Motorola AP-51XX Instrukcja Użytkownika

AP-51xx Access Point Product Reference Guide

AP-51xx Access Point Product Reference GuidexAvailable Protocols . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6-3

AP-51xx Access Point Product Reference Guide4-83. Refer to the 12 available Switch IP Addresses to review the addresses the access point uses to adopt

System Configuration4-94.3 Configuring Data AccessUse the AP-51XX Access screen to allow/deny management access to the access point from different sub

AP-51xx Access Point Product Reference Guide4-102. Use the access point Access field checkboxes to enable/disable the following on the access point’s

System Configuration4-113. Refer to the Applet Timeout field to set an HTTPS timeout interval.4. Configure the Secure Shell field to set timeout value

AP-51xx Access Point Product Reference Guide4-127. Update the Administrator Access field to change the administrative password used to access the conf

System Configuration4-138. Refer to the Login Message field to optionally define a message displayed to the customer as they login into the access poi

AP-51xx Access Point Product Reference Guide4-149. Click Apply to save any changes to the access point Access screen. Navigating away from the screen

System Configuration4-15certificate. A browser must contain this CA certificate in its Trusted Root Library so it can trust certificates “signed” by t

AP-51xx Access Point Product Reference Guide4-162. Copy the content of the CA Certificate message (using a text editor such as notepad) and click on P

System Configuration4-17To create a self certificate:1. Select System Configuration -> Certificate Mgmt -> Self Certificates from the access poi

xiChapter 8. CLI ReferenceConnecting to the CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8-2Ac

AP-51xx Access Point Product Reference Guide4-184. When the form is completed, click the Generate button.The Certificate Request screen disappears and

System Configuration4-19The generated certificate request displays in Self Certificates screen text box.6. Click the Copy to Clipboard button.The cont

AP-51xx Access Point Product Reference Guide4-208. To use the certificate for a VPN tunnel, first define a tunnel and select the IKE settings to use e

System Configuration4-21Subject (required) The required Subject value contains important information about the certificate. Contact the CA signing the

AP-51xx Access Point Product Reference Guide4-224. Complete as many of the optional values within the Certificate Request screen as possible.5. When t

System Configuration4-2315. Load the certificates on the access point.16. Open the certificate file and copy its contents into the CA Certificates scr

AP-51xx Access Point Product Reference Guide4-24If using the Symbol-CC-WS2000-MIB-2.0 and/or Symbol-AP-5131-MIB to configure the AP-5131, use the tabl

System Configuration4-25SNMP allows a network administrator to manage network performance, find and solve network problems, and plan for network growt

AP-51xx Access Point Product Reference Guide4-26To configure SNMP v1/v2c community definitions and SNMP v3 user definitions for the access point:1. Se

System Configuration4-273. Configure the SNMP v3 User Definitions field (if SNMP v3 is used) to add and configure SNMP v3 user definitions.SNMP v3 use

AP-51xx Access Point Product Reference GuidexiiSystem Radius Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8-19

AP-51xx Access Point Product Reference Guide4-284. Specify the users who can read and optionally modify the SNMP-capable client.5. If configuring SNMP

System Configuration4-297. Click Undo Changes (if necessary) to undo any changes made. Undo Changes reverts the settings displayed on the SNMP Access

AP-51xx Access Point Product Reference Guide4-302. Configure the SNMP Access Control screen to add the IP addresses of those users receiving SNMP acce

System Configuration4-314.5.2 Enabling SNMP TrapsSNMP provides the ability to send traps to notify the administrator that trap conditions are met. Tra

AP-51xx Access Point Product Reference Guide4-322. Configure the SNMP v1/v2c Trap Configuration field (if SNMP v1/v2c Traps are used) to modify the fo

System Configuration4-333. Configure the SNMP v3 Trap Configuration field (if SNMP v3 Traps are used) to modify the following:4. Click Apply to save a

AP-51xx Access Point Product Reference Guide4-345. Click Undo Changes (if necessary) to undo any changes made. Undo Changes reverts the settings displ

System Configuration4-352. Configure the MU Traps field to generate traps for MU associations, MU association denials and MU authentication denials. W

AP-51xx Access Point Product Reference Guide4-365. Configure the System Traps field to generate traps when the access point re-initializes during tran

System Configuration4-377. Click Undo Changes (if necessary) to undo any changes made. Undo Changes reverts the settings displayed on SNMP Traps scree

xiiiChapter 10. Adaptive APAdaptive AP Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .10-1Where

AP-51xx Access Point Product Reference Guide4-383. Configure the Minimum Packets field to define a minimum packet throughput value for trap generation

System Configuration4-396. Click Logout to securely exit the access point Access Point applet. A prompt displays confirming the logout before the appl

AP-51xx Access Point Product Reference Guide4-402. From within the Current Time field, click the Refresh button to update the time since the screen wa

System Configuration4-415. If using an NTP server to supply system time to the access point, configure the NTP Server Configuration field to define th

AP-51xx Access Point Product Reference Guide4-428. Click Logout to securely exit the access point Access Point applet. A prompt displays confirming th

System Configuration4-433. Click Apply to save any changes to the Logging Configuration screen. Navigating away from the screen without clicking the A

AP-51xx Access Point Product Reference Guide4-444. Click Undo Changes (if necessary) to undo any changes made. Undo Changes reverts the settings displ

System Configuration4-45Use the Config Import/Export screen to configure an import or export operation for access point configuration settings. To cre

AP-51xx Access Point Product Reference Guide4-462. Configure the FTP and TFTP Import/Export field to import/export configuration settings. Filename Sp

System Configuration4-473. Configure the HTTP Import/Export field to import/export access point configuration settings using HTTP. Username Specify a

AP-51xx Access Point Product Reference GuidexivElectrical Characteristics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

AP-51xx Access Point Product Reference Guide4-484. Refer to the Status field to assess the completion of the import/export operation. Status After exe

System Configuration4-495. Click Apply to save the filename and Server IP information. The Apply button does not execute the import or export operatio

AP-51xx Access Point Product Reference Guide4-50Additionally, the configuration version can be manually changed in the text file to cause the configur

System Configuration4-51If a firmware update is required, use the Firmware Update screen to specify a filename and define a file location for updating

AP-51xx Access Point Product Reference Guide4-523. Configure the DHCP Options checkboxes to enable/disable automatic firmware and/or configuration fil

System Configuration4-53 If updating the access point manually, configure the Update Firmware fields as required to set a filename and target firmware

AP-51xx Access Point Product Reference Guide4-545. If the target firmware file resides within a directory, specify a complete path for the file within

System Configuration4-55FAIL: user interruptedFAIL: no valid interface foundFAIL: conflict ip addressFAIL: command exchange time outFAIL: invalid subn

AP-51xx Access Point Product Reference Guide4-56• Export either a CA or Self Certificate to a safe and secure location before upgrading or downgrading

Network ManagementRefer to the following for network management configuration activities supported by the access point user interface:• Configuring th

About This GuideIntroductionThis guide provides configuration and setup information for the AP-5131 and AP-5181 model access points. For the purposes

AP-51xx Access Point Product Reference Guide5-2Use the LAN Configuration screen to enable one (or both) of the access point’s LAN interfaces, assign t

Network Management5-33. Refer to the LAN Ethernet Timeout field to define how LAN Ethernet inactivity is processed by the access point.Use the Etherne

AP-51xx Access Point Product Reference Guide5-45. Use the Port Settings field to define how the access point manages throughput over the LAN port.6. C

Network Management5-55.1.1 Configuring VLAN SupportA Virtual Local Area Network (VLAN) is a means to electronically separate data on the same access p

AP-51xx Access Point Product Reference Guide5-61. Select Network Configuration -> LAN from the access point menu tree. 2. Ensure the Enable 802.1q

Network Management5-74. Assign a unique VLAN ID (from 1 to 4095) to each VLAN added or modified. The VLAN ID associates a frame with a specific VLAN a

AP-51xx Access Point Product Reference Guide5-88. Enter a Management VLAN Tag for LAN1 and LAN2.The Management VLAN uses a default tag value of 1. The

Network Management5-9frame arrives on the access point, it queries the VMPS for the VLAN assignment based on the source MAC address of the arriving fr

AP-51xx Access Point Product Reference Guide5-102. Configure the DHCP Configuration field to define the DHCP settings used for the LAN.NOTE Motorola r

Network Management5-11This interface is a BOOTP ClientSelect this button to enable BOOTP to set access point network address information via this LAN1

AP-51xx Access Point Product Reference GuidexviNotational ConventionsThe following notational conventions are used in this document:• Italics are used

AP-51xx Access Point Product Reference Guide5-123. Click Apply to save any changes to the LAN1 or LAN2 screen. Navigating away from the screen without

Network Management5-13To generate a list of client MAC address to IP address mappings for the access point:1. Select Network Configuration -> LAN -

AP-51xx Access Point Product Reference Guide5-146. Click OK to return to the LAN1 or LAN2 page, where the updated settings within the Advanced DHCP Se

Network Management5-152. Use the all ethernet types, except drop-down menu to designate whether the Ethernet Types defined for the LAN are allowed or

AP-51xx Access Point Product Reference Guide5-16Packet types supported for the type filtering function include 16-bit DIX Ethernet types as well as Mo

Network Management5-172. Refer to the WAN IP Configuration field to enable the WAN interface, and set network address information for the WAN connecti

AP-51xx Access Point Product Reference Guide5-18This interface is a DHCP ClientThis checkbox enables DHCP for the access point WAN connection. This is

Network Management5-193. Use the Port Settings field to define how the access point manages throughput over the WAN port.More IP Addresses Click the M

AP-51xx Access Point Product Reference Guide5-204. Configure the PPP over Ethernet field to enable high speed dial-up connections to the access point

Network Management5-215. Click Apply to save any changes to the WAN screen. Navigating away from the screen without clicking the Apply button results

IntroductionThis AP-51xx Product Reference Guide contains setup and advanced configuration instructions for both the AP-5131 and AP-5181 model access

AP-51xx Access Point Product Reference Guide5-22requests, and minimizes the number of WAN IP addresses needed when a range of local IP addresses is ma

Network Management5-233. Click Apply to save any changes to the NAT screen. Navigating away from the screen without clicking the Apply button results

AP-51xx Access Point Product Reference Guide5-24To configure port forwarding for the access point:1. Select Network Configuration -> WAN -> NAT

Network Management5-255. Click OK to return to the NAT screen. Within the NAT screen, click Apply to save any changes made on the Port Forwarding scre

AP-51xx Access Point Product Reference Guide5-262. Select the Enable checkbox to allow domain name information to be updated when the IP address assoc

Network Management5-277. Once the DynDNS configuration has been updated, click the Show Update Response button to open a sub-screen displaying the hos

AP-51xx Access Point Product Reference Guide5-28If a WLAN is defined, that WLAN displays within the Wireless Configuration screen. When the access poi

Network Management5-293. Click the Create button (if necessary) to launch the New WLAN screen. Use the New WLAN screen to define the properties of a n

AP-51xx Access Point Product Reference Guide5-305.3.1 Creating/Editing Individual WLANsIf the WLANs displayed within the Wireless Configuration screen

Network Management5-313. Set the parameters in the Configuration field as required for the WLAN.ESSID Enter the Extended Services Set Identification (

AP-51xx Access Point Product Reference Guide1-2The access point (AP) provides a bridge between Ethernet wired LANs or WANs and wireless networks. It p

AP-51xx Access Point Product Reference Guide5-32Name Define or revise the name for the WLAN. The name should be logical representation of WLAN coverag

Network Management5-334. Configure the Security field as required to set the data protection requirements for the WLAN. 5. Configure the Advanced fiel

AP-51xx Access Point Product Reference Guide5-346. Click Apply to save any changes to the WLAN screen. Navigating away from the screen without clickin

Network Management5-35security requirements of the WLAN. Once new policies are defined, they are available within the New WLAN or Edit WLAN screens an

AP-51xx Access Point Product Reference Guide5-36Configuring a WLAN security scheme with a discussion of all the authentication and encryption options

Network Management5-372. Click the Create button to configure a new ACL policy, or select a policy and click the Edit button to modify an existing ACL

