Lancom OAP-54-1 User manual

110610/0708
LANCOM Systems GmbH
Adenauerstr. 20/B2
52146 Würselen
Germany
E-Mail: [email protected]
Internet www.lancom.de
LANCOM OAP-54-1 Wireless
LANCOM OAC-54-1 Wireless
LANCOM OAP-54-1 Wireless Bridge Kit
LANCOM OAP-54-1 Wireless – LANCOM OAC54-1 Wireless
쮿Handbuch
쮿Manual
...connecting your business
110610_LC-OAP54-1-OAC54-1-BRIDGE1 1110610_LC-OAP54-1-OAC54-1-BRIDGE1 1 15.07.2008 05:34:4815.07.2008 05:34:48

LANCOM OAP-54-1 Wireless
LANCOM OAC-54-1 Wireless
LANCOM OAP-54-1 Wireless Bridge Kit

© 2008 LANCOM Systems GmbH, Wuerselen (Germany). All rights reserved.
While the information in this manual has been compiled with great care, it may not be deemed an assurance of product
characteristics. LANCOM Systems shall be liable only to the degree specified in the terms of sale and delivery.
The reproduction and distribution of the documentation and software included with this product is subject to written per-
mission by LANCOM Systems. We reserve the right to make any alterations that arise as the result of technical develop-
ment.
All explanations and documents for registration of the products you find in the appendix of this documentation, if they
were present at the time of printing.
Trademarks
Windows®, Windows Vista™, Windows XP®and Microsoft®are registered trademarks of Microsoft, Corp.
The LANCOM Systems logo, LCOS and the name LANCOM are registered trademarks of LANCOM Systems GmbH. All other
names mentioned may be trademarks or registered trademarks of their respective owners.
This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit http://www.openssl.org/.
This product includes cryptographic software written by Eric Young ([e-mail]).
This product includes software developed by the NetBSD Foundation, Inc. and its contributors.
This product includes the LZMA SDK written by Igor Pavlov.
Subject to change without notice. No liability for technical errors or omissions.
LANCOM Systems GmbH
Adenauerstr. 20/B2
52146 Wuerselen
Germany
www.lancom.eu
Wuerselen, Juli 2008
110610/0708

LANCOM OAP-54-1 Wireless – LANCOM OAC-54-1 Wireless
Preface
3
EN
Preface
Thank you for placing your trust in this LANCOM Systems product.
The LANCOM OAP/OAC-54-1 Wireless are designed to offer high-performance
wireless LAN in tough environments.
The housing that conforms with IP67 and the facilities for sturdy mounting on
walls or poles all make the LANCOM OAP-54-1 Wireless ideally suited for loca-
tions where the demands on stability and robustness are at their highest–in
temperatures from -30° up to +70°C.
With the integrated 54/108 Mbps WLAN module according to IEEE 802.11a/
h or IEEE 802.11b/g the LANCOM OAP-54-1 Wireless work in the 2,4 or 5 GHz
frequency range.
The modells of the LANCOM OAP/OAC-54-1 Wireless series can be configured
in standalone, managed and client mode (LANCOM OAC-54-1 Wireless client
mode only). In managed mode, the access point can be securely managed by
the LANCOM WLAN Controller.
Model variants
This documentation is intended for LANCOM OAP/OAC-54-1 Wireless users.
The following models are available:
The LANCOM OAP-54-1 Wireless with one integrated WLAN module and
one integrated antenna for access point operation or as hot spot with
addionional software option.
The LANCOM OAC-54-1 Wireless with one integrated WLAN module and
one integrated antenna for client mode operation only.
The LANCOM OAP-54-1 Wireless Bridge Kit comes as bundle with two
LANCOM OAP-54-1 Wireless for the quick set up of point to point connec-
tions (WLAN bridge).
In the following parts of this documentation the LANCOM OAP-54-1
Wireless Bridge Kit is referenced only, when special features of the
bundle are described. In all other cases the descriptions for the
LANCOM OAP-54-1 Wireless are valid for the LANCOM OAP-54-1
Wireless Bridge Kit too.
Model
restrictions
Passages applying only to certain models are identified either in the text itself
or by a comment in the margin.

