Benutzeranleitung / Produktwartung AP-5131 des Produzenten Symbol Technologies
Zur Seite of 578
AP-5131 Access Point Product Reference Guide.
.
AP-5131 Access Point Product Reference Guide 72E-94168-01 Revision A November 2006.
.
© 2006 by Symbol T echnologies, Inc. All rights reserved. No part of this publication may be reproduced or used in any form, or by any electrical or mechanical means, without permission in writing from Symbol. This includes electronic or mechanical means, such a s photocopying, recording, or information storage and retrieval systems.
.
Contents About This Guide Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vii Document Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
AP-5131 Access Poin t Product Referen ce Guide iv Single or Dual Mode Radio Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-6 Separate LAN and WAN Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
v MU Association Process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-22 Operating Modes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-23 Management Access Options .
AP-5131 Access Poin t Product Referen ce Guide vi Testing Connectivity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-13 Where to Go from Here? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
vii Setting the WLAN’s Radio Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-45 Configuring the 802.11a or 802.11b/g Radio . . . . . . . . . . . . . . . . . . . . . 5-48 Configuring Bandwidth Management Settings . . . . . . .
AP-5131 Access Poin t Product Referen ce Guide viii Mapping Users to Groups. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-71 Defining the User Access Policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
ix Network ACL Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-80 Network Radio Configuration Commands . . . . . . . . . . . . . . . . . . . . . . . . 8-85 Network Quality of Service (QoS) Commands . . . . . . . . .
AP-5131 Access Poin t Product Referen ce Guide x Appendix A. Technical Specifications Physical Characteristics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-2 Electrical Characteristics . . . . . . . . .
About This Guide Introduction This guide pr ovides configuration a nd setup info rmation for the AP-5131 model ac cess point. Document Conventions The following document conv entions are used in this document: NOTE Indicate tips or special requirements.
AP-5131 Access Poin t Product Referen ce Guide viii Notational Conventions The following notational convention s are used in this document: • Italics are used to highlight specific items in the general text, and to identify chap ters and sections in this and rela ted documents.
AP-5131 Introduction The Symbol AP-5131 Access Point (AP) provides a bridge between Ethe rnet wired LANs or W ANs and wireless networks. It provides conne ctivity be tween Etherne t wired networks and radio-equipped mobile units (MUs).
AP-5131 Access Poin t Product Referen ce Guide 1-2 1.1 New AP-5131 Features With this most recent 1.1 release of the AP-5131 firmware, the following new featu res have been introduced to the existing .
AP-5131 Introduct ion 1-3 Once the AP-5131 (in client bridge mode) establis hes at least one wireless conn ection, it establishes other wireless connections in the bac kground as they become available. In this way , the AP-5131 is able to establish simultaneous redundant links.
AP-5131 Access Poin t Product Referen ce Guide 1-4 1.1.3 On-board Radius Server Authentication The AP-5131 n ow has the ability to work as a Radius Server to pro vide user database information and user authentication.
AP-5131 Introduct ion 1-5 1.1.5 Routing Information Protocol (RIP) With the release of the 1.1 version AP-5131, Routing Informatio n Protocol (RIP) fu nctionality has been added to the AP-5131 ’ s existing Router screen. RIP is an interior ga teway protocol that sp ecifies how routers exchange rou ting-table information.
AP-5131 Access Poin t Product Referen ce Guide 1-6 1.2 Feature Overview The Symbol AP-5131 has the followin g existing features carried forward from its initial 1.0 release: • Single or Dual Mode Radio Op tions • Separate LAN and WAN Ports • Multiple Mounting Options • Antenna Support for 2.
AP-5131 Introduct ion 1-7 If the AP-5131 is manufactured as a dual-radio access point, the AP-5131 enables you to configure one radio for 802.11a, and the othe r 802.11b/g. For detailed information on config uring your AP-5131, see Setting the WLAN’ s Radio Configuration on page 5-45 .
AP-5131 Access Poin t Product Referen ce Guide 1-8 For an overview of the Radio 1 (2.4 GHz) and Radio 2 (5.2 GHz) antennas supported on the AP-5131’ s Reverse SMA (RSM A) connectors, see Antenna Sp ecifications on page A-4 .
AP-5131 Introduct ion 1-9 1.2.7 Quality of Serv ice (QoS) Support The AP-5131 QoS implementation provides applic ations running on different wireless devices a variety of priority levels to transmit data to and fro m the AP-5131.
AP-5131 Access Poin t Product Referen ce Guide 1-10 • Content Filtering For an overview on the encryption and authentication schemes available on the AP-5131, refer to Configuring Access Point Security on page 6-1 . 1.2.8.1 Kerberos Authentication Authentication is a means of verifying informat ion that is transmitted from a secure source.
AP-5131 Introduct ion 1-11 An MU is not able to acces s the network if not au thenticated. When config ured for EAP support, the access point displa ys the MU as an EAP station. EAP is only supported on mobile de vices running Windows XP , Windows 2000 (using Service Pack #4) and Windows Mobile 2003 .
AP-5131 Access Poin t Product Referen ce Guide 1-12 1.2.8.4 KeyGuard Encryption Use KeyGuard to shield the master e ncryption keys from bein g discovered through hac king. KeyGuard negotiation takes place between the ac cess point and MU upon association.
AP-5131 Introduct ion 1-13 For detailed information on WP A2-CCMP configurations, see Configuring WP A2-C CMP (802.11i) on page 6-22 . 1.2.8.7 Firewall Security A firewall keeps personal d ata in and hackers out. The AP-5131 firewall preve nts suspicio us Internet traffic from proliferating the AP-5 131 managed netwo rk.
AP-5131 Access Poin t Product Referen ce Guide 1-14 assignment. In addition to these 16 VLANs, the AP-51 31 supports dynamic, user-based, VLANs when using EAP au thentication . VLANs enable organizations to share netwo rk res ources in various network segments within larg e areas (airports, shopping malls, e tc.
AP-5131 Introduct ion 1-15 SNMP allows a network administrator to configure the AP -5131, manage network p erformance, find and solve network problems, and plan for network growth. Th e AP-5131 supports SNMP management functions for gatherin g information from its ne twork components.
AP-5131 Access Poin t Product Referen ce Guide 1-16 1.2.15 V oice Prioritization Each AP-5131 WLAN has the capa bility of having its QoS policy conf igured to prioritize the network traffic requirements for associated MUs. A WLAN QoS page is available for each enabled WLAN on either the AP-5131 802.
AP-5131 Introduct ion 1-17 For detailed information on available AP-5131 statistical displays and the values they represent, see Monitoring Statistics on page 7-1 . 1.2.18 T ransmit Power Control The AP-5131 has a configurable power level for each radio.
AP-5131 Access Poin t Product Referen ce Guide 1-18 1.2.22 DHCP Support The AP-5131 can use Dynamic Host Config uration Protocol (DHCP) to obtain a leased IP address an d configuration in formation from a remote server . DH CP is based on the BOOTP proto col and can coexist or interoperate with BOOTP .
AP-5131 Introduct ion 1-19 digital data signal is encoded onto the carriers using a DSSS chipping algori thm . The AP-5131 rad io signal propagates into the air as ele ctromagnetic waves. A receiving antenna (on th e MU) in the path of the waves absorbs the waves as electrical signals.
AP-5131 Access Poin t Product Referen ce Guide 1-20 different AP-5131. The roam occurs when the MU analy zes the reception quality at a location and determines a different AP-5131 provide s better signal strength and lower MU load distribution. If the MU does not find an AP-5131 with a workable signal, it can perform a scan to find any AP .
AP-5131 Introduct ion 1-21 1.3.3 Media T ypes The AP-5131 radio interface conforms to IE EE 802.11a/b/g spec ifications. The interface op erates at a maximum 54Mbps (802.11a radio) using direct-s equence radio technology . The AP-5131 supports multiple-cell operatio ns with fast roaming between cells.
AP-5131 Access Poin t Product Referen ce Guide 1-22 1.3.5 MU Association Process An AP-5131 recognizes MUs as they begin the as sociation process with the AP-5131.
AP-5131 Introduct ion 1-23 1.3.6 Operating Modes The AP-5131 ca n operate in a couple of con figurations. • Access Point - As an Access Point , the AP-5131 functions as a layer 2 bridge (similar to Symbol’ s existing AP-4131 access point). The wired uplink can operate as a trunk and support multiple VLANs.
AP-5131 Access Poin t Product Referen ce Guide 1-24 • MIB (Management Information Base) access ing the AP -5131 SNMP function using a MIB Browser . The AP-5131 CDROM contains the follo wing 2 MIB files: • Symbol-CC-WS2000-MIB-2.
Hardware Installation An AP-5131 installation includes mounting the AP-5131 on a table-top , wall, ceiling T -bar or above the ceiling (attic or plenum), connecting the AP-5 131 to the network (LAN or W AN port connection), connecting antennae and applying power .
AP-5131 Access Poin t Product Referen ce Guide 2-2 2.1 Precautions Before installing the AP-5131 verify the following: • Do not install in wet or dusty areas without additional protection . Contact a Symbol representative for more inform ation. • V erify the environment has a continuous temperature range betwe en -20° C to 50° C.
Hardware Installation 2-3 V erify the model indicated on the bottom of the AP-5131 is correct. Contact the Symbol Su pport Center to report missing or improperly functioning items. AP-5131-13 041-WWR AP-5131 802 .11a+g Dual Radi o Access Point AP-5131 Install Guide Power Inject or (Part No .
AP-5131 Access Poin t Product Referen ce Guide 2-4 The Symbol power injector (Part No. AP-PSBIAS-1P2-AFR) is inclu ded in certain orderable configurations, but can be added to any co nfiguration. For more information on the Symbol powe r injector , see Symbol Pow er Injector System on page 2-8 .
Hardware Installation 2-5 metal, concrete, walls or floors block transmission. Install the AP-5131 in open areas or add access points as needed to improve coverag e. Antenna coverage is analogous to lightin g. Users might find an area lit from far away to b e not bright enough.
AP-5131 Access Poin t Product Referen ce Guide 2-6 suite supporting the 2.4 GHz band and another antenn a suite supporting the 5.2 GHz band. Select an antenna model best suited to the intended operational environme nt of your AP -5131. Antenna connectors for Radio 1 are locate d in a different location from the Ra dio 2 antenna connectors.
Hardware Installation 2-7 The 5.2 GHz antenna suite includes the follo wing models: For detailed specifications on the 2.4 GHz and 5.2 GHz antennae mentioned in this section, see section 2.4 GHz Antenna Matrix on page A-4 and section 5.2 GHz Antenn a Matrix on page A-4 .
AP-5131 Access Poin t Product Referen ce Guide 2-8 2.5 Power Options The power options for the AP -5131 include: • Symbol Power Injector (Part No. AP-PSBIAS-1P2-AFR) • Symbol 48-V olt Power Supply (Part No. 50-24000-050) • Any standard 802.3af complian t device.
Hardware Installation 2-9 2.6.1 Installing the Power Injector Refer to the following sections for information on planning, installing , and validating the power injector installa tion: • Preparing for Site Installation • Cabling the Power Injector • Power Injector LED Indicators 2.
AP-5131 Access Poin t Product Referen ce Guide 2-10 Ensure the cable length from the Ethernet source (h ost) to the power injector and AP-5131 does not exceed 100 meters (333 ft.
Hardware Installation 2-11 2.7 Mounting the AP-5131 The AP-5131 can rest on a flat surface, attach to a wall, mount under a suspended T -Bar or above a ceiling (plenum or attic). Choose one of the follo wing mounting options based on the physical environment of the cove rage area.
AP-5131 Access Poin t Product Referen ce Guide 2-12 4. Cable the AP-5131 using either the Symbol powe r injector solution or an a pproved line cord and power supply . For Symbol power injector installations: a. Connect a RJ-45 Ethernet ca ble between th e network data supply (host) and the power injector Data In connector .
Hardware Installation 2-13 5. V erify the behavior of the AP-5131 LEDs. For more informa tion, see LED Indicators on page 2-20 . 6. Return the AP-5131 to an upright position and pl ac e it in the location you wish it to operate. Ensure the AP-5131 is sitting evenly on all four rubber feet.
AP-5131 Access Poin t Product Referen ce Guide 2-14 8. Cable the AP-5131 using either the Symbol powe r injector solution or an a pproved line cord and power supply . For Symbol power injector installations: a. Connect a RJ-45 Ethernet ca ble between th e network data supply (host) and the Power Injector Data In c onnector .
Hardware Installation 2-15 e. Plug the power adapter into an outlet. 9. V erify the behavior of the AP-5131 LEDs. For more informa tion, see LED Indicators on page 2-20 . The AP-5131 is ready to co nfigure. For information on an AP-5131 de fault configuration, see Getting Started on page 3-1 .
AP-5131 Access Poin t Product Referen ce Guide 2-16 4. Cable the AP-5131 using either the Symbol powe r injector solution or an a pproved line cord and power supply . For Symbol power injector installations: a. Connect a RJ-45 Ethernet ca ble between th e network data supply (host) and the Power Injector Data In c onnector .
Hardware Installation 2-17 10. Rotate the AP-5131 cha ssis 45 degrees coun ter -clockwise. The clips click as they fasten to the T -bar . 11. The AP-5131 is ready to co nfigure. For information on an AP-5131 de fault configuration, see Getting Started on page 3-1 .
AP-5131 Access Poin t Product Referen ce Guide 2-18 The mounting hardware required to install the AP-5131 ab ove a ceiling consists of: • Light pipe • Badge for light pi pe • Decal for badge • Safety wire (strongly recommended) • Security cable (optional) T o install the AP-5131 above a ceiling: 1.
Hardware Installation 2-19 9. Snap the clips of the light pipe into the bottom of the AP-5131. 10. Fit the light pipe into hole in the tile from its unfinished side. 11. Place the decal on the back of the badge and slid e the badge onto the light pipe from the finished side of the tile.
AP-5131 Access Poin t Product Referen ce Guide 2-20 For Symbol power injector installations: a. Connect a RJ-45 Ethernet ca ble between th e network data supply (host) and the Power Injector Data In c onnector . b. Connect a RJ-45 E thernet cable betwe en the power in jector Data & Power Out connector and the AP-5131 LAN port.
Hardware Installation 2-21 The five LEDs on the top housing of the AP-5131 are clearly visible in table-top, wall and below ceiling installations. The five AP-5131 top hou sing LEDs have the following.
AP-5131 Access Poin t Product Referen ce Guide 2-22 2.9 Setting Up MUs For a discussion of how to initially test the AP-5131 to ensure it can interoperate with the MUs intended for its operationa l environment, see Basic Device Configuration on page 3-5 and specifically T esting Connectivity on page 3-13 .
Getting Started The AP-5131 should be installed in an area tested fo r radio coverage usin g one of the site survey too ls available to the Symbol field servic e technician.
AP-5131 Access Poin t Product Referen ce Guide 3-2 • For instructions on installing the AP-5131 on a table top, see Desk Mounte d Installations on page 2-11 . • For instructions on AP-5131 wall mounting, see Wall Mounted Installations on page 2-13 .
Getting Start ed 3-3 3.3 Default Configuration Changes The following table illu strates the changes made to the AP -5131 version 1.1 con figuration as compared to the 1.
AP-5131 Access Poin t Product Referen ce Guide 3-4 3.4.2 Connecting to the Access Point using the LAN Port T o initially connect to the AP-5131 using the access po int’ s LAN port: 1. The LAN port de fault is set to DHCP . Connect the AP-5131 ’ s LAN port to a DHCP server .
Getting Start ed 3-5 3.5 Basic Device Configuration For the basic setup described in this section, the Java-based Web UI will be used to configure the AP-5131. Use the AP-5131’ s LAN interface for establis hing a link with the AP-5131. Con figure the AP- 5131 as a DHCP clie nt.
AP-5131 Access Poin t Product Referen ce Guide 3-6 Enter the current password and a new admi n password in fields provided, and click Apply . Once the admin pass word has been updated, a wa rning message d isplays stating the AP- 5131 must be set to a country .
Getting Start ed 3-7 2. Enter a Sy stem Name for the AP-5131. The System Name is useful if multiple Symbol de vices are being administered. 3. Select the Country for the AP-5131’ s country of operation from the drop-d own menu The AP-5131 prompts the user for the correct cou ntry code on the first login.
AP-5131 Access Poin t Product Referen ce Guide 3-8 4. Optionally enter the IP address of the server used to provide system time to the AP-5131 within the T i me Server field. Once the IP address is entered, the AP-5131’ s Network T ime Proto col (NT P) functionality is engaged automatically .
Getting Start ed 3-9 e. Define a Default Gateway address for the AP -5131’ s W AN connection. The ISP or a network administrator provides this address. f. Specify the address of a Primary DNS Server . The ISP or a network administrator provides this address.
AP-5131 Access Poin t Product Referen ce Guide 3-10 c. If using the static or DHCP Server option, ente r the network-assigned IP Address of the AP-5131. d. The Subnet Mask defines the size of the subnet. The first two sets of numbers specify the network domain, the next set specifies the subset of hosts within a larger network.
Getting Start ed 3-11 a. Enter the Extended Services Set Identification (ESSID) and name asso ciated with the WLAN. For additional informatio n on creating and editing up to 16 WLANs pe r AP-5131, see Creating/Editing Indiv idual WLANs on page 5-24 . b.
AP-5131 Access Poin t Product Referen ce Guide 3-12 Multiple WLANs can share the same security policy , so be careful not to name security policies after specific WLANs or risk defining a WLAN to single policy . Symbol recommends naming the policy after the attributes of the au thentication or encryption type selected.
