Intelicis Cedar 860AG User manual

Cedar 860AG
Enterprise Dual-Radio Access Point
User Guide
Release 1.1
September 2006

Cedar 860AG Enterprise Dual-Radio Access Point
Copyright
Copyright © 2006 Intelicis Corporation. All rights reserved.
This product and documentation are protected by copyright. No part of this product or
document may be reproduced, transmitted, transcribed and stored in a retrieval system in
any form or by any means without prior written authorization of Intelicis.
Third Party Copyright Acknowledgements
Please refer to the license.pdf on the CD distributed with the Cedar860AG Enterprise
Dual-Radio Access Point for complete third party copyright acknowledgements.
2

Cedar 860AG Enterprise Dual-Radio Access Point
1Introduction................................................................................................................... 7
1.1 Wireless Network................................................................................................ 7
1.2 Wireless Distribution System (WDS)................................................................. 8
1.3 Access Point Deployment................................................................................... 9
1.4 Application Deployment................................................................................... 10
2Installation................................................................................................................... 11
2.1 Package Contents.............................................................................................. 11
2.2 Physical Description ......................................................................................... 11
2.2.1 Top Panel.............................................................................................. 11
2.2.2 Rear Panel............................................................................................. 12
2.2.3 LED Description................................................................................... 12
2.3 Install the Unit................................................................................................... 13
2.3.1 Mounting Options................................................................................. 13
2.3.2 Supplying Power to the Unit................................................................. 13
2.4 Connecting Cedar 860AG................................................................................. 13
3Initial Configuration.................................................................................................... 15
3.1 Scan Tool.......................................................................................................... 15
3.2 Default Setting.................................................................................................. 18
3.3 Web Management Interface.............................................................................. 18
3.3.1 Menu..................................................................................................... 20
3.3.2 Tool Bar................................................................................................ 20
4System......................................................................................................................... 22
4.1 System Setting .................................................................................................. 22
4.2 Change Password.............................................................................................. 23
4.3 Upgrade............................................................................................................. 24
4.4 System Configuration ....................................................................................... 26
5Network....................................................................................................................... 28
5.1 Overview........................................................................................................... 28
5.1.1 VLAN ................................................................................................... 28
5.1.2 DHCP.................................................................................................... 29
5.2 Web Interface.................................................................................................... 29
5.2.1 Network Setting.................................................................................... 29
5.2.2 VLAN ................................................................................................... 31
5.2.3 DHCP.................................................................................................... 33
5.3 Examples........................................................................................................... 34
5.3.1 Configure Static IP Address.................................................................. 34
5.3.2 Configure Management VLAN ID....................................................... 35
6Security....................................................................................................................... 36
6.1 Overview........................................................................................................... 36
6.1.1 802.1x Authentication........................................................................... 36
6.1.2 MAC Authentication............................................................................. 37
6.2 Web Interface.................................................................................................... 38
6.2.1 RADIUS Profile.................................................................................... 38
6.2.2 802.1x Profile........................................................................................ 39
6.2.3 MAC Profile.......................................................................................... 41
6.2.4 Filter...................................................................................................... 42
3