LANCOM OAP-54-1 Wireless – LANCOM OAC-54-1 Wireless
Preface
4
EN
Otherwise the documentation refers to all models collectively as the LANCOM
OAP/OAC-54-1 Wireless series.
Security settings
To maximize the security available from your product, we recommend that you
undertake all of the security settings (e.g. firewall, encryption, access protec-
tion) that were not already activated when you purchased the product. The
LANconfig Wizard 'Security Settings' will help you with this task. Further infor-
mation is also available in the chapter 'Security settings'.
We would additionally like to ask you to refer to our Internet site www.lan-
com.eu for the latest information about your product and technical develop-
ments, and also to download our latest software versions.
User manual and reference manual
The documentation of your device consists of the following parts:
Installation guide
User manual
Reference manual
You are now reading the user manual. It contains all information you need to
put your device into operation. It also contains all of the important technical
specifications.
The reference manual can be found on the LANCOM product CD as an Acrobat
(PDF) document. It is designed as a supplement to the user manual and goes
into detail on topics that apply to a variety of models. These include, for
example:
The system design of the operating system LCOS
Configuration
Management
Diagnosis
Security
Routing and WAN functions
Firewall
Quality of Service (QoS)
Virtual Private Networks (VPN)
Virtual Local Networks (VLAN)
Wireless networks (WLAN)

LANCOM OAP-54-1 Wireless – LANCOM OAC-54-1 Wireless
Preface
5
EN
Backup solutions
Further server services (DHCP, DNS, charge management)
This documentation was created by …
... several members of our staff from a variety of departments in order to
ensure you the best possible support when using your LANCOM product.
In case you encounter any errors, or just want to issue critics enhancements,
please do not hesitate to send an email directly to:
[email protected]
Our online services www.lancom.eu are available to you around the
clock should you have any queries regarding the topics discussed in
this manual or require any further support. The area 'Support' will
help you with many answers to frequently asked questions (FAQs).
Furthermore, the knowledgebase offers you a large reserve of infor-
mation. The latest drivers, firmware, utilities and documentation are
constantly available for download.
In addition, LANCOM support is available. For telephone numbers and
contact addresses of LANCOM support, please see the enclosed leaf-
let or the LANCOM Systems website.
Information symbols
Very important instructions. Failure to observe this may result in damage.
Important instruction that should be observed.
Additional information that may be helpful but which is not required.

LANCOM OAP-54-1 Wireless – LANCOM OAC-54-1 Wireless
Content
6
EN
Content
1 Introduction 9
1.1 What is a wireless LAN? 9
1.1.1 Modes of operation of wireless LANs and access points 9
1.2 Just what can your LANCOM OAP/OAC-54-1 Wireless do? 10
2 Installation 14
2.1 Package contents 14
2.2 System requirements 15
2.2.1 Configuring the LANCOM devices 15
2.2.2 Operating access points in managed mode 15
2.3 Status displays and interfaces 15
2.3.1 LEDs of LANCOM OAP-54-1 Wireless and
LANCOM OAC-54-1 Wireless 16
2.3.2 Connectors of LANCOM OAP-54-1 Wireless and
LANCOM OAC-54-1 Wireless 17
2.3.3 Mounting and connectiong the LANCOM OAP-54-1
Wireless and LANCOM OAC-54-1 Wireless 19
2.4 Software installation 25
2.4.1 Starting the software setup 25
2.4.2 Which software should I install? 26
3 Basic configuration 27
3.1 What details are necessary? 27
3.1.1 TCP/IP settings 27
3.1.2 Configuration protection 29
3.2 Instructions for LANconfig 29
3.3 Instructions for WEBconfig 31
3.4 TCP/IP settings to workstation PCs 36

