Bluesocket BlueSecure 1800 User manual

BlueSecure™ Access Point 1800
Installation Guide
Bluesocket, Inc.
10 North Avenue
Burlington, MA 01803 USA
[phone]
www.bluesocket.com
Part Number: 870-01500-M00
Document Version: 2.0

ii
Copyright Notice
Copyright © 2008 Bluesocket, Inc. All rights reserved.
No part of this document may be reproduced in any form or by any means, electronic or manual, including
photocopying without the written permission of Bluesocket, Inc.
The products described in this document may be protected by one or more U.S. patents, foreign patents, or pending
patents.
This document is provided “as is” without warranty of any kind, either express or implied, including, but not limited to,
the implied warranties of merchantability, fitness for a particular purpose, or non-infringement. This publication could
include technical inaccuracies or typographical errors. Changes are periodically added to the information herein; these
changes will be incorporated in new editions of the document. Bluesocket inc. may make improvements or changes in the
products or the programs described in this document at any time.
Trademarks
Bluesocket, The Bluesocket Logo, Secure Mobility, BlueView, BlueSecure, HighDataDensity, DynamicRF, and CellularLAN
are trademarks or registered trademarks of Bluesocket, Inc.
All other trademarks, trade names and company names referenced herein are used for identification purposes only and
are the property of their respective owners.
Publication Date: December 16, 2008

BlueSecure™ Access Point 1700 Installation Guide iii
Contents
Overview .................................................................................................1
Familiarizing Yourself with the BSAP Hardware ............................................2
Fixed Antennas......................................................................................3
LED Indicators .......................................................................................3
Ethernet/PoE Connector .........................................................................4
Reset Button ..........................................................................................4
Kensington Security Slot..........................................................................4
Provisioning Your Bluesocket WLAN for BSAPs .............................................4
Deploying BSAPs on the Same Layer-2 Subnet as the BSC ..........................5
Deploying BSAPs with Layer-3 Connectivity to the BSC...............................6
Selecting a BSAP Installation Location..........................................................7
Mounting the BSAP....................................................................................7
Dropped Ceiling Tool requirements..........................................................8
Conventional Ceiling Tool requirements....................................................8
Mounting Kit Contents ............................................................................8
Dropped Ceiling Kit Installation ...............................................................9
Ceiling Kit Installation...........................................................................13
Mounting on a Wall.............................................................................17
Connecting and Powering the BSAP ..........................................................19
Using the BSAP Command Line Interface (CLI).............................................20
Accessing the BSAP CLI ........................................................................20
Navigating the BSAP CLI ......................................................................20
BSAP Default Configuration...................................................................21
Setting the BSAP and Home BSC IP Addresses Using the CLI.....................22
Using the BSAP’s Site Survey Mode .......................................................23
General Specifications.............................................................................24
Declarations of Conformity and Regulatory Information................................27
Safety Warnings for BlueSecure™ Access Point 1800 .................................31

iv
Contents

BlueSecure™ Access Point 1800 Installation Guide 1
Overview
The BlueSecure Access Point 1800 is a next-generation, “thin” access point that
works in conjunction with BlueSecure Controllers (BSCs) for enterprise wireless
LAN (WLAN) deployments. The BlueSecure Access Point 1800 features dual
radios supporting 802.11a/n and 802.11b/g/n with an embedded MIMO
antenna panel under the top cover of the AP.
BSAPs are simple to configure and require only minimal provisioning to make
them fully operational on a WLAN secured and managed by a BlueSecure
Controller
BSAPs can be directly attached to any existing Layer-2 or Layer-3 Ethernet switch
and communicate with the BSC across any subnet boundary. Once the BSAP has
discovered and established Layer-2 or Layer-3 communication with its home (i.e.,
host) BlueSecure Controller, advanced configuration and provisioning may be
applied either to individual BSAPs or globally across the entire WLAN using the
BSC’s web-based Administrator Console.
Once a BlueSecure Access Point has downloaded its configuration from its home
BlueSecure Controller, the BSAP initializes its radios and begins servicing clients.
This guide provides complete installation procedures for your BSAP including:
• familiarizing yourself with the BSAP hardware
• provisioning your Bluesocket WLAN for BSAPs
• selecting a BSAP installation location
• connecting and powering the BSAP
• using the BSAP command line interface (CLI)
Figure 1: BSAPs Automatically Discover BSCs Across L2/L3 Networks

2
Familiarizing Yourself with the BSAP Hardware
Figure 2 illustrates the BSAP hardware. Familiarize yourself with the labeled
components before attempting to install the BSAP.
Figure 2: BSAP Hardware Components