Getting Start ed 3-13 5. Click the Apply button to save the security policy and return to the AP -5131 Quick Setup screen. At this point, you can test the AP-5131 for MU interoperability . 3.5.2 T esting Connectivity V erify the AP-5131’ s link with an MU by se nding Wireless Network Management Protocol (WNMP) ping packets to the associated MU.
AP-5131 Access Poin t Product Referen ce Guide 3-14 4. Click the Ping button to begin transmitting pack ets to the specified MU address. Refer to the Number of Responses va lue to asse ss the number of responses from the MU versus the number of ping packets trans mitted by the AP-5131.
Sy stem Configuration The Symbol AP-5131 contains a built-in browser in terface for system configu ration and remote management using a stan dard Web browser such as Microsoft Internet Explore r , Netscape Navigator or Mozilla Firefox. The browser interface also allows for system monito ring of the AP-5131.
AP-5131 Access Poin t Product Referen ce Guide 4-2 . System configuration topics includ e: • Configuring System Settings • Configuring Data Access • Managing Certificate Authority (CA) Certifica.
System Configurat ion 4-3 2. Configure the AP-5131 Sy stem Settings field to assign a system n ame and location, set the country of operation and view devic e version information.
AP-5131 Access Poin t Product Referen ce Guide 4-4 3. Refer to the Factory Defaults field to restore either a full o r partial defa ult configuration. Country The AP-5131 prompts the user for the correct country code after the first login.
System Configurat ion 4-5 4. Use the Restart AP-5131 field to restart the AP (if necessa ry). 5. Click Apply to save any changes to the System Settings screen. Navigating away from the screen without clicking the Apply bu tton results in all changes to the screen being lost.
AP-5131 Access Poin t Product Referen ce Guide 4-6 7. Click Logout to securely exit the AP -5131 Symbol Access Point applet. A prompt display s confirming the logout before the applet is closed.
System Configurat ion 4-7 3. Refer to the Applet T imeout field to set an HTTPS timeout interval. 4. Configure the Secure Shell field to set timeout values to reduce network inactivity . 5. Use the Admin Authentication buttons to specify the authentication server conn ection method.
AP-5131 Access Poin t Product Referen ce Guide 4-8 6. Use the Radius Server if a Radius server has been selected as the authentication server , enter the required network addre ss information. 7. Update the Administrator Access field to change the administ rative password used to access the AP-5131 configuration se ttings.
System Configurat ion 4-9 4.3 Managing Certificate Aut hority (CA) Certificates Certificate management includes the follo wing sections: • Importing a CA Certificate • Creating Self Certificates for Accessing the VPN 4.
AP-5131 Access Poin t Product Referen ce Guide 4-10 2. Copy the content of the CA Certificate message (using a text editor such as notepad) and then click on Paste from Clipboard . The content of the certi ficate displays in the Import a root CA Certificate field.
System Configurat ion 4-11 T o create a self certificate: 1. Select Sy stem Configuration -> Certificate Mgmt -> Self Certificates from the AP-5131 menu tree. 2. Click on the Add button to create the certificate request. The Certificate Request screen di splays.
AP-5131 Access Poin t Product Referen ce Guide 4-12 4. When the form is completed, click the Generate button. The Certificate Reques t screen disappears and the ID of the generated certificate request displays in the drop-down list of certifi cates within the Self Certificates screen.
System Configurat ion 4-13 6. Click the Copy to Clipboard button. The content of certificate request is copied to the clipboard. Create an email to your CA, paste the content of the request into the body of the message and send it to the CA. The CA signs the certificate a nd will send it back.
AP-5131 Access Poin t Product Referen ce Guide 4-14 1. Select Sy stem Configuration -> Certificate Mgmt -> Self Certificates from the AP-5131 menu tree. 2. Click on the Add button to create the certificate request. The Certificate Request screen di splays.
System Configurat ion 4-15 4. Complete as many of the optional va lues within the Certificate Request scree n as possible. 5. When the form is completed, click the Generate button from within the Certificate Request screen.
AP-5131 Access Poin t Product Referen ce Guide 4-16 7. Click the Copy to clipboard button. Save the certificate content to a secure location. 8. Connect to the Window s 2000 or 20 03 server used to sign th e certificate. 9. Select the Request a certificate option.
System Configurat ion 4-17 A File Download screen displays prompting the use r to select the download location for the certificate. 14. Click the Save button and save the certifi cate to a secure location. 15. Load the certificates on the AP-5131 . 16.
AP-5131 Access Poin t Product Referen ce Guide 4-18 If using the Symbol-CC-WS20 00-MIB-2.0 and/or Sy mbol-AP-5131-MIB to config ure the AP-5131, use the table below to locate the MIB wh ere the featu re can be configured. NOTE The Symbol-AP-5131-MIB contains the majority of the info rmation contained within the Symb ol-CC-WS200 0-MIB-2.
System Configurat ion 4-19 SNMP allows a network administrator to manage network performance, fin d and solve network problems, and plan for network growth. The AP-5131 suppo rts SNMP management functions for gathering information from its network compon ents, communicating that information to specified users and configuring the AP-5131.
AP-5131 Access Poin t Product Referen ce Guide 4-20 community strings for read-only and read /write access. SNMP vers ion 3 (v3) further enhances protocol features, providing much improved security . SNMP v3 encrypts transmissions and provides authentication for users generating requ ests.
System Configurat ion 4-21 3. Configure the SNMP v3 User De finitions field (if SNMP v3 is used) to a dd and configure SNMP v3 us er definitio ns. SNMP v3 user definitions allow read-o nly or read/write access to ma nagement information as appropriate.
AP-5131 Access Poin t Product Referen ce Guide 4-22 4. Specify the users who can read and optionally modify the SNMP-ca pable client. 5. If configuring SNMP v3 user definitions, se t the SNMP v3 engine ID. 6. Click Apply to save any changes to the SNMP Access screen.
System Configurat ion 4-23 7. Click Undo Changes (if necessary) to undo any changes made. Undo Changes reverts the settings displayed on the SNMP Access screen to the last sav ed configuration. 8. Click Logout to securely exit the AP -5131 Symbol Access Point applet.
AP-5131 Access Poin t Product Referen ce Guide 4-24 2. Configure the SNMP Acces s Control screen to a dd the IP addresses of those users rece iving SNMP access. Access Control List Enter Start IP and End IP addresses (numerical addresses only , no DNS names supported) to specify a range of user that can access the AP-5131 SNMP interface.
System Configurat ion 4-25 4.4.2 Enabling SNMP T raps SNMP provides the ability to send traps to notify the administra tor that trap cond itions are met. T raps are network packets containin g data relating to network devices, or SNMP agents, that send th e traps.
AP-5131 Access Poin t Product Referen ce Guide 4-26 2. Configure the SNMP v1/v2c T rap Config uration field (if SNMP v1/v2c T raps are used) to modify the following: 3. Configure the SNMP v3 T rap Configuration field (if SNMP v3 T raps are used) to modify the following: Add Click Add to create a new SNMP v1/v2c T rap Configuration entry .
System Configurat ion 4-27 4. Click Apply to save any changes to the SNMP T rap Configur ation screen. Naviga ting away from the screen without clicking the Ap ply button results in all changes to the screen being lost. 5. Click Undo Changes (if necessary) to undo any change s made.
AP-5131 Access Poin t Product Referen ce Guide 4-28 4.4.3 Configuring S pecific SNMP T raps Use the SNMP T raps screen to enable specific traps on the AP-5131. Symb ol recommends definin g traps to capture unauthorized devices ope rating within the AP-5131 coverage area.
System Configurat ion 4-29 3. Configure the SNMP T raps field to generate traps when SNMP capable MUs are denied authentication privileges o r are subject of an ACL violation . When a trap is enabled, a tra p is sent every 5 seconds until the c ondition no lon ger exists.
AP-5131 Access Poin t Product Referen ce Guide 4-30 6. Click Apply to save any changes to the SNMP T raps screen. Navigating away from the screen without clicking the Appl y button results in all changes to the screen being lost. 7. Click Undo Changes (if necessary) to undo any change s made.
System Configurat ion 4-31 2. Configure the RF T rap Thresholds field to define device threshold valu es for SNMP traps. NOTE A verage Bit Speed,% of Non-Unicast, Average Signal, Average Retries,% Dropped and % Undecryptable are not AP-51 31 statistics.
AP-5131 Access Poin t Product Referen ce Guide 4-32 3. Configure the Minimum Packets field to define a minimum packet throughput value for trap generation. 4. Click Apply to save any changes to the SNMP RF T raps screen. Na vigating away from th e screen without clicking the Appl y button results in all changes to the screen being lost.
System Configurat ion 4-33 T o manage clock synchronization on the AP-51 31: 1. Select Sy stem Configuration - > Date/T ime from the AP -5131 menu tree. 2. From within the Current T ime field, click the Refresh button to update the time since the screen was displayed by the user .
AP-5131 Access Poin t Product Referen ce Guide 4-34 This option is disabled when the Enable NTP on AP-51 31 checkbox has been selected, an d therefore should be vie wed as a second means to define the AP-5131 system time .
System Configurat ion 4-35 4.6 Logging Configuration The AP-5131 provides the capability for p eriodically logging syste m events that pr ove useful in assessing the throughput and performance of the AP-5131 or troubleshooting problems on the AP-5131 managed Local Area Network (LAN).
AP-5131 Access Poin t Product Referen ce Guide 4-36 3. Click Apply to save any changes to the Logging C onfigura tion screen. Navigating away from the screen without clicking the Apply button resu lts in all changes to the screen being lo st. Vie w L og Click Vie w to save a log of events retained on the AP-5131 .
System Configurat ion 4-37 4. Click Undo Changes (if necessary) to undo any changes made. Undo Changes reverts the settings displayed on the Loggin g Configuration screen to the last save d configuration. 5. Click Logout to securely exit the AP-5131 Symbol Access Point applet.
AP-5131 Access Poin t Product Referen ce Guide 4-38 T o create an importable/ex portable AP-5131 co nfiguration file: 1. Select Sy stem Configuration - > Config Import/Export from the AP-5131 menu tree. 2. Configure the F TP and TF TP Import/Export field to import/export configuration settings.
System Configurat ion 4-39 3. Configure the HTTP Import/Export field to import/export AP-5131 configuration settings using HTTP . Username Specify a username to be used when logging in to the F TP server . A username is not required for TF TP server logins.
AP-5131 Access Poin t Product Referen ce Guide 4-40 4. Refer to the Status field to assess the comple tion of the import/export operation. Status After executing an operation (by clicking any of the b.
System Configurat ion 4-41 5. Click Apply to save the filename and Server IP information. The App ly button does not execute the import or export operation , only saves the settings enter ed. 6. Click Undo Changes (if necessary) to undo any changes made.
AP-5131 Access Poin t Product Referen ce Guide 4-42 For detailed update s cenarios involvin g both a Windows DHCP and a Linux BootP server configuration, see Configuring Automatic Updates usin g a DHCP or Linux BootP Serv er Configuration on page B-1 .
System Configurat ion 4-43 3. Configure the DHCP Options field to enable automatic firmwa re and/or config uration file updates. DHCP options are used for out-of-the-box rapid dep loyment for Symbol wireless products.
AP-5131 Access Poin t Product Referen ce Guide 4-44 The DHCP Server needs to be configured with th e above mentio ned vendor specific options and vendor class identifie r . The update is conducted ov er the LAN or W AN port depending on which is the active port at the time the firmware update request is made.
System Configurat ion 4-45 • Username - Specify a username for the F TP server login. • Password - Specify a password for F TP server login. Default is symbol. 9. Click the Perform Update button to initiate the update. Upon confirming the firmware update, the AP reboots and com pletes the update.
AP-5131 Access Poin t Product Referen ce Guide 4-46 11. Confirm the AP-5131 configuration is the same as it was b efore the firmware upda te. If they are not, restore the settings. Refer to Importing/Exporting Configu rations on pa ge 4-37 for instructions on expo rting the configu ration back to the AP-5131.
System Configurat ion 4-47 NOTE For a discussion on the implications of replacing an existing Symbol AP-4131 deployment with an AP -5131, see Replacing an AP-4131 with an AP-5131 on page B-1 9 .
AP-5131 Access Poin t Product Referen ce Guide 4-48.
Network Management Configuring network managemen t includes confi guring network aspects in nume rous areas. See the following sections for more information on AP-5131 ne twork management: • Configuring the LAN Interface • Configuring W AN Settings • Enabling Wireless LANs (WLANs) • Configuring Router Settings 5.
AP-5131 Access Poin t Product Referen ce Guide 5-2 Use the LAN Configuration screen to enable one (or both) of an AP-5131’ s LAN interfaces, assign them names, define which L AN is currently active on the AP-5 131 Ethernet port and assign a timeout value to disable the LAN connection if no data traffic is detec ted within a defined interval.
Network Manage ment 5-3 3. Click Apply to save any changes to the LAN Configuration sc reen. Navigating a way from the screen without clicking the Apply button results in all change s to the screen being lost if the prompts are ignored. 4. Click Undo Changes (if necessary) to undo any changes made.
AP-5131 Access Poin t Product Referen ce Guide 5-4 5. Click Logout to securely exit the AP -5131 Symbol Access Point applet. A prompt display s confirming the logout before the applet is closed.
Network Manage ment 5-5 AP-5131. The AP-5131 then maps the target WLAN for the assigne d VLAN and traffic passes normally , allowing for the completion of the DHCP request and further traffic. T o create new VLANs or edit the properties of an existing VLAN: 1.
AP-5131 Access Poin t Product Referen ce Guide 5-6 T o create a new VLAN, click the Create button, to edit the properties of an existing VLAN, click the Edit bu tton.
Network Manage ment 5-7 8. Enter a Management VLAN T ag for LAN1 and LAN2. The Management VLAN uses a default tag value of 1. The Management VLAN is used to distinguish VLAN traffic flows for the LAN. The trunk port marks the frames with specia l tags as they pass between the AP-5131 and its destination, the se tags help distin guish data traffic.
AP-5131 Access Poin t Product Referen ce Guide 5-8 arrives on the AP-5131, it queries the VMPS for the VLAN assignme nt based on the source MAC address of the arriving frame. If statically mapping VLANs, leave the Dynamic checkbox specific to the target WLAN and its intended VLAN unselected.
Network Manage ment 5-9 2. Configure the DHCP Configuration field to define the DHCP settings used for the LAN. NOTE Symbol recommends the WAN and LAN ports should no t both be configured as DHCP clients. This interface is a DHCP Client Select this button to enable DHCP to set AP-5131 network address information via this LAN1 or LAN2 connection.
AP-5131 Access Poin t Product Referen ce Guide 5-10 This interface is a BOOTP Client Select this button to enable BOOTP to set AP-5131 network address information via this LAN1 or LAN2 connection. When selected, only BOOTP responses are accepted by the AP-5131 .
Network Manage ment 5-11 3. Click Apply to save any changes to the LAN1 or LAN2 scre en. Navigating away from the screen without clicking the Apply b utton results in all changes to the scre en being lost if the prompts are ignored. 4. Click Undo Changes (if necessary) to undo any changes made.
AP-5131 Access Poin t Product Referen ce Guide 5-12 available IP addresses. This is useful, for example, in education and custom er environments where MU users change frequently . Use longer leases if there are fewer users. T o generate a list of client MAC address to IP address mappings for the AP-513 1: 1.
Network Manage ment 5-13 7. Click Cancel to undo any changes made. Undo Chang es reverts the settings displayed to the last saved configuration. 5.1.2.2 Setting the T ype Filter Configuration Each AP-5131 LAN (either LAN1 or LAN2) can keep a list of frame types that it forwards or discards.
AP-5131 Access Poin t Product Referen ce Guide 5-14 3. T o add an Etherne t type, click the Add button. The Add Ethernet T ype screen displa ys. Use this sc reen to add one type filter option at a time, for a list of up to 16 entries.
Network Manage ment 5-15 T o configure W AN settings for the AP-5 131: 1. Select Network Configuration -> WAN from the AP-5131 menu tree. 2. Refer to the WAN IP Configuration field to enable the WAN interface, and set network address information for the W AN connection.
AP-5131 Access Poin t Product Referen ce Guide 5-16 This interface is a DHCP Client This checkbox enables DHCP for the AP-5131 W AN connection. This is useful, if the larger corporate network or Internet Service Provider (ISP) uses DHCP .
Network Manage ment 5-17 3. Configure the PPP over Ethernet field to enable high spe ed dial-up connections to the AP-5131 W AN port. More IP Addresses Click the More IP Addresses button to specify additional static IP addresses for the AP-5131 .
AP-5131 Access Poin t Product Referen ce Guide 5-18 4. Click Apply to save any changes to the W AN screen. Navigating away fro m the screen without clicking the Apply butt on results in all changes to the screen bein g lost. 5. Click Undo Changes (if necessary) to undo any change s made.
Network Manage ment 5-19 5.2.1 Configuring Network Addr ess T ranslation (NA T) Settings Network Address T ranslatio n (NA T) conve rts an IP address in one netw ork to a different IP address or set of IP addresses in another network.
AP-5131 Access Poin t Product Referen ce Guide 5-20 2. Configure the Address Ma ppings field to generate a WAN IP address, define the NA T type and set outbound/inb ound NA T m appings.
Network Manage ment 5-21 5. Click Logout to securely exit the AP -5131 Symbol Access Point applet. A prompt displays confirming the logout before the applet is closed. 5.2.1.1 Configuring Port Forwarding Use the Port Forwarding screen to configure port forwarding parameters fo r inbound traffic from the associated W AN IP address.
AP-5131 Access Poin t Product Referen ce Guide 5-22 5. Click Ok to return to the NA T screen. Within the NA T screen, click Apply to save any changes made on the Port Forwarding scree n. 6. Click Canc el to un do any changes made on Port Forwardin g screen.
