Allied-telesis AT-WA7501 Manuale Utente

Access PointsAT-WA7500AT-WA7501◆Installation and User’s GuideVERSION 2.3®PN 613-000066 Rev C

Preface10Contacting Allied TelesynThis section provides Allied Telesyn contact information for technical support as well as sales or corporate informa

Chapter 4: Configuring the Radios100Node Type Configure the 802.11g radio to master, station, or disabled:Master: The radio always operates in Master

AT-WA7500 and AT-WA7501 Installation and User’s Guide101The 802.11g and 802.11b channels that are allowed in a given country may change without notice

Chapter 4: Configuring the Radios102Configuring802.11g RadioAdvancedParametersYou can configure advanced parameters for the 802.11g radio primary serv

AT-WA7500 and AT-WA7501 Installation and User’s Guide103Table 31. 802.11g Radio Advanced Parameter DescriptionsParameter DescriptionClient Type/Perfor

Chapter 4: Configuring the Radios104Power Output Level* Set the transmitted power level:Maximum (63 mW): Sets the output power to the highest level su

AT-WA7500 and AT-WA7501 Installation and User’s Guide105Fragmentation Threshold Specifies the largest data frame that can be transmitted without fragm

Chapter 4: Configuring the Radios106Disallow SSID (Network Name) of ‘ANY(Master radio only)Determines if end devices that have their SSID set to ANY o

AT-WA7500 and AT-WA7501 Installation and User’s Guide107Configuring802.11g RadioInbound FiltersYou can configure inbound filters for the 802.11g radio

Chapter 4: Configuring the Radios1082. For each frame type, check or clear each check box. For help, see the next table.3. Click Submit Changes to sav

AT-WA7500 and AT-WA7501 Installation and User’s Guide1093. From the main menu, click Apply Hot Settings to save your changes to the “active” configura

11Chapter 1Getting StartedThis chapter introduces the Allied Telesyn AT-WA7500 and AT-WA7501 access points, explains their features, and describes how

Chapter 4: Configuring the Radios110Configuring the 802.11b RadioThe 802.11b radio will communicate with other 802.11b radios that have the same: SSI

AT-WA7500 and AT-WA7501 Installation and User’s Guide111Table 33. 802.11b Radio Parameter DescriptionsParameter DescriptionNode Type Configure the 802

Chapter 4: Configuring the Radios112Configuring802.11b RadioAdvancedParameters1. From the main menu, click 802.11b Radio > Advanced Configuration.

AT-WA7500 and AT-WA7501 Installation and User’s Guide113Basic Rate Choose the rate at which the access point transmits multicast and beacon frames. In

Chapter 4: Configuring the Radios114Enable Load BalancingDetermines if end devices can distribute their connections across multiple access points.Enab

AT-WA7500 and AT-WA7501 Installation and User’s Guide115Configuring802.11b RadioInbound FiltersWhen configuring a master radio, you can filter differe

Chapter 4: Configuring the Radios1163. Click Submit Changes to save your changes. To activate your changes, from the menu bar click Save/Discard Chang

AT-WA7500 and AT-WA7501 Installation and User’s Guide117Configuring a SpectraLink Network SpectraLink wireless telephone systems simplify network infr

Chapter 4: Configuring the Radios1182. In the Data/Voice Settings field, choose either Data and SpectraLink Traffic or SpectraLink Traffic Only. For h

AT-WA7500 and AT-WA7501 Installation and User’s Guide119Configuring the 802.11a RadioThe 802.11a radio will communicate with other 802.11a radios that

Chapter 1: Getting Started12Which Allied Telesyn Access Products Does This Manual Support?This system manual supports the AT-WA7500 and AT-WA7501 acce

Chapter 4: Configuring the Radios120If your screen does not look like the previous one, your primary service set may be configured as station (instead

AT-WA7500 and AT-WA7501 Installation and User’s Guide1215. Click Submit Changes to save your changes. To activate your changes, from the menu bar clic

Chapter 4: Configuring the Radios122Node Type Configure the 802.11a radio to master, station, or disabled:Master: The radio operates in Master mode wh

AT-WA7500 and AT-WA7501 Installation and User’s Guide123Channels marked with an asterisk (*) are not available in the mid-range radio.  If you set t

Chapter 4: Configuring the Radios124Configuring802.11a RadioAdvancedParameters1. From the main menu, click 802.11a Radio > Advanced Configuration.

AT-WA7500 and AT-WA7501 Installation and User’s Guide125Data Rate Choose the rate at which the access point transmits data. In general, higher speeds

Chapter 4: Configuring the Radios126Configuring802.11a RadioInbound FiltersWhen configuring a master radio, you can filter different types of wireless

AT-WA7500 and AT-WA7501 Installation and User’s Guide127NoteIf any of the devices are also DHCP clients, you need to check the Allow DHCP check box.To

Chapter 4: Configuring the Radios128Allow DHCP Determines if this radio accepts DHCP frames. The DHCP frames must match UDP destination port 67 and AR

129Chapter 5Configuring the Spanning TreeThis chapter explains how to configure the AT-WA7500 and AT-WA7501 access points so that they create a spanni

AT-WA7500 and AT-WA7501 Installation and User’s Guide13Overview of the AT-WA7500 and AT-WA7501 Access Point ProductsThe Allied Telesyn AT-WA7500 and A

Chapter 5: Configuring the Spanning Tree130About the Access Point Spanning TreeAT-WA7500 and AT-WA7501 access points with the same LAN ID arrange them

AT-WA7500 and AT-WA7501 Installation and User’s Guide131About thePrimary LANand the RootAccess PointThe primary LAN (also called the root IP subnet) c

Chapter 5: Configuring the Spanning Tree1323. Configure the LAN ID. All access points that want to participate in the spanning tree must have the same

AT-WA7500 and AT-WA7501 Installation and User’s Guide133 The designated bridge must be configured so that the Secondary LAN Bridge Priority value is

Chapter 5: Configuring the Spanning Tree134About EthernetBridging/DataLink TunnelingEthernet bridging is simply forwarding a frame received on the rad

AT-WA7500 and AT-WA7501 Installation and User’s Guide1353. On all other access points on the primary LAN, clear the Enable Ethernet Bridging check box

Chapter 5: Configuring the Spanning Tree136Configuring the Spanning Tree ParametersWhen you configure the spanning tree parameters, you identify the a

