D-Link DWL-1000AP User manual

Revision 0.01 i
D-Link Air DWL-1000AP Access Point

Revision 0.01ii

Revision 0.01 iii
FCC Certifications
This equipment has been tested and found to comply with the limits for a Class B digital
device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide
reasonable protection against harmful interference in a residential installation. This
equipment generates, uses and can radiate radio frequency energy and, if not installed and
used in accordance with the instructions, may cause harmful interference to radio
communications. However, there is no guarantee that interference will not occur in a
particular installation. If this equipment does cause harmful interference to radio or
television reception, which can be determined by turning the equipment off and on, the
user is encouraged to try to correct the interference by one or more of the following
measures:
•Reorient or relocate the receiving antenna.
•Increase the separation between the equipment and receiver.
•Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.
•Consult the dealer or an experienced radio/TV technician for help.
Shielded interface cables must be used in order to comply with emission limits.
You are cautioned that changes or modifications not expressly approved by the party
responsible for compliance could void your authority to operate the equipment.
This device complies with Part 15 of the FCC rules. Operation is subject to the following
two conditions: (1) This device may not cause harmful interference, and (2) This device
must accept any interference received, including interference that may cause undesired
operation.
CE Mark Warning
This is a Class B product. In a domestic environment, this product may cause radio interference, in which case the
user may be required to take adequate measures.
VCCI Warning

Revision 0.01iv
LIMITED WARRANTY
D-Link Systems, Inc. (“D-Link”) provides this limited warranty for its product only to the person or entity who
originally purchased the product from D-Link or its authorized reseller or distributor.
Limited Hardware Warranty: D-Link warrants that the hardware portion
of the D-Link products described below (“Hardware”) will be free from
material defects in workmanship and materials from the date of original
retail purchase of the Hardware, for the period set forth below applicable to
the product type (“Warranty Period”) if the Hardware is used and serviced in
accordance with applicable documentation; provided that a completed
Registration Card is returned to an Authorized D-Link Service Office within
ninety (90) days after the date of original retail purchase of the Hardware. If
a completed Registration Card is not received by an authorized D-Link
Service Office within such ninety (90) period, then the Warranty Period shall
be ninety (90) days from the date of purchase.
Product Type Warranty
Period
Product (excluding power supplies and
fans), if purchased and delivered in the fifty
(50) United States, or the District of
Columbia (“USA”)
As long as
the original
purchaser
still owns the
product
Product purchased or delivered
outside the USA One (1) Year
Power Supplies and Fans One (1) Year
Spare parts and spare kits Ninety (90)
days
D-Link’s sole obligation shall be to repair or replace the defective Hardware at no charge to the original owner.
Such repair or replacement will be rendered by D-Link at an Authorized D-Link Service Office. The replacement
Hardware need not be new or of an identical make, model or part; D-Link may in its discretion may replace the
defective Hardware (or any part thereof) with any reconditioned product that D-Link reasonably determines is
substantially equivalent (or superior) in all material respects to the defective Hardware. The Warranty Period shall
extend for an additional ninety (90) days after any repaired or replaced Hardware is delivered. If a material defect is
incapable of correction, or if D-Link determines in its sole discretion that it is not practical to repair or replace the
defective Hardware, the price paid by the original purchaser for the defective Hardware will be refunded by D-Link