LANCOM OAP-54-1 Wireless – LANCOM OAC-54-1 Wireless
Content
7
EN
4 Security settings 37
4.1 Security for the Wireless LAN 37
4.1.1 Closed network 37
4.1.2 Access control via MAC address 38
4.1.3 LANCOM Enhanced Passphrase Security 38
4.1.4 Encryption of the data transfer 39
4.1.5 802.1x / EAP 39
4.1.6 IPSec over WLAN 40
4.2 Tips for handling keys 40
4.3 The security settings wizard 40
4.3.1 Wizard for LANconfig 41
4.3.2 Wizard for WEBconfig 42
4.4 The security checklist 42
5 Advanced wireless LAN configuration 45
5.1 WLAN configuration with the wizards in LANconfig 45
5.2 Point-to-point connections 47
5.2.1 Geometric dimensioning of outdoor wireless
network links 48
5.2.2 Antenna alignment for P2P operations 52
5.3 Configuration of P2P connections 54
5.3.1 Security for point-to-point connections 56
5.4 Client mode 58
5.4.1 Client settings 59
5.4.2 Set the SSID of the available networks 60
5.4.3 Encryption settings 61
6 Setting up Internet access 63
6.1 The Internet Connection Wizard 64
6.1.1 Instructions for LANconfig 64
6.1.2 Instructions for WEBconfig 65
6.2 The Firewall Wizard 65
6.2.1 LANconfig Wizard 65
6.2.2 Configuration under WEBconfig 66

LANCOM OAP-54-1 Wireless – LANCOM OAC-54-1 Wireless
Content
8
EN
7 Options and accessories 67
7.1 Optional LANCOM WLAN antennas 67
7.1.1 Antenna Diversity 68
7.1.2 Installation of AirLancer Extender antennas 68
7.2 LANCOM Public Spot Option 69
8 Troubleshooting 71
8.1 No DSL connection is established 71
8.2 DSL data transfer is slow 71
8.3 Unwanted connections under Windows XP 72
9 Appendix 73
9.1 Performance data and specifications 73
9.2 Contact assignment 74
9.2.1 LAN/WAN interface 10/100Base-TX, DSL interface 74
9.2.2 Configuration interface (Outband) 74
9.3 Declaration of conformity 75
10 Index 76

LANCOM OAP-54-1 Wireless – LANCOM OAC-54-1 Wireless
Chapter 1: Introduction
9
EN
1Introduction
1.1 What is a wireless LAN?
The following sections describe the functionality of wireless networks
in general. You can see from the table 'What your LANCOM can do'
further below which functions your device supports. Please refer to
the reference manual for further information on this topic.
A wireless LAN connects individual end-user devices (PCs and mobile compu-
ters) to form a local network (also called – Local Area Network). In contrast
to a traditional LAN, communication takes place over a wireless connection
and not over network cables. For this reason it is called a Wireless Local Area
Network (WLAN).
A wireless LAN provides the same functionality as a cable-based network:
Access to files, servers, printers etc. as well as the integration of individual
work stations into a corporate mail system or access to the Internet.
There are obvious advantages to wireless LANs: Notebooks and PCs can be
installed where they are needed—problems with missing connections or
structural changes are a thing of the past with wireless networks.
Apart from that, wireless LANs can also be used for connections over longer
distances. Expensive leased lines and the associated construction measures
can be saved.
LANCOM Wireless Routers and LANCOM Access Points can be opera-
ted either as self-sufficient Access Points with their own configuration
(WLAN modules in "Access Point mode“) or as components in a WLAN
infrastructure, which is controlled from a central WLAN-Controller
("managed mode"). Please observe the corresponding notices to this
in this documentation.
1.1.1 Modes of operation of wireless LANs and access points
Wireless LAN technology and access points in wireless LANs are used in the
following modes of operation:
Simple, direct connection between terminal devices with an access point
(ad-hoc mode)
Extensive wireless LANs, possibly connected to a LAN, with one or more
access points (infrastructure network)