AT-WA7500 and AT-WA7501 Installation and User’s Guide1374. (Optional) Configure security by clicking Configure Spanning Tree Security. For help, see “

Chapter 5: Configuring the Spanning Tree138Rightmost LED BehaviorChoosing Spanning Tree Root Indicator causes the LED to blink if the access point is

AT-WA7500 and AT-WA7501 Installation and User’s Guide139Secondary LAN Flooding (Outbound)Appears for Designated Bridge only.Specifies the types of fra

Chapter 1: Getting Started14Figure 1. Access Point ArchitectureAccess points are multiport (Ethernet-to-wireless) bridges, and because wireless end de

Chapter 5: Configuring the Spanning Tree140About IP TunnelsThe physical boundary of a network is usually defined by the existence of an IP router. Bef

AT-WA7500 and AT-WA7501 Installation and User’s Guide141IP tunnels use encapsulation to establish a virtual LAN (VLAN) segment through IP routers. The

Chapter 5: Configuring the Spanning Tree142When an access point at the endpoint of the IP tunnel receives data from an end device, it uses a standard

AT-WA7500 and AT-WA7501 Installation and User’s Guide1432. Make sure that the root access point and the access point at the endpoint of the IP tunnel

Chapter 5: Configuring the Spanning Tree144Using One IPMulticastAddress forMultiple IPTunnelsIP tunneling supports IP multicast and Internet Group Man

AT-WA7500 and AT-WA7501 Installation and User’s Guide1453. Make sure that the root access point and the access point at the endpoint of the IP tunnel

Chapter 5: Configuring the Spanning Tree146away from their root IP subnet.Unicast frames are not flooded. Unicast frames are only forwarded outbound t

AT-WA7500 and AT-WA7501 Installation and User’s Guide147Frame Types That Are Never ForwardedCertain frame types are never forwarded through IP tunnels

Chapter 5: Configuring the Spanning Tree148Configuring IP TunnelsFor guidelines, see “About IP Tunnels” on page 140.To configure the IP Tunnels screen

AT-WA7500 and AT-WA7501 Installation and User’s Guide149Configuring theIP Address ListOn the root access point and root candidates, the IP address lis

AT-WA7500 and AT-WA7501 Installation and User’s Guide15Features This table lists the features of the access points.Table 1. Access Point Feature Compa

Chapter 5: Configuring the Spanning Tree1502. If you enabled IGMP, enter the Class D IP multicast address. The default is 224.0.1.65.3. Enter the IP a

AT-WA7500 and AT-WA7501 Installation and User’s Guide151through an IP tunnel by the root access point unless the destination IP address belongs to the

Chapter 5: Configuring the Spanning Tree1523. Click Submit Changes to save your changes. To activate your changes, from the menu bar click Save/Discar

AT-WA7500 and AT-WA7501 Installation and User’s Guide153Using Predefined Subtype FiltersYou can configure the access point to pass or drop certain pre

Chapter 5: Configuring the Spanning Tree154Subtype: Selects the frame subtype you wish to configure.Value: The next table describes frame subtypes and

AT-WA7500 and AT-WA7501 Installation and User’s Guide155DIX-IPX-Socket Socket value in hexadecimal.DIX-EtherType Specify the registered DIX type in he

Chapter 5: Configuring the Spanning Tree156Filter ExamplesThese examples illustrate how to set both Ethernet and IP tunnel filters to optimize network

AT-WA7500 and AT-WA7501 Installation and User’s Guide157Example 1 The root (AP1), AP3, AP5, and AP6 service only wireless end devices. These access po

Chapter 5: Configuring the Spanning Tree158For this example, set these options on the Ethernet Frame Type Filters screen. In the Predefined Subtype Fi

AT-WA7500 and AT-WA7501 Installation and User’s Guide159Example 3 If you have a DHCP server on a Windows NT server and you want to use this DHCP serve

Chapter 1: Getting Started16* The 802.11g radio is sometimes referred to as the 802.11b/g radio because it can be configured to communicate with any 8

Chapter 5: Configuring the Spanning Tree160Comparing IP Tunnels to Mobile IPThe AT-WA7500 and AT-WA7501 access points support IP tunneling, which allo

AT-WA7500 and AT-WA7501 Installation and User’s Guide161Special network software Standard network feature. No additional network software is required.

Chapter 5: Configuring the Spanning Tree162Configuring Global ParametersGlobal parameters are configured on the root access point and on any other acc

AT-WA7500 and AT-WA7501 Installation and User’s Guide1632. Configure the Global Flooding parameters. For help, see the next table.3. Click Submit Chan

Chapter 5: Configuring the Spanning Tree164Allow Multicast Outbound to TerminalsAppears only if Multicast Flooding is enabled.Determines if outbound m

AT-WA7500 and AT-WA7501 Installation and User’s Guide165ConfiguringGlobal RFParametersUse global RF parameters to set various parameters on the access

Chapter 5: Configuring the Spanning Tree166The Global RF Parameters screen appears.2. Configure the global RF parameters. Click the links in the Globa

AT-WA7500 and AT-WA7501 Installation and User’s Guide1673. Click Submit Changes to save your changes. To activate your changes, from the menu bar clic

Chapter 5: Configuring the Spanning Tree168S-UHF/902 MHz Awake Time(S-UHF and 902 MHz radios only)Specifies the amount of time that a wireless end dev

169Chapter 6Configuring SecurityThis chapter explains how to use different security solutions to ensure that you have a secure wireless network. This

AT-WA7500 and AT-WA7501 Installation and User’s Guide17reservation (including a fragmentation threshold and a reservation threshold).  AT-WA7500 Conf

Chapter 6: Configuring Security170Understanding SecurityThe AT-WA7500 and AT-WA7501 access points provide many different security features and solutio

AT-WA7500 and AT-WA7501 Installation and User’s Guide171These security features and solutions are listed below in the order of amount of security and

Chapter 6: Configuring Security172Use an 802.1x security solution. 802.1x security provides a framework to authenticate user traffic to a protected wi

AT-WA7500 and AT-WA7501 Installation and User’s Guide173802.11b radio is configured with no security and you expect it to associate with the secondary

Chapter 6: Configuring Security174Controlling Access to Access Point MenusThere are several ways that you can manage who can configure and manage the

AT-WA7500 and AT-WA7501 Installation and User’s Guide175To enable or disable access methods1. From the main menu, click Security. The Security screen

Chapter 6: Configuring Security176Setting Up Logins To ensure login security for configuring or maintaining the access points, you should either use a

AT-WA7500 and AT-WA7501 Installation and User’s Guide177NoteEach time the service password login attempt fails, the process may take up to 8 seconds.

