HP Pavilion 501 Instruction Manual

HP 501 802.11ac Wireless Client Bridge
Configuration and Administration Guide
Abstract
This document describes how to configure and maintain an HP 501Wireless Client Bridge (J9835A). It is
intended for system and network administrators.
HP Part Number: 5998-4132
Published: December 2013
Edition: 1

© Copyright 2013 Hewlett-Packard Development Company, L.P.
The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in
the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an
additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein.
Acknowledgments
Microsoft® and Windows® are U.S registered trademarks of Microsoft Corporation.
Warranty
WARRANTY STATEMENT: See the warranty information sheet provided in the product box and available online.

3
Contents
1 Deploying the HP 501 .................................................................................5
Using work group bridge mode to connect wired computers to a wireless network............................................. 5
Connecting a wired device using MAC address cloning................................................................................. 6
Connecting a serial device to a wireless network........................................................................................... 7
2 Managing the HP 501 ................................................................................8
Configuring web server settings .................................................................................................................. 8
Web server configuration ..................................................................................................................... 8
Administrator login configuration ........................................................................................................... 9
Managing HTTP SSL certificates........................................................................................................... 10
Configuring a management access control list .............................................................................................12
Configuring SNMP...................................................................................................................................13
Configuring SNMPv1 and SNMPv2......................................................................................................13
SNMPv3 configuration ........................................................................................................................16
Supported MIBs..................................................................................................................................17
Setting the system time..............................................................................................................................18
Set system time.................................................................................................................................. 20
Daylight savings ................................................................................................................................ 20
3 Wireless configuration ...............................................................................21
Wireless range ........................................................................................................................................21
Configuring radio settings ........................................................................................................................ 22
Country............................................................................................................................................ 22
Basic settings .................................................................................................................................... 22
Advanced radio settings ..................................................................................................................... 23
Configuring work group bridge mode........................................................................................................ 26
Security methods ............................................................................................................................... 26
Configuring wireless bridging features ....................................................................................................... 29
Configuring MAC address cloning ....................................................................................................... 29
Redirecting unsupported traffic ............................................................................................................ 30
Configuring frame processing settings .................................................................................................. 30
Viewing wireless information .....................................................................................................................31
Viewing nearby APs............................................................................................................................31
Viewing wireless statistics for the radio ................................................................................................. 33
Viewing the MAC translation table....................................................................................................... 34
4 Network configuration ...............................................................................35
IP configuration ...................................................................................................................................... 35
IPv4 configuration.............................................................................................................................. 35
IPv6 configuration.............................................................................................................................. 36
Viewing Ethernet statistics ................................................................................................................... 37
TCP serial .............................................................................................................................................. 38
LLDP configuration....................................................................................................................................41
Loop protection........................................................................................................................................41
5 Maintenance.............................................................................................43
Configuration file management................................................................................................................. 43
Reset................................................................................................................................................ 43
Save ................................................................................................................................................ 43
Restore ............................................................................................................................................. 44
Reboot ............................................................................................................................................. 44
Software updates.................................................................................................................................... 45
Software information.......................................................................................................................... 45

4
Software upgrade.............................................................................................................................. 45
System information .................................................................................................................................. 46
6 Tools........................................................................................................47
System log ............................................................................................................................................. 47
System log configuration..................................................................................................................... 47
Remote syslog configuration ................................................................................................................ 48
Events .............................................................................................................................................. 49
RSSI log................................................................................................................................................. 49
Syslog message list .............................................................................................................................51
Email alert ............................................................................................................................................. 52
General configuration ........................................................................................................................ 52
Mail server configuration .................................................................................................................... 53
Message configuration ....................................................................................................................... 54
Sending a test message...................................................................................................................... 54
Viewing email alert status ................................................................................................................... 54
Network trace configuration ..................................................................................................................... 55
Overview.......................................................................................................................................... 55
Packet trace configuration ................................................................................................................... 55
Packet file trace ................................................................................................................................. 56
Remote packet trace........................................................................................................................... 57
Packet trace status.............................................................................................................................. 59
Packet trace file download .................................................................................................................. 60
Ping .......................................................................................................................................................61
7 Support and other resources .......................................................................62
Online documentation ............................................................................................................................. 62
Contacting HP ........................................................................................................................................ 62
HP websites ........................................................................................................................................... 62
Conventions ........................................................................................................................................... 63
A Resetting to factory defaults ........................................................................64
Factory reset procedures .......................................................................................................................... 64
Using the reset button......................................................................................................................... 64
Using the management tool ................................................................................................................ 64