Network Manage ment 5-23 T o configure WLANs on the AP-5131: 1. Select Network Configuration -> Wireless from the AP-5131 menu tree. If a WLAN is defined, th at WLAN displays wi thin the Wireless Configuration screen. When the AP-5131 is first booted, WLAN1 exists as a default WLAN available immediately for connection.
AP-5131 Access Poin t Product Referen ce Guide 5-24 3. Click the Create button (if necessary) to launch the New WLAN screen. Use the New WLAN screen to defin e the properties of a new WLAN that would display an d be selectable within the Wireless Configuration screen.
Network Manage ment 5-25 Use the New WLAN and Edit WLAN screens as re quired to create/modify a WLAN. T o create a n ew WLAN or edit the properties of an existing WL AN: 1. Select Network Configuration -> Wireless from the AP-5131 menu tree. The Wireless Co nfiguration screen disp lays.
AP-5131 Access Poin t Product Referen ce Guide 5-26 3. Set the parameters in the Configuration field as required for the WLAN. ESSID Enter the Extended Services Set Identification (ESSID) associated with the WLAN. The WLAN name is auto-generated using the ESSID until changed by the user .
Network Manage ment 5-27 Name Define or revise the name for the WLAN. The name should be logical representation of WL AN coverage area (engineering, marketing etc.
AP-5131 Access Poin t Product Referen ce Guide 5-28 4. Configure the Security field as required to set the data protection requ irements for the WLAN. 5. Configure the Advanced field as required to set MU in teroperability permissions, secure beacon transmissions, broadca st ESSID acceptance and Quality of Servic e (QoS) policies.
Network Manage ment 5-29 6. Click Apply to save any cha nges to the WLAN screen . Navigating away from the screen without clicking Apply results in all changes to the screens being lost. 7. Click Cancel to securely exit the New WLAN or Edit WLAN screen and return to the Wireless Configuration scree n.
AP-5131 Access Poin t Product Referen ce Guide 5-30 security requirements of the WLAN. Once new policies are defined, they are available within the New WLAN or Edit WLAN scre ens and can be mapped to any WLAN. A s ingle security policy can be used by more than one WL AN if its logical to do so.
Network Manage ment 5-31 2. Click Logout to exit the Security Configuration screen. 5.3.1.2 Configuring a WLAN Access Control List (ACL) An Access Control Lists (ACL) affords a system administrato r t.
AP-5131 Access Poin t Product Referen ce Guide 5-32 The Mobile Unit Acce ss Control List Configura tion screen displays with existing ACL policies and their current WLAN (if mapped to a WLAN). 2. Click the Create button to configure a new ACL policy , or select a policy and click the Edit button to modify an existing ACL policy .
Network Manage ment 5-33 Either the New MU ACL Policy or Edit MU ACL Policy screens display . 3. Assign a name to the new or edited ACL polic y that repres ents an inclusion or exclusion policy specific to a pa rticular type of MU traffic you may w ant to use with a single or gr oup of WLANs.
AP-5131 Access Poin t Product Referen ce Guide 5-34 5. Click Apply to save any cha nges to the New MU ACL P olicy or Edit MU ACL Policy screen and return to the Mobile Unit Access Control List Configuration scree n. Navigating away from the screen without clicking Apply results in all changes to the screens being lost.
Network Manage ment 5-35 2. Click the Create button to configure a new QoS policy , or select a policy and click the Edit button to modify an existing QoS policy .
AP-5131 Access Poin t Product Referen ce Guide 5-36 3. Assign a name to the new or edited QoS policy that makes sense to the AP-513 1 traffic receiving priority . More than one WLAN can use the same QoS policy . 4. Select the Support V oice prioritization checkbox to allow legacy voice prioritization .
Network Manage ment 5-37 5. Use the two Multicast Address fields to specify one o r two MAC addresses to be used for multicast applications. Some VoIP devices make use of multicast addresses. Using this mechanism ensures tha t the multicast pack ets for these de vices are not delayed by the packet queue.
AP-5131 Access Poin t Product Referen ce Guide 5-38 8. Configure the CW min and CW max (co ntention windows), AIFSN ( Arbitrary Inter- Frame Space Number ) and TXOPs T ime (opportunity to transmit) fo r each Ac cess Category . Their values are explained as follows.
Network Manage ment 5-39 9. Click Apply to save any changes to the New QoS Policy or Edit QoS Policy scre en to return to the Quality of Service Configuration scr een. Navigating away from the sc reen without clicking Apply results in all changes to the screens b eing lost.
AP-5131 Access Poin t Product Referen ce Guide 5-40 5.3.1.4 Configuring WLAN Hotspot Support The AP-5131 enables hotspot operators to provide user au thentication and accounting without a special client ap plication. The AP-5 131 uses a tradi tional Internet b rowser as a secure authentication device.
Network Manage ment 5-41 3. Refer to the HTTP Redirection field to specify how the Login, Welcome, and Fail pages are maintained for this specific WLAN. The pages can be hosted locally or remotely . . 4. Use the External URL field to specify the loca tion of the login page, welcome page and fail page used for hotspot access .
AP-5131 Access Poin t Product Referen ce Guide 5-42 5. Click the White List Entries button (within the WhiteList Configuration field) to create a set of allowed destination IP addre sses. These allowed de stination IP addresses are c alled a White List.
Network Manage ment 5-43 8. Click OK to save any changes to the Hotspot Configuratio n screen. Navigating away from the screen without clicking Apply results in all changes to the screens being lost. 9. Click Cancel (if necessary) to undo an y changes made.
AP-5131 Access Poin t Product Referen ce Guide 5-44 When a client requests a URL from a Web server , the login handler retu rns an HTTP redire ction status code (for example, 301 Moved Permanently), which indicates to th e browser it should look for the page at another URL.
Network Manage ment 5-45 5.3.2 Setting the WLAN’ s Radio Configuration Each AP-5131 WLAN can hav e a separate 802.11a or 8 02.11b/g radio configured and mapped to that WLAN. The first step is to enable the radio. One of two possible radio configurat ion pages are available on the AP -5131 depending on which model SKU is purchased.
AP-5131 Access Poin t Product Referen ce Guide 5-46 2. Enable the radio(s) using the Enable checkbox(es). Refer to RF Band of Operation parameter to en sure you are enablin g the correct 8 02.11a or 802.11b/g radio. After the settings are applied within this Radio Configuration screen, the Radio Status and MUs connected values update.
Network Manage ment 5-47 The maximum number of client bridge con nections per AP-513 1 radio is 12, with 24 representing the maximum for dual-radio models.
AP-5131 Access Poin t Product Referen ce Guide 5-48 within the BBs Connec ted field. If this is an existing r adio within a mesh network, the se values update in real-time. 6. Click the Advanced button to define a prioritized list of access points to define Mesh Connection links.
Network Manage ment 5-49 On a single-radio AP-5131, Radio1 could ei ther be an 80 2.11a or 802.11b/g radio depending on which radio has been enabled. 2. Configure the Properties field to assign a name and plac ement designation for the radio. Placement Use the Placement drop-down menu to specify whether the radio is located outdoors or indoors.
AP-5131 Access Poin t Product Referen ce Guide 5-50 3. Configure the Radio Settings field to assign a c hannel, ante nna diversity settin g, radio transmit power level and data rate. ERP Protection Extended Rate PHY (ERP) allows 802.11g MUs to interoperate with 802.
Network Manage ment 5-51 4. Refer to the Beacon Settings field to set th e radio beacon an d DTIM interv als. Set Rates Click the Set Rates button to display a window for selecting minimum and maximum data transmit rates for the radio. At least one Basic Rate must be selected as a minimum transmit rate value.
AP-5131 Access Poin t Product Referen ce Guide 5-52 5. Configure the Performa nce field to set the preamble, thresholds values, data rates and QoS values for the radio. Beacon Interval The beacon interval controls the performance of power save stations.
Network Manage ment 5-53 6. Select the Advanced Settings tab to strategically map BSSIDs to WLANs in order to define them as primary WLANs. Set RF QoS Click the Set RF QoS button to display the Set RF QOS screen to set QoS parameters for the AP-5131 radio.
AP-5131 Access Poin t Product Referen ce Guide 5-54 Defining Primary WLANs allows an administrator to dedicate BSSIDs (4 BSSIDs are available for mapping) to WLANs. From that initial BSSID assignment, Primary WLANs can be defined from within the WLANs assigned to BSSID group s 1 through 4.
Network Manage ment 5-55 7. Use the Primary WLAN drop-down menu to select a WLAN from those WLANs sharing th e same BSSID. The selected WLAN is the primary WLAN for the specified BSSID. 8. Click Apply to save any changes to the Radio Settings an d Advanced Settin gs screens.
AP-5131 Access Poin t Product Referen ce Guide 5-56 2. Use the Bandwidth Share Mod e drop-down menu to define the order enable d WLANs receive AP-5131 services. Selec t one of the following three options: 3. Configure the Bandwidth Sha re for Each WLAN field to set a raw weight (for WLANs using the Weighted Round-Robin option) for each WLAN.
Network Manage ment 5-57 4. Click Apply to save any changes to the Bandwidth Management screen. Navigating away from the screen without clicking Apply results in all changes to the screens being lost. 5. Click Undo Changes (if necessary) to undo any changes made.
AP-5131 Access Poin t Product Referen ce Guide 5-58 2. Refer to the AP-5131 Router T able field to view existing routes. The AP-5131 Router T ab le field displays a list of connected route s between an enabled subnet and the ro uter . These routes can be changed by modifying the IP address and subnet masks of the enabled subnets.
Network Manage ment 5-59 5. Use the User Defined Routes field to add or delete static routes. The User Defined Routes field allows the ad ministrator to view , add or delete internal static (dedicated) routes. a. Click the Add button to create a new table entry .
AP-5131 Access Poin t Product Referen ce Guide 5-60 2. Select a routing direction from the RIP Direction drop-down menu. Both (for both directions), Rx only (receive only), and TX only (transmit only) are available options. 3. If RIP v2 or RIP v2 (v1 compa t) is the selected RIP type, the RIP v2 Authentication field becomes active.
Network Manage ment 5-61 4. If the Simple au thenticati on method is selected, s pecify a password of up to 15 alphanumeric characte rs in the Password (Simple Authentication) area. 5. If the MD5 au thentication me thod is selected, fill in the Ke y #1 field (Key #2 is optional).
AP-5131 Access Poin t Product Referen ce Guide 5-62.
Configuring Access Point Security Security measures for the AP-5131 and its WLANs are critical. Use the available AP-5131 security options to protect the AP-5131 LAN from wireless vu lnerabilities, and safeg uard the transmission of RF packets between the AP-5131 and its associated MUs.
AP-5131 Access Poin t Product Referen ce Guide 6-2 6.1 Configuring Security Options T o configure the data prote ction options ava ilable on the AP-51 31, refer to the following: • T o set an administrative passwo rd for secure AP-5131 logins, see Setting Passwords on page 6-3 .
Configurin g Access Point Securit y 6-3 6.2 Setting Passwords Before setting the AP-5131 security parameters, ve rify an administrative password for the AP-5131 has been created to restrict access to the device before ad vanced device security is configured.
AP-5131 Access Poin t Product Referen ce Guide 6-4 4. Log in using the “ ad min ” as the default User ID and “ sym bol ” as the default Password. If the default login is successful, the Change Admin Password window displays. Change the default login and password to significantly dec rease the likelihood of hacking.
Configurin g Access Point Securit y 6-5 4. Press <ESC> or <Enter> to access the AP-5131 CLI. A serial connection has now been establish ed and the user sho uld be able to view the serial connection window .
AP-5131 Access Poin t Product Referen ce Guide 6-6 Each WLAN (16 WLANs available in total to an AP-5131 regard less of the model) can have a separa te security policy . However , more than one WLAN can use the same secu rity policy . Therefore, to avoid confusion, do not name security po licies the same name as WLANs.
Configurin g Access Point Securit y 6-7 3. Use the Name field to define a logical security po licy name. Remember , multiple WLANs can share the same security policy , so be careful not to name security policies after specific WLANs or risk defining a WLAN to single polic y .
AP-5131 Access Poin t Product Referen ce Guide 6-8 6. Click Apply to keep changes made within the New Security Polic y screen (if any). Configure encryption or authentication supported security polici.
Configurin g Access Point Securit y 6-9 7. Click Ca ncel to return to the target WLAN screen without keeping any of the changes made within the New Securi ty Policy screen. 6.4 Configuring Kerberos Authentication Kerberos (designed and developed by MIT) prov ides strong authentication for clie nt/server applications using secret-key crypto graphy .
AP-5131 Access Poin t Product Referen ce Guide 6-10 3. Select the Kerberos radio button. The Kerberos Config uration field displays within the New Security Policy screen. 4. Ensure the Name of the secu rity policy entered suits the intended con figuration or function of the policy .
Configurin g Access Point Securit y 6-11 6. Click the Apply button to return to the WLAN screen to save any changes mad e within the Kerberos Configuration field of the New Security Policy screen. 7. Click the Cancel button to undo any changes made within the Kerberos Configuration field and return to the WLAN screen.
AP-5131 Access Poin t Product Referen ce Guide 6-12 3. Select the 802.1x EAP ra dio button. The 802.1x EAP Settings field displays within the New Security Po licy screen. 4. Ensure the Name of the secu rity policy entered suits the intended con figuration or function of the policy .
Configurin g Access Point Securit y 6-13 Radius Server Address If using an External Radius Server , specify the numerical (non-DNS) IP address of a primary Remote Dial-In User Service (Radius) server . Optionally , specify the IP address of a secondary server .
AP-5131 Access Poin t Product Referen ce Guide 6-14 7. Select the Accounting tab as required to define a timeout pe riod and retry interval Syslog for MUs interoperating with the AP-5131 and EAP authentication server .
Configurin g Access Point Securit y 6-15 9. Select the Advanced Settings tab as required to specify a MU quiet period, timeou t interval, transmit period, and re try period for MUs and the authentication server . The ite ms within this tab are identical re gardless of whet her Internal or Exte rnal is selected from the Radius Server drop-down menu.
AP-5131 Access Poin t Product Referen ce Guide 6-16 11. Click the Cancel button to undo any changes m ade within the 802.1x EAP Setting s field and return to the WLAN screen. This reverts all settings fo r the 802.1x EAP Settings field to the last saved configuratio n.
Configurin g Access Point Securit y 6-17 5. Configure the WEP 64 Settings or WEP 128 Settings field as required to defin e the Pass Key used to generate the WEP k eys. These keys must be the same betw een the AP-5131 and its MU to encrypt packets between the two devices.
AP-5131 Access Poin t Product Referen ce Guide 6-18 Default (hexadecimal) keys for WEP 128 include: 6. Click the Apply button to save any changes ma de within the WEP 64 Setting or WEP 128 Setting field of the New Security Policy screen.
Configurin g Access Point Securit y 6-19 3. Select the Ke yGuard radio button . The KeyGuard Settings field displays within the New Security Policy screen. 4. Ensure the Name of the security policy entered suits the intended configuration or function of the policy .
AP-5131 Access Poin t Product Referen ce Guide 6-20 Default (hexadecimal) keys for KeyGuard include: 6. Select the Allow WEP128 Clients checkbox (from within the KeyGuard Mixed Mod e field) to enable WEP128 clients to associate with an AP-5131’ s KeyGuard supported WLAN.
Configurin g Access Point Securit y 6-21 3. Select the WP A/TKIP radio button. The WP A/TKIP Setti ngs field displays within the New Security Policy scre en. 4. Ensure the Name of the secu rity policy entered suits the intended con figuration or function of the policy .
AP-5131 Access Poin t Product Referen ce Guide 6-22 Default (hexadecimal) 256-bit keys for WP A/TKIP include: 1011121314151617 18191A1B1C1D1E1F 2021222324252627 28292A2B2C2D2E2F 7. Click the Apply button to save any changes made within the WPA/TKIP Settings field of the New Security Policy screen.
Configurin g Access Point Securit y 6-23 If security policies supporting WP A2 -CCMP exist, they appear within the Security Configuration screen. These exis ting policies can be used as is, or the ir properties edited by clicking the Edit button. T o configure a new security policy supporting WP A2-CCMP , continue to step 2.
AP-5131 Access Poin t Product Referen ce Guide 6-24 6. Configure the Key Settings area as needed to set an ASCII Passphra se and 128-bit key . Default (hexadecimal) 256-bit keys for WP2A/CCMP include: 1011121314151617 18191A1B1C1D1E1F 2021222324252627 28292A2B2C2D2E2F 7.
Configurin g Access Point Securit y 6-25 8. Configure the Fast Roaming (802.1x only) field as requ ired to en able ad ditional AP-5131 roaming and key c aching options. This featur e is applicable only when using 802.1 x EAP authentication with WP A2/CCMP .
AP-5131 Access Poin t Product Referen ce Guide 6-26 2. Refer to the Global Firewall Disable field to enable or disable th e AP-5131 firewall. 3. Refer to the T imeout Configuration field to define a timeout interval to terminate IP address translations.
Configurin g Access Point Securit y 6-27 5. Click Apply to save any changes to the Firewall screen. Na vigating away fro m the screen without clicking the Apply button results in a ll changes to the screens being lost. 6. Click Undo Changes (if necessary) to undo any change s made.
AP-5131 Access Poin t Product Referen ce Guide 6-28 6.10.1 Configuring LA N to W AN Access The AP-5131 LAN can be configured to communicate with the WAN side of the AP-5131.
Configurin g Access Point Securit y 6-29 3. Configure the Rules field as required to allow or deny access to selected (enabled) protocols. Allow or Deny all protocols, except Use the drop-down menu to select either Allow or Deny .