AP-51xx Access Point Product Reference Guide5-38Either the New MU ACL Policy or Edit MU ACL Policy screens display.3. Assign a name to the new or edit

Network Management5-395. Click Apply to save any changes to the New MU ACL Policy or Edit MU ACL Policy screen and return to the Mobile Unit Access Co

AP-51xx Access Point Product Reference Guide5-402. Click the Create button to configure a new QoS policy, or select a policy and click the Edit button

Network Management5-413. Assign a name to the new or edited QoS policy that makes sense to the access point traffic receiving priority. More than one

Introduction1-3For a information overview of the adaptive AP feature as well as how to configure it, refer to Adaptive AP on page 10-1.1.1.2 Rogue AP

AP-51xx Access Point Product Reference Guide5-425. Use the two Multicast Address fields to specify one or two MAC addresses to be used for multicast a

Network Management5-43 8. Configure the CW min and CW max (contention windows), AIFSN (Arbitrary Inter-Frame Space Number) and TXOPs Time (opportunity

AP-51xx Access Point Product Reference Guide5-449. Click Apply to save any changes to the New QoS Policy or Edit QoS Policy screen to return to the Qu

Network Management5-455.3.1.4 Configuring WLAN Hotspot SupportThe access point enables hotspot operators to provide user authentication and accounting

AP-51xx Access Point Product Reference Guide5-463. Refer to the HTTP Redirection field to specify how the Login, Welcome, and Fail pages are maintaine

Network Management5-474. Use the External URL field to specify the location of the login page, welcome page and fail page used for hotspot access. Def

AP-51xx Access Point Product Reference Guide5-486. Click the White List Entries button (within the WhiteList Configuration field) to create a set of a

Network Management5-498. Refer to the Radius Configuration field to define a primary and secondary Radius server port and shared secret password.9. Cl

AP-51xx Access Point Product Reference Guide5-50When a client requests a URL from a Web server, the login handler returns an HTTP redirection status c

Network Management5-515.3.2 Setting the WLAN’s Radio ConfigurationEach access point WLAN can have a separate 802.11a or 802.11b/g radio configured and

MOTOROLA and the Stylized M Logo are registered in the US Patent & Trademark Office. Symbol is a registered trademark of Symbol Technologies, Inc.

AP-51xx Access Point Product Reference Guide1-4point and the access point’s station count. This information is very helpful in assessing the access po

AP-51xx Access Point Product Reference Guide5-522. Enable the radio(s) using the Enable checkbox(es).Refer to RF Band of Operation parameter to ensure

Network Management5-534. If the Base Bridge checkbox has been selected, use the Max# Client Bridges parameter to define the client bridge load on a pa

AP-51xx Access Point Product Reference Guide5-54Once the settings within the Radio Configuration screen are applied (for an initial deployment), the c

Network Management5-55For a detailed overview on mesh networking and how to configure the radio for mesh networking support, see Configuring Mesh Netw

AP-51xx Access Point Product Reference Guide5-562. Configure the Properties field to assign a name and placement designation for the radio.Placement U

Network Management5-573. Configure the Radio Settings field to assign a channel, antenna diversity setting, radio transmit power level and data rate.R

AP-51xx Access Point Product Reference Guide5-58802.11 b/g mode Specify b only, g only or b and g to define whether the 802.11b/g radio transmits in t

Network Management5-594. Refer to the Beacon Settings field to set the radio beacon and DTIM intervals.Beacon Interval The beacon interval controls th

AP-51xx Access Point Product Reference Guide5-605. Refer to the QBSS Load Element Setting field to optionally allow the access point to communicate ch

Network Management5-617. Select the Advanced Settings tab to strategically map BSSIDs to WLANs in order to define them as primary WLANs.Set RF QoS Cli

Introduction1-5• Multi-Function LEDs• Mesh Networking• Additional LAN Subnet• On-board Radius Server Authentication• Hotspot Support• Routing Informat

AP-51xx Access Point Product Reference Guide5-62Defining Primary WLANs allows an administrator to dedicate BSSIDs (4 BSSIDs are available for mapping)

Network Management5-638. Use the Primary WLAN drop-down menu to select a WLAN from those WLANs sharing the same BSSID. The selected WLAN is the primar

AP-51xx Access Point Product Reference Guide5-641. Select Network Configuration -> Wireless -> Bandwidth Management from the access point menu t

Network Management5-654. Configure the Bandwidth Share for Each WLAN field to set a raw weight (for WLANs using the Weighted Round-Robin option) for e

AP-51xx Access Point Product Reference Guide5-665.4 Configuring Router SettingsThe access point router uses routing tables and protocols to forward da

Network Management5-672. Refer to the access point Router Table field to view existing routes.The access point Router Table field displays a list of c

AP-51xx Access Point Product Reference Guide5-681. From within the RIP Configuration field, select the RIP Type from the drop-down menu. The following

Network Management5-693. If RIP v2 or RIP v2 (v1 compat) is the selected RIP type, the RIP v2 Authentication field becomes active. Select the type of

AP-51xx Access Point Product Reference Guide5-705. If the MD5 authentication method is selected, fill in the Key #1 field (Key #2 is optional). Enter

Configuring Access Point SecuritySecurity measures for the access point and its WLANs are critical. Use the available access point security options to

AP-51xx Access Point Product Reference Guide1-6For detailed information on locating the access point’s MAC addresses, see Viewing WAN Statistics on pa

AP-51xx Access Point Product Reference Guide6-26.1 Configuring Security OptionsTo configure the data protection options available on the access point,

Configuring Access Point Security6-36.2 Setting PasswordsBefore setting the access point security parameters, verify an administrative password for th

AP-51xx Access Point Product Reference Guide6-45. Enter the previous password and the new admin password in the two fields provided. Click the Apply b

Configuring Access Point Security6-53. Set the HyperTerminal program to use 19200 baud, 8 data bits, 1 stop bit, no parity, no flow control and auto-d

AP-51xx Access Point Product Reference Guide6-6Encryption applies a specific algorithm to alter its appearance and prevent unauthorized reading. Decry

Configuring Access Point Security6-74. Enable and configure an Authentication option if necessary for the target security policy.5. Enable and configu

AP-51xx Access Point Product Reference Guide6-86. Click Apply to keep changes made within the New Security Policy screen (if any). Configure encryptio

Configuring Access Point Security6-9Kerberos uses the Network Time Protocol (NTP) for synchronizing the clocks of its Key Distribution Center (KDC) se

AP-51xx Access Point Product Reference Guide6-105. Set the Kerberos Configuration field as required to define the parameters of the Kerberos authentic

Configuring Access Point Security6-116. Click the Apply button to return to the WLAN screen to save any changes made within the Kerberos Configuration

Introduction1-7If the radio MAC address displayed on the Radio Settings screen is 00:A0:F8:72:20:DC, then the BSSIDs for that radio will have the foll

AP-51xx Access Point Product Reference Guide6-123. Select the 802.1x EAP radio button.The 802.1x EAP Settings field displays within the New Security P

Configuring Access Point Security6-13Radius Server Address If using an External Radius Server, specify the numerical (non-DNS) IP address of a primary

AP-51xx Access Point Product Reference Guide6-147. Select the Accounting tab as required to define a timeout period and retry interval Syslog for MUs

Configuring Access Point Security6-159. Select the Advanced Settings tab as required to specify a MU quiet period, timeout interval, transmit period,

AP-51xx Access Point Product Reference Guide6-166.6 Configuring WEP EncryptionWired Equivalent Privacy (WEP) is a security protocol specified in the I

Configuring Access Point Security6-175. Configure the WEP 64 Settings or WEP 128 Settings field as required to define the Pass Key used to generate th

AP-51xx Access Point Product Reference Guide6-18Default (hexadecimal) keys for WEP 64 include: Default (hexadecimal) keys for WEP 128 include:6. Click

Configuring Access Point Security6-191. Select Network Configuration -> Wireless -> Security from the access point menu tree. If security polici

AP-51xx Access Point Product Reference Guide6-205. Configure the KeyGuard Settings field as required to define the Pass Key used to generate the WEP k

Configuring Access Point Security6-216.8 Configuring WPA/WPA2 Using TKIPWi-Fi Protected Access (WPA) is a robust encryption scheme specified in the IE

AP-51xx Access Point Product Reference Guide1-8• Kerberos Authentication• EAP AuthenticationThe following encryption techniques are supported:• WEP En

AP-51xx Access Point Product Reference Guide6-225. Configure the Key Rotation Settings area as needed to broadcast encryption key changes to MUs and d

Configuring Access Point Security6-236. Configure the Key Settings area as needed to set an ASCII Passphrase and key values.Default (hexadecimal) 256-

AP-51xx Access Point Product Reference Guide6-249. Click the Apply button to save any changes made within this New Security Policy screen.10. Click th

Configuring Access Point Security6-255. Configure the Key Rotation Settings field as required to set Broadcast Key Rotation and the update interval.Br

AP-51xx Access Point Product Reference Guide6-266. Configure the Key Settings area as needed to set an ASCII Passphrase and 128-bit key.Default (hexad

Configuring Access Point Security6-279. Click the Apply button to save any changes made within this New Security Policy screen.10. Click the Cancel bu

AP-51xx Access Point Product Reference Guide6-282. Refer to the Global Firewall Disable field to enable or disable the access point firewall.3. Refer

Configuring Access Point Security6-294. Refer to the Configurable Firewall Filters field to set the following firewall filters:5. Click Apply to save

AP-51xx Access Point Product Reference Guide6-306.10.1 Configuring LAN to WAN Access The access point LAN can be configured to communicate with the WA

Configuring Access Point Security6-313. Configure the Rules field as required to allow or deny access to selected (enabled) protocols.Allow or Deny al

Introduction1-91.2.8.2 EAP AuthenticationThe Extensible Authentication Protocol (EAP) feature provides access points and their associated MU’s an addi

AP-51xx Access Point Product Reference Guide6-32Pre configured Rules The following protocols are preconfigured with the access point. To enable a prot

Configuring Access Point Security6-334. Click Apply to save any changes to the Subnet Access screen. Navigating away from the screen without clicking

AP-51xx Access Point Product Reference Guide6-34between two end points. ESP can also be used in tunnel mode, providing security like that of a Virtual

Configuring Access Point Security6-352. Configure the Settings field as needed to override the settings in the Subnet Access screen and import firewal

AP-51xx Access Point Product Reference Guide6-364. Click Apply to save any changes to the Advanced Subnet Access screen. Navigating away from the scre

Configuring Access Point Security6-37Use the VPN screen to add and remove VPN tunnels. To configure an existing VPN tunnel, select it from the list in

AP-51xx Access Point Product Reference Guide6-38If access point #1 has the following values:• WAN IP address: 20.1.1.2• LAN IP address: 10.1.1.1• Subn

Configuring Access Point Security6-39Interface name Use the drop-down menu to specify the LAN1, LAN2 or WAN connection used for routing VPN traffic. R

AP-51xx Access Point Product Reference Guide6-404. Click Apply to save any changes to the VPN screen as well as changes made to the Auto Key Settings,

Configuring Access Point Security6-413. Configure the Manual Key Settings screen to modify the following:NOTE When entering Inbound or Outbound encryp

AP-51xx Access Point Product Reference Guide1-10algorithm, but cannot interpret the encrypted data without the appropriate key. Only the sender and re

AP-51xx Access Point Product Reference Guide6-42AH Authentication AH provides data authentication and anti-replay services for the VPN tunnel. Select

Configuring Access Point Security6-43ESP Encryption Algorithm Select the encryption and authentication algorithms for the VPN tunnel using the drop-do

AP-51xx Access Point Product Reference Guide6-44The Inbound and Outbound SPI settings are required to be interpolated to function correctly. For examp

Configuring Access Point Security6-453. Configure the Auto Key Settings screen to modify the following:Use Perfect Forward SecrecyForward secrecy is a

AP-51xx Access Point Product Reference Guide6-464. Click Ok to return to the VPN screen. Click Apply to retain the settings made on the Auto Key Setti

Configuring Access Point Security6-476.11.3 Configuring IKE Key SettingsThe Internet Key Exchange (IKE) is an IPsec standard protocol used to ensure s

AP-51xx Access Point Product Reference Guide6-48Operation Mode The Phase I protocols of IKE are based on the ISAKMP identity-protection and aggressive