1 Deploying the HP 501
The HP 501 securely connects legacy Ethernet or serial communications devices to a wireless
local area network (WLAN). It enables the deployment of legacy client devices, such as point-
of-sale terminals, servers, and printers, in any location where a WLAN signal is available, thus
eliminating the need to install a cabling infrastructure.
The following sections describe various deployment scenarios.
Using work group bridge mode to connect wired
computers to a wireless network
In this scenario, the HP 501 connects two wired computers to a private network via a wireless
connection. The two computers are linked to a switch that is connected to the HP 501 Ethernet
port. The HP 501 enables these computers to access a private network served by an upstream
AP.
This configuration uses the work group bridge mode on the HP 501. In this mode, the HP 501
is configured with an SSID for the upstream network. Computers in the subnet 192.168.5.x are
connected through a switch on the wired Ethernet interface. The upstream AP provides access
to a private network of computers on the same subnet.
If the HP 501 receives traffic from a computer on its wired interface destined for the wireless
network, it forwards the traffic to the upstream AP.
For configuration instructions, see Configuring work group bridge mode on page 26.
HP 501 in
Work group bridge mode
Private network with
DHCP server on subnet
192.168.5.0
5.11 5.25 5.25
Upstream
AP
Switch
5.26
5.27
5.11

6 Deploying the HP 501
Connecting a wired device using MAC address
cloning
In this scenario, the HP 501 makes a wired printer available to clients on the upstream wireless
network. Prior to this deployment, the printer’s MAC address was known by users from its
previous placement on a wired network. Although it is now available through a wireless
connection, it is preferable for the wireless clients to continue accessing the printer using the
MAC address, so that they do not need to change any settings. The MAC address cloning
feature on the HP 501 is used to preserve the printer’s network identity. With MAC address
cloning, the HP 501 assigns the printer's MAC address to the HP 501 wireless port, making the
HP 501 appear to be the printer on the upstream wireless network.
For configuration instructions, see Configuring MAC address cloning on page 29.
HP 501
Private network with
DHCP server on subnet
192.168.5.0
5.11 5.25 5.25
Upstream
AP
5.10 5.11
(LAN port)
MAC address
21:33:AB:FE:36:82 HP 501 MAC address
replaced by cloned address
21:33:AB:FE:36:82
Shared printer

Connecting a serial device to a wireless network 7
Connecting a serial device to a wireless network
TCP serial functionality allows devices that have no no native Ethernet or wireless connectivity to
access the network through a serial port. In this scenario, the HP 501 enables a point-of-sale
terminal to exchange traffic with a remote host. The point-of-sale terminal is connected to the
serial port on the HP 501. To connect it to a wireless network, the HP 501 converts traffic
between the serial data format and TCP/IP.
For configuration instructions, see TCP serial on page 38.
Point of sale
terminal
Host computer
TCP client
HP 501
Private network with
DHCP server on subnet
192.168.5.0
TCP
HP 501
TCP server
Serial
5.11 5.25 5.25
Serial port
Serial cable
Upstream
AP

