Tranzeo Wireless Technologies EL-500 User manual

Document No. TR0190 Rev B1
EL-500 Access Point
User’s Guide
Rev. B1
Communicate Without Boundaries
Tranzeo Wireless Technologies Inc.
19473 Fraser Way, Pitt Meadows, BC, Canada V3Y 2V4
www.tranzeo.com
technical support email: [e-mail]

ER-1000 Access Point User’s Guide
TR0190 Rev. B1
2
Tranzeo, the Tranzeo logo and EL-500 are trademarks of Tranzeo Wireless Technologies Inc. All rights reserved.
All other company, brand, and product names are referenced for identification purposes only and may be
trademarks that are the properties of their respective owners.
Copyright © 2007, Tranzeo Wireless Technologies Inc.

ER-1000 User’s Guide
TR0190 Rev. B1
3
FCC Notice to Users and Operators
This device complies with Part 15 of the FCC Rules. Operation is subject to the following two
conditions: (1) This device may not cause harmful interference, and (2) This device must
accept any interference received, including interference that may cause undesired operation.
This equipment has been tested and found to comply with the limits for Class B Digital Device,
pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable
protection against harmful interference in a residential installation. This equipment generates
and can radiate radio frequency energy and, if not installed and used in accordance with the
instructions, may cause harmful interference to radio communications. However, there is no
guarantee that interference will not occur in a particular installation. If this equipment does
cause harmful interference to radio or television reception, which can be determined by turning
the equipment off and on, the user is encouraged to try to correct the interference by one or
more of the following measures.
•Reorient or relocate the receiving antenna
•Increase the separation between the equipment and receiver
•Connect the equipment into an outlet on a circuit different from that to which the receiver is
connected
•Consult the dealer or an experienced radio/TV technician for help
To reduce potential radio interference to other users, the antenna type and its gain should be
so chosen that the equivalent isotropically radiated power (EIRP) is not more than that
required for successful communication
Any changes or modification to said product not expressly approved by Tranzeo
Wireless Technologies Inc. could void the user's authority to operate this device.
The Tranzeo EL-500 Access Point must be installed by a trained professional, value
added reseller, or systems integrator who is familiar with RF cell planning issues and
the regulatory limits defined by the FCC for RF exposure, specifically those limits
outlined in sections 1.1307.

ER-1000 User’s Guide
TR0190 Rev. B1
4
Table of Contents
1 Working with the EL-500.................................................................................... 8
1.1 EL-500 Variants ....................................................................................................8
1.2 EL-500 Capabilities ...............................................................................................8
1.3 EL-500 Interfaces..................................................................................................9
1.3.1 Ethernet and PoE............................................................................................... 10
1.3.2 Antenna.............................................................................................................. 11
1.4 Deployment Considerations ................................................................................11
1.4.1 AP Channel Selection ........................................................................................ 11
2 Connecting to the EL-500................................................................................ 13
2.1 Network Interfaces ..............................................................................................13
2.2 Connecting to an Unconfigured EL-500 ..............................................................14
2.3 Default Login and Password ...............................................................................15
2.4 Resetting the ‘admin’ Password ..........................................................................15
3 Using the Web Interface .................................................................................. 16
3.1 Accessing the Web Interface...............................................................................16
3.2 Navigating the Web Interface..............................................................................18
3.3 Setting Parameters .............................................................................................18
3.4 Help Information..................................................................................................19
3.5 Rebooting............................................................................................................19
4 Using the Command Line Interface ................................................................ 21
4.1 Accessing the CLI ...............................................................................................21
4.2 User Account.......................................................................................................21
4.3 CLI Interfaces......................................................................................................22
4.4 CLI Features .......................................................................................................22
4.4.1 Control of the Cursor.......................................................................................... 22
4.4.2 Cancel a Command ........................................................................................... 22
4.4.3 Searching the Command History ....................................................................... 23
4.4.4 Executing a Previous Command ........................................................................ 23
4.5 CLI Commands ...................................................................................................23
4.5.1 ‘?’ command....................................................................................................... 23
4.5.2 ‘whoami’ command ............................................................................................ 23
4.5.3 ‘help’ command .................................................................................................. 24
4.5.4 ‘show’ command ................................................................................................ 24
4.5.5 ‘use’ command ................................................................................................... 25
4.5.6 ‘set’ command .................................................................................................... 25
4.5.7 ‘get’ command.................................................................................................... 26
4.5.8 ‘list’ command .................................................................................................... 27
4.5.9 ‘ping’ command .................................................................................................. 27