Revision 0.01 v
upon return to D-Link of the defective Hardware. All Hardware (or part thereof) that is replaced by D-Link, or for
which the purchase price is refunded, shall become the property of D-Link upon replacement or refund.
Limited Software Warranty: D-Link warrants that the software portion of the product (“Software”) will
substantially conform to D-Link’s then current functional specifications for the Software, as set forth in the
applicable documentation, from the date of original delivery of the Software for a period of ninety (90) days
(“Warranty Period”), if the Software is properly installed on approved hardware and operated as contemplated in its
documentation. D-Link further warrants that, during the Warranty Period, the magnetic media on which D-Link
delivers the Software will be free of physical defects. D-Link’s sole obligation shall be to replace the non-conforming
Software (or defective media) with software that substantially conforms to D-Link’s functional specifications for the
Software. Except as otherwise agreed by D-Link in writing, the replacement Software is provided only to the
original licensee, and is subject to the terms and conditions of the license granted by D-Link for the Software. The
Warranty Period shall extend for an additional ninety (90) days after any replacement Software is delivered. If a
material non-conformance is incapable of correction, or if D-Link determines in its sole discretion that it is not
practical to replace the non-conforming Software, the price paid by the original licensee for the non-conforming
Software will be refunded by D-Link; provided that the non-conforming Software (and all copies thereof) is first
returned to D-Link. The license granted respecting any Software for which a refund is given automatically
terminates.
What You Must Do For Warranty Service:
Registration Card. The Registration Card provided at the back of this manual must be completed and returned to
an Authorized D-Link Service Office for each D-Link product within ninety (90) days after the product is purchased
and/or licensed. The addresses/telephone/fax list of the nearest Authorized D-Link Service Office is provided in the
back of this manual. FAILURE TO PROPERLY COMPLETE AND TIMELY RETURN THE REGISTRATION
CARD MAY AFFECT THE WARRANTY FOR THIS PRODUCT.
Submitting A Claim. Any claim under this limited warranty must be submitted in writing before the end of the
Warranty Period to an Authorized D-Link Service Office. The claim must include a written description of the
Hardware defect or Software nonconformance in sufficient detail to allow D-Link to confirm the same. The original
product owner must obtain a Return Material Authorization (RMA) number from the Authorized D-Link Service
Office and, if requested, provide written proof of purchase of the product (such as a copy of the dated purchase
invoice for the product) before the warranty service is provided. After an RMA number is issued, the defective
product must be packaged securely in the original or other suitable shipping package to ensure that it will not be
damaged in transit, and the RMA number must be prominently marked on the outside of the package. The
packaged product shall be insured and shipped to D-Link, 53 Discovery Drive, Irvine CA 92618, with all shipping
costs prepaid. D-Link may reject or return any product that is not packaged and shipped in strict compliance with
the foregoing requirements, or for which an RMA number is not visible from the outside of the package. The product

Revision 0.01vi
owner agrees to pay D-Link’s reasonable handling and return shipping charges for any product that is not packaged
and shipped in accordance with the foregoing requirements, or that is determined by D-Link not to be defective or
non-conforming.
What Is Not Covered:
This limited warranty provided by D-Link does not cover:
Products that have been subjected to abuse, accident, alteration, modification, tampering, negligence, misuse, faulty
installation, lack of reasonable care, repair or service in any way that is not contemplated in the documentation for
the product, or if the model or serial number has been altered, tampered with, defaced or removed;
Initial installation, installation and removal of the product for repair, and shipping costs;
Operational adjustments covered in the operating manual for the product, and normal maintenance;
Damage that occurs in shipment, due to act of God, failures due to power surge, and cosmetic damage; and
Any hardware, software, firmware or other products or services provided by anyone other than D-Link.
Disclaimer of Other Warranties: EXCEPT FOR THE LIMITED WARRANTY SPECIFIED HEREIN, THE
PRODUCT IS PROVIDED “AS-IS” WITHOUT ANY WARRANTY OF ANY KIND INCLUDING, WITHOUT
LIMITATION, ANY WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
NON-INFRINGEMENT. IF ANY IMPLIED WARRANTY CANNOT BE DISCLAIMED IN ANY TERRITORY
WHERE A PRODUCT IS SOLD, THE DURATION OF SUCH IMPLIED WARRANTY SHALL BE LIMITED TO
NINETY (90) DAYS. EXCEPT AS EXPRESSLY COVERED UNDER THE LIMITED WARRANTY PROVIDED
HEREIN, THE ENTIRE RISK AS TO THE QUALITY, SELECTION AND PERFORMANCE OF THE PRODUCT IS
WITH THE PURCHASER OF THE PRODUCT.
Limitation of Liability: TO THE MAXIMUM EXTENT PERMITTED BY LAW, D-LINK IS NOT LIABLE UNDER
ANY CONTRACT, NEGLIGENCE, STRICT LIABILITY OR OTHER LEGAL OR EQUITABLE THEORY FOR ANY
LOSS OF USE OF THE PRODUCT, INCONVENIENCE OR DAMAGES OF ANY CHARACTER, WHETHER DIRECT,
SPECIAL, INCIDENTAL OR CONSEQUENTIAL (INCLUDING, BUT NOT LIMITED TO, DAMAGES FOR LOSS
OF GOODWILL, WORK STOPPAGE, COMPUTER FAILURE OR MALFUNCTION, LOSS OF INFORMATION OR
DATA CONTAINED IN, STORED ON, OR INTEGRATED WITH ANY PRODUCT RETURNED TO D-LINK FOR
WARRANTY SERVICE) RESULTING FROM THE USE OF THE PRODUCT, RELATING TO WARRANTY
SERVICE, OR ARISING OUT OF ANY BREACH OF THIS LIMITED WARRANTY, EVEN IF D-LINK HAS BEEN
ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. THE SOLE REMEDY FOR A BREACH OF THE
FOREGOING LIMITED WARRANTY IS REPAIR, REPLACEMENT OR REFUND OF THE DEFECTIVE OR NON-
CONFORMING PRODUCT.
GOVERNING LAW:This Limited Warranty shall be governed by the laws of the state of California.

