all | frequencies |
|
exhibits | applications |
---|---|---|---|---|
manual |
app s | submitted / available | |||||||
---|---|---|---|---|---|---|---|---|
1 2 |
|
Users Manual April 25 2005 | Users Manual | 3.60 MiB | ||||
1 2 | Cover Letter(s) | |||||||
1 2 | Cover Letter(s) | |||||||
1 2 | Cover Letter(s) | |||||||
1 2 | External Photos | |||||||
1 2 | Operational Description | native | ||||||
1 2 | Operational Description | |||||||
1 2 | Internal Photos | |||||||
1 2 | ID Label/Location Info | |||||||
1 2 | RF Exposure Info | |||||||
1 2 | Cover Letter(s) | |||||||
1 2 | Cover Letter(s) | |||||||
1 2 | Cover Letter(s) | |||||||
1 2 | Test Setup Photos | |||||||
1 2 | Test Report | |||||||
1 2 | Operational Description | native | ||||||
1 2 | Operational Description |
1 2 | Users Manual April 25 2005 | Users Manual | 3.60 MiB |
Users Guide XS Wireless Wireless Wireless Wireless Wireless LAN Array LAN Array LAN Array LAN Array LAN Array 3900/3700 DRAFT RELEASE (C) April 12th, 2005 Wireless LAN Array XS-3900, XS-3700, XS-3500 All rights reserved. This document may not be reproduced or disclosed in whole or in part by any means without the written consent of Xirrus, Inc. Part Number: 800-0006-001
(Rev. A) Copyright 2005 Xirrus, Inc. 370 North Westlake Blvd, Suite 200 Westlake Village, CA 91362 USA www.xirrus.com Trademarks is a trademark of Xirrus, Inc. All other trademarks and brand names are marks of their respective holders. Notices FCC Notice This device complies with Part 15 of the FCC Rules, with operation subject to the following two conditions: (1) This device may not cause harmful interference, and
(2) this device must accept any interference received, including interference that may cause unwanted operation. This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate RF energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following safety measures:
Reorient or relocate the receiving antenna.
Increase the separation between the equipment and the receiver.
Consult the dealer or an experienced wireless technician for help. Use of a shielded twisted pair (STP) cable must be used for all Ethernet connections in order to comply with EMC requirements. RF Radiation Hazard Warning To ensure compliance with FCC RF exposure requirements, this device must be installed in a location where the antennas of the device will have a minimum distance of at least 25 cm (9.84 inches) from all persons. Using higher gain antennas and types of antennas not certified for use with this product is not allowed. The device shall not be co-located with another transmitter. Non-Modification Statement Unauthorized changes or modifications to the device are not permitted. Use only the supplied internal antenna, or external antennas supplied by the manufacturer. Modifications to the device will void the warranty and may violate FCC regulations. Please go to the Xirrus Web site for a list of all approved antennas. Indoor Use This product has been designed for indoor use. Operation of channels in the 5250MHz to 5350MHz band is permitted indoors only to reduce the potential for harmful interference to co-channel mobile satellite systems. Maximum Antenna Gain Currently, the maximum antenna gain is limited to 6dBi for operation in the 5250MHz to 5350MHz band and 5725MHz to 5825MHz band and must not exceed maximum EIRP limits set by the FCC / Industry Canada. High Power Radars High power radars are allocated as primary users (meaning they have priority) in the 5250MHz to 5350MHz and 5650MHz to 5850MHz bands. These radars could cause interference and/or damage to LELAN devices used in Canada. Industry Canada Notice and Marking This Class A digital apparatus complies with Canadian ICES-003. Cet appareil numrique de la classe A est conforme la norme NMB-003 du Canada. The term IC: before the radio certification number only signifies that Industry Canada technical specifications were met. Safety Warnings
Safety Warnings Read all user documentation before powering this device. All Xirrus interconnected equipment should be contained indoors. This product is not suitable for outdoor operation. Please verify the integrity of the system ground prior to installing Xirrus equipment. Additionally, verify that the ambient operating temperature does not exceed 50C. Explosive Device Proximity Warning Do not operate the XS-3900 unit near unshielded blasting caps or in an explosive environment unless the device has been modified to be especially qualified for such use. Lightning Activity Warning Do not work on the XS-3900 or connect or disconnect cables during periods of lightning activity. Circuit Breaker Warning The XS-3900 relies on the buildings installation for over current protection. Ensure that a fuse or circuit breaker no larger than 120 VAC, 15A (U.S.) or 240 VAC, 10A (International) is used on all current-
carrying conductors. Translated safety warnings appear on the following page. Translated Safety Warnings Avertissements de Scurit
Scurit Lisez l'ensemble de la documentation utilisateur avant de mettre cet appareil sous tension. Tous les quipements Xirrus interconnects doivent tre installs en intrieur. Ce produit n'est pas conu pour tre utilis en extrieur. Veuillez vrifier l'intgrit de la terre du systme avant d'installer des quipements Xirrus. Vrifiez galement que la temprature de fonctionnement ambiante n'excde pas 50C. Proximit d'appareils explosifs N'utilisez pas l'unit XS-3900 proximit d'amorces non blindes ou dans un environnement explosif, moins que l'appareil n'ait t spcifiquement modifi pour un tel usage. Foudre N'utilisez pas l'unit XS-3900 et ne branchez pas ou ne dbranchez pas de cbles en cas de foudre. Disjoncteur L'unit XS-3900 dpend de l'installation du btiment pour ce qui est de la protection contre les surintensits. Assurez-vous qu'un fusible ou qu'un disjoncteur de 120 Vca, 15 A (tats-Unis) ou de 240 Vca, 10 A
(International) maximum est utilis sur tous les conducteurs de courant. Software License Agreement PLEASE READ THIS SOFTWARE LICENSE AGREEMENT CAREFULLY BEFORE DOWNLOADING OR USING THE SOFTWARE. BY USING ANY LICENSED MATERIALS OR THE EQUIPMENT THAT CONTAINS THIS PRODUCT, YOU ACKNOWLDEGE THAT YOU HAVE READ AND UNDERSTOOD ALL THE TERMS AND CONDITIONS OF THIS AGREEMENT AND THAT YOU ARE CONSENTING TO BE BOUND BY THIS AGREEMENT. IF YOU DO NOT AGREE TO ALL OF THE TERMS OF THIS AGREEMENT, RETURN THE UNUSED PRODUCT TO THE PLACE OF PURCHASE FOR A FULL REFUND. Single User License Grant: Xirrus, Inc. ("Xirrus") and its suppliers grant to Customer ("Customer") a nonexclusive and nontransferable license to use the Xirrus software and related documentation ("Software") in object code form solely on a single central processing unit owned or leased by Customer or otherwise embedded in equipment provided by Xirrus. Multiple-Users License Grant: Xirrus Inc. ("Xirrus") and its suppliers grant to Customer ("Customer") a nonexclusive and nontransferable license to use the Xirrus software and related documentation ("Software") in object code form: (i) installed in a single location on a hard disk or other storage device on up to the number of computers owned or leased by Customer for which Customer has paid a license fee ("Permitted Number of Computers"); or (ii) provided the Software is configured for network use, installed on a single file server for use on a single local area network for either (but not both) of the following purposes: (a) permanent installation onto a hard disk or other storage device on up to the Permitted Number of Computers; or (b) use of the Software over such network, provided the number of computers connected to the server does not exceed the Permitted Number of Computers. Customer agrees to (i) only use the programs contained in the Software for which Customer has paid a license fee (or in the case of an evaluation copy, those programs Customer is authorized to evaluate), (ii) not use any component of the Software or Equipment other than solely in conjunction with operation of the Software and as applicable, Equipment, (iii) unbundle any component of the Software or Equipment, (iv) use any component of the Software for the development of or in conjunction with any software application intended for resale that employs any such component, (v) use the Licensed Materials or Equipment in life support systems, human implantation, nuclear facilities or systems or any other application where failure could lead to a loss of life or catastrophic property damage, or (vi) cause or permit any third party to do any of the foregoing. Xirrus may provide updates, corrections, enhancements, modifications or bug fixes for the Software ("Updates") to Licensee. Any such Update shall be deemed part of the Software and subject to the license and all other terms and conditions hereunder. Customer grants to Xirrus or its independent accountants the right to examine its books, records and accounts during Customer's normal business hours to verify compliance with the above provisions. In the event such audit discloses that the Permitted Number of Computers is exceeded, Customer shall promptly pay to Xirrus the appropriate license fee for the additional computers or users. At Xirrus'
option, Xirrus may terminate this license for failure to pay the required license fee. Customer may make one (1) archival copy of the Software provided Customer affixes to such copy all copyright, confidentiality, and proprietary notices that appear on the original. EXCEPT AS EXPRESSLY AUTHORIZED ABOVE, CUSTOMER SHALL NOT:
COPY, IN WHOLE OR IN PART, SOFTWARE OR DOCUMENTATION;
MODIFY THE SOFTWARE; REVERSE COMPILE OR REVERSE ASSEMBLE ALL OR ANY PORTION OF THE SOFTWARE; OR RENT, LEASE, DISTRIBUTE, SELL, OR CREATE DERIVATIVE WORKS OF THE SOFTWARE. Customer agrees that aspects of the licensed materials, including the specific design and structure of individual programs, constitute trade secrets and/or copyrighted material of Xirrus. Customer agrees not to disclose, provide, or otherwise make available such trade secrets or copyrighted material in any form to any third party without the prior written consent of Xirrus. Customer agrees to implement reasonable security measures to protect such trade secrets and copyrighted material. Title to Software and documentation shall remain solely with Xirrus. OWNERSHIP. Xirrus or its suppliers own and shall retain all right, title and interest (including without limitation all intellectual property rights) in and to the Software and any Update, whether or not made by Xirrus. Licensee acknowledges that the licenses granted under this Agreement do not provide Licensee with title to or ownership of the Software, but only a right of limited use under the terms and conditions of this Agreement. All information or feedback provided by Licensee to Xirrus with respect to the Software or Equipment shall be Xirrus' property and deemed confidential information of Xirrus. LIMITED WARRANTY. Xirrus warrants that for a period of ninety (90) days from purchase (i) the media on which the Software is furnished will be free of defects in materials and workmanship under normal use, and (ii) the Software substantially conforms to its published specifications. Except for the foregoing, the Software is provided AS IS. This limited warranty extends only to Customer as the original licensee. Customer's exclusive remedy and the entire liability of Xirrus and its suppliers under this limited warranty will be, at Xirrus' or its service center's option, repair, replacement, or refund (if a standalone product) of the Software. In no event does Xirrus warrant that the Software is error free or that Customer will be able to operate the Software without problems or interruptions. FOR FITNESS FOR A SPECIAL, PARTICULAR This warranty does not apply if the software (a) has been altered, except by Xirrus, (b) has not been installed, operated, repaired, or maintained in accordance with instructions supplied by Xirrus, (c) has been subjected to abnormal physical or electrical stress, misuse, negligence, or accident, or (d) is used in ultra-
hazardous activities. DISCLAIMER. EXCEPT AS SPECIFIED IN THIS WARRANTY, ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS, AND WARRANTIES INCLUDING, WITHOUT LIMITATION, ANY IMPLIED WARRANTY OF MERCHANTABILITY, PURPOSE, NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE, ARE HEREBY EXCLUDED TO THE EXTENT ALLOWED BY APPLICABLE LAW. IN NO EVENT WILL XIRRUS OR ITS SUPPLIERS BE LIABLE FOR ANY LOST REVENUE, PROFIT, OR DATA, OR INDIRECT, CONSEQUENTIAL, INCIDENTAL, OR PUNITIVE DAMAGES HOWEVER CAUSED AND REGARDLESS OF THE THEORY OF LIABILITY ARISING OUT OF THE USE OF OR INABILITY TO USE THE SOFTWARE EVEN IF XIRRUS OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. In no event shall Xirrus' or its suppliers' liability to Customer, whether in contract, tort (including negligence), or otherwise, exceed the price paid by Customer. The foregoing limitations shall apply even if the above-stated warranty fails of its essential purpose. SOME STATES DO NOT ALLOW LIMITATION OR EXCLUSION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES. The above warranty DOES NOT apply to any beta software, any software made available for testing or demonstration purposes, any temporary software modules or any software for which Xirrus does not receive a license fee. All such software products are provided AS IS without any warranty whatsoever. This License is effective until terminated. Customer may terminate this License at any time by destroying all copies of Software including any documentation. This License will terminate immediately without notice from Xirrus if Customer fails to comply with any provision of this License. Upon termination, Customer must destroy all copies of Software. Software, including technical data, is subject to U.S. export control laws, including the U.S. Export Administration Act and its associated regulations, and may be subject to export or import regulations in other countries. Customer agrees to comply strictly with all such regulations and acknowledges that it has the responsibility to obtain licenses to export, re-export, or import Software. This License shall be governed by and construed in accordance with the laws of the State of California, United States of America, as if performed wholly within the state and without giving effect to the principles of conflict of law. Customer may not assign or transfer any of its rights or delegate any of its obligations under this agreement. No delay, failure or waiver by either party to exercise any right or remedy under this agreement shall operate to waive any exercise of such right or remedy or any other right or remedy. If any portion hereof is found to be void or unenforceable, the remaining provisions of this License shall remain in full force and effect. This License constitutes the entire License between the parties with respect to the use of the Software. Restricted Rights - Xirrus' software is provided to non-Department of Defense agencies with RESTRICTED RIGHTS and its supporting documentation is provided with LIMITED RIGHTS. Use, duplication, or disclosure by the Government is subject to the restrictions as set forth in subparagraph "C" of the Commercial Computer Software - Restricted Rights clause at FAR 52.227-19. In the event the sale is to a Department of Defense agency, the government's rights in software, supporting documentation, and technical data are governed by the restrictions in the Technical Data Commercial Items clause at DFARS 252.227-
7015 and DFARS 227.7202. Manufacturer is Xirrus, Inc. 370 North Westlake Blvd, Suite 200 Westlake Village, CA 91362. PROPRIETARY NOTICES. Customer shall maintain and reproduce all copyright and other proprietary notices on all copies of the Software in the same form and manner that such notices are included on the Software. Wireless LAN Array Table of Contents All topics listed in this Table of Contents are clickable, which means you can instantly jump to any selected topic with a click of your mouse button. Items that do not appear in the TOC listthey are part of the Front Matter, prior to this Table of Contentsinclude the following:
Trademarks
Notices
Safety Warnings
Translated Safety Warnings
