Colubris Networks WCB-200 Manual

WCB-200
Admin Guide

Release 5.2 (October 2007) 43-10-0201-04
Copyright © 2007 Colubris Networks, Inc. All rights reserved, including those to reproduce this
document or parts thereof in any form without written permission from Colubris Networks, Inc.
Colubris is a registered trademark, and the Colubris Networks logo, the tag line The Intelligent
Wireless Networking Choice and TriPlane are trademarks of Colubris Networks, Inc., in the United
States and other countries.
All other product and brand names are the service marks, trademarks, registered trademarks, or
registered service marks of their respective owners.
Changes are periodically made to the information herein; these changes will be incorporated into
new editions of the document.
Colubris Networks, Inc.
200 West Street Suite 300
Waltham, Massachusetts 02451-1121
UNITED STATES
Phone: [phone]
Fax: [phone]
Sales Information: [email protected]
Customer Support: suppor[email protected]
Training: [email protected]
www.colubris.com
The WCB-200 is a Wi-Fi Alliance authorized Wi-Fi CERTIFIED product.

WCB-200 Admin Guide 3Contents
Contents
Chapter 1
Introduction 5
About this guide................................................................................6
Important terms..........................................................................6
Conventions ................................................................................6
Related documentation ...............................................................7
Product overview ..............................................................................7
Key capabilities ...........................................................................7
Typical deployment .....................................................................8
Product registration ..........................................................................9
Contacting Colubris Networks...........................................................9
Chapter 2
WCB-200 hardware 11
The WCB-200..................................................................................12
Package contents......................................................................12
Antennas...................................................................................12
Ports .........................................................................................12
Console port .......................................................................13
Reset button .............................................................................13
Status lights..............................................................................13
Installation ................................................................................14
Chapter 3
Getting started 15
Overview .........................................................................................16
Configuration procedure .................................................................16
A. Configure your computer................................................16
B. Start the WCB-200..........................................................16
C. Perform these initial login tasks .....................................16
D. Configure the wireless network ......................................17
E. Accessing the WCB.........................................................18
Chapter 4
Working with the WCB-200 19
Using the management tool ............................................................20
Starting the management tool...................................................20
Customizing management tool settings ....................................20
Administrator authentication...............................................20
Login control ......................................................................21
Web server..........................................................................21
Security...............................................................................21
Auto-refresh........................................................................22
Web inactivity logout ..........................................................22
IP address configuration.................................................................22
Management IP address .................................................................23
Radio configuration ........................................................................24
Wireless range ..........................................................................24
Configuration ............................................................................25
Using station profiles to establish a connection..............................28
Adding or editing a profile.........................................................28
General ...............................................................................29
Wireless security ................................................................29
Key source ..........................................................................30
Encryption type...................................................................31
Viewing APs in the neighborhood...................................................31
Field descriptions......................................................................31
Handling unsupported traffic ..........................................................32
Connecting serial devices ...............................................................33
Configuring serial over TCP ......................................................33
TCP connection...................................................................34
Serial port ...........................................................................34
Port control.........................................................................35
Status .................................................................................35
DNS configuration ..........................................................................35
DNS servers........................................................................35
DNS advanced settings.......................................................35
Ethernet MAC cloning .....................................................................36
Act like a DHCP relay agent ......................................................37
IP forwarding ...........................................................................38
Using wireless security filters to restrict traffic...............................38
SNMP .............................................................................................39
Configuring SNMP settings.......................................................39
...........................................................................................39
Attributes ............................................................................39
Agent ..................................................................................40
Security...............................................................................40
Traps...................................................................................40
Managing certificates......................................................................40
802.1X certificates ....................................................................41
802.1x — Install TLS client certificate ................................41
802.1x — Manage TLS client certificates ...........................41
802.1x — Trusted CA certificates .......................................41
802.1x — Manage CA certificates.......................................42
Certificate stores.......................................................................42
Trusted CA certificate store.................................................42
Certificate and private key store..........................................43
Certificate usage .......................................................................44
Changing the certificate assigned to a service ....................45
About certificate warnings ..................................................45
Configuration file management .......................................................46
Manual configuration file management.....................................46
Backup configuration..........................................................46
Reset configuration.............................................................47
Restore configuration .........................................................47
Scheduled operations ...............................................................47
Managing the configuration file with cURL ...............................48
Uploading the configuration file ..........................................48
Downloading the configuration file .....................................49
Resetting the configuration to factory defaults ...................49
Firmware updates ...........................................................................50
Immediate update .....................................................................50
Scheduled update .....................................................................50
Updating firmware with cURL...................................................51
Appendix A
Regulatory information 53
Regulatory information ...................................................................54
USA: Federal Communications Commission (FCC)...................54
Caution! Exposure to Radio Frequency Radiation ...............54
Interference Statement .......................................................54
Canada: Industry Canada (IC) ...................................................55
Europe ......................................................................................55