ER-1000 User’s Guide
TR0190 Rev. B1
5
4.5.10 ‘ifconfig’ command ............................................................................................. 28
4.5.11 ‘route’ command................................................................................................. 28
4.5.12 ‘clear’ command ................................................................................................. 28
4.5.13 ‘history’ command .............................................................................................. 29
4.5.14 ‘!’ command........................................................................................................ 30
4.5.15 ‘exit’ command ................................................................................................... 31
4.5.16 ‘quit’ command ................................................................................................... 31
5 Initial Configuration of an EL-500 ................................................................... 32
6 Status Information ........................................................................................... 34
6.1 Configuration Overview Page..............................................................................34
6.2 Interface Status ...................................................................................................35
6.2.1 Virtual AP Interfaces .......................................................................................... 35
6.2.2 Wired Interface Status........................................................................................ 36
6.3 Bridging...............................................................................................................36
6.4 Routing Table......................................................................................................37
6.5 ARP Table...........................................................................................................38
6.6 Event Log............................................................................................................39
6.7 DHCP Event Log.................................................................................................39
7 Configuration Profile Management................................................................. 41
7.1 Saving the Current Configuration ........................................................................41
7.2 Load a Configuration Profile................................................................................42
7.3 Delete a Configuration Profile .............................................................................42
7.4 Downloading a Configuration Profile from an EL-500 .........................................43
7.5 Uploading a Configuration Profile to an EL-500 ..................................................44
8 Mode of Operation ........................................................................................... 45
9 System Settings ............................................................................................... 47
9.1 User Password....................................................................................................47
9.2 Node ID...............................................................................................................48
9.3 DNS / Domain Settings .......................................................................................49
9.4 DNS Proxy Configuration ....................................................................................50
9.5 NetBIOS Server ..................................................................................................51
9.6 SNMP..................................................................................................................51
9.7 Location...............................................................................................................52
9.8 Certificate Information .........................................................................................54
9.9 Time Synchronization..........................................................................................54
9.10 Web GUI Console ...............................................................................................56
9.11 OnRamp Configuration Access...........................................................................56
9.12 CLI Timeout.........................................................................................................58
10 Client Addressing Schemes............................................................................ 59
10.1 Implicit Addressing Scheme................................................................................60
10.1.1 LAN Prefix.......................................................................................................... 61

ER-1000 User’s Guide
TR0190 Rev. B1
6
10.1.2 Client Address Space Segmentation in Implicit Addressing Mode ..................... 61
10.2 Explicit Addressing Scheme................................................................................64
11 Ethernet Interface Configuration .................................................................... 66
11.1 DHCP..................................................................................................................66
11.2 Manual IP Configuration......................................................................................69
12 Bridge Interface Configuration ....................................................................... 71
12.1 IP Configuration ..................................................................................................71
12.2 Bridging Parameters ...........................................................................................73
13 Virtual Access Point (VAP) Configuration ..................................................... 74
13.1 Virtual Access Point Interfaces............................................................................75
13.2 Enabling and Disabling Virtual Access Points .....................................................75
13.3 Virtual Access Point Client Device Address Space .............................................75
13.4 Channel...............................................................................................................77
13.5 ESSID .................................................................................................................78
13.6 IP Configuration of Client Devices.......................................................................79
13.6.1 IP Configuration of Clients Devices via DHCP ................................................... 79
13.6.2 Manual IP Configuration of Client Devices ......................................................... 79
13.7 Client Devices .....................................................................................................81
13.8 Encryption and Authentication.............................................................................81
13.8.1 WEP Encryption ................................................................................................. 82
13.8.2 WPA Pre-Shared Key Mode (WPA-PSK)........................................................... 83
13.8.3 WPA EAP Mode................................................................................................. 84
13.9 Transmit Power Cap ...........................................................................................85
13.10 Radio Rate ..........................................................................................................86
13.11 Preamble Length.................................................................................................86
13.12 Beacon Interval ...................................................................................................87
13.13 Maximum Link Distance ......................................................................................87
14 Client DHCP Configuration.............................................................................. 89
14.1 Using Local DHCP Servers .................................................................................89
14.2 Using a Centralized DHCP Server ......................................................................92
14.2.1 Support for Clients with Static IP Addresses...................................................... 93
14.2.2 Configuring the EL-500s .................................................................................... 93
14.2.3 Configuring the Central DHCP Server................................................................ 95
15 Connecting an EL-500 to a LAN...................................................................... 97
15.1 Routed mode.......................................................................................................97
15.1.1 Manual Configuration ......................................................................................... 97
15.1.2 Network Address Translation (NAT)................................................................... 98
15.2 Bridge Mode........................................................................................................99
16 Controlling Access to the EL-500 ................................................................. 100
16.1 Firewall..............................................................................................................100
16.2 Gateway Firewall...............................................................................................101

