WiBorne WAP Series Instruction manual

WAP & CAP Series
Outdoor Wireless
AP/Bridge/Mesh/Router/CPE
Quick User Guide
Version 6.30.1
WiBorne, Inc.

2
© Copyright 2005-2017 WiBorne, Inc. All rights reserved.
This product or document is protected by copyright and distributed under licenses restricting its use, copying,
distribution, decryption, decompilation, and reverse engineering. No part of this product or document may be
reproduced in any form by any means without prior written authorization of WiBorne, Inc., or its licensors, if
any.
The information in this document is subject to change without notice. This documentation is provided “as is”
and all express or implied conditions, representations and warranties, including any implied warranty of
merchantability, fitness for a particular purpose or non-infringement, are disclaimed, except to the extent that
such disclaims are held to be legally invalid.

3
Table of Content
Preface......................................................................................................................................................................12
Installation Requirements ....................................................................................................................................12
Packing List .........................................................................................................................................................12
CAP-2400 / CAP-5000/N Series .....................................................................................................................12
WAP-240 / WAP-500/N Series........................................................................................................................12
WAP-520N.......................................................................................................................................................13
System Requirements...........................................................................................................................................13
Hardware Overview.................................................................................................................................................14
Field Installation ..................................................................................................................................................14
CAP-2400 / CAP-5000 Series .........................................................................................................................14
WAP-240 / WAP-500 Series............................................................................................................................15
RJ45 Ethernet Connector System (ECS) .............................................................................................................16
Power over Ethernet Unit.....................................................................................................................................18
Lighten Protector / Surge Protector .....................................................................................................................19
Introduction..............................................................................................................................................................20
Overview..............................................................................................................................................................20
Getting Started.........................................................................................................................................................22
Management.........................................................................................................................................................22
Password..............................................................................................................................................................22
Interfaces..............................................................................................................................................................23
Web Based (Browser) Interface...........................................................................................................................23
Browser Interface Login Screen ..........................................................................................................................23
Primary Features and Pages of the Browser Interface (Webbox)........................................................................24
WebFig (Web Browser) Interface ........................................................................................................................26
Connecting to WAP/CAP.................................................................................................................................27
Interface Overview...........................................................................................................................................27
Item configuration............................................................................................................................................28
Skins.................................................................................................................................................................30
Designing skins............................................................................................................................................30
Skin Example to Configure Wireless Interface->Status Page......................................................................31
Skin design examples...................................................................................................................................32
Using skins...................................................................................................................................................33
Winbox (Windows GUI) Interface.......................................................................................................................33
Primary Features and Pages of the Winbox Interface..........................................................................................35
Command Line Interface .....................................................................................................................................36
Telnet....................................................................................................................................................................37
Console (Serial) Port............................................................................................................................................39
Basic Configuration through Web Browser.............................................................................................................41
Quick Setup..........................................................................................................................................................41
Web Browser Interface page................................................................................................................................42
Port Web Configuration .......................................................................................................................................42
Port Name Web Configuration.............................................................................................................................42
Interface Web Graphing.......................................................................................................................................43
System Web Configuration..................................................................................................................................43
Firewall Web Configuration.................................................................................................................................44
DHCP Server Web Configuration........................................................................................................................44
Upgrading Firmware through Web Browser........................................................................................................45
Remote Firmware Upgrade..................................................................................................................................47