LANCOM OAP-54-1 Wireless – LANCOM OAC-54-1 Wireless
Chapter 1: Introduction
10
EN
Transmission of VPN-encrypted connections with VPN pass through
Establishing access to the Internet
Connecting two LANs over a wireless link (point-to-point mode)
Connecting devices with an Ethernet interface via an access point (client
mode)
Extending an existing Ethernet network with a wireless LAN (bridge mode)
Relay function for connecting networks via multiple access points
Central administration using a LANCOM WLAN Controller
1.2 Just what can your LANCOM OAP/OAC-54-1 Wireless
do?
The following table provides a comparison of the properties and functions of
your device.
LANCOM
OAP-54-1
Wireless
LANCOM
OAC-54-1
Wireless
Operating modes
Point-to-point mode (six P2P paths can be defined per
WLAN interface)
✔
Access point mode ✔
Client mode ✔✔
Managed mode for central configuration of WLAN mod-
ules by a WLAN Controller
✔
IP router ✔✔
Applications
Outdoor operation in tough environments with extreme
temperature ranges(-30 °C up to +70 °C)
✔✔
Internet Access ✔
Stateful Inspection Firewall ✔
DHCP and DNS server (for LAN) ✔✔
DHCP and DNS client (for WAN) ✔
N:N mapping for routing networks with the same IP-
address ranges
✔✔

LANCOM OAP-54-1 Wireless – LANCOM OAC-54-1 Wireless
Chapter 1: Introduction
11
EN
Policy-based routing ✔✔
VRRP ✔✔
PPPoE Server ✔✔
WAN RIP ✔✔
Spanning Tree protocol ✔✔
Layer 2 QoS tagging ✔✔
WLAN
Wireless transmission by IEEE 802.11g and IEEE 802.11b ✔✔
Wireless transmission by IEEE 802.11a and IEEE 802.11h ✔✔
Integrated antenna with antenna gain 13.5 dBi at 2.4
GHz and 15.5 dBi at 5 GHz
✔✔
Turbo Modus: Bandbreitenverdopplung im 2,4 GHz- und
5 GHz-Bereich
✔✔
Super AG inkl. Hardware-Compression und Bursting ✔✔
Multi SSID ✔
Roaming function ✔Client only
802.11i / WPA with hardware AES encryption ✔✔
WEP encryption (up to 128 Bit key length, WEP152) ✔✔
IEEE 802.1x/EAP Authenticator and supplicant in client
mode
✔
IEEE 802.1x/EAP supplicant only in client mode ✔
MAC address filter (ACL) ✔
Individual passphrases per MAC address (LEPS) ✔
Closed network function ✔
Integrated RADIUS server ✔
VLAN ✔✔
LANCOM
OAP-54-1
Wireless
LANCOM
OAC-54-1
Wireless

LANCOM OAP-54-1 Wireless – LANCOM OAC-54-1 Wireless
Chapter 1: Introduction
12
EN
Intra-Cell Blocking ✔
WLAN QoS (IEEE 802.11e, WME) ✔✔
LAN connection
Fast Ethernet LAN port (10/100Base-TX) ✔✔
Power-over-Ethernet (PoE) ✔✔
DHCP and DNS server ✔✔
WAN connection
Connection for DSL modem (DSLoL) ✔✔
Internet connection (IP-Router)
Stateful Inspection Firewall ✔✔
Firewall filters (IP addresses, ports) ✔✔
IP-Masquerading (NAT, PAT) ✔✔
Quality of Service (QoS) ✔✔
Power supply
Power-over-Ethernet (PoE) according to IEEE 802.3af ✔✔
Configuration and firmware
Configuration with LANconfig or with web browser,
additionally terminal mode for Telnet or other terminal
programs, SNMP interface and TFTP server function.,
SSH connection.
✔✔
Setup wizards ✔✔
FirmSafe with firmware versions for absolutely secure
software upgrades
✔✔
Monitoring and management of the WLAN with Rogue
AP Detection
✔
Optional software extensions
LANCOM Public Spot Option ✔
LANCOM
OAP-54-1
Wireless
LANCOM
OAC-54-1
Wireless

