Hirschmann BAT54-Rail User manual

BAT54-Rail
Release 09/06
Technical Support
[email protected]
User Manual
Dual-Band Industrial Access Point / Access Client / Access
Bridge
BAT54-Rail

The naming of copyrighted trademarks in this manual, even when not specially indicated, should
not be taken to mean that these names may be considered as free in the sense of the trademark
and tradename protection law and hence that they may be freely used by anyone.
© 2006 Hirschmann Automation and Control GmbH
Manuals and software are protected by copyright. All rights reserved. The copying, reproduction,
translation, conversion into any electronic medium or machine scannable form is not permitted,
either in whole or in part. An exception is the preparation of a backup copy of the software for
your own use.
The performance features described here are binding only if they have been expressly
guaranteed in the contract. This publication has been created by Hirschmann Automation and
Control GmbH according to the best of our knowledge. Hirschmann reserves the right to change
the contents of this manual without prior notice. Hirschmann can give no guarantee in respect
of the correctness or accuracy of the details in this publication.
Hirschmann can accept no responsibility for damages, resulting from the use of the network
components or the associated operating software. In addition, we refer to the conditions of use
specified in the license contract.
Printed in Germany (0906)
Hirschmann Automation and Control GmbH
Stuttgarter Straße 45-51
72654 Neckartenzlingen
Tel. [phone]-0906

Hirschmann BAT54- Rail
Preface
3
EN
Preface
The Hirschmann BAT54-Rail offers professional access point technology at a
maximum of WLAN performance. With two integrated 108 Mbps WLAN mod-
ules according to IEEE 802.11a/h or IEEE 802.11b/g the Hirschmann Router
work in the 2,4 and/or 5 GHz frequency range simultaneously. The device can
be used e.g. for setting up infrastucture networks or for linking two networks
in WLAN bridge mode.
The Hirschmann BAT54-Rail is equipped with a robust metal housing for
mounting in switch cabinets and is supplied via 24 V voltage. It is hence well
suited for application in industrial environments.
Security settings
For a carefree use of your device, we recommend to carry out all security set-
tings (e.g. Firewall, encryption, access protection, charge lock), which are not
already activated at the time of purchase of your device. The LANconfig wizard
’Check Security Settings’ will support you accomplishing this.
We ask you additionally to inform you about technical developments and
actual hints to your product on our Web page www.hirschmann-ac.com, and
to download new software versions if necessary.
User manual and reference manual
The documentation of your device consists of three parts: the installation
guide, the user manual and the reference manual.
You are now reading the user manual. It contains all information you need to
start your device. It also contains the most important technical specification
for the device.
The reference manual can be found on the CD as an Acrobat (PDF) document.
It is designed as a supplement to the user manual and goes into detail on top-
ics that apply to a variety of devices. These include for example:
Systems design of the LCOS operating system
Configuration
Management
Diagnosis
Security
Routing and WAN functions
Firewall

Hirschmann BAT54- Rail
Preface
4
EN
Quality of Service (QoS)
Virtual Local Networks (VLAN)
Wireless Networks (WLAN)
Backup Solutions
LANCAPI
Further server services (DHCP, DNS, charge management)
This documentation was compiled …
...by several members of our staff from a variety of departments in order to
ensure you the best possible support when using your Hirschmann product.
In case you encounter any errors, or just want to issue critics or enhance-
ments, please do not hesitate to send an email directly to:
HAC-[email protected]
Our online services ( www.hirschmann-ac.com) are available to you
around the clock should you have any queries regarding the topics
discussed in this manual or require any further support. In addition
support from Hirschmann is also available to you. Telephone numbers
and contact information for Hirschmann support can be found on a
separate insert, or at the Hirschmann website.
Notes symbols
Very important instructions. If not followed, damage may result.
Important instruction that should be followed.
Additional instructions which can be helpful, but are not
required.

Hirschmann BAT54- Rail
Contents
5
EN
Contents
1 Introduction 8
1.1 What is a Wireless LAN? 8
1.1.1 Which hardware to use? 8
1.1.2 Operation modes of Wireless LANs and base stations 8
1.2 What can your Hirschmann Router do? 9
2 Installation 11
2.1 Package contents 11
2.2 System preconditions 11
2.3 Status displays, interfaces and hardware installation 12
2.4 Software installation 21
2.4.1 Which software should you install? 21
3 Basic configuration 22
3.1 Which information is necessary? 22
3.1.1 TCP/IP settings 22
3.1.2 Configuration protection 24
3.1.3 Settings for the Wireless LAN 24
3.1.4 Settings for the DSL connection 25
3.1.5 Connect charge protection 25
3.2 Instructions for LANconfig 26
3.3 Instructions for WEBconfig 27
3.4 TCP/IP settings to workstation PCs 31
4 Point-to-point connections 33
4.1 Antenna alignment for P2P operations 34
4.2 Configuration 34
4.3 Access points in relay mode 36
4.4 Security for point-to-point connections 36
4.4.1 Encryption with 802.11i/WPA 36
4.4.2 LEPS for P2P connections 38

