Funkwerk W1002 User manual

Manual
bintec
W1002/W1002n/W2002/WIx040/WIx065
Reference
Copyright© Version 6.0, 2009 Funkwerk Enterprise Communications GmbH
Funkwerk Enterprise Communications GmbH Manual
bintec W1002/W1002n/W2002/WIx040/WIx065 1

Legal Notice
Aim and purpose
This document is part of the user manual for the installation and configuration of funkwerk devices. For
the latest information and notes on the current software release, please also read our release notes,
particularly if you are updating your software to a higher release version. You will find the latest release
notes under www.funkwerk-ec.com .
Liability
This manual has been put together with the greatest possible care. However, the information con-
tained in this manual is not a guarantee of the properties of your product. Funkwerk Enterprise Com-
munications GmbH is only liable within the terms of its conditions of sale and supply and accepts no li-
ability for technical inaccuracies and/or omissions.
The information in this manual can be changed without notice. You will find additional information and
also release notes for funkwerk devices under www.funkwerk-ec.com .
Funkwerk devices make WAN connections as a possible function of the system configuration. You
must monitor the product in order to avoid unwanted charges. Funkwerk Enterprise Communications
GmbH accepts no responsibility for data loss, unwanted connection costs and damage caused by un-
intended operation of the product.
Trademarks
funkwerk trademarks and the funkwerk logo, bintec trademarks and the bintec logo, artem trademarks
and the artem logo, elmeg trademarks and the elmeg logo are registered trademarks of Funkwerk En-
terprise Communications GmbH.
Company and product names mentioned are usually trademarks of the companies or manufacturers
concerned.
Copyright
All rights reserved. No part of this manual may be reproduced or further processed in any way without
the written consent of Funkwerk Enterprise Communications GmbH. The documentation may not be
processed and, in particular, translated without the consent of Funkwerk Enterprise Communications
GmbH.
You will find information on guidelines and standards in the declarations of conformity under
www.funkwerk-ec.com .
How to reach Funkwerk Enterprise Communications GmbH
Funkwerk Enterprise Communications GmbH, Südwestpark 94, D-90449 Nuremberg, Germany,
Phone: [phone], Fax: [phone]
Funkwerk Enterprise Communications France S.A.S., 6/8 Avenue de la Grande Lande, F-33174
Gradignan, France, Phone: [phone], Fax: [phone]
Internet: www.funkwerk-ec.com
Manual Funkwerk Enterprise Communications GmbH
2bintec W1002/W1002n/W2002/WIx040/WIx065

Table of Contents
Chapter1 Introduction...........................1
Chapter 2 About this guide. . . . . . . . . . . . . . . . . . . . . . . . . 3
Chapter3 Installation............................6
3.1 Setting Up and Connecting. . . . . . . . . . . . . . . . . . . . . . 6
3.2 Support information . . . . . . . . . . . . . . . . . . . . . . . . 12
Chapter 4 Basic configuration . . . . . . . . . . . . . . . . . . . . . . 13
4.1 Presettings ........................... 13
4.1.1 Preconfigured data . . . . . . . . . . . . . . . . . . . . . . . . 13
4.1.2 Softwareupdate......................... 14
4.2 System requirements . . . . . . . . . . . . . . . . . . . . . . . 14
4.3 Preparations........................... 15
4.3.1 Gatheringdata.......................... 15
4.3.2 ConfiguringaPC......................... 17
4.4 IPconfiguration.......................... 18
4.5 Modify system password. . . . . . . . . . . . . . . . . . . . . . 20
4.6 Setting up a wireless network . . . . . . . . . . . . . . . . . . . 21
4.7 Setting up a bridge link . . . . . . . . . . . . . . . . . . . . . . 21
4.8 SoftwareUpdate......................... 23
Chapter5 Reset............................. 24
Chapter 6 Technical data . . . . . . . . . . . . . . . . . . . . . . . . 26
Funkwerk Enterprise Communications GmbH Table of Contents
bintec W1002/W1002n/W2002/WIx040/WIx065 i