ER-1000 User’s Guide
TR0190 Rev. B1
7
16.3 Blocking Client-to-Client Traffic .........................................................................102
16.4 Connection Tracking .........................................................................................103
16.4.1 Connection Tracking Table Size ...................................................................... 104
16.4.2 Connection Tracking Timeout .......................................................................... 104
16.4.3 Limiting Number of TCP Connections Per Client Device.................................. 105
16.5 Custom Firewall Rules ......................................................................................105
16.6 Access Control Lists (ACLs)..............................................................................107
17 Quality of Service (QoS) Configuration........................................................ 109
17.1 Priority Levels....................................................................................................109
17.2 Rate Limiting .....................................................................................................112
17.3 Rate Reservation ..............................................................................................114
18 Enabling VLAN Tagging ................................................................................ 117
18.1 Client Access Interface Configuration ...............................................................117
18.2 Ethernet Interface Configuration .......................................................................118
19 Integration with Enterprise Equipment ........................................................ 120
19.1 Configuring Splash Pages.................................................................................120
19.1.1 Enabling Splash Pages .................................................................................... 120
19.1.2 Configuring Splash URLs................................................................................. 122
19.1.3 Sample HTML Code for Splash Pages ............................................................ 123
19.1.4 Configuring the Authentication Server.............................................................. 124
19.1.5 Trusted MAC Addresses .................................................................................. 125
19.1.6 Bypass Splash Pages for Access to Specific Hosts ......................................... 126
19.2 Layer 2 Emulation .............................................................................................127
20 Diagnostics Tools .......................................................................................... 129
20.1 Ping...................................................................................................................129
20.2 Traceroute.........................................................................................................129
20.3 Packet Capture .................................................................................................130
20.4 Centralized DHCP Testing ................................................................................132
20.5 RADIUS Server Testing ....................................................................................133
20.6 Diagnostic Dump...............................................................................................133
21 Firmware Management .................................................................................. 135
21.1 Displaying the Firmware Version.......................................................................135
21.2 Upgrading the Firmware....................................................................................135
Glossary....... ........................................................................................................................ 137
Abbreviations....................................................................................................................... 138

Chapter 1: Working with the ER-1000
TR0190 Rev. B1
8
1 Working with the EL-500
Thank you for choosing the Tranzeo EL-500 802.11 Access Point. The EL-500 is a full-
featured access point in a ruggedized enclosure designed for outdoor installation. This user’s
guide presents a wide array of configuration options, but only a limited number of options have
to be configured in order to deploy an EL-500.
1.1 EL-500 Variants
There are two EL-500 variants available, as shown in Table 1.
Model Number
Frequency Band
802.11 standard
EL-500HG 2.4 GHz 802.11b/g
EL-500HA 5.8 GHz 802.11a
Table 1. EL-500 variants
Throughout the manual, “EL-500” will be used to collectively refer to this family of
products. Where the functionality of the variants differs, the actual model number will
be used.
1.2 EL-500 Capabilities
Based on the IEEE 802.11b/g and 802.11a standards and complete with FCC certification, the
EL-500 family of outdoor access points are fully standards compliant. This family of outdoor
access points has been designed with a multitude of network and management features for
ease of installation and operation in any new or existing network. Features include:
•Multiple ESSIDs per radio
•High-powered +26dBm output in 802.11b/g mode
•High-powered +23dBm output in 802.11a mode
•Router or bridge mode operation
•DHCP server
•DHCP relay
•QoS support (IEEE 802.11e WMM)
•VLAN support (IEEE802.1q)
•Security
oWPA
oWPA2
oWEP 64/128