LANCOM OAP-54-1 Wireless – LANCOM OAC-54-1 Wireless
Chapter 1: Introduction
13
EN
Optional hardware extensions
AirLancer Extender antennas for increased range ✔✔
Housing
IP66-rated housing for deployment in extreme environ-
ments
✔✔
LANCOM
OAP-54-1
Wireless
LANCOM
OAC-54-1
Wireless

LANCOM OAP-54-1 Wireless – LANCOM OAC-54-1 Wireless
Chapter 2: Installation
14
EN
2 Installation
This chapter will assist you to quickly install hardware and software. First,
check the package contents and system requirements. The device can be
installed and configured quickly and easily if all prerequisites are fulfilled.
2.1 Package contents
Please check the package contents for completeness before starting the
installation. In addition to the base station itself, the package should contain
the following accessories:
If anything is missing, please contact your retailer or the address stated on the
delivery slip of the unit.
LANCOM
OAP-54-1
Wireless
LANCOM
OAC-54-1
Wireless
LANCOM
OAP-54-1
Wireless
Bridge Kit
LANCOM OAP-54-1 Wireless 1 2
LANCOM OAC-54-1 Wireless 5
LAN cable for connecting to PoE Injector with waterproof
screw connections, 15 m
152
External 360° dualband antennas with N-plug 2
Mast and wall mount accessories ✔✔✔
PoE Port Injektor 1 5 2
Power cable for PoE Power Injector 1 5 2
Grounding cable with srews 1 5 2
Terminator for a free antanna connector 1 5 2
Serial configuration cable 1 1 1
Plug for resetting the device via serial interface 1 1 1
Surge protector AirLancer Extender SA-LAN 2
LANCOM CD ✔✔✔
Printed documentation ✔✔✔

LANCOM OAP-54-1 Wireless – LANCOM OAC-54-1 Wireless
Chapter 2: Installation
15
EN
2.2 System requirements
2.2.1 Configuring the LANCOM devices
Computers that connect to a LANCOM must meet the following minimum
requirements:
Operating system that supports TCP/IP, e.g. Windows Vista™,
Windows XP, Windows Millennium Edition (Me), Windows 2000, Win-
dows 98, Linux, BSD Unix, Apple Mac OS, OS/2.
Access to the LAN via the TCP/IP protocol.
Wireless LAN adapter or LAN access (if the access point is to be connected
to the LAN).
The LANtools also require a Windows operating system. A web brow-
ser under any operating system provides access to WEBconfig.
2.2.2 Operating access points in managed mode
LANCOM Wireless Routers and LANCOM Access Points can be operated either
as self-sufficient Access Points with their own configuration ("Access Point
mode“) or as components in a WLAN infrastructure, which is controlled from
a central WLAN-Controller ("managed mode").
2.3 Status displays and interfaces
Meanings of the LEDs
In the following sections we will use different terms to describe the behaviour
of the LEDs:
Blinking means, that the LED is switched on or off at regular intervals in
the respective indicated colour.
Flashing means, that the LED lights up very briefly in the respective
colour and stay then clearly longer (approximately 10x longer) switched
off.
Inverse flashing means the opposite. The LED lights permanently in the
respective colour and is only briefly interrupted.
Flickering means, that the LED is switched on and off in irregular inter-
vals.

LANCOM OAP-54-1 Wireless – LANCOM OAC-54-1 Wireless
Chapter 2: Installation
16
EN
2.3.1 LEDs of LANCOM OAP-54-1 Wireless and LANCOM OAC-54-1
Wireless
The front panel of the unit feature a series of light emitting diodes (LEDs) that
provide information on the status of the device.
Power This LED provides information on the device's operating state. After being
switched on, it blinks green during the self-test. The LED then shines con-
stantly to indicate operational readiness, unless an error is detected as indi-
cated by a code blinked in red.
The power LED blinks alternately in green until a configuration pass-
word has been set. Without a configuration password, the configura-
tion data in the LANCOM are unprotected. Normally you would set a
configuration password during the basic configuration (instructions in
the following chapter). Information about setting a configuration
password at a later time is available in the section 'The Security
Wizard'.
WLAN Link Provides information about the WLAN connections via the internal WLAN
module.
쐃쐇 쐋
Off Device switched off
Green On (perma-
nently)
Device operational
Red Blinking The device is locked because location verification was
not successful