Revision 0.01 vii
Some states do not allow exclusion or limitation of incidental or consequential damages, or limitations on how long an
implied warranty lasts, so the foregoing limitations and exclusions may not apply. This limited warranty provides
specific legal rights and the product owner may also have other rights which vary from state to state.

Revision 0.01viii
Table of Contents
D-Link Air DWL-1000AP Access Point........................................................................................................ i
Table of Contents..................................................................................................... viii
Introduction .............................................................................................................................................. 1
Installation................................................................................................................................................ 2
APManager Features...................................................................................................2
Features:..................................................................................................................2
APManager Main Window..........................................................................................3
Quick Start to Wireless Networking ............................................................................4
Managing WLANs......................................................................................................5
Managing Access Points..............................................................................................6
Network Settings Dialog .............................................................................................7
Searching for Access Points ........................................................................................8
Manually Programming IP Addresses..........................................................................8
Managing Security....................................................................................................10
Access Control..........................................................................................................11
Updating Access Point Settings.................................................................................12
IEEE 802.11 WEP Security.......................................................................................12
More about Cells.......................................................................................................13
Compatibility............................................................................................................13
Technical specifications of DWL-1000AP................................................................................................. 15

1
Introduction
Thank you for purchasing your DWL-1000 Wireless LAN Access Point. This manual
will assist you with the installation and configuration procedure. D-Link does not support
the following operating systems at this time: Windows CE, Linux and Unix.
The package you have received should contain the following items:
•User manual
•DWL-1000AP Access Point
•Power adapter
•Diskette containing AP Manager Software
If anything is missing, please contact the seller you purchased the DWL-1000AP from.
A wireless LAN is normally used in a predefined environment. In such a network, Access
Points are mounted at assigned places, each covering its own area in which wireless
nodes can operate. These Access Points are connected to a wired network to
communicate with each other and with servers and clients on that network.
The DWL-1000AP Access Point can be connected to a 10 Mbps Ethernet network
through a RJ45 (UTP) connector.

2
Installation
Follow these steps to install the DWL-1000AP:
1. Mount the DWL-1000AP firmly to the wall on the position that is determined
during the site survey. A drill model is supplied as a separate sheet with this
manual.
2. Make sure the antennas are in a vertical position (if not, rotate over 90 degrees).
3. Insert the power connector.
4. Attach the UTP Ethernet cable to the Access Point.
5. Switch on the Access Point.
At the front of the Access Point you will see three LEDs.
If all goes well, the middle LED (power) is green and the leftmost (WLAN) and
rightmost (wired network) LEDs flash whenever there is traffic on the respective
networks which is at least ten times per second for the wireless LAN because of
'beacons'.
The Access Point automatically selects the medium attached. When the cable network is
detected, the network LED will turn yellow.
You can reset the Access Point's settings to factory defaults by pushing a paperclip in the
little hole next to the power switch. The sequence of the ACT is on, and holding until the
LED goes off.
When you push a paperclip in the reset hole while the Access Point is switched on, only
the lock set by APManager(tm) (Par 4.5) is deactivated.
APManager Features
APManager(tm) provides a consistent view of the Wireless network. The systems
administrator can use APManager(tm) to control a large number of DWL-1000AP
Access Points from a single location. The Access Points are remotely updated via the
SNMP (Simple Network Management Protocol).
Features:
•Adding and removing Access Points