Cedar 860AG Enterprise Dual-Radio Access Point
6.3 Examples........................................................................................................... 43
6.3.1 802.1x Authentication........................................................................... 43
6.3.2 MAC Authentication............................................................................. 44
7Wireless....................................................................................................................... 45
7.1 Overview........................................................................................................... 45
7.1.1 WLAN................................................................................................... 45
7.2 Web Interface.................................................................................................... 45
7.2.1 Wireless Setting.................................................................................... 45
7.2.2 WLAN................................................................................................... 47
7.2.3 Radio..................................................................................................... 50
7.2.4 WDS...................................................................................................... 55
7.3 Examples........................................................................................................... 57
7.3.1 WLAN with WPA and 802.1x Authentication..................................... 57
7.3.2 WLAN with WEP and MAC Authentication ....................................... 58
7.3.3 WDS...................................................................................................... 59
8Management................................................................................................................ 60
8.1 Management Setting ......................................................................................... 60
8.2 SNMP................................................................................................................ 60
9Log.............................................................................................................................. 62
10 Monitor ....................................................................................................................... 63
10.1 Interfaces....................................................................................................... 63
10.2 Wireless Statistics......................................................................................... 64
10.3 Rogue APs .................................................................................................... 65
10.4 Wireless Users .............................................................................................. 65
10.5 Wireless Link................................................................................................ 66
11 Command Line Interface ............................................................................................ 69
11.1 Base Commands............................................................................................ 69
11.1.1 enable.................................................................................................... 69
11.1.2 disable................................................................................................... 69
11.1.3 config save............................................................................................ 69
11.1.4 quit ........................................................................................................ 70
11.1.5 exit......................................................................................................... 70
11.1.6 reboot .................................................................................................... 70
11.1.7 reset....................................................................................................... 71
11.1.8 up arrow................................................................................................ 71
11.1.9 down arrow ........................................................................................... 71
11.1.10 debug................................................................................................. 72
11.1.11 undebug............................................................................................. 72
11.1.12 help.................................................................................................... 72
11.2 System Commands........................................................................................ 73
11.2.1 show system.......................................................................................... 73
11.2.2 config system........................................................................................ 73
11.2.3 show sntp .............................................................................................. 74
11.2.4 config sntp............................................................................................. 74
11.2.5 upgrade.................................................................................................. 75
11.3 Network Commands ..................................................................................... 75
4

Cedar 860AG Enterprise Dual-Radio Access Point
11.3.1 show interface....................................................................................... 75
11.3.2 config interface ..................................................................................... 76
11.3.3 show vlan.............................................................................................. 76
11.3.4 config vlan ............................................................................................ 77
11.3.5 show ip.................................................................................................. 77
11.3.6 config ip................................................................................................ 78
11.4 Security Commands...................................................................................... 80
11.4.1 show auth.............................................................................................. 80
11.4.2 config auth ............................................................................................ 81
11.4.3 show filter ............................................................................................. 84
11.4.4 config filter............................................................................................ 84
11.5 Wireless Commands ..................................................................................... 85
11.5.1 show wireless........................................................................................ 85
11.5.2 config wireless...................................................................................... 86
11.5.3 show wlan ............................................................................................. 86
11.5.4 config wlan............................................................................................ 87
11.5.5 show radio............................................................................................. 88
11.5.6 config radio........................................................................................... 89
11.5.7 show wds............................................................................................... 90
11.5.8 config wds............................................................................................. 91
11.6 Management Commands .............................................................................. 91
11.6.1 show telnet............................................................................................ 92
11.6.2 config telnet .......................................................................................... 92
11.6.3 show ssh................................................................................................ 92
11.6.4 config ssh.............................................................................................. 92
11.6.5 show web .............................................................................................. 93
11.6.6 config web............................................................................................. 93
11.6.7 show snmp ............................................................................................ 93
11.6.8 config snmp........................................................................................... 94
11.6.9 show syslog........................................................................................... 94
11.6.10 config syslog..................................................................................... 95
11.7 Miscellaneous Commands ............................................................................ 95
11.7.1 ping ....................................................................................................... 95
11.7.2 traceroute............................................................................................... 95
11.7.3 show arp................................................................................................ 96
11.7.4 show memory........................................................................................ 96
11.8 Examples....................................................................................................... 96
11.8.1 System Commands................................................................................ 96
11.8.2 Network Commands ............................................................................. 97
11.8.3 802.1x Authentication........................................................................... 98
11.8.4 MAC Authentication............................................................................. 98
11.8.5 WLAN with WPA and 802.1x Authentication..................................... 99
11.8.6 WLAN with WEP and MAC Authentication ....................................... 99
11.8.7 WDS.................................................................................................... 100
Appendix I - Recovery Procedure................................................................................... 101
5