4
Section 5 Basic Configuration through Winbox......................................................................................................50
Configuring an IP address....................................................................................................................................50
Configuring the Wireless Card.............................................................................................................................51
Configuring Firewall............................................................................................................................................51
Configuring DHCP Server...................................................................................................................................53
Configuring Queues.............................................................................................................................................55
Introduction......................................................................................................................................................55
Assumptions.....................................................................................................................................................55
Packets marking - configuration......................................................................................................................56
New queue type creating..................................................................................................................................57
The main queue creating..................................................................................................................................58
Adding proper queues......................................................................................................................................58
Optimization ....................................................................................................................................................59
Per Connection Queue (PCQ) Examples.........................................................................................................60
Alignment Tool....................................................................................................................................................66
Antenna Positioning (Audio Alignment, or Aiming) for WAP/CAP...............................................................66
Method 1 (Audio mode)...............................................................................................................................66
Method 2: Alignment-Only Mode ...............................................................................................................70
Method 3: CLI command:............................................................................................................................71
Audio and Video (LED) Aiming Script ...........................................................................................................71
Power / NAND / User LED .....................................................................................................................76
Audio-only Aiming Script................................................................................................................................77
The EoIP Bridge...................................................................................................................................................79
Introduction......................................................................................................................................................79
The core unit configuration..............................................................................................................................79
The client unit configuration............................................................................................................................83
The WDS Bridge..................................................................................................................................................87
Output Support File (supout.rif) ..........................................................................................................................92
Upgrading Firmware through Winbox.................................................................................................................93
Basic Configuration through CLI ............................................................................................................................97
Launching CLI “Setup” .......................................................................................................................................97
Configuring IPAddress through CLI Setup.........................................................................................................97
Configuring Gateway through CLI Setup............................................................................................................98
Configuring DHCP Client through CLI Setup.....................................................................................................99
Configuring DHCP Server through CLI Setup....................................................................................................99
Sample Default Configuration...............................................................................................................................101
Restoring Default Configuration from WinBox ................................................................................................102
Restoring Default Configuration from CLI .......................................................................................................103
Settings for Wireless Access Point & Clients........................................................................................................104
Wireless Station Modes .....................................................................................................................................104
Overview........................................................................................................................................................104
802.11 limitations for L2 bridging.................................................................................................................104
Applicability Matrix.......................................................................................................................................105
Mode station ..................................................................................................................................................106
Mode station-wds...........................................................................................................................................106
Mode station-pseudobridge...........................................................................................................................106
Mode station-pseudobridge-clone.................................................................................................................107
Mode station-bridge.......................................................................................................................................107
Station and Access Point....................................................................................................................................107
AP Bridge / Station Pseudo-bridge.................................................................................................................... 112

5
Single Radio on One WAP............................................................................................................................. 112
Configuration for Access Point (WAP)...................................................................................................... 113
Dual Radios on One WAP.............................................................................................................................. 118
Configuration for the 1st Access Point (WAP)...........................................................................................119
Configuration for the 2nd Access Point (WAP)..........................................................................................128
L2 Transparently Bridge (WDS-Bridge, or station-wds Mode)........................................................................128
AP Side (COM)..............................................................................................................................................129
Station side (CPEM)......................................................................................................................................131
Full Scripts.....................................................................................................................................................136
Pre-configured .rsc file.......................................................................................................................................138
Firewall..................................................................................................................................................................141
Security Information sources.............................................................................................................................141
How to configure a router..................................................................................................................................141
The CLI..........................................................................................................................................................141
Structure.....................................................................................................................................................141
Basic commands ........................................................................................................................................143
print........................................................................................................................................................143
export .....................................................................................................................................................143
remove....................................................................................................................................................143
set...........................................................................................................................................................144
disable....................................................................................................................................................145
enable.....................................................................................................................................................145
find.........................................................................................................................................................146
move.......................................................................................................................................................147
Context.......................................................................................................................................................148
Example network...........................................................................................................................................148
Router interfaces (ports) ................................................................................................................................149
Physical interfaces .....................................................................................................................................149
Switch Chip................................................................................................................................................149
Bridging vs routing ....................................................................................................................................150
Named interfaces .......................................................................................................................................150
Example network.......................................................................................................................................150
IP addresses....................................................................................................................................................150
DHCP client...............................................................................................................................................151
PPPoE client...............................................................................................................................................151
Example network.......................................................................................................................................151
IP routes .........................................................................................................................................................152
Adding a default route ...............................................................................................................................152
Example network.......................................................................................................................................153
DHCP server ..................................................................................................................................................153
IP Pools......................................................................................................................................................153
DHCP Server Networks.............................................................................................................................153
DHCP Servers............................................................................................................................................154
Lease time considerations..........................................................................................................................155
The wizard .................................................................................................................................................155
Example network.......................................................................................................................................155
IP firewall.......................................................................................................................................................156
Filters .........................................................................................................................................................156
Chains ....................................................................................................................................................156
State........................................................................................................................................................157