Chapter 6: Configuring Security1785. Configure the password server by clicking Select a RADIUS server for login authorization. The RADIUS Server List

AT-WA7500 and AT-WA7501 Installation and User’s Guide179To set up logins1. From the main menu, click Security > Passwords. The Passwords screen app

Chapter 1: Getting Started18This illustration shows the LEDs that are on the AT-WA7501 access point. For help understanding these LEDs, see the LED De

Chapter 6: Configuring Security180Table 51. Password Parameter DescriptionsParameter DescriptionUse RADIUS for Login AuthorizationDetermines if you ar

AT-WA7500 and AT-WA7501 Installation and User’s Guide181Creating a Secure Spanning TreeWhen you configure a radio to use 802.1x security, you automati

Chapter 6: Configuring Security182To create a secure spanning treeNoteYou do not need to perform this procedure if you are implementing an 802.1x secu

AT-WA7500 and AT-WA7501 Installation and User’s Guide1836. Click Submit Changes to save your changes. To activate your changes, from the menu bar clic

Chapter 6: Configuring Security184Enabling Secure Communications Between Access Points and End DevicesThere are several ways that you can ensure secur

AT-WA7500 and AT-WA7501 Installation and User’s Guide185To use an ACL1. From the main menu, click Security and then click the radio service set you ar

Chapter 6: Configuring Security1867. Configure the RADIUS server by clicking Select a RADIUS server for ACL authorization. The RADIUS Server List scre

AT-WA7500 and AT-WA7501 Installation and User’s Guide187ConfiguringVLANsVirtual LANs (VLANs) make it easy to create and manage logical groups of wirel

Chapter 6: Configuring Security188To configure a VLAN1. From the main menu, click Spanning Tree Settings. The Spanning Tree Settings screen appears.2.

AT-WA7500 and AT-WA7501 Installation and User’s Guide1895. Under the Security link, click the radio service set you want to configure for the VLAN. Th

AT-WA7500 and AT-WA7501 Installation and User’s Guide19Understandingthe PortsThe access point may have up to four ports.To access the ports on the AT-

Chapter 6: Configuring Security190Since static WEP keys can be difficult to update, the AT-WA7500 and AT-WA7501 access products let you enter up to fo

AT-WA7500 and AT-WA7501 Installation and User’s Guide1913. Click Submit Changes to save your changes. This screen appears.4. Configure the parameters

Chapter 6: Configuring Security192Implementing an802.1x SecuritySolutionYou can implement 802.1x security in your network. The IEEE 802.1x standard pr

AT-WA7500 and AT-WA7501 Installation and User’s Guide193 Any device with an EAP-TLS supplicant (end device or child access point) needs both the CA c

Chapter 6: Configuring Security1942. In the Security Level field, select Dynamic WEP/802.1x.3. Click Submit Changes to save your changes. This screen

AT-WA7500 and AT-WA7501 Installation and User’s Guide1955. Click Submit Changes to save your changes. To activate your changes, from the menu bar clic

Chapter 6: Configuring Security196Enabling Secure Communications Between Access PointsWhen you configure a radio to use 802.1x security, you automatic

AT-WA7500 and AT-WA7501 Installation and User’s Guide197SWAP. Note that SWAP authentication is susceptible to downgrade attacks from rogue supplicants

Chapter 6: Configuring Security1985. Click Submit Changes to save your changes. To activate your changes, from the menu bar click Save/Discard Changes

AT-WA7500 and AT-WA7501 Installation and User’s Guide199Configuring Wi-Fi ProtectedAccess (WPA)SecurityWi-Fi Protected Access (WPA) is a strongly enha

Copyright © 2005 Allied Telesyn, Inc. 3200 North First Street, San Jose, CA 95134 USAAll rights reserved. No part of this publication may be reproduce

Chapter 1: Getting Started20Figure 4. AT-WA7501 PortsThe AT-WA7500 ports are located on the bottom of the access point. This illustration shows the po

Chapter 6: Configuring Security200To configure WPA security1. From the main menu, click Security and then click the radio service set you are configur

AT-WA7500 and AT-WA7501 Installation and User’s Guide201To continue configuring WPA security for WPA – 802.1x mode1. Configure the RADIUS server by cl

Chapter 6: Configuring Security202Configuring WPA PSK SecurityTable 54. WPA PSK Security Parameter DescriptionsParameter ExplanationMulticast Encrypti

AT-WA7500 and AT-WA7501 Installation and User’s Guide203Configuring WPA 802.1x SecurityTable 55. WPA 802.1x Security Parameter DescriptionsParameter E

204Chapter 7Configuring the Embedded Authentication Server (EAS)This chapter explains how to configure the embedded authentication server (EAS) in you

AT-WA7500 and AT-WA7501 Installation and User’s Guide205About the Embedded Authentication Server (EAS)The AT-WA7500 and AT-WA7501 access points have a

Chapter 7: Configuring the Embedded Authentication Server (EAS)206About CertificatesCertificates encrypt communication between the internal RADIUS ser

AT-WA7500 and AT-WA7501 Installation and User’s Guide207representative. Or you can install certificates from a third-party certificate authority.NoteA

Chapter 7: Configuring the Embedded Authentication Server (EAS)208Installing andUninstallingCertificatesOnce you have determined that you need to inst

AT-WA7500 and AT-WA7501 Installation and User’s Guide209To uninstall all certificatesNoteIf you follow the procedure to uninstall all certificates, yo

AT-WA7500 and AT-WA7501 Installation and User’s Guide21How the Access Point Fits in Your NetworkIn general, the access point forwards data from wirele

Chapter 7: Configuring the Embedded Authentication Server (EAS)210Configuring the EASOnce you decide which access point will be configured to use its

AT-WA7500 and AT-WA7501 Installation and User’s Guide211To enable the EAS1. Log in to the access point whose EAS you are enabling.2. From the main men

Chapter 7: Configuring the Embedded Authentication Server (EAS)212Configuring theDatabaseThe EAS database contains up to 128 clients that this access

AT-WA7500 and AT-WA7501 Installation and User’s Guide213NoteAllied Telesyn recommends that when you are done configuring the database, you export it a

Chapter 7: Configuring the Embedded Authentication Server (EAS)2148. Click Save/Discard changes, and then click Save Changes without Reboot. Table 59.