AP-5131 Access Poin t Product Referen ce Guide 6-30 Pre configured Rules The following protocols are preconfigured with the AP-5131 . T o enable a protocol, check the box next to the protocol name. • HTTP - Hypertext T ransfer Protocol is the protocol for transferring files on the Web.
Configurin g Access Point Securit y 6-31 4. Click Apply to save any changes to the Subnet Access s creen. Navigating away from the screen without clicking the Apply bu tton results in all changes to the screens being lost. 5. Click Undo Changes (if necessary) to undo any change s made.
AP-5131 Access Poin t Product Referen ce Guide 6-32 between two end points. ESP can also be used in tunnel mod e, providing security like that of a Vi rtual Private Network (VPN). • GRE - General Routing Encapsulation supports VPNs acro ss the Internet.
Configurin g Access Point Securit y 6-33 2. Configure the Settings field as needed to override the settings in the Subnet Acces s screen and import firewall rules into the Advanced Su bnet Access screen. 3. Configure the Firewall Rules field as required a dd, insert or delete firewall rules into the list of advanced rules.
AP-5131 Access Poin t Product Referen ce Guide 6-34 4. Click Apply to save any changes to the Advanced Subnet Acce ss screen. Navigating awa y from the screen without clicking Apply results in all changes to the screens being lost. 5. Click Undo Changes (if necessary) to undo any changes made.
Configurin g Access Point Securit y 6-35 Use the VPN screen to add and remove VPN tunnels. T o configure an existing VPN tun nel, select it from the list in the VPN T unnels field. The selected tunnel’ s configuration displays in a VPN T unnel Config field.
AP-5131 Access Poin t Product Referen ce Guide 6-36 If AP-5131 #1 has the following values : • W AN IP address: 20.1.1.2 • LAN IP address: 10.1.1.1 • Subnet Mask: 255.0.0.0 Then, the VPN values for AP-5131 #2 should be: • Remote subnet: 10.1.1.
Configurin g Access Point Securit y 6-37 Subnet name Use the drop-down menu to specify the LAN1 or LAN2 connection used for routing VPN traffic. Remember , only one LAN connection can be active on the AP-5131 Ethernet port at a time.
AP-5131 Access Poin t Product Referen ce Guide 6-38 4. Click Apply to save a ny changes to the VPN screen as well as changes made to the Auto Key Settings, IKE Settings and Man ual Key Settings screens. Naviga ting away from the screen without clicking the Appl y button results in all changes to the screen s being lost.
Configurin g Access Point Securit y 6-39 3. Configure the Manual Key Settings screen to modify the following: NOTE When entering Inbound o r Outbound encryption or authen tication keys, an error message could display stating the keys provide d are “weak”.
AP-5131 Access Poin t Product Referen ce Guide 6-40 Inbound AH Authentication Key Configure a key for computing the integrity check on inbound traffic with the selected authentication algorithm. The key must be 32/40 (for MD5/SHA1) hexadecimal (0-9, A-F) characters in length.
Configurin g Access Point Securit y 6-41 The Inbound and Ou tbound SPI settings are required to be in terpolated to function c orrectly . For example: AP1 Inbound SPI = 800 AP1 Outbound SPI = 801 Inbound ESP Encryption Key Enter a key for inbound traffic.
AP-5131 Access Poin t Product Referen ce Guide 6-42 AP2 Inbound SPI = 801 AP2 Outbound SPI = 800 4. Click Ok to return to the VPN screen. Click A pply to retain the s ettings made on the Manual Key Settings screen. 5. Click Cancel to return to the VPN screen without retaining the changes made to the Manual Key Settings screen.
Configurin g Access Point Securit y 6-43 3. Configure the Auto Key Settings screen to modify the following: Use Perfect Forward Secrecy Forward secrecy is a key-establishment protocol guaranteeing the discovery of a session key or long-term private k ey does not compromise the keys of other sessions.
AP-5131 Access Poin t Product Referen ce Guide 6-44 4. Click Ok to return to the VPN screen. Click Apply to retain the settings made on the Auto Key Settings screen. 5. Click Canc el to return to the VPN screen without re tain ing the changes made to this screen.
Configurin g Access Point Securit y 6-45 3. Configure the IKE Key Settings screen to modify the following: Operation Mode The Phase I protocols of IKE are based on the ISAKMP identity- protection and aggressive exchanges. IKE main mode refers to the identity-protection exchange, and IKE aggressive mode refers to the aggressive exchange.
AP-5131 Access Poin t Product Referen ce Guide 6-46 Local ID T ype Select the ty pe of ID to be used for the AP-5131 end of the SA. • IP - Select IP if the local ID type is the IP address specified as part of the tunnel. • FQDN - Use FQDN if the local ID is a fully qualified domain name (such as sj.
Configurin g Access Point Securit y 6-47 IKE Authentication Algorithm IKE provides data authentication and anti-replay services for the VPN tunnel. Select an authenticati on methods from the drop-down menu. • MD5 - Enables the Message Digest 5 algorithm.
AP-5131 Access Poin t Product Referen ce Guide 6-48 4. Click Ok to return to the VPN screen. Click Apply to retain the settings made on the IKE Settings screen. 5. Click Cancel to return to the VPN screen without retaining the changes made to the IKE Settings screen.
Configurin g Access Point Securit y 6-49 2. Reference the Security Associations field to view the following: T unnel Name The T unnel Name column lists the names of all the tunnels configured on the AP-5131 . For information on configuring a tunnel, see Configuring VPN T unnels on page 6-34 .
AP-5131 Access Poin t Product Referen ce Guide 6-50 3. Click the Reset VPNs button to reset active VPNs. Selecting Reset VPNs forces renegotiation of all the Security Associations and keys. Users could notice a slight p ause in network performance. 4.
Configurin g Access Point Securit y 6-51 T o configure content filte ring for the AP -5131: 1. Select Network Configuration -> WAN -> Content Filtering from the AP-5131 menu tree. 2. Configure the HTTP field to config ure block Web proxies and URL extensions.
AP-5131 Access Poin t Product Referen ce Guide 6-52 3. Configure the SMTP field to disable or restrict sp ecific kinds of network mail traffic. 4. Configure the FT P field to block or restrict vari ous F TP traffic on the network.
Configurin g Access Point Securit y 6-53 5. Click Apply to save any changes to the Co ntent Filtering screen. Nav igating away from the screen without clicking the Apply bu tton results in all changes to the screens being lost. 6. Click Undo Changes (if necessary) to undo any change s made.
AP-5131 Access Poin t Product Referen ce Guide 6-54 The rogue detection interval is used in conjuncti on with Symb ol MUs that identify themselv es as rogue detection c apable to th e AP-5131. The detection interval defines how often the AP-5131 requests these MUs to scan for a rogue AP .
Configurin g Access Point Securit y 6-55 3. Use the Allowed AP List field to restrict Symbol AP’ s from Rogue AP detection and create a list of device MAC addresses and ESSID’ s approved for interoperability with the AP -5131. RF Scan by MU Select the RF Scan by MU checkbox to enable MUs to scan for potential rogue APs within the network.
AP-5131 Access Poin t Product Referen ce Guide 6-56 4. Click Apply to save any changes to the Rogue AP Detection scree n. Navigating away fro m the screen without clicking Apply results in all changes to the screens being lost. 5. Click Undo Changes (if necessary) to undo any change s made.
Configurin g Access Point Securit y 6-57 The Active APs screen displays with detecte d rogue devices displayed within the Rogue APs table. 2. Enter a value (in minutes) in the Allowed AP s Age Out T ime field to indicate the number of elapsed minutes before an AP will be remove d from the approv ed list and reevaluated.
AP-5131 Access Poin t Product Referen ce Guide 6-58 6. Highlight a rogue AP and click the Details butto n to display a screen with device and detection information specific to that rog ue device. This informatio n is helpful in determining if a rogue AP should be moved to the Allo wed APs table.
Configurin g Access Point Securit y 6-59 3. Refer to the Rogue AP Detail field for the following in formation: 4. Refer to the Rogue Detector Det ail field for the follow ing informatio n: BSSID/MAC Displays the MAC address of the rogue AP .
AP-5131 Access Poin t Product Referen ce Guide 6-60 5. Click OK to securely exit the Detail screen and return to the Active APs screen. 6. Click Canc el (if necessary) to undo any chan ges made and return to the Active APs sc reen.
Configurin g Access Point Securit y 6-61 2. Highlig ht an MU from within the Rogue AP enabled MUs field and click the s can button. The target MU begins scannin g for rogue devices using the detection parameters defined within the Rogue AP Detection screen.
AP-5131 Access Poin t Product Referen ce Guide 6-62 6. Click Logout to return to the Rogue AP Detectio n screen. 6.14 Configuring User Authentication The AP-5131 can work with external RADIUS and LDAP Servers (AAA Servers) to provide user database informatio n and user authentication.
Configurin g Access Point Securit y 6-63 3. Use the TTLS/PEAP Configuration field to specify the Radius Server defau lt EAP type, EAP authentication type and a Server or CA certificate (if used). LDAP If LDAP is selected, the switch w ill use the data in an LDAP server .
AP-5131 Access Poin t Product Referen ce Guide 6-64 Default Authentication Ty p e Specify a PEAP and/or TTLS Authentication T ype for EAP to use from the drop-down menu to the right of each checkbox item.
Configurin g Access Point Securit y 6-65 4. Use the Radius Client Authenticat ion table to config ure multiple shared secrets based on the subnet or host attempting to authentic ate with the Radius server . Use the Add button to add entries to th e list.
AP-5131 Access Poin t Product Referen ce Guide 6-66 2. Enter the appropriate information within the LDAP Configuration field to allow the AP-513 1 to interoperate with the LDAP server . Consult with your LDAP server administrator for details on how to define the values in this screen.
Configurin g Access Point Securit y 6-67 3. Click Apply to save any changes to the L DAP screen. Navigating a way from the scre en without clicking Apply results in all changes to the screen b eing lost. 4. Click Undo Changes (if necessary) to undo any change s made.
AP-5131 Access Poin t Product Referen ce Guide 6-68 2. Refer to the Proxy Configuratio n field to define the proxy server’ s retry count and time out values.
Configurin g Access Point Securit y 6-69 4. T o remove a ro w , select the row a nd click the De l (Delete) button. 5. Click Apply to save any changes to the Proxy screen. Navigating away from th e screen without clicking Apply results in all changes to the screen b eing lost.
AP-5131 Access Poin t Product Referen ce Guide 6-70 Refer to the Groups field for a list of all groups in the local Rad ius database. The groups are listed in the order added . Although groups c an be added an d deleted, there is no ca pability to edit a group na me.
Configurin g Access Point Securit y 6-71 7. Click the List of Groups cell. A new screen displays enabling you to associa te groups with the user . For more information on mapping gro ups with a user , see Mapping Users to Groups on page 6-71 . 8. Click Apply to save a ny changes to the Users screen.
AP-5131 Access Poin t Product Referen ce Guide 6-72 3. T o add the user to a group, select the group in the Available list (on the right) and click the <-Add button. Assigned users will display within the Assigned table. Map one or more groups as needed for group authentication acce ss for this particular user .
Configurin g Access Point Securit y 6-73 WLAN or editing the properties of an existing WLAN, see Creating/Editing Individual WLANs on page 5-24 1. Select User Authentication -> Radius Server -> Access Policy from the AP-513 1 menu tree. 2. Click the WLANs button to the right o f a specific g roup name.
AP-5131 Access Poin t Product Referen ce Guide 6-74 7. Click Logout to securely exit the AP-5 131 Symbol Access Point applet. A prompt display s confirming the logout before the applet is closed.
Monitoring Statistics The AP-5131 has functionality to display robust transmit and receive statistics for its W AN and LAN port. Wireless Local Area Network (WLAN) stats can also be displayed collectively for each enabled WLAN as well as individually for up to 16 specific WLANs.
AP-5131 Access Poin t Product Referen ce Guide 7-2 See the following section s for more details on viewing statistics for the AP-5131: • Viewing W AN Statistics • Viewing LAN Statistics • Viewin.
Monitor ing Statisti cs 7-3 2. Refer to the Information field to reference the following AP-5131 W AN data: Status The Status field displays Enabled if the W AN interfac e is enabled on the WAN screen. If the W AN interface is disabled on the W AN screen, the W AN Stats sc reen displays no connection information and statistics.
AP-5131 Access Poin t Product Referen ce Guide 7-4 3. Refer to the Received field to reference data received over the AP-5131 W AN port. 4. Refer to the T ransmitted field to reference data received over the AP-5131 WAN port.
Monitor ing Statisti cs 7-5 5. Click the Clear WAN Stats button to reset each of the data collection counters to zero in order to begin new data collections. The RX/TX Pack ets and RX/TX Bytes totals remain at their present values and are not cleared.
AP-5131 Access Poin t Product Referen ce Guide 7-6 7.2 V iewing LAN Statistics Use the LAN Stats screen to monitor the activity of the AP-5131 LAN1 or LAN2 connection. The Information field of the LAN Stats screen displays network traffic information as monito red over the AP-5131 LAN1 or LAN2 port.
Monitor ing Statisti cs 7-7 3. Refer to the Received field to view data received over the AP-5131 LAN port. 4. Refer to the T ransmitted field to view statistics transmitted over the AP-5131 LAN port. Network Mask The first two sets of numbers specify the network domain, the next set specifies the subset of hosts within a larger network.
AP-5131 Access Poin t Product Referen ce Guide 7-8 5. Click the Clear LAN Stats button to reset each of the data collection counters to zero in order to begin new data collections. The RX/TX Pack ets and RX/TX Bytes totals remain at their present values and are not cleared.
Monitor ing Statisti cs 7-9 7.2.1 V iewing a LAN’ s STP Statistics Each AP-5131 LAN has the ability to tra ck its own unique STP sta tistics. Refer to the LAN STP Stats page when assessing mesh networking function ality for each of the two AP-5131 LANs.
AP-5131 Access Poin t Product Referen ce Guide 7-10 3. Refer to the Port Interface T able to assess the state of the traffic over the ports listed within the table for the root and bridge and designated bridges. Designated Root Displays the AP-5131 MAC address of the bridge defined as the root bridge in the Bridge STP Configuration screen.
Monitor ing Statisti cs 7-11 4. Click the Logout button to securely exit the AP-5131 Symb ol Access Point applet. There will be a prompt confirming logout before the applet is closed. 7.3 V iewing Wireless Statistics Use the WLAN Statistics Summary screen to view overview statistics for active (en abled) WLANs on the AP-5131.
AP-5131 Access Poin t Product Referen ce Guide 7-12 2. Refer to the WLAN Summary field to reference high-level data for each enabled WLAN. Name Displays the names of all the enabled WLANs on the AP-5131 . For information on enabling a WLAN, see Enabling Wireless LANs (WLANs) on page 5-22 .
Monitor ing Statisti cs 7-13 3. Refer to the T otal AP RF T raffic field to view throug hput information for the AP-5131 and WLAN. 4. Click the Clear RF Stats button to reset eac h of the data collec tion counters to zero in ord er to begin new data collections.
AP-5131 Access Poin t Product Referen ce Guide 7-14 information. The T raffic field displays statistics on RF traffic and through put. The RF Status field displays information on RF signal averages from the as sociated MUs. The Error field display s RF traffic errors based on re tries, dropped pack ets, and undecry ptable packets.
Monitor ing Statisti cs 7-15 3. Refer to the T raffic field to view performance and through put information for the WLAN selected from the AP-5131 menu tree.
AP-5131 Access Poin t Product Referen ce Guide 7-16 4. Refer to the RF Status field to view the following MU sign al, noise and perfo rmance information for the WLAN selected from the AP-5131 men u tree. 5. Refer to the Errors field to view MU association error s t atistics for the WLAN selected from the AP-5131 menu tree.
Monitor ing Statisti cs 7-17 6. Click the Clear WLAN Stats button to rese t each of the data collection c ounters to zero in order to begin new data collectio ns. Do not clear the WLAN stats if currently in an important data gathering activity or risk losing all data calculations to that point.
AP-5131 Access Poin t Product Referen ce Guide 7-18 3. Click the Clear All Radio Stats button to reset each of the da ta collection counters to zero in order to begin new data collection s. Do not clear the radio stats if currently in an important data gathering acti vity or risk losing all data calculations to that point.
Monitor ing Statisti cs 7-19 dropped or could not decrypt. The info rmation within the 802.11 a Radio Statistics screen is view-only with no configurable data fields. T o view detailed radio statistics: 1. Select Status and Statistics -> Radio Stats -> Radio1(802.
AP-5131 Access Poin t Product Referen ce Guide 7-20 3. Refer to the T raffic field to view performan ce and through put information for the target AP-5131 802.11a or 802.1 1b/g radio. Placement Lists whether the AP-5131 radio is indoors or outdoors. T o change the placement setting, see Configuring the 802.
Monitor ing Statisti cs 7-21 4. Refer to the RF Status field to view the following MU sign al, noise and perfo rmance information for the targe t AP-5131 802.11a or 802.11b/g radio. 5. Refer to the Errors field to reference retry information as well as data transmissions the target AP-5131 802.
AP-5131 Access Poin t Product Referen ce Guide 7-22 7.4.1.1 Retry Histogram Refer to the Retry Histrogra m screen for an overview of the retries transmitted by an AP -5131 radio and whether those retries contained any data packe ts.
Monitor ing Statisti cs 7-23 2. Click Apply to save any changes to the Ra dio Histogram screen. Navigatin g away from the screen without clicking Apply results in chan ges to the screens being lost. 3. Click Un do Changes (if necessary) to undo any changes made to the s creen.
