry‘wifi‐security‐server’issetuponallDNSServers.ThisentryshouldpointtotheIPaddressoftheServer.
Bydefault,thedevicelooksfortheServerDNSentry‘wifi‐security‐server’.
SensorisplacedonasubnetthatisDHCPenabled.
Important:IfaSensorisplacedonanetworksegmentthatisseparatedfromtheServerbyafirewall,youmustfirstopenport3851for
UserDatagramProtocol(UDP)andTransportControlProtocol(TCP)bidirectionaltrafficonthatfirewall.Thisportnumberisassigned
toAirTight®Networks.IfmultipleSensorsaresetuptoconnecttomultipleServers,zeroconfigurationisnotpossible.Inthiscasemanual
configurationofSensorsisneeded.RefertoManuallyConfiguringtheSensorfordetails.
ThestepstoinstalltheSensorwithnoconfiguration(zeroconfiguration)areasfollows.
• MounttheSensor
• PoweruptheSensor
• ConnecttheSensortothenetwork
4.2ConnectingSS‐300‐AT‐C‐60
ThisinvolvesmountingtheSensor/APCombo,poweringitup,andconnectingittothenetwork.
4.2.1MountSS‐300‐AT‐C‐60
TakeaconfiguredSS‐300‐AT‐C‐60,thatis,makesurethatthedeviceisgivenastaticIPorthesettingshavebeenchangedfor
DHCP.NotetheMACaddressandtheIPaddressofthedeviceinasafeplacebeforeitisinstalledinahard‐to‐reachlocation.
TheMACaddressofthedeviceisprintedonalabelatthebottomoftheproduct.
Recommended:YoushouldlabelthedevicesusingMACaddressesoratleastyourownconvention.Forexample,useserialnumbers,so
thatyoucaneasilyidentifythedevices.
4.2.1.1CeilingMounting
UsethemountingbrackettoinstalltheSS‐300‐AT‐C‐60ontheceiling.
Tomountthedevice:
SS‐300‐AT‐C‐60InstallationGuide
1.Attachthemetalslidertothebackofthedeviceusingthetwosmallscrews.Theslidershouldstillbeabletoslideafter
thescrewsaretightened.
Figure 5. Attaching the Metal Slider
Makesurethattheslideisleftinthesamepositionasshownabove.
Clipthemetalceilingbrackettoasuitably‐locatedceilingtileseparator.
Figure 6. Clipping the Metal Ceiling-bracket
Slidethemovablesectionintoplaceandtightenthescrew(foundunderneath)tosecureit
Figure 7. Sliding the movable section
Positionthedevicesuchthatthetwotabsfromtheceilingbracketlocateintheslotsinthedevice(A),thenslidetheslider
acrosstolockthedevicetothebracket(B).
SS‐300‐AT‐C‐60InstallationGuide
Figure 8. Final positioning of the Sensor
4.2.1.2WallorElectricalBoxMounting
Toinstallthedeviceonawallorelectricalbox,usethemountingbracketthatcomeswiththedevice.Followthesesteps:
1.Followingtheseguidelines,screwthemountingbrackettoawallorelectricalbox(NEMAenclosure):
• Themountingbrackettabsshouldbepointingupward.
• Ifmountingtodrywall,usethe4screwsand4wallanchors.
• IfmountingtoanEUelectricalbox(60.3mm),use2threadedscrewsandinsertintotheholesmarked“A ” inthe
diagramshownbelow.
IfmountingtoaUSelectricalbox(83.3mm),use2threadedscrewsandinsertintotheholesmarked“B”inthediagramshown
below.
Figure 9. Holes for inserting screws
ConnecttheEthernetcable(forpowerandnetworkconnection)totheLANportonthebackofthedevice.
TomounttheSS‐300‐AT‐C‐60deviceontothemountingbracket,insertthemounting‐brackettabsintotheslotsonthebackof
theAP.
IMPORTANT:Ifyouaremountingthedeviceonawall,youcannotusetheslotsonthebottomnarrowedgeofthedevice.Instead,the
slotsonthebackofthedevicemustbeused.
ASS‐300‐AT‐C‐60devicecanbepoweredonby802.3afClass0PowerOverEthernetofNominalinputvoltage48VDC.You
canconnectthedevicetothenetworkusingPoEorapoweradapter.
4.2.2Prerequisitestoconnectthedevicetothenetwork
1.EnsurethattheServerisalreadyrunningonyournetwork.
2.AddtheDNSentry‘wifi‐security‐server’onallDNSServers.ThisentryshouldpointtotheIPaddressoftheServer.
3.EnsurethatDHCPisrunningonthesubnettowhichthedevicewillbeconnected.
SS‐300‐AT‐C‐60InstallationGuide
4.Important:IfDHCPisnotenabledonasubnet,Sensorscannotconnecttothatsubnetwithzeroconfiguration.IftheDNSentryis
notpresentontheDNSserversoryoudonothavetheDHCPserverrunningonthesubnet,youneedtoconfigurethesensor
manually.RefertoManuallyConfiguringSS‐300‐AT‐C‐60asSensorfordetailsonmanualconfigurationofSensor.