Hirschmann BAT54- Rail
Contents
6
EN
5 Setting up Internet access 39
5.1 Instructions for LANconfig 40
5.2 Instructions for WEBconfig 41
6 Security settings 42
6.1 Security for the Wireless LAN 42
6.1.1 Closed network 42
6.1.2 Access control via MAC address 42
6.1.3 LANCOM Enhanced Passphrase Security 43
6.1.4 Encryption of the data transfer 43
6.1.5 802.1x / EAP 45
6.2 Tips for handling keys 46
6.3 The security settings wizard 46
6.3.1 Wizard for LANconfig 47
6.3.2 Wizard for WEBconfig 48
6.4 The firewall wizard 48
6.4.1 Wizard for LANconfig 48
6.4.2 Configuration under WEBconfig 49
7 Options and accessories 50
7.1 Optional Hirschmann Wireless Router antennas 50
7.2 LANCOM Public Spot Option 51
8 Troubleshooting 53
8.1 No DSL connection is established 53
8.2 DSL data transfer is slow 53
8.3 54
8.4 Unwanted connections under Windows XP 54
9 Appendix 55
9.1 Performance data and specifications 55
9.2 Contact assignment 56
9.2.1 Ethernet interface 10/100Base-TX, DSL interface 56
9.2.2 Configuration interface (Outband) 56
9.3 Declaration of conformity 56

Hirschmann BAT54- Rail
Contents
7
EN
10 Index 58

Hirschmann BAT54- Rail
Kapitel 1: Introduction
8
EN
1Introduction
1.1 What is a Wireless LAN?
The following sections describe the functionality of wireless networks
in general. The functions supported by your device are listed in the
table 'What can your Hirschmann Router do?'. Detailed information
on Wireless LANs can be found in the LCOS reference manual.
A Wireless LAN connects single terminals (e.g. PCs or notebooks) to a local
network (also LAN – Local Area Network). In contrast to a conventional LAN,
communication takes place via radio links rather than via network cables. This
is the reason why a Wireless LAN is also called a Wireless Local Area Network
(WLAN).
All functions of a cable-bound network are also available in a Wireless LAN:
access to files, servers, printers etc. is as possible as the connection of individ-
ual stations to an internal mail system or to the Internet access.
The advantages of Wireless LANs are obvious: notebooks and PCs can be set
up just where they are needed. Due to Wireless LANs, problems with missing
connections or structural alterations belong to the past.
Apart from that, wireless LANs can also be used for connections over longer
distances. Expensive leased lines and the associated construction measures
can be spared.
1.1.1 Which hardware to use?
Each station of the Wireless LAN needs access to the Wireless LAN in the form
of a wireless interface. Devices which have no built-in wireless interface can
be upgraded with a supplement card or an adapter.
1.1.2 Operation modes of Wireless LANs and base stations
Wireless LAN technology and base stations in Wireless LANs are used in the
following operation modes:
Simple direct connections between terminals without base station (ad-
hoc mode)
Larger Wireless LANs, connection to LANs with one or more base stations
(infrastructure network)
Setting-up of an Internet access

Hirschmann BAT54- Rail
Kapitel 1: Introduction
9
EN
Connecting two LANs via a direct radio link (point-to-point mode)
Connecting of devices with Ethernet interface via base stations (client
mode)
Extending an existing Ethernet network with WLAN (bridge mode)
Relay function for connecting networks via multiple access points.
1.2 What can your Hirschmann Router do?
The following table shows the properties and functions of your device.
Applications
WLAN via point-to-point and relais mode (2 WLAN modules)
Industrial operation in compact housing for cabinet or rail mounting with 24 V
supply (extended temperature range)
Internet access
IP router with Stateful Inspection Firewall
DHCP and DNS server (for LAN and WAN)
WLAN
Wireless transmission by IEEE 802.11g and IEEE 802.11b
Wireless transmission by IEEE 802.11a and IEEE 802.11h
Point-to-point mode (six P2P paths can be defined per WLAN interface)
Relay function to link two P2P connections
Turbo Mode: Double the bandwidth at 2.4 GHz and 5 GHz.
Super AG incl. hardware compression and bursting
Multi SSID
Roaming function
802.11i / WPA with hardware AES encryption
WEP encryption
(up to 128 Bit key length, WEP152)
IEEE 802.1x/EAP
MAC address filter (ACL)
Individual passphrases per MAC address (LEPS)
Closed network function
Access to RADIUS server
VLAN
Traffic lock function
LAN connection