AP-5131 Access Poin t Product Referen ce Guide 7-24 2. Refer to the MU List field to reference associated MU address, throughput and retry information. 3. Click the Refresh button to update the data collections displayed without resetting the data collections to zero.
Monitor ing Statisti cs 7-25 8. Click the Logout button to securely exit the AP-5131 Sym bol Access Point applet. A prom pt displays confirming the logout before the applet is closed.
AP-5131 Access Poin t Product Referen ce Guide 7-26 5. Refer to the T raffic field to view individual MU RF throughput information. QoS Client T ype Displays the data type transmitted by the mobile unit. Possible types include Legacy , Voi c e , WMM Baseline and Power S ave .
Monitor ing Statisti cs 7-27 6. Refer to the RF Status field to view MU signal and signal disturbance information. 7. Refer to the Errors field to view MU retry information and statistics on packets not transmitted. 8. Click OK to exit the screen. 7.5.
AP-5131 Access Poin t Product Referen ce Guide 7-28 T o ping a specific MU to assess its connectio n with an AP-5131: 1. Select Status and Statistics - > MU Stats from the AP-5131 menu tree. 2. Select the Echo T est button from within the MU Stats Summary screen 3.
Monitor ing Statisti cs 7-29 7.6 V iewing the Mesh Statistics Summary The AP-5131 has the capability of dete cting and disp laying the pro perties of other access points in mesh network (either bas e bridges or client bridges) mode . This info rm ation is used to c reate a list of known wireless bridges.
AP-5131 Access Poin t Product Referen ce Guide 7-30 2. Click the Refresh button to update the display of the Mesh Statistics Summary screen to the latest values. 3. Click the Details button to displa y address and radio information for those AP-5131s in a client bridge config uration with this detecting AP-5131.
Monitor ing Statisti cs 7-31 The Known AP Statistics screen displays the following info rmation: 2. Click the Clear Known AP Stats button to reset each of the data collection counters to zero in order to begin new data collection s. 3. Click the Details button to display AP-5131 addres s and radio information.
AP-5131 Access Poin t Product Referen ce Guide 7-32 The Known AP Details screen displays the ta r get AP’ s MAC address, IP address, radio channel, number o f associated MUs, packet th roughput per second, radio type(s), mode l, firmware version, ESS and client bridges currently connected to the AP radio.
Monitor ing Statisti cs 7-33 5. Click the Send Cfg to APs button to send the your AP-5131’ s configuration to other AP- 5131’ s. Recipient AP-5131 must be the same single or dual-radio model as the AP-5131 sending the configuration. The sending and re cipient AP-5131’ s must also be running the same major firmware version (i.
AP-5131 Access Poin t Product Referen ce Guide 7-34.
Command Line Interface Reference The AP-5131 Command Line Interface (CLI) is access ed through the serial port or a T elnet sessio n. The AP-5131 CLI follows the same conventions as the Web-based user interface. The CLI do es, however , provide an “escape seq uence” to provide diagno st ics for problem identification and resolution.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-2 8.1.2 Accessing the CLI via T elnet T o connect to the AP-5131 CLI through a T eln et connection: 1. T elnet into the AP-5131 using an IP address of 19 2.168.0.1 2. Enter the default usern ame of admin and the de fault password of symbol .
Command Line Interfa ce Reference 8-3 8.2 Admin and Common Commands AP5131>admin> Description: Displays admin configuration options. The items available under this command are shown below . Syntax: help Displays general user interface help. passwd Changes the admin password.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-4 AP5131>admin>help Description: Displays general CLI user interface help. Syntax: Example: admin> help ? : display command help - Eg. ?, show ?, s? * Restriction of “?”: : “?” after a function argument is treated : as an argument : Eg.
Command Line Interfa ce Reference 8-5 AP5131>admin>passwd Description: Changes the password for the admin log in. Syntax: Example: admin> passwd Old Admin Password:****** New Admin Password:*.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-6 AP5131>admin>summary Description: Displays the AP-5131’ s system summary . Syntax: Example: admin> summary AP-5131 firmware version 1.
Command Line Interfa ce Reference 8-7 AP5131>admin>.. Description: Displays the parent menu of the current men u. This command appea rs in all of th e submenus under admin. In each case, it ha s the same function, to move up on e level in the directory structure.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-8 AP5131>admin> / Description: Displays the root menu, that is, the top-level CLI menu. This command appears in all of the submenu s under admin. In each case, it has the same function, to move up to the top level in the directory structure.
Command Line Interfa ce Reference 8-9 AP5131>admin>save Description: Saves the configuration to system flash. The save command appears in all of the submenus under admin. In eac h case, it has the same function, to save the current configuration.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-10 AP5131>admin>quit Description: Exits the command line interface session and terminates the s ession. The quit command appears in all of the sub menus under admin. In each case, it has the same function, to exit out of the CLI.
Command Line Interfa ce Reference 8-11 8.3 Network Commands AP5131>admin(network)> Description: Displays the network submenu . The items available under this command are shown below . lan Goes to the LAN submenu. wan Goes to the W AN submenu. wireless Goes to the Wireless Configuration submen u.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-12 8.3.1 Network LAN Commands AP5131>admin(network.lan)> Description: Displays the LAN submenu. The items availa ble under this command are show n below . For an overview of the AP-5131’ s LAN config uration options using the applet (GUI), see Configuring the LAN In terface on page 5-1 .
Command Line Interfa ce Reference 8-13 AP5131>admin(network.lan)> show Description: Displays the AP-5131 LAN settings. Syntax: Example: admin(network.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-14 Primary DNS Server : 192.168.0.2 Secondary DNS Server : 192.168.0.3 WINS Server : 192.168.0.255 admin(network.lan)> For information on displaying LAN information using the applet (GUI), see Configuring the LAN Interface on page 5-1 .
Command Line Interfa ce Reference 8-15 AP5131>admin(network.lan)> set Description: Sets the LAN paramete rs for the LAN port. Syntax: Example: admin(network.lan)> admin(network.lan)> set lan 1 enable admin(network.lan)> set name 1 engineering admin(network.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-16 8.3.1.1 Network LAN, Bridge Commands AP5131>admin(network.lan.bridge)> Description: Displays the AP-5131 Bridge subm enu. For an overview of the AP-5131’ s mesh netwo rking options using the applet (GUI), see Configuring Me sh Networking on page 9-1 .
Command Line Interfa ce Reference 8-17 AP5131>admin(network.lan.bridge)> show Description: Displays the mesh bridge co nfiguration parameters for the AP-5131’ s LANs.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-18 AP5131>admin(network.lan.bridge)> set Description: Sets the mesh co nfiguration para meters for the AP-5131’ s LANs. Syntax: Example: admin(network.lan.bridge)> set priority 2 32768 admin(network.
Command Line Interfa ce Reference 8-19 8.3.1.2 Network LAN, WLAN-Mapping Commands AP5131>admin(network.lan.wlan-mapping)> Description: Displays the WLAN/Lan/Vlan Map ping submenu. For an overview of the AP-5131’ s VLAN configuration options using the applet (GUI), see Configuring VLAN Support on page 5-4 .
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-20 AP5131>admin(network.lan .wlan-mapping)> show Description: Displays the VLAN list currently defined for the AP-5131.. These parameters are defined with the set command. Syntax: Example: admin(network.
Command Line Interfa ce Reference 8-21 admin(network.lan.wlan-mapping)> show wlan WLAN1: WLAN Name :WLAN1 ESSID :101 Radio : VLAN : Security Policy :Default QoS Policy :Default For information on displaying the AP-5131 VLAN screens using the ap plet (GUI), see Configuring VL AN Support on p age 5-4 .
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-22 AP5131>admin(network.lan.wlan-mapping)> set Description: Sets VLAN parameters for the AP-5131. Syntax: Example: admin(network.lan.wlan-mapping)> set mgmt-tag 1 admin(network.lan.wlan-mapping)> set native-tag 2 admin(network.
Command Line Interfa ce Reference 8-23 AP5131>admin(network.lan.wlan-mapping)> create Description: Creates a VLAN for the AP-5131. Syntax: Example: admin(network.lan.wlan-mapping)> admin(network.lan.wlan-mapping)> create 5 vlan-5 For information on creating VLANs using the ap plet (GUI), see Co nfiguring VLAN Support on page 5-4 .
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-24 AP5131>admin(network.lan.wlan-mapping)> edit Description: Modifies a VLAN’ s name and ID. Syntax: For information on editing VLANs using the applet (GUI), see Configuring VLAN Support on page 5-4 .
Command Line Interfa ce Reference 8-25 AP5131>admin(network.lan .wlan-mapping)> delete Description: Deletes a specific VLAN or all VLANs. Syntax: For information on deleting VLANs using the app let (GUI), see Config uring VLAN Support on page 5-4 .
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-26 AP5131>admin(network.lan .wlan-mapping)> lan-map Description: Maps an AP-5131 VLAN to a WLAN. Syntax: .. admin(network.lan.wlan-mapping)> lan-map wlan1 lan1 For information on mapping VLANs using the applet (GUI), see Configuring VLAN Support on page 5-4 .
Command Line Interfa ce Reference 8-27 AP5131>admin(network.lan .wlan-mapping)> vlan-map Description: Maps an AP-5131 VLAN to a WLAN. Syntax: admin(network.lan.wlan-mapping)> vlan-map wlan1 vlan1 For information on mapping VLANs using the applet (GUI), see Configuring VLAN Support on page 5-4 .
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-28 8.3.1.3 Network LAN, DHCP Commands AP5131>admin(network.lan.dhcp)> Description: Displays the AP-5131 DHCP submen u. The items available are displayed be low . show Displays DHCP parameters. set Sets DHCP parameters.
Command Line Interfa ce Reference 8-29 AP5131>admin(network.lan.dhcp)> show Description: Shows DHCP parameter setting s. Syntax: Example: admin(network.lan.dhcp)> show **LAN1 DHCP Information** DHCP Address Assignment Range: Starting IP Address : 192.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-30 AP5131>admin(network.lan.dhcp)> set Description: Sets DHCP parameters for the LAN port. Syntax: Example: admin(network.lan.dhcp)> set range 1 192.168.0.100 192.168.0.254 admin(network.lan.dhcp)> set lease 1 86400 admin(network.
Command Line Interfa ce Reference 8-31 AP5131>admin(network.lan.dhcp)> add Description: Adds static DHCP address assignments. Syntax: Example: admin(network.lan.dhcp)> add 1 00A0F8112233 192.160.24.6 admin(network.lan.dhcp)> add 1 00A0F1112234 192.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-32 AP5131>admin(network.lan.dhcp)> delete Description: Deletes static DHCP address assignments.
Command Line Interfa ce Reference 8-33 AP5131>admin(network.lan.dhcp)> list Description: Lists static DHCP address assignments. Syntax: Example: admin(network.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-34 8.3.1.4 Network T ype Filter Commands AP5131>admin(network.lan.type-filter)> Description: Displays the AP-5131 T ype Filter submenu. The items available under this command include: e show Displays the current Ethernet T ype exception list.
Command Line Interfa ce Reference 8-35 AP5131>admin(network.lan.type-filter)> show Description: Displays the AP-5131’ s current Ethernet T ype Filter configuration.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-36 AP5131>admin(network.lan.type-filter)> set Description: Defines the AP-5131 Ethernet T ype Filter configuration.
Command Line Interfa ce Reference 8-37 AP5131>admin(network.lan.type-filter)> add Description: Adds an Ethernet T ype Filter entry . Syntax: Example: admin(network.lan.type-filter)> admin(network.wireless.type-filter)> add 1 8137 admin(network.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-38 AP5131>admin(network.l an.type-filter)> delete Description: Removes an Ethe rnet T ype Filter entry indiv idually or the e ntire T ype Filter lis t. Syntax: Example: admin(network.lan.type-filter)> delete 1 1 admin(network.
Command Line Interfa ce Reference 8-39 8.3.2 Network WAN Commands AP5131>admin(network.wan)> Description: Displays the W AN submenu. The items available under this command are shown below . For an overview of the AP-5131’ s W AN con fig uration options using the applet (GUI), see Co nfiguring W AN Settings on page 5 -14 .
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-40 AP5131>admin(network.wan)> show Description: Displays the AP-5131 W AN port parameters. Syntax: Example: admin(network.wan)> show Status : enable WAN DHCP Client Mode : disable IP address : 0.
Command Line Interfa ce Reference 8-41 AP5131>admin(network.wan)> set Description: Defines the configuration of the AP-5131 WAN port. Syntax: Example: admin(network.wan)> admin(network.wan)> set dhcp disable admin(network.wan)> set ipadr 157.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-42 8.3.2.1 Network W AN NA T Commands AP5131>admin(network.wan.nat)> Description: Displays the NA T submenu .
Command Line Interfa ce Reference 8-43 AP5131>admin(network.wan.nat)> show Description: Displays AP-5131 NA T parameters. Syntax: Example: admin(network.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-44 AP5131>admin(network.wan.nat)> set Description: Sets NA T inbound and outboun d parameters. Syntax: Example: admin(network.wan.nat)> set type 1-to-many admin(network.wan.nat)> set ip 157.
Command Line Interfa ce Reference 8-45 AP5131>admin(network.wan.nat)> add Description: Adds NA T entries. Syntax: Example: admin(network.wan.nat)> add 1 indoors udp 20 29 10.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-46 AP5131>admin(network.wan.nat)> delete Description: Deletes NA T entries. Syntax: Example: admin(network.
Command Line Interfa ce Reference 8-47 AP5131>admin(network.wan.nat)> list Description: Lists AP-5131 NA T entries for the spec ified index. Syntax: Example: admin(network.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-48 8.3.2.2 Network W AN, VPN Commands AP5131>admin(network.wan.vpn)> Description: Displays the VPN submenu. The items availab le under this command include: For an overview of the AP-5131 VPN options ava ilable using th e applet (GUI), see Configuring VPN T unnels on page 6-34 .
Command Line Interfa ce Reference 8-49 AP5131>admin(netwo rk.wan.vpn)> add Description: Adds a VPN tunnel entry . Syntax: Example: admin(network.wan.vpn)> add 2 SJSharkey 209.235.44.31 206.107.22.46 255.255.255.224 206.107.22.1 If tunnel type is Manual, proper SPI values and Keys must be configured after adding the tunnel admin(network.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-50 AP5131>admin(netwo rk.wan.vpn)> set Description: Sets VPN entry parameters. Syntax: set type <name> <tunnel type> Sets the tunnel type <name> to Auto or Manual for the specified tunnel name.
Command Line Interfa ce Reference 8-51 For information on configuring VPN using the applet (GUI), see Configuring VPN T unnels on page 6-34 . salife <name> <lifetime> Defines the name of the tunnne l <name> the Security Association Life T ime <300-65535> applies to in seconds.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-52 AP5131>admin(network .wan.vpn)> delete Description: Deletes VPN tunnel entries. Syntax: Example: admin(network.
Command Line Interfa ce Reference 8-53 AP5131>admin(network.wan.vpn)> list Description: Lists VPN tunnel entries. Syntax: Example: admin(network.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-54 AP5131>admin(network .wan.vpn)> reset Description: Resets all of the AP-5131’ s VPN tunnels.
Command Line Interfa ce Reference 8-55 AP5131>admin(network.wan.vpn)> stats Description: Lists statistics for all active tunnels. Syntax: Example: admin(network.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-56 AP5131>admin(network .wan.vpn)> ikestate Description: Displays statistics for all active tunnels using Internet Key Exchange (IKE).
Command Line Interfa ce Reference 8-57 8.3.3 Network Wireless Commands AP5131>admin(network.wireless) Description: Displays the AP-5131 wireless submen u. The items available under this command in clude: wlan Displays the WLAN submenu used to create and configure up to 16 WLANs per AP-5131.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-58 8.3.3.1 Network WLAN Commands AP5131>admin(network.wireless.wlan)> Description: Displays the AP-5131 wireless LAN (WLAN) submenu .
Command Line Interfa ce Reference 8-59 AP5131>admin(network.wireless.wlan)> show Description: Displays the AP-5131’ s current WLAN configuration. Syntax: Example: admin(network.wireless.wlan)> show summary WLAN1 WLAN Name : Lobby ESSID : 101 Radio : 11a, 11b/g VLAN : Security Policy : Default QoS Policy : Default admin(network.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-60 AP5131>admin(network.wireless.wlan)> create Description: Defines the parameters of a new AP -5131 WLAN. Syntax: sh Example: admin(network.wireless.wlan.create)> show wlan ESS Identifier : WLAN Name : 802.
Command Line Interfa ce Reference 8-61 Accept Broadcast ESSID : disable QoS Policy : Default admin(network.wireless.wlan.create)> show security -----------------------------------------------------.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-62 AP5131>admin(network.wireless.wlan)> edit Description: Edits the properties of an existing WLAN policy . Syntax: For information on editing a WLAN using the applet (GUI), see Creating/Editing Individual WLANs on page 5-24 .
Command Line Interfa ce Reference 8-63 AP5131>admin(network.wireless.wlan)> delete Description: Deletes an existing WLAN. Syntax: For information on deleting a WLAN using the applet (GUI), see Creating/Editing Ind ividual WLANs on page 5-24 . delete <wlan-name> Deletes a target WLAN by name supplied.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-64 AP5131>admin(network.w ireless.wlan.hotspot)> Description: Displays the Hotspot submenu. The items av ailable under this command include: e F.
Command Line Interfa ce Reference 8-65 AP5131>admin(network.wireless.wlan.hotspot)> show Description: Displays the current AP -5131 Rogue AP detection configura tion. Syntax: Example: admin(network.wireless.wlan.hotspot)> show hotspot 1 WLAN1 Hotspot Mode : enable Hotspot Page Location : default External Login URL : www.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-66 AP5131>admin(network.wireless. wlan.hotspot)> redirection Description: Goes to the hotspot redirection menu. Syntax: Example: admin(network.wireless.wlan.hotspot)> set page-loc 1 www.sjsharkey.