WCB-200 Admin Guide 4Contents
Information for the user............................................................58
Health information ....................................................................58
Declarations of conformity........................................................59
Appendix B
Resetting to factory defaults 61
Introduction ....................................................................................62
Using the reset switch ..............................................................62
Using the management tool ......................................................62

Chapter 1: Introduction
1
Introduction
Contents
About this guide - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 6
Product overview - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 7
Product registration- - - - - - - - - - - - - - - - - - - - - - - - - - - - 9
Contacting Colubris Networks- - - - - - - - - - - - - - - - - - - - - - - 9

WCB-200 Admin Guide 61Introduction
About this guide
This guide explains how to install, configure, and operate the Colubris Networks WCB-200
(wireless client bridge) product.
Important terms
The following terms are used in this guide.
Conventions
This guide uses specific syntax when directing you to interact with the management tool user
interface. Refer to this image for identification of key user-interface elements and then the table
below showing example instructions:
WARNING: Warnings must be heeded to avoid death or physical injury and to avoid
hardware damage.
Caution: Cautions must be heeded to avoid loss of data or configuration
information and to avoid improperly-configured networks.
Term Description
AP Refers to access points including the Colubris MultiService Access Points
such as the MAP-630, MAP-320, and MAP-330.
Service controller Refers to the Colubris MSC-5000 and MSC-3000 series of controllers.
COS Colubris devices such as the WCB run the Colubris Operating System
(COS). References to specific versions of COS are made in the form “at
COS x.x” as in “WCB-200 at COS 5.2.”
Example directions in this guide What to do in the user interface
Select Wireless > Radio On the main menu select Wireless and
then select Radio on the sub-menu.
For Password specify secret22. In the field Password enter the text
secret22 exactly as shown.

WCB-200 Admin Guide 71Introduction
Related documentation
For information on related documentation, see the Colubris Networks Technical Documentation
Road Map, available on the Colubris Networks Documentation CD and for download on the
Colubris Networks extranet at http://extranet.colubris.com.
Product overview
The WCB-200 connects legacy Ethernet or serial communications stations to a wireless local area
network (WLAN) with simplicity and security. The WCB-200 enables you to deploy electronic cash
registers, servers, printers, and other devices in any location where a WLAN signal is available,
eliminating the time and expense of installing Ethernet cables for network access.
The WCB-200 integrates into a Colubris Intelligent Mobility Solution and is interoperable with any
IEEE 802.11 network infrastructure. The WCB-200 is not managed by a service controller.
Legacy client devices can be easily integrated into a WLAN using the WCB-200. The WCB-200
can bridge to the WLAN any Ethernet client device that runs a legacy networking protocol, thereby
extending wireless network access to a wide range of DECnet, IPX, Appletalk, and other devices.
An integrated serial-to-TCP/IP converter enables a TIA-232 asynchronous terminal device to
communicate with a compatible station on the network.
The WCB-200 includes support for all 2.4 GHz or 5 GHz channels that are available within your
regulatory domain. High-output power and antenna diversity ensure the best possible range and
throughput. External antenna connectors can be used to attach high-gain antennas for specialized
applications.
Strong enterprise-class layered security features protect the network from intrusions. The WCB-
200 radio interface includes an 802.1x supplicant for authentication by an access point and
RADIUS server. Hardware-accelerated encryption provides high performance when using WPA2
(AES), WPA, or WEP security. The Management Tool web interface is protected using SSL.
Bidirectional Layer 2 and Layer 3 filters enable you to control access to WCB-200 interfaces and
UDP port filtering controls access to network services.
The WCB-200 features comprehensive remote manageability, including full support as a managed
node in the Colubris Networks Management System (CNMS). For ease of deployment and
operation, you can configure the WCB-200 by way of an intuitive web user interface. Secure file
transfer protocols simplify software maintenance. Support for SNMP enables integrated
management using any enterprise network management system.
A rugged metal enclosure and mounting bracket provide installation flexibility. Its small size and
plenum-rated enclosure enable the WCB-200 to be installed on a desktop, or it can be hidden from
view in a ceiling.
Key capabilities
The Colubris Networks WCB-200 wireless client bridge offers the following key capabilities:
•Bridges an Ethernet LAN segment and a serial interface to a wireless network.
•Bridges Ethernet segments with up to 20 client stations.
•Converts a TIA-232 serial data stream to TCP/IP over WLAN.