Software License Agreement List of Figures..................................................................................... vii Introduction ......................................................................................... 1 The Xirrus Family of Products ............................................................................... 1 Nomenclature .................................................................................................... 2 About this Users Guide .......................................................................................... 2 Organization ...................................................................................................... 2 Notes and Cautions .......................................................................................... 4 Screen Images .................................................................................................... 4 Your Users Guide as a PDF Document ........................................................ 4 Hyperlinks ......................................................................................................... 4 Why Choose the Wireless LAN Array? ................................................................ 5 Product Overview .................................................................................................... 6 Enterprise Class Security ................................................................................. 6 Deployment Flexibility .................................................................................... 7 Remote DC Power System (Optional) .................................................... 8 Enterprise Class Management ........................................................................ 9 Key Features and Benefits ..................................................................................... 10 High Capacity and High Performance ........................................................ 10 Extended Coverage ......................................................................................... 11 Non-Overlapping Channels .......................................................................... 12 Secure Wireless Access .................................................................................. 12 Wi-Fi Standards Compliance ........................................................................ 12 Table of Contents i Wireless LAN Array Applications Enablement .............................................................................. 12 SDMA Optimization ...................................................................................... 12 Easy Deployment ............................................................................................ 12 Product Specifications (XS-3900) ......................................................................... 13 Installing the XS-3900..................................................................... 17 Installation Prerequisites ...................................................................................... 17 Optional Network Components ................................................................... 19 Client Requirements ....................................................................................... 19 Planning Your Installation .................................................................................... 20 General Deployment Considerations .......................................................... 20 Coverage and Capacity Planning ................................................................. 21 Placement .................................................................................................. 21 RF Patterns ................................................................................................ 22 Calculating Areas .................................................................................... 23 Capacity and Cell Sizes ........................................................................... 24 Sample 802.11a Cells ............................................................................... 25 Fine Tuning Cell Sizes ............................................................................. 26 Roaming Considerations ........................................................................ 26 Allocating Channels ................................................................................ 27 Deployment Examples ............................................................................ 28 Failover Planning ............................................................................................ 29 Unit Failover Protection .......................................................................... 29 Port Failover Protection .......................................................................... 30 Switch Failover Protection ..................................................................... 30 Power Planning ............................................................................................... 31 AC Power .................................................................................................. 31 Remote Distributed DC Power .............................................................. 31 Security Planning ............................................................................................ 31 Wireless Encryption ................................................................................ 31 Authentication ......................................................................................... 32 Network Management Planning .................................................................. 33 Deployment Summary ................................................................................... 34 Installation Workflow ........................................................................................... 35 Unpacking the XS-3900 ......................................................................................... 36 Installing the XS-3900 ............................................................................................ 37 Choosing a Location ....................................................................................... 37 ii Table of Contents Wireless LAN Array Wiring Considerations ............................................................................ 37 Mounting the Unit .......................................................................................... 38 Attaching the T-Bar Clips ....................................................................... 39 Installing the Mounting Plate ................................................................ 40 Connecting the Cables ............................................................................ 41 Attaching the Array to the Mounting Plate ......................................... 42 Dismounting the Array ........................................................................... 43 Powering Up the XS-3900 ..................................................................................... 44 Establishing Communication with the Array .................................................... 46 Using the Serial Port ....................................................................................... 46 Using the Ethernet Ports ................................................................................ 46 Logging In ........................................................................................................ 46 Performing the Express Setup Procedure ........................................................... 47 The Web Management Interface ................................................... 53 An Overview .......................................................................................................... 53 Content ............................................................................................................. 54 Structure ........................................................................................................... 55 Status Bar .................................................................................................. 56 Applying Configuration Changes ................................................................ 56 Character Restrictions .................................................................................... 56 Configuring the XS-3900................................................................. 57 Logging In ............................................................................................................... 57 Making Configuration Changes to the XS-3900 ................................................ 58 Array Status ..................................................................................................... 58 Express Setup .................................................................................................. 61 Network Interfaces ......................................................................................... 66 Network Settings ..................................................................................... 67 VLAN Settings ......................................................................................... 71 Network Statistics .................................................................................... 74 DHCP Server Settings ............................................................................. 75 DNS Settings ............................................................................................. 76 IAP Interfaces .................................................................................................. 78 IAP Settings .............................................................................................. 79 Global Settings ......................................................................................... 82 Global Settings .11a ................................................................................. 84 Table of Contents iii Wireless LAN Array Global Settings .11bg ............................................................................... 86 IAP LED Settings ..................................................................................... 88 Statistics ..................................................................................................... 89 Statistics (for specific radios) .................................................................. 90 SSID Management .......................................................................................... 92 Understanding SSIDs .............................................................................. 92 Create SSID ............................................................................................... 94 Edit SSID ................................................................................................... 95 Security ............................................................................................................. 97 Security Management ............................................................................. 98 Radius Server ......................................................................................... 103 Radius User ............................................................................................ 105 MAC Access List .................................................................................... 106 Create Admin ......................................................................................... 108 Edit Admin ............................................................................................. 109 Users ............................................................................................................... 110 Services ........................................................................................................... 111 System Log ............................................................................................. 112 SNMP ...................................................................................................... 113 Software .......................................................................................................... 114 Tools ................................................................................................................ 115 Event Log ....................................................................................................... 116 The Command Line Interface ...................................................... 117 Establishing a Secure Shell (SSH) Connection ................................................. 117 Basic Commands .................................................................................................. 118 Help ................................................................................................................ 118 Tab Key ........................................................................................................... 118
? Key ............................................................................................................... 118 Save ................................................................................................................. 118 Command Modes ................................................................................................. 118 Configure Mode ............................................................................................ 118 SSID Mode ..................................................................................................... 118 Radius Mode .................................................................................................. 119 Run Test Mode .............................................................................................. 119 Selecting Interfaces .............................................................................................. 119 Command Line Keywords ................................................................................. 120 iv Table of Contents Wireless LAN Array Interface Selection ......................................................................................... 121 Interface Configuration ................................................................................ 122 Radio Configuration ..................................................................................... 126 Beacon Information ...................................................................................... 136 System Administration ................................................................................ 137 System Testing .............................................................................................. 142 Security ........................................................................................................... 143 Station Timeouts ........................................................................................... 148 SSID Configuration ....................................................................................... 149 DNS Configuration ....................................................................................... 150 NTP Configuration ....................................................................................... 151 DHCP Configuration .................................................................................... 152 Syslog Configuration .................................................................................... 153 SNMP Configuration .................................................................................... 155 Filters .............................................................................................................. 156 Radius Configuration ................................................................................... 157 Reports ............................................................................................................ 158 Data Handling ............................................................................................... 160 Data Clearance .............................................................................................. 160 Show Information ......................................................................................... 161 Remove Configuration ................................................................................. 164 Help ................................................................................................................ 168 Appendix A: Quick Reference Guide ................................................................169 Review of WMI Pages ......................................................................................... 169 Alphabetical Listing of CLI Keywords ............................................................. 173 Factory Default Settings ...................................................................................... 178 Network Interfaces ....................................................................................... 178 Serial ........................................................................................................ 178 Gigabit 1 and Gigabit 2 ......................................................................... 178 Fast Ethernet ........................................................................................... 179 Integrated Access Points (IAPs) .................................................................. 179 Server Settings ............................................................................................... 180 DHCP ...................................................................................................... 180 External RADIUS ................................................................................... 180 Internal RADIUS .................................................................................... 181 NTP .......................................................................................................... 181 Syslog ...................................................................................................... 181 Table of Contents v Wireless LAN Array SNMP .............................................................................................................. 181 Default SSID .................................................................................................. 182 Encryption ...................................................................................................... 182 Administrator Account and Password ...................................................... 183 Management .................................................................................................. 183 Keyboard Shortcuts ............................................................................................. 