Familiarizing Yourself with the BSAP Hardware
BlueSecure™ Access Point 1800 Installation Guide 3
Fixed Antennas
The BSAP-1800 utilizes an embedded MIMO antenna panel under the top cover
of the AP for wireless communications. There are three elements for each band
and all elements are used for both transmit and receive operations. The BSAP-
1800 also leverages the embedded Atheros radios and antenna panel to support
high-throughput communications with mobile devices.
LED Indicators
The following grouping of LED indicators is located on the top of the BSAP-1800
housing:.
The two status LEDs together indicate the following software operational modes,
depending on whether each LED is off, on, or blinking:
Link1 refers to the 802.11b/g/n Link and Link 2 refers to the 802.11a/n Link.
When the LED is on, it indicates that the unit is on and the radio active (note that
when unit is booting, the LED defaults to on even though the radio is disabled).
Activity 1refers to 802.11b/g/n Activity and Activity 2 refers to 802.11a/n
Activity. When the LED is on, it indicates data activity on the Ethernet link.
The BSAP does not have a power switch. It is powered on when connected to an
optional external AC power adapter (BSAP-PWR-000-00-0), and the power
adapter is connected to a power source. The BSAP power adapter automatically
adjusts to any voltage between 100-240 volts at 50 or 60 Hz. No voltage range
settings are required.
The BSAP may also receive Power over Ethernet (PoE) from a model BSC-600/
1200 Controller, switch or other network device that supplies power over the
network cable based on the IEEE 802.3af standard.
Table 1: BSAP Status LEDs
Left Status
LED
Right Status
LED Indicates
Off Off Failure
On Off Waiting for IP Address
Blinking Off BSC discovery in progress
On On System is operational
Blinking Blinking Software download in progress

4
Ethernet/PoE Connector
The BSAP-1800 has one auto-sensing 10BASE-T/100BASE-TX/1000BaseT RJ-45
connector that can be attached directly to 10BASE-T/100BASE-TX/1000BaseT
switches to provide a full-duplex link. These segments must conform to the IEEE
802.3 or 802.3u specifications.
This connector uses an MDI (i.e., internal straight-through) pin configuration. You
can use straight-through twisted-pair cable to connect this port to most network
interconnection devices such as a switch or router that provide MDI-X ports.This
connector will sense and correct wiring polarity, so no crossover cable is
required.
This connector uses an MDI (i.e., internal straight-through) pin configuration. You
can use straight-through twisted-pair cable to connect this port to most network
interconnection devices such as a switch or router that provide MDI-X ports.
The BSAP appears as an Ethernet node and performs a bridging function by
moving packets from the wired LAN to remote workstations on the wireless
infrastructure.
The Ethernet/PoE RJ-45 connector also supports Power over Ethernet (PoE) based
on the IEEE 802.3af standard.
802.3af specifies Power over Ethernet for “mid-span”, where a PoE injector are
located in the path between the network and the AP, as well as “PSE”, where the
power is supplied by the network switch the AP is attached to. Mid-span devices
typically provide power on the unused pairs (4+5 & 7+8) and only provide
100Mbps maximum throughput. To realize the full benefit of 802.11n, the BSAP-
1800 should be connected to a Gigabit Ethernet PoE switch or injector, such as
Bluesocket model BSAP-POE-001-00-0.
Reset Button
Use this button to reset the BSAP or restore its factory default configuration. If you
hold down the button for less than 5 seconds, the BSAP will perform a hardware
reset. If you hold down the button for 5 seconds or more, any configuration
changes you may have made are removed, and the factory default configuration
is restored to the BSAP.
Kensington Security Slot
The BSAP includes a Kensington security slot on the side panel. You can prevent
unauthorized removal of the BSAP by wrapping a Kensington security cable (not
provided) around an unmovable object, inserting the lock into the slot, and
turning the key.
Provisioning Your Bluesocket WLAN for BSAPs
There are prerequisites that must be met before deploying BSAPs in a live
network environment. These prerequisites ensure that the BSAPs are able to
discover and connect to a host BlueSecure Controller. Implementing these
prerequisites also relieves you from the need to manually configure each
deployed BSAP.

