Nortel 120 Guide

BAP120
Using the Nortel Business
Access Point 120
NN47921-301
.

Document status: Standard
Document version: 01.01
Document date: August 2006
Copyright © 2006, Nortel Networks
All Rights Reserved.
Sourced in Canada and the United States of America.
The information in this document is subject to change without notice. The statements, configurations, technical
data, and recommendations in this document are believed to be accurate and reliable, but are presented without
express or implied warranty. Users must take full responsibility for their applications of any products specified in this
document. The information in this document is proprietary to Nortel Networks.
*Nortel, Nortel (Logo), the Globemark, and This is the way, This is Nortel (Design mark) are trademarks of Nortel
Networks.
*Microsoft, MS, MS-DOS, Windows, and Windows NT are registered trademarks of Microsoft Corporation.
All other trademarks and registered trademarks are the property of their respective owners.

3
Contents
Introduction 7
BAP120 Fundamentals 9
BAP120 functions 9
Radio characteristics 10
BAP120 user interfaces 10
Hardware description 11
Antennas 11
LED indicators 12
Security slot 13
Console port 13
Ethernet port 13
Reset button 14
Power connector 14
Network topologies 14
Infrastructure wireless LAN 14
Infrastructure wireless LAN for roaming wireless PCs 15
Infrastructure wireless bridge 16
Infrastructure wireless repeater 17
System defaults 18
BAP120 installation and initial configuration 23
Installing the BAP120 hardware 25
BAP120 hardware installation procedures 25
Mounting the access point on a wall or ceiling 27
Mounting the BAP120 on a horizontal surface 28
Attaching the antenna 29
Powering up the BAP120 30
Configuring the network 33
Procedure job aid 33
Configuring the BAP120 the first time it is powered up 35
Troubleshooting 41
Troubleshooting when wireless clients cannot access the network 41
BAP120
Using the Nortel Business Access Point 120
NN47921-301 01.01 Standard
1.0 August 2006
Copyright © 2006, Nortel Networks Nortel Networks Confidential
.

4Contents
Troubleshooting when the BAP120 cannot be configured 42
Troubleshooting when WebUI does not display the left menu panel 43
Contacting the BAP120 if the log on details are lost 43
Troubleshooting when all other recovery measures fail 44
Troubleshooting when WebUI does not display accurate information 44
Troubleshooting when WebUI does not log on correctly 44
System configuration management 45
Web User Interface description 45
Starting the WebUI 45
WebUI navigation 46
System identification 48
TCP and IP settings 48
RADIUS 50
Authentication 52
Filter control 55
VLAN 56
WDS settings 59
AP management 63
Administration 64
Changing the password 64
Setting the timeout interval 65
Upgrading Firmware 65
System log 68
Enabling system logging 68
Configuring SNTP 70
SNMP 70
Configuring SNMP and Trap message parameters 71
Configuring SNMPv3 users 74
Configuring SNMPv3 trap filters 75
Configuring SNMPv3 targets 77
Radio interface 78
Slot 0 - Radio A (802.11a) 79
Configuring VAP radio settings 79
Configuring common radio settings 81
Configuring Wi-Fi multimedia 85
WMM Backoff Wait Times 87
Slot 0 - Radio G (802.11b/g) 89
Security 91
Enabling the VAPs 97
Wired Equivalent Privacy (WEP) 98
Wi-Fi Protected Access (WPA) 100
Configuring 802.1X 104
Status information 106
BAP120
Using the Nortel Business Access Point 120
NN47921-301 01.01 Standard
1.0 August 2006
Copyright © 2006, Nortel Networks Nortel Networks Confidential
.

Contents 5
Access Point Status 106
Station Status 107
Event Logs 108
STP Status 109
References 111
Regulatory compliances 111
Federal Communication Commission Interference Statement 111
IMPORTANT NOTE: FCC Radiation Exposure Statement 112
Wireless 5 GHz Band Statements: 112
Industry Canada: Class B 112
Australia and New Zealand 112
EC Conformance Declaration 112
Safety Compliance 116
Twisted-pair cable assignments 120
10/100BASE-TX pin assignments 121
Straight-through wiring 122
Glossary 123
10BASE-T 123
100BASE-TX 123
Access Point 123
Ad hoc 123
Advanced Encryption Standard (AES) 123
Authentication 123
Backbone 123
Basic Service Set (BSS) 124
Beacon 124
Broadcast key 124
CSMA/CA 124
Dynamic Host Configuration Protocol (DHCP) 124
Encryption 124
Extended Service Set (ESS) 124
Extensible Authentication Protocol (EAP) 124
Ethernet 124
File Transfer Protocol (FTP) 124
Hypertext Transfer Protocol (HTTP) 125
Internet Control Message Protocol (ICMP) 125
IEEE 802.11a 125
IEEE 802.11b 125
IEEE 802.11g 125
IEEE 802.1X 125
Infrastructure 125
Inter Access Point Protocol (IAPP) 125
Local Area Network (LAN) 125
BAP120
Using the Nortel Business Access Point 120
NN47921-301 01.01 Standard
1.0 August 2006
Copyright © 2006, Nortel Networks Nortel Networks Confidential
.