184 Appendix B: Technical Support .........................................................................185 General Hints and Tips ....................................................................................... 185 Frequently Asked Questions .............................................................................. 186 Multiple SSIDs ............................................................................................... 186 Security ........................................................................................................... 188 VLAN Support .............................................................................................. 191 Contact Information ............................................................................................ 193 Glossary of Terms.......................................................................... 195 Index................................................................................................ 207 vi Table of Contents Wireless LAN Array List of Figures Figure 1. Adobe Acrobat (Version 6 and above) .................................................... 4 Figure 2. XS-3900......................................................................................................... 6 Figure 3. Wireless Coverage Patterns ...................................................................... 7 Figure 4. Remote DC Power Distribution................................................................ 8 Figure 5. WMI: Array Status Page ............................................................................ 9 Figure 6. Layout of IAPs (XS-3900)......................................................................... 10 Figure 7. Antenna Patterns ...................................................................................... 11 Figure 8. Wall Thickness Considerations .............................................................. 20 Figure 9. Unit Placement.......................................................................................... 21 Figure 10. Full (Normal) Coverage........................................................................... 22 Figure 11. Adjusting RF Patterns .............................................................................. 22 Figure 12. Custom Coverage ..................................................................................... 23 Figure 13. Calculating the Area of a Circle.............................................................. 23 Figure 14. Sample 802.11a Cells ................................................................................ 25 Figure 15. Transmit Power......................................................................................... 26 Figure 16. Overlapping Cells..................................................................................... 26 Figure 17. Allocating Channels Manually ............................................................... 27 Figure 18. Deployment Scenario (54 Mbps)Per Sector ...................................... 28 Figure 19. Deployment Scenario (36 Mbps)Per Sector ...................................... 28 Figure 20. Deployment Scenario (18 Mbps)Per Sector ...................................... 29 Figure 21. Unit Failover Protection........................................................................... 29 Figure 22. Port Failover Protection........................................................................... 30 Figure 23. Switch Failover Protection ...................................................................... 30 Figure 24. Installation Workflow .............................................................................. 35 Figure 25. Attaching the T-Bar Clips........................................................................ 39 Figure 26. Installing the Mounting Plate ................................................................. 40 Figure 27. Connecting the Cables ............................................................................. 41 Figure 28. Attaching the Unit .................................................................................... 42 Figure 29. IAP (Radio) Positions............................................................................... 43 Figure 30. LED Locations ........................................................................................... 44 Figure 31. WMI: IAP LED Settings Page ................................................................. 45 Figure 32. Network Interface Ports........................................................................... 46 Figure 33. WMI: Express Setup Page (Part 1) ......................................................... 47 Figure 34. WMI: Express Setup Page (Part 2) ......................................................... 48 List of Figures vii Wireless LAN Array Figure 35. Enabling the NTP Feature ....................................................................... 51 Figure 36. Web Management Interface .................................................................... 53 Figure 37. WMI: Frames ............................................................................................. 55 Figure 38. WMI: Status Bar ........................................................................................ 56 Figure 39. WMI: Logging In to the XS-3900 ............................................................ 57 Figure 40. WMI: Array Status Page .......................................................................... 58 Figure 41. Linked Items.............................................................................................. 59 Figure 42. WMI: Disabled Device (Partial View).................................................... 59 Figure 43. IAP Cells .................................................................................................... 60 Figure 44. WMI: Express Setup Page (Part 1) ......................................................... 61 Figure 45. WMI: Express Setup Page (Part 2) ......................................................... 62 Figure 46. Enabling the NTP Feature ....................................................................... 65 Figure 47. WMI: Network Interfaces Page .............................................................. 66 Figure 48. WMI: Network Settings Page (Part 1).................................................... 67 Figure 49. WMI: Network Settings Page (Part 2).................................................... 68 Figure 50. Network Interface Ports........................................................................... 68 Figure 51. WMI: VLAN Settings Page...................................................................... 71 Figure 52. WMI: Network Statistics Page ................................................................ 74 Figure 53. WMI: DHCP Settings Page...................................................................... 75 Figure 54. WMI: DNS Settings Page......................................................................... 76 Figure 55. WMI: IAP Interfaces Page ....................................................................... 78 Figure 56. WMI: IAP Settings Page .......................................................................... 79 Figure 57. WMI: Global Settings Page...................................................................... 82 Figure 58. WMI: Global Settings .11a Page.............................................................. 84 Figure 59. WMI: Global Settings .11bg Page ........................................................... 86 Figure 60. WMI: IAP LED Settings Page ................................................................. 88 Figure 61. WMI: Statistics Page................................................................................. 89 Figure 62. WMI: Statistics IAP abg3 Page (Part 1).................................................. 90 Figure 63. WMI: Statistics IAP abg3 Page (Part 2).................................................. 91 Figure 64. WMI: SSID Management Page ............................................................... 92 Figure 65. WMI: Create SSID Page ........................................................................... 94 Figure 66. WMI: Edit SSID Page ............................................................................... 95 Figure 67. WMI: Security Page.................................................................................. 97 Figure 68. WMI: Security Management Page.......................................................... 98 Figure 69. WMI: Radius Server Page...................................................................... 103 Figure 70. WMI: Radius User Page......................................................................... 105 Figure 71. WMI: MAC Access List Page ................................................................ 106 viii List of Figures Wireless LAN Array Figure 72. WMI: Create/Delete Admin Page........................................................ 108 Figure 73. WMI: Edit Admin Page ......................................................................... 109 Figure 74. WMI: Users Page .................................................................................... 110 Figure 75. WMI: Services Page................................................................................ 111 Figure 76. WMI: System Log Page.......................................................................... 112 Figure 77. WMI: SNMP Page................................................................................... 113 Figure 78. WMI: Software Page............................................................................... 114 Figure 79. WMI: Tools Page..................................................................................... 115 Figure 80. WMI: Event Log Page ............................................................................ 116 Figure 81. Command Line Interface....................................................................... 117 List of Figures ix Wireless LAN Array x List of Figures Wireless LAN Array Introduction This chapter introduces the Wireless LAN Array, including an overview of its key features and benefits, and a detailed listing of the products physical, environmental, technology and regulatory specifications. Section headings for this chapter include:
The Xirrus Family of Products
About this Users Guide
Product Overview
Key Features and Benefits
Product Specifications (XS-3900) The Xirrus Family of Products The Xirrus family of products includes the following items:
Xirrus Wireless LAN Array (XS-3900 / XS-3700 / XS-3500) The Wireless WLAN array is specifically designed for the Enterprise market. There are three versions of this product, each with a different wireless capacitysixteen IAPs (Integrated Access Pointsradios) with the XS-3900, eight IAPs with the XS-3700, and four IAPs with the XS-3500. This Users Guide documents the high capacity XS-3900, and where there are operational differences between the three models these differences are highlighted.
Xirrus Wireless Management System (XM-3300) The XM-3300 is used for managing large XS-3900 deployments from a centralized Web-based interface. The XM-3300 is occasionally referred to in this Users Guide; however, if you need detailed information about this product, refer to the XM-3300 Users Guide, part number 800-0007-001.
Xirrus Remote DC Power System (XP-3100) The XP-3100 provides distributed DC power to multiple XS-3900 units, eliminating the need to run dedicated AC power to each unit and facilitating backup power when connected via a UPS. Introduction 1 Wireless LAN Array Nomenclature Throughout this Users Guide, the Wireless LAN Array is also referred to as the XS-3900, or simply the XS. In some instances, the terms product, unit, array, or Xirrus array are also used. When discussing wireless network environments in which the XS is employed, the most commonly used reference is the system. The Xirrus Wireless Management System (XM-3300) and the Xirrus Remote DC Power System (XP-3100) are referred to as the XM-3300 and XP-3100, or XM and XP respectively. About this Users Guide This Users Guide provides detailed information and procedures that will enable wireless network administrators to install, configure and manage the Xirrus array so that end users can take full advantage of the products features and functionality without technical assistance. Organization Topics and procedures are organized by function under the following chapter headings:
Introduction Provides a brief introduction to wireless technology, an overview of the product, including its key features and benefits, and presents the product specifications.
Installing the XS-3900 Defines the prerequisites for deploying and installing the XS-3900 and provides instructions to help you plan and complete a successful installation.
The Web Management Interface Offers an overview of the products embedded Web Management Interface, including its content and structure. It also emphasizes what you need to do to ensure that any configuration changes you make are applied, and provides a list of restricted characters. 2 Introduction Wireless LAN Array
Configuring the XS-3900 Contains procedures for configuring the XS-3900 using its embedded Web Management Interface. It also includes instructions for logging in to the XS-3900 with your Web browser, and procedures for upgrading the system firmware and resetting the XS-3900 to its factory defaults.
The Command Line Interface Provides instructions for configuring the XS-3900 using keywords and commands via its embedded Command Line Interfacewith examples and syntax conventionsand includes a procedure for establishing a Secure Shell (SSH) connection to the product.
Appendix A: Servicing the XS-3900 Contains procedures for servicing the XS-3900, including the removal and reinstallation of major hardware components.
Appendix A: Quick Reference Guide Contains product reference information, including a review of the Web Management Interface pages and their content, an alphabetical listing of keywords available with the Command Line Interface, the products factory default settings, a sample event log, and some useful keyboard shortcuts.
Appendix B: Technical Support Offers guidance to resolve technical issues, including some general hints and tips to enhance your product experience, and a procedure for isolating problems within an XS-enabled wireless network. Also includes Frequently Asked Questions (FAQs), a table of error messages generated by the product, and Xirrus contact information.
Glossary of Terms Provides an explanation of terms directly related to Xirrus product technology, organized alphabetically.
Index The index is a valuable information search tool. Use the index to locate specific topics discussed in this Users Guide. Simply click on any page number in the index to jump to the referenced topic. Introduction 3 Notes and Cautions The following symbols are used throughout this Users Guide:
Wireless LAN Array information.
This symbol is used for general notes that provide useful supplemental
This symbol is used for cautions. Cautions provide critical information that may adversely affect the performance of the product. Screen Images Some screen images of the Web Management Interface have been modified for clarity. For example, an image may have been cropped to highlight a specific area of the screen, and/or sample data may be included in some fields. Your Users Guide as a PDF Document This Users Guide is made available as a secure PDF (Portable Document Format) file and can be viewed using the Adobe Acrobat Reader product. It cannot be edited or modified. If you dont have Acrobat Reader, you can downloaded it free-of-charge from: http://www.adobe.com. Hyperlinks If you click on body text that appears in the color TEAL (with the exception of headings or notes) the embedded hyperlink within the text will immediately take you to the referenced destination. All internal and external cross-references, including page numbers within the List of Figures and the Index, have associated hyperlinks. After jumping to a referenced topic, if you want to return to the previous page (reference source), simply click on Acrobats previous page button. Previous page button Figure 1. Adobe Acrobat (Version 6 and above) 4 Introduction Wireless LAN Array Why Choose the Wireless LAN Array?
In 2003 there were approximately 30,000 Wireless Local Area Networks (WLANs) operating in the public domain. Research suggests that the number will more than quadruple by 2006. Enterprise WLANs in the private sector are also becoming increasingly common as businesses strive for greater flexibility in the workplace and the need for employee mobility rises. The only requirements for an effective wireless deployment are a power source, a couple of screws, and an imagination. Wireless LAN is also fully compatible with standard Ethernet protocols, so connectivity with existing wired infrastructures is transparent to usersthey can still access and use the same applications and network services that they use when plugged into the companys wired LAN infrastructure (its only the plug that no longer exists). Wireless LAN has come a long way in the past few years and now offers the performance, reliability and security that Enterprise customers have come to expect from their networks. The technology is being driven by three major IEEE standards:
802.11a Operates in the 5 GHz range with a maximum speed of 54 Mbps.