WCB-200 Admin Guide 81Introduction
•Provides enhanced security using configurable Ethernet MAC and protocol filters.
•Ensures wireless network privacy using WPA2, WPA, and WEP security and high performance
hardware-assisted AES, TKIP, WEP, encryption.
•Provides 802.1x PEAP, TLS, EAP-FAST, and TTLS authentication.
•Offers a configurable 802.11 a/b/g radio with external antenna connectors.
•Provides excellent distance performance from its 100mw radio and capability for antenna
diversity.
•Managed as a node on the Colubris Network Management System (CNMS)
•Can be included as part of a Colubris Intelligent Mobility Solution.
•Features a plenum-rated metal enclosure.
Typical deployment
The WCB-200 provides a wireless bridge to an AP such as a MAP-630, MAP-320, or MAP-330.
This bridge can be used to:
•Connect up to 20 wired Ethernet devices to a wireless network. The WCB-200 provides MAC
address translation for all traffic, enabling each wireless station to have its own IP address and
to communicate across the network.
•Connect a serial device to a wireless network. The WCB-200 encapsulates the serial traffic in
TCP packets for transport across the wireless bridge to a remote device.
Note: The Point-of-Sale terminal to Internet access is managed by a third-party application
You can use both options at the same time, as shown in the following diagram.
AP

WCB-200 Admin Guide 91Introduction
In this deployment, the WCB-200 provides a wireless link for several Ethernet devices and a serial
Point-of-Sale terminal. An AP is used to provide the wireless network and the connection to a
router. The router provides access to the Internet and also acts as the DHCP server. It assigns IP
addresses to the WCB-200 and the two computers on the LAN. These addresses are all on the
same subnet, 192.168.1.x.
Product registration
To register your product, go to www.colubris.com. On the home page select Support > Product
Registration and follow the directions.
Contacting Colubris Networks
Customer support
[e-mail]
1-866-241-8324 (toll-free) United States and Canada
[phone] All other locations
Training
[email protected]
Sales
[e-mail]

WCB-200 Admin Guide 10 1Introduction

Chapter 2: WCB-200 hardware
2
WCB-200 hardware
Contents
The WCB-200 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 12

WCB-200 Admin Guide 12 2 WCB-200 hardware
The WCB-200
This chapter describes the WCB-200 hardware features and its installation.
Before permanently installing devices, it is recommended that you first become familiar with their
basic functionality as described in “Chapter 3: Getting started” on page 15.
Caution: You must use shielded Ethernet cables for all connections.
Package contents
WCB-200, two 2.4-GHz (2-dBi) / 5-GHz (2-dBi) dual-band omnidirectional antennas,
Documentation CD, power supply, mounting bracket, spring clip. The WCB-200 ships fully
assembled and ready to operate.
Antennas
The WCB-200 has a single radio with two antennas for diversity. The Main antenna connector is
located on the front panel and the Auxiliary antenna connector is located on the back panel.
The antenna connectors are reverse-polarity SMA jacks. Antennas or cable connectors must use
RP-SMA plugs. Antennas can be mounted directly on the WCB-200 or an external antenna can be
connected to the Main antenna connector.
Ports
The WCB-200 has a single 10/100 Mbps Ethernet port with an RJ-45 connector and a serial
(Console) port with a DB-9 connector.