6Contents
MAC address 125
Network Time Protocol (NTP) 126
Open system 126
Orthogonal Frequency Division Multiplexing (ODFM) 126
Power over Ethernet (PoE) 126
RADIUS 126
Roaming 126
RTS threshold 126
Service Set Identifier (SSID) 126
Session key 126
Shared key 127
Simple Network Management Protocol (SNMP) 127
Simple Network Time Protocol (SNTP) 127
Temporal Key Integrity Protocol (TKIP) 127
Trivial File Transfer Protocol (TFTP) 127
Virtual Access Point (VAP) 127
Virtual LAN (VLAN) 127
Wi-Fi protected access 127
Wired Equivalent Privacy (WEP) 128
WPA Preshared Key (PSK) 128
BAP120
Using the Nortel Business Access Point 120
NN47921-301 01.01 Standard
1.0 August 2006
Copyright © 2006, Nortel Networks Nortel Networks Confidential
.

7
Introduction
The Business Access Point 120 is an IEEE 802.11a, 802.11b/g, and
Super a/g access point that provides transparent, wireless high-speed
data communications between the wired LAN and fixed or mobile devices
equipped with either an 802.11a or 802.11b/g wireless adapter, or both.
This solution offers fast, reliable wireless connectivity with considerable cost
savings over wired LANs (which include long-term maintenance overhead
for cabling).
Navigation
•"BAP120 Fundamentals" (page 9)
•"BAP120 installation and initial configuration" (page 23)
•"Installing the BAP120 hardware" (page 25)
•"Configuring the network" (page 33)
•"Configuring the BAP120 the first time it is powered up" (page 35)
•"Troubleshooting" (page 41)
•"System configuration management" (page 45)
•"References" (page 111)
BAP120
Using the Nortel Business Access Point 120
NN47921-301 01.01 Standard
1.0 August 2006
Copyright © 2006, Nortel Networks Nortel Networks Confidential
.

8Introduction
BAP120
Using the Nortel Business Access Point 120
NN47921-301 01.01 Standard
1.0 August 2006
Copyright © 2006, Nortel Networks Nortel Networks Confidential
.

9
BAP120 Fundamentals
Understanding the fundamentals of the BAP120 helps you set up, configure,
and use the BAP120.
Navigation
•"BAP120 functions" (page 9)
•"Hardware Description" (page 11)
•"Network topologies" (page 14)
•"System defaults" (page 18)
BAP120 functions
The access point supports up to four Virtual Access Points (VAP) per
physical radio interface, that is four on the 802.11a radio and four on the
802.11b/g radio. Using this access point, traffic can be separated for
different user groups using an access point that services one area. For
each VAP, different security settings, Virtual Local Area Network (VLAN)
assignments, and other parameters can be applied.
Each radio interface on the access point can operate in one of four modes:
•Access Point – Providing connectivity to wireless clients in the service
area.
•Repeater – Providing an extended link to a remote access point from
the wired LAN. In this mode, the access point does not have a cable
connection to the wired Ethernet LAN. In this mode, at least one access
point must have wired connectivity to enable the signal to repeat to the
next unwired access point.
•Bridge – Providing links to access points operating in Bridge or Root
Bridge mode and thereby connecting other wired LAN segments.
•Root Bridge – Providing links to other access points operating in Bridge
mode and thereby connecting other wired LAN segments. Only one unit
in the wireless bridge network can be set to Root Bridge mode.
BAP120
Using the Nortel Business Access Point 120
NN47921-301 01.01 Standard
1.0 August 2006
Copyright © 2006, Nortel Networks Nortel Networks Confidential
.