Provisioning Your Bluesocket WLAN for BSAPs
BlueSecure™ Access Point 1800 Installation Guide 5
The deployment prerequisites for BSAPs are:
•BSAP IP Address - Each BSAP requires a unique IP address.
•Host BlueSecure Controller IP Address - Each BSAP also needs the IP
address of the host BSC to which it will connect and from which it will obtain
its software image and configuration.
This section describes how to provision your Bluesocket WLAN when deploying
BSAPs:
• On the same Layer-2 subnet as the BSC
• Across a routed network with Layer-3 connectivity to the BSC
Deploying BSAPs on the Same Layer-2 Subnet as the BSC
If the BSAPs are on the same subnet as the home BlueSecure Controller as shown
in Figure 3, you can run a DHCP server on the BSC to manage IP address
assignment to BSAPs. In this scenario, the BlueSecure Controller must be the only
DHCP server for the subnet.
Alternatively, you can configure the BlueSecure Controller to run a DHCP relay
agent to relay DHCP communications between the BSAPs and a DHCP server on
your network.
When you run a DHCP server or a DHCP relay agent on the BSC to assign IP
addresses to BSAPs on the managed side, the BSC will also pass its IP address to
the BSAPs automatically using vendor-specific option 43. The BSAP will then
connect to the IP provided by the DHCP vendor option as its host BSC.
See the
BlueSecure Controller Setup and Administration Guide for detailed DHCP
server and DHCP relay agent configuration procedures.
In this deployment scenario, simply connect and power on the BSAPs. They will
automatically discover and communicate with their home BSC.
Figure 3: Deploying BSAPs on the Same Layer-2 Subnet as the BSC
Run a DHCP Server or
a DHCP Server Relay
Agent on the BSC
BSAPs will Automatically
Discover and Communicate
with their Home BSC

6
Deploying BSAPs with Layer-3 Connectivity to the BSC
You can also deploy BSAPs on a routed network with Layer-3 connectivity to the
BSC as shown in Figure 4.
In this deployment scenario, you must ensure that each BSAP is able to
communicate with the BSC across the routed network by verifying that:
• There are no NAT devices between the BSAPs and the BSC
• Protocol 97, UDP Port 53, and TCP/UDP Port 33333 traffic is allowed
between the BSAPs and the BSC
Each BSAP will receive its IP address from your existing network DHCP server. An
exception case is if the BSAP is beyond a managed side router, running IP
helper. Then the BSAP will receive its IP address from the BSC, and be able to
discover it without any additional configuration.
The BSAP also needs the IP address of the home BSC to which it will connect and
from which it will obtain its software image and configuration. Again, this is not
needed if the BSAP is on the managed side getting a relayed IP address from the
BSC. You can provide the home BSC IP address to a BSAP using one of the
following methods:
•DHCP Server Option 43 - You can manually configure the DHCP server
on your network to send BSC IP addresses to BSAPs using DHCP vendor-
specific option 43.
In DHCP requests sent from the BSAP, the BSAP uses option 60 Vendor class
identifier with a value of BlueSecure.AP1500 to identify itself to the DHCP
server (Note that all BSAPs —1500,1540,1800 —identify as AP1500 for
option 43).
Refer to the documentation supplied with your DHCP server when configuring
vendor-specific option 43
•DNS Server Configuration - BSAPs are factory configured with
apdiscovery as the DNS hostname. You can configure a DNS server on
your network with an entry for apdiscovery with the home BSC Controller IP
address as the resolution.
Figure 4: Deploying BSAPs Across a Routed Network
Network
DHCP
Server
Network
DNS
Server
BSAPs Receive their IP
Addresses from
Network DHCP Server
BSAPs Receive Home BSC
IP Address Using DHCP
Option 43 or DNS

Selecting a BSAP Installation Location
BlueSecure™ Access Point 1800 Installation Guide 7
To configure this, add a NAME record to the DNS server for apdiscovery (at
the domain server that the BAP will receive). Point this name to one or more
BSC IP addresses (managed, protected or VLAN depending on the network
configuration).
So for example, if there are two BSCs (192.168.100.23 and
192.168.100.28), and the domain is customer.com, add two NAME records
to customer.com, for the name apdiscovery.customer.com. One should
resolve to 192.168.100.23 and one to 192.168.100.28. PTR (i.e., pointer)
records are not needed for this portion of discovery.
Selecting a BSAP Installation Location
BlueSecure Access Points should be positioned for maximum throughput and
range between other BSAPs and wireless client devices. Normally, you should
locate the BSAP on the ceiling away from obstructions.
Range and performance are dictated by the distance between the BSAP and
client radios, and by obstacles that may be present in a specific building or office
environment. The following positioning guidelines are suggested:
• Document all the BSAPs and client devices you wish to include in your
wireless network. Record the MAC address, serial number, and placement of
each BSAP.
• Wired LAN and power connections must be available for each BSAP at the
desired installation location. If a power outlet is not available near the access
point, mid-span power inserters are recommended.
• If building blueprints or floor plans are available, use them to define potential
client device locations and likely roaming areas.
• Identify possible obstacles or sources of interference that could affect signal
strength (for example, walls, metal objects).
• Install the BSAP in an area where large steel structures such as beams, pillars,
shelving units, bookcases, and filing cabinets do not obstruct radio signals to
and from the BSAP.
• Once BSAPs have been installed and configured, use site survey and
monitoring utilities supplied with the client adapters to test signal strength at
various locations. Modify the positioning of the BSAPs and client stations as
required for optimum performance.
Mounting the BSAP
The BSAP-1800 contains a panel antenna that was designed to accommodate
either ceiling or wall mount installations. The panel antenna’s radiation pattern is
focused completely in front of the antenna rather than behind the unit.
In order to provide even coverage of an area similar to an omni-directional
antenna, it is recommended that the antenna is installed in the ceiling where the
energy is pushed in all directions toward the horizon and below the unit.
Optional ceiling mount kit BSAP-MNT-000-00-0 provides the capability to mount
the BSAP-1800 to both dropped and conventional ceilings.