Hirschmann BAT54- Rail
Kapitel 1: Introduction
10
EN
Fast Ethernet LAN port (10/100Base-TX)
DHCP and DNS server
WAN connection
Connection for DSL or cable modem
Internet-Zugang (IP-Router)
Stateful Inspection Firewall
Firewall filters (IP addresses, ports)
IP-Masquerading (NAT, PAT)
Quality of Service (QoS)
Power supply
Power-over-Ethernet (PoE) IEEE 802.3af
12 V via seperate power adapter (DC)
24 V (DC) via industrial interface
Redundant power supply via PoE, 12 V or 24 V
Configuration and firmware
Configuration with LANconfig or with web browser, additionally terminal
mode for Telnet or other terminal programs, SNMP interface and TFTP server
function., SSH connection.
Setup wizards
FirmSafe with firmware versions for absolutely secure software upgrades
Optional software extensions
LANCOM Public Spot Option
Housing
Industrial housing for cabinet or rail mounting

Hirschmann BAT54- Rail
Kapitel 2: Installation
11
EN
2 Installation
This chapter will assist you to quickly install hardware and software. First,
check the package contents and system requirements. The device can be
installed and configured quickly and easily if all prerequisites are fulfilled.
2.1 Package contents
Please check the package contents for completeness before starting the
installation. In addition to the base station itself, the package should contain
the following accessories:
If anything is missing, please contact your retailer or the address stated on the
delivery slip of the unit.
2.2 System preconditions
Computers that connect to a Hirschmann Router must meet the following
minimum requirements:
Operating system that supports TCP/IP, e.g. Windows XP, Windows
Millennium Edition (Me), Windows 2000, Windows 98, Windows 95,
Windows NT, Linux, BSD Unix, Apple Mac OS, OS/2.
WLAN adapter or access to the LAN (if the access point is connected to
the LAN).
The LANtools also require a Windows operating system. A web
browser is required for access to WEBconfig.
2 dualband antennas with screw connection
2 RP-SMA terminators to avoid interspersions on un-used
anntanna connections
4-pin 24 V plug for custom assembly
Connector cable for serial configuration interface
Wall and rail mounting accessories
PoE ethernet cable
Hirschmann CD
Printed documentation

Hirschmann BAT54- Rail
Kapitel 2: Installation
12
EN
2.3 Status displays, interfaces and hardware installation
Meanings of the LEDs
In the following sections we will use different terms to describe the behaviour
of the LEDs:
Blinking means, that the LED is switched on or off at regular intervals in
the respective indicated colour.
Flashing means, that the LED lights up very briefly in the respective
colour and stay then clearly longer (approximately 10x longer) switched
off.
Inverse flashing means the opposite. The LED lights permanently in the
respective colour and is only briefly interrupted.
Flickering means, that the LED is switched on and off in irregular
intervals.
LEDs of Hirschmann BAT54-Rail
 ETH 1 and
ETH 2 Status of the four LAN ports in the integrated switch:




off No network device connected
green constantly on Connection to network device operational, no data traffic
yellow flickering Data traffic

Hirschmann BAT54- Rail
Kapitel 2: Installation
13
EN
Power This LED indicates that the device is operational. After the device has been
switched on, it will flash green for the duration of the self-test.
The power LED flashes red when a charge limit is reached (’Flashing
Power LED but no connection?’ →page 14).
M 1 Provides information via the relay contact M1. The relay contact can assume
the following conditions:
Future versions of LCOS are planned to work with relay contacts.
WLAN 1
WLAN 2 Gives information about the wireless LAN access and the data traffic of the
internal WLAN modules:
green constantly on Device ready for use
red/
green blinking slow Device insecure: configuration password not assigned
red blinking Time or connect-charge reached
red blinking (fast) hardware error
off No action
green constantly on An action from the action table has been executed suc-
cessfully, the maker M1 has closed.
red constantly on An action from the action table could not be executed
successfully, the maker M1 has not closed.
off No wireless networks configured, no beacons beeing
broadcasted.
green At least one wireless network ist configured. The WLAN
module is active and broadcasting beacons.
green invers flashing Activity in wireless LAN (blinking frequency indicates the
number of registered stations)
green blinking DFS or other scanning sequence.
green flickering TX data traffic
red flickering Errot in WLAN ( TX error, z.B. sending error because of
bad connection quality)
red blinking Hardware error in WLAN modulel