Command Line Interfa ce Reference 8-67 AP5131>admin(network.wirel ess.wlan.hotspot)> radius Description: Goes to the hotspot Radius menu. Syntax: For information on configuring the Hotspot option s av ailable to the AP-5131 using the applet (GUI), see Configuring WLAN Hotspot Support on page 5-40 .
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-68 AP5131>admin(network.wireles s.wlan.hotspot.radius)> set Description: Sets the Radius hotspot configura tion. Syntax: Example: admin(network.wireless.wlan.hotspot.radius)> set server 1 primary 157.
Command Line Interfa ce Reference 8-69 AP5131>admin(network.wireles s.wlan.hotspot.radius)> show Description: Shows Radius hotspot server details. Syntax: Example: admin(network.wireless.wlan.hotspot.radius)> show radius 1 Primary Server Ip adr : 157.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-70 AP5131>admin(network.wireles s.wlan.hotspot)> white-list Description: Goes to the hotspot white-list menu. Syntax: Example: admin(network.wireless.wlan.hotspot.whitelist)> add rule 1 157.235.
Command Line Interfa ce Reference 8-71 8.3.3.2 Network Security Commands AP5131>admin(network.wireless.security)> Description: Displays the AP-5131 wireless security submenu.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-72 AP5131>admin(network.wir eless.security)> show Description: Displays the AP-5131’ s current security configuration.
Command Line Interfa ce Reference 8-73 AP5131>admin(network.wir eless.security)> create Description: Defines the parameter of AP -5131 security policies.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-74 Syntax: create Defines the parameters of a security policy . show Displays new or existing security policy parameters.
Command Line Interfa ce Reference 8-75 retry <number> Sets the maximum numbe r of reauthentication retries <retry> ( 1 - 99 ). accounting mode <mode> Enable or disable Radius accoun ting. server <ip> Set external Radius server IP address.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-76 wep- keyguard passkey <passkey> The passkey used as a text abbreviation for the entire key length ( 4-32 ). index <key index> Selects the WEP/KeyGuard key (from one of the four potential values of <key index> ( 1 - 4 ).
Command Line Interfa ce Reference 8-77 For information on configuring the encryption and authentication options available to the AP-5131 usin g the applet (GUI), se e Configuring Security Options on page 6-2 . preauth <mode> Enables or disables preauthentication (fast roaming).
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-78 AP5131>admin(network.wireless.security .edit)> Description: Edits the properties of a specific security policy . Syntax: Example: admin(network.wireless.security)> edit 1 admin(network.wireless.
Command Line Interfa ce Reference 8-79 AP5131>admin(network.wir eless.security)> delete Description: Deletes a specific security policy . Syntax: For information on configuring the encryption and authentication options available to the AP-5131 usin g the applet (GUI), se e Configuring Security Options on page 6-2 .
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-80 8.3.3.3 Network ACL Commands AP5131>admin(network.wireless.acl)> Description: Displays the AP-5131 Mobile Unit Access Control List (ACL) submenu. The ite ms available under this command include: show Displays the AP-5131’ s current ACL configuration.
Command Line Interfa ce Reference 8-81 AP5131>admin(network.wireless.acl)> show Description: Displays the AP-5131’ s current ACL configuration.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-82 AP5131>admin(network.wireless.acl)> create Description: Creates a n MU ACL po licy . Syntax: Example: admin(network.
Command Line Interfa ce Reference 8-83 AP5131>admin(network.wireless.acl.edit)> Description: Edits the properties of an existing MU ACL policy . Syntax: For information on configuring the ACL options avai lable to the AP-513 1 using the applet (GUI), see Configuring a WLAN Access Control List (ACL) on page 5-31 .
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-84 AP5131>admin(network.wireless.acl)> delete Description: Removes an MU ACL policy . Syntax: For information on configuring the ACL options avai lable to the AP-513 1 using the applet (GUI), see Configuring a WLAN Acce ss Control List (ACL) on page 5-31 .
Command Line Interfa ce Reference 8-85 8.3.3.4 Network Radio Co nfiguration Commands AP5131>admin(network.wireless.radio)> Description: Displays the AP-5131 Radio subm enu. The items available und er this command include: e show Summarizes AP -5131 radio para meters at a high-l evel.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-86 AP5131>admin(network.wireless.radio)> show Description: Displays the AP-5131’ s current radio configuration. Syntax: Example: admin(network.wireless.radio)> show Radio Configuration Radio 1 Name : Radio 1 Radio Mode : enable RF Band of Operation : 802.
Command Line Interfa ce Reference 8-87 AP5131>admin(network.wireless.radio)> set Description: Enables an AP-5131 Radio and defines the RF band of operation. Syntax: Example: admin(network.wireless.radio)> set 11a disable admin(network.wireless.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-88 AP5131>admin(network.wireless.radio.radio1)> Description: Displays a specific 802.11b/g radio submenu.
Command Line Interfa ce Reference 8-89 AP5131>admin(network.wirel ess.radio.radio1)> show Description: Displays specific 802.11b/g radio settings. Syntax: Example: admin(network.wireless.radio.radio1)> show radio Radio Setting Information Placement : indoor MAC Address : 00A0F8715920 Radio Type : 802.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-90 admin(network.wireless.radio.radio1)> show qos Radio QOS Parameter Set 11g-default -------------------------------------------------------------.
Command Line Interfa ce Reference 8-91 AP5131>admin(network.wireless.radio.802-11bg)> set Description: Defines specific 802.11b/g radio param eters. Syntax: Example: admin(network.wireless.radio.802-11bg)> set placement indoor admin(network.wireless.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-92 AP5131>admin(network.wireless.radio.802-11bg.advanced)> Description: Displays the advanced sub menu for the 802.11b/g radio. The items av ailable under this command include: Syntax: show Displays advanced ra dio setting s for the 802.
Command Line Interfa ce Reference 8-93 AP5131>admin(network.wireless. radio.802-11bg.advanced)> show Description: Displays the BSSID to WLAN mapping for the 802 .
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-94 AP5131>admin(network.wireless. radio.802-11bg.advanced)> set Description: Defines advanced parameters for the targe t 802.11b/g radio. Syntax: Example: admin(network.wireless.radio.802-11bg.advanced)> set wlan demoroom 1 admin(network.
Command Line Interfa ce Reference 8-95 AP5131>admin(network.wireless.radio.radio2)> Description: Displays a specific 802.11a rad io submenu. The items available un der this command include: Syntax: show Displays 802.11a radio s ettings set Defines specific 802.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-96 AP5131>admin(network.wireless.radio.802-11a)> show Description: Displays specific 802.11a rad io settings. Syntax: Example: admin(network.wireless.radio.802-11a)> show radio Radio Setting Information Placement : indoor MAC Address : 00A0F8715920 Radio Type : 802.
Command Line Interfa ce Reference 8-97 admin(network.wireless.radio.802-11a)> show qos Radio QOS Parameter Set: 11a default -------------------------------------------------------------------------.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-98 AP5131>admin(network.wirel ess.radio.802-11a)> set Description: Defines sp ecific 802.11 a radio para meters. Syntax: Example: admin(network.wireless.radio.802-11a)> admin(network.wireless.
Command Line Interfa ce Reference 8-99 AP5131>admin(network.wirel ess.radio.802-11a.advanced)> Description: Displays the advanced sub menu for the 802-11a radio. The items available unde r this command include: Syntax: show Displays advanced radio settings for th e 802-11a radio.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-100 AP5131>admin(network.wireless. radio.802-11a.advanced)> show Description: Displays the BSSID to WLAN mapping for the 802 .
Command Line Interfa ce Reference 8-101 AP5131>admin(network.wireless. radio.802-11a.advanced)> set Description: Defines advanced parameters for the targe t 802..11a radio. Syntax: Example: admin(network.wireless.radio.802-11a.advanced)> set wlan demoroom 1 admin(network.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-102 8.3.3.5 Network Quality of Service (QoS) Commands AP5131>admin(network.wireless.qos)> Description: Displays the AP-5131 Quality of Service (QoS) submenu. The items available under this command inc lude: e show Displays AP-5131 QoS policy inform ation.
Command Line Interfa ce Reference 8-103 AP5131>admin(network.wireless.qos)> show Description: Displays the AP-5131’ s current QoS policy by summary or individual policy .
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-104 AP5131>admin(network.wireless.qos.create)> Description: Defines an AP-5131 QoS policy . Syntax: For information on configuring the WLAN QoS option s av ailable to the AP-5131 using the applet (GUI), see Setting the WLAN Quality of Service (QoS) Policy on page 5-34 .
Command Line Interfa ce Reference 8-105 AP5131>admin(network.wireless.qos.edit)> Descripton: Edits the properties of an existing QoS policy . Syntax: For information on configuring the WLAN QoS option s av ailable to the AP-5131 using the applet (GUI), see Setting the WLAN Quality of Service (QoS) Policy on page 5-34 .
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-106 AP5131>admin(network.wireless.qos)> delete Description: Removes a QoS policy . Syntax: For information on configuring the WLAN QoS option s av ailable to the AP-5131 using the applet (GUI), see Setting the WLAN Quality of Service (QoS) Policy on page 5-34 .
Command Line Interfa ce Reference 8-107 8.3.3.6 Network Bandwith Management Commands AP5131>admin(network.wireless.bandwidth)> Description: Displays the AP-5131 Bandwidth Management submenu. The items available under this command include: e show Displays Bandwidth Management information for how data is processed by the AP-5131.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-108 AP5131>admin(network.wireless.bandwidth)> show Description: Displays the AP-5131’ s current Bandwidth Management configuratio n.
Command Line Interfa ce Reference 8-109 AP5131>admin(network.wireless.bandwidth)> set Description: Defines the AP-5131 Bandwidth Management configuration. Syntax: For information on configuring the Bandwidth Manage ment opti ons available to the AP-5131 us ing the applet (GUI), see Configuring Bandwidth Manageme nt Settings on page 5-55 .
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-110 8.3.3.7 Network Rogue-AP Commands AP5131>admin(network .wireless.rogue-ap)> Description: Displays the Rogue AP submenu. The ite ms available under this command include: e show Displays the current AP-5131 Rogue AP detection config uration.
Command Line Interfa ce Reference 8-111 AP5131>admin(network.w ireless.rogue-ap)> show Description: Displays the current AP -5131 Rogue AP detection configura tion.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-112 AP5131>admin(network.w ireless.rogue-ap)> set Description: Defines the AP-5131 ACL rogue AP method. Syntax: Example: admin(network.wireless.rogue-ap)> admin(network.wireless.rogue-ap)> set mu-scan enable admin(network.
Command Line Interfa ce Reference 8-113 AP5131>admin(network.wir eless.rogue-ap.mu-scan)> Description: Displays the Rogue-AP mu-sca n submenu. Syntax: show Displays all APs located by the MU scan. start Initiates scan immediately by the MU. .. Goes to the parent menu.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-114 AP5131>admin(network.wireles s.rogue-ap.mu-scan)> start Description: Initiates an MU scan from a user provided MAC address. Syntax: For information on configuring the Rogue AP options available to the AP-5131 us ing the ap plet (GUI), see Configuring Rogue AP Detection on page 6-53 .
Command Line Interfa ce Reference 8-115 AP5131>admin(network.wirel ess.rogue-ap.mu-scan)> show Description: Displays the results of an MU scan. Syntax: For information on configuring the Rogue AP options available to the AP-5131 using the applet (GUI), see Configuring Rogue AP Detection on pag e 6-53 .
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-116 AP5131>admin(network.wirel ess.rogue-ap.allowed-list)> Description: Displays the Rogue-AP allowed-lis t submenu. show Displays the rogue AP allowed list add Adds an AP MAC address and ESSID to the allowed list.
Command Line Interfa ce Reference 8-117 AP5131>admin(network.wireless. rogue-ap.allowed-list)> show Description: Displays the Rogue AP allowed List .
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-118 AP5131>admin(network.wireless. rogue-ap.allowed-list)> add Description: Adds an AP MAC address and ESSID to existing allowed list. Syntax: Example: admin(network.wireless.rogue-ap.allowed-list)> add 00A0F83161BB 103 admin(network.
Command Line Interfa ce Reference 8-119 AP5131>admin(network.wireless. rogue-ap.allowed-list)> delete Description: Deletes an AP MAC address and ESSID to existing allowed list. Syntax: For information on configuring the Rogue AP options available to the AP-5131 using the applet (GUI), see Configuring Rogue AP Detection on pag e 6-53 .
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-120 8.3.4 Network Firewall Commands AP5131>admin(network.firewall)> Description: Displays the AP-5131 firewall su bmenu. The items available under this command include : show Displays the AP-5131’ s curre nt firewall c onfiguration.
Command Line Interfa ce Reference 8-121 AP5131>admin(network.firewall)> show Description: Displays the AP-5131 fi rewall parameters. Syntax: Example: admin(network.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-122 AP5131>admin(network.firewall)> set Description: Defines the AP-5131 firewall parameters. Syntax: Example: admin(network.firewall)> set mode enable admin(network.firewall)> set ftp enable admin(network.
Command Line Interfa ce Reference 8-123 AP5131>admin(network.firewall)> access Description: Enables or disables firewa ll permissions through LAN to W AN ports. Syntax: Example: admin(network.firewall)> set override disable admin(network.firewall)> access admin(network.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-124 AP5131>admin(network.firewall)> advanced Description: Displays whether an AP-5131 fire wall rule is intended for inbo und traffic to an interface or outbound traffic from that interfa ce.. Syntax: Example: admin(network.
Command Line Interfa ce Reference 8-125 8.3.5 Network Router Commands AP5131>admin(network.router)> Description: Displays the router submenu. The items ava ilable under this command are: show Displays the existing AP-5131 router configuration. set Sets the RIP parameters.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-126 AP5131>admin(netwo rk.router)> show Description: Shows the AP-5131 route table. Syntax: Example: admin(network.
Command Line Interfa ce Reference 8-127 AP5131>admin(network.router)> set Description: Shows the AP-5131 route table. Syntax: For information on configuring the Router options av ailable to the AP-5 131 using the applet (GUI), see Configuring Router Settings on pa ge 5-57 .
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-128 AP5131>admin(network.router)> add Description: Adds user -defined routes. Syntax: Example: admin(network.
Command Line Interfa ce Reference 8-129 AP5131>admin(netwo rk.router)> delete Description: Deletes user -defined routes. Syntax: Example: admin(network.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-130 AP5131>admin(network.router)> list Description: Lists user -defined routes. Syntax: Example: admin(network.
Command Line Interfa ce Reference 8-131 8.4 Sy stem Commands AP5131>admin(sy stem)> Description: Displays the System submenu. The ite ms ava ilable under this command are shown be low . restart Restarts the AP-5131. show Shows AP-5131 system paramete r settings.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-132 AP5131>admin(sy stem)>restart Description: Restarts the AP-5131 access poin t. Syntax: Example: admin(system)> restart ********************************WARNING*********************************** ** Unsaved configuration changes will be lost when the AP-5131 is reset.
Command Line Interfa ce Reference 8-133 AP5131>admin(sy stem)>show Description: Displays high-level AP-5131 sys tem information. Syntax: Example: admin(system)> show system name : BldgC system location : Atlanta Field Office admin email address : johndoe@mycompany.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-134 AP5131>admin(sy stem)>set Description: Sets AP-5131 s ystem parameters . Syntax: ? Example: admin(system)> show system name : AP5131 system location : San Jose Engineering admin email address : SJSharkey@symbol.
Command Line Interfa ce Reference 8-135 8.4.1 Sy stem Debug and Last Password Commands AP5131>admin(sy stem)>debug Description: Accesses AP-5131 debug information. This informatio n is designed for field service use only , and should not be used by unqualif ied personnel.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-136 8.4.2 Sy s tem Access Commands AP5131>admin(sy stem)>access Description: Displays the AP-5131 access su bmenu. show Displays AP-5131 system access capa bilities. set Goes to the AP-5131 system access submenu.
Command Line Interfa ce Reference 8-137 AP5131>admin(sy stem.access)>set Description: Defines the permissions to access the AP-5131 ap plet, CL I, SNMP as well as defining their timeout values. Syntax: For information on configuring AP-5131 access s ettings using the a pplet (GUI), see Configuring Data Access on page 4-6 .
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-138 AP5131>admin(sy stem.access)>show Description: Displays the current AP -5131 access permissions and timeout valu es.
Command Line Interfa ce Reference 8-139 8.4.3 Sy s tem Certificat e Management Commands AP5131>admin(sy stem)>cmgr Description: Displays the Certificate Manager submenu . The items available und er this command in clude: genreq Generates a Certificate Request.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-140 AP5131>admin(sy stem.cmgr)> genreq Description: Generates a certificate request. Syntax: Note: The parameters in [square brackets] a re optional. Check with the CA to determine what fields a re necessary .
Command Line Interfa ce Reference 8-141 AP5131>admin(sy stem.cmgr)> delself Description: ) Deletes a self certificate. Syntax: Example: admin(system.cmgr)> delself MyCert2 For information on configuring self certif icate settings using the ap plet (GUI), see Creating Self Certificates for Accessing the VPN on pag e 4-10 .
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-142 AP5131>admin(sy ste m.cmgr)> loadself Description: Loads a self certificate signed by the Certificate Authority . Syntax: For information on configuring self certif icate settings using the ap plet (GUI), see Creating Self Certificates for Accessing the VPN on pag e 4-10 .