Configuring Access Point Security6-49IKE Authentication Mode Select the appropriate IKE authentication mode:• Pre-Shared Key (PSK) - Specify an authen

AP-51xx Access Point Product Reference Guide6-504. Click Ok to return to the VPN screen. Click Apply to retain the settings made on the IKE Settings s

Configuring Access Point Security6-512. Reference the Security Associations field to view the following: Tunnel Name The Tunnel Name column lists the

Introduction1-111.2.8.6 WPA2-CCMP (802.11i) EncryptionWPA2 is a newer 802.11i standard that provides even stronger wireless security than Wi-Fi Protec

AP-51xx Access Point Product Reference Guide6-523. Click the Reset VPNs button to reset active VPNs. Selecting Reset VPNs forces renegotiation of all

Configuring Access Point Security6-53To configure content filtering for the access point: 1. Select Network Configuration -> WAN -> Content Filt

AP-51xx Access Point Product Reference Guide6-543. Configure the SMTP field to disable or restrict specific kinds of network mail traffic.4. Configure

Configuring Access Point Security6-555. Click Apply to save any changes to the Content Filtering screen. Navigating away from the screen without click

AP-51xx Access Point Product Reference Guide6-56The rogue detection interval is used in conjunction with Motorola MUs that identify themselves as rogu

Configuring Access Point Security6-572. Configure the Detection Method field to set the detection method (MU or access point) and define the 802.11a o

AP-51xx Access Point Product Reference Guide6-584. Click Apply to save any changes to the Rogue AP Detection screen. Navigating away from the screen w

Configuring Access Point Security6-596.13.1 Moving Rogue APs to the Allowed AP ListThe Active APs screen enables the user to view the list of detected

AP-51xx Access Point Product Reference Guide6-603. Enter a value (in minutes) in the Rogue APs Age Out Time field to indicate the number of elapsed mi

Configuring Access Point Security6-613. Refer to the Rogue AP Detail field for the following information:4. Refer to the Rogue Detector Detail field f

AP-51xx Access Point Product Reference Guide1-12allows the blocking of up to 10 files or URL extensions and allows blocking of specific outbound HTTP,

AP-51xx Access Point Product Reference Guide6-625. Click OK to securely exit the Detail screen and return to the Active APs screen.6. Click Cancel (if

Configuring Access Point Security6-632. Highlight an MU from within the Rogue AP enabled MUs field and click the scan button.The target MU begins scan

AP-51xx Access Point Product Reference Guide6-645. Highlight a different MU from the Rogue AP enabled MUs field as needed to scan for additional rogue

Configuring Access Point Security6-652. From within the Data Source Configuration field, use the Data Source drop-down menu to select the data source

AP-51xx Access Point Product Reference Guide6-66Default Authentication TypeSpecify a PEAP and/or TTLS Authentication Type for EAP to use from the drop

Configuring Access Point Security6-674. Use the Radius Client Authentication table to configure multiple shared secrets based on the subnet or host at

AP-51xx Access Point Product Reference Guide6-682. Enter the appropriate information within the LDAP Configuration field to allow the access point to

Configuring Access Point Security6-693. Click Apply to save any changes to the LDAP screen. Navigating away from the screen without clicking Apply res

AP-51xx Access Point Product Reference Guide6-706.14.3 Configuring a Proxy Radius ServerThe access point has the capability to proxy authentication re

Configuring Access Point Security6-712. Refer to the Proxy Configuration field to define the proxy server’s retry count and timeout values. 3. Use the

Introduction1-13the latest firmware version for full feature functionality. An AP-5181 model access point does not support firmware earlier than 1.1.1

AP-51xx Access Point Product Reference Guide6-724. To remove a row, select the row and click the Del (Delete) button.5. Click Apply to save any change

Configuring Access Point Security6-73Refer to the Groups field for a list of all groups in the local Radius database. The groups are listed in the ord

AP-51xx Access Point Product Reference Guide6-747. Click the List of Groups cell. A new screen displays enabling you to associate groups with the user

Configuring Access Point Security6-753. To add the user to a group, select the group in the Available list (on the right) and click the <-Add butto

AP-51xx Access Point Product Reference Guide6-766.14.5 Defining User Access Permissions by GroupAn external AAA server maintains the users and groups

Configuring Access Point Security6-77The Access Policy screen displays the following fields: groups The groups field displays the names of those exist

AP-51xx Access Point Product Reference Guide6-782. Review the existing access intervals assigned to each group by selecting the group from amongst tho

Configuring Access Point Security6-794. Define up to 10 access policies for the selected group within the Time Based Access Policy field.Use the drop-

AP-51xx Access Point Product Reference Guide6-805. Refer to the WLANs field to select existing WLANs to apply to the selected group’s set of access pe

Monitoring StatisticsThe access point has functionality to display robust transmit and receive statistics for its WAN and LAN port. Wireless Local Are

AP-51xx Access PointProduct Reference Guide72E-103901-01January 2008

AP-51xx Access Point Product Reference Guide1-14The Power Injector (Part No. AP-PSBIAS-T-1P-AF) is a single-port, 802.3af compliant Power over Etherne

AP-51xx Access Point Product Reference Guide7-2See the following sections for more details on viewing statistics for the access point:• Viewing WAN St

Monitoring Statistics7-32. Refer to the Information field to reference the following access point WAN data:Status The Status field displays Enabled if

AP-51xx Access Point Product Reference Guide7-43. Refer to the Received field to reference data received over the access point WAN port.Mask The Mask

Monitoring Statistics7-54. Refer to the Transmitted field to reference data received over the access point WAN port.5. Click the Clear WAN Stats butto

AP-51xx Access Point Product Reference Guide7-67.2 Viewing LAN StatisticsUse the LAN Stats screen to monitor the activity of the access point’s LAN1 o

Monitoring Statistics7-73. Refer to the Received field to view data received over the access point LAN port.Status Displays whether this particular LA

AP-51xx Access Point Product Reference Guide7-84. Refer to the Transmitted field to view statistics transmitted over the access point LAN port.RX Erro

Monitoring Statistics7-95. Click the Clear LAN Stats button to reset each of the data collection counters to zero in order to begin new data collectio

AP-51xx Access Point Product Reference Guide7-102. Refer to the Spanning Tree Info field to for details on spanning tree state, and root access point

Monitoring Statistics7-113. Refer to the Port Interface Table to assess the state of the traffic over the ports listed within the table for the root a

Introduction1-151.2.16 Support for CAM and PSP MUsThe access point supports both CAM and PSP powered MUs. CAM (Continuously Aware Mode) MUs leave thei

AP-51xx Access Point Product Reference Guide7-124. Click the Logout button to securely exit the Access Point applet. There will be a prompt confirming

Monitoring Statistics7-132. Refer to the WLAN Summary field to reference high-level data for each enabled WLAN.Name Displays the names of all the enab

AP-51xx Access Point Product Reference Guide7-143. Refer to the Total AP RF Traffic field to view throughput information for the access point and WLAN

Monitoring Statistics7-157.3.1 Viewing WLAN StatisticsUse the WLAN Stats screen to view detailed statistics for individual WLANs.The WLAN Stats screen

AP-51xx Access Point Product Reference Guide7-163. Refer to the Traffic field to view performance and throughput information for the WLAN selected fro

Monitoring Statistics7-174. Refer to the RF Status field to view the following MU signal, noise and performance information for the WLAN selected from

AP-51xx Access Point Product Reference Guide7-186. Click the Clear WLAN Stats button to reset each of the data collection counters to zero in order to

Monitoring Statistics7-192. Refer to the Radio Summary field to reference access point radio information.Type Displays the type of radio (either 802.1

AP-51xx Access Point Product Reference Guide7-203. Click the Clear All Radio Stats button to reset each of the data collection counters to zero in ord

Monitoring Statistics7-212. Refer to the Information field to view the access point 802.11a or 802.11b/g radio’s MAC address, placement and transmissi

AP-51xx Access Point Product Reference Guide1-161.2.19 Advanced Event Logging CapabilityThe access point provides the capability for periodically logg

AP-51xx Access Point Product Reference Guide7-223. Refer to the Traffic field to view performance and throughput information for the target access poi

Monitoring Statistics7-234. Refer to the RF Status field to view the following MU signal, noise and performance information for the target access poin

AP-51xx Access Point Product Reference Guide7-247. Click the Logout button to securely exit the Access Point applet.7.4.1.1 Retry HistogramRefer to th

Monitoring Statistics7-25number of packets requiring 1 retry, 2 retries etc. Use this information to assess whether an abundance of retries warrants r

AP-51xx Access Point Product Reference Guide7-262. Refer to the MU List field to reference associated MU address, throughput and retry information.IP

Monitoring Statistics7-273. Click the Refresh button to update the data collections displayed without resetting the data collections to zero.4. Click

AP-51xx Access Point Product Reference Guide7-281. Select Status and Statistics -> MU Stats from the access point menu tree.2. Highlight a specific

Monitoring Statistics7-296. Refer to the RF Status field to view MU signal and signal disturbance information.7. Refer to the Errors field to view MU

AP-51xx Access Point Product Reference Guide7-308. Click OK to exit the screen. 7.5.2 Pinging Individual MUsThe access point can verify its link with

Monitoring Statistics7-314. Click the Ping button to begin transmitting ping packets to the station address specified.Refer to the Number of Responses

Introduction1-17The DHCP client automatically sends a DHCP request at an interval specified by the DHCP server to renew the IP address lease as long a

AP-51xx Access Point Product Reference Guide7-327.6 Viewing the Mesh Statistics SummaryThe access point has the capability of detecting and displaying

Monitoring Statistics7-332. Click the Refresh button to update the display of the Mesh Statistics Summary screen to the latest values.3. Click the Det

AP-51xx Access Point Product Reference Guide7-34The Known AP Statistics screen displays the following information:2. Click the Clear Known AP Stats bu

Monitoring Statistics7-35The Known AP Details screen displays the target AP’s MAC address, IP address, radio channel, number of associated MUs, packet

AP-51xx Access Point Product Reference Guide7-365. Click the Send Cfg to APs button to send the your access point’s configuration to other access poin

CLI ReferenceThe access point Command Line Interface (CLI) is accessed through the serial port or a Telnet session. The access point CLI follows the s

AP-51xx Access Point Product Reference Guide8-28.1 Connecting to the CLI 8.1.1 Accessing the CLI through the Serial PortTo connect to the access point

8-38.2 Admin and Common CommandsAP51xx>admin>Description: Displays admin configuration options. The items available under this command are shown

AP-51xx Access Point Product Reference Guide8-4AP51xx>admin>helpDescription: Displays general CLI user interface help.Syntax: Example: admin>

8-5AP51xx>admin>passwdDescription: Changes the password for the admin login. Syntax: Example: admin>passwdOld Admin Password:****** New Admin

AP-51xx Access Point Product Reference Guide1-18Once the access point (in client bridge mode) establishes at least one wireless connection, it establi

AP-51xx Access Point Product Reference Guide8-6AP51xx>admin>summaryDescription: Displays the access point’s system summary. Syntax: Example:admi

8-7AP51xx>admin>..Description: Displays the parent menu of the current menu. This command appears in all of the submenus under admin. In each ca

AP-51xx Access Point Product Reference Guide8-8AP51xx>admin> /Description: Displays the root menu, that is, the top-level CLI menu. This command

8-9AP51xx>admin>saveDescription: Saves the configuration to system flash. The save command appears in all of the submenus under admin. In each c

AP-51xx Access Point Product Reference Guide8-10AP51xx>admin>quitDescription: Exits the command line interface session and terminates the sessio

8-118.3 Network CommandsAP51xx>admin(network)>Description: Displays the network submenu. The items available under this command are shown below.