AT-WA7500 and AT-WA7501 Installation and User’s Guide215Using theRejected ListThe Rejected List screen displays the users and devices that have been r

Chapter 7: Configuring the Embedded Authentication Server (EAS)2164. Add users and devices to the database. For help see “Adding Entries to the Databa

AT-WA7500 and AT-WA7501 Installation and User’s Guide217Clearing the Rejected ListTo clear the rejected list, you can either reboot the access point o

Chapter 7: Configuring the Embedded Authentication Server (EAS)2183. If you are not using the secure web browser, click “A secure session is available

AT-WA7500 and AT-WA7501 Installation and User’s Guide2196. Choose the location and filename of the database. If you use the *.CSV extension, you can i

Chapter 1: Getting Started22In a simple wireless network, the access point that is connected to the wired network serves as a transparent bridge betwe

220Chapter 8Managing, Troubleshooting, and Upgrading Access PointsThis chapter explains how to manage, maintain, troubleshoot, and upgrade the access

AT-WA7500 and AT-WA7501 Installation and User’s Guide221Managing the Access PointsThere are several methods that you can use to manage the access poin

Chapter 8: Managing, Troubleshooting, and Upgrading Access Points222The enabler is already installed on access points with software release 2.0 or lat

AT-WA7500 and AT-WA7501 Installation and User’s Guide223To configure your access points to use Avalanche1. From the main menu, click Network Managemen

Chapter 8: Managing, Troubleshooting, and Upgrading Access Points2245. Verify that the Allow Avalanche Access check box is checked.6. Click Submit Cha

AT-WA7500 and AT-WA7501 Installation and User’s Guide2253. Install the software package using the Avalanche Management Console.4. Schedule access poin

Chapter 8: Managing, Troubleshooting, and Upgrading Access Points226Using SimpleNetworkManagementProtocol (SNMP)The access point can be managed using

AT-WA7500 and AT-WA7501 Installation and User’s Guide227SNMP Secret CommunitySpecify a password that provides read and write access and lets the user

Chapter 8: Managing, Troubleshooting, and Upgrading Access Points228Maintaining the Access PointsThe Maintenance menu lets you view different paramete

AT-WA7500 and AT-WA7501 Installation and User’s Guide229Table 64. AP Connections Screen FieldsDisplay Field DescriptionSpanning Tree Connection Status

AT-WA7500 and AT-WA7501 Installation and User’s Guide23Allied Telesyn recommends that you always implement some type of security.Using MultipleAccess

Chapter 8: Managing, Troubleshooting, and Upgrading Access Points230MAC Address Shows the address of the connected device. If another access point is

AT-WA7500 and AT-WA7501 Installation and User’s Guide231Viewing APNeighborsThe AP Neighbors screen provides information on all the access points (even

Chapter 8: Managing, Troubleshooting, and Upgrading Access Points232To view AP neighbors From the menu, click Maintenance > AP Neighbors. The AP N

AT-WA7500 and AT-WA7501 Installation and User’s Guide233Capabilities This information is derived from the capability information sent in the beacon. C

Chapter 8: Managing, Troubleshooting, and Upgrading Access Points234Viewing PortStatisticsThe Port Statistics screen shows the total number of frames

AT-WA7500 and AT-WA7501 Installation and User’s Guide235Viewing DHCPStatusThe DHCP Status screen shows a status report for the DHCP client or DHCP ser

Chapter 8: Managing, Troubleshooting, and Upgrading Access Points236Viewing theEvents LogThe Events Log screen shows a the events that have been logge

AT-WA7500 and AT-WA7501 Installation and User’s Guide237Viewing theAbout ThisAccess PointScreenThis screen shows information about the access point, s

Chapter 8: Managing, Troubleshooting, and Upgrading Access Points2384. Click the button under the Configuration Summary title to switch between displa

AT-WA7500 and AT-WA7501 Installation and User’s Guide239Restoring theAccess Point tothe DefaultConfigurationYou may need to restore the access point t

Chapter 1: Getting Started242. Configure the LAN ID. For help, see “Configuring the Spanning Tree Parameters” on page 136. 3. Configure one of the acc

Chapter 8: Managing, Troubleshooting, and Upgrading Access Points240Troubleshooting the Access PointsThis section provides you with information on the

AT-WA7500 and AT-WA7501 Installation and User’s Guide2413. Click each error message to jump to the configuration screen where you can resolve the poss

Chapter 8: Managing, Troubleshooting, and Upgrading Access Points242All SSID values must be unique per physical radio.While configuring multiple servi

AT-WA7500 and AT-WA7501 Installation and User’s Guide243The access point is set to originate IP tunnels but no there are no tunnel IP addresses.On the

Chapter 8: Managing, Troubleshooting, and Upgrading Access Points244The IP Address and IP Router must share the same subnet.For help, see “Configuring

AT-WA7500 and AT-WA7501 Installation and User’s Guide245TroubleshootingWith the LEDsWhen the access point boots, it performs internal diagnostics and

Chapter 8: Managing, Troubleshooting, and Upgrading Access Points246After the AT-WA7500 or AT-WA7501 successfully boots, the LEDs display one of these

AT-WA7500 and AT-WA7501 Installation and User’s Guide247The Power LED is not on. 1.Make sure the power cable is firmly plugged into the AT-WA7501 acce

Chapter 8: Managing, Troubleshooting, and Upgrading Access Points248You cannot connect to the access point using a web browser.1.Verify that you are n

AT-WA7500 and AT-WA7501 Installation and User’s Guide249The end device cannot connect to the network. From the Maintenance menu, choose AP Connection

AT-WA7500 and AT-WA7501 Installation and User’s Guide25The access points communicate with each other through the spanning tree. The wireless end devic

Chapter 8: Managing, Troubleshooting, and Upgrading Access Points250You need to verify the static WEP keys.You cannot verify the WEP keys. The keys ar

AT-WA7500 and AT-WA7501 Installation and User’s Guide251Troubleshootingthe RadiosIf you are having problems communicating with your wireless network,

Chapter 8: Managing, Troubleshooting, and Upgrading Access Points252In this table, “Radio A” refers to the radio in slot 1 and “Radio B” refers to the