Cedar 860AG Enterprise Dual-Radio Access Point
6

Cedar 860AG Enterprise Dual-Radio Access Point
1 Introduction
This manual contains information on configuring and managing the Intelicis Enterprise
Dual-Radio Access Point – Cedar860 product family. It is organized into the following
chapters:
•Introduction: Overview of the wireless network and access point deployment
•Installation: Description of the Cedar860 hardware
•Initial Configuration: Description of Cedar860 initial configuration and the
management interfaces
•System: Instructions for changing system parameters
•Network: Instructions for changing network parameters
•Security: Instructions for configuring RADIUS and authentication profiles
•Wireless Network: Instructions for configuring and monitoring wireless network
•Management: Instructions for changing management interface settings
•Log: Description of the log file
•Monitor: Description of how to monitor the system
•Command Line Interface: Description of Command Line Interface (CLI) syntax
1.1 Wireless Network
A wireless network is a flexible data communications system that extends the capability
of the existing wired network to provide connectivity for wireless devices. Unlike the
traditional wired network which relies on physical cables and wires to transmit and
receive data, a wireless network relies on radio frequency (RF) technology to transmit
and receive data.
A Wireless Access Point (AP) is a device that connects wireless communication devices.
It is usually connected to a wired network on one end, and relays data to the wireless
network on the other end.
The advent of the wireless network opens up the possibility of what a network
infrastructure can be. Without the restriction of wires, the network can move with users
and change as fast as the organization does. Figure 1.1 illustrates a sample wireless
network.
7

Cedar 860AG Enterprise Dual-Radio Access Point
Figure 1.1 Wireless Networks
1.2 Wireless Distribution System (WDS)
With the inherent difficulties involved in physically connecting access points, a Wireless
Distribution System (WDS) provides an excellent alternative by interconnecting the
access points wirelessly. As illustrated in Figure 1.2, Access Point A has no cable access
and can not be connected with a switch or router. It relies on Access Point B to relay the
data for its remote clients.
An access point can be run as either a main or relay station. A main station is typically
connected to the wired Ethernet. A relay station relays data between a main station and
another relay station. Both main stations and relay stations accept connections from
wireless clients.
8

Cedar 860AG Enterprise Dual-Radio Access Point
Figure 1.2 Wireless Distribution Systems (WDS)
1.3 Access Point Deployment
The deployment of access point depends greatly on the building structure, the existing
wiring and the type of service to be deployed. For example, RF signals transmit much
easier through a wood-frame building than through a concrete one. For newly constructed
buildings where Ethernet cable CAT 5 is pre-installed, wiring is not a concern. For older
construction, where re-cabling is cost prohibitive, a solution which is less dependent on
wiring such as WDS may be more viable.
The access point coverage areas should overlap to ensure there are no gaps and roaming
clients always have a connection available. In addition, the number of active wireless
users and the type of service they are using (e.g. VoIP) are important factors to consider.
9

Cedar 860AG Enterprise Dual-Radio Access Point
1.4 Application Deployment
Applications can be deployed easily after a network infrastructure is in place. Figure 1.3
illustrates a possible scenario:
•High Speed Internet Access is available for all wireless clients.
•Voice over IP applications can be used for calling over the Internet.
•Streaming media data can be offered over the IP network.
•Handheld devices for mobile staff can easily communicate with each other.
•All voice, video and data are transmitted seamlessly using QoS technology.
Figure 1.3 Application Deployments
10

Cedar 860AG Enterprise Dual-Radio Access Point
2 Installation
This chapter provides instructions on how to install Cedar 860AG.
2.1 Package Contents
Before installation, please inspect the package contents first and report any missing or
damaged items to your sales representative. This package should contain the following:
•Cedar 860AG Dual-Radio Access Point
•Cedar 860AG Installation Guide
•Mounting rubber foot (for desktop installation) (4)
•Power Adaptor
•CAT5 Ethernet cable (RJ45 to RJ45)
•Cedar 860AG Product Resource CD
2.2 Physical Description
2.2.1 Top Panel
Figure 2.1 Cedar 860AG Top Panel
•Power LED
This Power LED is constantly ON when power is applied.
•Ethernet Link/Activity LED
This LED is ON when Ethernet establishes link; flashing when there is Ethernet
activity.
•802.11a Wireless LED
11