2 Managing the HP 501
The HP 501 is managed via its web-based management tool using Microsoft Internet
Explorer 8 or later or Mozilla Firefox 17 or later. You can access the HP 501 management tool
using either HTTP or HTTPS. Using HTTPS is more secure but you will see a security warning
until you purchase and install your own certificate. With HTTPS, it is acceptable to choose the
option that allows you to proceed through the security warning.
In a web browser, specify either: http://192.168.1.1 or https://192.168.1.1. (By default,
HTTP access is disabled and any access from HTTP is automatically redirected to HTTPS.)
For information on launching the management tool for the first time, see the HP 501
802.11ac Wireless Client Bridge Quickstart.
Configuring web server settings
Select Management > Management tool to open the Configure web server
settings page.
You can configure the web server settings, change the user login name or password, and
manage the certificate file required for secure HTTP communication.
Web server configuration
Use this section to configure web access to the management tool.
HTTPS server status/HTTP server status
The HP 501 software includes HTTP and HTTPS functionality to enable communication with
your web browser. Unlike HTTP, HTTPS enables secure sessions using a digital certificate to
encrypt data exchanged between the HP 501 and your web browser. By default, HTTPS is
enabled and HTTP is disabled. When HTTP is disabled, requests from HTTP clients are
redirected to use HTTPS.
The HP 501 supports only one management session at a time via HTTP or HTTPS.

Configuring web server settings 9
HTTPS port/HTTP port
By default, the HTTP server uses the well-known logical port number 80 for communication with
clients and the HTTPS port uses port number 443. You can specify different port numbers in the
range 1025 to 65535 if the default ports are blocked or used for other protocols on your
network.
Session timeout
If there is no activity on the management session for the specified time, then the administrator
will be automatically logged off. The default timeout is 5 minutes.
Administrator login configuration
The HP 501 supports one administrator login. Use this section to change the username and
password.
Username
The default username is admin. The username can be from 1 to 32 alphanumeric characters
including special characters.
Current password
The default password is admin.
New password and Confirm password
Specify a new password for the HP 501 administrator account.
The administrator password can be from 1 to 32 alphanumeric characters including special
characters. The password cannot begin or end with a space. For security purposes, HP
recommends that the password be at least 6 characters.
Notice If you forget the administrator password, the only way to access the administrator account is to
reset the HP 501 to factory default settings. See Resetting to factory defaults on page 64.

10 Managing the HP 501
Managing HTTP SSL certificates
When HTTPS access is enabled, the HP 501 must be able to present a Secure Sockets Layer
(SSL) certificate to the web browser of a computer that attempts access to the management tool.
The certificate assures that the browser is accessing the HP 501 with the specified IP address. It
also provides information that the HP 501 and management computer use to encrypt their
communication.
A default certificate is present on the HP 501, based on the default device IP address
192.168.1.1. If you change the HP 501 IP address, you must update the certificate to reflect the
new address; otherwise, a security warning will display at the start of each new management
session. A certificate can also expire, requiring you to obtain a new one.
Viewing information about the current certificate
You can view the following information about the certificate in the Certificate status section
of the Management tool page:
Certificate file present
Indicates whether an HTTP SSL certificate file is present (yes or no).
Certificate expiration date
The date that the HTTP SSL certificate file will expire.

Configuring web server settings 11
Certificate issuer common name
The common name attribute of the server certificate. The common name is often the fully
qualified domain name for the HTTP server, or the IP address equivalent.
Updating the certificate
You can generate a new certificate directly using the HP 501 management tool, or you can
upload a certificate to the HP 501 from a computer or network location.
To generate a new certificate from the Management tool page, under Generate certificate,
click Generate.
To upload a certificate, under Upload certificate, select one of the following options:
HTTP
Choose this option if the file is located on a computer or network location. Browse to select the
file and click Upload.
TFTP
Choose this option if the file resides on a TFTP server. Provide the following information, and
then click Upload:
HTTP SSL certificate file
Specify the file path and file name on the server.
Server IP
Enter the IP address of the TFTP server.
Generating or uploading a new SSL certificate restarts the secure web server, disconnecting the
current management session. The next time you log in to the HP 501, you are prompted to
accept the new certificate.
Backing up the certificate
To back up the current certificate, under Save certificate, select one of the following options:
HTTP
Choose this option to save a backup copy to a computer or network location. Browse to the
desired location and click Download.
TFTP
Choose this option to save a backup copy to a TFTP server. Provide the following information,
and then click Download.
HTTP SSL certificate file
Specify the file path and file name on the server.
Server IP
Enter the IP address of the TFTP server.