8
If the BSAP-1800 is installed on a wall, the antenna is more directional than omni-
directional. The energy is mainly pushed in the direction that the antenna is
facing and very little energy (if any) is pushed behind the unit. In this orientation,
more BSAP-1800s are required to provide a uniform coverage area similar to
deployments of sector antennas. A standard wall mount bracket is included with
each BSAP-1800.
Dropped Ceiling Tool requirements
1. Utility Knife
2. Phillips Screwdriver
3. Masking Tape
4. Tile Cut-Out Template (provided)
5. Metal Ruler or Straight-Edge.
Conventional Ceiling Tool requirements
1. Phillips Screwdriver
2. Drill
3. 3/16" Drill Bit
4. Hammer
5. Masking Tape
6. Hole location Template (provided)
7. Pencil
Mounting Kit Contents
The following figure depicts the contents of the mounting kit. Refer to the table
below the figure for a description of each numbered item shown in the figure.

Mounting the BSAP
BlueSecure™ Access Point 1800 Installation Guide 9
Dropped Ceiling Kit Installation
1. Remove tile from suspended ceiling. Turn tile so you are looking at the back
side. Position the template provided, and tape it to the back of the ceiling tile.
Using a utility knife and a metal ruler, cut out the hole needed for the BSAP-
1800 unit. The cut-out tile should look like the picture below.
2. Fasten the Rear Mounting Plate to the bottom of the BSAP-1800 unit using the
4 #6x5/16" screws provided. Over-tightening of screws will cause stripping
of threads formed in plastic (see Figure 7).
3. Slide the Trim Plates into the grooves of the BSAP-1800 unit as shown in
Figure 8. Slide each half of the trim plate until the halves click into place.
Figure 5: Mounting Kit Contents
Item Description Qty.
1 Ceiling Tile, Trim Plate 2
2 Rear Mounting Plate 1
3 Side Mounting Bracket 2
4 #6 x 5/16" Screw, Phillips Pan Hd 4
5 #6-32x1/4" Screw, w/Ext Tooth Washer
(Used only when mounting directly to ceiling) 4
6 #8x3/4" Sheet Metal Screws 4
7PlasticAnchors 4

10
4. Turn BSAP-1800 unit over and place ceiling tile over the unit as shown in
Figure 9. The Trim Plates will aide in tiles correct position. Next attach the
Figure 6: Finished Side of Tile
Figure 7: Installing Rear Mounting Plate

Mounting the BSAP
BlueSecure™ Access Point 1800 Installation Guide 11
Side Mounting Brackets to the Rear Mounting Plate using the 6-32 screws
with the external tooth washers attached.
5. Bring entire assembled kit (including tile) to suspended ceiling and attach
LAN cable into BSAP-1800 unit as shown in Figure 10. If cable is tight, shift
unit until cable has enough relief. After cable is wired in, place ceiling tile
back to desired location. The assembly may need to shift so trim plate will
cover all openings in the ceiling tile.
Figure 8: Trim Plate Installation
Figure 9: Side Mounting Bracket Installation

12
Figure 10: Finished Side of Tile
Figure 11: BSAP-1800 Installed

Mounting the BSAP
BlueSecure™ Access Point 1800 Installation Guide 13
Ceiling Kit Installation
1. To install plastic anchors, mark the ceiling using the template provided. Next
drill 4 pilot holes for the plastic anchors.
Figure 12: Plastic Anchor holes

14
2. Figure 13Push Anchors into holes until they are flush. Attach the side brackets
to the ceiling using the 1" sheet metal screws. Check the alignment of the side
brackets by sliding the rear plate between the two brackets. Once a good fit
has been established, tighten side brackets to ceiling.
Figure 13: Side Bracket Installation
Use this plate to check fit

Mounting the BSAP
BlueSecure™ Access Point 1800 Installation Guide 15
3. Fasten the Rear Mounting Plate to the bottom of the BSAP-1800 unit using the
4 #6x5/16" screws provided as shown in Figure 14. Over-tightening of
screws, will cause stripping of threads formed in plastic.
Figure 14: Installing Rear Mounting Plate

16
4. Attach BSAP-1800, with rear plate installed, to the side plates as shown in
Figure 15. Secure the assembly using #6x1/4" screws with tooth washers.
Figure 15: Attaching Rear Plate to Side Brackets