WCB-200 Admin Guide 13 2 WCB-200 hardware
Console port
The WCB-200 provides a DB-9 (female) Console (serial) port connector. The DB-9 connector
(DCE) has pin assignments as follows:
To connect to a computer, use a standard (straight through) serial cable (male-to-female).
Reset button
Press and quickly release the button to reset the WCB-200. To reset to factory default settings,
press and hold the reset button until the status lights flash three times, then release. For more
information, see “Resetting to factory defaults” on page 61.
Status lights
The status lights provide the following information:
Light State Description
Power
Off The WCB-200 has no power.
Flashing The WCB-200 is starting up. If the power light
continues to flash after several minutes, it
indicates that the firmware failed to load. Reset
or power cycle the WCB-200. If this condition
persists, contact Colubris Customer Support at
www.colubris.com.
Solid The WCB-200 is fully operational.
Ethernet
Off Port is not connected or there is no activity.
Flashing Port is transmitting or receiving data.
On Stays on for a short period when the link is
established.
Wireless
Blinking rapidly The WCB-200 is searching for an access point.
Flashing Wireless port is transmitting or receiving data.

WCB-200 Admin Guide 14 2 WCB-200 hardware
Installation
WARNING: SURGE PROTECTION AND GROUNDING: If you plan on connecting an
outdoor antenna to the WCB-200 make sure that proper lightning surge
protection and grounding precautions are taken according to local electrical
code. Failure to do so may result in personal injury, fire, equipment damage,
or a voided warranty.
When mounting the WCB-200 on a wall or ceiling, ensure that the surface to which you attach the
WCB-200 and the fasteners you use can support at least .9 kg (2 pounds). Allow extra weight for
cables.
If needed, insert the spring clip into one of the screw holes in the mounting bracket as shown to
provide a tighter fit.
If the WCB-200 is installed inside a plenum, plenum-rated cables and attachment hardware must
be used. Only the WCB-200 and appropriate cabling can be located in the plenum.
Caution: Power supplies and PoE injectors available separately from Colubris
Networks cannot be installed inside a plenum.

Chapter 3: Getting started
3
Getting started
Contents
Overview - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 16
Configuration procedure - - - - - - - - - - - - - - - - - - - - - - - - - 16

WCB-200 Admin Guide 16 3 Getting started
Overview
This chapter walks you through the steps needed to initially configure the WCB-200.
Configuration procedure
Note: Do not power on Colubris Networks hardware until directed.
Caution: WIRELESS SECURITY: The WCB-200 ships with all wireless security options disabled.
Colubris strongly recommends that once the WCB-200 is installed, you enable a wireless
security option to properly safeguard the wireless network from intruders.
A. Configure your computer
1. Connect the LAN port on your computer to the port on the WCB-200.
Note: The WCB-200 supports automatic crossover detection. However, problems can
occur when connected to older 10BaseT-only interfaces. Therefore a crossover
cable may be needed when connecting to older network interface cards (NICs).
2. Configure your computer to use a static IP address in the range 192.168.1.2 to 192.168.1.254.
The subnet mask of 255.255.255.0 is entered automatically. Set the default gateway to
192.168.1.1, and DNS server to 192.168.1.1.
For example, in Windows XP, use Control Panel > Network Connections > Local Area
Connection > Properties > Internet Protocol (TCP/IP) > Properties.
3. Disable any wireless connection.
B. Start the WCB-200
Connect the power supply or use an 802.3af PoE injector to power on the WCB-200.
C. Perform these initial login tasks
Note: The following procedure assumes that you the have a Colubris AP set to factory
default accessible to the WCB-200. If you are using a third-party AP, make sure that
the parameters match those of the Colubris AP factory default, i.e.: SSID, open no
security, etc.
1. In a web browser, open page: https://192.168.1.1.
2. You are prompted to accept a security certificate. To continue, proceed as follows: At the
security certificate prompt, in Microsoft Internet Explorer 7, select Continue to this website; in
Firefox, select OK.
For information on how you can replace the Secure Sockets Layer (SSL) certificate that ships
with the WCB-200 with one of your own, see “Managing certificates” in the WCB-200 Admin
Guide.
3. On the Login page, specify admin for Username and Password and then select Login. The
WCB-200 management tool home page opens.
4. On the License Agreement page, read and then select Accept License Agreement.
5. On the registration page, select Register Later. You can register by selecting Maintenance >
Registration.