Cedar 860AG Enterprise Dual-Radio Access Point
This LED is slow flashing when 802.11a wireless is ready for client to associate; fast
flashing when there is traffic on 802.11a wireless.
•802.11g Wireless LED
This LED is slow flashing when 802.11g wireless is ready for client to associate;
fast flashing when there is traffic on 802.11g wireless.
2.2.2 Rear Panel
•DC Power Jack
The DC power jack provides the connection to the external 5V DC 2A power supply.
•Reset Button
The Cedar 860AG rear panel contains one reset button which will reset the unit to the
manufacturer’s default configuration. Press and hold the button down for at least 5
seconds and the unit will automatically reboot and reset to the manufacturer’s default
configuration.
•RJ45 Connector
The RJ45 connector provides the connection switch or gateway through a CAT 5
cable. This connector also provides the connection to PoE power source.
•DB9 Connector
This DB9 connector provides the connection to the PC serial port for local
management. A straight RS232 cable is needed (not included in the package).
•Antenna Connectors
Two reverse polarity TNC jack connectors are provided for connecting to antennas.
The antennas must have a reverse polarity TNC plug connector to be used with Cedar
860AG.
2.2.3 LED Description
LED Color Indication
Green, solid The unit power is on.
Off The unit power is off.
Blue, solid The Ethernet port has successful link.
Flashing The Ethernet port is linked and has activity
Orange, slow
flashing The 802.11a wireless is ready for client to associate.
Fast flashing There is activity on 802.11a wireless
Off The 802.11a wireless is not ready.
Orange, slow The 802.11g wireless is ready for client to associate.
12

Cedar 860AG Enterprise Dual-Radio Access Point
flashing
Fast flashing There is activity on 802.11g wireless
Off The 802.11g wireless is not ready.
2.3 Install the Unit
2.3.1 Mounting Options
The Cedar 860AG is designed with two installation options:
•On desktop or shelf
•Wall mount
Mounting Cedar 860AG on desktop or shelf:
•Adhere the 4 mounting rubber feet to the bottom of the unit.
•Place the unit on a secure, flat surface.
Mounting Cedar 860AG on wall:
•At desired wall location, position nails to match the wall mount holes on the bottom
of the unit.
•Secure unit firmly on the nails.
2.3.2 Supplying Power to the Unit
The Cedar 860AG is equipped with a universal 100-240 VAC, 50/60 Hz power supply.
To power the unit, connect the included power adaptor to the wall outlet and plug the DC
output connector into the power jack on the rear panel of Cedar 860AG.
Cedar 860AG also supports the 802.3af PoE standard. If your switch or gateway has the
capability to supply PoE to remote devices, simply connect the Ethernet cable from your
switch or gateway to the RJ45 connector on the rear panel of Cedar 860AG. This will
automatically supply power to the unit.
2.4 Connecting Cedar 860AG
To establish a connection to Cedar’s console interface, you will need to:
•Connect a regular straight serial cable to the console port located on the rear panel of
the unit.
•Connect the other end of the serial cable to a terminal or PC.
After the unit is turned on, the LEDs on the top panel will follow the pattern described
below:
•The Power LED goes on.
•The Ethernet LED will be ON if the Ethernet port is connected to a switch or gateway
and a valid link is established.
13

Cedar 860AG Enterprise Dual-Radio Access Point
•After 30 seconds, the 802.11a and 802.11g LEDs will be flashing.
14

Cedar 860AG Enterprise Dual-Radio Access Point
3 Initial Configuration
This chapter contains the following information:
•Discover AP’s IP address using Scan Tool
•Cedar’s default settings
•Web Management Interface
•Command Line Interface
3.1 Scan Tool
Cedar 860AG by default acquires its IP address and subnet mask from the DHCP server.
The administrator can use the Scan Tool to find out the AP’s IP address.
Scan Tool is a utility that is included in the AP CD-ROM. It scans the network and
displays all the available Cedar Access Points. Scan Tool provides the following
functions:
zDiscover Cedar AP’s IP address, MAC address and firmware version.
zChange AP’s IP address.
zUpgrade AP’s firmware
zSwitch on/off AP’s telnet, SNMP and web interface.
Please follow the steps described below to use the Scan Tool:
1. Insert the installation CD into your CD-ROM drive to install the Scan Tool software.
Follow the on-screen instructions to install Scan Tool on your computer.
2. Scan Tool requires Java 1.4 or newer version installed on your computer. You can
choose to install Scan Tool along or with the Java software.
3. Double click the Scan Tool icon on the desktop to launch the Scan Tool software.
Scan Tool scans the local area network and displays all the Cedar Access Points that
it discovers (Figure 3.1).
15