10 BAP120 Fundamentals
In addition, the access point offers full network management capabilities
through an easy to configure web interface, and support for Simple Network
Management Protocol tools.
Radio characteristics
The IEEE 802.11a/g standard uses a radio modulation technique known
as Orthogonal Frequency Division Multiplexing (OFDM), and a shared
collision domain (CSMA/CA). It operates at the 5 GHz Unlicensed National
Information Infrastructure (UNII) band for connections to 802.11a clients,
and at 2.4 GHz for connections to 802.11b/g clients.
IEEE 802.11b includes backward compatibility with the IEEE 802.11g
standard. IEEE 802.11b/g also operates at 2.4 GHz, but uses Direct
Sequence Spread Spectrum (DSSS) and Complementary Code Keying
(CCK) modulation technology to achieve a communication rate of up to
11 Mbps.
The access point supports a 54 Mbps half-duplex connection to Ethernet
networks for each active channel (or up to 108 Mbps when using turbo
mode on the 802.11a interface). The access point also supports Super A for
108 Mb/s on 802.11a mode and Super G for 108 Mb/s on 802.11g mode.
BAP120 user interfaces
You can manage the switch using one of the following:
•Web-based management – You can manage the network from the
World Wide Web. Access the Web-based Graphical User Interface
(GUI) through the HTML-based browser located on your network. Using
the GUI, you can configure, monitor, and maintain your network through
Web browsers. You can also download software using the Web.
• Business Element Manager – The Element Manager is a client-based
management application that runs on a Windows computer. Using the
Element Manager you can connect to BAP120 Series devices over an
IP network. It is used to configure, administer, and monitor BAP120
Series devices.
BAP120
Using the Nortel Business Access Point 120
NN47921-301 01.01 Standard
1.0 August 2006
Copyright © 2006, Nortel Networks Nortel Networks Confidential
.

Hardware description 11
Hardware description
Top panel
Rear panel
Antennas
The access point includes detachable diversity antennas for wireless
communications. A diversity antenna system uses two identical antennas
to receive and transmit signals, helping to avoid multi-path fading effects.
When receiving, the access point checks both antennas and selects the
one with the strongest signal. When transmitting, it continues to use the
antenna previously selected for receiving. The access point never transmits
from both antennas at the same time.
BAP120
Using the Nortel Business Access Point 120
NN47921-301 01.01 Standard
1.0 August 2006
Copyright © 2006, Nortel Networks Nortel Networks Confidential
.

12 BAP120 Fundamentals
The antennas transmit the outgoing signal as a toroidal sphere (doughnut
shaped), with the coverage extending in a direction perpendicular to the
antenna. The antenna must be adjusted to an angle that provides the
appropriate coverage for the service area.
LED indicators
The access point includes four status LED indicators, as described in the
following figure and table:
LED indicators
LED indicators
LED Icon Status Description
On (Green)
Fully functional Indicates that the
system is working
normally.
Flashing (Amber)
Initialization phase Indicates that the system is running a
self-test or loading the
software program.
PWR
Flashing (Prolonged) Indicates system
errors.
On (Green)
Functional (not
ongoing transmission)
Indicates a valid
10/100 Mb/s Ethernet
cable link.
Link
Flashing (Green)
Transmitting Indicates that the access point is
transmitting or
receiving data on a
10/100 Mb/s Ethernet
LAN. Flashing rate
is proportional to
network activity.
BAP120
Using the Nortel Business Access Point 120
NN47921-301 01.01 Standard
1.0 August 2006
Copyright © 2006, Nortel Networks Nortel Networks Confidential
.

Hardware description 13
LED Icon Status Description
On (Green)
Functional (not
ongoing transmission)
Indicates that the
802.11a radio is
enabled.
Flashing (Green)
Transmitting Indicates that the access point is
transmitting or
receiving data
through wireless
links. Flashing rate
is proportional to
network activity.
11a
Off Indicates that the
802.11a radio is
disabled.
On (Green)
Functional (not
ongoing transmission)
Indicates that the
802.11b/g radio is
enabled.
Flashing (Green)
Transmitting Indicates that the access point is
transmitting or
receiving data
through wireless
links. Flashing rate
is proportional to
network activity.
11b/g
Off Indicates that the
802.11b/g radio is
disabled.
Security slot
The access point includes a Kensington security slot on the rear panel.
You can prevent unauthorized removal of the access point by wrapping
the Kensington security cable (not provided) around an unmovable object,
inserting the lock into the slot, and turning the key.
Console port
The console port is only used for maintenance and is not intended for
customer use.
Ethernet port
The access point has one 10BASE-T/100BASE-TX RJ-45 port that can
be attached directly to 10BASE-T/100BASE-TX LAN segments. These
segments must conform to the IEEE 802.3 or 802.3u specifications.
BAP120
Using the Nortel Business Access Point 120
NN47921-301 01.01 Standard
1.0 August 2006
Copyright © 2006, Nortel Networks Nortel Networks Confidential
.

