ac100 user manual

40
BroVis Operating Manual Air Client-100

Upload: sandip-das

Post on 05-Apr-2015

1.941 views

Category:

Documents


9 download

TRANSCRIPT

Page 1: AC100 User Manual

BroVis Operating Manual

Air Client-100

Page 2: AC100 User Manual

AC100 User Manual

© 2004 Proprietary Information of BroVis Wireless Networks

Table of Contents

Chapter 1 Introduction........................................................................................... 2

1.1 Features and Benefits .......................................................................................... 2

1.2 Applications2.......................................................................................................2

Chapter 2 Hardware Installation………………………………………………….3

2.1 Package Contents ................................................................................................ 3

2.2 System Requirements.......................................................................................... 3

2.3 Mechanical Description ...................................................................................... 4

2.4 Setting up the AC100 ......................................................................................... 4

2.5 Installing AC100 ................................................................................................ 4

2.6 Installing and Aligning the AC100..................................................................... 5

Chapter 3 Configuration…………………………………………………………7

3.1 Command Line Interface……………………………………………………….6

3.2 CLI Commands................................................................................................... 6

Chapter 4 Sample Configuration........................................................................ 333

4.1 Sample First-time Configuration .................................................................... 333

Page 3: AC100 User Manual

© 2004 Proprietary Information of BroVis Wireless Networks 1

The information in this guide is subject to change without notice. BROVIS WIRELESS

NETWORKS INC. OR ITS SUBSIDIARIES AND AFFILIATES SHALL NOT BE

LIABLE FOR ERRORS OR OMISSIONS CONTAINED HEREIN; NOR FOR

INCIDENTAL OR CONSEQUENTIAL DAMAGES RESULTING FROM THE USE

OF THIS CONTENT. AC100 is trademark of BROVIS WIRELESS NETWORKS INC.

AND BROVIS WIRELESS NETWORKS (P) LTD. Other trademarks or brand names

mentioned herein are trademarks or registered trademarks of their respective companies.

© 2004 Proprietary Information of BroVis Wireless Networks and BroVis Wireless

Networks (P) LTD. All rights reserved. No part of this document may be copied or

reproduced in any form or by any means without the prior written consent of BroVis

Wireless Networks. BROVIS WIRELESS NETWORKS makes no warranty with respect

to this documentation and disclaims any implied warranties of merchantability, quality,

or fitness for any particular purpose. The information in this document is subject to

change without notice. BROVIS WIRELESS NETWORKS reserves the right to make

revisions to this publication without obligation to notify any person or entity of any such

changes. Limited Warranty: BROVIS WIRELESS NETWORKS warrants all its products

to be free of manufacturing defects in workmanship and materials, under normal use and

service, for the applicable warranty term. All BROVIS WIRELESS NETWORKS

products carry a standard 90 -day limited warranty from the date of purchase from

BROVIS WIRELESS NETWORKS or its Authorized Reseller. BROVIS WIRELESS

NETWORKS may, at its own discretion, repair or replace any product not operating as

warranted with a similar or functionally equivalent product, during the applicable

warranty term. The warranty and agency compliance applies only to production orders

and NOT for field trial orders or pilot evaluation orders.

Page 4: AC100 User Manual

AC100 User Manual

© 2004 Proprietary Information of BroVis Wireless Networks

Chapter 1 Introduction

The AirClient 100 (AC100) is a high-performance 802.11b/g standards based Wireless

access device configurable for many outdoor broadband access wireless applications. It

uses BroVis' True EXOR™

breakthrough wireless technology combined with WIOS™

software platform to enable cost-effective, reliable, secure and easily manageable outdoor

deployments.

1.1 Features and Benefits

• Broadband Wireless Access applications (P-P,P-MP,Wifi Hot Zones,etc)

• Integrated Antenna

• Advanced security features

• Integrated Infrastructure Management

• Enterprises LAN extensions

• Flexible Power Management(Standard Power , High Power)

• Complete Weatherproofing

• High Reliability Components

1.2 Applications

Outdoor Wireless Connectivity

Outdoor broadband wireless distribution is a highly cost effective and reliable

wireless access system optimized for enterprise, campus and SOHO, Wifi hotspots, Wifi

hot Zones, Public safety departments, etc that ensures robust, secure and high speed

service. It also serves as an optimal solution that offers high speed internet access, data

and voice services for businesses in urban and suburban areas.

Some Key Applications:

• Setting up extended coverage, high performance Wi-Fi hot zones &

hotspots.

• Connecting a Corporate office and branch office.

• Connecting a Corporate office to a local POP

Page 5: AC100 User Manual

AC100 User Manual

© 2004 Proprietary Information of BroVis Wireless Networks

Chapter 2 Hardware Installation

This chapter describes initial setup of the AC100 system.

Before You Begin

Thank you for purchasing Brovis Wireless Networks of Wireless AC100 series products.

These Products offer fast, reliable wireless connectivity with considerable cost savings

over wired alternatives. Utilizing 2.4 GHz ISM frequency spectrum, the AC100 can

easily replace a wired inter office connection and seamlessly integrate into legacy 10/100

Mbps Ethernet LAN and backbone connectivity. Please check the package contents

before you begin.

2.1 Package Contents

Be sure the following items are in the package. If the package is not complete, please

contact BroVis Wireless Networks technical support, or return the package to the vendor

or dealer where you purchased the product.

� AC100 either SP or HP Mode With POE accessories

� UTP Cable

� Installation manual

Note Please contact [email protected] for support. Please inform us if there are any

incorrect, missing or damaged parts. If possible, retain the carton, including the original

packing materials. Use them again to repack the product if there is a need to return it for

repair.

2.2 System Requirements

Before you install the AC100 CPE, be sure you have the following items on- hand:

o An AC power outlet 100-240V (50/60 Hz which will supply power to the AC100

CPE through power over Ethernet cable)

o A 10/100 Base-T (UTP) Ethernet cable drop

o An available RJ -45 (UTP) port on the 10/100Mbps Ethernet hub or switch

Page 6: AC100 User Manual

AC100 User Manual

© 2004 Proprietary Information of BroVis Wireless Networks

Important The AC100 CPE has been designed to withstand normal handling procedures,

but reasonable precautions should be exercised during the installation, particularly with

regard to static discharge.