AT-WA7500 and AT-WA7501 Installation and User’s Guide253ping will have their MAC address listed with a hyperlink.2. Click a MAC address hyperlink. The

Chapter 8: Managing, Troubleshooting, and Upgrading Access Points254Using ICMP EchoICMP (Internet Control Message Protocol) echo lets you ping devices

AT-WA7500 and AT-WA7501 Installation and User’s Guide2552. Click an IP address hyperlink. The access point pings the device, and then the Ping Utility

Chapter 8: Managing, Troubleshooting, and Upgrading Access Points256To view the Security Events log From the menu, click Security > Security Event

AT-WA7500 and AT-WA7501 Installation and User’s Guide257NoteIf you use an SNMP management station or another network management tool, the age represen

Chapter 8: Managing, Troubleshooting, and Upgrading Access Points258Recovering aFailed AccessPointNoteDo not use this procedure to upgrade your access

AT-WA7500 and AT-WA7501 Installation and User’s Guide259You can recover a failed access point using a Windows NT4/2000/XP PC. The procedure is explain

Chapter 1: Getting Started26Figure 10. Access Point as a WAPWAPs send data from end devices to the access points via wireless hops. Wireless hops are

Chapter 8: Managing, Troubleshooting, and Upgrading Access Points260Once the TFTP transfer is complete, the access point will begin booting the image

AT-WA7500 and AT-WA7501 Installation and User’s Guide261Upgrading the Access PointsFor optimal performance, you should install the most current softwa

Chapter 8: Managing, Troubleshooting, and Upgrading Access Points262NoteIf you have not already copied the upgrade file to your PC, follow the instruc

263Chapter 9Additional Access Point FeaturesThis chapter explains some of the more advanced ways that you can maintain the access points. This chapter

Chapter 9: Additional Access Point Features264Understanding the Access Point SegmentsThe AT-WA7500 and AT-WA7501 access points contain one flash memor

AT-WA7500 and AT-WA7501 Installation and User’s Guide265Understanding Transparent FilesThe AT-WA7500 and AT-WA7501 access points with software release

Chapter 9: Additional Access Point Features266Using the AP MonitorThe AP (access point ROM) monitor is system software that lets you manipulate the ac

AT-WA7500 and AT-WA7501 Installation and User’s Guide267To list AP monitor commands Press any key (except the letter B, which reboots the access poin

Chapter 9: Additional Access Point Features268MRPurpose: Displays the manufacturing record for the access point. Use the MR command to display the MAC

AT-WA7500 and AT-WA7501 Installation and User’s Guide269To display CAM commands Type any letter or number other than B and press Enter. The CAM comma

AT-WA7500 and AT-WA7501 Installation and User’s Guide273. (802.11g and 802.11b) Configure the station radio in the WAP to communicate with one of the

Chapter 9: Additional Access Point Features270To display test commands Type any letter or number other than B and press Enter. The test commands appe

AT-WA7500 and AT-WA7501 Installation and User’s Guide271To list service commands Press any key (except the letter B, which reboots the access point),

Chapter 9: Additional Access Point Features272To make segment 2 the active boot segment and segment 4 the active data segment, enter: FB 2 4 You can u

AT-WA7500 and AT-WA7501 Installation and User’s Guide273FDELPurpose: Deletes a particular file. NoteWhen you use the FDEL command, the file is marked

Chapter 9: Additional Access Point Features274To erase the contents of the memory card, enter:FE APP:FFRPurpose: Runs a program f, from a location s.

AT-WA7500 and AT-WA7501 Installation and User’s Guide275where:f is the FPGA configuration filename.s is the optional segment where you want to load th

Chapter 9: Additional Access Point Features276Using Command Console ModeYou can use the Command Console mode to manipulate some access point files and

AT-WA7500 and AT-WA7501 Installation and User’s Guide277Using theCommandsSeveral of these commands require that you enter filenames. To indicate the s

Chapter 9: Additional Access Point Features278FDPurpose: Displays the flash file system directory, which includes information about the boot file and

AT-WA7500 and AT-WA7501 Installation and User’s Guide279FEPurpose: Erases all the files in a particular segment, including those that have been “delet

Chapter 1: Getting Started28e. In the Primary service set SSID (Network Name) field, type the SSID that matches the SSID of the end device radio. In t

Chapter 9: Additional Access Point Features280In general, TFTP client sessions should fail only if the server is not responding either because it is b

AT-WA7500 and AT-WA7501 Installation and User’s Guide281The following command gets file UAP.DNL from a directory on a PC server with IP address 1.2.3.

Chapter 9: Additional Access Point Features282Example: The following command takes file AP824X.PRG that is saved in the active boot drive on the acces

AT-WA7500 and AT-WA7501 Installation and User’s Guide283TFTP SERVER STOPPurpose: When you are done transferring files, you can stop the access point f

Chapter 9: Additional Access Point Features284Using sdvarsCommandsUse sdvars commands to manipulate certain software download variables. Sdvars comman

AT-WA7500 and AT-WA7501 Installation and User’s Guide285sdvars set starttimePurpose: Sets the internal variable starttime. Starttime is a countdown ti

Chapter 9: Additional Access Point Features286sdvars set checkpoint 2TFTP get * ap824x.prg 1sdvars set checkpoint 3rebootWhen the software download is

AT-WA7500 and AT-WA7501 Installation and User’s Guide287Example: To change the inactive boot and data segments to active at the next reboot, enter:sdv

Chapter 9: Additional Access Point Features288Creating Script FilesYou can create a script file that executes a series of commands. For example, when

AT-WA7500 and AT-WA7501 Installation and User’s Guide289file tftp get * software\cert.dnl 1:file tftp get * software\closed.dnl 1:file tftp get * soft

AT-WA7500 and AT-WA7501 Installation and User’s Guide29You need to configure the wireless end devices to have the same SSID, LAN ID, and frequency as

Chapter 9: Additional Access Point Features290Legacy SampleScript forUpgrading AnyAccess PointThis sample script file was created for older access poi

AT-WA7500 and AT-WA7501 Installation and User’s Guide291Copying Files To and From the Access PointYou can accomplish a variety of file import/export t

Chapter 9: Additional Access Point Features292Importing orExporting anEAS RADIUSDatabase FileTo import or export an EAS RADIUS database file1. Click R

AT-WA7500 and AT-WA7501 Installation and User’s Guide293TransferringFiles Using YourWeb BrowserTo transfer files to the access point using your web br