Chapter 1: Working with the ER-1000
TR0190 Rev. B1
9
oStateful packet inspection
oCustom firewall rules
•Web GUI
•Tranzeo CLI (SSH)
•Remote upgrade
•Configuration management
1.3 EL-500 Interfaces
The interfaces available on the EL-500 are Ethernet and a radio port.
Ethernet
Figure 1. EL-500 interfaces.
AP
radio
port
Expansion
port for
future use

Chapter 1: Working with the ER-1000
TR0190 Rev. B1
10
Interface
Description
AP radio port N-type antenna connector for access point radio
Ethernet 10/100 Mbit Ethernet interface
Passive PoE PoE power input (9-28VDC, 12W)
Not compatible with IEEE 802.3af
Table 2. EL-500 Interfaces
1.3.1 Ethernet and PoE
The EL-500 has a 10/100 Ethernet port that supports passive Power over Ethernet (PoE). The
PoE power injector should supply an input voltage between 9-28VDC and a minimum of 12W.
The pinout for the Ethernet interface on the EL-500 is provided in Table 3.
The EL-500 is equipped with an auto-sensing Ethernet port that allows both regular
and cross-over cables to be used to connect to it.
Pin
Signal
Standard Wire Color
1 Tx+ White/Orange
2 Tx- Orange
3 Rx+ White/Green
4 PoE V+ Blue
5 PoE V+ White/Blue
6 Rx- Green
7 Gnd White/Brown
8 Gnd Brown
Table 3. Ethernet port pinout
To power the EL-500, connect an Ethernet cable from the Ethernet port of the EL-500 to the
port labeled “CPE” on the supplied PoE injector and apply power to the PoE injector using the
supplied power supply

Chapter 1: Working with the ER-1000
TR0190 Rev. B1
11
DO NOT CONNECT ANY DEVICE OTHER THAN THE EL-500 TO THE PORT
LABELED “CPE” ON THE PoE INJECTOR. NETWORK EQUIPMENT THAT
DOES NOT SUPPORT PoE CAN BE PERMANENTLY DAMAGED BY
CONNECTING TO A PoE SOURCE. NOTE THAT MOST ETHERNET
INTERFACES ON PERSONAL COMPUTERS (PCs), LAPTOP/NOTEBOOK
COMPUTERS, AND OTHER NETWORK EQUIPMENT (E.G. ETHERNET
SWITCHES AND ROUTERS) DO NOT SUPPORT PoE.
1.3.2 Antenna
The EL-500 AP radio port is an N-type RF connector that can interface with a wide range of
Tranzeo antennas. After purchasing the desired 2.4GHz or 5.8GHz antenna (for the EL-500HG
or EL-500HA models respectively), attach the antenna to the access point (AP) radio port on
the EL-500. The antenna must be chosen such that its gain combined with the output power of
the radio complies with maximum radiation power regulatory requirements in the area the EL-
500 is used.
1.4 Deployment Considerations
The EL-500’s radio operates in either the 2.4 GHz or the 5.8 GHz ISM band, depending on the
model. It is possible that there will be other devices operating in these bands that will interfere
with the EL-500’s radio. Interference from adjacent EL-500s can also degrade performance if
the EL-500s are not configured properly.
It is advisable to carry out a site survey prior to installation to determine what devices are
operating in the band that your EL-500 uses. To detect the presence of other 802.11 devices,
a tool such as Netstumbler (http://www.netstumbler.com/downloads/) can be used. A spectrum
analyzer can be used for further characterization of interference in the band.
1.4.1 AP Channel Selection
A site survey should be conducted to determine which access point channel will provide the
best performance. Some of the 802.11b/g channels that the EL-500HG’s radio can be
configured to use are overlapping. Only channels 1, 6, and 11 are non-overlapping.