802.11b Operates in the 2.4 GHz range with a maximum speed of 11 Mbps. It has a range of about 100 meters indoors and 300 meters outdoors.
802.11g Supports a higher transmission speed of 54 Mbps in the 2.4 GHz range and is backwards compatible with 802.11b. Whether youre a small company with just a handful of employees, or a large corporation with thousands, wireless has the scalability and flexibility to serve your needs. Introduction 5 Wireless LAN Array Product Overview Part of the family of Xirrus products, the Wireless LAN Array (XS-3900) is a high capacity, multi-mode WLAN array designed for the Enterprise market, with twice the range and up to sixteen times the capacity of competitive wireless products. Figure 2. XS-3900 The XS-3900 is Wi-Fi compliant and simultaneously supports 802.11a, 802.11b and 802.11g clients. Enterprise class features such as VLAN support and multiple SSID capability enable robust network compatibility and a high level of scalability and system control. The optional Xirrus Wireless Management System (XM-3300) allows global management of hundreds of arrays from a central location. The smaller XS-3700 and XS-3500 versions of the Wireless LAN Array have a correspondingly lower capacity than the XS-3900. Enterprise Class Security The latest and most effective wireless encryption security standards, including WPA2 (Wi-Fi Protected Access 2) with 802.11i AES (Advanced Encryption Standard) are provided with the XS-3900. In addition, the use of 802.1x with an embedded RADIUS server (or external RADIUS servers) ensures user authenticationmultiple arrays can authenticate to the optional XM-3300 ensuring only authorized Xirrus Wireless LAN Arrays become part of the wireless network. Rogue AP detection and site monitoring is performed in the background by the XS-3900 automatically. 6 Introduction Wireless LAN Array Deployment Flexibility Xirrus unique multi-radio architecture generates 360 degrees of sectored high-
gain 802.11a/b/g coverage that provides extended range and the highest possible data rates for a large volume of clients. Each sector can be controlled automatically or manually, creating a pattern of wireless coverage perfectly tailored to individual customer needs. For example:
outside wall Figure 3. Wireless Coverage Patterns Figure 2 depicts the following two scenarios:
Full pattern coverage All radios are activated with coverage spanning 360 degrees. If within range, clients will always receive coverage regardless of their geographic position relative to the XS-3900.
Partial pattern coverage If desired, the XS-3900 can be deployed close to an exterior wall. In this case, half of all available radios have been deactivated to prevent redundant signals from bleeding beyond the sites perimeter wall. This configuration may also be used in those cases where you want to restrict wireless coverage to selected areas of the buildings interior. Introduction 7 Wireless LAN Array Remote DC Power System (Optional) The Xirrus Remote DC Power System (XP-3100) provides distributed DC power to your XS-3900 (DC version) deployments, eliminating the need to provide an AC power outlet in close proximity to the unit(s). In the following example, DC power is supplied to four Xirrus Arrays while utilizing only one AC power outlet. AC Input to XP-3100 XP-3100 DC Output to Xirrus Arrays Figure 4. Remote DC Power Distribution 8 Introduction Wireless LAN Array Enterprise Class Management The XS-3900 can be configured with its default RF settings, or the RF settings can be customized using the arrays embedded Web Management Interface (WMI). The WMI enables easy configuration and control from a graphical console, along with a full compliment of troubleshooting tools, reports and statistics. Figure 5. WMI: Array Status Page In addition, a fully featured Command Line Interface (CLI) offers IT professionals a familiar management and control environment. SNMP (Simple Network Management Protocol) is also supported to allow management from an SNMP compliant management tool, such as the optional Xirrus Wireless Management System.
For deployments of more than two XS units, we recommend that you use the Xirrus Wireless Management System (XM-3300). The XM-3300 offers a rich set of features for fine control over large deployments. Introduction 9 Wireless LAN Array Key Features and Benefits This section describes some of the key product features and the benefits you can expect when deploying the XS-3900. High Capacity and High Performance The XS-3900 easily handles time-sensitive traffic, such as voice, and can enable wireless connectivity for nearly 1,000 users. The unit includes two Gigabit uplink ports for connection to the wired network. A total of sixteen IAPs provides a maximum wireless capacity of 864 Mbps, which offers ample reserves for the high demands of current and future applications. Of the sixteen IAPs, twelve operate in the 802.11a mode and four operate in any combination of 802.11a, 802.11b and 802.11g. If desired, IAP (radio) abg2 can also be configured in RF monitoring and rogue AP detection mode. a12 a11 abg4 a10 a9 a8 abg3 a7 a1 abg1 a2 a3 a4 abg2 (RF monitoring) a5 a6 Mode(s) IAP number Figure 6. Layout of IAPs (XS-3900) 10 Introduction Wireless LAN Array Extended Coverage One XS-3900 solution enables you to replace up to sixteen access pointsfifteen IAP radios with integrated directional antennas provide increased wireless range and enhanced data rates in all directions. With an XS deployed, far fewer access points are needed for your wireless network. Radio abg2 (see Figure 6) can be switched to use an integrated omnidirectional antennafor listening onlyand can be dedicated to the tasks of site monitoring and rogue AP detection. XS XS 802.11a (directional) 802.11a/b/g (directional) XS 802.11a/b/g (omnidirectional) Figure 7. Antenna Patterns Introduction 11 Wireless LAN Array Non-Overlapping Channels Complete use of non-overlapping channels limits interference and delivers maximum capacity. On the XS-3900, all 16 non-overlapping channels are fully utilized across the 5Ghz and 2.4Ghz spectrums (12 across the 5GHz spectrum and 4 across the 2.4GHz spectrum). Secure Wireless Access Multiple layers of authentication and encryption ensure secure data transmissions. The XS-3900 is 802.11i compliant with encryption support for 64 bit and 128 bit WEP, TKIP and AES. Authentication support is provided via 802.1x, including PEAP, EAP-TLS, and EAP-TTLS. Wi-Fi Standards Compliance Fully meets the requirements of 802.11a/b/g standards, and guaranteed interoperability with all other Wi-Fi products certified by the Wi-Fi Alliance. Applications Enablement QoS (Quality of Service) functionality combined with true switch capabilities enable high density Voice over Wireless LAN deployments. Compliant with 802.11e (final draft), 802.1p and 802.1q standards. SDMA Optimization SDMA (Spatial Division Multiple Access) technology provides full 360 coverage while allowing independent channel and power output customization. Also supports fast inter-zone handoffs for time-sensitive applications and roaming support. Easy Deployment The Xirrus Wireless Management System (XM-3300) offers real time monitoring and management capabilities of the wireless networkideal for the Enterprise market. It also allows you to import floor plans to help you plan your deployment. The XM-3300 chassis has a plenum rated, lockable and tamper resistant case. 12 Introduction Wireless LAN Array Product Specifications (XS-3900) Element Number of Users Physical Environmental System Electrical Interfaces Specifications Maximum of 64 associated users per radio 1024 users per array Diameter: 12.9 inches (32.77 cm) Height: 2.53 inches (6.43 cm) Weight: 8lbs (3.63 kg) Operating Temperature:
-10C to 50C 0% to 90% relative humidity (non-condensing) Storage Temperature:
-20C to 60C 5% to 95% relative humidity (non-condensing) Operating Altitude:
2000 meters (6561 feet) 825 MHz CPU 128MB RAM, expandable 512MB system flash, expandable Expansion slot for future options Input Power (AC version): 90VAC to 265VAC at 47Hz to 63Hz Input Power (DC version): 48VDC Serial:
1 x RS232 RJ45 connector Ethernet Interfaces:
2 x Gigabit 100/1000 Mbps w/failover 1 x Fast Ethernet 10/100 Mbps Status LEDs:
System status, Ethernet, Radio Introduction 13 Wireless LAN Array Element Management Networking VLAN Support Multiple SSID Support Performance Specifications Web-based HTTPS SNMP v3 CLI via SSHv2 FTP TFTP Serial Proprietary Xirrus Wireless Management System Syslog reporting for alerts/alarms DHCP client, DHCP server, NTP client RFC 802.1Q, P VLAN Supports up to 16 VLANs Allows up to 16 separate SSIDs to be defined with map security, VLAN, QoS and guest access settings for each SSID Client Load Balancing Automatic load balancing between system radios Quality of Service:
802.1P wired traffic prioritization 802.11e wireless prioritization MAP CoS to TCID Fair queuing of downstream traffic 14 Introduction Wireless LAN Array Element Security Specifications Wireless Security:
WEP 40bit/128bit encryption WPA with TKIP and AES encryption Misappropriated APs automatically reset to factory defaults (requires the Xirrus Wireless Management System) Rogue AP detection, with alerts and classification Denial of Service (DoS) attack detection MAC address spoofing prevention User and System Authentication:
WPA Pre-Shared Key authentication Embedded RADIUS Server 802.1x EAP-TLS 802.1x EAP-TTLS 802.1x PEAP External RADIUS servers Authentication of Xirrus APs to the Xirrus Management System (XM-3300) Introduction 15 Wireless LAN Array Element Wireless Specifications Number of Radios:
12 x 802.11a radios 4 x 802.11a/b/g radios Wireless Standards:
802.11a/b/g and g-only mode 802.11d, 802.11e (draft), 802.11i Channel Selection:
Manual Automatic Frequency Bands:
11a: 5.15-5.25 GHz (UNII 1) 11a: 5.15-5.25 GHz (TELEC) 11a: 5.25-5.35 GHz (UNII 2) 11a: 5.470-5.725 (ETSI) 11a: 5.725-5825 GHz (UNII 3) 11b/g: 2.412-2.462 GHz (FCC) 11b/g: 2.412-2.472 GHz (ETSI) 11b/g: 2.412-2.484 GHz (TELEC) Antenna:
Internal 6dBi sectorized antenna External RP-TNC connector Radio Approvals:
FCC (United States) EN 301.893 (Europe) Compliance UL / cUL 60950 and EN 60950 FCC Part 15.107 and 15109, Class A EN 301.489 (Europe) Warranty One year 16 Introduction Wireless LAN Array Installing the XS-3900 This chapter defines the prerequisites for installing the XS-3900 and provides instructions to help you complete a successful installation. Section headings for this chapter include:
Installation Prerequisites
Planning Your Installation
Installation Workflow
Unpacking the XS-3900
Installing the XS-3900
Powering Up the XS-3900
Performing the Express Setup Procedure
This ends the Express Setup procedure. Installation Prerequisites Your XS-3900 deployment requires the presence of hardware and services in the host wired/wireless network, including:
Dedicated AC power outlet Unless you are using the Xirrus Remote DC Power System (XP-3100) with the DC version of the XS-3900, you need a dedicated power outlet to supply AC power to each unit deployed at the site. If you are using the optional XP-3100, then DC power is supplied to all units and only one AC outlet is required for the XP-3100.
Ethernet port You need at least one 10/100/1000 BaseT port to establish wired Gigabit Ethernet connectivity (via the products Gigabit 1 or Gigabit 2 port) and one 10/100 BaseT port (if desired) for wired Fast Ethernet connectivity.
Secure Shell (SSH) utility To establish secure remote command line access to the XS-3900, you need a Secure Shell (SSH) utility, such as PuTTY. Installing the XS-3900 17 Wireless LAN Array
Secure Web browser Either Internet Explorer (version 6.0 or higher), Netscape Navigator
(version 7.0 or higher), or Mozilla Firefox (version 1.01 or higher) and it must be available on the same subnet as the XS-3900. A secure Web browser is required for Web-based management of the XS-3900.