Command Line Interfa ce Reference 8-143 AP5131>admin(sy stem.cmgr)> listself Description: Lists the loaded self certificates. Syntax: For information on configuring self certif icate settings using the ap plet (GUI), see Creating Self Certificates for Accessing the VPN on pag e 4-10 .
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-144 AP5131>admin(sy stem.cmgr)> loadca Description: Loads a trusted certificate fro m the Certificate Authority . Syntax: For information on configuring certificate settings using the applet (GUI), see Importing a CA Certificate on pag e 4-9 .
Command Line Interfa ce Reference 8-145 AP5131>admin(sy stem.cmgr)> delca Description: Deletes a trusted certificate. Syntax: For information on configuring certificate settings using the applet (GUI), see Importing a CA Certificate on pag e 4-9 .
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-146 AP5131>admin(sy stem.cmgr)> listca Description: Lists the loaded trusted certificate. Syntax: For information on configuring certificate settings using the applet (GUI), see Importing a CA Certificate on pag e 4-9 .
Command Line Interfa ce Reference 8-147 AP5131>admin(sy ste m.cm gr)> showreq Description: Displays a certificate request in PEM format. Syntax: For information on configuring certificate settings using the applet (GUI), see Importing a CA Certificate on pag e 4-9 .
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-148 AP5131>admin(sy stem. cmgr)> delprivkey Description: Deletes a private key . Syntax: For information on configuring certificate settings using the applet (GUI), see Creating Self Certificates for Accessing the VPN on page 4-10 .
Command Line Interfa ce Reference 8-149 AP5131>admin(sy stem. cmgr)> listprivkey Description: Lists the names of private keys. Syntax: For information on configuring certificate settings using the applet (GUI), see Importing a CA Certificate on pag e 4-9 .
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-150 AP5131>admin(sy ste m.cmgr)> expcert Description: Exports the certificaqte file. Syntax: For information on configuring certificate settings using the applet (GUI), see Importing a CA Certificate on pag e 4-9 .
Command Line Interfa ce Reference 8-151 AP5131>admin(sy stem.cmgr)> impcert Description: Imports the target certificate file. Syntax: For information on configuring certificate settings using the applet (GUI), see Importing a CA Certificate on pag e 4-9 .
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-152 8.4.4 Sy stem SNMP Commands AP5131>admin(sy stem)> snmp Description: Displays the SNMP submenu. Th e items available under this command are shown below . access Goes to the SNMP access submenu.
Command Line Interfa ce Reference 8-153 8.4.4.1 Sy stem SNMP Access Commands AP5131>admin(sy s tem.snmp.access) Description: Displays the SNMP Access menu. The items available under this command are sho wn below . show Shows SNMP v3 engine ID. add Adds SNMP access entries.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-154 AP5131>admin(sy stem. snmp.access)> show Description: Shows the SNMP v3 engine ID. Syntax: Example: admin(system.snmp.access)> show eid AP-5131 snmp v3 engine id : 000001846B8B4567F871AC68 admin(system.
Command Line Interfa ce Reference 8-155 AP5131>admin(sy stem. snmp.access)> add Description: Adds SNMP access entries for specific v1v2 and v3 user definitions. Syntax: For information on configuring SNMP access settin gs using the applet (GUI), see Configuring SNMP Access Control on pag e 4-23 .
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-156 AP5131>admin(sy stem. snmp.access)> delete Description: Deletes SNMP access entries for specific v1v2 and v3 user de finitions.
Command Line Interfa ce Reference 8-157 AP5131>admin(sy stem. snmp.access)> list Description: Lists SNMP access entries. Syntax: Example: admin(system.snmp.access)> list acl ---------------------------------------------------------------- index start ip end ip ---------------------------------------------------------------- 1 209.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-158 8.4.4.2 Sy stem SNMP T raps Commands AP5131>admin(sy stem.snmp.traps) Description: Displays the SNMP traps submenu. The ite ms available under this command are shown be low . show Shows SNMP trap parameters.
Command Line Interfa ce Reference 8-159 AP5131>admin(sy stem. snmp.traps)> show Description: Shows SNMP trap parameters. Syntax: Example: admin(system.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-160 AP5131>admin(sy stem.snmp.traps)> set Description: Sets SNMP trap parameters. Syntax: For information on configuring SNMP traps using the applet (GUI), see Configuring Specific SNMP T raps on pag e 4-28 .
Command Line Interfa ce Reference 8-161 AP5131>admin(sy stem. snmp.traps)> add Description: Adds SNMP trap entries. Syntax: Example: admin(system.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-162 AP5131>admin(sy stem.snmp.traps)> delete Description: Deletes SNMP trap entries. Syntax: Example: admin(system.snmp.traps)> delete v1v2 all For information on configuring SNMP traps using the applet (GUI), see Configuring SNMP Settings on pag e 4-17 .
Command Line Interfa ce Reference 8-163 AP5131>admin(sy stem. snmp.traps)> list Description: Lists SNMP trap entries. Syntax: Example: admin(system.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-164 8.4.5 Sy s tem Network T ime Protocol (NTP) Commands AP5131>admin(sy stem)> ntp Description: Displays the NTP menu. The corre ct network time is required for numerous functions to be config ured accuaretly on the AP-513 1.
Command Line Interfa ce Reference 8-165 AP5131>admin(sy stem.ntp)> show Description: Displays the NTP server configuratio n. Syntax: Example: admin(system.ntp)> show current time (UTC) : 2006-07-31 14:35:20 Time Zone: ntp mode : enable preferred Time server ip : 203.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-166 AP5131>admin(sy stem.ntp)> date-zone Description: Show date, time and time zone. Syntax: Example: admin(system.ntp)> date-zone Date/Time : Sat 1970-Jan-03 20:06:22 +0000 UTC Time Zone : date-zone Show date, time and time zone.
Command Line Interfa ce Reference 8-167 AP5131>admin(sy ste m.ntp)> zone-list Description: Displays an ex tensive list of time zone s for countries aro und the world . Syntax: Example: admin(system.ntp)> zone-list zone-list Displays list of time zones for every known zone.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-168 AP5131>admin(sy stem.ntp)> set Description: Sets NTP parameters for AP-5131 clo ck synchronization. Syntax: Example: admin(system.ntp)> set mode enable admin(system.ntp)> set server 1 203.
Command Line Interfa ce Reference 8-169 8.4.6 Sy stem Log Commands AP5131>admin(sy stem)> logs Description: Displays the AP-5131 log submenu . Logging options in clude: Syntax: show Shows logging options. set Sets log options and parameters. view V iews system log.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-170 AP5131>admin(sy stem.logs)> show Description: Displays the current AP -5131 logging settings. Syntax: Example: admin(system.logs)> show log level : L6 Info syslog server logging : enable syslog server ip address : 192.
Command Line Interfa ce Reference 8-171 AP5131>admin(sy stem.logs)> set Description: Sets log options and parameters. Syntax: For information on configuring logging settings u sing the app let (GUI), see Logging Con figuration on page 4-35 . set level <level> Sets the level of the events that will be logged.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-172 AP5131>admin(sy stem.logs)> view Description: Displays the AP-5131 syste m log file. Syntax: Example: admin(system.logs)> view Jan 7 16:14:00 (none) syslogd 1.4.1: restart (remote reception).
Command Line Interfa ce Reference 8-173 AP5131>admin(sy stem.logs)> delete Description: Deletes the log files. Syntax: Example: admin(system.logs)> delete For information on configuring logging settings u sing the app let (GUI), see Logging Con figuration on page 4-35 .
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-174 AP5131>admin(sy stem.logs)> send Description: Sends log and core file to an F TP Server . Syntax: Example: admin(system.logs)> send File transfer : [ In progress ] File transfer : [ Done ] admin(system.
Command Line Interfa ce Reference 8-175 8.4.7 Sy stem Configuration-Update Commands AP5131>admin(sy stem.config)> Description: Displays the AP-5131 config uration update submenu. Syntax: default Restores the default AP-5131 configuration. partial Restores a partia l default AP-5131 co nfiguration.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-176 AP5131>admin(sy stem. config)> default Description: Restores the full AP-5131 factory default configuration.
Command Line Interfa ce Reference 8-177 AP5131>admin(sy stem. config)> partial Description: Restores a partial factory default configuratio n. The AP-5131’ s LAN, W AN and SNMP settings are une ffected by the partial re stor e. Syntax: Example: admin(system.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-178 AP5131>admin(sy ste m.config)> show Description: Displays import/export param eters for the AP-5131 configuration file. Syntax: Example: admin(system.config)> show cfg filename : cfg.txt cfg filepath : ftp/tftp server ip address : 192.
Command Line Interfa ce Reference 8-179 AP5131>admin(sy stem.config)> set Description: Sets the import/export parameters. Syntax: Example: admin(system.config)> set server 192.168.22.12 admin(system.config)> set user myadmin admin(system.config> set passwd georges admin(system.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-180 AP5131>admin(sy ste m.config)> export Description: Exports the configuration from the syste m. Syntax: Example: Export F TP Example: admin(system.config)> set server 192.168.22.12 admin(system.
Command Line Interfa ce Reference 8-181 AP5131>admin(sy ste m.config)> import Description: Imports the AP-5131 configuration to the AP-51 31. Errors could di splay a s a result of invaid configuration p arameters. Correct the sepcified lines and import the file aga in until the import operation is error free.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-182 8.4.8 Firmware Update Commands AP5131>admin(sy stem)>fw-update Description: Displays the firmware update sub menu.
Command Line Interfa ce Reference 8-183 AP5131>admin(sy ste m.fw-update)>show Description: Displays the current AP -5131 firmware update settings. Syntax: Example: admin(system.fw-update)> show automatic firmware upgrade : enable automatic config upgrade : enable automatic upgrade interface : WAN firmware filename : APFW.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-184 AP5131>admin(sy ste m.fw-update)>set Description: Defines AP-5131 firmware update settings and user permissions. Syntax: For information on upda ting AP-5131 d evice firmware using th e applet (GUI), see Updating Device Firmware on page 4 -41 .
Command Line Interfa ce Reference 8-185 AP5131>admin(sy ste m.fw-update)>update Description: Executes the AP-5131 firmware update over t he W AN or LAN port using either ftp or tftp. Syntax: For information on updating AP-5131 device firm ware using the applet (GUI), see Updating Device Firmware on page 4-41 .
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-186 8.5 Statistics Commands AP5131>admin(stats) Description: Displays the AP-5131 statistics submenu . The items a vailable under this command are: show Displays AP-5131 WLAN, MU, LAN an d W AN statistics.
Command Line Interfa ce Reference 8-187 AP5131>admin(stats)> show Description: Displays AP-5131 system inform ation. Syntax: For information on displaying W AN port statistics using the applet (GUI), see Viewing W AN Statistics on page 7-2 .
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-188 AP5131>admin(sta ts)> send-cfg-ap Description: Copies the AP-5131’ s configuration to another AP-5131 within the known AP table.
Command Line Interfa ce Reference 8-189 AP5131>admin(stats )> send-cfg-all Description: Copies the AP-5131’ s configuration to all o f the AP-5131s within the known AP table.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-190 AP5131>admin(stats)> clear Description: Clears the specified statistics counters to zero to begin new data calculations. Syntax: clear wan Clears W AN statistics counters. lan Clears LAN statistics counters.
Command Line Interfa ce Reference 8-191 AP5131>admin(stats)> flash-all-leds Description: Starts and stops the illumination of a specified access point’ s LEDs.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-192 AP5131>admin(stats)> echo Description: Defines the echo test values used to condu ct a ping test to an associated MU. Syntax: For information on MU Echo and Ping tests using the app let (GUI), see Pin ging Individual MUs on page 7-2 7 .
Command Line Interfa ce Reference 8-193 AP5131>admin.stats.echo)> show Description: Shows Mobile Unit Statistics Summary . Syntax: Example: admin(stats.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-194 AP5131>admin.stats.echo)> list Description: Lists echo test parameters and results. Syntax: Example: admin(stats.echo)> list Station Address : 00A0F8213434 Number of Pings : 10 Packet Length : 10 Packet Data (in HEX) : 55 admin(stats.
Command Line Interfa ce Reference 8-195 AP5131>admin.stats.echo)>set Description: Defines the parameters of the echo test. Syntax: For information on MU Echo and Ping tests using the applet (GUI), se e Pin ging Individual MUs on page 7-27 . set station <mac> Defines MU target MAC address.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-196 AP5131>admin.stats.echo)> start Description: Initiates the echo test. Syntax: Example: admin(stats.
Command Line Interfa ce Reference 8-197 AP5131>admin(stats)> ping Description: Defines the ping test values used to conduct a ping test to an AP with th e same ESSID. Syntax: For information on Known AP tests using the applet (GUI), see Pinging Ind ividual MUs on page 7-27 .
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-198 AP5131>admin.stats.ping)> show Description: Shows Known AP Summary Details. Syntax: Example: admin(stats.
Command Line Interfa ce Reference 8-199 AP5131>admin.stats.ping)> list Description: Lists ping test parameters and results. Syntax: Example: admin(stats.ping)> list Station Address : 00A0F8213434 Number of Pings : 10 Packet Length : 10 Packet Data (in HEX) : 55 admin(stats.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-200 AP5131>admin.stats.ping)> set Description: Defines the parameters of the ping test. Syntax: Example: admin(stats.ping)> set station 00A0F843AABB admin(stats.ping)> set request 10 admin(stats.
Command Line Interfa ce Reference 8-201 AP5131>admin.stats.echo)> start Description: Initiates the pin g test. Syntax: Example: admin(stats.ping)> start admin(stats.
AP-5131 Acce ss Point Pro duct Refere nce Guide 8-202.
Configuring Mesh Networking 9.1 Mesh Networking Overview An AP-5131 can be configured in two modes to support the new mesh networking functio nality . Th e AP-5131 can be set to a client bridge mode and /or a base bridge mode (which accepts connections from client bridges).
AP-5131 Access Poin t Product Referen ce Guide 9-2 AP-5131s configured as both a base and a client bridge functio n as repeaters to transmit data with associated MUs in their coverage area (client br idge mode) as well as forward traffic to other AP- 5131s in the mesh network (base brid ge mode).
Configuring M esh Networki ng 9-3 If an AP-5131 is configured as a base bridge (but not as a client bridge) it o perates normally at boot time. The base bridge AP-513 1 supports connection s made by other client bridge AP-51 31s.
AP-5131 Access Poin t Product Referen ce Guide 9-4 The dual-radio model AP-5131 affords users better optimization of the mesh networking feature by allowing the AP-5131 to transmit to other AP-513 1s (in base or client bridge mode) using one independent radio and transmit with its associ ated MUs using the second indep endent radio.
Configuring M esh Networki ng 9-5 Limit the wireless client’ s connections to reduce the to tal number of hops required to get to the wired network. Use each radio’ s "preferred" base b ridge list to define which AP-5131s the client bridge is allowed to connect to.
AP-5131 Access Poin t Product Referen ce Guide 9-6 However , if using the Known AP Statistics screen’ s Send Cfg to APs functionality , “auto-select” and preferred list” settings do not get imported.
Configuring M esh Networki ng 9-7 V erify the enabled LAN is named appropriately in respect to its intended function in supporting the mesh network. 3. Select Network Configuration -> LAN -> LAN1 or LAN2 from the AP-5131 menu tree. 4. Click the Mesh STP Configuration button on the bottom off the screen.
AP-5131 Access Poin t Product Referen ce Guide 9-8 6. Click OK to return to either the LAN1 or LAN2 screen where up dates to the Mesh STP Configuration can be saved by clicking the Apply butto n. 7. Click Cancel to discard the changes made to the Mesh STP Configu ration and return to the LAN1 or LAN2 screen.
Configuring M esh Networki ng 9-9 The Wireless Configuration screen displays with those existin g WLANs displayed within the table. 2. Select the Cre ate button to configure a new WLAN specifically to s upport mesh networking.
AP-5131 Access Poin t Product Referen ce Guide 9-10 Symbol recommends assigning a unique name to a WLAN supporting a mes h network to differentiate it from WLANs defined for non mes h support. The name assig ned to the WLAN is what is selected from the Radio Configuration screen for use within the mesh network.
Configuring M esh Networki ng 9-11 are typically not guest networks, wherein pub lic assess is more important than data protection. Symbol also discourages user-based authentication schemes such as Kerberos and 802.1 x EAP , a s these authentication schemes are not supported within a mesh network.
AP-5131 Access Poin t Product Referen ce Guide 9-12 10. Select the Use Secure Beac on checkbox to not transmit the AP- 5131’ s ESSID amongst the AP-5131s and devices within the mesh ne twork. If a hacker tries to find an ESSID via an MU, the AP- 5131’ s ESSID does not display since the ESSID is not in the beacon.
Configuring M esh Networki ng 9-13 1. Select Network Co nfiguration -> Wireless -> Radio Configuration from the AP-5131 menu tree. 2. Enable the radio(s) using the Enable checkbox(es) for both Radio 1 and Radio 2. Refer to RF Band of Operation parameter to en sure you are enablin g the correct 8 02.
AP-5131 Access Poin t Product Referen ce Guide 9-14 mesh network data from those client bridges within the mesh network and never the initiator . 4. If the Base Bridge checkbox has been se lected, use the Max# Client Bridges parameter to define the client bridge load on a particular base bridge.
Configuring M esh Networki ng 9-15 If the Client Bridge checkbox h as been selected, use the Mesh Network Name drop-down menu to select the WLAN (ESS) the client bridge uses to establis h a wireless link.
AP-5131 Access Poin t Product Referen ce Guide 9-16 the user from selecting the order b ase bridges are a dded to the mesh network w hen one of the three associated base brid ges becomes unavailable. 8. Refer to the Available Base Bridge List to view devices located by the AP-5131 using the WLAN selected from the Radio Configuration sc reen.