Hirschmann BAT54- Rail
Kapitel 2: Installation
14
EN
Flashing Power LED but no connection?
There's no need to worry if the Power LED blinks red and you
can no longer connect to the WAN. This simply indicates that a
preset time or connect-charge limit has been reached. There
are three methods available for unlocking:
Reset connect charge protection.
Increase the limit that has been reached.
Completely deactivate the lock that has been triggered (set limit to '0').
If a time or connect charge limit has been reached, you will be notified in LANmonitor. To
reset the connect charge protection, select Reset Charge and Time Limits in the context
menu (right mouse click). You can configure the connect charge settings in LANconfig under
Management / Costs (you will only be able to access this configuration if 'Complete
configuration display' is selected under View / Options…).
You will find the connect charge protection reset in WEBconfig and all parameters under
Expert Configuration / Setup / Charges-module.
Power M1
WLAN 1
Reset
Config
(COM)
2
Main 2
Aux 2
ETH 2
(PoE)
+
-
+
-
Signal for
reached time or
connect-charge
limit

Hirschmann BAT54- Rail
Kapitel 2: Installation
15
EN
Interfaces of Hirschmann BAT54-Rail
The interfaces of the Hirschmann BAT54-Rail are located on the front panel.
Main connector for first WLAN module.
Main connector for second WLAN module.
First 10/100Base-Tx for connection to the LAN. Both 10 Mbit or 100 Mbit
connections are supported. The available transfer rate is detected
automatically (autosensing). The LAN connection features an automatic
MDI/MDIX detector enabling the use of cross-over cables.
The LAN connector on the Hirschmann Router access point supports the
Power over Ethernet standard (PoE). Further information about the
operations with PoE can be found in the information box 'Power over
Ethernet—elegant power supply over LAN cabling'.
By activated DSLoL option, the LAN connector can also be used for
connecting the access point to a broadband modem.
Second ethernet connector.
Reset button (see "Reset button functions")
Serial configuration port
Aux connector for second WLAN modul.









Hirschmann BAT54- Rail
Kapitel 2: Installation
16
EN
Aux connector for first WLAN modul.
Connection for the safety extra-low voltage (SELV/PELV) power adapter
Connection for 24 V DC safety extra-low voltage (SELV/PELV) via 4-pin
plug (Phoenix Contact, Combicon RM 3,81mm). Two 24 V voltage sources
can be connected to the redundant power supply.
The 24 V input in particular has been optimized for industrial settings.
Variation of the input voltage between 20 V to 28 V can be tolerated.
Reset switch of Hirschmann BAT54-Rail
The reset switch has two different functions depending on the length of time
that it is pressed:
Restarting the device (soft reset) – push the button for less than five
seconds. The device will restart.
Resetting the configuration (hard reset) – push the button for more
than five seconds. All the device's LEDs will light up green and stay
on. As soon as the reset switch is released, the device will restart with
factory default settings.
This hard reset causes the device to start with the default factory
settings; all previous settings are lost!
Note that resetting the device leads to a loss on the WLAN encryption
settings within the device and that the default WEP key is active again
(’Standard WEP encryption’ →page 45).

Hirschmann BAT54- Rail
Kapitel 2: Installation
17
EN
Power-over-Ethernet – elegant power supply through the LAN wiring
Hirschmann access points are prepared for the PoE power supply (Power-over-Ethernet),
corresponding to the 802.3af standard. PoE-enabled network devices can be comfortably
supplied with power feeding through the LAN wiring. A separate external power supply for
each base station is unnecessary, which reduces the the installation complexity considerably.
The power feeding into the LAN happens at a central position, either via a PoE power injector,
or via a so-called powerhub/powerswitch. For the LAN wiring is to note that all 8 wires must
be available by the cabling. PoE feeds the power over those four wires, which are normally
not used for data transfer.
The PoE supply works only in such
network segments, in which exclusively
PoE-capable devices are operating. The
protection of network devices without PoE
support is guaranteed by an intelligent
mechanism, that tests the network
segment for devices without PoE support
before starting the PoE power feeding.
The power is only switched onto the
segment, if no devices without PoE
support were detected.
In a PoE installation use exclusively devices which corre spond to the 802.3af
standard! For damages caused by inadmissible devices no warranty may be claimed.
Power
WLAN 1
Reset
Config
(COM)
2
Main 1 Main 2
Aux 1 Aux 2
24 V DC
24 V DC
ETH 1
(PoE)
ETH 2
(PoE)
Power
WLAN 1
Reset
Config
(COM)
2
Main 1 Main 2
Aux 1 Aux 2
24 V DC
24 V DC
ETH 1
(PoE)
ETH 2
(PoE)
hub/switch
powerhub/
powerswitch
LAN without power
LAN with power
Installation of several devices
Power
WLAN 1
Reset
Config
(COM)
2
Main 1 Main 2
Aux 1 Aux 2
24 V DC
24 V DC
ETH 1
(PoE)
ETH 2
(PoE)
Power Injector
Hub/Switch
Installation of single devices