12 Managing the HP 501
Configuring a management access control list
You can create an access control list (ACL) that lists hosts that are authorized to access the HP
501 management tool. If this feature is disabled, anyone can access the management interface
from any network client by supplying the correct user name and password.
To enable the ACL feature:
1. S e l e c t Management >Management ACL to open the Management access
control list configuration page.
2. Under Management ACL control, select Enabled.
3. Under Allowed IPv4 addresses and Allowed IPv6 addresses, enter an IPv4
address or IPv6 address and click Add.
You can add up to five addresses to each list.
4. Click Save.
To remove an address from the Allowed addresses list, select it and click Remove.

Configuring SNMP 13
Configuring SNMP
Simple Network Management Protocol (SNMP) defines a standard for recording, storing, and
sharing information about network devices. SNMP facilitates network management,
troubleshooting, and maintenance. The HP 501 supports SNMP versions 1, 2, and 3.
Key components of any SNMP-managed network are managed devices, SNMP agents, and a
management system. The agents store data about their devices in management information
bases (MIBs) and return this data to the SNMP manager when requested. Managed devices
can be network nodes such as APs, routers, switches, bridges, hubs, servers, or printers.
The HP 501 can function as an SNMP managed device for seamless integration into network
management systems such as HP IMC.
Configuring SNMPv1 and SNMPv2
The HP 501 provides a robust SNMP v1/v2 implementation supporting both industry-standard
MIB II objects and HP-specific MIB objects. Read-only or read/write access is supported.
Select Management > SNMP to open the SNMP configuration page.

14 Managing the HP 501
System settings
Under System settings, you can define basic properties of the HP 501 as an SNMP
managed device.
System name
Enter a name to identify the HP 501 as an SNMP managed device (63 alphanumeric
characters maximum). The default SNMP name is the product serial number.
System location
Enter a description of the physical location of the device (255 alphanumeric characters
maximum).
System contact
Specify an email address for a contact person for the HP 501 (255 alphanumeric characters
maximum).
SNMP configuration
You can configure the following settings in this section. Unless specifically noted, these
configuration parameters apply to SNMPv1 and SNMPv2c only.
SNMP
Select a button to enable or disable the SNMP agent. By default, the SNMP agent is enabled.
If you disable the agent, the HP 501 will not respond to SNMP requests.
Read-only community name
The community name acts as a simple authentication mechanism to restrict the devices on the
network that can request data from the device. The name functions as a password, and the
request is assumed to be authentic if the sender knows the password.
The valid range is 1 to 256 characters. The community name can be in any alphanumeric
format. The default is public.
Port number
By default, the HP 501 listens to requests from port 161 only. You can configure to another
value in the range of 1025 to 65535.
SNMP set requests
When SNMP set requests is enabled, SNMP manager devices on the network can make
changes to the HP 501 configuration by issuing “set” requests for MIB objects. When disabled,
SNMP manager devices can only retrieve configuration information by issuing “get” requests
for MIB objects. This is enabled by default.
Read-write community name
If you have enabled SNMP set requests, you can set a read-write community name.
Setting a community name is similar to setting a password. Only requests from devices that
identify themselves with this community name will be accepted.
The valid range is 1 to 256 characters. The community name can be in any alphanumeric
format. The default is private.