6.1 bintec W1002, bintec W1002n and bintec W2002 . . . . . . . . . . . 26
6.1.1 Scopeofsupply ......................... 26
6.1.2 General Product Features . . . . . . . . . . . . . . . . . . . . . 26
6.1.3 LEDs.............................. 31
6.1.4 Connections........................... 32
6.1.5 PinAssignments......................... 34
6.1.6 Frequencies and channels . . . . . . . . . . . . . . . . . . . . . 35
6.2 bintec WI1040, WI2040 and WI3040 . . . . . . . . . . . . . . . . 36
6.2.1 Scopeofsupply ......................... 36
6.2.2 General Product Features . . . . . . . . . . . . . . . . . . . . . 37
6.2.3 LEDs.............................. 41
6.2.4 Connections........................... 42
6.2.5 PinAssignments......................... 43
6.2.6 Frequencies and channels . . . . . . . . . . . . . . . . . . . . . 44
6.3 bintec WI1065, WI2065 and WI3065 . . . . . . . . . . . . . . . . 44
6.3.1 Scopeofsupply ......................... 44
6.3.2 General Product Features . . . . . . . . . . . . . . . . . . . . . 45
6.3.3 LEDs.............................. 49
6.3.4 Connections........................... 50
6.3.5 PinAssignments......................... 50
6.3.6 Frequencies and channels . . . . . . . . . . . . . . . . . . . . . 52
Chapter 7 Access and configuration. . . . . . . . . . . . . . . . . . . 53
7.1 AccessOptions.......................... 53
7.1.1 AccessviaLAN ......................... 53
7.1.2 Access via the Serial Interface . . . . . . . . . . . . . . . . . . . 56
7.2 Loggingin............................ 57
7.2.1 User names and passwords in ex works state . . . . . . . . . . . . 58
7.2.2 Logging in for Configuration . . . . . . . . . . . . . . . . . . . . 58
7.3 Configuration options . . . . . . . . . . . . . . . . . . . . . . . 59
Table of Contents Funkwerk Enterprise Communications GmbH
ii bintec W1002/W1002n/W2002/WIx040/WIx065

7.3.1 Funkwerk Configuration Interface for advanced users . . . . . . . . . 60
7.3.2 The Setup Tool for experts . . . . . . . . . . . . . . . . . . . . . 73
7.3.3 SNMPshell........................... 80
7.4 BOOTmonitor.......................... 81
Chapter 8 System management . . . . . . . . . . . . . . . . . . . . . 83
8.1 State.............................. 83
8.2 GlobalSettings.......................... 86
8.2.1 System............................. 86
8.2.2 Passwords............................ 88
8.2.3 DateandTime.......................... 90
8.2.4 SystemLicences......................... 94
8.3 Interface Mode / Bridge Groups. . . . . . . . . . . . . . . . . . . 96
8.3.1 Interfaces............................ 98
8.4 Administrative Access . . . . . . . . . . . . . . . . . . . . . . . 102
8.4.1 Access............................. 102
8.4.2 SSH .............................. 103
8.4.3 SNMP.............................. 107
8.5 Remote Authentication . . . . . . . . . . . . . . . . . . . . . . 108
8.5.1 RADIUS............................. 108
8.5.2 TACACS+............................ 113
8.5.3 Options............................. 116
Chapter 9 Physical interfaces . . . . . . . . . . . . . . . . . . . . . 118
9.1 EthernetPorts.......................... 118
9.1.1 Port Configuration . . . . . . . . . . . . . . . . . . . . . . . . 118
9.2 SerialPort............................ 119
9.2.1 SerialPort............................ 120
9.3 Relay.............................. 124
Funkwerk Enterprise Communications GmbH Table of Contents
bintec W1002/W1002n/W2002/WIx040/WIx065 iii