Serial connection capability To connect directly to the console port on the XS-3900, your computer must be equipped with a male 9-pin serial port and terminal emulation software (for example, HyperTerminal). Use the following settings when establishing a serial connection:
Bits per second 115,200 Data bits Parity Stop bits Flow control 8 None 1 None 18 Installing the XS-3900 Wireless LAN Array Optional Network Components The following network components are optional.
DHCP server To distribute IP addresses and ancillary information to your XS-3900.
Xirrus Wireless Management System (XM-3300) The optional XM-3300 offers powerful management features for small or large XS-3900 deployments.
Xirrus Remote DC Power System (XP-3100) The optional XP-3100 provides distributed DC power to multiple XS-3900 units, eliminating the need to run dedicated AC power to each unit and facilitating backup power when connected via a UPS.
External RADIUS server Although your XS-3900 comes with an embedded RADIUS server, for 802.1x authentication in large deployments you may want to add an external RADIUS server. Client Requirements The XS-3900 should only be used with Wi-Fi certified client devices. Installing the XS-3900 19 Wireless LAN Array Planning Your Installation This section provides guidelines and examples to help you plan your XS-3900 deployment to achieve the best overall coverage and performance. We recommend you conduct a site survey to determine the best location and settings for each XS-3900 unit you install. General Deployment Considerations The XS-3900s unique multi-radio architecture generates 360 degrees of sectored high-gain 802.11a/b/g coverage that provides extended range. However, the number, thickness and location of walls, ceilings or other objects that the wireless signals must pass through may affect the range. Typical ranges vary depending on the types of materials and background RF (radio frequency) noise at your location. To maximize wireless range, follow these basic guidelines:
1. Keep the number of walls and ceilings between the XS-3900 and your receiving devices to a minimumeach wall or ceiling can reduce the wireless range from between 3 and 90 feet (1 to 30 meters). Position your devices so that the number of walls or ceilings is minimized. 2. Be aware of the direct line between each device. For example, a wall that is 1.5 feet thick (half a meter) at 90 is actually almost 3 feet thick (or 1 meter) when viewed at a 45 angle. At an acute 2 degree angle the same wall is over 42 feet (or 14 meters) thick! For best reception, try to ensure that your wireless devices are positioned so that signals will travel straight through a wall or ceiling. 90 45 2 1.5 feet
< 3 feet Figure 8. Wall Thickness Considerations
> 42 feet 20 Installing the XS-3900 Wireless LAN Array 3. Building materials can make all the difference. For example, solid metal doors or aluminum wall studs may adversely effect wireless signals. Try to position wireless client devices so that the signal passes through drywall (between studs) or open doorways and not other materials. Coverage and Capacity Planning This section considers coverage and capacity for your deployment(s), including placement options, RF patterns and cell sizes, area calculations, roaming considerations, and channel allocations. Placement Use the following guidelines when considering placement options:
1. The best placement option for the XS-3900 is ceiling-mounted within an open plan environment (cubicles rather than fixed walls). 2. Keep the XS-3900 away from electrical devices or appliances that generate RF noise. Because the XS-3900 is generally mounted on ceilings, be aware of its position relative to lighting (especially fluorescent lighting)we recommend maintaining a distance of at least 3 to 6 feet (or 1 to 2 meters). 3. If using multiple XS-3900s at the same location, we recommend maintaining a distance of at least 100 feet between units. 100 ft 100 ft 100 ft Figure 9. Unit Placement Installing the XS-3900 21 Wireless LAN Array RF Patterns The XS-3900 allows you to controlautomatically or manuallythe pattern of wireless coverage that best suits your deployment needs. You can choose to operate with full coverage, half coverage, or custom coverage (by enabling or disabling individual sectors). Full (Normal) Coverage In normal operation, the XS-3900 provides a full 360 degrees of coverage. Figure 10. Full (Normal) Coverage Half Coverage If installing a unit close to an exterior wall, you can deactivate half of the radios to prevent redundant signals from bleeding beyond the wall and extending service into public areas. The same principle applies if you want to restrict service to an adjacent room within the site. outside wall Figure 11. Adjusting RF Patterns 22 Installing the XS-3900 Wireless LAN Array Custom Coverage Where there are highly reflective objects in close proximity to the XS-3900, you can turn off specific radios to avoid interference and feedback. reflective object Figure 12. Custom Coverage Calculating Areas Before we discuss cell sizes, it is useful to know how to calculate the area of a circle (because the XS-3900 radiates a full 360 degrees). The area of a circle is equal to pi () times the square of the radius, where pi is equal to 3.14. The following graphic calculates the area of a circle with a radius of 20 feet. 3.14 x 202 = 1,256 sq ft 20 ft Figure 13. Calculating the Area of a Circle Installing the XS-3900 23 Wireless LAN Array Capacity and Cell Sizes Cell sizes should be calculated based on the number of users, the applications being used (for example, data/video/voice), and the number of XS-3900 units available at the location. The capacity of a cell is defined as the minimum data rate desired for each sector multiplied by the total number of sectors being used. The following chart shows the maximum recommended cell sizes for each data rate. Min. Desired Data Rate
(Mbps) 11a Cell Size 11b/g Cell Size Radius
(feet) Area
(sq. feet) Radius
(feet) Area
(sq. feet) 54 48 36 24 18 12 9 6 11 5.5 2 1 104 195 260 293 325 33,962 119,398 212,264 269,566 331,662 357.5 401,312 390 423 0 0 0 0 477,594 561,837 0 0 0 0 130 228 325 357 422 455 468 487 520 546 572 585 53,066 163,230 331,662 400,190 559,184 650,058 687,735 744,711 849,056 936,084 1,027,358 1,074,586 24 Installing the XS-3900 Wireless LAN Array Sample 802.11a Cells The following 802.11a sample cells illustrate the coverage area and minimum throughput you can expect (per sector) based on the size of each cell. Notice how the throughput increases as the cell size decreases, and vice versa. 68 ft 98 ft 14,520 sq ft 54 Mbps per sector 30,157 sq ft 36 Mbps per sector 165 ft 85,487 sq ft 18 Mbps per sector Figure 14. Sample 802.11a Cells Installing the XS-3900 25 Wireless LAN Array Fine Tuning Cell Sizes Adjusting the transmit power allows you to fine tune cell sizes. There are three settingsLarge, Medium, or Small (the default is Medium). If you are installing many units in close proximity to each other, reduce the transmit power to avoid excessive interference with other arrays or installed APs. See also, IAP Settings on page 79. Small Medium Large Figure 15. Transmit Power Roaming Considerations Cells should overlap approximately 10 - 15% to accommodate client roaming. ROAMING 10 - 15% overlap Figure 16. Overlapping Cells 26 Installing the XS-3900 Wireless LAN Array Allocating Channels Because the XS-3900 is a multi-channel device, allocating the best channels to radios is important if peak performance is to be maintained. Automatic Channel Selection We recommend that you allow the XS-3900 to make intelligent channel allocation decisions automatically. In the automatic mode, channels are allocated dynamically, driven by changes in the environment. Manual Channel Selection You can manually assign channels on a per radio basis, though manual selection is not recommended (and not necessary). To avoid co-channel interference, do not select adjacent channels for radios that are physically next to each other. Maintain channel separation Figure 17. Allocating Channels Manually Installing the XS-3900 27 Deployment Examples The following examples employ 802.11a cells, each offering minimum throughputs of 54 Mbps, 36 Mbps, and 18 Mbps per sector respectively, and assume a floor plan covering a total area of about 60,000 square feet. Wireless LAN Array Figure 18. Deployment Scenario (54 Mbps)Per Sector Figure 19. Deployment Scenario (36 Mbps)Per Sector 28 Installing the XS-3900 Wireless LAN Array Figure 20. Deployment Scenario (18 Mbps)Per Sector Failover Planning This section discusses failover protection at the unit and port levels. Unit Failover Protection In the rare event that an XS-3900 becomes unavailable, it is suggested that you deploy a backup unit. Backup units monitor primary units via an Ethernet switch and continue to provide wireless services in the event that the primary unit becomes unavailable. Any XS-3900 can be set up as a backup unit. Backup units should be located near primary units. Active mode Offline mode until needed Primary Backup heartbeat monitor Ethernet switch Figure 21. Unit Failover Protection Installing the XS-3900 29 Port Failover Protection To ensure that service is continued in the event of a port failure, you can utilize all three XS-3900 ports (Fast Ethernet, Gigabit 1 and Gigabit 2) simultaneously. Wireless LAN Array Multiple port connections Ethernet switch Figure 22. Port Failover Protection Switch Failover Protection To ensure that service is continued in the event of a switch failure, you can connect XS-3900 units to more than one Ethernet switch. Ethernet connections Ethernet switch Backup switch Figure 23. Switch Failover Protection
Gigabit Ethernet connections must be on the same subnet. 30 Installing the XS-3900 Wireless LAN Array Power Planning This section discusses the AC and DC power options. AC Power The AC power option requires a direct connection between the XS-3900 and a dedicated AC power outlet. The power cord is provided with the unit. Remote Distributed DC Power To deliver DC power to the XS-3900, you must have the optional Xirrus Remote DC Power System (XP-3100) and a Xirrus Array that supports DC powersee Figure 4 on page 8 . The XP-3100 provides DC power to multiple XS-3900 units from a single source, and requires only one AC power outlet. Depending on the type of cable used, XS-3900 units can be located up to 600 feet from the XP-3100. In addition, the XP-3100 can be plugged into a UPS to prevent power failure to all XS-3900 units in the network. When using CAT5 cable, DC power can be provided up to a distance of 300 feet. Security Planning This section offers some useful guidelines for defining your preferred encryption and authentication method. For additional information, go to the Security section of Frequently Asked Questions on page 186. Wireless Encryption Encryption ensures that no user can decipher another users data transmitted over the airwaves. There are three encryption options available to you, including:
WEP-40bit or WEP-128bit Because WEP is vulnerable to cracks, we recommend that you only use this for legacy devices that cannot support a stronger encryption type.
Wi-Fi Protected Access This is much more secure than WEP and uses TKIP for encryption. Installing the XS-3900 31 Wireless LAN Array
Wi-Fi Protected Access 2 This is government-grade encryptionavailable on most new client adaptersand uses the AESCCM encryption mode (Advanced Encryption StandardCounter Mode). Authentication Authentication ensures users are who they say they are, and occurs when users attempt to join the wireless network and periodically there after. The following authentication methods are available with the XS-3900:
RADIUS 802.1x 802.1x uses a remote RADIUS server to authenticate large numbers of clients, and can handle different authentication methods (EAP-TLS, EAP-
TTLS EAP-PEAP).
Xirrus internal RADIUS server Includes all the core functionality of a full RADIUS server built into the Xirrus XS-3900. Recommended for smaller numbers of users (about 100 or less).
Pre-Shared Key Uses a pass-phrase or key that is manually distributed to all authorized users. The same passphrase is given to client devices and entered into each Xirrus array.
MAC Access Control Lists (ACLs) MAC access control lists provide a list of client adapter MAC addresses that are allowed or denied access to the wireless network, and can be used in addition to any of the above authentication methods. ACLs are good for embedded devices, like printers and bar-code scanners (though MAC addresses can be spoofed). The XS-3900 supports 512 ACL entries. 32 Installing the XS-3900 Wireless LAN Array Network Management Planning Network management can be performed using any of the following methods:
Command Line Interface, using an SSH (Secure Shell) utility, like PuTTY.