2.3 Mechanical Description

Waterproof RJ-45 connector Connect to the POE with UTP cable.

UTP Cable This cable is attached to the AC100 CPE. (default cable length)

2.4 Setting up the AC100 CPE

• The AC100 CPE is set up as SRPP unit and connects to your network (back bone)

with a standard Ethernet cable. Power to the unit is provided via a POE (Power

over Ethernet) system.

Tip Before you mount the AC100 CPE to a fixed location, consider the following

requirements to determine the optimal placement:

• The cable length from the Ethernet network to the AC100 must not exceed 328 ft

(100 meters).

• Placement must allow for easy access to disconnect the AC100 CPE unit from the

AC power outlet if necessary.

2.5 Installing AC100 CPE

Follow these steps to install the AC100 CPE:

• Connect the power adapter cable to the POE power injector and plug the power

adapter into the wall outlet.

Warning: Use only the power adapter supplied with this package in order to

prevent damage and void warranty.

Page 7: AC100 User Manual

AC100 User Manual

© 2004 Proprietary Information of BroVis Wireless Networks

• Connect the Ethernet cable — The Ethernet cable from the AC100 CPE should be

connected to the power out of the POE. An Ethernet cable from the data in of the

POE is connected to a 10/100Mbps ethernet network through a switch or router.

Fig 2: AC100 POE Connection Diagram

2.6 Installing and Aligning the CPE

To ensure maximum performance and stability of your wireless connection, it is crucial

that you determine the right locations based on the following criteria:

• Establish a good signal path, ideally with visual line of sight and adequate Fresnel

clearance, between the two end points.

• Minimize the distance between the two end points.

• Minimize reflections from other objects

Page 8: AC100 User Manual

AC100 User Manual

© 2004 Proprietary Information of BroVis Wireless Networks

Chapter 3 Configuration

3.1 Command Line Interface

The AC-100 CPE can be configured through the command line interface (CLI). The CLI

allows viewing and modification of the configuration from a terminal or PC through a

Telnet connection. To access the CLI, use Telnet to log in to the device using its IP

address. The CLI prompts for a login user name and password and displays a version

banner and a CLI prompt. The CLI is now ready to accept commands.

User Login

The default login username is “Admin” and the default password is

“5up”.

login: Admin

Password: ***

BroVis Wireless Networks Base Station Rev 3.3.0.136

->

Note: When the login and password are set to a non-null string, both the login and

password entries are case-sensitive.

User Logoff

--> quit

After quitting the CLI, re-initiate the login sequence to log into the CLI.

Page 9: AC100 User Manual

AC100 User Manual

© 2004 Proprietary Information of BroVis Wireless Networks

3.2 CLI Commands

All CLI commands are case-insensitive. Enter either the entire CLI command string or

partial unique CLI command string.

For example:

--> get rate

Data Rate: best

--> g rate

Data Rate: best

Note: The configuration changes do not take effect until the CPE is rebooted.

List of CLI Commands with Arguments

To find a complete list of available CLI commands with their respective arguments, type

“?” or “help”.

CLI Command Description

config wlan config wlanX

del acl Delete Access Control List

del key Delete Encryption key

find bss Find APS

find channel Find Available Channel

find all Find All APS

ftp Software update via FTP

get acl Display Access Control List

get aging Display Aging Interval

get association Display Association Table

get authentication Display Authentication Type

get autochannelselect Display Auto Channel Select

get beaconinterval Display Beacon Interval

get burstSeqThreshold Display Max Number of frames in a Burst

get burstTime Display Burst Time

get channel Display Radio Channel

Page 10: AC100 User Manual

AC100 User Manual

© 2004 Proprietary Information of BroVis Wireless Networks

get cipher Display Encryption cipher

get config Display Current Running Configuration

get countrycode Display Country Code

get ctsmode Display CTS mode

get ctsrate Display CTS rate

get ctstype Display CTS type

get domainsuffix Display Domain Name Server suffix

get dtim Display Data Beacon Rate (DTIM)

get encryption Display Encryption Mode

get extendedchanmode Display Extended Channel Mode

get fragmentthreshold Display Fragment Threshold

get frequency Display Radio Frequency (MHz)

get gateway Display Gateway IP Address

get groupkeyupdate Display Group Key Update Interval (in

Seconds)