3
•Restricting access to the Wireless network
•Managing data protection options such as IEEE 802.11 WEP
•Assigning radio channels for optimal cell management
•Grouping the wireless network into multiple WLANs with individual access
control and security options
•Programming an Access Point with a specified IP address
•Setting the SNMP Write Community string
•Storing the Access Point configurations on disk
•Verifying the status of all Access Points in the network
APManager Main Window
The Main Window of the APManager may look like this. Before going into detail it is
good to have an idea of what kind of information to expect.
You may wish to skip to the “Quick Start to Wireless Networking” section.
Figure 1: AP Manager
The tree structure on the left of the window shows a list of WLANs (Wireless LANs) and
the Access Points that are part of each WLAN. The sample image above shows a single

4
Access Point with hardware address 00:90:4b:08:04:dd that is assigned to the WLAN
named "home". The icons indicate the status of the WLANs and their associated Access
Points.
You can use clicking, double clicking, dragging etc. to view Access Point properties or
move an Access Point to another WLAN etc. See Managing WLANs.
The name (or ESSID) of the WLAN is used for identifying the WLAN. Client stations
can roam freely over Access Points that have the same ESSID. Therefore the security
options for all Access Points with the same ESSID are identical. Security options can be
managed through the WLAN Security property sheet. See the section on Managing
Security.
The Access Point property sheet will mainly be used to select a radio channel for each
Access Point. See Managing Access Points below.
Quick Start to Wireless Networking
Configuring a Wireless Network for the very first time, involves the following seven
steps:
1. Physically connect the Access Points to the Ethernet LAN. Make sure they are
switched on. The D-Link wireless network will be up and running immediately. If you
are content with the default settings of the Access Points, you can stop right here. It is
more likely however, that you want to assign different radio frequencies to each Access
Point, or impose some restrictions on the use of your wireless network.
2. To be able to manage the Access Points via SNMP, every Access Point needs a unique
IP address. If you provide a DHCP or BOOTP service on your LAN (and have sufficient
free IP addresses available) this will be taken care of automatically. If not, please read the
section, “Manually Programming IP addresses”.
3. Fire up APManager and configure the Network Settings to reflect your situation (Use
the Edit/Network Settings... menu item). See the section Network Settings Dialog for
details.
4. Create at least one WLAN (Edit/Insert Wireless LAN) and select the desired security
configuration options.
5. Apply the built-in scanning function under Edit/Search Access Points to collect
information about the Access Points. See the section Searching for Access Points for
more information about the scanning function. Drag the new Access Points to the WLAN

5
of your choice.
6. Select the radio channels of the Access Points according to your cell plan. See also
More about Cells. Add descriptive information about each Access Point for later
reference.
7. Save the configuration information to disk, and commit the new settings to the Access
Points in your network. Using the button.
Figure 2: Button
Note that the actual settings of the Access Points will not be affected until the Commit to
Network function is executed. If you quit APManager(tm), you will be asked to both save
and commit.
See Updating Access Point Settings.
You can open the saved configuration file anytime you to make changes to the network.
Managing WLANs
A WLAN or "Wireless Local Area Network" consists of a number of Access Points that
together provide seamless access to any wireless stations that are in reach of any of the
Access Points.
Create a WLAN Select the Edit/Insert Wireless LAN menu item to insert a
new WLAN into the list. Type the name (ESSID) of the
new WLAN.
Destroy a
WLAN Remove an empty WLAN by pressing Delete or selecting the Edit/Clear menu item.
Rename a
WLAN Click on the label of the WLAN to change its name
(ESSID). Note that client stations use the name to identify
the WLAN.
You can move an Access Point from one WLAN to another by dragging it with the
mouse or by selecting Edit/Cut followed by Edit/Paste.
There are two WLANs that have a special meaning in APManager™. These are the
Unused Access Points and Disabled Access Points special WLAN’s.