14 BAP120 Fundamentals
This port supports automatic MDI/MDI-X operation, so you can use
straight-through or crossover cables for all network connections to PCs,
switches, or hubs.
The access point appears as an Ethernet node and performs a bridging
function by moving packets from the wired LAN to remote workstations on
the wireless infrastructure.
Note: The RJ-45 port also supports Power over Ethernet (PoE)
based on the IEEE 802.3af standard. For further information, see the
description for the "Power connector" (page 14) for information about
supplying power to the access point network port from a network device,
such as a switch, that provides PoE.
Reset button
This button is used to reset the access point or restore the factory default
configuration. If you hold down the button for less than 5 seconds, the
access point performs a hardware reset. If you hold down the button for 5
seconds or more, any configuration changes you have made are removed,
and the factory default configuration is restored to the access point.
ATTENTION
Use this button as a last resort for resetting the access point. Nortel recommends
that you use the reset options that are available through the WebUI.
Power connector
The access point does not have a power switch. It is powered on when
connected to the AC power adapter, and the power adapter is connected to
a power source. The power adapter automatically adjusts to any voltage
between 100-240 volts at 50 or 60 Hz. No voltage range settings are
required.
The access point can also receive PoE from a switch or other network
device that supplies power over the network cable, based on the IEEE
802.3af standard.
Note that, if the access point is connected to a PoE source device and
also connected to a local power source through the AC power adapter, the
PoE source is used.
Network topologies
Infrastructure wireless LAN
The Business Access Point 120 also provides access to a wired LAN
for wireless workstations. An integrated wired/wireless LAN is called an
Infrastructure configuration. A Basic Service Set (BSS) consists of a group
of wireless PC users, and an access point that is directly connected to
BAP120
Using the Nortel Business Access Point 120
NN47921-301 01.01 Standard
1.0 August 2006
Copyright © 2006, Nortel Networks Nortel Networks Confidential
.

Network topologies 15
the wired LAN. Each wireless PC in this BSS can talk to any computer in
its wireless group by means of a radio link, or access other computers or
network resources in the wired LAN infrastructure by means of the access
point.
The infrastructure configuration not only extends the accessibility of wireless
PCs to the wired LAN, but also increases the effective wireless transmission
range for wireless PCs by passing their signal through one or more access
points.
A wireless infrastructure can be used for access to a central database, or for
connection between mobile workers, as shown in the following figure.
Infrastructure wireless LAN
Infrastructure wireless LAN for roaming wireless PCs
The BSS defines the communications domain for each access point and its
associated wireless clients. The BSS ID is a 48-bit binary number based
on the wireless MAC address for the access point, and is set automatically
and transparently when clients associate with the access point. The BSS ID
is used in frames sent between the access point and its clients to identify
traffic in the service area.
The BSS ID is only set by the access point, never by its clients. The clients
only need to set the Service Set Identifier (SSID) that identifies the service
set provided by one or more access points. The SSID can be manually
BAP120
Using the Nortel Business Access Point 120
NN47921-301 01.01 Standard
1.0 August 2006
Copyright © 2006, Nortel Networks Nortel Networks Confidential
.

16 BAP120 Fundamentals
configured by the clients, detected in an access point beacon, or obtained
by querying for the identity of the nearest access point. For clients that do
not need to roam, set the SSID for the wireless card to that used by the
access point to which you want to connect.
A wireless infrastructure can also support roaming for mobile workers. More
than one access point can be configured to create an Extended Service Set
(ESS). By placing the access points so that a continuous coverage area is
created, wireless users within this ESS can roam freely. All wireless network
cards and adapters and wireless access points within a specific ESS must
be configured with the same SSID.
Infrastructure wireless LAN for roaming wireless PCs
Infrastructure wireless bridge
The IEEE 802.11 standard defines a Wireless Distribution System (WDS)
for bridge connections between BSS areas (access points). The access
point uses WDS to forward traffic on links between units.
The access point supports WDS bridge links on either the 5 GHz (802.11a)
or 2.4 GHz (802.11b/g) bands and can be used with various external
antennas to offer flexible deployment options.
BAP120
Using the Nortel Business Access Point 120
NN47921-301 01.01 Standard
1.0 August 2006
Copyright © 2006, Nortel Networks Nortel Networks Confidential
.

