Gebruiksaanwijzing /service van het product WDAP-2000PE van de fabrikant Planet Technology
Ga naar pagina of 53
54/108Mbps Super A+G Wireless Access Point WDAP-2000PE User’s Manual.
Copyright Copyright © 2005 by PLANET Technology Corp. All rights reserved. No part of this publica- tion may be reproduced, transmitted, transcribed, stored in a retr ieval system, or translated into.
Safety This equipment is designed with t he utmost care for the safety of those w ho install and use it. However, special attention must be paid to the dangers of electric shock and static electricity when w orking w ith electrical equipment.
T ABLE OF C ONTENTS CHAPTER 1 INTRODUCTION ......................................................................... 3 1.1 Package Contents .......................................................................................... 3 1.2 Features .....
4.5.6 Grant Remote Access for Users ........................................................... 40 4.6 802.1x Client Setup on Window s XP .......................................................... 41 4.6.1 Client Certificate Setup ....................
Chapter 1 Introduction PLANET WDAP-2000PE is an IEEE 802.11a+g dual band Wireless Ac- cess Point with PoE. With the latest i nnovative Super A/G te chnology integrated, the maximum data rate of WDAP-2000PE is 108Mbps, which doubles the speed of standard 802.
1.3 Physical Details T op View LED Status Description POWER PWR Steady Green – Power on OFF – Power off Link/A ct Steady Green - Link is active Flashing Green - T ransmit or receive data OFF - No .
Installation Rear View Connector Description ANT T wo dipole antennas are supplied. Best result is usually obtained with the antenna in a vertical position. Pow er Connect the supplied power adapter here. Reset Button In order to clear ALL settings and restore to factory default, holding the Reset Button down continuously for 5 seconds.
Management Web based configuration CLI configuration Message Log Firmware upgrade UPnP support Configuration file Backup/Restore Super A/G mode Up to 108Mbps 802.
Installation 2 Chapter 2 Inst allation 2.1 General Installation Before you proceed w ith the installation, it is necessary that y ou have enough information about the WDAP-2000PE.
3 Chapter 3 Setup & Management 3.1 Overview This chapter describes the setup procedure to make the WDAP-2000PE a valid device on your LAN, and to function as an Access Point for your Wireless Stations. The WDAP-2000PE can be configured using either the Web Browser or the CLI (Command Line Interface).
If you can't connect: It is likely that your PC’s IP address is incompatible w ith the WDAP-2000PE’s IP address. The default IP address of the Wire less Access Point is 192.
A ssign static IP to this device If selected, the followi ng data must be entered. • IP A ddress - The IP Address of this device. Enter an unused IP address from the address range on your LAN. • Subnet Mask - The Netw ork Mask associated with the IP Address above.
Netw ork ID (SSID) The SSID (up to 32 printable ASCII characters) is the unique name identified in a WLAN. The ID prevents the unintentional merging of two co-located WLANs. Please make sure that the SSID of all stations in the same WLAN netwo rk are the same.
rity Policy connect to your netw ork. WEP: WDAP-2000PE allows you to use WEP data encry ption to secure your data from bei ng eavesdropping by unauthorized users. There are WEP64, WEP128 and WEP152 provided for data encryption. You can either use ASCII format or Hex format to enter a key.
3.4 Device Status You can monitor the system general information from the Dev ice Information field. 3.4.1 System Log The system log allows y ou to track events that have occurred in the system. Such event mes- sages can sometimes be helpful in determining the cause of a problem that you may have encountered.
3.4.3 Bridge Table The bridge table shows all MAC entries learned from the wired LAN interface, w ireless clients, and WDS peers (if running in the WDS mode).
3.4.4 Radio Table Radio table lists current Mode, channel, client associated wi th them and transmit packet, re- ceived packet, data error. 3.4.5 Site Survey Table This page shows other APs currently in t he environment that t he system can detect.
3.5 Advanced Settings The advanced settings tab contains more confi gurations for experienced users. However, changing your login passw ord from the default factory setting is highly recommended for secu- rity purposes. 3.5.1 Password Settings The default administrative password is “ passwo rd ”.
Local Management This option allows you to enabl e/disable management from WLAN connection. System A dministration The Access Point allows you to designate special port numbers other than the standard 80 for http for remote management. It also allows y ou to specify the duration of idle time (inactivity) before a web brow ser session times out.