Web-based management, using the XS-3900 units embedded Web Management Interface (WMI). This method provides configuration and basic monitoring tools, and is good for small deployments (one or two units).
Web-based management, using the optional Xirrus Wireless Management System (XM-3300). The XM-3300 is used for managing large XS-3900 deployments from a centralized Web-based interface and offers the following features:
Layer 3 appliance
Globally manage large numbers of XS-3900 units
Seamless view of the entire wireless network
Easily configure large numbers of XS-3900 units
Rogue AP monitoring
Easily manage system-wide firmware updates
Monitor performance and trends
Aggregation of alerts and alarms Installing the XS-3900 33 Deployment Summary The following table summarizes your deployment options for small and large deployments. Wireless LAN Array Function Number of XS-3900 Units One or Two Three or More Power AC AC DC (with XP-3100) DC (with XP-3100) UPS backup
(recommended) Failover VLANs Recommended Highly recommended Optional Optional use, Required for guest access Encryption WPA with TKIP
(recommended) PSK or 802.1x Can be used to put all APs on one VLAN or map to existing VLAN scheme Required for Guest Access WPA2 with AES
(recommended) 802.1x keying Authentication Internal RADIUS server External RADIUS server Management Pre-Shared Key Internal WMI Internal CLI XM-3300 XM-3300 34 Installing the XS-3900 Wireless LAN Array Installation Workflow This workflow illustrates the steps that are required to install and configure the XS-3900 successfully. Review this flowchart before attempting to install the unit on a customers network. Determine the number of Arrays needed Choose the location(s) for your XS-3900 unit(s) AC AC or DC power?
DC Run AC power and Ethernet cables Run DC power and Ethernet cables Install the mounting plate Connect the cables and turn on the power Verify that the Ethernet link and radio LEDs are functioning correctly Perform the Express Setup procedure Figure 24. Installation Workflow Installing the XS-3900 35 Wireless LAN Array Unpacking the XS-3900 When you unpack your XS-3900, you will find the following items in the carton:
Item Quantity Xirrus Wireless LAN Array (XS-3900) module AC power cord Mounting plate Mounting screws Screw anchors Tile grid mounting clamps Clamp nuts Mounting template End User License Agreement (EULA) CD-ROM containing:
This Users Guide in PDF format README file Quick Install Guide Registration Card 1 1 1 4 4 4 4 1 1 1 1 1 36 Installing the XS-3900 Wireless LAN Array Installing the XS-3900 This section provides instructions for installing the XS-3900 unit. Choosing a Location Based on coverage, capacity and deployment examples discussed earlier in this chapter, choose a location for your XS-3900 that will provide the best results for your needs. The XS-3900 was designed to be mounted on a ceiling where the unit is unobtrusive and wireless transmissions can travel unimpeded throughout open plan areas. Choose a location that is central to your users. Wiring Considerations Unless you are using the Xirrus Remote DC Power System (XP-3100) with the DC version of the XS-3900, an AC power outlet must be available to the XS-3900 (an AC power cord is provided with each unit). If you are using the XP-3100 to distribute DC power to multiple XS-3900 units, go to Remote DC Power System
(Optional) on page 8. Once you have determined the best location for your XS-3900, you must run cables to the location for the following services:
Power
Dedicated AC power
DC power (if using the XP-3100) Network
Gigabit 1
Gigabit 2 (optional)
Fast Ethernet (optional)
Serial cable (see note)
When the units IP address is unknown or a network connection has not been established, the serial cable is used for connecting directly with the Command Line Interface (CLI) via HyperTerminal. When a network connection is established, the XS-3900 can be managed from any of the available network connections, either Fast Ethernet, Gigabit 1 or Gigabit 2. Installing the XS-3900 37 Wireless LAN Array Mounting the Unit Most offices have drop-down acoustical ceiling tiles set into a standard grid. The XS-3900 has been designed to enable mounting to a tiled ceiling via a mounting plate and clamps that attach to the grid. Once the mounting plate is attached, the XS-3900 simply rotates onto the plate (similar to a smoke detector). Once the unit is mounted it can be removed and re-attached easily, without the need for tools or modifications to the original installation. This section assumes that you are mounting the XS-3900 to a tiled ceiling. If your ceiling is not tiled, the mounting plate can be attached directly to the ceiling with the screws and anchors provided (without using the tile grid mounting clamps). 38 Installing the XS-3900 Wireless LAN Array Attaching the T-Bar Clips The T-bar clips are used to create four mounting points on the ceiling tile grid for the XS-3900 mounting plate. Use the mounting template (provided) to find the correct location for all four clamps. To attach the clamps, simply twist the clamps onto the grid and tighten the screw post with a screwdriver. Ceiling tile grid Template T-bar clips (4 places) Tighten the screw post Figure 25. Attaching the T-Bar Clips Installing the XS-3900 39 Wireless LAN Array Installing the Mounting Plate If necessary, orient the mounting plate (see Attaching the T-Bar Clips on page 39) and locate the plate on the four screw posts. Secure the mounting plate to the four clamps using the nuts provided. Once the mounting plate is secured, cut an access hole in the ceiling tile for the cables. Tile grid Mounting Plate Cut an access hole here Figure 26. Installing the Mounting Plate 40 Installing the XS-3900 Wireless LAN Array Connecting the Cables Feed the power and Ethernet cables through the access hole in the tile and the mounting plate, then connect the cables to the unit. See also, Wiring Considerations on page 37. Figure 27. Connecting the Cables When the cables are connected, turn on the power switchbefore attaching the unit to the mounting plate (next step). Verify that the Ethernet link LED lights and the LED boot sequence begins. The radio LEDs on the front of the unit will illuminate in rotation, indicating that the XS-3900 software is loading and the unit is functioning correctly. Installing the XS-3900 41 Attaching the Array to the Mounting Plate Align the port recess on the XS-3900 with the access hole in the mounting plate, then connect the XS-3900 with the lugs on the mounting plate (4 places) and turn the XS-3900 clockwise to lock the unit into place (similar to a smoke detector). Wireless LAN Array Figure 28. Attaching the Unit For added security, there is a locking bracket incorporated into the mounting plate, which will accept a small luggage-style padlock (if desired). There is also a Kensington lock slot located near the Ethernet ports. In addition, the mounting plate incorporates a positive locking tab that prevents the unit from being inadvertently released. 42 Installing the XS-3900 Wireless LAN Array Now that the XS-3900 is physically installed, you must run the Express Setup procedure from the units Web Management Interface to enable the radios and establish initial system configuration settings. Go to Powering Up the XS-3900 on page 44. Dismounting the Array To dismount the array, place your fingers so as to increase the space between the array and the mounting plate at the positions indicated by the decals on the mounting platethese are aligned with IAPs (radios) abg1 and abg3, as indicated on the clock-face of the array. a12 a11 abg4 a10 a1 abg1 a2 a9 a3 a8 abg3 a7 a4 abg2 a5 a6 Figure 29. IAP (Radio) Positions Installing the XS-3900 43 Wireless LAN Array Powering Up the XS-3900 When powering up, the array follows a specific sequence of LED patterns showing the boot progress, and following a successful boot will provide extensive status information. The normal boot sequence is as follows:
1. The green status LED will light first, showing a steady flashing while the unit boots. In the event of a boot failure, this LED will change to flashing red. 2. The Ethernet Link/Activity LEDs on the underside of the array will light for those ports connected to the network. 3. All IAP radio LEDs will light simultaneously. 4. While the array is booting, a sequential LED pattern will cycle through all the radio LEDs. 5. When the array completes boot, the status LED will show a steady green, and all radio lights will show the current state of those radios. Status LED IAP LEDs (x16) Figure 30. LED Locations 44 Installing the XS-3900 Wireless LAN Array Once the unit is fully booted the default IAP LED display will be as follows:
IAP radio LEDs that are enabled will show a steady orange for 802.11a radios, or green for 802.11b/g radios.
Once a client associates with an individual IAP, that LED will show a slow flash (heartbeat) pattern.
When data is transmitted or received by an IAP, that IAPs LED will flash. The rate of flashing changes with the number of packets sent or received per secondthe LED will flash more quickly with a greater number of packets per second and more slowly with lower numbers of packets per second. These settings may be altered or disabled entirely for diagnostic purposes or for personal preference. Changes are made via the arrays Command Line Interface or the Web Management Interfacerefer to IAP LED Settings on page 88. Figure 31. WMI: IAP LED Settings Page Installing the XS-3900 45 Wireless LAN Array Establishing Communication with the Array The XS-3900 can be configured through the Command Line Interface (CLI) or the graphical Web Management Interface (WMI). You can use the CLI via the serial management port, the Fast Ethernet port, or either of the Gigabit Ethernet ports. You can use the WMI via any of the arrays Ethernet ports. Serial Fast Ethernet Gigabit 1 Gigabit 2 Figure 32. Network Interface Ports Using the Serial Port If using the serial port to make your connection, use serial settings of 8 bits, no parity, 1 stop bit (8N1) and a speed setting of 115200 baud. Use the communication package of your choice. Using the Ethernet Ports If the array is booted and does not receive DHCP addresses on either the Fast Ethernet or Gigabit Ethernet ports, the Fast Ethernet port will default to an IP address of 10.0.0.1 and both Gigabit Ethernet ports will default to 10.0.1.2. If the array is connected to a network that provides DHCP addresses, the IP address can be determined by the following two methods:
1. Examine the DHCP tables on the server and find the addresses assigned to the array (Xirrus MAC addresses begin with 000F7D). 2. Query the array using the CLI via the serial port. Use the show summary ethernet command to view the IP addresses assigned to each port. Logging In When logging in to the array, use the default user name and password (the default for both is admin). 46 Installing the XS-3900 Wireless LAN Array Performing the Express Setup Procedure The Express Setup procedure allows you to establish global configuration settings that will enable basic XS-3900 functionality. Any changes you make on this page will affect all radios. When finished, click on the Apply button to apply the new settings to this session, then click on the Save button to save your changes. more ... Figure 33. WMI: Express Setup Page (Part 1) Installing the XS-3900 47
... continued Wireless LAN Array Figure 34. WMI: Express Setup Page (Part 2) Procedure for Performing an Express Setup 1. Host Name: Specify a unique host name for this XS-3900 unit. The host name is used to identify the XS-3900 on the network. Use a name that will be meaningful within your network environment, up to 64 alphanumeric characters. 2. Location Information: Enter a brief but meaningful description that accurately defines the physical location of this XS-3900 unit. In an environment where multiple units are installed, clear definitions for their locations are important if you want to identify a specific unit. 3. Admin Contact: Enter the name and contact information of the person who is responsible for administering this XS-3900 unit at the designated location. 4. Country of Operation: To ensure that the array remains in compliance with local regulatory laws, the Country of Operation is set at the factory and cannot be changed. 5. IAP Status: This option provides a button that allows you to enable all radios. Simply click on the Enable All Radios button to enable all radios for this Wireless LAN Array. 48 Installing the XS-3900 Wireless LAN Array 6. Configure the Fast Ethernet, Gigabit 1 and Gigabit 2 network interfaces. The fields for each of these interfaces are the same, and include:
a. MAC Address: This field displays the hardware MAC address for the network interface and cannot be changed. b. Enable Interface: Choose Yes to enable this network interface, or choose No to disable the interface. c. Allow Management on Interface: Choose Yes to allow management of the array via this network interface, or choose No to deny all management privileges for this interface. d. Configuration Server Protocol: Choose DHCP to instruct the array to use DHCP to assign IP addresses to the arrays Ethernet interfaces, or choose Static IP if you intend to enter IP addresses manually. If you choose the Static IP option, you must enter the following information:
IP Address: Enter a valid IP address for this array. To use any of the remote connections (Web, SNMP, or SSH), a valid IP address must be used.