get hardware Display Hardware Revisions

get hostipaddr Display Host IP Address

get ipaddr Display IP Address

get ipmask Display IP Subnet Mask

get key Display Encryption Key

get keyentrymethod Display Encyrption Key Entry Method

get keysource Display Source Of Encryption Keys

get login Display Login User Name

get nameaddr Display IP address of name server

get operationMode Display Operation Mode

get power Display Transmit Power Setting

get radiusname Display RADIUS server name or IP addres

get radiusport Display RADIUS port number

get rate Display Data Rate

get remote Ap Display Remote AP's Mac Address

get rtsthreshold Display RTS/CTS Threshold

Page 11: AC100 User Manual

AC100 User Manual

© 2004 Proprietary Information of BroVis Wireless Networks

get shortpreamble Display Short Preamble Usage

get shortslottime Display Short Slot Time Usage

get sntpserver Display SNTP/NTP Server IP Address

get ssid Display Service Set ID

get ssidsuppress Display SSID Suppress Mode

get station Display Station Status

get SuperG Display SuperG Feature Status

get systemname Display Access Point System Name

get telnet Display Telnet Mode

get timeout Display Telnet Timeout

get tzone Display Time Zone Setting

get uptime Display UpTime

get wirelessmode Display Wireless LAN Mode

get wlanstate Display Wlan State

help Display CLI Command List

ping Ping

reboot Reboot Access Point

run Run command file

quit Logoff

set 11gonly disable Disable 11g only allowed

set 11gonly enable Enable 11g only allowed

set 11goptimize Set 11g Optimization Level

set 11goverlapbss disable Disable Overlapping APS protection

set 11goverlapbss enable Enable Overlapping APS protection

set acl allow Add MAC address to the ACL

set acl enable Select Restricted Access

set acl deny Add MAC address to the disabled ACL

set acl disable Select Unrestricted Access

set acl keymap Add Encryption key mapping for MAC address

set acl strict Select Restricted (w/ACL match) Access

set aging Set Aging Interval

Page 12: AC100 User Manual

AC100 User Manual

© 2004 Proprietary Information of BroVis Wireless Networks

set authentication open-system Select Open-System Authentication Type

set authentication shared-key Select Shared-Key Authentication Type

set authentication auto Select auto Authentication Type

set authentication WPA Select Authentication WPA Type

set authentication WPA-PSK Select Authentication WPA-PSK Type

set autochannelselect disable Disable Automatic Channel Selection

set autochannelselect enable Enable Automatic Channel Selection

set beaconinterval Modify Beacon Interval

set burstSeqThreshold Set Max Number of frames in a Burst

set burstTime Set Burst Time

set channel Set Radio Channel

set cipher wep Select wep

set cipher aes Select aes

set cipher tkip Select tkip

set cipher auto Select cipher through negotiation

set countrycode Set Country Code

set ctsmode Set CTS Mode

set ctsrate Set CTS Rate

set ctstype Set CTS Type

set domainsuffix Set Domain Name Server Suffix

set dtim Set Data Beacon Rate (DTIM)

set encryption disable Disable Encryption

set encryption enable Enable Encryption

set extendedchanmode disable Disable Extended Channel Mode

set extendedchanmode enable Enable Extended Channel Mode

set factorydefault Restore to Default Factory Settings

set fragmentthreshold Set Fragment Threshold

set frequency Set Radio Frequency (MHz)

set gateway Set Gateway IP Address

set groupkeyupdate Set Group Key Update Interval (in Seconds)

set hostipaddr Set Host IP address

Page 13: AC100 User Manual

AC100 User Manual

© 2004 Proprietary Information of BroVis Wireless Networks

set ipaddr Set IP Address

set ipmask Set IP Subnet Mask

set key default Set Default Encryption Key

set key 40 Set 40-bit Encryption Key

set key 104 Set 104-bit Encryption Key

set key 128 Set 128-bit Encryption Key

set keyentrymethod hexadecimal Key contains (0 - 9, A - F)

set keyentrymethod asciitext Key contains keyboard characters

set keysource flash All keys will be read from flash (no key

derivation)

set keysource server All keys will be derived from authentication server

set keysource mixed Keys read from flash or derived from authentication

server

set login Modify Login User Name

set nameaddress Set Name Server IP address

set operationMode AP Operating as Base Station

set operationMode sta Operating as Wireless Client

set operationMode ppt Operating as Wireless Bridge

set operationMode mpt Operating as Multi-point Bridge

set operationMode repeater Operating as Wireless Repeater

set password Modify Password

set passphrase Modify Pass phrase

set power full Set maximum (normal) transmit power

set power half Set fractional (1/2) transmit power

set power quarter Set fractional (1/4) transmit power

set power eighth Set fractional (1/8) transmit power

set power min Set minimum transmit power

set radiusname Set RADIUS name or IP address

set radiusport Set RADIUS port number

set radiussecret Set RADIUS shared secret

set rate best Select best data rate

Page 14: AC100 User Manual

AC100 User Manual

© 2004 Proprietary Information of BroVis Wireless Networks

set rate 1 Select 1 Mbps

set rate 2 Select 2 Mbps

set rate 5.5 Select 5.5 Mbps

set rate 11 Select 11 Mbps

set rate 6 Select 6 Mbps

set rate 9 Select 9 Mbps

set rate 12 Select 12 Mbps

set rate 18 Select 18 Mbps

set rate 24 Select 24 Mbps

set rate 36 Select 36 Mbps

set rate 48 Select 48 Mbps

set rate 54 Select 54 Mbps

set remote AP Set Remote AP's Mac Address

set rtsthreshold Set RTS/CTS Threshold

set shortpreamble disable Disable Short Preamble (use only long)

set shortpreamble enable Enable Short and Long Preamble

set shortslottime disable Disable Short Slot Time (use only long)

set shortslottime enable Enable Short Slot Time

set sntpserver Set SNTP/NTP Server IP Address

set ssid Set Service Set ID

set ssidsuppress enable Enable SSID suppress mode

set ssidsuppress disable Disable SSID suppress mode

set SuperG enable Enable SuperG Features

set SuperG disable Disable SuperG Features

set systemname Set Access Point System Name

set telnet disable Disable Telnet access

set telnet enable Enable Telnet access

set timeout Set Telnet Timeout

set tzone Set Time Zone Setting

set wlanstate disable Disable wlan

set wlanstate enable Enable wlan

Page 15: AC100 User Manual

AC100 User Manual

© 2004 Proprietary Information of BroVis Wireless Networks

set wirelessmode 11a Enable 802.11a

set wirelessmode 11b Enable 802.11b

set wirelessmode 11g Enable 802.11g

set wirelessmode 108g static Enable 802.11g Static Turbo

set wirelessmode 108g dynamic Enable 802.11g Dynamic Turbo

set wirelessmode turbo static Enable 802.11a Static Turbo

set wirelessmode turbo dynamic Enable 802.11a Dynamic Turbo

timeofday Display Current Time of Day

Get/Set Commands

Association of 11gonly Stations

Use the get/set 11gonly command to get or set the association of 11g stations to 11g

AC100. If enabled, the AP basic rate includes OFDM rates, thus preventing 802.11b

stations from associating. If disabled, the AC100 will allow both 802.11b and 802.11g

stations to associate.

-> get 11gonly

11g Only Allowed: Disabled

-> set 11gonly enable

11g Only Allowed: Enabled

-> set 11gonly disable

11g Only Allowed: Disabled

802.11g Protection Level

Use the get/set 11goptimize command to get or set the 802.11g protection level. 802.11g

protection is invoked by looking at 802.11b traffic. Default values for the thresholds are

20 802.11b frames per period. Protection is turned on as soon as the upper threshold is

reached.

-> get 11goptimize

11g Optimization Level: 1

-> set 11goptimize 1

11g Optimization Level: 1

Page 16: AC100 User Manual

AC100 User Manual

© 2004 Proprietary Information of BroVis Wireless Networks

Monitoring all Beacons

Use the get/set 11goverlapbss command to get or set the ability to monitor all beacons on

active channels and enable protection accordingly (default). If enabled, CTS protection is

automatic if a beacon from an 802.11b bss is detected, or a beacon from an 802.11g AP

that has active 802.11b station associated.