WCB-200 Admin Guide 17 3 Getting started
6. If presented with a Country prompt, choose the country in which this product will be used and
select Save.
7. At the password prompt it is recommended that you change the password. Specify the new
password and select Save. The management tool home page opens. In the illustration below,
the Wireless > Radio menu and sub-menu have been selected. Key elements of the
management tool user interface are defined as follows:
D. Configure the wireless network
1. Select Wireless > Station Profiles and click the Colubris Networks link. The Add/Edit
Stations profile page opens.
2. Select General > Enabled.
3. Change the WLAN name (SSID) to match that of the wireless network to which you want to
connect.
Note: The Profile name is just a friendly name used for display purposes.
4. Under Wireless security, select the Authentication type and Encryption type that are
required by the wireless network to which you want to connect.
Note: If the AP that you are trying to access does not broadcast its SSID, you will have
to select active scanning for the WCB-200 to connect to the AP.
5. Click Save. The WCB-200 should automatically establish a connection with the wireless
network and is now ready for operation.
By default, the WCB-200 operates as a DHCP client to obtain its IP address from a DHCP
server. The network must have a DHCP server. Broadband routers typically include a DHCP
server.
6. To check the connection to the wireless network, select Wireless > Overview. The Station
State should indicate Associated.

WCB-200 Admin Guide 18 3 Getting started
Note: With DHCP enabled, the IP address of the WCB-200 may change, and you will
lose connection to the management tool.To reestablish a connection, see
Accessing the WCB below.
E. Accessing the WCB
1. Configure your computer to obtain an IP address and DNS Server address automatically.
For example, in Windows XP, use Control Panel > Network Connections > Local Area
Connection > Properties > Internet Protocol (TCP/IP) > Properties, and make sure that
both the Obtain an IP address automatically and Obtain a DNS server address
automatically are both checked.
2. Connect your computer to the same network as the WCB-200.
3. Look in the DHCP server log for the Ethernet Base MAC address shown on the WCB-200 label
and take note of the corresponding IP address.
4. Relaunch the WCB-200 management tool, this time using: https://<IP address discovered in
previous step>, to access the WCB-200 management tool.
Note: It is also possible to assign a second, static, IP address to the WCB-200 for ease of
access to the management tool later. For information, see “Management IP address”
on page 23.

Chapter 4: Working with the WCB-200
4
Working with the WCB-200
Contents
Using the management tool- - - - - - - - - - - - - - - - - - - - - - - - 20
IP address configuration - - - - - - - - - - - - - - - - - - - - - - - - - 22
Management IP address - - - - - - - - - - - - - - - - - - - - - - - - - 23
Radio configuration - - - - - - - - - - - - - - - - - - - - - - - - - - - - 24
Using station profiles to establish a connection - - - - - - - - - - - - - - 28
Viewing APs in the neighborhood - - - - - - - - - - - - - - - - - - - - - 31
Handling unsupported traffic - - - - - - - - - - - - - - - - - - - - - - - 32
Connecting serial devices- - - - - - - - - - - - - - - - - - - - - - - - - 33
DNS configuration - - - - - - - - - - - - - - - - - - - - - - - - - - - - 35
Ethernet MAC cloning - - - - - - - - - - - - - - - - - - - - - - - - - - 36
Using wireless security filters to restrict traffic - - - - - - - - - - - - - - - 36
SNMP - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 36
Managing certificates - - - - - - - - - - - - - - - - - - - - - - - - - - - 40
Configuration file management - - - - - - - - - - - - - - - - - - - - - - 46
Firmware updates - - - - - - - - - - - - - - - - - - - - - - - - - - - - 50

WCB-200 Admin Guide 20 4Working with the WCB-200
Using the management tool
The management tool is a web-based interface to the WCB-200 that provides easy access to all
configuration and monitoring functions.
The management station is the computer that an administrator uses to connect to the management
tool.To act as a management station, a computer must have at least Internet Explorer 7.0 or
Mozilla Firefox 2.0.
Starting the management tool
To launch the management tool, point your web browser to the IP address of the WCB-200. By
default, the address is 192.168.1.1.
Customizing management tool settings
To customize management tool settings, select Management > Management tool.
Administrator authentication
Access to the management tool is protected by a username and password. The factory default
setting for both is admin. It is recommended that you change both at initial setup, and then
regularly thereafter.
Caution: If you forget the administrator password, the only way to access the
management tool is to reset the WCB-200 to factory default settings. For
information see “Resetting to factory defaults” on page 61.