AP-51xx Access Point Product Reference Guide8-128.3.1 Network LAN CommandsAP51xx>admin(network.lan)>Description: Displays the LAN submenu. The i

8-13AP51xx>admin(network.lan)> showDescription: Displays the access point LAN settings. Syntax: Example:admin(network.lan)>showLAN On Etherne

AP-51xx Access Point Product Reference Guide8-14Network Mask : 255.255.255.255 Default Gateway : 192.168.1.1Domain Name : Primary DNS Server : 192

8-15AP51xx>admin(network.lan)> setDescription: Sets the LAN parameters for the LAN port. Syntax: Example: admin(network.lan)>admin(network.la

Introduction1-19screen enables the administrator to set WLAN access based on user groups defined within the User Database screen. Each user is authori

AP-51xx Access Point Product Reference Guide8-16Related Commands: For information on configuring the LAN using the applet (GUI), see Configuring the L

8-178.3.1.1 Network LAN, Bridge CommandsAP51xx>admin(network.lan.bridge)>Description: Displays the access point Bridge submenu.For an overview o

AP-51xx Access Point Product Reference Guide8-18AP51xx>admin(network.lan.bridge)> showDescription: Displays the mesh bridge configuration param

8-19AP51xx>admin(network.lan.bridge)> setDescription: Sets the mesh configuration parameters for the access point’s LANs.Syntax: Example:admin(

AP-51xx Access Point Product Reference Guide8-208.3.1.2 Network LAN, WLAN-Mapping Commands AP51xx>admin(network.lan.wlan-mapping)>Description: D

8-21AP51xx>admin(network.lan.wlan-mapping)> show Description: Displays the VLAN list currently defined for the access point.. These parameters

AP-51xx Access Point Product Reference Guide8-22admin(network.lan.wlan-mapping)>show wlanWLAN1:WLAN Name :WLAN1ESSID :101Radio :VLAN :Security Poli

8-23AP51xx>admin(network.lan.wlan-mapping)> set Description: Sets VLAN parameters for the access point. Syntax: Example:admin(network.lan.wlan-

AP-51xx Access Point Product Reference Guide8-24AP51xx>admin(network.lan.wlan-mapping)> create Description:Creates a VLAN for the access point.

8-25AP51xx>admin(network.lan.wlan-mapping)> editDescription:Modifies a VLAN’s name and ID.Syntax: For information on editing VLANs using the ap

AP-51xx Access Point Product Reference Guide1-201.2.29 Manual Date and Time SettingsAs an alternative to defining a NTP server to provide access point

AP-51xx Access Point Product Reference Guide8-26AP51xx>admin(network.lan.wlan-mapping)> deleteDescription:Deletes a specific VLAN or all VLANs.S

8-27AP51xx>admin(network.lan.wlan-mapping)> lan-mapDescription:Maps an access point VLAN to a WLAN.Syntax: admin(network.lan.wlan-mapping)>la

AP-51xx Access Point Product Reference Guide8-28AP51xx>admin(network.lan.wlan-mapping)> vlan-mapDescription:Maps an access point VLAN to a WLAN.

8-298.3.1.3 Network LAN, DHCP CommandsAP51xx>admin(network.lan.dhcp)>Description: Displays the access point DHCP submenu. The items available ar

AP-51xx Access Point Product Reference Guide8-30AP51xx>admin(network.lan.dhcp)> showDescription: Shows DHCP parameter settings.Syntax: Example:

8-31AP51xx>admin(network.lan.dhcp)> setDescription: Sets DHCP parameters for the LAN port. Syntax:Example: admin(network.lan.dhcp)>set range

AP-51xx Access Point Product Reference Guide8-32AP51xx>admin(network.lan.dhcp)> addDescription: Adds static DHCP address assignments. Syntax: Ex

8-33AP51xx>admin(network.lan.dhcp)> deleteDescription: Deletes static DHCP address assignments. Syntax: Example: admin(network.lan.dhcp)>list

AP-51xx Access Point Product Reference Guide8-34AP51xx>admin(network.lan.dhcp)> listDescription: Lists static DHCP address assignments. Syntax:E

8-358.3.1.4 Network Type Filter CommandsAP51xx>admin(network.lan.type-filter)>Description: Displays the access point Type Filter submenu. The it

Introduction1-21(demodulates) the signal by reapplying the direct sequence chipping code. This demodulation results in the original digital data.The a

AP-51xx Access Point Product Reference Guide8-36AP51xx>admin(network.lan.type-filter)> showDescription: Displays the access point’s current Ethe

8-37AP51xx>admin(network.lan.type-filter)> setDescription: Defines the access point Ethernet Type Filter configuration. Syntax: Example: admin(n

AP-51xx Access Point Product Reference Guide8-38AP51xx>admin(network.lan.type-filter)> addDescription: Adds an Ethernet Type Filter entry. Synta

8-39AP51xx>admin(network.lan.type-filter)> deleteDescription: Removes an Ethernet Type Filter entry individually or the entire Type Filter list.

AP-51xx Access Point Product Reference Guide8-408.3.2 Network WAN CommandsAP51xx>admin(network.wan)>Description: Displays the WAN submenu. The i

8-41AP51xx>admin(network.wan)> showDescription: Displays the access point WAN port parameters. Syntax: Example: admin(network.wan)>showStatus

AP-51xx Access Point Product Reference Guide8-42AP51xx>admin(network.wan)> setDescription: Defines the configuration of the access point WAN por

8-438.3.2.1 Network WAN NAT CommandsAP51xx>admin(network.wan.nat)>Description: Displays the NAT submenu. The items available under this command

AP-51xx Access Point Product Reference Guide8-44AP51xx>admin(network.wan.nat)> showDescription: Displays access point NAT parameters. Syntax: Ex

8-45AP51xx>admin(network.wan.nat)> setDescription: Sets NAT inbound and outbound parameters. Syntax: Example: admin(network.wan.nat)>set type

AP-51xx Access Point Product Reference Guide1-22If the MU does not find an access point with a workable signal, it can perform a scan to find any AP.

AP-51xx Access Point Product Reference Guide8-46AP51xx>admin(network.wan.nat)> addDescription: Adds NAT entries. Syntax: Example: admin(network.

8-47AP51xx>admin(network.wan.nat)> deleteDescription: Deletes NAT entries. Syntax: Example:admin(network.wan.nat)>list 1 --------------------

AP-51xx Access Point Product Reference Guide8-48AP51xx>admin(network.wan.nat)> listDescription: Lists access point NAT entries for the specified

8-498.3.2.2 Network WAN, VPN CommandsAP51xx>admin(network.wan.vpn)>Description: Displays the VPN submenu. The items available under this command

AP-51xx Access Point Product Reference Guide8-50AP51xx>admin(network.wan.vpn)> add Description: Adds a VPN tunnel entry. Syntax: Example: admin(

8-51AP51xx>admin(network.wan.vpn)> setDescription: Sets VPN entry parameters. Syntax: set type <name> <tunnel type> Sets the tunnel

AP-51xx Access Point Product Reference Guide8-52For information on configuring VPN using the applet (GUI), see Configuring VPN Tunnels on page 6-36. s

8-53AP51xx>admin(network.wan.vpn)> deleteDescription: Deletes VPN tunnel entries. Syntax: Example: admin(network.wan.vpn)>list --------------

AP-51xx Access Point Product Reference Guide8-54AP51xx>admin(network.wan.vpn)> listDescription: Lists VPN tunnel entries. Syntax: Example:admin(

8-55AP51xx>admin(network.wan.vpn)> resetDescription: Resets all of the access point’s VPN tunnels. Syntax: Example: admin(network.wan.vpn)>re

Introduction1-23supports multiple-cell operations with fast roaming between cells. Within a direct-sequence system, each cell can operates independent

AP-51xx Access Point Product Reference Guide8-56AP51xx>admin(network.wan.vpn)> statsDescription: Lists statistics for all active tunnels. Syntax

8-57AP51xx>admin(network.wan.vpn)> ikestateDescription: Displays statistics for all active tunnels using Internet Key Exchange (IKE). Syntax: Ex

AP-51xx Access Point Product Reference Guide8-588.3.2.3 AP51xx>admin(network.wan.content)>Description: Displays the Outbound Content Filtering m

8-59AP51xx>admin(network.wan.content)> addcmdDescription: Adds control commands to block outbound traffic. Syntax:Example:admin(network.wan.cont

AP-51xx Access Point Product Reference Guide8-60AP51xx>admin(network.wan.content)> delcmdDescription: Deletes control commands to block outbound

8-61AP51xx>admin(network.wan.content)> listDescription: Lists application control commands. Syntax:Example:admin(network.wan.content)>list we

AP-51xx Access Point Product Reference Guide8-628.3.2.4 Network WAN, Dynamic DNS CommandsAP51xx>admin(network.wan.dyndns)>Description: Displays

8-63AP51xx>admin(network.wan.dyndns)> setDescription: Sets the access point’s Dynamic DNS configuration. Syntax:Example:admin(network.wan.dyndns

AP-51xx Access Point Product Reference Guide8-64AP51xx>admin(network.wan.dyndns)> updateDescription: Updates the access point’s current WAN IP a

8-65AP51xx>admin(network.wan.dyndns)> showDescription: Shows the current Dynamic DNS configuration. Syntax:Example:admin(network.wan.dyndns)>

AP-51xx Access Point Product Reference Guide1-24• Signal strength between the and MU• Number of MUs currently associated with the access point• MUs en

AP-51xx Access Point Product Reference Guide8-668.3.3 Network Wireless CommandsAP51xx>admin(network.wireless)Description: Displays the access point

8-678.3.3.1 Network WLAN CommandsAP51xx>admin(network.wireless.wlan)>Description: Displays the access point wireless LAN (WLAN) submenu. The ite

AP-51xx Access Point Product Reference Guide8-68AP51xx>admin(network.wireless.wlan)> showDescription: Displays the access point’s current WLAN c

8-69AP51xx>admin(network.wireless.wlan)> createDescription: Defines the parameters of a new WLAN. Syntax: Example: admin(network.wireless.wlan.c

AP-51xx Access Point Product Reference Guide8-70QoS Policy : Defaultadmin(network.wireless.wlan.create)>show security-----------------------------

8-71AP51xx>admin(network.wireless.wlan)> editDescription: Edits the properties of an existing WLAN policy.Syntax:For information on editing a WL

AP-51xx Access Point Product Reference Guide8-72AP51xx>admin(network.wireless.wlan)> deleteDescription: Deletes an existing WLAN.Syntax:For info

8-73AP51xx>admin(network.wireless.wlan.hotspot)>Description: Displays the Hotspot submenu. The items available under this command include: For i

AP-51xx Access Point Product Reference Guide8-74AP51xx>admin(network.wireless.wlan.hotspot)> showDescription: Displays the current access point

8-75AP51xx>admin(network.wireless.wlan.hotspot)> redirectionDescription: Goes to the hotspot redirection menu.Syntax:Example:admin(network.wirel

Introduction1-25• Access Point - As an Access Point, the access point functions as a layer 2 bridge. The wired uplink can operate as a trunk and suppo

AP-51xx Access Point Product Reference Guide8-76AP51xx>admin(network.wireless.wlan.hotspot)> radiusDescription: Goes to the hotspot Radius menu.

8-77AP51xx>admin(network.wireless.wlan.hotspot.radius)> setDescription: Sets the Radius hotspot configuration.Syntax:Example:admin(network.wirel

AP-51xx Access Point Product Reference Guide8-78AP51xx>admin(network.wireless.wlan.hotspot.radius)> showDescription: Shows Radius hotspot server

8-79AP51xx>admin(network.wireless.wlan.hotspot)> white-listDescription: Goes to the hotspot white-list menu.Syntax:Example:admin(network.wireles

AP-51xx Access Point Product Reference Guide8-808.3.3.2 Network Security CommandsAP51xx>admin(network.wireless.security)>Description: Displays t

8-81AP51xx>admin(network.wireless.security)> showDescription: Displays the access point’s current security configuration. Syntax:Example:admin(n

AP-51xx Access Point Product Reference Guide8-82AP51xx>admin(network.wireless.security)> createDescription: Defines the parameter of access poin

8-83secret <sidx> <secret> Sets the EAP shared secret <secret> (1-63 characters) for server <sidx> (1-primary or 2-secondary).