4.2.3UsingSS‐300‐AT‐C‐60withPoE
Topoweron,andconnectSS‐300‐AT‐C‐60tothenetworkusingPoE,dothefollowing.
1.ConnectoneendofthenetworkinterfacecabletotheEthernetportattherearoftheSS‐300‐AT‐C‐60device.
2.ConnecttheotherendofthenetworkinterfacecabletotheEthernetjackthatprovidesPoEpower.
Figure 10. Power up and connect SS-300-AT-C-60 using PoE
4.2.4UsingSS‐300‐AT‐C‐60withpoweradapter
Topowerupthedevice,performthefollowingsteps:
1.PlugthepowercableintotheDCpowerreceptacleattherearofthedevice.
2.Plugtheotherendofthepowercableintoan110V~240V50/60HzACpowersource.
Figure 11. Power up SS-300-AT-C-60
Waitfortwominutes!
ChecktheStatusLEDs.YouwillseeLED1turnOrangeandLED2turngreen,indicatingthattheSensorispoweredon
correctlyandwaitingtobeconnectedtothenetwork.
ToconnectSS‐300‐AT‐C‐60tothenetwork,performthefollowingsteps:
1.EnsurethatDHCPisrunningonthesubnettowhichtheSS‐300‐AT‐C‐60devicewillbeconnected.
2.ConnectoneendoftheNetworkInterfacecabletotheEthernetport(LAN1)attherearoftheSS‐300‐AT‐C‐60device
3.ConnecttheotherendoftheNetworkInterfacecabletoanEthernetjackthatisconnectedtothedesiredsubnet.
SS‐300‐AT‐C‐60InstallationGuide
Figure 12. Connect SS-300-AT-C-60 to the network
Waitfortwominutes!
ChecktheStatusLEDsonthedevice.IfallLEDsglowgreen,thenthedeviceisoperationalandconnectedtothe
SpectraGuard®Enterpriseserver.
LogontotheSpectraGuard®EnterpriseserverthroughSSH.Runthe‘getsensorlist’command.Youwillseealistofall
SensorsthatarerecognizedbytheSpectraGuard®Enterpriseserver.
TheSensorisconfiguredandreadytogo.ChecktheConsoletoensurethatthisSensorhasbeendetected.
IfalltheSensorshaveconnectedwithzeroconfiguration,youneednotreadthisinstallationguidefurther.
Note:IfLED1turnsOrange,itmeansthatthezeroconfigurationwasnotsuccessfulandtheSensormustbeconfiguredmanually.Refer
toManuallyConfiguringSS‐300‐AT‐C‐60asSensorfordetails
SS‐300‐AT‐C‐60InstallationGuide
12
Chapter5ManuallyConfiguringtheSS‐300‐AT‐C‐60asSensor
Important:IftheinstallationinInstallingSS‐300‐AT‐C‐60wassuccessful,stop!Youdonotneedtoconfigurethedevicemanually.
5.1Introduction
ManualconfigurationofSS‐300‐AT‐C‐60asaSensoristypicallyrequiredinthefollowingcases:
• DeviceneedstobeconfiguredinNDmode.
• SensorOnly(SO)devicescannotconnecttotheSpectraGuard®Enterpriseserverthroughzeroconfiguration.The
DNSentryfortheSpectraGuard®Enterpriseserverhasbeenchangedtoanentryotherthanʺwifi‐security‐serverʺor
thereisnoDNSServerpresentinthenetwork.Thisisapplicableformulti‐serverinstallations.
• SensorisplacedonasubnetthatisnotDHCPenabled.
5.2ConfiguringSensorthroughConfigShell
TousetheConfigShell,connectaSerial(RS‐232)cablebetweenyourcomputerandtheSensor.TheConfigShellsupportsa
pre‐definedsetofcommandsusedtoconfiguretheSensor.
Figure 13. Connecting SS-300-AT-C-60 to your computer using a Serial Cable
ThestepstoconfiguretheSensormanuallyareasfollows:
1.InvokeHyperTerminal(orminicom)
Loginandchangethedefaultpassword
SetServerDiscovery
SetSensorMode
SetNetworkSettingsforthatSensorMode
Theabovestepsareexplainedindetailbelow.
5.2.1InvokeHyperTerminal(orminicom)
ToconfiguretheSensor,followthestepsdescribedbelowtoinvoketheConfigShell.
5.2.1.1LaunchingHyperTerminal
TostartHyperTerminal,clickStartProgramsAccessoriesCommunicationsHyperTerminalasshowninthefollowing
figure.
Other manuals for SS-300-AT-C-60
1
Table of contents
Other AirTight Wireless Access Point manuals
Popular Wireless Access Point manuals by other brands
SonicWALL
SonicWALL SonicWave 432o manual
TRENDnet
TRENDnet TEW-455APBO - 9dBi High Power Wireless Outdoor PoE Access... Specifications
HP
HP ProCurve 420 NA Product End-of-Life Disassembly Instructions
D-Link
D-Link DAP-3520 - AirPremier N Dual Band Exterior PoE Access... Quick installation guide
Proxim
Proxim Harmony user guide
Proxim
Proxim RangeLAN2 7500 user guide