-> get 11goverlapbss

11g Overlapping BSS Protection: Disabled

-> set 11goverlapbss enable

11g Overlapping BSS Protection: Enabled

-> set 11goverlapbss disable

11g Overlapping BSS Protection: Disabled

Aging Interval

Use the get/set aging command to get or set the value of the aging value for both station

and bridge entities. The default value is 300 seconds. A zero value will disable aging

entirely.

-> get aging

Aging Interval: 300 seconds

-> set aging 300

Aging Interval: 300 seconds

Association Table

Use the get association command to get a list of associated stations.

-> get association

STA DEV MAC Address State Key type

AP wlan1 00:03:7F: BF:05:BA up

Authentication Type

Use the get/set authentication command to view or modify the authentication type.

-> get authentication

Authentication Type: Open System

-> set authentication shared-key

Page 17: AC100 User Manual

AC100 User Manual

© 2004 Proprietary Information of BroVis Wireless Networks

Authentication Type: Shared Key

-> set authentication open-system

Authentication Type: Open System

Auto Channel

Use the get/set autochannelselect command to get or set the auto channel select state.

-> get autochannelselect

Auto Channel Select: Enabled

-> set autochannelselect disabled

Auto Channel Select: Disabled

-> set autochannelselect enabled

Auto Channel Select: Enabled

Beacon Interval

Use the get/set beaconinterval command to display or modify the beacon interval. The

beacon interval is a value between 20 and 1000 time units (1.024 microsecond.).

-> get beaconinterval

Beacon Interval: 100

-> set beaconinterval 100

Beacon Interval: 100

Channel Display

Use the get/set channel command to display or modify the IEEE channel number.

-> get channel

Radio Frequency: 2412 MHz (IEEE 1)

-> set channel 2

Radio Frequency: 2417 MHz (IEEE 2)

Encryption Cipher

Use the get/set cipher command to display or modify the encryption cipher. Select AES,

Auto (select cipher through negotiation), TKIP, or WEP.

-> get cipher

Page 18: AC100 User Manual

AC100 User Manual

© 2004 Proprietary Information of BroVis Wireless Networks

Cipher: Auto

-> set cipher aes

Cipher: AES

-> set cipher auto

Cipher: Auto

-> set cipher tkip

Cipher: TKIP

-> set cipher wep

Cipher: WEP

Display Configuration

Use the get config command to display the access point configuration.

Country Code

Use the get/set countrycode command to display or modify the country code of the

regulatory domain.

-> get countrycode

Country Code: NA

-> set countrycode NA

Country Code: NA

To see a list of the country codes, type set country code.

CTS Protection Mode

Use the get/set ctsmode command to display or modify the CTS protection mode.

-> get ctsmode

CTS Mode: AUTO

-> set ctsmode auto

-> set ctsmode always

-> set ctsmode none

CTS Protection Rate

Use the get/set ctsrate command to display or modify the CTS protection rate.

Page 19: AC100 User Manual

AC100 User Manual

© 2004 Proprietary Information of BroVis Wireless Networks

-> get ctsrate

CTS Rate: 11 Mbps

-> set ctsrate 1

-> set ctsrate 2

-> set ctsrate 5.5

-> set ctsrate 11

CTS Protection Type

Use the get/set ctstype command to display or modify the CTS protection type.

-> get ctstype

CTS Mode: CTS-ONLY

-> Set ctstype cts-only

-> set ctstype rts-cts

Domain Name Server

Use the get/set domainsuffix command to display or modify the domain name server

suffix.

-> get domainsuffix

DNS Domain Name Server Suffix:

-> set domainsuffix users.users.com

DNS Domain Name Server Suffix: users.usere.com

DTIM

Use the get/set dtim command to display or modify the DTIM. The DTIM is a value

between 1 and 16384.

-> get dtim

DTIM: 1

-> set dtim 1

DTIM: 1

Encryption Mode

Use the get/set encryption command to display or modify the encryption mode.

Page 20: AC100 User Manual

AC100 User Manual

© 2004 Proprietary Information of BroVis Wireless Networks

-> get encryption

Encryption: Enabled

-> set encryption disable

Encryption: Disabled

-> set encryption enable

Encryption: Enabled

Extended Channel Mode

Use the get/set extended channel mode command to display or modify the extended

channel mode when operating in 802.11b/g mode. Extended channel mode displays

channels 12, 13, and 14, if the AC100 is in a Regulatory Domain that allows the use of

these channels.

-> get extendedchanmode

Extended Channel Mode: Enabled

-> set extendedchanmode disable

Extended Channel Mode: Disabled

-> set extendedchanmode enable

Extended Channel Mode: Enabled

Fragmentation Length Threshold

Use the get/set fragmentthreshold command to display or modify the fragmentation

length threshold. The fragmentation length threshold is a value between 256 and 2346.

-> get fragmentthreshold

Fragmentation Threshold: 500

-> set fragmentthreshold 2346

Fragmentation Threshold: 2346

Radio Channel

Use the get/set frequency command to display or modify the radio channel.

-> get frequency

Radio Frequency: 2442 MHz (IEEE 7)

-> set frequency 2442

Radio Frequency: 2442 MHz (IEEE 7)

Page 21: AC100 User Manual

AC100 User Manual

© 2004 Proprietary Information of BroVis Wireless Networks

Gateway IP Address

Use the get/set gateway command to display or modify the gateway IP address.

-> get gateway

Gateway IP Address:

-> set gateway 0.0.0.0

Gateway IP Address: 0.0.0.0

Group Key Update

Use the get/set groupkeyupdate command to display or modify the group key update

interval. Enter an interval value between 15 and 300 seconds. Setting it to zero disables

the interval.

-> get groupkeyupdate

Group Key Update: 300

-> set groupkeyupdate 200

Group Key Update: 200

Display Hardware

Use the get hardware command to display the vendor ID and chip (MAC, PHY and

analog) revisions.

-> get hardware

PCI Vendor ID: 0x168c, Device ID: 0x13

Sub Vendor ID: 0x168c, Sub Device ID: 0x13

>>WLAN revisions: mac 3.0 phy 2.0 analog 1.6

Host IP Address

Use the get/set hostipaddr command to display or modify the Operating Host IP address.

