Compex NetPassage WPP54AG User manual

USER’S MANUAL
W
PP54
A
G
WPP54AG
WPP54AG
WPP54AG
WPP54AG
COMPEX NETPASSAGE SERIES
Manual Number: U-0486-V1.2C

ii
© Copyright 2006 Compex Systems Pte Ltd
All Rights Reserved
This document contains information, which is protected by copyright.
Reproduction, adaptation or translation without prior permission is prohibited,
except as allowed under the copyright laws.
Trademark Information
Compex®, ReadyLINK®and MicroHub®are registered trademarks of Compex,
Inc. Microsoft Windows and the Windows logo are the trademarks of Microsoft
Corp. NetWare is the registered trademark of Novell Inc. All other brand and
product names are trademarks or registered trademarks of their respective
owners.
Notice: Copyrights © 2006 by Compex, Inc. All rights reserved. Reproduction,
adaptation, or translation without prior permission of Compex, Inc. is prohibited,
except as allowed under the copyright laws.
Manual Revision by Daniel
Manual Number: U-0478-V1.2 Version 1.2 October 2006
Disclaimer
Compex, Inc. provides this manual without warranty of any kind, expressed or
implied, including but not limited to the implied warranties of merchantability
and fitness for a particular purpose. Compex, Inc. may make improvements
and/or changes to the product and/or specifications of the product described
in this manual, without prior notice. Compex, Inc will not be liable for any
technical inaccuracies or typographical errors found in this guide. Changes are
periodically made to the information contained herein and will be
incorporated into later versions of the manual. The information contained is
subject to change without prior notice.
Your Feedback
We value your feedback. If you find any errors in this user’s manual, or if you
have suggestions on improving, we would like to hear from you. Please contact
us at:
Fax: [phone]
Email: [email protected]

iii
FCC NOTICE
This device has been tested and found to comply with the limits for a Class B
digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to
provide reasonable protection against harmful interference in a residential
installation. This device generates, uses and can radiate radio frequency
energy and, if not installed and used in accordance with the instructions, may
cause harmful interference to radio communications. However, there is no
guarantee that interference will not occur in a particular installation. If this
device does cause harmful interference to radio or television reception, the
user is encouraged to try to correct the interference by one or more of the
following measures:
• Reorient or relocate the receiving antenna.
• Connect the computer into an outlet on a circuit different from that to
which the receiver is connected.
• Increase the separation between the computer and receiver.
• Consult the dealer or an experienced radio/TV technician for help.
Caution: Any changes or modifications not expressly approved by the grantee
of this device could void the user's authority to operate the equipment.
FCC Compliance Statement: This device complies with Part 15 of the FCC Rules.
Operation is subject to the following two conditions:
This device may not cause harmful interference, and
This device must accept any interference received, including interference that
may cause undesired operation.
Products that contain a radio transmitter are labelled with FCC ID and may also
carry the FCC logo.
Caution: Exposure to Radio Frequency Radiation.
To comply with the FCC RF exposure compliance requirements, the following
antenna installation and device operating configurations must be satisfied:
a. For configurations using the integral antenna, the separation distance
between the antenna(s) and any person’s body (including hands, wrists,
feet and ankles) must be at least 2.5cm (1 inch).
b. For configurations using an approved external antenna, the separation
distance between the antenna and any person’s body (including hands,
wrists, feet and ankles) must be at least 20cm (8 inch).
The transmitter shall not be collocated with other transmitters or antennas.

iv
ICES 003 Statement
This Class B digital apparatus complies with Canadian ICES-003.
Declaration of Conformity
Compex, Inc. declares the following:
Product Name: Compex Wireless-AG 54Mbps XRTM Managed Access Point
(compatible with Compex PoE Plus)
Model No.: Compex WPP54AG conforms to the following Product Standards:
Radiated Emission Standards:
ETSI EN 300 328-2: July 2000; FCC: 47 CFR Part 15, Subpart B, ANSI C63.4-1992; 47
CFR Part 15, Subpart C (Section 15.247), ANSI C63.4-1992.
Conducted Emission Standards:
ETS 300 826: Nov. 1997.
Immunity Standards:
IEC 801-2; IEC 801-3; IEC 801-4
Low Voltage Directive:
EN 60 950:1992+A1: 1993+A2: 1993+A3; 1995+A4; 1996+A11: 1997
Therefore, this product is in conformity with the following regional standards:
FCC Class B ⎯following the provisions of FCC Part 15 directive; CE Mark ⎯
following the provisions of the EC directive.
This Class B digital apparatus complies with Canadian ICES-003.