Chapter 9: Additional Access Point Features294Viewing andCopying FilesUsing Your WebBrowserTo view and copy files from the access point using your web

AT-WA7500 and AT-WA7501 Installation and User’s Guide295TransferringFiles to and froma TFTP ServerTo transfer files to and from a TFTP server1. Click

Chapter 9: Additional Access Point Features296Starting orStopping theTFTP ServerTo start or stop the TFTP server1. Click Start or stop the TFTP server

AT-WA7500 and AT-WA7501 Installation and User’s Guide2972. In the Server IP Address field, type the IP address of an active TFTP server from which the

298Appendix ASpecificationsThis appendix contains AT-WA7500 and AT-WA7501 specifications for reference purposes only. Actual product performance and c

AT-WA7500 and AT-WA7501 Installation and User’s Guide299AT-7500 Access PointTable 80. AT-7500 Technical SpecificationsDimensions H x L x W4.6 cm x 25.

3Preface ...

Chapter 1: Getting Started30You need to configure the wireless end devices to have the same SSID, LAN ID, and frequency as the WAP radio. You do not n

Appendix A: Specifications300AT-7501 Access PointTable 81. AT-7501 Technical SpecificationsDimensions H x L x W9.5 cm x 35.0 cm x 23.6 cm(3.8 in x 14.

AT-WA7500 and AT-WA7501 Installation and User’s Guide301Serial port maximum data rate115,200 bpsManagement interfaces Web browser-based manager, text-

Appendix A: Specifications302Radio SpecificationsIEEE 802.11gIEEE 802.11bTable 82. IEEE 802.11g Radio Technical SpecificationsFrequency band 2.4 to 2.

AT-WA7500 and AT-WA7501 Installation and User’s Guide303IEEE 802.11aChannels 11 (North America), 13 (Europe), 4 (France), 14 (Japan). 1 (Israel)Range

Appendix A: Specifications304Range (depending on environment)248 m (813.7 ft) 6 Mbps240 m (787.4 ft) 12 Mbps175 m (574.2 ft) 18 Mbps132 m (433.1 ft) 2

305Appendix BDefault SettingsThis appendix provides factory defaults for reference purposes only.The factory default settings for the access points ar

Appendix B: Default Settings306TCP/IP Settings Menu DefaultsTable 85. TCP/IP Settings Menu DefaultsParameter NameRange Default Your Site?IP Address 4

AT-WA7500 and AT-WA7501 Installation and User’s Guide307DHCP for Access Point NetworkUse Any Available DHCP Server, Only Use Access Point DHCP ServerU

Appendix B: Default Settings308DHCP Server Setup Menu DefaultsTable 86. DHCP Server Setup Menu DefaultsParameter NameRange Default Your Site?Low Addre

AT-WA7500 and AT-WA7501 Installation and User’s Guide309IEEE 802.11g Radio Menu DefaultsTable 87. 802.11g Radio Menu DefaultsParameter Name Range Defa

AT-WA7500 and AT-WA7501 Installation and User’s Guide31with access points that are acting as point-to-point bridges.Figure 13. Access Points as Point-

Appendix B: Default Settings310Antenna Control Two Antennas/One AntennaOne AntennaMixed Mode PerformanceOptimize Mixed (802.11b and 802.11g), Optimize

AT-WA7500 and AT-WA7501 Installation and User’s Guide311IEEE 802.11b Radio Menu DefaultsTable 88. 802.11b Radio Menu DefaultsParameter NameRange Defau

Appendix B: Default Settings312Enable Medium Density DistributionCheck/Clear ClearData/Voice SettingsData Traffic Only, Data and SpectraLink Traffic,

AT-WA7500 and AT-WA7501 Installation and User’s Guide313IEEE 802.11a Radio Menu DefaultsTable 89. 802.11a Radio Menu DefaultsParameter NameRange Defau

Appendix B: Default Settings314Reservation Threshold (2347 to Disable)1 to 65535 2347Fragmentation Threshold256 to 2346 2346Disallow Network Name of ‘

AT-WA7500 and AT-WA7501 Installation and User’s Guide315Spanning Tree Settings Menu DefaultsTable 90. Spanning Tree Setting Menu DefaultsParameter Nam

Appendix B: Default Settings316Global Flooding Menu DefaultsTable 91. Global Flooding Menu DefaultsParameter NameRange Default Your Site?Multicast Flo

AT-WA7500 and AT-WA7501 Installation and User’s Guide317Global RF Parameters Menu DefaultsTable 92. Global RF Parameters Menu DefaultsParameter NameRa

Appendix B: Default Settings3183 through 20 Two sets of hexadecimal pairs 00 through FF.00 00Table 92. Global RF Parameters Menu DefaultsParameter Nam

AT-WA7500 and AT-WA7501 Installation and User’s Guide319Telnet Gateway Configuration Menu DefaultsTable 93. Telnet Gateway Configuration Menu Defaults

Chapter 1: Getting Started32You may also need to adjust the flooding parameters. Here are some recommendations: If there are no end devices on the se

Appendix B: Default Settings320Ethernet Configuration Menu DefaultsTable 94. Ethernet Configuration Menu DefaultsParameter NameRange Default Your Site

AT-WA7500 and AT-WA7501 Installation and User’s Guide321EthernetAdvanced FiltersMenu DefaultsTable 95. Ethernet Advanced Filters Menu DefaultsParamete

Appendix B: Default Settings322IP Tunnels Menu DefaultsTunnels FilterMenu DefaultsTable 96. IP Tunnels Menu DefaultsParameter Name Range Default Your

AT-WA7500 and AT-WA7501 Installation and User’s Guide323SubType DIX-IP-TCP-Port,DIX-IP-UDP-Port,DIX-IP-Protocol,DIX-IPX-Socket,DIX-EtherType,SNAP-IP-T

Appendix B: Default Settings324Network Management Menu DefaultsInstant On MenuDefaultsTable 98. Network Management Menu DefaultsParameter Name Range D

AT-WA7500 and AT-WA7501 Installation and User’s Guide325Security Menu DefaultsPasswords MenuDefaultsTable 100. Security Menu DefaultsParameter NameRan

Appendix B: Default Settings326IEEE 802.11 (g, bor a) RadioSecurity MenuDefaultsPassword 1 to 32 characters (Not case sensitive)atilanRead Only Passwo