9.3.1 Relay configuration . . . . . . . . . . . . . . . . . . . . . . . . 125
Chapter10 LAN............................. 126
10.1 IPconfiguration.......................... 126
10.1.1 Interfaces............................ 126
10.2 VLAN.............................. 130
10.2.1 VLANs ............................. 131
10.2.2 Port Configuration . . . . . . . . . . . . . . . . . . . . . . . . 132
10.2.3 Administration.......................... 133
Chapter 11 Wireless LAN . . . . . . . . . . . . . . . . . . . . . . . . 135
11.1 WLANx............................. 136
11.1.1 RadioSettings.......................... 136
11.1.2 Virtual Service Sets . . . . . . . . . . . . . . . . . . . . . . . . 154
11.1.3 WDSLinks............................ 160
11.1.4 ClientLink............................ 163
11.1.5 BridgeLinks........................... 167
11.2 Administration.......................... 176
11.2.1 Basicsettings.......................... 176
Chapter12 Routing........................... 177
12.1 Routes............................. 177
12.1.1 IProutes ............................ 177
12.1.2 Options............................. 182
12.2 NAT............................... 183
12.2.1 NATInterfaces.......................... 184
12.2.2 Portforwarding.......................... 185
12.3 RIP............................... 189
12.3.1 RIPInterfaces.......................... 189
Table of Contents Funkwerk Enterprise Communications GmbH
iv bintec W1002/W1002n/W2002/WIx040/WIx065

12.3.2 RIPFilter............................ 192
12.3.3 RIPOptions........................... 195
12.4 LoadBalancing.......................... 197
12.4.1 Load Balancing Groups . . . . . . . . . . . . . . . . . . . . . . 198
12.5 Multicast............................. 200
12.5.1 Forwarding ........................... 202
12.5.2 IGMP.............................. 203
12.5.3 Options............................. 206
Chapter13 WAN............................. 209
13.1 Internet+Dialup......................... 209
13.1.1 PPPoE............................. 210
13.1.2 PPTP.............................. 215
13.2 Real Time Jitter Control . . . . . . . . . . . . . . . . . . . . . . 220
13.2.1 Controlled interfaces . . . . . . . . . . . . . . . . . . . . . . . 220
Chapter14 VPN............................. 222
14.1 IPSec.............................. 222
14.1.1 IPSecPeers........................... 222
14.1.2 Phase-1 Profiles . . . . . . . . . . . . . . . . . . . . . . . . . 227
14.1.3 Phase-2 Profiles . . . . . . . . . . . . . . . . . . . . . . . . . 234
14.1.4 IPPools............................. 238
14.1.5 Options............................. 240
14.2 L2TP.............................. 243
14.2.1 TunnelProfiles.......................... 243
14.2.2 User .............................. 247
14.2.3 Options............................. 253
14.3 PPTP.............................. 254
14.3.1 PPTPTunnel .......................... 254
14.3.2 Options............................. 260
Funkwerk Enterprise Communications GmbH Table of Contents
bintec W1002/W1002n/W2002/WIx040/WIx065 v

14.4 GRE.............................. 261
14.4.1 GRETunnels .......................... 261
14.5 Certificates ........................... 263
14.5.1 Certificate list . . . . . . . . . . . . . . . . . . . . . . . . . . 264
14.5.2 CRLs.............................. 273
14.5.3 Certificate Servers . . . . . . . . . . . . . . . . . . . . . . . . 274
Chapter15 Firewall........................... 275
15.1 Policies............................. 276
15.1.1 Filterrules............................ 277
15.1.2 QoS .............................. 280
15.1.3 Options............................. 282
15.2 Interfaces............................ 283
15.2.1 Groups............................. 284
15.3 Addresses............................ 284
15.3.1 Addresslist........................... 285
15.3.2 Groups............................. 286
15.4 Services............................. 287
15.4.1 Servicelist............................ 287
15.4.2 Groups............................. 289
Chapter 16 Local services. . . . . . . . . . . . . . . . . . . . . . . . 291
16.1 DNS .............................. 291
16.1.1 GlobalSettings.......................... 293
16.1.2 StaticHosts........................... 296
16.1.3 Domain Forwarding . . . . . . . . . . . . . . . . . . . . . . . . 297
16.1.4 Cache.............................. 299
16.1.5 Statistics ............................ 301
16.2 DynDNSClient.......................... 302
Table of Contents Funkwerk Enterprise Communications GmbH
vi bintec W1002/W1002n/W2002/WIx040/WIx065