6
Unused
Access Points
APManager™ does not manage the Unused Access Points within
the context of the current document. In other words, these Access
Points are ignored. You can view some information about them
(e.g. radio channel), but not modify any of their properties.
APManager™ does not change the settings of these Access Points
when File/Commit to Network is selected. This is useful when
different people manage different sets of Access Points.
Disabled
Access Points
Access Points that are moved to this folder will be made
inaccessible for any client station as soon as they are updated.
Managing Access Points
Individual Access Points are identified by their hardware address (or MAC address). To
insert a new Access Point into the APManager(tm) document by hand, its hardware
address must be known. You can search for Access Points in your network automatically;
see Searching for Access Points.
Insert an
Access Point Select the Edit/Insert Access Point menu item to insert a new
Access Point into the selected WLAN. APManager™ will ask
for the hardware address of the Access Point.
Disable an
Access Point
Move an Access Point to the “Disabled” special WLAN by
pressing Delete or selecting the Edit/Clear menu item. Access
Points in this special WLAN will not be accessible for any client
station. See Managing WLANs.
The Access Points are shown with one of the following icons.
On-line The Access Point is accessible on-line.
Off-line The Access Point is currently not accessible, or the IP address is
not known or incorrect.
Locked The Access Point is permanently locked. Its properties cannot be
changed.
Select the Access Point property sheet to view or modify the settings of the selected
Access Point. The main function is to be able to program the Access Point's radio channel
to match the cell plan. See the section "More about Cells" for details.
Read-only features shown include hardware address, brand and version, and the
regulatory domain.

7
Hardware address (MAC address)
Brand, type, and version information.
The regulatory domain for which the Access Point has
been configured (factory setting). Note that it is illegal
to use the Access Point outside the designated domain.
See Regulatory Domains for details.
The IP address and the hostname of the Access Point.
The radio channel number. The permissible channels
depend on the Regulatory Domain.
An optional description field for easy reference.
Network Settings Dialog
Figure 3: Network Settings Dialog Box
Selecting the Edit/Network Settings from the menu item (or clicking the corresponding
toolbar button, shown in Figure 3) pops up the Network Settings dialog. Use this dialog
to inform APManager(tm) about your network configuration. APManager(tm) needs this
information to be able to scan for Access Points.
Add your network addresses (subnets) by entering the correct information in the Network
address, mask and default gateway fields in the dialog, and clicking the Set button for
each network/subnet. To view the details of a particular network, click on the Address
field in the list. Click the Remove button to delete a network from the list.
If the computer on which APManager is running is connected to all your networks
directly, you can try Auto Add Local Networks to insert them in the list. If subnetting is
being used on the network, the network addresses and subnet masks generated by this
function may not be correct and should be adjusted manually.

8
Searching for Access Points
Figure 4: Network Settings panel and icons
APManager(tm) has an easy-to-use Access Point discovery function that simplifies the
administration of the Access Points in your network. You normally apply the Search
function in one of the following situations:
•New Access Points have been added to the network
•The IP address of one or more Access Points is no longer valid or known,
possibly because the DHCP or BOOTP server has assigned it a different IP
address. You may be informed of this fact because the Access Points will be
reported off-line by APManager(tm).
Invoke the Search function by selecting the menu “command Edit/Search Access Points”,
or pressing the associated toolbar button. While APManager(tm) is scanning the network,
you may continue work on the document. If necessary you can abort a scan by clicking
on the Abort Search button.
Figure 5: Progress Indicator
A progress indicator, shown in Figure 5, will be shown in the status bar.
Manually Programming IP Addresses
The preferred method of providing IP addresses for your Access Points is applying a
DHCP or BOOTP server in your network. If you do, the Access Points will acquire an IP
address automatically from this server.