AP-51xx Access Point Product Reference Guide8-84mu-retry <count> Sets the EAP maximum number of MU retries to <count> (1-10).svr-timeout &

8-85For information on configuring the encryption and authentication options available to the access point using the applet (GUI), see Configuring Sec

AP-51xx Access Point Product Reference Guide1-26Make configuration changes to access point’s individually. Optionally, use the access point import/exp

AP-51xx Access Point Product Reference Guide8-86AP51xx>admin(network.wireless.security.edit)> Description: Edits the properties of a specific se

8-87AP51xx>admin(network.wireless.security)> deleteDescription: Deletes a specific security policy. Syntax: For information on configuring the e

AP-51xx Access Point Product Reference Guide8-888.3.3.3 Network ACL CommandsAP51xx>admin(network.wireless.acl)>Description: Displays the access

8-89AP51xx>admin(network.wireless.acl)> showDescription: Displays the access point’s current ACL configuration. Syntax:Example:admin(network.wir

AP-51xx Access Point Product Reference Guide8-90AP51xx>admin(network.wireless.acl)> createDescription: Creates an MU ACL policy. Syntax: Example

8-91AP51xx>admin(network.wireless.acl.edit)>Description: Edits the properties of an existing MU ACL policy.Syntax: For information on configurin

AP-51xx Access Point Product Reference Guide8-92AP51xx>admin(network.wireless.acl)> deleteDescription: Removes an MU ACL policy. Syntax: For inf

8-938.3.3.4 Network Radio Configuration Commands AP51xx>admin(network.wireless.radio)>Description: Displays the access point Radio submenu. The

AP-51xx Access Point Product Reference Guide8-94AP51xx>admin(network.wireless.radio)> showDescription: Displays the access point’s current radio

8-95AP51xx>admin(network.wireless.radio)> setDescription: Enables an access point Radio and defines the RF band of operation.Syntax: Example: ad

Introduction1-271.3.8 AP-51xx MAC Address AssignmentFor both an AP-5131 and AP-5181 model access point, MAC address assignments are as follows:• WAN -

AP-51xx Access Point Product Reference Guide8-96AP51xx>admin(network.wireless.radio.radio1)>Description: Displays a specific 802.11b/g radio sub

8-97AP51xx>admin(network.wireless.radio.radio1)> show Description: Displays specific 802.11b/g radio settings.Syntax: Example: admin(network.wir

AP-51xx Access Point Product Reference Guide8-98admin(network.wireless.radio.radio1)>show qosRadio QOS Parameter Set 11g-default-------------------

8-99AP51xx>admin(network.wireless.radio.802-11bg)> setDescription: Defines specific 802.11b/g radio parameters.Syntax: Example: admin(network.wi

AP-51xx Access Point Product Reference Guide8-100AP51xx>admin(network.wireless.radio.802-11bg.advanced)>Description: Displays the advanced subme

8-101AP51xx>admin(network.wireless.radio.802-11bg.advanced)> showDescription: Displays the BSSID to WLAN mapping for the 802.11b/g radio.Syntax:

AP-51xx Access Point Product Reference Guide8-102AP51xx>admin(network.wireless.radio.802-11bg.advanced)> setDescription: Defines advanced parame

8-103AP51xx>admin(network.wireless.radio.radio2)>Description: Displays a specific 802.11a radio submenu. The items available under this command

AP-51xx Access Point Product Reference Guide8-104AP51xx>admin(network.wireless.radio.802-11a)> showDescription: Displays specific 802.11a radio

8-105admin(network.wireless.radio.802-11a)>show qosRadio QOS Parameter Set: 11a default------------------------------------------------------------

AP-51xx Access Point Product Reference Guide1-28

AP-51xx Access Point Product Reference Guide8-106AP51xx>admin(network.wireless.radio.802-11a)> setDescription: Defines specific 802.11a radio pa

8-107AP51xx>admin(network.wireless.radio.802-11a.advanced)>Description: Displays the advanced submenu for the 802-11a radio. The items available

AP-51xx Access Point Product Reference Guide8-108AP51xx>admin(network.wireless.radio.802-11a.advanced)> showDescription: Displays the BSSID to W

8-109AP51xx>admin(network.wireless.radio.802-11a.advanced)> setDescription: Defines advanced parameters for the target 802..11a radio.Syntax: Ex

AP-51xx Access Point Product Reference Guide8-1108.3.3.5 Network Quality of Service (QoS) CommandsAP51xx>admin(network.wireless.qos)>Description

8-111AP51xx>admin(network.wireless.qos)> showDescription: Displays the access point’s current QoS policy by summary or individual policy. Syntax

AP-51xx Access Point Product Reference Guide8-112AP51xx>admin(network.wireless.qos.create)>Description: Defines an access point QoS policy. Synt

8-113AP51xx>admin(network.wireless.qos.edit)>Descripton:Edits the properties of an existing QoS policy.Syntax: For information on configuring th

AP-51xx Access Point Product Reference Guide8-114AP51xx>admin(network.wireless.qos)> deleteDescription: Removes a QoS policy. Syntax: For inform

8-1158.3.3.6 Network Bandwith Management CommandsAP51xx>admin(network.wireless.bandwidth)>Description: Displays the access point Bandwidth Manag

Hardware InstallationAn access point installation includes mounting the access point, connecting the access point to the network (LAN or WAN port conn

AP-51xx Access Point Product Reference Guide8-116AP51xx>admin(network.wireless.bandwidth)> showDescription: Displays the access point’s current

8-117AP51xx>admin(network.wireless.bandwidth)> setDescription: Defines the access point Bandwidth Management configuration. Syntax: For informat

AP-51xx Access Point Product Reference Guide8-1188.3.3.7 Network Rogue-AP CommandsAP51xx>admin(network.wireless.rogue-ap)>Description: Displays

8-119AP51xx>admin(network.wireless.rogue-ap)> showDescription: Displays the current access point Rogue AP detection configuration.Syntax:Example

AP-51xx Access Point Product Reference Guide8-120AP51xx>admin(network.wireless.rogue-ap)> setDescription: Defines the access point ACL rogue AP

8-121AP51xx>admin(network.wireless.rogue-ap.mu-scan)>Description: Displays the Rogue-AP mu-scan submenu.Syntax: add Add all or just one scan res

AP-51xx Access Point Product Reference Guide8-122AP51xx>admin(network.wireless.rogue-ap.mu-scan)> startDescription: Initiates an MU scan from a

8-123AP51xx>admin(network.wireless.rogue-ap.mu-scan)> showDescription: Displays the results of an MU scan. Syntax: For information on configurin

AP-51xx Access Point Product Reference Guide8-124AP51xx>admin(network.wireless.rogue-ap.allowed-list)>Description: Displays the Rogue-AP allowed

8-125AP51xx>admin(network.wireless.rogue-ap.allowed-list)> showDescription: Displays the Rogue AP allowed List. Syntax: Example: admin(network.w

AP-51xx Access Point Product Reference Guide2-22.1 PrecautionsBefore installing an AP-5131 or AP-5181 model access point verify the following:• Do not

AP-51xx Access Point Product Reference Guide8-126AP51xx>admin(network.wireless.rogue-ap.allowed-list)> addDescription: Adds an AP MAC address an

8-127AP51xx>admin(network.wireless.rogue-ap.allowed-list)> deleteDescription: Deletes an AP MAC address and ESSID to existing allowed list.Synta

AP-51xx Access Point Product Reference Guide8-1288.3.3.8 Network MU Locationing CommandsAP51xx>admin(network.wireless.mu-locationing)>Descriptio

8-129AP51xx>admin(network.wireless.mu-locationing> showDescription: Displays the MU probe table configuration Syntax: Example:admin(network.wire

AP-51xx Access Point Product Reference Guide8-130AP51xx>admin(network.wireless.mu-locationing> setDescription: Defines the MU probe table config

8-1318.3.4 Network Firewall CommandsAP51xx>admin(network.firewall)>Description: Displays the access point firewall submenu. The items available

AP-51xx Access Point Product Reference Guide8-132AP51xx>admin(network.firewall)> showDescription: Displays the access point firewall parameters.

8-133AP51xx>admin(network.firewall)> setDescription: Defines the access point firewall parameters. Syntax: Example: admin(network.firewall)>s

AP-51xx Access Point Product Reference Guide8-134AP51xx>admin(network.firewall)> accessDescription: Enables or disables firewall permissions thr

8-135AP51xx>admin(network.firewall)> advancedDescription: Displays whether an access point firewall rule is intended for inbound traffic to an i

Hardware Installation2-3Verify the model indicated on the bottom of the AP-5131 is correct. Contact the Support Center to report missing or improperly

AP-51xx Access Point Product Reference Guide8-1368.3.5 Network Router CommandsAP51xx>admin(network.router)>Description: Displays the router subm

8-137AP51xx>admin(network.router)> showDescription: Shows the access point route table. Syntax: Example: admin(network.router)>show routes---

AP-51xx Access Point Product Reference Guide8-138AP51xx>admin(network.router)> setDescription: Shows the access point route table. Syntax: For i

8-139AP51xx>admin(network.router)> addDescription: Adds user-defined routes. Syntax: Example: admin(network.router)>add 192.168.3.0 255.255.2

AP-51xx Access Point Product Reference Guide8-140AP51xx>admin(network.router)> deleteDescription: Deletes user-defined routes. Syntax: Example:

8-141AP51xx>admin(network.router)> listDescription: Lists user-defined routes. Syntax: Example: admin(network.router)>list-------------------

AP-51xx Access Point Product Reference Guide8-1428.4 System CommandsAP51xx>admin(system)>Description: Displays the System submenu. The items ava

8-143AP51xx>admin(system)>restart Description: Restarts the access point access point. Syntax: Example:admin(system)>restart*****************

AP-51xx Access Point Product Reference Guide8-144AP51xx>admin(system)>showDescription: Displays high-level system information helpful to differe

8-145AP51xx>admin(system)>setDescription: Sets access point system parameters. Syntax: For information on configuring System Settings using the

AP-51xx Access Point Product Reference Guide2-4For an overview on the optional antennae for the AP-5131, see Antenna Options on page 2-6. For detailed

AP-51xx Access Point Product Reference Guide8-146AP51xx>admin(system)>lastpwDescription: Displays last expired debug password.Example:admin(syst

8-147AP51xx>admin(system)>arpDescription: Dispalys the access point’s arp table.Example:admin(system)>arpAddress HWtype HWaddress Flags Mask

AP-51xx Access Point Product Reference Guide8-1488.4.1 Adaptive AP Setup CommandsAP51xx>admin(system)>aap-setupDescription: Displays the Adaptiv

8-149AP51xx>admin(system.aap-setup)>showDescription: Displays the access point’s Adaptive AP configuration. Syntax: Example:admin(system.aap-set

AP-51xx Access Point Product Reference Guide8-150AP51xx>admin(system.aap-setup)>setDescription: Sets access point’s Adaptive AP configuration. S

8-151AP51xx>admin(system.aap-setup)>deleteDescription: Deletes static switch address assignments.Syntax: Example:admin(system.aap-setup)>dele

AP-51xx Access Point Product Reference Guide8-1528.4.2 System Access CommandsAP51xx>admin(system)>accessDescription: Displays the access point a

8-153AP51xx>admin(system.access)>setDescription: Defines the permissions to access the access point applet, CLI, SNMP as well as defining their

AP-51xx Access Point Product Reference Guide8-154AP51xx>admin(system.access)>showDescription: Displays the current access point access permissio

8-1558.4.3 System Certificate Management CommandsAP51xx>admin(system)>cmgrDescription: Displays the Certificate Manager submenu. The items avail

Hardware Installation2-52.3 RequirementsThe minimum installation requirements for a single-cell, peer-to-peer network (regardless of access point mode

AP-51xx Access Point Product Reference Guide8-156AP51xx>admin(system.cmgr)> genreqDescription: Generates a certificate request.Syntax: Note: The

8-157AP51xx>admin(system.cmgr)> delselfDescription: )Deletes a self certificate. Syntax: Example: admin(system.cmgr)>delself MyCert2For infor

AP-51xx Access Point Product Reference Guide8-158AP51xx>admin(system.cmgr)> loadselfDescription: Loads a self certificate signed by the Certific

8-159AP51xx>admin(system.cmgr)> listselfDescription: Lists the loaded self certificates.Syntax: For information on configuring self certificate

AP-51xx Access Point Product Reference Guide8-160AP51xx>admin(system.cmgr)> loadcaDescription: Loads a trusted certificate from the Certificate

8-161AP51xx>admin(system.cmgr)> delcaDescription: Deletes a trusted certificate. Syntax: For information on configuring certificate settings usi