6
Example network...................................................................................................................................157
NAT............................................................................................................................................................158
Source NAT ...........................................................................................................................................159
Masquerade........................................................................................................................................159
Static source NAT..............................................................................................................................159
Destination NAT....................................................................................................................................159
Example network...................................................................................................................................160
Bruteforce login prevention (FTP / SSH) ..........................................................................................................160
DoS attack protection.........................................................................................................................................162
Diagnose ........................................................................................................................................................162
Protection.......................................................................................................................................................162
Limit incoming connections ......................................................................................................................162
Action tarpit...............................................................................................................................................162
SYN filtering..............................................................................................................................................162
SYN cookies ..............................................................................................................................................163
Setup firewall rules to protect your router.........................................................................................................163
Securing your router ..........................................................................................................................................163
Change admin's password..............................................................................................................................163
Add users to the system .................................................................................................................................164
Set up packet filtering....................................................................................................................................164
Setup MAC filtering (Mac locking)...............................................................................................................165
Connections Tracking ........................................................................................................................................166
Basic universal firewall script............................................................................................................................167
Minimum Firewall Rules...................................................................................................................................169
Basic firewall rules ............................................................................................................................................169
Firewall Basic ................................................................................................................................................169
Setup basic firewall rules...............................................................................................................................172
Allow only needed icmp codes in icmp chain...........................................................................................172
Another Basic Firewall ..................................................................................................................................174
Home Firewall ...................................................................................................................................................175
Other Router Firewall Script..............................................................................................................................177
Automatically find unauthorized devices and block it on firewall....................................................................179
How to Lock MAC and IPAddress ...................................................................................................................180
How To: Block Facebook, Twitter, Youtube......................................................................................................180
Assign fixed/static IP address via WAP/CAP DHCP server..............................................................................181
Disable Access during Certain Hours ................................................................................................................182
Secure your router from invalid login attempts / Virus Flooding Attacks.........................................................183
HOWTO PREVENT VIRUS / PORTS FLOODING? ..................................................................................185
A BETTER APPROACH ON BLOCKING PORTS!....................................................................................187
How to block Winbox Discovery + Limit Winbox Access............................................................................187
How to Block Torrent / P2P...........................................................................................................................188
Limit number connection based on user profile with Hotspot...........................................................................188
WAP/CAP block from the Scan Winbox and Neighbour ..................................................................................191
Howto block Winbox Discovery + Limit Winbox Access.................................................................................192
Hotspot, Block website based on User Profile...................................................................................................193
Layer 7 Protocol.............................................................................................................................................193
Example new RegExp....................................................................................................................................193
Hotspot, Limit YouTube based on user profile..................................................................................................195
Regexp ...........................................................................................................................................................195
2nd mangle rule (mark packet)......................................................................................................................196

7
Add Queue Tree.............................................................................................................................................197
More...............................................................................................................................................................198
Firewall customizations for Hotspot..................................................................................................................198
Summary........................................................................................................................................................198
NAT................................................................................................................................................................198
Packet Filtering..............................................................................................................................................200
Redirection (Port Forwarding)...........................................................................................................................202
Forwarding a port to an internal IP................................................................................................................202
Changing WAP/CAP settings to provide access to internal devices..............................................................202
Redirect Mail Traffic to a Specified Server...................................................................................................204
Utilizing Port Forwarding on WAP/CAP Router...........................................................................................204
Assumptions:..............................................................................................................................................205
Allowing Ports Through AWAP/CAP Firewall.............................................................................................206
Allow Invited Traffic Back In....................................................................................................................206
Problem Report..............................................................................................................................................207
NAT redirection to a local web server not working.......................................................................................207
Hotspot...................................................................................................................................................................209
Hardware............................................................................................................................................................209
Quick Access Guide...........................................................................................................................................209
Web Browser (webfig GUI)...........................................................................................................................209
Winbox Access...............................................................................................................................................210
Winbox Remote Access .....................................................................................................................................211
Access Router from anywhere in the world...................................................................................................212
ADSL router that is in front of firewall .........................................................................................................212
Windows Domain Active Directory as Radius Server.......................................................................................214
Network Policy Server (NPS)........................................................................................................................214
W2K8.............................................................................................................................................................214
Dude...................................................................................................................................................................214
More Detailed Example:................................................................................................................................217
Health of HP printer (192.168.1.116) ........................................................................................................220
Show activities for ERP (192.168.1.105) ..................................................................................................220
Send email notification if server or service is down..................................................................................221
Any Outages?.............................................................................................................................................222
See if any dropped devices: .......................................................................................................................223
Syslog server:.............................................................................................................................................224
To change password for Dude agent on Firewall...........................................................................................224
Firewall setting to allow Dude connection ....................................................................................................225
Dude as a Windows service ...........................................................................................................................226
Initial Setup........................................................................................................................................................227
Quick Setup....................................................................................................................................................227
Install Dude agent on Firewall...........................................................................................................................230
Setup Internet Connection (WAN).................................................................................................................231
Change the Admin Password .........................................................................................................................234
Disable services that you are not using......................................................................................................234
Setting NTP services for time synchronization..............................................................................................235
System Clock.............................................................................................................................................235
NTP Services (SNTP Client)......................................................................................................................235
Enable DNS Remote Requests.......................................................................................................................236
Select the menu at the Bridge, the Bridge tab, click Settings....................................................................236
Setting Bridge Port.....................................................................................................................................237