Network topologies 17
Up to six WDS bridge links can be specified for each unit in the wireless
bridge network. Only one unit can be configured as the root bridge in the
wireless network. The root bridge must be the unit connected to the main
core of the wired LAN. Other bridges must configure one parent link to
the root bridge or to a bridge connected to the root bridge. The other five
available WDS links can be specified as child links to other bridges. This
forms a tiered-star topology for the wireless bridge network.
When using WDS on a radio band, only wireless bridge units can associate
with each other. Wireless clients can only associate with the access point
using a radio band set to access point or repeater mode.
Infrastructure wireless bridge
Infrastructure wireless repeater
The access point can also operate in a bridge repeater mode to extend the
range of links to wireless clients. The access point uses WDS to forward
traffic between the repeater bridge and the root bridge. The access point
supports up to six WDS repeater links.
BAP120
Using the Nortel Business Access Point 120
NN47921-301 01.01 Standard
1.0 August 2006
Copyright © 2006, Nortel Networks Nortel Networks Confidential
.

18 BAP120 Fundamentals
In repeater mode, the access point does not support an Ethernet link to a
wired LAN. Note that when the access point operates in this mode only half
the normal throughput is possible, because the access point has to receive
and then retransmit all data on the same channel.
Infrastructure wireless repeater
System defaults
The following table lists some of the BAP120 basic system defaults.
System defaults
System defaults
Feature Parameter Default
Identification System Name Business Access Point 120
User Name nnadminAdministration
Password PlsChgMe!
HTTP Server EnabledGeneral
HTTP Server Port 80
BAP120
Using the Nortel Business Access Point 120
NN47921-301 01.01 Standard
1.0 August 2006
Copyright © 2006, Nortel Networks Nortel Networks Confidential
.

System defaults 19
System defaults
Feature Parameter Default
DHCP Enabled
IP Address 192.168.1.136
Subnet Mask 255.255.255.0
Default Gateway 192.168.1.1
Primary DNS IP 0.0.0.0
TCP/IP
Secondary DNS IP 0.0.0.0
IP Address 0.0.0.0
Port 1812
Key DEFAULT
Timeout 5 seconds
Retransmit attempts 3
Accounting Port 0 (Disabled)
RADIUS (Primary and
Secondary)
Interim Update Timeout 3600 seconds
MAC Disabled
Authentication Session
Timeout 0 minutes (disabled)
Local MAC System Default Allowed
MAC Authentication
Local MAC Permission Allowed
Status Disabled
Broadcast Key Refresh 0 minutes (disabled)
Session Key Refresh 0 minutes (disabled)
802.1X Authentication
Re-authentication Refresh
Rate 0 seconds (disabled)
Management VLAN ID 1
VLAN ID (VAP Interface) 1
VLAN
VLAN Tag Support Disabled
QoS QoS Mode Off
Local Bridge Disabled
AP Management Disabled
Filter control
Ethernet Type Disabled
BAP120
Using the Nortel Business Access Point 120
NN47921-301 01.01 Standard
1.0 August 2006
Copyright © 2006, Nortel Networks Nortel Networks Confidential
.

20 BAP120 Fundamentals
System defaults
Feature Parameter Default
Status Enabled
Location null
Contact null
Community (Read Only) PlsChgMe!RO
Community (Read/Write) PlsChgMe!RW
Traps Enabled
Trap Destination (1-4) Disabled
Trap Destination IP Address null
Trap Destination Community PlsChgMe!RO
SNMP v3 Groups RO, RWAuth, RWPriv
SNMP
SNMP v3 Users none
Syslog Disabled
Logging Host Disabled
Logging Console Disabled
IP Address / Host Name 0.0.0.0
Logging Level Informational
System logging
Logging Facility Type 16
SNTP Server Status Disabled
SNTP Server 1 IP 0.0.0.0
SNTP Server 2 IP 0.0.0.0
Date and Time 00:00, Jan 1, 1970 (when
there is no time server)
Daylight Saving Time Enabled
System clock
Time Zone GMT-5 (Eastern Time, US and
Canada)
Ethernet interface Speed and Duplex Auto
BAP120
Using the Nortel Business Access Point 120
NN47921-301 01.01 Standard
1.0 August 2006
Copyright © 2006, Nortel Networks Nortel Networks Confidential
.