Configuring SNMP 15
SNMP source enable
Select Enabled if you want to restrict the source of permitted SNMP requests to a specified IP
address, hostname, or subnet. When disabled, the HP 501 accepts requests from any device
on the network that is configured with the appropriate community name. It is disabled by
default.
Hostname, address, or subnet
If you have enabled the SNMP source enable setting, specify the hostname or IPv4 address of
a device to enable it to execute get and set requests to the HP 501. Or, specify a subnet to
enable SNMP access for any device on that subnet.
The valid range is 1 to 256 characters.
As with community names, this setting provides a level of security on SNMP accesses. The
SNMP agent accept requests only from the specified device or subnet.
To specify a subnet, enter one or more subnetwork address ranges in the form address/
mask_length, where address is an IP address and mask_length is the number of mask bits. Both
formats address/mask and address/mask_length are supported. Individual hosts can also be
specified in this manner. For example, a range of 192.168.1.0/24 specifies a subnet with
address 192.168.1.0 and a subnet mask of 255.255.255.0. In this example, devices with
addresses from 192.168.1.1 through 192.168.1.254 can execute SNMP commands on the HP
501. (The address identified by the suffix .0 is reserved for the subnet address, and the address
identified by .255 is reserved for the broadcast address).
As another example, if you enter a range of 10.10.1.128/25, machines with IP addresses from
10.10.1.129 through 10.10.1.254 can execute SNMP requests on managed devices. In this
example, 10.10.1.128 is the network address and 10.10.1.255 is the broadcast address. A total
of 126 addresses are designated.
IPv6 hostname, address, or subnet
Specify the DNS hostname, address, or subnet of the IPv6 devices that can execute get and set
requests to the HP 501.
Trap destinations
The HP 501 generates and stores data about significant events, such as system errors and
configuration changes, in the form of SNMP traps. These traps can be forwarded to up to three
SNMP manager devices, which you can configure in the Trap destinations section of the page.
Community name for traps
Enter the global community string associated with SNMP traps. Traps sent from the device
provide this value as a community name.
The valid range is 1 to 256 characters. The community name can be in any alphanumeric
format. Special characters are not permitted.
Enabled
Select the check box to enable configuring up to three devices to receive traps.
Host type
Select whether the devices use an IPv4 or IPv6 address.
Host name or IP address
Specify the hostname or IP address of the selected type.

16 Managing the HP 501
SNMPv3 configuration
SNMPv3 adds security in the form of configurable encryption of data and enhanced
authentication of users. You can configure security settings on a per-user basis. You can also
configure a user as an SNMPv3 receiver, so that the HP 501 sends SNMP trap messages to the
user.
Configuring SNMPv3 users
The SNMPv3 users page enables the network administrator to define multiple user IDs with
different privileges and security levels. A user can be configured to have read or write access
with either authentication or encryption or both. Users can also be configured to receive SNMP
notifications from the HP 501.
To configure SNMPv3 users:
1. In the management tool, select Management >SNMPv3 users.
2. Enter a Name. User names can contain up to 32 alphanumeric characters.
3. Select a Group level. The built-in group levels are read-only (RO) and read-write (RW).
4. Select the type of authentication to use on SNMP requests from the user:
•MD5: Require MD5 authentication on SNMPv3 requests from the user.
•None: SNMPv3 requests from this user require no authentication.
5. If you specified MD5 authentication, enter a value in Auth key box. The authentication
key can be from 8 to 32 alphanumeric characters.
6. From the Encryption type list, select the type of privacy to use on SNMP requests from
the user:
•DES: Use DES encryption on SNMPv3 requests from the user.
•None: SNMPv3 requests from this user are not encrypted.
7. If you specified DES encryption, enter a value in the the Encryption key box. The
encryption key can be from from 8 to 32 alphanumeric characters.
8. Click Add. You can add up to eight SNMPv3 users.
9. When finished adding users, click Save.