-> get hostipaddr

Host IP Address: 192.168.1.1

-> set hostipaddr 192.168.1.4

Host IP Address: 192.168.1.4

Page 22: AC100 User Manual

AC100 User Manual

© 2004 Proprietary Information of BroVis Wireless Networks

IP Subnet Mask

Use the get/set ipmask command to display or modify the IP subnet mask.

-> get ipmask

IP Subnet Mask: 255.255.255.0

->setipmask 255.255.0.0

IP Subnet Mask: 255.255.0.0

Key Entry Method

Use the get/set keyentrymethod command to display or modify the method of entering

encryption keys; either ASCII or hexadecimal.

-> get keyentryrnethod

Key Entry Method: ASCII text

-> set keyentrymethod hexadecimal

Key Entry Method: Hexadecimal - Keys 0-9, A-F

-> set keyentrymethod asciitext - All keyboard characters supported

Key Entry Method: ASCII text

Key Source

Use the get/set keysource command to display or modify the source Of encryption keys.

-> get keysource

Keysource: flash

-> set keysource flash - All keys read from flash (no key derivation)

Keysource: flash

-> set keysource server - All keys derived from 802.lX backend server

Keysource: server

-> set keysource mixed - Keys read from flash (preferred) or derived

from server

Keysource: mixed

Login User Name

Use the get/set login command to display or modify the login user name. The login user

name is a text string of up to 32 characters long. Control characters are not permitted.

Page 23: AC100 User Manual

AC100 User Manual

© 2004 Proprietary Information of BroVis Wireless Networks

-> get login

Login username: Admin

-> set login Admin1

Login Username: Admin1

-> get login

Login Username: Admin1

Operation Mode

Use the get/set operationmode command to modify the operation mode.

-> set operationmode sta

wlan 0 is disabled

wlan 1 is operating as Wireless Client

-> set operationmode repeater

Operating as Wireless Repeater

Login Password

Use the set password command to modify the login password. Type the new password

twice to confirm the use of the new password. The password is a text string of up to 32

characters long. Control characters are not permitted.

-> set password

Old Password: ***

New Password: ******

Type password again to confirm:******

Password confirmed

Transmit Power Setting

Use the get/set power command set or modify the transmit power setting. Set the transmit

power for full, half, quarter, eighth, or minimum. Use this command to decrease the

transmit power, and thereby reducing the range of the radio when more than one Base

station with the same channel frequency are located close together.

-> get power

Transmit Power: full

-> set power half

Page 24: AC100 User Manual

AC100 User Manual

© 2004 Proprietary Information of BroVis Wireless Networks

Transmit Power: half

-> set power quarter

Transmit Power: quarter

-> set power eighth

Transmit Power: eighth

-> set power min

Transmit Power: mm

RADIUS name

Use the get/set radiusname command to display or modify the RADIUS server name or

IP address.

-> get radiusname

RADIUS Address:

-> set radiusname 192.168.1.11

RADIUS Address: 192.168.1.11

RADIUS Server Port

Use the get/set radiusport command to display or modify the RADIUS server port

number.

-> get radiusport

RADIUS Port: 1812

-> set radiusport 1812

RADIUS Port: 1812

Shared Radius Server

Use the set radiussecret command to modify the RADIUS server shared secret password.

-> set radiussecret

Old RADIUS Shared Secret:

New RADIUS Shared Secret: *******

Type RADIUS Secret Again to Confirm,

RADIUS Shared Secret Confirmed

Page 25: AC100 User Manual

AC100 User Manual

© 2004 Proprietary Information of BroVis Wireless Networks

Data Rate

Use the get/set rate command to display or modify the data rate.

-> get rate

Data Rate: best

-> set rate 36

Data Rate: 36

RTS/CTS Threshold

Use the get/set rtsthreshold command to display or modify the RTS/ CTS threshold. The

RTS/CTS threshold is a value between 256 and 2346.

-> get rtsthreshold

RTS Threshold: 2346

-> set rtsthreshold 500

RTS Threshold: 500

Short Preamble

Use the get/set shortpreamble command to display or modify the short preamble (11b)

usage. When enabled, both short and long preambles are used. When disabled, only long

preambles are used.

-> get shortpreamble

Short Preamble: Enabled

-> set shortpreamble disable

Short Preamble: Disabled

-> Set shortpreamble enable

Short Preamble: Enabled

Short Slot Time

Use the get/set shortslottime command to display or modify the short slot time (11g)

usage. When enabled, the Base Station will advertise and use 9 micro seconds slot times

until the first STA associates that cannot support 9 microseconds. The Base Station will

then advertise and use 20 microseconds until all the stations that cannot support 9

Page 26: AC100 User Manual

AC100 User Manual

© 2004 Proprietary Information of BroVis Wireless Networks

microseconds have timed out on no activity for 60 seconds. When disabled, only long slot

times are used.

-> get Shortslottime

Short Slot Time: Enabled

-> set shortslottime disable

Short Slot Time: Disabled

-> Set shortslottime enable

Short Slot Time: Enabled

SNTP Server

Use the get sntpserver command to display or modify the SNTP/ NTP server IP address.

-> get sntpserver

SNTP/NTP Server IP address:

-> set sntpserver 192.168.1.20

SNTP/NTP Server IP address: 192.168.1.20

Station Status

Use the get station command to display station information and status.

-> get station

MacAddr: 00:03:7f:00:00:01, State: associated, AID: 1

Authentication Type: Open System

Encryption: ON, slot 4 shared [1] 40b key: aabbccddee

Power Save Mode: OFF

Rx Data Rate: 36, RxSignalStrength: 46, AckSignalStrength: 45

MSDU DATA MCAST MGMT CTRL ERRORS

Rx 70 68 68 2 0 0

Tx 227 225 0 2 0 0

SSID

Use the get/set ssid command to display or modify the SSID. The SSID is a text string of

up to 32 characters in length. Control characters are not allowed.