8
Setting DHCP Server .................................................................................................................................238
Date and Time................................................................................................................................................240
Setup Hotspot.................................................................................................................................................240
Server Setup...................................................................................................................................................240
User and User profile.....................................................................................................................................247
IP Bindings.....................................................................................................................................................253
How to Block a Customer..........................................................................................................................254
Customization................................................................................................................................................256
Customize hotspot Login Page ..................................................................................................................257
How to Redirect User to your selected site after successful Login ...........................................................258
Howto Allow URL for some destinations for non authenticated Users.....................................................259
HOTSPOT users can’t communicate with each other on LAN or PROXY-ARP issue.............................259
Howto Bypass authentication for Few Clients with MAC and IP addresses.............................................259
Hourly checking for up status....................................................................................................................260
Ping dropped..............................................................................................................................................260
Client Login...................................................................................................................................................261
Command Line to show connected hosts.......................................................................................................261
Logs................................................................................................................................................................262
Storing logs in files....................................................................................................................................263
Other useful commands .............................................................................................................................264
Firewall action to log and drop..................................................................................................................265
Using Dude for Syslog Server ...................................................................................................................266
WAP/CAP System Logging ..................................................................................................................267
Ubuntu / Linux Syslog Server................................................................................................................267
Dude Syslog Server................................................................................................................................268
RouterOS as Agent ................................................................................................................................270
Export and Backup / Restore Configuration..................................................................................................271
Export Configuration.................................................................................................................................271
Export Firewall Rules................................................................................................................................271
Backup / Restore Configuration.................................................................................................................272
Create Support File ....................................................................................................................................272
Secure WAP/CAP Hotspot.............................................................................................................................273
Advanced Topics....................................................................................................................................................274
Configuring Mesh-WDS with Nstreme Protocol...............................................................................................274
Internet Wired Connection for Ethernet Port.................................................................................................275
Radio Power...................................................................................................................................................275
2.4GHz (Atheros AR5413) ........................................................................................................................276
5.0 GHz (Atheros AR5213) .......................................................................................................................276
Radio Channels..............................................................................................................................................278
CLI Configuration..........................................................................................................................................278
Config.txt...................................................................................................................................................278
What Wireless Clients see..........................................................................................................................280
Snapshot for MAC Address Wireless radio for each AP ...........................................................................281
Configuring Layer 2 Mesh Network..................................................................................................................282
CLI Configuration..........................................................................................................................................285
GUI Configuration.........................................................................................................................................288
Configuring OSPF Mesh....................................................................................................................................296
Dual Setup with OSPF for Failover / Redundancy............................................................................................299
Configuration of AP-A...................................................................................................................................300
Configuration of AP-B...................................................................................................................................301