v
Technical Support Information
The warranty information and registration form are found in the Quick Install
Guide.
For technical support, you may contact Compex or its subsidiaries. For your
convenience, you may also seek technical assistance from the local distributor,
or from the authorized dealer/reseller that you have purchased this product
from. For technical support by email, write to [email protected].
Refer to the table below for the nearest Technical Support Centres:
Technical Support Centres
Contact the technical support centre that services your location.
U.S.A., Canada, Latin America and South America
Write
Compex, Inc.
840 Columbia Street, Suite B
Brea, CA 92821, USA
Call
Fax
Tel:
Tel:
Fax:
[phone] (8 a.m.-5 p.m. Pacific time)
[phone] (Ext.122 Technical Support)
[phone]
Asia, Australia, New Zealand, Middle East and the rest of the World
Write
Compex Systems Pte Ltd
135, Joo Seng Road #08-01, PM Industrial Building
Singapore 368363
Call
Tel:
Tel:
Fax:
(65) 6286-1805 (8 a.m.-5 p.m. local time)
(65) 6286-2086 (Ext.199 Technical Support)
(65) 6283-8337
Internet
access/ E-mail: FTPsite: [email protected] ftp.compex.com.sg
Website: http://www.cpx.com or http://www.compex.com.sg
Fax

vi
About This Document
The product described in this document, Wireless Access Point, Compex
WPP54AG is a licensed product of Compex Systems Pte Ltd. This document
contains instructions for installing, configuring and using Access point. It also
gives an overview of the key applications and the networking concepts with
respect to the product.
This documentation is for both Network Administrators and the end user who
possesses some basic knowledge in the networking structure and protocols.
It makes a few assumptions that the host computer has already been installed
with TCP/IP and already up & running and accessing the Internet. Procedures
for Windows 98SE/ME/2000/XP operating systems are included in this document.
However, for other operating system, you may need to refer to your operating
system’s documentation for networking.
How to Use this Document
This document may become superseded, in which case you may find its latest
version at: http://www.compex.com.sg
The document is written in such a way that you as a user will find it convenient
to find specific information pertaining to the product. It comprises of chapters
that explain in details on the installation and configuration of Compex
WPP54AG.
Firmware
This manual is written based on Firmware version 1.48.

vii
Conventions
In this document, special conventions are used to help and present the
information clearly. The Wireless Access Point with PoE is often referred to as
WPP54AG or access point or AP in this document. Below is a list of conventions
used throughout.
NOTE
This section will consist of important features or instructions
CAUTION
This section concerns risk of injury, system damage or loss of data
WARNING
This section concerns risk of severe injury
References on Menu Command, Push Button, Radio Button, LED and Label
appear in Bold. For example, “Click on Ok.”

1
Copyrights © 2006 Compex Systems Pte Ltd ................................................................ i
Trademark Information ..................................................................................................... i
Disclaimer............................................................................................................................ i
Your Feedback...................................................................................................................i
FCC NOTICE........................................................................................................................ii
Declaration of Conformity ...............................................................................................ii
Technical Support Information.......................................................................................iii
About This Document......................................................................................................iv
How to Use this Document............................................................................................. iv
Firmware............................................................................................................................iv
Conventions......................................................................................................................iv
CHAPTER 1: PRODUCT OVERVIEW..............................................5
Introduction...............................................................................................................5
Features and Benefits..............................................................................................7
When to use which mode......................................................................................9
Access Point Mode............................................................................................9
Access Point Client Mode ..............................................................................10
Point to Point Mode.........................................................................................11
Point to Multiple point Mode .........................................................................12
Wireless Routing Client Mode ........................................................................13
Gateway Mode................................................................................................14
Wireless Adapter Mode ..................................................................................16
CHAPTER 2: HARDWARE INSTALLATION...................................17
Setup Requirements ..............................................................................................17
Setting Up Your WPP54AG....................................................................................17
Method One: Mounting on the Wall ............................................................18
Method Two: Mounting on the Pole...................................................................21
CHAPTER 3: ACCESS TO WEB-BASED INTERFACE ...................24
Access to the Web interface with uConfig.......................................................24
Manual access to web-based interface via Internet Explorer......................28