AT-WA7500 and AT-WA7501 Installation and User’s Guide327If Security Level is Static WEPWEP Transmit Key1, 2, 3, or 4 1WEP Key 1 to 45 ASCII characters

Appendix B: Default Settings328RADIUS ServerList MenuDefaultsSpanning TreeSecurity MenuDefaultsTable 103. RADIUS Server List Menu DefaultsParameter Na

AT-WA7500 and AT-WA7501 Installation and User’s Guide329EmbeddedAuthenticationServer MenuDefaultsPassword 1 to 31 charactersanonymousVerify CA Certifi

AT-WA7500 and AT-WA7501 Installation and User’s Guide33c. In the Secondary LAN Bridge Priority field, enter a number other than zero.d. In the Seconda

330Appendix CGlossaryARP (Address Resolution Protocol) cacheA table that stores IP addresses and their corresponding MAC addresses. The access point m

AT-WA7500 and AT-WA7501 Installation and User’s Guide331To enable data link tunneling, disable Ethernet bridging.designated bridgeAlso called a second

Appendix C: Glossary332Ethernet bridgingWhen an access point receives wireless traffic and the destination address is known, it forwards frames to the

AT-WA7500 and AT-WA7501 Installation and User’s Guide333IGMP (Internet Group Management Protocol)A standard protocol that lets you originate multiple

Appendix C: Glossary334activity. The MIB for the access point is available from the Allied Telesyn web site at www.alliedtelesyn.com.multicast address

AT-WA7500 and AT-WA7501 Installation and User’s Guide335point-to-point bridgeSee also wireless bridge. A bridge that connects two wired networks with

Appendix C: Glossary336root portThe access point port that provides the inbound connection to the spanning tree. The root port provides a link to a pa

AT-WA7500 and AT-WA7501 Installation and User’s Guide337with the MIB to obtain information about network activity.spanning treeA form of network organ

Appendix C: Glossary338to the home subnet of the end device. If the end device has roamed to another subnet, the frame must be forwarded to the remote

AT-WA7500 and AT-WA7501 Installation and User’s Guide339WPA (Wi-Fi Protected Access)A feature that can be implemented in the 802.11g, 802.11b, and 802

Chapter 1: Getting Started34c. In the Primary service set Node Type field, choose Master.d. In the Primary service set SSID (Network Name) field, type

AT-WA7500 and AT-WA7501 Installation and User’s Guide35Allied Telesyn recommends that you implement some type of security.Table 9. 802.11g Point-to-Po

Chapter 1: Getting Started36Example - Configuring an 802.11a Point-to-Multipoint BridgeIn this example, each access point only has one 802.11a radio.

AT-WA7500 and AT-WA7501 Installation and User’s Guide37Using Dual RadioAccess Points forRedundancyYou can configure AT-WA7500 units and AT-WA7501 unit

Chapter 1: Getting Started38Configuring the Access Point (Setting the IP Address)The access point will work out of the box if you are using a DHCP ser

AT-WA7500 and AT-WA7501 Installation and User’s Guide39To use the Allied Telesyn AT-WA7500 Configuration WizardNoteTo use the AT-WA7500 Configuration

Contents4Connecting Power Over Ethernet ...

Chapter 1: Getting Started405. Proceed with the IP Address configuration by following the on-screen menus.Using aCommunicationsProgramYou can use a co

AT-WA7500 and AT-WA7501 Installation and User’s Guide414. Press Enter when the message “Starting system” appears on your PC screen. The Username field

Chapter 1: Getting Started42 IP Address - A unique IP address. IP Subnet Mask - The subnet mask that matches the other devices in your network. IP

AT-WA7500 and AT-WA7501 Installation and User’s Guide43To use a web browser interface1. Determine the IP address of the access point. If a DHCP server

Chapter 1: Getting Started445. Click Login. The TCP/IP Settings screen appears. Your web browser session is established.NoteAlthough you can use sever

AT-WA7500 and AT-WA7501 Installation and User’s Guide452. From a command prompt, type: telnet IPaddress where IPaddress is the IP address of the acces

Chapter 1: Getting Started46Saving Configuration ChangesWhen you are done configuring the access point, you may want to activate your changes immediat

AT-WA7500 and AT-WA7501 Installation and User’s Guide47Using a WebBrowserInterface1. On the menu bar, click Save/Discard Changes. This screen appears.

Chapter 1: Getting Started48Using a TelnetSession1. From the Access Point Configuration menu, choose Save Configuration. 2. Choose Reboot to reboot th

49Chapter 2Installing the Access PointsThis chapter explains how to install the Allied Telesyn AT-WA7500 and AT-WA7501 access points in your data coll

AT-WA7500 and AT-WA7501 Installation and User’s Guide5Chapter 6Configuring Security ...

Chapter 2: Installing the Access Points50Installation GuidelinesAllied Telesyn recommends that you have an Allied Telesyn-certified RF specialist cond

AT-WA7500 and AT-WA7501 Installation and User’s Guide51Other AccessPointsAccess points that are configured for the same frequency and that are in the

Chapter 2: Installing the Access Points52Installing the AT-WA7501You can place the AT-WA7501 horizontally or vertically on a desk or counter. If you w

AT-WA7500 and AT-WA7501 Installation and User’s Guide53option. For help, see “Connecting to Your Fiber Optic Network” on page 55.To connect the AT-WA7

Chapter 2: Installing the Access Points54Installing the AT-WA7500You can place the AT-WA7500 horizontally on a desk or counter. The AT-WA7500 also shi

AT-WA7500 and AT-WA7501 Installation and User’s Guide55Connecting to Your Fiber Optic NetworkYou can order your AT-WA7501 access point with a fiber op

Chapter 2: Installing the Access Points56NoteAll cables must be multimode, 62.5/125 µm.Connecting to anMT-RJ NetworkTo connect to an MT-RJ network, yo

AT-WA7500 and AT-WA7501 Installation and User’s Guide572. Connect the access point to your network as shown in the next two illustrations.NoteThe patc

Chapter 2: Installing the Access Points58 a patch cord with a female MT-RJ connector to insert into the access point’s male MT-RJ fiber optic port, a

AT-WA7500 and AT-WA7501 Installation and User’s Guide59Connecting Power Over EthernetThe AT-WA7500 is powered by power over Ethernet. The AT-WA7501 ca

Contents6Using the AP Monitor...