Cedar 860AG Enterprise Dual-Radio Access Point
Figure 3.1 Scan Tool Main Screen
4. Locate the AP you want to manage by using the MAC address (AP’s MAC address
can be found at its back panel). If the AP has acquired an IP address from the DHCP
server, use it to log in to AP’s web interface (section 3.3).
5. If DHCP server is not available in the system, AP’s IP address is displayed as
0.0.0.0. Click the AP entry and then the Configure button to enter the configure IP
screen (Figure 3.2).
16

Cedar 860AG Enterprise Dual-Radio Access Point
Figure 3.2 Scan Tool Configure IP Screen
6. The administrator can assign a static IP address to the AP by :
a) Change IP address mode to static
b) Enter IP address, subnet mask and gateway IP address.
c) Provide the SNMP read/write community name in order to make any
configuration change. The Cedar initial SNMP read/write community name is
private.
7. You can also use Scan Tool to upgrade the AP firmware by clicking the Upgrade
tab:
a) Select either FTP or TFTP protocol.
b) Enter server IP address, firmware name and optional FTP login name and
password.
c) Provide the SNMP read/write community name. The Cedar initial SNMP
read/write community name is private.
8. In case SNMP, telnet or web interface are accidentally turned off, Scan Tool can be
used to turn them back on again by clicking the Advanced tab.
)Intelicis Scan Tool scans Intelicis access points only. It does not scan access points
from other manufactures.
17

Cedar 860AG Enterprise Dual-Radio Access Point
)Please run one instance of Scan Tool on a network. Running multiple instances may
receive incorrect scan result.
3.2 Default Setting
Table 3.1 lists Cedar’s manufacturer default settings:
Default login name admin
Default login password changeitnow
Default enable password changeitnow
Default IP address Acquired from the DHCP server.
Default subnet mask Acquired from the DHCP server.
Default gateway Acquired from the DHCP server.
Default DNS IP address Acquired from the DHCP server
Default management VLAN ID Untagged
Default SSID for Radio 1 Intelicis-a
Default SSID for Radio 2 Intelicis-g
Table 3.1 Cedar Manufacturer Default Setting
3.3 Web Management Interface
The Cedar Web Management Interface is accessible from any web browser on the
network. Enter the Cedar IP address and port 8080 in the browser address line to activate
the Cedar Web Interface.
You will be prompted for username and password. Enter the default username “admin”
and password “changeitnow”.
18

Cedar 860AG Enterprise Dual-Radio Access Point
After the initial login, the home page is displayed. The administrator now has easy access
to configuring system parameters as well as managing any AP activities.
19

Cedar 860AG Enterprise Dual-Radio Access Point
3.3.1 Menu
The menu displayed on the left side of the screen allows the administrator to perform the
following configurations:
•System: Configure system parameters such as system name, password and upgrade
•Network: Configure network parameters such as IP address, default route and VLAN
•Security: Configure security parameters such as RADIUS and authentication profiles
•Wireless: Configure wireless parameters such as SSID, radios
•Management: Configure Telnet, SSH and SNMP parameters
•Log: Display system log file
•Monitor: Display statistics and usage of the system
3.3.2 Tool Bar
The tool bar located in the upper right-hand corner provides a shortcut to frequently used
operations. Here is a summary of each of their functions.
Enable
Cedar 860 has two operating modes: normal and privilege. The normal mode allows
the administrator to view most, but not all of the system parameters. The privilege
mode allows the administrator to view all of the system parameters as well as
modify them.
In order to perform any configuration changes, you need to be in the privilege mode.
To enter the privilege mode, click Enable, and enter your privilege password.
Save
20