2
CHAPTER 4: COMMON CONFIGURATION ..............................33
Management Port Setup......................................................................................33
Setting up your LAN .........................................................................................34
To view the active DHCP leases....................................................................37
To reserve specific IP addresses for predetermined DHCP clients..........38
WLAN Setup ............................................................................................................41
To configure the Basic setup of the wireless mode ...................................42
To configure the Security setup of the wireless mode...............................57
To configure the Advanced setup of the wireless mode.........................57
Statistics..............................................................................................................59
WAN Setup..............................................................................................................66
Telnet/SSH Setup.....................................................................................................74
TELNET Command Line Interface..................................................................77
SSH Command Line Interface........................................................................78
Web Management Setup ....................................................................................80
SNMP Setup.............................................................................................................81
STP Setup..................................................................................................................82
MAC Filtering...........................................................................................................88
Add a MAC address to the MAC Address List............................................89
Delete a MAC address from all access points. ..........................................92
Delete a MAC address from individual access point................................94
Edit MAC address from the MAC Address List............................................96
CHAPTER 5: WLAN SECURITY.....................................................98
How to set up WEP.................................................................................................99
How to set up WPA-Personal..............................................................................101
How to set up 802.1x/RADIUS.............................................................................103
How to set up WPA Enterprise............................................................................105
CHAPTER 6: WIRELESS EXTENDED FEATURES ..........................108
Access Control – The Wireless Pseudo VLAN...................................................108
Wireless Pseudo VLAN Per Node .................................................................109
Wireless Pseudo VLAN Per Group................................................................112
Wireless Setup - The Wireless Distributed System.......................................116
Long Distance Parameters...........................................................................122

3
CHAPTER 7: ADVANCED CONFIGURATION..........................125
Routing...................................................................................................................125
To configure Static Routing of Compex WPP54AG .................................126
NAT..........................................................................................................................127
To configure Virtual Servers based on De-Militarized Zone Host ...........128
To configure Virtual Servers based on Port Forwarding ..........................130
To configure Virtual Servers based on IP Forwarding ..............................133
Bandwidth Control...............................................................................................135
To enable or disable Bandwidth Control...................................................135
To configure WAN Bandwidth Control Setting .........................................136
To configure LAN Bandwidth Control Setting ...........................................137
Remote Management........................................................................................139
To set up Remote Management.................................................................139
Parallel Broadband..............................................................................................140
To enable Parallel Broadband on Compex WPP54AG...........................141
Email Notification.................................................................................................142
Static Address Translation...................................................................................144
DNS Redirection ...................................................................................................146
To enable/disable DNS Redirection............................................................148
Dynamic DNS Setup ............................................................................................148
To enable/disable Dynamic DNS Setup.....................................................149
To manage Dynamic DNS List......................................................................150
CHAPTER 8: SECURITY CONFIGURATION ...............................155
Packet Filtering.....................................................................................................155
To configure Packet Filtering........................................................................155
URL Filtering ...........................................................................................................159
To configure URL Filtering..............................................................................159
Firewall Configuration .........................................................................................160
To configure SPI Firewall................................................................................160
Firewall Logs..........................................................................................................164
To view Firewall Logs......................................................................................164
CHAPTER 9: SYSTEM UTILITIES ...................................................165
Using the SYSTEM TOOLS Menu..........................................................................165
Ping Utility.........................................................................................................165
Syslog................................................................................................................166
System Identity................................................................................................167

4
System Clock Setup.......................................................................................168
Firmware Upgrade.........................................................................................169
Backup or Reset Settings ..............................................................................171
Reboot System................................................................................................174
Change Password..........................................................................................175
Logout..............................................................................................................176
Using the HELP menu...........................................................................................177
Get Technical Support..................................................................................177
About System..................................................................................................178
APPENDIX I: FIRMWARE RECOVERY .......................................179
APPENDIX II: TCP/IP CONFIGURATION...................................181
For Windows 95/98/98SE/ME/NT ..................................................................181
For Windows XP/2000.....................................................................................184
APPENDIX III: PANEL VIEWS & DESCRIPTION..........................187
APPENDIX IV: COMMAND LINE INTERFACE COMMANDS...189
APPENDIX V: TECHNICAL SPECIFICATIONS ...........................194