AP-51xx Access Point Product Reference Guide8-162AP51xx>admin(system.cmgr)> listcaDescription: Lists the loaded trusted certificate. Syntax: For

8-163AP51xx>admin(system.cmgr)> showreqDescription: Displays a certificate request in PEM format. Syntax: For information on configuring certifi

AP-51xx Access Point Product Reference Guide8-164AP51xx>admin(system.cmgr)> delprivkeyDescription: Deletes a private key. Syntax: For informatio

8-165AP51xx>admin(system.cmgr)> listprivkeyDescription: Lists the names of private keys. Syntax: For information on configuring certificate sett

ContentsAbout This GuideIntroduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

AP-51xx Access Point Product Reference Guide2-6To maximize the access point’s radio coverage area, Motorola recommends conducting a site survey to def

AP-51xx Access Point Product Reference Guide8-166AP51xx>admin(system.cmgr)> expcert Description: Exports the certificate file to a user defined

8-167AP51xx>admin(system.cmgr)> impcertDescription: Imports the target certificate file.Syntax: To import certificate information from an AP-513

AP-51xx Access Point Product Reference Guide8-1688.4.4 System SNMP CommandsAP51xx>admin(system)> snmp Description: Displays the SNMP submenu. Th

8-1698.4.4.1 System SNMP Access CommandsAP51xx>admin(system.snmp.access)Description: Displays the SNMP Access menu. The items available under this

AP-51xx Access Point Product Reference Guide8-170AP51xx>admin(system.snmp.access)> showDescription: Shows the SNMP v3 engine ID. Syntax: Example

8-171AP51xx>admin(system.snmp.access)> addDescription: Adds SNMP access entries for specific v1v2 and v3 user definitions. Syntax: For informati

AP-51xx Access Point Product Reference Guide8-172AP51xx>admin(system.snmp.access)> deleteDescription: Deletes SNMP access entries for specific v

8-173AP51xx>admin(system.snmp.access)> listDescription: Lists SNMP access entries. Syntax: Example:admin(system.snmp.access)>list acl -------

AP-51xx Access Point Product Reference Guide8-1748.4.4.2 System SNMP Traps CommandsAP51xx>admin(system.snmp.traps) Description: Displays the SNMP t

8-175AP51xx>admin(system.snmp.traps)> showDescription: Shows SNMP trap parameters. Syntax: Example: admin(system.snmp.traps)>show trapSNMP MU

Hardware Installation2-7The AP-5131 2.4 GHz antenna suite includes the following models:The AP-5131 5.2 GHz antenna suite includes the following model

AP-51xx Access Point Product Reference Guide8-176AP51xx>admin(system.snmp.traps)> setDescription: Sets SNMP trap parameters.Syntax: For informat

8-177AP51xx>admin(system.snmp.traps)> addDescription:Adds SNMP trap entries. Syntax: Example: admin(system.snmp.traps)>add v1v2 203.223.24.2

AP-51xx Access Point Product Reference Guide8-178AP51xx>admin(system.snmp.traps)> deleteDescription: Deletes SNMP trap entries. Syntax: Example:

8-179AP51xx>admin(system.snmp.traps)> listDescription: Lists SNMP trap entries. Syntax: Example: admin(system.snmp.traps)>add v1v2 203.223.24

AP-51xx Access Point Product Reference Guide8-1808.4.5 System User Database CommandsAP51xx>admin(system)> userdb Description: Goes to the user d

8-1818.4.5.1 Adding and Removing Users from the User DatabseAP51xx>admin(system.userdb)> userDescription: Adds and remvoves users from the user

AP-51xx Access Point Product Reference Guide8-182AP51xx>admin(system.userdb.user)> addDescription: Adds a new user to the user database. Syntax:

8-183AP51xx>admin(system.userdb.user)> deleteDescription: Removes a new user to the user database. Syntax: Example: admin(system.userdb.user>

AP-51xx Access Point Product Reference Guide8-184AP51xx>admin(system.userdb.user)>clearallDescription: Removes all existing user IDs from the sy

8-185AP51xx>admin(system.userdb.user)>setDescription: Sets a password for a user..Syntax: Example: admin(system.userdb.user>set george passwo

AP-51xx Access Point Product Reference Guide2-8For detailed specifications on the 2.4 GHz and 5.2 GHz antennae mentioned in this section, see section

AP-51xx Access Point Product Reference Guide8-1868.4.5.2 Adding and Removing Groups from the User DatabseAP51xx>admin(system.userdb)> groupDescr

8-187AP51xx>admin(system.userdb.group> createDescription: Creates a group name. Once defined, users can be added to the group.Syntax: Example: a

AP-51xx Access Point Product Reference Guide8-188AP51xx>admin(system.userdb.group> deleteDescription: Deletes an existing group.Syntax: Example:

8-189AP51xx>admin(system.userdb.group> clearallDescription: Removes all existing group names from the system.Syntax: Example: admin(system.userd

AP-51xx Access Point Product Reference Guide8-190AP51xx>admin(system.userdb.group> addDescription: Adds a user to an existing group.Syntax: Exam

8-191AP51xx>admin(system.userdb.group> removeDescription: Removes a user from an existing group.Syntax: Example: admin(system.userdb.group>re

AP-51xx Access Point Product Reference Guide8-192AP51xx>admin(system.userdb.group> showDescription: Displays existing groups.Syntax: Example: ad

8-1938.4.6 System Radius CommandsAP51xx>admin(system)> radius Description: Goes to the Radius system submenu.Syntax: For information on configur

AP-51xx Access Point Product Reference Guide8-194AP51xx>admin(system.radius)> set/showDescription: Sets or displays the Radius user database.Syn

8-1958.4.6.1 AP51xx>admin(system.radius)> eapDescription: Goes to the EAP submenu.Syntax: For information on configuring EAP Radius using the ap

Hardware Installation2-9The AP-5181 5.2 GHz antenna suite includes the following models:2.5 Power Options2.5.1 AP-5131 Power OptionsThe power options

AP-51xx Access Point Product Reference Guide8-196AP51xx>admin(system.radius.eap)> peapDescription: Goes to the Peap submenu.Syntax: For informat

8-197AP51xx>admin(system.radius.eap.peap> set/showDescription: Defines and displays Peap parametersSyntax: Example: admin(system.radius.eap.peap

AP-51xx Access Point Product Reference Guide8-198AP51xx>admin(system.radius.eap)> ttlsDescription: Goes to the TTLS submenu.Syntax: For informat

8-199AP51xx>admin(system.radius.eap.ttls> set/showDescription: Defines and displays TTLS parametersSyntax: Example: admin(system.radius.eap.ttls

AP-51xx Access Point Product Reference Guide8-2008.4.6.2 AP51xx>admin(system.radius)> policyDescription: Goes to the access policy submenu.Synta

8-201AP51xx>admin(system.radius.policy> set Description: Defines the group’s WLAN access policy.Syntax: Example: admin(system.radius.policy)>

AP-51xx Access Point Product Reference Guide8-202AP51xx>admin(system.radius.policy> access-time Description: setGoes to the time-based login sub

8-203AP51xx>admin(system.radius.policy> show Description: Displays a group’s access policy.Syntax: Example: admin(system.radius.policy)>showL

AP-51xx Access Point Product Reference Guide8-2048.4.6.3 AP51xx>admin(system.radius)> ldapDescription: Goes to the LDAP submenu.Syntax: For info

8-205AP51xx>admin(system.radius.ldap)> setDescription: Defines the LDAP parameters.Syntax: Example: admin(system.radius.ldap)>set ipadr 157.2

AP-51xx Access Point Product Reference Guide2-102.5.2 AP-5181 Power OptionsThe power options for the AP-5181 include: • Power Injector (Part No. AP-PS

AP-51xx Access Point Product Reference Guide8-206AP51xx>admin(system.radius.ldap)> show allDescription: Displays existing LDAP parameters.Syntax

8-2078.4.6.4 AP51xx>admin(system.radius)> proxyDescription: Goes to the Radius proxy server submenu.Syntax: For information on configuring Radiu

AP-51xx Access Point Product Reference Guide8-208AP51xx>admin(system.radius.proxy)> addDescription: Adds a proxy.Syntax: Example: admin(system.r

8-209AP51xx>admin(system.radius.proxy)> deleteDescription: Adds a proxy.Syntax: Example: admin(system.radius.proxy)>delete lancelotadmin(syst

AP-51xx Access Point Product Reference Guide8-210AP51xx>admin(system.radius.proxy)> clearallDescription: Removes all proxy server records from t

8-211AP51xx>admin(system.radius.proxy)> setDescription: Sets Radius proxy server parameters.Syntax: Example: admin(system.radius.proxy)>set d

AP-51xx Access Point Product Reference Guide8-2128.4.6.5 AP51xx>admin(system.radius)> clientDescription: Goes to the Radius client submenu.Synta

8-213AP51xx>admin(system.radius.client> addDescription: Adds a Radius client to those available to the Radius server.Syntax: Example: admin(syst

AP-51xx Access Point Product Reference Guide8-214AP51xx>admin(system.radius.client> deleteDescription: Removes a specified Radius client from th

8-215AP51xx>admin(system.radius.client> showDescription: Displays a list of configured Radius clients.Syntax: Example: admin(system.radius.clien

Hardware Installation2-11A separate Power Injector or Power Tap is required for each access point comprising the network.2.6.1 Installing the Power In

AP-51xx Access Point Product Reference Guide8-2168.4.7 System Network Time Protocol (NTP) CommandsAP51xx>admin(system)> ntp Description: Display

8-217AP51xx>admin(system.ntp)> showDescription: Displays the NTP server configuration. Syntax: Example: admin(system.ntp)>showcurrent time (U

AP-51xx Access Point Product Reference Guide8-218 AP51xx>admin(system.ntp)> date-zoneDescription: Show date, time and time zone.Syntax: Example:

8-219AP51xx>admin(system.ntp)> zone-listDescription: Displays an extensive list of time zones for countries around the world.Syntax: Example: ad

AP-51xx Access Point Product Reference Guide8-220AP51xx>admin(system.ntp)> setDescription: Sets NTP parameters for access point clock synchroniz

8-2218.4.8 System Log CommandsAP51xx>admin(system)> logs Description: Displays the access point log submenu. Logging options include:Syntax: sho

AP-51xx Access Point Product Reference Guide8-222AP51xx>admin(system.logs)> showDescription: Displays the current access point logging settings.

8-223AP51xx>admin(system.logs)> setDescription: Sets log options and parameters. Syntax: admin(system.logs)>set mode enableadmin(system.logs)

AP-51xx Access Point Product Reference Guide8-224AP51xx>admin(system.logs)> viewDescription: Displays the access point system log file. Syntax:

8-225AP51xx>admin(system.logs)> deleteDescription: Deletes the log files. Syntax: Example: admin(system.logs)>deleteFor information on config

AP-51xx Access Point Product Reference Guide2-121. Connect an RJ-45 Ethernet cable between the network data supply (host) and the Power Injector’s Dat

AP-51xx Access Point Product Reference Guide8-226AP51xx>admin(system.logs)> sendDescription: Sends log and core file to an FTP Server. Syntax: E

8-2278.4.9 System Configuration-Update CommandsAP51xx>admin(system.config)>Description: Displays the access point configuration update submenu.