LANCOM OAP-54-1 Wireless – LANCOM OAC-54-1 Wireless
Chapter 2: Installation
17
EN
The following can be displayed for WLAN link:
ETH LAN connector status:
2.3.2 Connectors of LANCOM OAP-54-1 Wireless and LANCOM OAC-
54-1 Wireless
The connections and switches of the LANCOM OAP-54-1 Wireless and
LANCOM OAC-54-1 Wireless are located on the bottom side.
쐃Earth cable connector.
쐇Connector for serial configuration cable and reset plug (see 'The reset
function').
쐋Aux connector for external antennas. Diversity antennas are connected to
the Aux connector.
Off No WLAN network defined or WLAN module deactiva-
ted. The WLAN module is not transmitting beacons.
Green At least one WLAN network is defined and WLAN
module activated. The WLAN module is transmitting
beacons.
Green Inverse flashing Number of flashes = number of connected WLAN stati-
ons and P2P wireless connections, followed by a pause
(default).
Alternatively, the frequency of the flashed can indicate
the input sensitivity.
Green Blinking DFS scanning or other scan procedure.
Off No networking device attached
Green On (perma-
nently)
Connection to network device operational, not data traffic
Green Flickering Data traffic
쐏쐄쐂
쐋쐃쐇

LANCOM OAP-54-1 Wireless – LANCOM OAC-54-1 Wireless
Chapter 2: Installation
18
EN
쐏Goretex membrane for compensation of fluctuations in pressure and
humidity.
쐄Main connector for external antennas. Additional AirLancer antennas are
connected to the Main connectors if necessary. The integrated RF switch
automatically changes to the usage of an external antenna.
쐂10/100Base-Tx for connection to the LAN. Both 10 Mbit or 100 Mbit con-
nections are supported. The available transfer rate is detected automati-
cally (autosensing). The LAN connection features an automatic MDI/MDIX
detector enabling the use of cross-over cables.
The LAN connector on the LANCOM OAP/OAC-54-1 Wireless supports
Power over Ethernet (PoE).
The reset function
Via the serial interface the device can either be bootet (restarted) or reset (to
the factory settings).
Unsrew the fitting of the “COM/Reset” interface at the bottom of the device.
Insert the reset plug to the serial interface. Via this plug, two connectors of
the interface are bridged, which starts the reset process.
Press the reset plug briefly to re-start the device. Pressing the button for 5
seconds or longer restarts the device and resets the configuration to its factory
settings. All LEDs on the device light up continuously. Once the switch is
released the device will restart with the restored factory settings.
After resetting, the device starts completely unconfigured and all
settings are lost. If possible be sure to backup the current device
configuration before resetting.
After resetting, the LANCOM Access Point returns to managed mode,
in which case the configuration cannot be directly accessed via the
WLAN interface!

LANCOM OAP-54-1 Wireless – LANCOM OAC-54-1 Wireless
Chapter 2: Installation
19
EN
2.3.3 Mounting and connectiong the LANCOM OAP-54-1 Wireless
and LANCOM OAC-54-1 Wireless
The material from the LANCOM OAP/OAC-54-1 Wireless includes beside the
screws, nuts and locking rings the following components:
Material
쐃Mounting arm
쐇Connector flange for the Access Point
쐋clamp profile
햲Screw the Connector flange for the Access Point with the four M5 x 12-
screws as well as with the appropriate washers to the rear of the chassis.
Before mounting external antennas, please observe the information on lightning pro-
tection in the LANCOM Outdoor Wireless Guide. Mounting antennas without adequate
lightning protection could lead to serious damage to the access point and the network
infrastructure connected to it.
쐃쐇
쐋