5
C
Ch ha ap pt te er r 1 1: : P Pr ro od du uc ct t O Ov ve er rv vi ie ew w
I
IN
NT TR RO OD DU UC CT TI IO ON N
The WPP54AG Wireless-AG 54Mbps XR™Outdoor Access Point is a high-
performance AP designed for enterprise and outdoor users. WPP54AG is
compatible with IEEE 802.11a/b/g and supports high-speed data
transmission of up to 54Mbps at in both the 2.4GHz and the 5GHz
frequency bands. The in-built Atheros®Super-AG technology provides
higher throughput in the 802.11a 5GHz band versus 802.11g’s congested
2.4GHz band and the ability to operate in at least 19 non-overlapping
channels as compared to the 3 non-overlapping channels on 802.11g
standard. This equips WPP54AG with network robustness, stability and
wider network coverage. Housed in a weatherproof casing, WPP54AG is
designed to withstand any outdoor climatic conditions, making it the
ideal solution for outdoor applications.
The access point is capable of operating in 7 modes: Access Point,
Access Point Client, Point-to-Point, Point-to-Multi Point, Wireless Routing
Client, Gateway, and Wireless Adapter. This makes it suitable for a wide
variety of wireless applications, including long-distance deployments.
Designed with an external SMA connector, the WPP54AG can be used
for a wide variety of wireless applications and provides a wider coverage
for your network. The integrated WDS (Wireless Distribution System)
feature creates a virtually larger wireless network infrastructure by linking
up other access points and extending network coverage. WPP54AG also
includes a DHCP server that automatically assigns IP addresses to wireless
clients. Moreover, its integrated Power over Ethernet (PoE) allows the
access point to be used in areas where power outlets are not readily
available.

6
Connecting to a wireless LAN without adequate security measures
generally opens up your network to any casual snoopers. To protect your
security and privacy, WPP54AG is armed with many enhanced wireless
security features such as Wi-Fi Protected Access (WPA), MAC Address
Filtering, IEEE 802.1x Authentication, 64/128-bit WEP (Wired Equivalent
Privacy) and WPA2 Advanced Encryption Standard (AES) encryption
feature to ensure privacy for the heterogeneous mix of users within the
same wireless LAN, while maintaining full access to the establishment’s
resources.
WPP54AG also incorporates unique features from Compex such as – the
Parallel Broadband feature that allows bandwidth aggregation and fail-
over redundancy capability. It uses Spanning Tree Protocol (STP) that
provides the wireless network with extra redundancy and reliability. The
network will auto-reconfigure when there are changes to the network
connections and the Pseudo VLAN feature that enables the creation of
wireless isolated nodes or workgroups of wireless clients to increase
network privacy in a public access wireless LAN. Long-Range parameter
fine-tuning provides the access point with the ability to auto-calculate
parameters such as slot time, ACK time-out and CTS time-out to achieve
a longer range. HTTPS features additional authentication and encryption.
And Telnet which allows remote connection, and SSH which provides a
secure host connection.

7
F
FE
EA AT TU UR RE ES S A AN ND D B
BE
EN NE EF FI IT TS S
Compex WPP54AG has been designed for high performance and offers a rich
suite of features, with which you should acquaint yourself to be able to exploit
your Compex WPP54AG’s full potential.
•
• W Wi ir re el le es ss s D Di is st tr ri ib bu ut ti io on n S Sy ys st te em m ( (W WD DS S) )
This feature allows linking of several access points, virtually creating a larger
network infrastructure that allows mobile users to roam wirelessly, while still
being able to access network resources.
•
• W Wi ir re el le es ss s P
Ps se eu ud do o V VL LA AN N
The Compex unique Wireless Pseudo VLAN technology is a feature that
allows wireless clients to be segmented individually or into workgroups, thus
blocking access to another user’s/group’s PCs, and enhancing the privacy
of the wireless clients. This is especially useful in public hotspot deployment.
•
• H Hi ig gh hl ly y S Se ec cu ur re ed d W Wi ir re el le es ss s N Ne et tw wo or rk k
The access point supports the highest available wireless security standard:
Wi-Fi Protected Access 2. The wireless users now enjoy the freedom of
wireless roaming without worrying important data being exposed to
outsiders. WPA2 has two different modes: WPA2-Personal for SOHO users
and WPA2-Enterprise for Enterprise users. The access point also supports IEEE
802.1x for secure and centralized user-based authentication. Wireless
clients are thus required to authenticate through highly secure methods like
EAP-TLS, EAP-TTLS, and EAP-PEAP, in order to obtain access to the network.
•
• S
Sm ma ar rt t S Se el le ec ct t
This feature will automatically scan and recommend the best channel that
the access point can utilize.
•
• W Wi ir re el le es ss s E Et th he er rn ne et t A Ad da ap pt te er r
The Wireless Ethernet Adapter mode enables any computers with an
Ethernet interface to be connected to the wireless LAN without the need to
install any driver software. This is extremely useful for machines with limited
driver support, e.g. Apple Macintosh machines and Linux machines.
•
• u uC Co on nf fi
ig g U Ut ti il li it ty y
Compex’s exclusive uConfig utility allows users to access the user-friendly
Web configuration interface of the access point without having to change
the TCP/IP setup of the workstation.