Chapter 1: Working with the ER-1000
TR0190 Rev. B1
12
Figure 2. 802.11b/g channel chart, showing top, bottom, and center frequencies for each channel

Chapter 2: Connecting to the ER-1000
TR0190 Rev. B1
13
2 Connecting to the EL-500
The EL-500 can be configured and monitored by connecting to one of its network interfaces.
The wired Ethernet interface on the EL-500 should be used for initial configuration of the
device, but the wireless network interface can be used to connect to the device after initial
configuration has been completed.
2.1 Network Interfaces
The EL-500 has several network interfaces, as shown in Table 4.
The network interfaces listed in the table below are logical, not hardware, interfaces.
Some of the interfaces listed in the table share the same hardware interface.
Interface
Hardware
Interface Primary Function
Interface
Availability
Default
Address
Can be
altered by
the user?
Wired Ethernet Connecting to a LAN Enabled by
default 10.253.0.1/24 No
Bridge N/A Access to the device when
operating in bridge mode
Enabled in
bridge mode 10.253.1.1/24 No
Static
Configuration Ethernet
Configuring the device
before a unique Ethernet
IP address has been
configured
Always
present 169.254.253.253/16 Yes
OnRamp
Configuration Ethernet
Configuring the device
before a unique Ethernet
IP address has been
configured. Unlike the
static configuration
interface, this interface’s
address can be modified,
allowing multiple
unconfigured EL-500s to
be attached to a LAN
Disabled by
default N/A No
VAP 1 – 4 AP radio Providing connectivity to
wireless client devices
Only VAP1
enabled by
default
10.253.1.1/24
10.253.2.1/24
10.253.3.1/24
10.253.4.1/24
No
Centralized
DHCP N/A
Provides a gateway for
client devices when using
centralized DHCP mode
All disabled
by default N/A No
Table 4. EL-500 network interfaces
Note that the “Static Configuration” interface is the only interface that has a fixed address that
cannot be changed by the user. Since this interface is known to always be present, it can be

Chapter 2: Connecting to the ER-1000
TR0190 Rev. B1
14
used for initial configuration and for accessing devices whose configuration settings are
unknown.
2.2 Connecting to an Unconfigured EL-500
Use the Static Configuration interface with IP address 169.254.253.253 and netmask
255.255.0.0 to establish network connectivity to an unconfigured EL-500.
The Static Configuration interface functions only with the EL-500’s wired
interface. Do not try to access the EL-500 over a wireless link using the
address of this interface.
To connect to an EL-500 using its Static Configuration IP address, you must configure your
computer’s IP address to be in the 169.254.253.253/16 subnet, e.g. 169.254.253.1 and
connect the computer’s Ethernet cable to the “PC” port on the EL-500’s PoE injector.
ENSURE THAT THE DATA CONNECTION FROM THE PC OR THE LAN IS MADE
TO THE “PC” PORT. DO NOT CONNECT ANY DEVICE OTHER THAN THE EL-
500 TO THE PORT LABELED “CPE” ON THE PoE INJECTOR. NETWORK
EQUIPMENT THAT DOES NOT SUPPORT PoE CAN BE PERMANENTLY
DAMAGED BY CONNECTING TO A PoE SOURCE. NOTE THAT MOST
ETHERNET INTERFACES ON PERSONAL COMPUTERS (PCs),
LAPTOP/NOTEBOOK COMPUTERS, AND OTHER NETWORK EQUIPMENT
(E.G. ETHERNET SWITCHES AND ROUTERS) DO NOT SUPPORT PoE.
Since the Static Configuration IP address is the same for all EL-500s, you
should not simultaneously connect multiple EL-500s to a common LAN and
attempt to access them using the Static Configuration IP address.