16.2.1 DynDNSUpdate......................... 302
16.2.2 DynDNS Provider. . . . . . . . . . . . . . . . . . . . . . . . . 304
16.3 DHCPServer .......................... 306
16.3.1 DHCPPool ........................... 306
16.3.2 IP/MACBinding ......................... 309
16.3.3 DHCP Relay Setting . . . . . . . . . . . . . . . . . . . . . . . 310
16.4 Scheduling............................ 311
16.4.1 Schedule............................ 312
16.4.2 Options............................. 315
16.5 Surveillance........................... 316
16.5.1 Hosts.............................. 317
16.5.2 Interfaces............................ 320
16.5.3 Temperature........................... 322
16.5.4 PingGenerator.......................... 324
16.6 Funkwerk Discovery . . . . . . . . . . . . . . . . . . . . . . . 325
16.6.1 Device discovery . . . . . . . . . . . . . . . . . . . . . . . . . 326
16.6.2 Options............................. 329
Chapter 17 Maintenance . . . . . . . . . . . . . . . . . . . . . . . . 331
17.1 Diagnostics........................... 331
17.1.1 PingTest............................ 331
17.1.2 DNSTest............................ 332
17.1.3 Traceroute Test . . . . . . . . . . . . . . . . . . . . . . . . . 332
17.2 Software & Configuration . . . . . . . . . . . . . . . . . . . . . 333
17.2.1 Options............................. 333
17.3 Reboot............................. 337
17.3.1 SystemReboot.......................... 337
Chapter 18 External Reporting . . . . . . . . . . . . . . . . . . . . . 339
Funkwerk Enterprise Communications GmbH Table of Contents
bintec W1002/W1002n/W2002/WIx040/WIx065 vii

18.1 Syslog ............................. 339
18.1.1 SyslogServers.......................... 339
18.2 IPAccounting.......................... 341
18.2.1 Interfaces............................ 342
18.2.2 Options............................. 342
18.3 E-mailalert ........................... 344
18.3.1 E-mail Alert Server . . . . . . . . . . . . . . . . . . . . . . . . 344
18.3.2 E-mail Alert Receiver . . . . . . . . . . . . . . . . . . . . . . . 346
18.4 SNMP.............................. 347
18.4.1 SNMP Trap Options. . . . . . . . . . . . . . . . . . . . . . . . 348
18.4.2 SNMP Trap Hosts . . . . . . . . . . . . . . . . . . . . . . . . 349
18.5 ActivityMonitor.......................... 350
18.5.1 Options............................. 351
Chapter19 Monitoring.......................... 353
19.1 InternalLog........................... 353
19.1.1 System messages . . . . . . . . . . . . . . . . . . . . . . . . 353
19.2 IPSec.............................. 354
19.2.1 IPSecTunnels.......................... 354
19.2.2 IPSec Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . 356
19.3 Interfaces............................ 357
19.3.1 Statistics ............................ 358
19.4 WLAN.............................. 359
19.4.1 WLANx............................. 359
19.4.2 VSS .............................. 362
19.4.3 WDS.............................. 365
19.4.4 BridgeLinks........................... 368
19.4.5 ClientLinks........................... 372
19.5 Bridges............................. 374
Table of Contents Funkwerk Enterprise Communications GmbH
viii bintec W1002/W1002n/W2002/WIx040/WIx065

19.5.1 br<x>.............................. 375
19.5.2 sta<x> ............................. 376
Glossary........................... 377
Index ............................ 418
Funkwerk Enterprise Communications GmbH Table of Contents
bintec W1002/W1002n/W2002/WIx040/WIx065 ix

Table of Contents Funkwerk Enterprise Communications GmbH
xbintec W1002/W1002n/W2002/WIx040/WIx065