Hirschmann BAT54- Rail
Kapitel 2: Installation
18
EN
Top hat rail mounting
Mount your Hirschmann BAT54-Rail in in the required position on the top
hat rail .
Wall mounting
Place the supplied top hat rail using the screws in the required position on
the wall.
Mount your Hirschmann BAT54-Rail on the top hat rail as described
above.
Connecting
Installation of the access point devices involves the following steps:
Antennas —screw the two supplied diversity antennas onto the front
side of the device:
Use the individual main connectors to build up sepetae Wireless
networks (e.g. for point-to-point applications).
Apply the main and the aux connector of a single WLAN module to
use the diversity function. The diversity function increases the quality
of the connection by transmitting and receiving via the antenna that
provides the best contact to the client.


Hirschmann BAT54- Rail
Kapitel 2: Installation
19
EN
Unused connectors should be fitted with the terminators as supplied.
This prevents stray signals from one WLAN module from interfering
with the other WLAN module.
If the device is operated inside a switching cabinet, please take the
attenuation caused by the cabinet itself into consideration when
selecting the antenna to be used. For applications of this type, we
recommend the use of an external antenna. For further information
on external antennas and their mountings, please refer to ’’
→page 51.
LAN – You can first connect the access point to your LAN. For that
purpose, plug the included network cable (green plugs) into the LAN
connector of the device or and the other end into a free network
connecting socket of your local network (resp. into a free socket of a hub/
switch). Alternatively, you can connect also a single PC.
The LAN connector identifies automatically the transfer rate (10/100 Mbp)
of the connected network device (autosensing).
For information about the installation of PoE see the info box ’Power-
over-Ethernet – elegant power supply through the LAN wiring’
→page 17.
DSLoL – If you want to use your access point in DSLoL mode, you can
either connect the device directly to the DSL modem (exclusive mode) or
to a hub resp. switch of the cable-bound LAN (automatic mode).
For the exclusive mode insert the included network cable (green
plugs) into the LAN connector of the device or and the other
end into the corresponding interface of the DSL modem.
For the automatic mode for simultaneous operating with LAN and
DSLoL insert the included network cable (green plugs) into the LAN
connector of the device or and the other end into a free
network connecting socket of your local network (resp. into a free
socket of a hub/switch).
Connect up the power supply – There are three options for supplying
power to the Hirschmann BAT54-Rail:
Use a safety extra-low voltage (SELV/PELV) power supply unit to
provide the device with power via connector .

Hirschmann BAT54- Rail
Kapitel 2: Installation
20
EN
The use of the wrong power supply unit can be of danger to the device
or persons.
For power supplied via the Ethernet cable (PoE), use the device’s LAN
connectors or . Information about the installation of PoE can be
found in the information box ’Power-over-Ethernet – elegant power
supply through the LAN wiring’ →page 17
The PoE supply for the Hirschmann BAT54-Rail is equipped for
redundancy, i.e. both LAN interfaces can be supplied by separate PoE
Injectors.
Provide power to the device via one of the 24 V plug connectors .
Use the supplied 24 V plug (wiring described in the Appendix) or
another suitable 24 V plug (Phoenix Contact, Combicon RM 3.81mm).
LAN interface: exclusive or in parallel for DSLoL
There are two principle DSLoL operation modes available. Either use the exclusive mode when
connecting your Hirschmann Router directly to a DSL modem, or use the automatic mode
when connecting the Hirschmann Router to a hub or switch of a cable-bound LAN, and
connect this hub/switch again to the DSL
modem. If the Hirschmann Router is
broadcasted as gateway via DHCP,
computers in LAN and WLAN can use the
internet connection simultaneously via
one physical interface. Set the desired
mode in LANconfig in the Interface settings
of the DSLoL interface.
DSLoL supports all PPPoE-based Internet access lines, as well as those that are
supplied with a access router with multiple fixed IP addresses (such as many SDSL
business lines).