Chapter 2: Connecting to the ER-1000
TR0190 Rev. B1
15
If you are configuring multiple EL-500s with the same computer in rapid succession,
it may be necessary to clear the ARP cache since the IP addresses for the EL-500s
will all be the same, but the MAC addresses will vary. The following commands can
be used to clear the ARP cache
Windows XP (executed in a command prompt window)
arp -d *
to clear the entire cache, or
arp -d 169.254.253.253
to just clear the EL-500 entry
Linux
arp -d 169.254.253.253
2.3 Default Login and Password
The EL-500’s default login is ‘admin’ and the default password is ‘default’. The login and
password are the same for the web interface and the CLI. Changing the password using one of
the interfaces will change it for the other interface as well.
2.4 Resetting the ‘admin’ Password
The EL-500 supports a password recovery feature for the ‘admin’ account, should the
password be lost.
Completing the password recovery procedure requires that you contact
Tranzeo technical support. Please check the Tranzeo website
(www.tranzeo.com) for how to contact technical support and hours of
operation.
For security purposes, the ‘admin’ password can only be reset in the first 15
minutes of operation of the device. You will be able to power the unit on and
off to be able to reset the password.

Chapter 3: Using the Web Interface
TR0190 Rev. B1
16
3 Using the Web Interface
The EL-500 has a web interface accessible through a browser that can be used to configure
the device and display status parameters.
3.1 Accessing the Web Interface
You can access the web interface by entering one of the EL-500’s IP addresses in the URL
field of a web browser (see section 2.2 for a description of how to access an unconfigured EL-
500 using its Ethernet interface). When you enter this URL, you will be prompted for a login
and password. The default login and password used for the web interface are ‘admin’ and
‘default’, respectively.
Figure 3. Login window for web interface
Since the certificate used in establishing the secure link to the EL-500 has not been signed by
a Certification Authority (CA), your browser will most likely display one or more warnings
similar to those shown below. These warnings are expected and can be disregarded.
Figure 4. Certificate warning

Chapter 3: Using the Web Interface
TR0190 Rev. B1
17
A configuration overview page is loaded by default after the login process has been completed.
This page contains the following information
•Firmware version and list of installed patches
•System uptime
•System mode of operation (router or bridge)
•Bridge information (if bridge mode is selected)
•IP addresses, netmasks, and MAC addresses for each client access interface
•Status, channel, ESSID, and encryption type for each virtual access point interface
•VLAN status and ID for all interfaces
To access the status page from any other page in the web interface, click on the “Status” link
in the navigation bar that appears on the left side of the web interface.
Figure 5. Configuration overview page displayed when logging in

Chapter 3: Using the Web Interface
TR0190 Rev. B1
18
3.2 Navigating the Web Interface
The web interface uses a three-tiered navigation scheme.
1. The first tier of navigation is the navigation bar shown on the left side of the screen. This
navigation bar is displayed on all pages in the web interface and remains the same on
all pages.
2. The second tier of navigation is the primary row of tabs shown across the top of the
screen on many of the pages in the web interface. The labels in these tabs vary based
on which page is selected on the navigation bar.
3. The third tier of navigation is the second row of tabs shown below the first row. These
tabs are not present on all pages and their labels vary based on the selections made on
the navigation bar and the primary row of tabs.
Figure 6. Web interface navigation components
The time displayed at the top of the navigation bar is the current time of the PC used to log in
to the web GUI, not the time kept by the EL-500.
3.3 Setting Parameters
Many of the web interface pages allow you to set EL-500 operating parameters. Each page
that contains settable parameters has a “Save Changes” button at the bottom of the page.
When you have made your changes on a page and are ready to commit the new configuration,
1
2
3

Chapter 3: Using the Web Interface
TR0190 Rev. B1
19
click on the “Save Changes” button. It typically takes a few seconds to save the changes, after
which the page will be reloaded.
For the changes to take effect, the EL-500 must be rebooted. After a change has been
committed, a message reminding the user to reboot the EL-500 will be displayed at the top of
the screen.
Figure 7. Page showing "Save Changes" button and message prompting the user to reboot
3.4 Help Information
Help information is provided on most web GUI pages. The help information is shown on the
right-hand side of the page. The help information can be hidden by clicking on the ‘Hide Help’
link inside the help frame. When help is hidden, it can be displayed by clicking on the ‘Show
help’ link.
3.5 Rebooting
Click on the “Reboot” link on the left of the page and then click on the “Reboot Now” button to
reboot the EL-500. Any changes made prior to rebooting will take effect following completion of
the boot process.
It takes approximately 3 minutes for the device to reboot.

Chapter 3: Using the Web Interface
TR0190 Rev. B1
20
Figure 8. Rebooting the EL-500