9
Loopback........................................................................................................................................................301
GUI Setting for OSPF....................................................................................................................................302
Pinging from direct connected PC.................................................................................................................303
Debug inside AP-A and AP-B........................................................................................................................303
/ip addr print...............................................................................................................................................303
/routing ospf interface print status .............................................................................................................304
/routing ospf neighbor print.......................................................................................................................305
/routing ospf network print ........................................................................................................................306
/ip route print..............................................................................................................................................306
VRRP High Availability.....................................................................................................................................308
General Information.......................................................................................................................................308
Summary....................................................................................................................................................308
Specifications.............................................................................................................................................308
Description.................................................................................................................................................309
Notes ..........................................................................................................................................................309
VRRP Routers................................................................................................................................................309
Description.................................................................................................................................................309
Property Description..................................................................................................................................309
Notes ..........................................................................................................................................................310
A simple example of VRRP fail over.............................................................................................................311
Description................................................................................................................................................. 311
Configuring Master VRRP router..............................................................................................................311
Configuring Backup VRRP router.............................................................................................................312
Testing fail over .........................................................................................................................................312
VRRP: More examples ......................................................................................................................................313
Configuring Bonding.........................................................................................................................................317
Configuring Nstreme Protocol...........................................................................................................................317
Nstreme Dual Configuration..............................................................................................................................319
Introduction....................................................................................................................................................319
Example .........................................................................................................................................................322
The Nstreme Dual configuration ...................................................................................................................322
The First Platform (WAP-520)...................................................................................................................323
The Second Platform (CAP-520W)...........................................................................................................329
Configuration Print Out .................................................................................................................................337
Tower Side AP: (WAP-520).......................................................................................................................337
Client Side Bridge (CAP-520W)...............................................................................................................338
Optimizing Bandwidth (Throughput) ................................................................................................................338
Network Management & Monitoring Systems..................................................................................................341
Spam Trojan Detection ......................................................................................................................................348
Basic...............................................................................................................................................................348
Extension........................................................................................................................................................352
MPLS - Bridge Distant Networks......................................................................................................................354
VLAN: 802.1q and Q-in-Q (double tagging) ....................................................................................................357
What is a VLAN?...........................................................................................................................................357
Network Diagram...........................................................................................................................................357
Some Cisco switches with IOS......................................................................................................................358
Configuration for Switch 2950 ..................................................................................................................358
Configuration for Switch 3524 ..................................................................................................................360
Configuration of L2 WDS Transparent Bridge for Wireless WAP/CAP.......................................................361
Verification.....................................................................................................................................................363

10
Q-in-Q (double tagging) ................................................................................................................................364
Example of VLAN Tunneling (Q-in-Q).....................................................................................................365
Bandwidth Control (QoS)..................................................................................................................................367
DSCP based QoS with HTB ..........................................................................................................................367
DSCP marking/mangling...............................................................................................................................367
Set up the queue tree......................................................................................................................................368
Further Refinements by BrotherDust.............................................................................................................369
Comment on difference between this solution and first solution...................................................................372
DiffServ for Quality of Service......................................................................................................................373
What is DiffServ ........................................................................................................................................373
Implementing DiffServ..............................................................................................................................374
How to Configure MIMO / 802.11N Links.......................................................................................................376
802.11n Features............................................................................................................................................376
Frame Aggregation.....................................................................................................................................376
Aggregation of Mac Service Data Units (AMSDU)..................................................................................376
Aggregation of Mac Protocol Data Units (AMPDU)................................................................................376
Channel Bonding, Chains ..........................................................................................................................376
Discussion & Tips..........................................................................................................................................377
AP Bridge and Station Mode.........................................................................................................................379
AP Bridge Side (COM)..............................................................................................................................379
Configuration Script...............................................................................................................................387
Station (APClient) Side (CPEM)...............................................................................................................388
Configuration Script...............................................................................................................................389
Bandwidth on the Air.................................................................................................................................390
802.11n and WDS..........................................................................................................................................391
Nstreme Version 2 (Nv2) ...................................................................................................................................393
What is Nv2 ...................................................................................................................................................393
Nv2 Compatibitily .........................................................................................................................................393
Nv2 Co-existence...........................................................................................................................................394
Nv2 Key Points..............................................................................................................................................394
Nv2 vs 802.11 ................................................................................................................................................394
Nv2 vs Nstreme..............................................................................................................................................394
Nstreme / NV2 Rates .....................................................................................................................................395
TDMA – Time Slot Transmission..................................................................................................................395
TDMA settings...........................................................................................................................................395
Nv2 Troubleshooting .....................................................................................................................................396
Nv2 Configuration.........................................................................................................................................397
Tips to Improve Performance ....................................................................................................................397
Data Rates..................................................................................................................................................397
Tweaks .......................................................................................................................................................397
Configuration Script...................................................................................................................................398
Time Division Multiple Access (TDD) & Time Division Multiple Access (TDMA).......................................399
Monitoring .........................................................................................................................................................402
Winbox or Webfig..........................................................................................................................................402
See all online machine...............................................................................................................................402
See all active IP addresses .........................................................................................................................402
Log.............................................................................................................................................................403
Firewall Health...........................................................................................................................................403
CPU Usage.................................................................................................................................................403
Logging......................................................................................................................................................404