Chapter 2: Installing the Access Points60External Antenna Placement GuidelinesAntennas and their placement play a vital role when installing a wireles

AT-WA7500 and AT-WA7501 Installation and User’s Guide61Allied Telesyn recommends that you use two antennas for each radio to achieve optimal performan

Chapter 2: Installing the Access Points62 Follow the recommended antenna separation precisely when using the closest distances. Movement of as little

AT-WA7500 and AT-WA7501 Installation and User’s Guide63When antenna diversity is enabled, both ports can receive, but only the primary port transmits.

64Chapter 3Configuring the Ethernet NetworkThis chapter explains how to configure the AT-WA7500 and AT-WA7501 access points so that they communicate w

AT-WA7500 and AT-WA7501 Installation and User’s Guide65Configuring the TCP/IP SettingsIf you are using a DHCP server to automatically assign an IP add

Chapter 3: Configuring the Ethernet Network664. If you want to configure the access point as a NAT server, see “About Network Address Translation (NAT

AT-WA7500 and AT-WA7501 Installation and User’s Guide67Configuring theAccess Point as aDHCP ClientYou can use a DHCP server to automatically assign an

Chapter 3: Configuring the Ethernet Network68To configure the access point as a DHCP client1. From the menu, click TCP/IP Settings. The TCP/IP Setting

AT-WA7500 and AT-WA7501 Installation and User’s Guide693. Click Submit Changes to save your changes. To activate your changes, from the menu bar click

7PrefaceThis manual provides you with information about the features of the Allied Telesyn AT-WA7500 and AT-WA7501 access points with software release

Chapter 3: Configuring the Ethernet Network70Configuring theAccess Point as aDHCP ServerYou can configure the access point as a simple DHCP server tha

AT-WA7500 and AT-WA7501 Installation and User’s Guide71To configure the access point as a DHCP server1. From the menu, click TCP/IP Settings. The TCP/

Chapter 3: Configuring the Ethernet Network724. Click Submit Changes to save your changes. DHCP Server Setup appears in the menu.DHCP User Class Leave

AT-WA7500 and AT-WA7501 Installation and User’s Guide735. From the menu, click DHCP Server Setup. The DHCP Server Setup screen appears.6. Configure th

Chapter 3: Configuring the Ethernet Network74Supported DHCP Server OptionsWhen the access point is acting as a DHCP server, it issues IP address lease

AT-WA7500 and AT-WA7501 Installation and User’s Guide75Unsupported DHCP Server OptionsWhen the access point is acting as a DHCP server, it does not su

Chapter 3: Configuring the Ethernet Network76To configure the access point as a NAT server1. From the menu, click TCP/IP Settings. The TCP/IP Settings

AT-WA7500 and AT-WA7501 Installation and User’s Guide77Configuring Other Ethernet or Fiber Optic SettingsMany of the standard Ethernet or fiber optic

Chapter 3: Configuring the Ethernet Network78Table 17. Ethernet Parameter DescriptionsParameter ExplanationPort Type Appears only if the access point

AT-WA7500 and AT-WA7501 Installation and User’s Guide79Configuring theEthernet AddressTableIf you have a secondary LAN, you should configure the Ether

Preface8Document ConventionsThis document uses the following conventions:NoteNotes provide additional information.CautionCautions inform you that perf

Chapter 3: Configuring the Ethernet Network80Configuring Ethernet FiltersYou can set both Ethernet and IP tunnel filters, and you can create protocol

AT-WA7500 and AT-WA7501 Installation and User’s Guide81To set frame type filters1. From the main menu, click Ethernet > Frame Type Filters. The Fra

Chapter 3: Configuring the Ethernet Network825. If you set the Scope field to Unlisted for any of the frame types, you must also configure predefined

AT-WA7500 and AT-WA7501 Installation and User’s Guide83Using PredefinedSubtype FiltersYou can configure the access point to pass or drop certain prede

Chapter 3: Configuring the Ethernet Network84To customize subtype filters1. From the main menu, click Ethernet > Customizable Subtype Filters. The

AT-WA7500 and AT-WA7501 Installation and User’s Guide85ExampleThis example shows you how to use customizable filters to allow only the wireless end de

Chapter 3: Configuring the Ethernet Network86Configuring Advanced FiltersYou can configure advanced filters if you need more flexibility in your filte

AT-WA7500 and AT-WA7501 Installation and User’s Guide872. Enter up to 22 value IDs and values. 3. Click Submit Changes to save your changes. To activa

Chapter 3: Configuring the Ethernet Network882. Configure the filter expressions parameters. For help, see the next table.3. Click Submit Changes to s

AT-WA7500 and AT-WA7501 Installation and User’s Guide89Example 1This example shows you how to use Ethernet filters to filter all traffic that passes t

AT-WA7500 and AT-WA7501 Installation and User’s Guide9Where to Find Web-based GuidesThe installation and user guides for all Allied Telesyn products a

Chapter 3: Configuring the Ethernet Network90Table 22. Example 1 - Filter ValuesValue ID Value Description1 ff ff ff ff ff ff Allows multicast traffic

AT-WA7500 and AT-WA7501 Installation and User’s Guide91For this example, set these filter expressions.You must enter a filter expression for each Valu

Chapter 3: Configuring the Ethernet Network92Example 2This example shows how to use Ethernet filters to discard all DIX IP multicast frames except tho

AT-WA7500 and AT-WA7501 Installation and User’s Guide93Set the first filter expression as shown below.Table 25. Example 2 – First Filter ExpressionPar

Chapter 3: Configuring the Ethernet Network94Set the second filter expression as shown below.Table 26. Example 2 – Second Filter ExpressionParameter V

AT-WA7500 and AT-WA7501 Installation and User’s Guide95Set the third filter expression as shown below.Table 27. Example 2 – Third Filter ExpressionPar

96Chapter 4Configuring the RadiosThis chapter explains how to configure the radios in the AT-WA7500 and AT-WA7501 access points so that they communica

AT-WA7500 and AT-WA7501 Installation and User’s Guide97About the RadiosThe AT-WA7500 and AT-WA7501 access products may contain one or two radios. You

Chapter 4: Configuring the Radios98Configuring the 802.11g RadioYou can configure the 802.11g radio to communicate with other 802.11g and 802.11b radi

AT-WA7500 and AT-WA7501 Installation and User’s Guide992. Configure the parameters for the radio. For help, see the next table.3. Configure the advanc