-> get ssid

Page 27: AC100 User Manual

AC100 User Manual

© 2004 Proprietary Information of BroVis Wireless Networks

SSID: BroVis Wireless Network

-> set ssid BWN

SSID: BWN

SSID Supress

Use the get/set ssidsuppress command to display or modify the SSID suppress mode. ->

get ssidsuppress

SSID Suppress Mode: Disabled

-> set ssidsuppress enable

SSID Suppress Mode: Enabled

-> set ssidsuppress disable

SSID Suppress Mode: Disabled

Super G

Display/Modify Super G Features. Use the get/set superG command to display or modify

the Super G features.

-> get superG

SuperG Features Enabled on WLAN 1

-> set superG enable

SuperG Features Enabled on WLAN 1

-> set superG disable

SuperG Features Disabled on WLAN 1

System Name

Use the get/set systemname command to display or modify the system name. The system

name is the name of the device, and is a text string of up to 32 characters in length.

Control characters are not allowed.

-> get systemname

System Name :

-> set systemname BroVis Wireless Networks

System Name: BroVis Wireless Networks

Telnet

Page 28: AC100 User Manual

AC100 User Manual

© 2004 Proprietary Information of BroVis Wireless Networks

Use the get/set telnet command to enable or disable telnet access to the Base Station.

-> get telnet

Telnet Access: Enabled

-> set telnet disable

Telnet Access: Disabled

-> set telnet enable

Telnet Access: Enabled

Timeout

Use the get/set timeout command to display or modify the telnet timeout.

-> get timeout

Telnet Timeout: 180 seconds

-> set timeout 200

Telnet Timeout: 200 seconds

Time Zone

Use the get/set tzone command to display or modify the time zone setting.

-> get tzone

SNTP/NTP Time Zone

-> set tzone -8

SNTP/NTP Time Zone: -8

WEP/AES Key Configuration

The CLI key commands enable configuration of shared and unique Wired Equivalent

Privacy (WEP) or Advanced Encryption Standard (AES) keys. Key IDs 1 to 4 are

reserved for shared key IDs, and key IDs 5 to 2048 are reserved for unique key IDs. Note

that the actual set of the unique key is still limited to 60 keys. The key IDs identify these

60 unique keys. The keys must be input as hexadecimal digits. Choose between 40-bit,

104-bit, or 128-bit encryption keys. For 40-bit encryption, the key string is 10 characters

long. For 104-bit encryption, the key string is 26 characters long. For 128-bit encryption,

the key string is 32 characters long. For AES encryption, a built-in extension algorithm

will extend the 40- bit and 64-bit keys into a 128-bit key automatically. The get station

command will return the original key. Use get/set key command to display or modify

AES or WEP key configuration. WEP uses set key 1 default. The default key command

Page 29: AC100 User Manual

AC100 User Manual

© 2004 Proprietary Information of BroVis Wireless Networks

enables the setting of an additional default key. Use get key to display keys. To set the

keys, use set key with the following format:

set key [“keynum”| unique] [ 40 |104 | 128] keystring

-> set key 1 40 aabbccddee

Shared Key 1, size 40: aabbccddee

-> set key 1 default

Default Key: 1

-> set key 2 40 1122334455

-> get key

Shared Key 1 -- Size: 40, aabbccddee

-> set key unique 40 1122334455

Unique Key 5, size 40: 1122334455

-> get key

Shared Key 1 -- Size: 40, aabbccddee

Unique Key 5 -- Size: 40, 1122334455

WPA Configuration

CLI AP Configuration: WPA-TLS

Command Description

set factorydefault Sets the AC100 to factory defaults.

set ipaddr <IP Address> Sets the IP address of the AC100 Ethernet interface

set ipmask 255.255.255.0 Sets the subnet mask for the AC100 Ethernet

interface

set autochannelselect disable Disables autochannel selection.(optional)

set wirelessmode <802.11a,

802.11b, or 802.11g> Sets the wirelessmode. The options include

802.11a, 802.11b and 802.11g. The default is

802.11a.(optional)

set channel <channel number> Selects a channel.

set ssid <desired SSID> Sets the desired SSID

set systemname <System Name> Sets the desired system name.(optional)

set encryption enable Enables encryption on the AC100

Page 30: AC100 User Manual

AC100 User Manual

© 2004 Proprietary Information of BroVis Wireless Networks

set authentication wpa Sets the authentication type to WPA

set cipher auto Sets the cipher selection to AUTO.

With the authtype=WPA, this defaults to TKIP.

set radiusname Sets the RADIUS server IP address

<RADIUS_IP_Address>

set keysource server Sets the keysource to the server (that is, the

RADIUS server will derive all keys). Not needed

for WPA-PSK.

set radiussecret (prompts to enter

old and new RADIUS

shared secret) Sets the shared secret between the RADIUS server

and the AC100. Hit return at the old RADIUS secret

prompt and enter the new secret word. Reboots the

AC100 for the configuration to take effect

CLI AP Configuration: WPA-PSK

Command Description

Set factory Sets the AC100 to factory defaults.

Set ipaddr <IP Address> Sets the IP address of the AC100 ethernet interface

set ipmask 255.0.0.0 Sets the subnet mask for the AC100 ethernet

interface

set autochannel select disable Disables autochannel selection. (optional)

set wirelessmode<802.11a,

802. 11b or 802. 11g> Sets the wireless mode. The options include

802.11a, 802.11b, and 802.11g. The default is

802.11a. (optional)

set channel <channel number> Selects a channel. This command is only needed if

autochannel selection is disabled. (optional)

set ssid <desired SSID> Sets the desired SSlD

set systemname <System Name> Sets the desired system name. (optional)

set encryption enable Enables encryption on the AC100

set authentication wpa-psk Sets the authentication type to WPA-PSK

Page 31: AC100 User Manual

AC100 User Manual

© 2004 Proprietary Information of BroVis Wireless Networks

set cipher auto Sets the cipher selection to AUTO. With the

authtype=WPA, this defaults to TKIP

set passphrase (prompts to enter old

and new passphrase) Sets the PSK pass phrase. Hit return at the old

passphrase prompt and enter the new passphrase.

Maximum is 63 characters.

reboot Reboots the AC100 for the configuration to take

effect.