Configuring M esh Networki ng 9-17 If a MAC address is not desirable as others but still worthy of being on the prefe rred list, select it, and click the Down button to decrease its likelihood of being selecte d as a member of the mesh network.
AP-5131 Access Poin t Product Referen ce Guide 9-18 9.3 Usage Scenario - T rion Enterprises T rion Enterprises is a new ship ping and receiving comp any . T rion wants to create an outdoor wire less coverage area (in addition to its indoo r wireless in frastru cture) that can expand as they grow their business.
Configuring M esh Networki ng 9-19 1. The T rion IT department verifies connectivity with both of the AP-513 1s following the instructions in T esting Connectivity on page 3- 13 . 2. The T rion IT Departme nt installs the AP1 on a wall with the antenna s orienting outward in to the shipping and receiving yard.
AP-5131 Access Poin t Product Referen ce Guide 9-20 3. The T rion IT dep artment selects Network Configuration -> LAN from the AP-5131 menu tree. 4. The T rion IT department verifies the LAN used to support the mesh network is enabled for both AP1 and AP2, (by selecting the Enable checkbox).
Configuring M esh Networki ng 9-21 6. The IT team sele cts the Mesh STP Configuration button on the bottom off the screen. 7. The T rion IT departme nt sets the Priority setting to 1 (for AP1) in orde.
AP-5131 Access Poin t Product Referen ce Guide 9-22 The Wireless Configuration screen displays with those e xisting WLANs displayed within the table. This is T rion’ s first deploy ment fo r this ne.
Configuring M esh Networki ng 9-23 12. The team assigns the name of “ trion mesh ” to the WLAN so it will not be confused with other WLANs used in o ther areas of the T rio n facility . This name also serves to associate the name of the WLAN with its intended mesh network utiliza tion of data.
AP-5131 Access Poin t Product Referen ce Guide 9-24 19. The Broadcast Key Rotation checkbox is selected, as th e IT team plans to change the ke ys from time to time (for security purposes) an d wants these keys to be broadcasted using the default interval 86400 seconds.
Configuring M esh Networki ng 9-25 23. The IT team assigns the name of “ trion mesh network ” to the ACL to eliminat e any confusion with the ACLs intended function 24.
AP-5131 Access Poin t Product Referen ce Guide 9-26 26. The team decides to le ave the Disallow MU to MU Communication checkbox unselec ted for the WLAN, as the team considers all MU traf fic within the secure shipping a nd receiving yard known and not a threat to the initial 2 AP mesh network de ployment.
Configuring M esh Networki ng 9-27 31. The IT T eam does not p lan on supporting any legacy 802.11b vo ice enabled de vices, so they leave the Support V oice prioritization checkbox unselected. 32. The IT T eam selects 11ag-default from the drop -down menu to best describe the type of data proliferating the m esh network.
AP-5131 Access Poin t Product Referen ce Guide 9-28 37. For AP2, the IT T eam enables both Radio 1 and Radio 2 and defines radio 1 as a client bridge. 38. The IT T eam leaves each radio’ s Max # Client Bridge setting at the default setting of 12. This ensures as client bridges are added to the growin g mesh network they can be accounted for .
Configuring M esh Networki ng 9-29 For the next six months, T rion Enterprises’ mesh netwo rk only consists of AP1 an d AP2. AP1 has already been defined as the root bridge in the mesh netwo rk when it was assigned a Priority value of 1 within th e Bridge STP Configuration screen.
AP-5131 Access Poin t Product Referen ce Guide 9-30 broadcast range (see the illustration below). T he T rion IT departme nt follows the instructions in Wall Mounted Installations on page 2-13 to install AP3 and AP4. 3. The T rion IT dep artment selects Network Configuration -> LAN from the AP-5131 menu tree.
Configuring M esh Networki ng 9-31 5. The T rion IT department then selects Network Configuration -> LAN -> trion from the AP-5131 menu tree. 6. The IT team sele cts the Mesh STP Configuration button on the bottom of the screen.
AP-5131 Access Poin t Product Referen ce Guide 9-32 9. The team selects the Edit button to revise (and rename) the existing default WLAN to support mesh networking. 10. The T rion IT team assigns AP 3 and AP4 an ES SID of 103. Therefore, AP 1 and AP2 should be able to “see” AP3 and AP4 as soon as they are deployed.
Configuring M esh Networki ng 9-33 13. The team does not want any MUs connecting to the mesh WLAN, only the dev ices comprising the mesh network. Therefore, the team leave s the Maximum MUs field as is, and will use the Radio Config uration page to control the nu mber of client bridge connections.
AP-5131 Access Poin t Product Referen ce Guide 9-34 21. Now a QoS policy needs to be defined for the shipp ing and receiving mesh WLAN. The IT T eam still envisions little (if any) video or voic e traffic within the shippi ng as the MUs within primarily scan bar cod es and uplo ad data.
Configuring M esh Networki ng 9-35 25. For both AP3 and AP4, the IT T eam uses the Mesh Network Name drop-down m enu to assign the “ trion mesh ” WL AN to radio 1. This is the WL AN the AP3 and AP4 radios will use to interoperate with the MUs populating the shipping ya rd.
AP-5131 Access Poin t Product Referen ce Guide 9-36 9.3.3 Adding 2 More Client Br idges to the T rion Network After an additional six months with their existing 4 AP-5131 mesh network, T rion Enterprises needs and approves the addition of two additional AP -5131s (AP5 and AP6) to be conf igured as client bridges.
Configuring M esh Networki ng 9-37 3. The T rion IT dep artment selects Network Configuration -> LAN from the AP-5131 menu tree. 4. The T rion IT department verifies the LAN used to support the mesh netwo rk is enabled for both AP5 and AP6, (by selecting the Enable checkbox).
AP-5131 Access Poin t Product Referen ce Guide 9-38 7. The T rion IT departm ent leaves the Priority setting to at 32768 for AP5 and AP6 for bo th to defer to AP1 (which was assigned a priority of 1 for root design ation) as the AP-5131 defining the mesh ne twork configuratio n.
Configuring M esh Networki ng 9-39 9. The team selects the Edit button to revise (and rename) the existing defa ult WLAN to support mesh networking. 10. The T rion IT team assigns the WLAN an ESSID of 103 to be consistent with the trion mesh WLAN ESSID of the other four AP-5131s within the mesh network.
AP-5131 Access Poin t Product Referen ce Guide 9-40 13. The team still does not want any MUs connecting to the mesh WLAN, only th e devices comprising the mesh network. There fore, the team leaves the Maxim um MUs field as is, and will use the Radio Configuration page to control the number of c lient bridge connections within the mesh WLAN.
Configuring M esh Networki ng 9-41 22. The IT team sele cts Network Configuration -> Wireless -> Radio Configuration from the AP-5131 menu tree. The Radio Configuration screen disp lays. 23. For both AP5 and AP6, the IT T eam enables Radi o 1 and defines the radio as a client brid ge.
AP-5131 Access Poin t Product Referen ce Guide 9-42.
T echnical Specifications This appendix provides technical specifications in the following area s: • Physical Characterist ics • Electrical Characteristics • Radio Charac teristics • Antenna S.
AP-5131 Access Poin t Product Referen ce Guide A-2 A.1 Phy sical Characteristics The AP-5131 has the following phy sical characteris tics: A.2 Electrical Characteristics The AP-5131 has the following electrical characteristic s: Dimensions 5.32 inches long x 9.
Technical Specifications A-3 A.3 Radio Characteristics The AP-5131 has the following radio cha racteristics: Operating Channels 802.11a radio - Channels 34-161 (5170-5825 MHz) 802.
AP-5131 Access Poin t Product Referen ce Guide A-4 A.4 Antenna Specifications The AP-5131 antenna suite has the following specificatio ns: A.4.1 2.4 GHz Antenna Matrix The following table describes each 2.4 GHz antenna approved for use with the AP-5131.
Technical Specifications A-5 A.4.3 Additional Antenna Components The following table lists the Symbol part number fo r vario us antenna accessories. This table also includes the loss for each access ory at both 2.
AP-5131 Access Poin t Product Referen ce Guide A-6 A.5 Country Codes The following list of c ountries and their country codes is useful wh en using the AP -5131 configuration file, CLI or the MIB to c.
Technical Specifications A-7 Germany DE T urkey TR Greece GR Ukraine UA Hong Kong HK UAE AE Hungary HU United Kingdom UK Iceland IS USA US India IN Uruguay UY Indonesia ID Vietnam VN Ireland IE V enez.
AP-5131 Access Poin t Product Referen ce Guide A-8.
AP-5131 Usage Scenarios This appendix provides practica l usage scenarios for many of the AP-5131 ’ s key features. This information should be referenced as a suppleme nt to the information contained within this AP-5131 Product Reference Guide.
AP-5131 Access Poin t Product Referen ce Guide B-2 The firmware is automatically updated each time firmware versions are found to be different between the AP-5131 and the firmware file locate d on the DHCP/BootP server . The configu ration file is automatically applied only if the filename is different than what resides on the AP-5131.
AP-5131 Us age Scenarios B-3 e. Add the following 3 new options under AP513 1 Options class: f. Highlight Scope Options from the tree and select Configure Options . g. Go to the Advanced tab. From under the Vendor Class AP5131 Options, check all three options mentioned in the table above and enter a value for each option.
AP-5131 Access Poin t Product Referen ce Guide B-4 B.1.1.2 Global Options - Using Extended/Standard Options The following are in structions for automatic firmwa re and configuratio n file updates via DHCP us ing extended options or standard options con figured globally .
AP-5131 Us age Scenarios B-5 d. Under the General tab, check a ll 3 options mention ed within the Exte nded Options table and enter a value for each option. 3. Copy both the firmwa re and con figuration files to the appropriate d irectory on the T F TP Server .
AP-5131 Access Poin t Product Referen ce Guide B-6 If the DHCP Server is configured for options 186 and 66 (to assign TF TP Server IP addresses) the AP-5131 uses the IP add ress configured for option 186.
AP-5131 Us age Scenarios B-7 B.1.2.1 BootP Options This section contains instructio ns for the automatic update of the AP-513 1 firmware and configurat ion file using a Boot P Server . The setup example described in this section includes: • 1 AP-5131 • 1 Linux/Unix BOOTP Server • 1 TF TP Server .
AP-5131 Access Poin t Product Referen ce Guide B-8 Using options sa, bf a nd 136: 3. Copy the firmware and configuratio n files to the appropriate directory on the TF TP Server . By default, auto update is enabled on the AP-5131 (s ince the LAN Port is a DHCP Client, out-of-the-box auto update sup port is on the LAN Port).
AP-5131 Us age Scenarios B-9 B.1.2.2 BootP Priorities The following flowchart displays the priorities used by the AP-5131 when the BootP server is configured fo r multiple option s: If the BootP Server is configured for options 186 and 66 (to assign TF TP server IP addresses) the AP-5131 uses the IP address configured for option 186.
AP-5131 Access Poin t Product Referen ce Guide B-10 B.2.1 Configuring a VPN T un nel Between T wo AP-5131s The AP-5131 can con nect to a no n-AP device supporting IP Sec, such as a Cisco VPN device - labeled as "Device #2".
AP-5131 Us age Scenarios B-11 8. Click Apply to save the changes. 9. Select the Auto (IKE) Key Exchange checkbox. 10. Select the Auto Key Settings button. 11. For the ESP T ype, select ESP with Authentication and use AES 128-bit as the ESP Encryption Algorithm.
AP-5131 Access Poin t Product Referen ce Guide B-12 13. Select Pre Shared Key (PSK) from the IKE Authentication Mode drop-do wn menu. 14. Enter a Passphrase . Pa ssphrases must match on both VP N devices. 15. Select AES 128-bit as the IKE Encry ption Algorithm.
AP-5131 Us age Scenarios B-13 19. On AP-5131 #2/ Device #2, repeat the same procedure. However , replace AP-5131 #2 information with AP-5131 #1 information. 20. Once both tunne ls are established, ping each side o f the tunnel to ensu re connectivity .
AP-5131 Access Poin t Product Referen ce Guide B-14 B.2.3 Frequently Asked VPN Questions The following are c ommon questions that arise w hen configuring a VPN tunnel using the AP-5131 . • Question 1: Does the AP- 5131 IPSec tunnel support mu ltiple subnets on the other end of a VPN concentrator? Ye s .
AP-5131 Us age Scenarios B-15 • Question 2: Even if a wild card entry of "0.0 .0.0" i s entered in the Remote Subnet field in the VPN configuration page, can the AP access multip le subnets on the other end of a VPN concentrator for the APs LAN/W AN side? No.
AP-5131 Access Poin t Product Referen ce Guide B-16 Ye s . • Question 6: Can an IPSec tunnel over a PPPoE co nnection be estab lished - such as a PPPoE enab led DSL link? Ye s . The AP-5 131 supports tunne ling when using a PPPoE u sername and passw ord.
AP-5131 Us age Scenarios B-17 • UFQDN - tries to match the user entered remote ID data string to the email address field of the received certificate.
AP-5131 Access Poin t Product Referen ce Guide B-18 • Question 11: I still can't get my tunnel to work after attempting to initiate traffic between the two sub nets. What no w? T ry the following troubleshooting tips: • V erify you can ping each of the remote Gateway IP ad dresses from clients on either side.
AP-5131 Us age Scenarios B-19 These three rules should be configured abo ve all other rules (default or u ser defined). When Advanced LAN Access is used, certain inbou nd/outbound rules need to be config ured to control incoming/ou tgoing packet flow for IPSec to work properly (with Advanced LAN Access).
AP-5131 Access Poin t Product Referen ce Guide B-20 • The interface para meter has been removed from the Auto Update config uration feature. • The W AN interface now has http/telnet/https/ssh connectivity enabled by default.
Customer Support Symbol T echnologies provides its customers with prompt and accurate customer support. Use the Symbol Support Center as the primary contact fo r any technical problem, questio n or support issu e involving Symbol products.
AP-5131 Access Poin t Product Referen ce Guide C-2 North American Contacts Inside North America: Symbol T echnologies, Inc. One Symbol Plaza Holtsville, New Y ork 11742-1300 T elephone: 1-631-738-2400.
Customer Support C-3 W eb Support Sites MySymbolCare http://www .symb ol.com/services/msc /msc.html Symbol Services Homepage http://symbol.com/servic es Symbol Software Updates http://symbol.com/servic es/downloads Symbol Developer Program http:// devzone .
AP-5131 Access Poin t Product Referen ce Guide C-4.
A access options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-23 access point CAM . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-16 encryption . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-11 PSP .
AP-5131 Access Poin t Product Referen ce Guide IN-6 CAM stations . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-16 PSP stations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-16 BSSID . . . . . . . . . . . . . . . . . . . . . .
IN-7 I importing certificates . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-8 importing/exp orting conf igurations . . . . . . . . . . . . . . . 4-37 installation, ceiling . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-17 installation, ceiling T-Bar .
AP-5131 Access Poin t Product Referen ce Guide IN-8 R radio options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-6 radio, retry histogram . . . . . . . . . . . . . . . . . . . . . . . . . . 7-22 radio, statistics . . . . . . .
IN-9 WAN, statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-2 WEP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-11 WEP encryption . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-9, 1-11 Wi-Fi Protected Access (WPA) .
AP-5131 Access Poin t Product Referen ce Guide IN-10.
.
Symbol T echnolog ies, Inc. One Symbol Plaza Holtsville, New Y ork 11742-1300 72E-94168-01 Revision A - November 2006.
Ein wichtiger Punkt beim Kauf des Geräts Symbol Technologies AP-5131 (oder sogar vor seinem Kauf) ist das durchlesen seiner Bedienungsanleitung. Dies sollten wir wegen ein paar einfacher Gründe machen:
Wenn Sie Symbol Technologies AP-5131 noch nicht gekauft haben, ist jetzt ein guter Moment, um sich mit den grundliegenden Daten des Produkts bekannt zu machen. Schauen Sie zuerst die ersten Seiten der Anleitung durch, die Sie oben finden. Dort finden Sie die wichtigsten technischen Daten für Symbol Technologies AP-5131 - auf diese Weise prüfen Sie, ob das Gerät Ihren Wünschen entspricht. Wenn Sie tiefer in die Benutzeranleitung von Symbol Technologies AP-5131 reinschauen, lernen Sie alle zugänglichen Produktfunktionen kennen, sowie erhalten Informationen über die Nutzung. Die Informationen, die Sie über Symbol Technologies AP-5131 erhalten, werden Ihnen bestimmt bei der Kaufentscheidung helfen.
Wenn Sie aber schon Symbol Technologies AP-5131 besitzen, und noch keine Gelegenheit dazu hatten, die Bedienungsanleitung zu lesen, sollten Sie es aufgrund der oben beschriebenen Gründe machen. Sie erfahren dann, ob Sie die zugänglichen Funktionen richtig genutzt haben, aber auch, ob Sie keine Fehler begangen haben, die den Nutzungszeitraum von Symbol Technologies AP-5131 verkürzen könnten.
Jedoch ist die eine der wichtigsten Rollen, die eine Bedienungsanleitung für den Nutzer spielt, die Hilfe bei der Lösung von Problemen mit Symbol Technologies AP-5131. Sie finden dort fast immer Troubleshooting, also die am häufigsten auftauchenden Störungen und Mängel bei Symbol Technologies AP-5131 gemeinsam mit Hinweisen bezüglich der Arten ihrer Lösung. Sogar wenn es Ihnen nicht gelingen sollte das Problem alleine zu bewältigen, die Anleitung zeigt Ihnen die weitere Vorgehensweise – den Kontakt zur Kundenberatung oder dem naheliegenden Service.