IP Subnet Mask: Enter a valid IP address for the subnet mask (the default is 255.255.255.0). The subnet mask defines the number of IP addresses that are available on the routed subnet where the array is located.
Default Gateway: Enter a valid IP address for the default gateway. This is the IP address of the router that the array uses to forward data to other networks. 7. SSID (Wireless Network Name): Enter a unique SSID, up to 32 characters. The SSID (Service Set Identifier) is a unique name that identifies a wireless network. All devices attempting to connect to a specific WLAN must use the same SSID. The default is xirrus. For additional information about SSIDs, go to the Multiple SSIDs section of Frequently Asked Questions on page 186. Installing the XS-3900 49 Wireless LAN Array 8. Wireless Security: Select the desired wireless security scheme (WEP or WPA). Make your selection from the choices available in the pull-down list. WEP (Wired Equivalent Privacy) An optional IEEE 802.11 function that offers frame transmission privacy similar to a wired network. WEP generates secret shared encryption keys that both source and destination stations can use to alter frame bits to avoid disclosure to eavesdroppers. WPA (Wi-Fi Protected Access) A Wi-Fi Alliance standard that contains a subset of the IEEE 802.11i standard, using TKIP or AES as an encryption method and 802.1X for authentication. WPA is the stronger of the two wireless security schemes. For more information about security, including a full review of all security options and settings, go to Security Management on page 98.
Security settings will only take effect if they are assigned to a specific SSID. Refer to SSID Management on page 92. 9. Wireless Key/Passphrase: Depending on the wireless security scheme you selected, enter a unique WEP key or WPA passphrase. a. Confirm Key/Passphrase: If you entered a WEP key or WPA passphrase, confirm it here. 10. New Admin Password: If desired, enter a new administration password for managing this array. Choose a password that is not obvious, and one that you can remember. If you forget your password, you must reset the array to its factory defaults so that the password is reset to admin (its default setting). a. Confirm Admin Password: If you entered a new administration password, confirm the new password here. 50 Installing the XS-3900 Wireless LAN Array 11. Adjust Time (hrs:min:sec): Check this box if you want to adjust the current system time. When the box is checked, the time fields become active. Enter the revised time (hours, minutes, seconds, am/pm) in the corresponding fields. If you dont want to adjust the current time, this box should be left unchecked (default). 12. Adjust Date (day/month/year): Check this box if you want to adjust the current system date. When the box is checked, the date fields become active. Enter the revised date (day, month, year) in the corresponding fields. If you dont want to adjust the current date, this box should be left unchecked (default). 13. Auto Adjust Daylight Savings: Check this box if you want the system to adjust for daylight savings automatically, otherwise leave this box unchecked (default). 14. Use NTP (IP Address): Check this box if you want to use an NTP
(Network Time Protocol) server to synchronize the arrays clock. This ensures that syslog time-stamping is maintained across all units. Without an NTP server assigned (no universal clock), each array will use its own internal clock and stamp times accordingly, which may result in discrepancies. When this box is checked, the NTP and NTP 2 IP address fields become active. If you dont want to use an NTP server, leave this box unchecked (default), otherwise enter the IP address or DNS name of the NTP server. NTP enabled Figure 35. Enabling the NTP Feature a. NTP 2 (IP Address): If you enabled the NTP option and the site is using a secondary NTP server, enter the IP address or DNS name of the secondary NTP server. Installing the XS-3900 51 Wireless LAN Array 15. Click on the Apply button to apply the new settings to this session 16. Click on the Save button to save your changes (otherwise your new settings will not take effect). This ends the Express Setup procedure. 52 Installing the XS-3900 Wireless LAN Array The Web Management Interface This chapter provides an overview of the XS-3900s embedded Web Management Interface (WMI), used for establishing your networks configuration settings and wireless operating parameters. Section headings for this chapter include:
An Overview An Overview The WMI is an easy-to-use graphical interface to your XS-3900. It allows you to configure the product to suit your individual requirements and ensure that the unit functions efficiently and effectively. Figure 36. Web Management Interface The Web Management Interface 53 Wireless LAN Array Content The content of the WMI has been organized by function and hierarchy, shown here in list form. You can click on any item in the list to jump to the referenced destination. Array Status Express Setup Network Interfaces Network Settings VLAN Settings Network Statistics DHCP Server Settings DNS Settings IAP Interfaces IAP Settings Global Settings Global Settings .11a Global Settings .11bg IAP LED Settings SSID Management Create SSID Edit SSID Security Security Management Radius Server Radius User MAC Access List Create Admin Edit Admin Users Services System Log SNMP Software Tools Event Log 54 The Web Management Interface Wireless LAN Array Structure The WMI has been designed with simplicity in mind, making navigation quick and easy. In the following example, youll see that pages are divided into left and right frames. The left frame contains configuration elements organized by function (for example, radio interfaces, security, etc.), and where these functions are sub-divided there is an associated pull-down menu. Also included in the left frame are three counters that provide a running total of messages generated by the syslog subsystem during your sessionorganized into Critical, Warning and Event messages. Left frame Right frame Message counters Pull-down menu Figure 37. WMI: Frames The right frame contains the configuration parameters for the XS-3900. This is where you input data (if you want to make changes) or review the XS-3900s current status and activity. The Web Management Interface 55 Wireless LAN Array Status Bar Below the configuration frames you will find a status bar containing information about this XS-3900 unit, including:
Locationdisplays the location information assigned to the unit.
Host namethe host name assigned to this unit.
Network interface IP addressthe IP address of the network interface that is currently being used. Also included in the status bar is a Print button and a Help button. Click on the Print button to send a print file of the active page to your local printer, or click on the Help button to go to the XS-3900s online help system. Print button Status information Help button Figure 38. WMI: Status Bar Applying Configuration Changes When you have defined all your settings on any WMI configuration page, you must click on the Apply button for the changes to take effect in the current session. Click on the Save button to write your changes (for future sessions). Character Restrictions When inputting strings in the WMI (for example, assigning SSIDs, host name, password, etc.), use only common alphanumeric characters. Do not use any of the following characters:
56 The Web Management Interface Wireless LAN Array Configuring the XS-3900 This chapter covers configuration and management tasks using the products embedded Web Management Interface (WMI). It also includes a procedure for logging in to the XS-3900 with your Web browser. Section headings for this chapter include:
Logging In
Making Configuration Changes to the XS-3900 Logging In Use this procedure to log in to the WMI via your Web browser. 1. Establish a network connection and open your Web browser. 2. Connect to the XS-3900 via its default IP address (10.0.1.1). 3. When connected to the XS-3900, a login prompt appears on your screen. The default login user name and password is admin (for both). Login names and passwords are case-sensitive. 4. To log in to the XS-3900s Web Management Interface, enter admin when prompted for a user name and password. Figure 39. WMI: Logging In to the XS-3900 Configuring the XS-3900 57 Wireless LAN Array Making Configuration Changes to the XS-3900 This section has been organized into functional areas that reflect the flow and content of the WMI. Configuration instructions to the XS-3900 require you to input data in one or more of the following formats:
Specifying data (for example, IP addresses, descriptions, etc.).
Making selections from pull-down lists.
Choosing an option by clicking on a radio button (for example, on/off).
Clicking on a check box to activate/deactivate a feature.
Clicking on a button to confirm a command or apply your changes. Array Status This is a status only page that provides a snapshot of the global configuration settings for all XS-3900 network interfaces and radios. You must go to the appropriate configuration page to make changes to any of the settings displayed here (configuration changes cannot be made from this page). Figure 40. WMI: Array Status Page 58 Configuring the XS-3900 Wireless LAN Array The Array Status page is sub-divided into the Network Interface and IAP Interface (radio) sections and provides you with the following information:
All devices: A listing of the available Network Interfaces and IAPs with each item containing a link to the associated configuration page. Linked items are shown UNDERLINED. For example:
These items are linked Figure 41. Linked Items
All devices: The current status of each device, whether enabled or disabled. Devices that are disabled are shown in RED. For example:
Disabled devices are shown in RED Figure 42. WMI: Disabled Device (Partial View)
Network Interface devices:
The Management column indicates whether the network interface device is enabled or disabled. Network interfaces are enabled or disabled on the Network Settings page.
The Configuration column shows how each network interface obtains its IP addresseither dynamically via DHCP or entered manually by you (static configuration) on the Network Settings page. Configuring the XS-3900 59 Wireless LAN Array
The IP Address column shows the current IP address being used by each network interface device.
IAP Interface devices:
The Channel column shows on which channel each IAP (radio) is operating. Channel selections are made on the IAP Settings page from a pull-menu. To avoid co-channel interference, adjacent radios should not be using adjacent channels.
The Cell Size column indicates which cell size setting is currently active for each radioeither small, medium, large or manually defined by you. The cell size of a radio is a function of its transmit power and determines the radios overall coverage. Cell sizes are defined on the IAP Settings page. For additional information about cell sizes and the importance of planning for and defining the optimum sizes for your array, go to Coverage and Capacity Planning on page 21. Figure 43. IAP Cells
The Associated Users column informs you how many users are currently associated with each radio. The high-capacity XS-3900 can handle up to 64 concurrent users per individual IAP radio (or 960 users per array). 60 Configuring the XS-3900 Wireless LAN Array Express Setup This page allows you to establish global configuration settings that will enable basic XS-3900 functionality. Any changes you make on this page will affect all radios. When finished, click on the Apply button to apply the new settings to this session, then click on the Save button to save your changes. more ... Figure 44. WMI: Express Setup Page (Part 1) Configuring the XS-3900 61
... continued Wireless LAN Array Figure 45. WMI: Express Setup Page (Part 2) Procedure for Performing an Express Setup 1. Host Name: Specify a unique host name for this XS-3900 unit. The host name is used to identify the XS-3900 on the network. Use a name that will be meaningful within your network environment, up to 64 alphanumeric characters. 2. Location Information: Enter a brief but meaningful description that accurately defines the physical location of this XS-3900 unit. In an environment where multiple units are installed, clear definitions for their locations are important if you want to identify a specific unit. 3. Admin Contact: Enter the name and contact information of the person who is responsible for administering this XS-3900 unit at the designated location. 4. Country of Operation: To ensure that the array remains in compliance with local regulatory laws, the Country of Operation is set at the factory and cannot be changed. 5. IAP Status: This option provides a button that allows you to enable all radios. Simply click on the Enable All Radios button to enable all radios for this Wireless LAN Array. 62 Configuring the XS-3900 Wireless LAN Array 6. Configure the Fast Ethernet, Gigabit 1 and Gigabit 2 network interfaces. The fields for each of these interfaces are the same, and include:
a. MAC Address: This field displays the hardware MAC address for the network interface and cannot be changed. b. Enable Interface: Choose Yes to enable this network interface, or choose No to disable the interface. c. Allow Management on Interface: Choose Yes to allow management of the array via this network interface, or choose No to deny all management privileges for this interface. d. Configuration Server Protocol: Choose DHCP to instruct the array to use DHCP to assign IP addresses to the arrays Ethernet interfaces, or choose Static IP if you intend to enter IP addresses manually. If you choose the Static IP option, you must enter the following information:
IP Address: Enter a valid IP address for this array. To use any of the remote connections (Web, SNMP, or SSH), a valid IP address must be used.