Access Control List

The access control list (ACL) allows an administrator to perform security actions based

on the client station MAC address. This can be used to allow or deny association with the

AC100 and for unique per station encryption key assignment. Use the following

commands to view ACL status or entries.

get configuration- Display the access control status

get acl- Display the access control list

get acl xxx -Display an access control list entry

-> get acl

acl 1: 01:02:03:04:05:06- access allowed

acl 2:0a:0b:0c:0d:0e:0f- access denied

-> get acl 1

acl 1:01:02:03:04:05:06- access allowed

Enable/Disable/Restrict Access Control List

Configure the ACL using disable, enable, or strict. By default, while the checking of the

ACL is enabled, the ACL itself is empty. This is the same as disabling the checking on

the ACL. Therefore, an ACL entry must exist before enabling an ACL. While an ACL is

enabled, stations with valid share keys and stations with matching “allow” entries on the

ACL are authenticated. Alternatively, configure the checking of the ACL to strict to

require an ACL entry that specifies the station’s assigned unique key or the station is

denied association. In strict mode, stations with valid share keys that are not on the ACL

are not authenticated. The stations must have unique keys defined and matching “allow”

ACL entries specified to associate with the AC100.

set acl enable -- Select Restricted Access

set acl disable -- Select Unrestricted Access

Page 32: AC100 User Manual

AC100 User Manual

© 2004 Proprietary Information of BroVis Wireless Networks

set acl strict -- Select Restricted (w/ACL match)

-> set acl enable

AccessCheck:Enabled

-> setacl disable

AccessCheck:Disabled

-> setacl strict

AccessCheck:Strict

Set up or Modify the Access Control List

Use the set acl commands to set up or modify the ACL. Add/Modify a MAC address to

the ACL.

-> set acl allow 1:2:3:4:5:6

acl 1: 01:02:03:04:05:06 - access allowed

Deny access to a particular MAC address.

->set acl deny a:b:c:d:e:f

acl 2: 0a:0b:0c:0d:0e:0f - access denied

Allow access to a particular MAC address.

-> Set acl allow 0a:0b:0c:0d:0e:0f

acl 2: 0a:0b:0c:0d:0e:0f - access allowed

Add Encryption key for MAC address. The key index is automatically assigned. Use the

format set acl keymap “MAC Address” [ 40 | 104 | 128] key.

-> set acl keymap 11:11:11:11:11:11 40 aabbccddee

Unique Key 5, size 40: aabbccddee

acl 3: 11:11:11:11:11:11- access allowed with unique key 5

Add default Encryption key for MAC address. The key index is specified as default. Use

the format set acl keymap “MAC Address” default.

-> set acl keymap 11:11:11:11:11:11 default

acl 3: 11:11:11:11:11:11 - access allowed with default shared key

Add Encryption key mapping for MAC address. The key index is specified as 5. Use the

format set acl keymap “Mac Address” “keyindex”

-> set acl keymap 11:11:11:11:11:11 5

acl 3: 11:11:11:11:11:11- access allowed with unique key 5

Page 33: AC100 User Manual

AC100 User Manual

© 2004 Proprietary Information of BroVis Wireless Networks

Delete the Access Control List

Use the del acl command to delete an access control list (ACL).

-> get acl

acl 1: 01:02:03:04:05:06 – access allowed

acl 2: 0a:0b:0c:0d:0e:0f – access allowed

acl 3: 11:11:11:11:11:11 – access allowed

acl 4: 01:09:11:11:11:11 – access allowed

->del acl 4

acl 1: 01:02:03:04:05:06 – access allowed

acl 2: 0a:0b:0c:0d:0e:0f – access allowed

acl 3: 11:11:11:11:11:11 – access allowed

Other CLI Commands

Flash File System Commands

Query Flash File Directory

Use the ls command to display the Flash file directory.

-> ls

apcfg2932

apimg1770356

Delete Flash File

Use the rm filename command to delete the Flash file.

-> ls

apcfg2932

apimg1770356

-> rm apimg1

-> ls

apcfg2932

Copy Flash File

Use the cp to from command to copy the Flash file.

Page 34: AC100 User Manual

AC100 User Manual

© 2004 Proprietary Information of BroVis Wireless Networks

-> cp apcfg apcfg001

->ls

apcfg2932

apcfg0012932

apimgl770356

Move Flash File

Use the mv command to change the name of the Flash file.

-> ls

apcfg2932

apcfg0012932

-> mv apcfg001 cfg

-> ls

apcfg2932

cfg2932

Ping Other Hosts

Use the ping host IP address [count] command to ping other hosts on the subnet. If count

is not supplied, only three pings are sent. Note that the ping is not interruptible, so a

specific count or the default count should always be used.

-> ping 192.168.1.5

PING 192.168.1.5: 56 data bytes

64 bytes from 192.168.1.5: icmp_seq = 0. time = 0. ms

64 bytes from 192.168.1.5: icmp_seq = 1. time = 0. ms

64 bytes from 192.168.1.5: icmp_seq = 2. time = 0 .ms

----192.168.1.4 PING Statistics----

3 packets transmitted, 3 packets received, 0% packet loss

round-trip (ms) min/avg/max = 0/0/0

-> ping 192.168.1.4 1

192.168.1.4 is alive

Reboot

Page 35: AC100 User Manual

AC100 User Manual

© 2004 Proprietary Information of BroVis Wireless Networks

Use the reboot command to reboot the AC100 CPE.

-> reboot

Rebooting AP...

WLAN Commands

Start/Stop WLAN

Use the start/stop wlan commands to dynamically start or stop WLAN operation. This

change is made immediately without rebooting.

-> start wlan

Switch WLAN

Use the config wlan # command to switch the current WLAN. The CLI prompt will

change to reflect the current wlan.

-> config wlan 1

>>Current wlan: 1

Chapter 4 Sample Configuration

4.1 Sample First-time Configuration

In the following example, the user wants to set up the AC100 for the first time. The user

configures the AC100 to use radio channel, modify SSID, change system name, change

login user name and password, enable security, configure encryption keys, and ACL.