Chapter 1 Introduction
The new generation access points are manufactured in an environmentally friendly way
and meet the RoHS directive. They support the latest WLAN technology and are designed
for use particularly in the professional environment.
Safety notices
The safety precautions brochure, which is supplied with your device, tells you what you
need to take into consideration when using your access point.
Installation
How to connect your device is shown in chapter Installation on page 6.
Configuration
Chapter Basic configuration on page 13 also tells you what preliminary tasks are necessary
for configuration. You will then be shown how you can access your device from a Windows
PC using a current web browser and how to make basic settings.
Password
If you are familiar with the configuration of bintec devices and you want to get started right
away, all you really need to know is the preset user name and password.
User Name:admin
Password:funkwerk
Caution
Remember to change the password immediately when you log in to the device for the
first time. All bintec devices are supplied with the same password, which means they
are not protected against unauthorised access until you change the password. How to
change the passwords is described in chapter Modify system password on page 20.
Possible Applications
To meet the different requirements relating to the various tasks, the access points have
one, two or three wireless modules and two, three or four antennas, depending on the
model, in order to optimise the range or illumination of the radio range even under difficult
conditions. The wireless module offers operation modes Client, Access Point and Bridge.
Funkwerk Enterprise Communications GmbH 1 Introduction
bintec W1002/W1002n/W2002/WIx040/WIx065 1

If a number of different applications are used, it is important to prioritise certain traffic flows.
The devices in the bintec Wx002 and bintec WI series therefore support WMM (wireless
multimedia). This enables voice or video data to be prioritised in order to ensure optimum
transmission quality for time-critical applications.
Your access point supports the latest WLAN technology and is designed for use particularly
in the professional environment. The devices in the robust WI series are specially optim-
ised for use in difficult conditions in the industrial and outdoor sphere.
The WI series is available in two variants:
• Indoor Version with IP40 safety class (bintec WI1040,bintec WI2040 and bintec
WI3040)
• Outdoor version with IP65 safety class (bintec WI1065,bintec WI2065 and bintec
WI3065)
In addition to the radio standards 802.11b and 802.11g, the devices support 802.11a and
its European version 802.11h, so that data can also be transmitted in the 5 GHz frequency
range with data throughput of up to 54 mbps. This is required particularly for outdoor ap-
plications to achieve bridge solutions if other applications are already running in the 2.4
GHz frequency range.
bintec W1002n also supports 802.11n (Draft 2.0), which used MIMO technology (Multiple
Input Multiple Output) for data transmission that allows data transfer via WLAN over longer
distances or with higher data rates. With bandwidth 20 MHz or 40 MHz a gross data rate of
150 Mbps or 300 Mbps is achieved.
The products also support modern procedures such as Multi SSID and VLAN, with which
up to 16 virtual access points (8 SSIDs for bintec W1002n) can be mapped for each wire-
less module. These can be mutually protected and therefore ensure e.g. restricted guest
access for customers. Different safety levels and encryptions can be configured for each
SSID.
To ensure security is not neglected, the devices support security standards 802.1x and
802.11i (WPA, WPA2). The secure configuration is carried out over HTTPS or SSH.
Used as a bridge, the devices support Automatic Bridge Mode and are able to protect
bridge connection via TKIP and AES encryption.
WLAN Management
WLAN devices are designed for use with WiLMA.WiLMA, the WLAN management solu-
tion from Funkwerk, offers a software application in a client/server architecture that allows
you to centrally monitor, control and maintain all Funkwerk access points in medium and
large wireless LANs.
1 Introduction Funkwerk Enterprise Communications GmbH
2bintec W1002/W1002n/W2002/WIx040/WIx065

Chapter 2 About this guide
Area of validity
This document is valid for bintec devices with system software as of software version 7.8.2
or 7.8.3 ( bintec W1002n).
The guide, which you have in front of you, contains the following chapters:
User's Guide - Reference
Chapter Description
Introduction You see an overview of the device along with its possible ap-
plications and configuration options.
About this guide We explain the various components of this manual and how to
use it.
Installation This contains instructions for how to set up and connect your
device.
Basic configuration This chapter provides a step-by-step guide to the basic func-
tions on your device.
Technical data This section contains a description of all the device's technical
properties.
Access and configura-
tion
This includes explanations about the different access and con-
figuration methods.
System management
Physical interfaces
LAN
Wireless LAN
Routing
WAN
VPN
Firewall
Local services
These chapters describe all configuration options of the Funk-
werk Configuration Interface. The chapters are based on the
navigation structure.
Funkwerk Enterprise Communications GmbH 2 About this guide
bintec W1002/W1002n/W2002/WIx040/WIx065 3