Bridge You can enable/disable the 802. 1d STP (Spanning Tr ee Protocol) function on the bridge of WLAN and Ethernet (i.e. the LAN inter- face). Enable this function can detect loops in your LAN environment and then prot ect the LAN from being saturated with infinite loop traffic.
are enabled, the device can s end out TRAP messages automati- cally to the TRAP manager if configured. A ssign System Informa- tion System Name: A name that you assign to y our WDAP-2000PE. It is an alphanumeric string of up to 30 characters. System Location: Description of where y our WDAP-2000PE is physically located.
Disable MAC address control list When selected, no MAC address filtering will be performed. Enable GRANT address control list When selected, data traffic from onl y the specified devices in the table will be allow ed in the netw ork.
Enable VLA N for all SSIDs Once this function is enabled, you can specify an individual VLAN ID and priority tag for each SSID. In this w ay, you can separate traffic from stations using differ ent SSIDs and so protect the wired network from being accessed by unauthorized stations using certain SSIDs.
Select security policy Configure the security policy for the SSID. 3.5.6 Wireless Settings Beacon interval The WDAP-2000PE broadcasts beacon frames regularly to announce its existence. Default is 100, i.e., ten beacons per second. Decreasing the beacon interval makes passive scanning more reliable and faster.
Fragmentation When the size of a unicast fr ame exceeds t he fragmentation threshold, it will be fragmented before the transmission. It should have a value of 256-2346 bytes, w ith a default of 2346 . If you experience a high packet error rate, you should slightly decrease the Fragmentation Threshold.
ure WDS devices. A ccess Point This means the device is working on AP-only Mode, and is for wireless client users only . Wireless Distribution System (Bridge mode ) This mode can help you to group different wired netw orks to- gether by multiple WDAP-2000PE.
Enable Primary/Seconda ry Server Check this if you w ant to enabl e RADIUS authentic ation using the primary/secondary Radius Server . If both are selected, the pri- mary server w ill be tried first. Server IP The IP address of the RADIUS server. Port number The port number that your RADI US server uses for authentica- tion.
Ping flooding filtering When the ping (to the AP) traffi c reaches the configured degree (e.g. High, Low), any more such ping packets will be dropped. Higher degree allows less ping traffic to the AP.
3.6 System Tools 3.6.1 Firmware Upgrade You can upgrade the firmware of y our WDAP-2000PE. Normally, this is done w hen a new version of firmware is released.
3.6.2 Configuration Save and Restore You can save system configuration settings to a file, and later dow nload it back to the WDAP- 2000PE by follow ing the steps below.
3.6.3 Factory Default You can reset the configuration of your WDAP-2000PE to the factory default settings. Step 1: Select Factory Default from the Sys tem Tools menu. Step 2: Click YES to go ahead and restore the configur ation to the factory default.
Chapter 4 PC and Server Configuration 4.1 Overview All Wireless Stations need to have settings which match the Wireless Access Point. These settings depend on the mode in which the WDAP-2000PE is being used.
Security • The Pre-shared Key entered on the WDAP-2000PE must also be entered on each Wireless client. • The Encryption method (e.g. TKIP, AES) must be set to match the WDAP-2000PE. 4.4 Using WPA This is the most secure and most complex system. WPA mode provides greater security and centralized management, but it is more complex to configure.
• rras • webserver (IIS) • Radius Server (Internet Authentication Service) • Certificate Authority 4.5.1 Windows 2000 Domain Controller Setup 1. Run dcpromo.exe from the command prompt. 2. Follow all of the default prompts, ens ure that DNS is installed and enabled during installation.
6. Enter the information for the Certificate Authority, and click Next . 7. Click Next if you don't want to change t he CA's configuration data. 8. Installation will warn you that Internet Information Services are running, and must be stopped before continuing.
3. Click Next when the New Scope Wizard Begins. 4. Enter the name and description for the scope, click Next . 5. Define the IP address range. Change the subnet mask if necessary. Click Next . 6. Add exclusions in the address fields if required. If no exclusions are required, leave it blank.
11. If you don't want a WINS server, just click Next . 12. Select Yes, I want to activate this scope now . Click Next , then Finish . 13. Right-click on the server, and select Authorize . It may take a few minutes to complete. 4.5.4 Certificate Authority Setup 1.
4. Select Start - Programs - Administrative Tools - Active Directory Users and Com- puters . 5. Right-click on your active directory domain, and select Properties.
7. Select Computer Configuration - Windows Settings - Security Settings - Public Key Policies , right-click Automatic Certificate Request Settings - New - Automatic Certificate Request . 8. When the Certificate R equest Wizard appears, click Next . 9.
10. Ensure that your certificat e authority is checked, then click Next . 11. Review the policy change information and click Finish . 12. Click Start - Run , type cmd and press enter. Enter secedit /refreshpolicy machine_policy This command may take a few minutes to take effect.