9
If you do not have a DHCP server, it is possible to manually set the IP address of your
Access Points from APManager(tm).
1. Physically connect the Access Points and the computer on which you run
APManager(tm) to the same Ethernet segment.
2. Make sure there is no DHCP or BOOTP server running.
3. Switch the Access Points on. The network LED should light up in red.
4. Configure the Access Points to be part of the desired network. See the Network
Settings Dialog for details.
5. Enter the hardware addresses of the Access Points by hand using the Edit/Insert
Access Point menu command or clicking the appropriate toolbar button.
6. For each Access Point select Edit/Set IP Address menu command and enter the
required IP address manually. As soon as you press apply, the Access Point
should acquire the designated IP address. Within a few seconds the network LED
on the Access Point should light up green.
You may or may not be able to communicate with the Access Point, depending on the
validity of the IP address in the current Ethernet segment.

10
Managing Security
Maintaining security in a wireless LAN environment is somewhat different from a wired
network, because the radio waves are not confined with the building. Eavesdropping or
unauthorized access from outside your building can be a serious threat.
There are three types of actions involved:
•Protecting your data while it is transferred from one station to another. Encryption
techniques will be necessary in most environments (Data Privacy).
•Control who can make use of the wireless network (Access Control).
•Protecting your network configuration against tampering from both inside and
outside your organization (Secure Management).
Data Privacy An DWL-1000AP supports three different data privacy algorithms:
unencrypted data; standardized IEEE 802.11 WEP (based on a 40 bit
shared key), and No Wires Needed AirLock™ (based on automatically
generated 128 bit session keys).
Access
Control The IEEE 802.11 standard allows for Access Control rules based on
the client station’s hardware address, and is fully implemented by the
DWL-1000AP. If AirLock™ is enabled, the hardware address is also
verified using cryptographic techniques. See the section on AirLock™
Security Architecture.
Secure
Management The primary protection against tampering for any SNMP agent is the
Write Community String (WCS), which functions as a password for
network management commands. The WCS is sent over your network
in plain text, making it vulnerable to eavesdropping from within your
organization. The WCS is never sent over the radio, however.
If you want you can lock your Access Points. After being locked they
can no longer be managed via SNMP. Press the pinhole Reset switch
on the back-panel of the Access Point to unlock the Access Point.

11
Select the required security options in the WLAN Security property sheet.
Use this button to lock the settings
of the Access Points (almost)
permanently
Edit the Community String field to modify the
SNMP Write Community String for all Access
Points in the selected WLAN.
Select the data privacy algorithm(s) you want to
support in the Access Points.
See the section Access Control for details.
Access Control
Within the IEEE 802.11 framework, Access Control is based on the hardware address of
the client stations. For each client you can select whether or not it will be allowed access
to the wireless network infrastructure. On the WLAN Security tab, check the Use Access
Control box to enable Access Control. If this box is not checked, any client station can
associate with your network.
Click the “Access Control Settings” button on the WLAN Security tab to pop up the
Access Control Dialog. Press “Add” to enter the client stations have been granted access.
As a default rule, access control for clients can be toggled on or off. The default
determines whether unregistered stations can join the network. You can move clients
between Access Granted and Access Denied lists by clicking the >> and << buttons or
pressing the left and right arrow keys.
Press Apply to confirm your changes and close the dialog.

12
Updating Access Point Settings
Figure 6: Update Access Point Icon
After modifying the open APManager(tm) document you should update the Access
Points the new settings. Update all Access Points simultaneously by File > Commit to
Network. You can click the Commit to Network button on the toolbar. Each command
accomplishes the same thing. During the update the following Dialog is displayed:
Access Point that is currently being
processed.
Progress indicator
Update result counters. The ‘Skipped’
count refers to Access Points in the
‘Unused’ special WLAN.
Specific error messages.
The Access Point disconnects all stations within 10 seconds of successfully updating and
automatically restarts with the new settings. The LED is red during this period.
IEEE 802.11 WEP Security
The IEEE 802.11 standard includes a Shared Key data privacy mechanism, called “Wired
Equivalent Privacy”.