Chapter Description
Maintenance
External Reporting
Monitoring
Glossary The glossary contains a reference to the most important tech-
nical terms used in network technology.
Index The index lists all the key terms for operating the device and all
the configuration options and gives page numbers so they can
be found easily.
To help you locate information easily, this user's guide uses the following visual aids:
List of visual aids
Icon Use
Indicates practical information.
Indicates general and important points.
Indicates a warning of risk level "Attention" (points out possible
dangers that may cause damage to property if not observed).
Indicates a warning of risk level "Warning" (points out possible
dangers that may cause physical injury or even death if not ob-
served).
The following typographical elements are used to help you find and interpret the informa-
tion in this user's guide:
Typographical elements
Typographical element Use
•Indicates lists.
Menu->Submenu
File->Open
Indicates menus and sub-menus.
non-proportional, e.g.
ping 192.168.1.254
Indicates commands that you must enter as written.
2 About this guide Funkwerk Enterprise Communications GmbH
4bintec W1002/W1002n/W2002/WIx040/WIx065

Typographical element Use
bold, e.g. Windows
Start menu
Indicates keys, key combinations and Windows terms.
bold, e.g. biboAdmLo-
ginTable
Indicates fields.
italic, e.g. none Indicates values that you enter or that can be configured.
Online: blue and italic,
e.g.
www.funkwerk-ec.com
Indicates hyperlinks.
Funkwerk Enterprise Communications GmbH 2 About this guide
bintec W1002/W1002n/W2002/WIx040/WIx065 5

Chapter 3 Installation
Caution
Please read the safety notices carefully before installing and starting up your device.
These are supplied with the device.
Refer to chapter Technical data on page 26.
3.1 Setting Up and Connecting
Note
All you need for this are the cables and antennas supplied with the equipment.
The device can be fitted with various antenna systems. External, screw-on standard
antennas can be used (optional).
The access points of the bintec WI series can be mounted on a mast (indoor and out-
door version) or DIN rail (indoor version only). Optional theft protection is also avail-
able for the indoor and outdoor versions.
For the bintec WI series devices, a screw terminal bar is included as standard for
power supply.
Caution
The use of the wrong mains adapter may damage your device. Only use the mains ad-
aptor supplied (only for bintec W1002,bintec W1002n and bintec W2002). If you re-
quire foreign adapters/mains units, please contact our funkwerk service.
3 Installation Funkwerk Enterprise Communications GmbH
6bintec W1002/W1002n/W2002/WIx040/WIx065

Fig. 2: Connection options bintec W1002,bintec W1002n and bintec W2002
Funkwerk Enterprise Communications GmbH 3 Installation
bintec W1002/W1002n/W2002/WIx040/WIx065 7

Fig. 3: Connection options bintec WIx040 and bintec WIx060.
When setting up and connecting, carry out the steps in the following sequence (refer to the
connection diagrams for the individual devices in chapter Technical data on page 26):
(1) Antennas
Screw the external standard antennas supplied on to the connections provided for
this purpose.
Put the antennas in the required position before tightening the screw nut. Once the
screw nut has been tightened, it may not be possible to rotate the radiator any more.
If two antennas are connected to the device, these must be installed at least 6 cm
and preferably 12 cm apart so that antenna diversity can be used.
In highly reflective environments, it may make sense to maintain an angle of 90° in
the direction of the antennas. For this, arrange the antennas in a V shape.
(2) Installation
The access points can be fitted to the wall using brackets on the housing or can
3 Installation Funkwerk Enterprise Communications GmbH
8bintec W1002/W1002n/W2002/WIx040/WIx065