9. Click Permitted , then OK . Select Next . 10. Select Grant remote access permission . Click Next . 11. Click Edit Profile... and select the Authentication tab. Enable Extensible Authenti- cation Protocol , and select Smart Card or other Certificate .
3. Select the Dial-in tab, and enable Allow access . Click OK . 4.6 802.1x Client Setup on Windows XP Windows XP ships with a complete 802.1x client implementation. If using Windows 2000, you can install SP4 (Service Pack 4) to gain the same functionality.
4. On the first screen (below), select Request a certificate , click Next . 5. Select User certificate request and select User Certificate , the click Next .
6. Click Submit . 7. A message will be displayed, then the certificate will be returned to you. Click Install this certificate . 43.
8. . You will receive a confirmation message. Click Yes . 9. Certificate setup is now complete. 4.6.2 802.1x Authentication Setup 1. Open the properties for the wireless connection, by selecting Start - Control Panel - Network Connections. 2. Right Click on the Wireless Network Connection , and select Properties .
Encryption Settings The Encryption settings must match t he APs (WDAP-2000PE) on the Wireless net- work you want to join. • Windows XP will detect any available Wirele ss networks, and allow you to config- ure each network independently. • Your network administrator can advise you of the correct settings for each net- work.
2. Select the wireless network from the Available Networks list, and click Configure . 3. Select and enter the correct values, as advised by your Network Administrator. For example, to use EAP-TLS, you would enable Data encryption , and click the checkbox for the setting: The key is provided for me automatically , as shown be- low.
4.7 Using 802.1x Mode The procedures are similar to using 802.1x. The only difference is that on your client, you must NOT enable the setting: The key is provided for me automatically . Instead, you must enter the WEP key m anually, ensuring it matches the WEP key used on the Access Point.
A Appendix A T roubleshooting Problem 1: Can't connect to the WDAP-2000PE to configure it. Solution 1: Check the following: • The WDAP-2000PE is properly inst alled, LAN connections are OK, and it is powered ON. Che ck the LEDs for port status.
Appendix B Command Line Interface If desired, the Command Line Interface (CLI) can be used for configurati on. This creat possibility of creating scripts to perform common configuration changes. es the B Using the CLI - Telnet 1. Start your Telnet client, and es tablish a connection to the WDAP-2000PE.
Description: Set the HTTP server port (f or device management) to the one specified. set http timeout <timeout value in minutes, 1-60> Description: Set the timeout val ue for the HTTP management session. set prompt <string up to 15 ch aracters> Description: Set the command line prompt.
show snmp statistics Description: Display the cu rrent SNMP statistics. show trap manager [<string u p to 30 characters>] Description: Display the settings of the s pecified SNMP trap manager. If no trap manager is specified, this command displays the settings of all trap managers.
Een belangrijk punt na aankoop van elk apparaat Planet Technology WDAP-2000PE (of zelfs voordat je het koopt) is om de handleiding te lezen. Dit moeten wij doen vanwege een paar simpele redenen:
Als u nog geen Planet Technology WDAP-2000PE heb gekocht dan nu is een goed moment om kennis te maken met de basisgegevens van het product. Eerst kijk dan naar de eerste pagina\'s van de handleiding, die je hierboven vindt. Je moet daar de belangrijkste technische gegevens Planet Technology WDAP-2000PE vinden. Op dit manier kan je controleren of het apparaat aan jouw behoeften voldoet. Op de volgende pagina's van de handleiding Planet Technology WDAP-2000PE leer je over alle kenmerken van het product en krijg je informatie over de werking. De informatie die je over Planet Technology WDAP-2000PE krijgt, zal je zeker helpen om een besluit over de aankoop te nemen.
In een situatie waarin je al een beziter van Planet Technology WDAP-2000PE bent, maar toch heb je de instructies niet gelezen, moet je het doen voor de hierboven beschreven redenen. Je zult dan weten of je goed de alle beschikbare functies heb gebruikt, en of je fouten heb gemaakt die het leven van de Planet Technology WDAP-2000PE kunnen verkorten.
Maar de belangrijkste taak van de handleiding is om de gebruiker bij het oplossen van problemen te helpen met Planet Technology WDAP-2000PE . Bijna altijd, zal je daar het vinden Troubleshooting met de meest voorkomende storingen en defecten #MANUAl# samen met de instructies over hun opplosinge. Zelfs als je zelf niet kan om het probleem op te lossen, zal de instructie je de weg wijzen naar verdere andere procedure, bijv. door contact met de klantenservice of het dichtstbijzijnde servicecentrum.