Configuring SNMP 17
To remove a configured SNMPv3 user, select the name in the SNMPv3 user list, and then click
Remove.
Configuring SNMPv3 receivers
The HP 501 can send SNMP traps to configured SNMPv3 users. The eligible users must be
configured on the SNMPv3 users page. On the SNMPv3 receivers page, you provide IP
information for the users you select to receive traps.
To configure an SNMPv3 receiver:
1. In the management tool, select Management >SNMPv3 receivers.
2. In the IPv4/IPv6 address field, enter the IP address where the trap will be sent.
3. In the Port box, enter the logical UDP port number to associate with SNMP receiver
messages.
4. From the Users list, select the user to associate with this IP address and port, and then click
Add. You can add up to eight receivers.
5. When you are finished adding receivers, click Save.
To remove a configured SNMPv3 receiver, select the name in the SNMPv3 receiver list, and
then click Remove.
Supported MIBs
The HP 501 supports the following MIBs and MIB objects:
Standard MIBs
The following standard MIBs are supported:
•BRIDGE-MIB (802.1d) •SNMP-USM-DH-OBJECTS-MIB
•ENTITY-MIB (RFC 2737) •SNMPv2-CONF
•IANAifType-MIB •S N M P v 2- M I B ( R F C 2418 )
•IEEE802dot11- M IB •SNMPv2-SMI
•IF-MIB •SNMPv2-TC

18 Managing the HP 501
Private MIBs
The HP 501 supports a private MIB named HP-WLAN-ACCESS-POINT-MIB, with the following
organization and contact information:
This private MIB is linked to an HP product MIB tree at:
1.3 . 6.1. 4 .1.11. 2.14 .11.6.4.5.1
( is o(1) . org (3) .dod( 6 ) .in tern et(1) . priva te (4 ) .ent erp ri ses (1) . hp(11).nm(2).icf(14).hpicfObjects(11) .hpi
cfAccess(6).hpWireless(4).hpWlanProducts(5).hpWlanProduct(1)).
The HP 501 sysOID value is:
1.3 . 6.1. 4 .1.11. 2.3. 7.11.162.1
( is o(1) . org (3) .dod( 6 ) .in tern et(1) . priva te (4 ) .ent erp ri ses (1) . hp(11).nm(2).hpSystem(3).netElement(7)
.hpEtherSwitch(11). hpWlan(162).hpWlanClientBridge501(1)).
Setting the system time
Correct system time is important for proper operation of the HP 501, especially when using the
logs to troubleshoot.
Select Management > System time to open the System time page. This page enables
you to configure time server and time zone information.
•INET-ADDRESS-MIB •SNMPv2-TM
•RFC1155 - S M I •RFC4688
•RFC1213-MIB •IP-MIB
•RFC1215 •TCP-MIB
•SNMP-FRAMEWORK-MIB •UDP-MIB
•SNMP-NOTIFICATION-MIB •UCD-SNMP-MIB
•SNMP-TARGET-MIB
ORGANIZATION: HP Networking
CONTACT-INFO: Hewlett Packard Company
8000 Foothills Blvd.
Roseville, CA 95747

Setting the system time 19

20 Managing the HP 501
Set system time
This section displays the current system time. You can configure the time manually or have it
automatically configured by a Network Time Protocol (NTP) server.
Manually
Select the date, time (in 24-hour notation), and timezone.
Using network time protocol (NTP)
NTP servers transmit Coordinated Universal Time (UTC, also known as Greenwich Mean Time)
to their client systems. NTP sends periodic time requests to servers, using the returned time
stamp to adjust its clock. The timestamp is used to indicate the date and time of each event in
log messages.
When you select this option, a field displays for you to specify the NTP server. You can specify
the NTP hostname or IP address, although HP recommends that you not use the IP address, as
these are more likely to change. If you specify a hostname, note the following requirements:
•The length must be from 1 to 63 characters.
•Upper and lower case characters, numbers, and hyphens are accepted.
•The first character must be a letter (a to z or A to Z), and the last character cannot be a
hyphen.
An actual NTP server host name, pool.ntp.org, is configured by default and provides the
time when the HP 501 is connected to the Internet.
Daylight savings
Use this section to enable support for daylight savings time, if required for your location. When
you select Adjust time for daylight savings, additional fields display to enable you to
configure the starting and ending dates and times, and the DST offset.
The DST offset specifies how many minutes to move the clock forward for daylight savings
time.