AP-51xx Access Point Product Reference Guide8-228AP51xx>admin(system.config)> defaultDescription: Restores the full access point factory default

8-229AP51xx>admin(system.config)> partialDescription: Restores a partial factory default configuration. The access point’s LAN, WAN and SNMP set

AP-51xx Access Point Product Reference Guide8-230AP51xx>admin(system.config)> showDescription: Displays import/export parameters for the access

8-231AP51xx>admin(system.config)> setDescription: Sets the import/export parameters. Syntax: Example: admin(system.config)>set server 192.168

AP-51xx Access Point Product Reference Guide8-232AP51xx>admin(system.config)> exportDescription: Exports the configuration from the system. Synt

8-233AP51xx>admin(system.config)> importDescription: Imports the access point configuration to the access point. Errors could display as a resul

AP-51xx Access Point Product Reference Guide8-2348.4.10 Firmware Update CommandsAP51xx>admin(system)>fw-updateDescription: Displays the firmware

8-235AP51xx>admin(system.fw-update)>showDescription: Displays the current access point firmware update settings.Syntax: Example:admin(system.fw-

Hardware Installation2-13For more information and device specifications for the Power Injector, refer to the Power Injector Quick Install Guide (Part

AP-51xx Access Point Product Reference Guide8-236AP51xx>admin(system.fw-update)>setDescription: Defines access point firmware update settings an

8-237AP51xx>admin(system.fw-update)>updateDescription: Executes the access point firmware update over the WAN or LAN port using either ftp or tf

AP-51xx Access Point Product Reference Guide8-2388.5 Statistics CommandsAP51xx>admin(stats)Description: Displays the access point statistics submen

8-239AP51xx>admin(stats)> showDescription: Displays access point system information. Syntax: For information on displaying WAN port statistics u

AP-51xx Access Point Product Reference Guide8-240AP51xx>admin(stats)> send-cfg-apDescription: Copies the access point’s configuration to another

8-241AP51xx>admin(stats)> send-cfg-allDescription: Copies the access point’s configuration to all of the access points within the known AP table

AP-51xx Access Point Product Reference Guide8-242AP51xx>admin(stats)> clearDescription: Clears the specified statistics counters to zero to begi

8-243AP51xx>admin(stats)> flash-all-ledsDescription: Starts and stops the illumination of a specified access point’s LEDs.Syntax: Example:admin(

AP-51xx Access Point Product Reference Guide8-244AP51xx>admin(stats)> echoDescription: Defines the echo test values used to conduct a ping test

8-245AP51xx>admin.stats.echo)> showDescription: Shows Mobile Unit Statistics Summary.Syntax: Example:admin(stats.echo)>show------------------

AP-51xx Access Point Product Reference Guide2-143. Remove the backings from the four (4) rubber feet and attach them to the four rubber feet recess ar

AP-51xx Access Point Product Reference Guide8-246AP51xx>admin.stats.echo)> listDescription: Lists echo test parameters and results.Syntax: Examp

8-247AP51xx>admin.stats.echo)>setDescription: Defines the parameters of the echo test.Syntax: For information on MU Echo and Ping tests using th

AP-51xx Access Point Product Reference Guide8-248AP51xx>admin.stats.echo)> startDescription: Initiates the echo test.Syntax: Example:admin(stats

8-249AP51xx>admin(stats)> pingDescription: Defines the ping test values used to conduct a ping test to an AP with the same ESSID.Syntax: For inf

AP-51xx Access Point Product Reference Guide8-250AP51xx>admin.stats.ping)> showDescription: Shows Known AP Summary Details.Syntax: Example:admin

8-251AP51xx>admin.stats.ping)> listDescription: Lists ping test parameters and results.Syntax: Example:admin(stats.ping)>listStation Address

AP-51xx Access Point Product Reference Guide8-252AP51xx>admin.stats.ping)> setDescription: Defines the parameters of the ping test.Syntax: Examp

8-253AP51xx>admin.stats.echo)> startDescription: Initiates the ping test.Syntax: Example:admin(stats.ping)>startadmin(stats.ping)>listStat

AP-51xx Access Point Product Reference Guide8-254

Configuring Mesh Networking9.1 Mesh Networking OverviewAn AP-51xx can be configured in two modes to support the new mesh networking functionality. The

Hardware Installation2-15For standard 48-Volt power adapter (Part No. 50-14000-243R) and line cord installations:a. Connect RJ-45 Ethernet cable betwe

AP-51xx Access Point Product Reference Guide9-2access points configured as both a base and a client bridge function as repeaters to transmit data with

Configuring Mesh Networking9-3If an access point is configured as a base bridge (but not as a client bridge) it operates normally at boot time. The ba

AP-51xx Access Point Product Reference Guide9-4The access point in client bridge mode attempts to establish up to 3 simultaneous wireless connections.

Configuring Mesh Networking9-59.1.3 Defining the Mesh TopologyWhen a user wants to control how the spanning tree determines client bridge connections,

AP-51xx Access Point Product Reference Guide9-69.1.5 Normal OperationOnce the mesh network is defined, all normal access point operations are still al

Configuring Mesh Networking9-7As the Spanning Tree Protocol (STP) mentions, each mesh network maintains hello, forward delay and max age timers. The b

AP-51xx Access Point Product Reference Guide9-86. Click OK to return to either the LAN1 or LAN2 screen where updates to the Mesh STP Configuration can

Configuring Mesh Networking9-99.2.2 Configuring a WLAN for Mesh Networking SupportEach access point comprising a particular mesh network is required t

AP-51xx Access Point Product Reference Guide9-103. Assign an ESSID and Name to the WLAN that each access point will share when using this WLAN within

Configuring Mesh Networking9-114. Use the Available On checkboxes to specify the access point radio(s) used with the target WLAN within the mesh netwo

AP-51xx Access Point Product Reference GuideviAntenna Support for 2.4 GHz and 5.2 GHz Radios. . . . . . . . . . . . . . . . . . . . . . .1-6Sixteen Co

AP-51xx Access Point Product Reference Guide2-16If pre-drilling a hole, the recommended hole size is 2.8mm (0.11in.) if the screws are going directly

AP-51xx Access Point Product Reference Guide9-12If none of the existing policies are suitable, select the Create button to the right of the Security P

Configuring Mesh Networking9-1310. Select the Use Secure Beacon checkbox to not transmit the ESSID amongst the access points and devices within the me

AP-51xx Access Point Product Reference Guide9-14To configure the access point radio for mesh networking support:1. Select Network Configuration ->

Configuring Mesh Networking9-15Radio Status and MUs connected values update. If this is an existing radio within a mesh network, these values update i

AP-51xx Access Point Product Reference Guide9-16If the Client Bridge checkbox has been selected, use the Mesh Network Name drop-down menu to select th

Configuring Mesh Networking9-17the user from selecting the order base bridges are added to the mesh network when one of the three associated base brid

AP-51xx Access Point Product Reference Guide9-1812. Highlight a MAC address from the Preferred Base Bridge List and click the Up button to assign that

Configuring Mesh Networking9-1917. Click Apply to save any changes to the Radio Configuration screen. Navigating away from the screen without clicking

AP-51xx Access Point Product Reference Guide9-209.3 Mesh Network Deployment - Quick SetupThis section provides instructions on how to quickly setup an

Configuring Mesh Networking9-21AP#1 and AP#2 will be configured somewhat the same. However there are some important (yet subtle) differences. Therefor

Hardware Installation2-17For standard 48-Volt Power Adapter (Part No. 50-14000-243R) and line cord installations:a. Connect RJ-45 Ethernet cable betwe

AP-51xx Access Point Product Reference Guide9-223. Define a mesh supported WLAN.

Configuring Mesh Networking9-234. Enable base bridge functionality on the 802.11a radio (Radio 2).

AP-51xx Access Point Product Reference Guide9-245. Define a channel of operation for the 802.11a radio.

Configuring Mesh Networking9-25 6. If needed, create another WLAN mapped to the 802.11bg radio if 802.11bg support is required for MUs on that 802.11

AP-51xx Access Point Product Reference Guide9-269.3.1.2 Configuring AP#2AP#2 can be configured the same as AP#1 with the following exceptions: • Assig

Configuring Mesh Networking9-279.3.1.3 Configuring AP#3To define the configuration for AP#3 (a client bridge connecting to both AP#1 and AP#2 simultan

AP-51xx Access Point Product Reference Guide9-283. Create a mesh supported WLAN with the Enable Client Bridge Backhaul option selected. NOTE This WLA

Configuring Mesh Networking9-294. Select the Client Bridge checkbox to enable client bridge functionality on the 802.11a radio. Use the Mesh Network N

AP-51xx Access Point Product Reference Guide9-305. If needed, create another WLAN mapped to the 802.11bg radio if 802.11bg support is required for MUs

Configuring Mesh Networking9-319.3.2 Scenario 2 - Two Hop Mesh Network with a Base Bridge Repeater and a Client BridgeA conceptual illustration of sce

AP-51xx Access Point Product Reference Guide2-184. Cable the AP-5131 using either the Power Injector solution or an approved line cord and power suppl

AP-51xx Access Point Product Reference Guide9-329.3.2.1 Configuring AP#1The setup of AP#1 within this usage scenario is exactly the same as the AP#1 c

Configuring Mesh Networking9-332. Enable client and base bridge functionality on the 802.11a radio9.3.2.3 Configuring AP#3To define AP #3’s configurat

AP-51xx Access Point Product Reference Guide9-342. Add the 802.11a Radio MAC Address. In scenario #2, the mesh WLAN is mapped to BSS1 on the 802.11a r

Configuring Mesh Networking9-35 3. Determine the Radio MAC Address and BSSID MAC Addresses.

AP-51xx Access Point Product Reference Guide9-36 9.3.2.4 Verifying Mesh Network Functionality for Scenario #2You now have a three AP demo multi-hop me

Configuring Mesh Networking9-379.4 Mesh Networking Frequently Asked QuestionsThe following scenarios represent issues that could be encountered and re

AP-51xx Access Point Product Reference Guide9-38Mesh Deployment Issue 4 - Do I need to map a WLAN to a radio when configuring mesh backhaul on a Clien

Configuring Mesh Networking9-39ResolutionYes, both the AP-5131 and AP-5181 model access points are identical from a software deployment standpoint. so

AP-51xx Access Point Product Reference Guide9-40each one of them. If you don’t, the base bridge configuration file could get applied on a client bridg

Adaptive AP10.1 Adaptive AP OverviewAn adaptive AP (AAP) is an AP-51XX access point that can adopt like an AP300 (L3). The management of an AAP is con

Hardware Installation2-197. Orient the AP-5131 chassis by its length and the length of the ceiling T-bar.8. Rotate the AP-5131 chassis 45 degrees cloc

AP-51xx Access Point Product Reference Guide10-2The benefits of an AAP deployment include:• Centralized Configuration Management & Compliance - Wi

Adaptive AP10-310.1.2 Adaptive AP ManagementAn AAP can be adopted, configured and managed like a thin access port from the wireless switch. Once an a

AP-51xx Access Point Product Reference Guide10-410.1.4 LicensingAn AAP uses the same licensing scheme as a thin access port. This implies an existing

Adaptive AP10-5** The AP-51xx uses an encryption key to hash passphrases and security keys. To obtain the encryption passphrase, configure an AP-51xx

AP-51xx Access Point Product Reference Guide10-610.1.6 Securing a Configuration Channel Between Switch and APOnce an access point obtains a list of av

Adaptive AP10-7To review a sample AAP configuration, see Sample Switch Configuration File for IPSec and Independent WLAN on page 10-20.10.1.10 Adaptiv

AP-51xx Access Point Product Reference Guide10-8before MUs can pass traffic. This typically takes about 90 to 180 seconds depending on the size of the

Adaptive AP10-910.2 Supported Adaptive AP TopologiesFor this version 2.0 release of the access point firmware, the following AAP topologies are suppor

AP-51xx Access Point Product Reference Guide10-1010.2.2 Extended WLANs OnlyAn extended WLAN configuration forces all MU traffic through the switch. No

Adaptive AP10-1110.2.5 Extended WLAN with Mesh NetworkingMesh networking is an extension of the existing wired network. There is no special configurat

AP-51xx Access Point Product Reference Guide2-202.7.4 Above the Ceiling (Plenum) InstallationsAn AP-5131 above the ceiling installation requires placi

AP-51xx Access Point Product Reference Guide10-12• Configure the switch’s IP address on the AAP• Provide the switch IP address using DHCP option 189 o

Adaptive AP10-1310.4 Establishing Basic Adaptive AP ConnectivityThis section defines the activities required to configure basic AAP connectivity with

AP-51xx Access Point Product Reference Guide10-142. Select the Auto Discovery Enable checkbox. Enabling auto discovery will allow the AAP to be detect

Adaptive AP10-157. Click Apply to save the changes to the AAP setup. 10.4.1.2 Adopting an Adaptive AP Using a Configuration FileTo adopt an AAP using

AP-51xx Access Point Product Reference Guide10-1610.4.2 Switch ConfigurationBoth a WS5100 (running firmware version 3.1 or later) or a RFS7000 (runnin