AP login: Admin

Password: ***

-> get config

Country Code NA

Operation Mode: >>Access Point

wlan State: Enabled

Radio Frequency: 2412 MHz (IEEE 1)

Wireless Mode: 802.11g

Auto Channel Select: Enabled

Page 36: AC100 User Manual

AC100 User Manual

© 2004 Proprietary Information of BroVis Wireless Networks

Data Rate: best

Login Username: Admin

RADIUS address:

Name server IP address:

Name server domain suffix:

SSID: AMNW Base Station

SSID Suppress Mode: Disabled

System Name:

Beacon Interval: 100

DTIM: 1

Fragmentation Threshold: 2346

RTS/CTS Threshold: 2346

Burst Time: 2

Burst Sequence Threshold: 3

IP Address: 192.168.1.26

IP Mask: 255.255.255.0

Host IP Address: 192.168.1.4

Gateway IP Address: 0.0.0.0

SNTP/NTP Server IP Address:

Time Zone:

NW Transmit Retry Limit: 4

SW Transmit Retry Limit: 3

TransmitPower: full

Current Transmit Output Power 20.0 dBm

SuperG :Disabled

Encryption: Disabled

Cipher selection: AUTO

Authentication Type: Open System

Default transmit key: none

Access Check: Enabled

Key Entry Method: hexadecimal

Page 37: AC100 User Manual

AC100 User Manual

© 2004 Proprietary Information of BroVis Wireless Networks

Group Key Update Interval: 1600 seconds

Key Source: flash

Aging Interval: 120 seconds

Telnet Access: Enabled

Telnet Timeout: 3600 seconds

-> set autochannel disable

Auto Channel Select: Disabled

-> set frequency 2417

Radio Frequency: 2417 MHz (IEEE 2)

-

> set login USER

Login Username: USER

-> set password

Old Password: ***

New Password: ***

Type password again to confirm : ***

Password confirmed

-> set ssid BWNAP1

SSID: BWNAP1

-> set systemname : BroVis Wireless Networks

System Name : BroVis Wireless Networks

BroVis Wireless Networks -> set key 1 128

123456789012345678901234567890ab

Shared Key 1, size 128: 123456789012345678901234567890ab

BroVis Wireless Networks -> set key unique 40 1122334455

Unique Key 5, size 40: 1122334455

BroVis Wireless Networks -> set key 1 default

Default Key: 1

BroVis Wireless Networks -> set acl allow 00:03:7F:00:C3:B2

acl 1: 00:3f:73:00:00:01 - access allowed

BroVis Wireless Networks -> set acl deny 01:02:03:04:05:06

Page 38: AC100 User Manual

AC100 User Manual

© 2004 Proprietary Information of BroVis Wireless Networks

acl 2: 01:02:03:04:05:06 - access denied

BroVis Wireless Networks -> set acl key 11:22:33:44:55:66 40 aabbccddee

Unique Key 6, size 40: aabbccddee

acl 3: 11:22:33:44:55:66 - access allowed with unique key 6

BroVis Wireless Networks -> set acl key a:b:c:d:e:f default

acl 4: 0a:0b:0c:0d:0e:0f - access allowed with default shared key

BroVis Wireless Networks -> set acl enable

Access Check: Enabled

BroVis Wireless Networks -> get acl

AccessCheck: Enabled

acl1:00:03:7F:00:C3:B2- access allowed

acl2:01:02:03:04:05:06- access denied

acl3:11:22:33:44:55:66- access allowed with unique key 6

acl4:0A:0B:0C:0D:0E:0F- access allowed with default shared key

BroVis Wireless Networks -> get config

Country Code: NA

Operation Mode: Access Point

Wlan State: Enabled

Radio Frequency: 2417 MHz (IEEE 2)

Wireless Mode: 802.11g

Auto Channel Select: Disabled

Data Rate: best

Login Username: USER

RADIUS address:

Name server IP address:

Name server domain suffix:

SSID: AMNW Base Station 1

SSID Suppress Mode: Disabled

System Name: BroVis Wireless Networks

Beacon Interval: 100

DTIM: 1

Page 39: AC100 User Manual

AC100 User Manual

© 2004 Proprietary Information of BroVis Wireless Networks

Fragmentation Threshold: 2346

RTS/CTS Threshold: 2346

Burst Time: 2

Burst Sequence Threshold: 3

IP Address: 192.168.1.26

IP Mask: 255.255.255.0

Host IP Address: 192.168.1.4

Gateway IP Address: 0.0.0.0

SNTP/NTP Server IP Address:

Time Zone:

HW Transmit Retry Limit: 4

SW Transmit Retry Limit: 3

TransmitPower: full

Current Transmit Output Power 20.0 dBm

SuperG: Disabled

Encryption: Disabled

Cipher selection: AUTO

Authentication Type: Open System

Default transmit key: 1

Shared Key 1, size 128, 1234567890l2345678901234567890ab

Unique Key 5, size 40, 1122334455

Unique Key 6, size 40, aabbccddee

Access Check: Enabled

acl 1: 00:03:7F:00:C3:B2 - access allowed

acl 2: 01:02:03:04:05:06 - access denied

acl 3: 11:22:33:44:55:66 - access allowed with unique key 6

acl 4: 0A:0B:0C:0D:0E:0F - access allowed with default shared key

Key Entry Method: hexadecimal

Group Key Update Interval: 1800 seconds

Key Source: flash

Aging Interval: 120 seconds

Page 40: AC100 User Manual

AC100 User Manual

© 2004 Proprietary Information of BroVis Wireless Networks

Telnet Access: Enabled

Telnet Timeout: 3600 seconds

BroVis Wireless Networks -> reboot

rebooting AP..

Waiting for cfg file to finish writing . . . done. Checksum 17af3

login: USER

Password: ***

BroVis Wireless Networks Base Station Rev 3.0.0.43A

BroVis Wireless Networks -> get association

STAMAC AddressState

100:03:7F:00:C3:B2associated

BroVis Wireless Networks -> get station

MacAddr: 00:03:7f:00:c3:b2, State: associated, AID: 1

Authentication Type: Open System

WLAN Mode: 2.4GHz 54Mbps (802.11g), nonERP present: NO,

nonERP protected: NO

Encryption: OFF Ciphers: NONE(unicast), NONE(multicast), NONE

Compression: OFF

Power Save Mode: OFF

Rx Data Rate: 1, RxSignalStrength: 32, AckSignalStrength: 31

MSDU Data Mcast Mgmt Ctrl Errors

Rx 8 7 0 2 0 0 0

Tx 2 0 0 2 0 0 0