8
•
• S SN NM MP P
For easy remote management and monitoring of the NetPassage
WPP54AG through standard SNMP software.
•
• S ST TP P
Spanning-Tree Protocol provides path redundancy while preventing
undesirable loops in the network. It forces certain redundant data paths
into a standby (blocked) state. If one network segment in the Spanning-
Tree Protocol becomes unreachable, or if Spanning-Tree Protocol costs
change, the spanning-tree algorithm reconfigures the spanning-tree
topology and re-establishes the link by activating the standby path.
•
• H HT TT TP PS S
NetPassage WPP54AG supports HTTPS (SSL) in addition to the standard HTTP.
HTTP (SSL) features additional authentication and encryption for secure
communication.
•
• T Te el ln ne et t
Telnet allows a computer to remotely connect to the NetPassage
WPP54AG CLI (Command Line Interface) for control and monitoring.
•
• S SS SH H
SSH (Secure Shell Host) establishes a secure host connection to the
NetPassage WPP54AG CLI for control and monitoring.

9
W
WH
HE EN N T TO O U US SE E W WH HI IC CH H M MO OD DE E
The access point is versatile in the sense that it may operate in seven different
types of modes: Access Point Mode, Client Mode, Point to Point, Point to
Multiple Point, Wireless Routing Client and Gateway.
This section presents a brief outline of the different network applications that
can be accommodated through the different modes of the access point.
A
AC
CC CE ES SS S P
PO
OI IN NT T M
MO
OD DE E
This is the default mode of your access point. The Access Point mode enables
you to bridge wireless clients to access the wired network infrastructure and to
communicate with each other.
In the example above, the wireless users will be able to access the file server
connected to the switch through the access point in Access Point mode.

10
A
AC
CC CE ES SS S P
PO
OI IN NT T C
CL
LI IE EN NT T M
MO
OD DE E
In Access Point Client mode, the device acts as a wireless client.
When connected to an access point, it will create a network link between the
Ethernet network connected at this client device, and the wireless and Ethernet
network connected at the access point.
In this mode it can only connect with an access point. Other wireless clients
cannot connect with it directly unless connected to the same access point -
allowing them to communicate with all devices connected at the Ethernet port
of the NetPassage WPP54AG.
In the example above, the workgroup PCs will be able to access the printer
connected to the access point in Access Point Client mode.

11
P
PO
OI IN NT T T TO O P
PO
OI IN NT T M
MO
OD DE E
In Point to Point mode, the access point allows point-to-point communication
between different buildings. It enables you to bridge wireless clients that are
kilometres apart while unifying the networks.
In the example above, you may configure two access points (AP) to perform
transparent bridging between two buildings

12
P
PO
OI IN NT T T TO O M
MU
UL LT TI IP PL LE E P PO OI IN NT T M
MO
OD DE E
In Point to Multiple Point mode, this mode is similar to that of the Point-to-Point
mode. But the access point located at one facility is able to connect to up to 8
access points (AP) installed in any direction from that facility.
The above illustration describes how this mode operates.

13
W
WI
IR RE EL LE ES SS S R
RO
OU UT TI IN NG G C
CL
LI IE EN NT T M
MO
OD DE E
An application of this mode would be for the Ethernet port of the Wireless
Routing Client to be used for connection with other devices on the network
while access to the Internet would be achieved through wireless
communication with wireless ISP.
The above illustration describes how this mode operates.