Adaptive AP10-175. Select the target WLAN you would like to use for AAP support from those displayed and click the Edit button.6. Select the Independe

AP-51xx Access Point Product Reference Guide10-18Once an AAP is adopted by the switch, it displays within the switch Access Port Radios screen (under

Adaptive AP10-1910.4.3 Adaptive AP Deployment ConsiderationsBefore deploying your switch/AAP configuration, refer to the following usage caveats to op

AP-51xx Access Point Product Reference Guide10-2010.4.4 Sample Switch Configuration File for IPSec and Independent WLANThe following constitutes a sam

Adaptive AP10-21snmp-server manager v2 snmp-server manager v3 snmp-server user snmptrap v3 encrypted auth md5 0x7be2cb56f6060226f15974c936e2739b snmp-

Hardware Installation2-217. Remove the light pipe’s rubber stopper before installing the light pipe.8. Connect the light pipe to the bottom of the AP-

AP-51xx Access Point Product Reference Guide10-22wlan 4 enable wlan 4 ssid qs5-open wlan 4 vlan 230 wlan 5 enable wlan 5 ssid Mesh wlan 5 vlan 111 wla

Adaptive AP10-23radio 4 bss 2 6 radio 4 channel-power indoor 48 4 radio 4 rss enable radio 4 client-bridge bridge-select-mode auto radio 4 client-brid

AP-51xx Access Point Product Reference Guide10-24!interface ge3 switchport mode trunk switchport trunk native vlan 1 switchport trunk allowed vlan non

Adaptive AP10-25line con 0 line vty 0 24 ! end

AP-51xx Access Point Product Reference Guide10-26

Technical SpecificationsThis appendix provides technical specifications in the following areas: • Physical Characteristics• Electrical Characteristics

AP-51xx Access Point Product Reference GuideA-2A.1.1 AP-5131 Physical CharacteristicsThe AP-5131 has the following physical characteristics: Dimension

Technical SpecificationsA-3A.1.2 AP-5181 Physical CharacteristicsThe AP-5181 has the following physical characteristics: Dimensions 12 inches long x 8

AP-51xx Access Point Product Reference GuideA-4A.2 Electrical CharacteristicsBoth the AP-5131 and the AP-5181 access points have the following electri

Technical SpecificationsA-5A.4 Antenna SpecificationsThe antenna suite differs between the AP-5131 and AP-5181 model access points. Ensure your have s

AP-51xx Access Point Product Reference Guide2-2213. Attach safety wire (if used) to the AP-5131 safety wire tie point or security cable (if used) to t

AP-51xx Access Point Product Reference GuideA-6A.4.1.2 5.2 GHz Antenna MatrixThe following table describes each 5.2 GHz antenna approved for use with

Technical SpecificationsA-7A.4.2 AP-5181 Antenna SpecificationsThe AP-5181 2.4 GHz antenna suite includes the following models:LAK1 RPBNC-F N-F 0.305

AP-51xx Access Point Product Reference GuideA-8The AP-5181 5.2 GHz antenna suite includes the following models:Part Number Antenna TypeNominal Net Gai

Technical SpecificationsA-9A.5 Country CodesThe following list of countries and their country codes is useful when using the access point configuratio

AP-51xx Access Point Product Reference GuideA-10Cypress CY Serbia RSCzech Rep. CZ Singapore SGDenmark DK Slovak Republic SKDominican Republic DO Slove

Technical SpecificationsA-11Japan JPJordan JOKazakhstan KZKuwait KWLatvia LVLebanon LBLiechtenstein LILithuania LTLuxembourg LUMacedonia MKMalaysia MY

AP-51xx Access Point Product Reference GuideA-12

Usage ScenariosThis appendix provides practical usage scenarios for many of the access point’s key features. This information should be referenced as

AP-51xx Access Point Product Reference GuideB-2WAN port depending on which server responds first to the access point’s request for an automatic update

Usage ScenariosB-3• If the existing and update firmware files are the same, the firmware will not get updated.To configure the DHCP Server for automat

Hardware Installation2-232.8 AP-5131 LED IndicatorsThe AP-5131 utilizes seven LED indicators. Five LEDs display within four LED slots on the front of

AP-51xx Access Point Product Reference GuideB-4• Obtains and applies the expected IP Address from the DHCP Server• Downloads both the firmware and con

Usage ScenariosB-5c. Highlight Scope Options and select Configure Options.d. Under the General tab, check all 3 options mentioned within the Extended

AP-51xx Access Point Product Reference GuideB-6If the DHCP Server is configured for options 186 and 66 (to assign TFTP Server IP addresses) the access

Usage ScenariosB-7B.1.2.1 BootP OptionsThis section contains instructions for the automatic update of the access point firmware and configuration file

AP-51xx Access Point Product Reference GuideB-8Using options sa, bf and 136: 3. Copy the firmware and configuration files to the appropriate directory

Usage ScenariosB-9B.1.2.2 BootP PrioritiesThe following flowchart displays the priorities used by the access point when the BootP server is configured

AP-51xx Access Point Product Reference GuideB-10• Frequently Asked VPN QuestionsB.2.1 Configuring a VPN Tunnel Between Two Access PointsThe access poi

Usage ScenariosB-115. Enter the WAN port IP address of AP #1 for the Local WAN IP.6. Within the Remote Subnet and Remote Subnet Mask fields, enter the

AP-51xx Access Point Product Reference GuideB-1213. Select Pre Shared Key (PSK) from the IKE Authentication Mode drop-down menu.14. Enter a Passphrase

Usage ScenariosB-13B.2.2 Configuring a Cisco VPN DeviceThis section includes general instructions for configuring a Cisco PIX Firewall 506 series devi

AP-51xx Access Point Product Reference Guide2-24The LEDs on the rear of the AP-5131 are viewed using a single (customer installed) extended lightpipe,

AP-51xx Access Point Product Reference GuideB-14B.2.3 Frequently Asked VPN QuestionsThe following are common questions that arise when configuring a V

Usage ScenariosB-15• Question 3: Can the AP be accessed via its LAN interface of AP#1 from the local subnet of AP#2 and vice versa?Yes.• Question 4: W

AP-51xx Access Point Product Reference GuideB-16Yes. Only packets that match the VPN Tunnel Settings will be sent through the VPN tunnel. All other pa

Usage ScenariosB-17 • Question 9: I am using a direct cable connection between my two VPN gateways for testing and cannot get a tunnel established, ye

AP-51xx Access Point Product Reference GuideB-18• Verify you can ping each of the remote Gateway IP addresses from clients on either side. Failed ping

Usage ScenariosB-19These three rules should be configured above all other rules (default or user defined). When Advanced LAN Access is used, certain i

AP-51xx Access Point Product Reference GuideB-20B.3 Replacing an AP-4131 with an AP-5131 or AP-5181The access point’s modified default configuration e

Customer SupportComprehensive on-line support is available at the Support Central site at http://www.symbol.com/support/. Support Central provides our

AP-51xx Access Point Product Reference GuideC-2North American ContactsSupport (for warranty and service information): telephone: 1-800-653-5350 fax: (

Customer SupportC-3Web Support SitesProduct Downloadshttp://www.symbol.com/downloadsManualshttp://www.symbol.com/manualsAdditional InformationObtain a

Hardware Installation2-253. Attach the square mounting plate to the bridge with the supplied screws.4. Attach the AP-5181 and mounting plate to the br

AP-51xx Access Point Product Reference GuideC-4

Aaccess options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-25access pointCAM . . . . . . . . . . . . . . . . . . . . . . . . .

AP-51xx Access Point Product Reference GuideIN-6Bbandwidth management. . . . . . . . . . . . . . . . . . . . . . . . 5-63basic device configuration .

IN-7Hhardware installation. . . . . . . . . . . . . . . . . . . . . . . . . . . 2-1Iimporting certificates. . . . . . . . . . . . . . . . . . . . . .

AP-51xx Access Point Product Reference GuideIN-8QQoS support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-7Quality of Servic

IN-9Wwall mounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-16WAN port. . . . . . . . . . . . . . . . . . . . . . . . . . . .

AP-51xx Access Point Product Reference GuideIN-10

MOTOROLA INC.1303 E. ALGONQUIN ROADSCHAUMBURG, IL 60196http://www.motorola.com72E-103901-01 Revision AJanuary 2008

viiTheory of Operations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1-20Cellular Coverage . . . . .

AP-51xx Access Point Product Reference Guide2-267. Cable the AP-5181 using either the AP-5181 Power Tap (Part No. AP-PSBIAS-5181-01R) or the Power Inj

Hardware Installation2-279. Once power has been applied, Verify the behavior of the AP-5181 LEDs. For more information, see AP-5181 LED Indicators on

AP-51xx Access Point Product Reference Guide2-285. Use the included nuts to tightly secure the wireless bridge to the bracket. Fit the edges of the V-

Hardware Installation2-29c. For Power Tap installations, have a certified electrician open the Power Tap enclosure, feed the power cable through the u

AP-51xx Access Point Product Reference Guide2-30Power StatusSolid white indicates the access point is adequately powered.Error ConditionsSolid red ind

Hardware Installation2-312.11 Setting Up MUsFor a discussion of how to initially test the access point to ensure it can interoperate with the MUs inte

AP-51xx Access Point Product Reference Guide2-32

Getting StartedThe access point should be installed in an area tested for radio coverage using one of the site survey tools available to the field ser

AP-51xx Access Point Product Reference Guide3-2For installing an AP-5131 model access point• For instructions on installing the AP-5131 on a table top

Getting Started3-3• Config file - Readable text file; Importable/Exportable via FTP, TFTP and HTTP. Configuration settings for an access point can be

AP-51xx Access Point Product Reference GuideviiiAP-5181 Pole Mounted Installations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2-24

AP-51xx Access Point Product Reference Guide3-43.4 Initially Connecting to the Access Point3.4.1 Connecting to the Access Point using the WAN PortTo i

Getting Started3-54. Press <ESC> or <Enter> to access the access point CLI.5. Enter the default username of “admin” and the default passwo

AP-51xx Access Point Product Reference Guide3-62. If the default login is successful, the Change Admin Password window displays. Change the password.E

Getting Started3-7The export function will always export the encrypted Admin User password. The import function will import the Admin Password only if

AP-51xx Access Point Product Reference Guide3-8The System Name is useful if multiple devices are being administered.3. Select the Country for the acce

Getting Started3-94. Optionally enter the IP address of the server used to provide system time to the access point within the Time Server field. Once

AP-51xx Access Point Product Reference Guide3-10e. Define a Default Gateway address for the access point’s WAN connection. The ISP or a network admini

Getting Started3-11c. If using the static or DHCP Server option, enter the network-assigned IP Address of the access point. d. The Subnet Mask defines

AP-51xx Access Point Product Reference Guide3-12a. Enter the Extended Services Set Identification (ESSID) and name associated with the WLAN. For addit

Getting Started3-13recommends naming the policy after the attributes of the authentication or encryption type selected.3. Select the WEP 128 (104 bit

ixChapter 5. Network ManagementConfiguring the LAN Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5-1Con

AP-51xx Access Point Product Reference Guide3-145. Click the Apply button to save the security policy and return to the access point Quick Setup scree

Getting Started3-154. Click the Ping button to begin transmitting packets to the specified MU address.Refer to the Number of Responses value to assess

AP-51xx Access Point Product Reference Guide3-16

System ConfigurationThe access point contains a built-in browser interface for system configuration and remote management using a standard Web browser

AP-51xx Access Point Product Reference Guide4-2System configuration topics include: • Configuring System Settings• Adaptive AP Setup• Configuring Data

System Configuration4-32. Configure the access point System Settings field to assign a system name and location, set the country of operation and view

AP-51xx Access Point Product Reference Guide4-43. Refer to the Factory Defaults field to restore either a full or partial default configuration. Count

System Configuration4-54. Use the Restart access point field to restart the AP (if necessary).5. Click Apply to save any changes to the System Setting

AP-51xx Access Point Product Reference Guide4-67. Click Logout to securely exit the access point Access Point applet. A prompt displays confirming the

System Configuration4-72. Define the following to prioritize a switch connection scheme and AP interface used to adopt to the switch.Control Port Defi