IP Subnet Mask: Enter a valid IP address for the subnet mask (the default is 255.255.255.0). The subnet mask defines the number of IP addresses that are available on the routed subnet where the array is located.
Default Gateway: Enter a valid IP address for the default gateway. This is the IP address of the router that the array uses to forward data to other networks. 7. SSID (Wireless Network Name): Enter a unique SSID, up to 32 characters. The SSID (Service Set Identifier) is a unique name that identifies a wireless network. All devices attempting to connect to a specific WLAN must use the same SSID. The default is xirrus. For additional information about SSIDs, go to the Multiple SSIDs section of Frequently Asked Questions on page 186. Configuring the XS-3900 63 8. Wireless Security: Select the desired wireless security scheme (WEP or WPA). Make your selection from the choices available in the pull-down list. Wireless LAN Array WEP (Wired Equivalent Privacy) An optional IEEE 802.11 function that offers frame transmission privacy similar to a wired network. WEP generates secret shared encryption keys that both source and destination stations can use to alter frame bits to avoid disclosure to eavesdroppers. WPA (Wi-Fi Protected Access) A Wi-Fi Alliance standard that contains a subset of the IEEE 802.11i standard, using TKIP or AES as an encryption method and 802.1X for authentication. WPA is the stronger of the two wireless security schemes. For more information about security, including a full review of all security options and settings, go toSecurity Management on page 98. 9. Wireless Key/Passphrase: Depending on the wireless security scheme you selected, enter a unique WEP key or WPA passphrase. a. Confirm Key/Passphrase: If you entered a WEP key or WPA passphrase, confirm it here. 10. New Admin Password: If desired, enter a new administration password for managing this array. Choose a password that is not obvious, and one that you can remember. If you forget your password, you must reset the array to its factory defaults so that the password is reset to admin (its default setting). a. Confirm Admin Password: If you entered a new administration password, confirm the new password here. 11. Adjust Time (hrs:min:sec): Check this box if you want to adjust the current system time. When the box is checked, the time fields become active. Enter the revised time (hours, minutes, seconds, am/pm) in the corresponding fields. If you dont want to adjust the current time, this box should be left unchecked (default). 64 Configuring the XS-3900 Wireless LAN Array 12. Adjust Date (day/month/year): Check this box if you want to adjust the current system date. When the box is checked, the date fields become active. Enter the revised date (day, month, year) in the corresponding fields. If you dont want to adjust the current date, this box should be left unchecked (default). 13. Auto Adjust Daylight Savings: Check this box if you want the system to adjust for daylight savings automatically, otherwise leave this box unchecked (default). 14. Use NTP (IP Address): Check this box if you want to use an NTP
(Network Time Protocol) server to synchronize the arrays clock. This ensures that syslog time-stamping is maintained across all units. Without an NTP server assigned (no universal clock), each array will use its own internal clock and stamp times accordingly, which may result in discrepancies. When this box is checked, the NTP and NTP 2 IP address fields become active. If you dont want to use an NTP server, leave this box unchecked (default), otherwise enter the IP address or DNS name of the NTP server. NTP enabled Figure 46. Enabling the NTP Feature a. NTP 2 (IP Address): If you enabled the NTP option and the site is using a secondary NTP server, enter the IP address or DNS name of the secondary NTP server. 15. Click on the Apply button to apply the new settings to this session 16. Click on the Save button to save your changes (otherwise your new settings will not take effect). This ends the Express Setup procedure. Configuring the XS-3900 65 Wireless LAN Array Network Interfaces This is a status only page that provides a snapshot of the configuration settings currently established for the 10/100 Fast Ethernet interface and the 10/100/1000 Gigabit 1 and Gigabit 2 interfaces. You must go to the appropriate configuration page to make changes to any of the settings displayed here (configuration changes cannot be made from this page). You can click on any item in the Interface column to jump to the associated configuration page. Figure 47. WMI: Network Interfaces Page WMI pages that allow you to change or view configuration settings associated with the network interfaces include:
Network Settings on page 67.
VLAN Settings on page 71.
Network Statistics on page 74.
DHCP Server Settings on page 75.
DNS Settings on page 76. 66 Configuring the XS-3900 Wireless LAN Array Network Settings This page allows you to establish configuration settings for the 10/100 Fast Ethernet interface and the 10/100/1000 Gigabit 1 and Gigabit 2 interfaces.
Gigabit 2 settings will mirror Gigabit 1 settings (except for MAC addresses) and cannot be configured separately. When finished, click on the Apply button to apply the new settings to this session, then click on the Save button to save your changes. more ... Figure 48. WMI: Network Settings Page (Part 1) Configuring the XS-3900 67
... continued Wireless LAN Array Figure 49. WMI: Network Settings Page (Part 2) Network Interface Ports The following diagram shows the location of each network interface port on the underside of the XS-3900. Serial Fast Ethernet Gigabit 1 Gigabit 2 Figure 50. Network Interface Ports 68 Configuring the XS-3900 Wireless LAN Array Procedure for Configuring the Network Interfaces 1. Configure the Fast Ethernet, Gigabit 1 and Gigabit 2 network interfaces. The fields for each of these interfaces are the same, and include:
a. MAC Address: This field shows the MAC address for this array. The MAC (hardware) address is used to identify the Xirrus array to the wired network. The MAC address is a static value and cannot be changed. b. Enable Interface: Choose Yes to enable this network interface (Fast Ethernet, Gigabit 1 or Gigabit 2), or choose No to disable the interface. c. Allow Management on Interface: Choose Yes to allow management of this array via the selected network interface, or choose No to deny all management privileges for this interface. d. Auto Negotiate: This feature allows the array to negotiate the best transmission rates automatically. Choose Yes to enable this feature, or choose No to disable this featurethe default is enabled. If you disable the Auto Negotiate feature, you must define the Duplex and Speed options manually (otherwise these options are not available).
Duplex: Full-duplex refers to the transmission of data in two directions simultaneously (for example, a telephone is a full-
duplex device because both parties can talk and be heard at the same time). In contrast, half-duplex allows data transmission in one direction at a time only (for example, a walkie-talkie is a half-duplex device because it allows only one party to talk at any one time). If the Auto-Negotiate feature is disabled, you can manually choose Half or Full duplex for your data transmission preference.
Speed: If the Auto-Negotiate feature is disabled, you can manually choose the desired data transmission speed from the pull-down list, either Fast Ethernet or Gigabit. Configuring the XS-3900 69 Wireless LAN Array e. MTU Size: Specify the MTU (Maximum Transmission Unit) size. When you specify the MTU, you are definingin bytesthe largest physical packet size that the network can transmit. Any messages larger than the MTU that you specify here are divided into smaller packets before being sent. The default is 1000 bytes. f. Encapsulation: Choose either dot1H (802.1H) or snap (SNAP) as the Ethernet encapsulation type. g. Configuration Server Protocol: Choose DHCP to instruct the XS-
3900 to use DHCP when assigning IP addresses to the array, or choose Static IP if you intend to enter IP addresses manually.
IP Address: If you selected the Static IP option, enter a valid IP address for this XS-3900 unit. To use any of the remote connections (Web, SNMP, or SSH), a valid IP address must be established.
IP Subnet Mask: If you selected the Static IP option, enter a valid IP address for the subnet mask (the default for Class C is 255.255.255.0). The subnet mask defines the number of IP addresses that are available on the routed subnet where the XS-3900 is located.
Default Gateway: If you selected the Static IP option, enter a valid IP address for the default gateway. This is the IP address of the router that the XS-3900 uses to transmit data to other networks. 2. Click on the Apply button to apply the new settings to this session. 3. Click on the Save button to save your changes (otherwise your new settings will not take effect). 70 Configuring the XS-3900 Wireless LAN Array VLAN Settings This page allows you to add or remove VLANs, associate VLANs to a specific network interface, and enable VLAN tagging of outgoing traffic. When finished, click on the Apply button to apply the new settings to this session, then click on the Save button to save your changes. Figure 51. WMI: VLAN Settings Page Understanding VLANs A VLAN (Virtual LAN) is a switch network that is logically segmentedby functions, project teams, or applications rather than on a physical or geographical basis. For example, all workstations and servers used by a particular workgroup team can be connected to the same VLAN, regardless of their physical connections to the network, or the fact that they might be intermingled with other teams. You use VLANs to reconfigure the network through software rather than physically unplugging and moving devices or wires. A VLAN can be thought of as a broadcast domain that exists within a defined set of switches. A VLAN consists of a number of end systems, either hosts or network equipment (for example, bridges and routers), connected by a single bridging domain. Configuring the XS-3900 71 Wireless LAN Array The bridging domain is supported on various pieces of network equipment, such as LAN switches, that operate bridging protocols between them with a separate group for each VLAN. VLANs provide the segmentation services traditionally provided by routers in LAN configurations. VLANs address scalability, security, and network management. You should consider several key issues when designing and building switched LAN networks:
LAN segmentation
Security
Broadcast control
Performance
Network management
Communication between VLANs You extend VLANs into a wireless LAN by adding IEEE 802.11Q tag awareness to the Xirrus array. Frames destined for different VLANs are transmitted by the array wirelessly on different SSIDs. Conversely, packets coming from a client associated with a certain VLAN are 802.11Q tagged before they are forwarded onto the wired network. Procedure for Configuring VLANs 1. New VLAN ID: Enter a new VLAN ID number (between 0 and 4012) that matches your networks VLAN scheme. 2. VLAN Description: Enter a meaningful description for this VLAN. 3. Tag Outgoing: Check this box if you want to enable VLAN tagging of outgoing traffic. 4. Network Interface: Select the interface you want to associate to this VLAN. Make your selection from the choices available in the pull-down listeither Fast Ethernet, Gigabit 1 or Gigabit 2. 72 Configuring the XS-3900 Wireless LAN Array 5. VLAN Management: This list shows the VLANs that are currently assigned to the array. Each time you create a VLAN, the new VLAN is listed here. To delete a VLAN, select the VLAN from the list and click on the Delete VLAN button. 6. Click on the Apply button to apply the new settings to this session. 7. Click on the Save button to save your changes (otherwise your new settings will not take effect). 8. VLANs you defined can now be assigned to specific SSIDs. Configuring the XS-3900 73 Wireless LAN Array Network Statistics This is a status only page that allows you to review statistical data associated with each network interface and its activity. You can Refresh the data (update the page with the latest information) or Clear the data (reset all content to zero and begin counting again) at any time by clicking on the appropriate button. If you are experiencing problems, you may also want to print this page for your records. Figure 52. WMI: Network Statistics Page 74 Configuring the XS-3900 Wireless LAN Array DHCP Server Settings This page allows you to enable/disable DHCP (Dynamic Host Configuration Protocol) server functionality. DHCP allows the array to provide wireless clients with IP addresses and other networking information. The DHCP server will not provide DHCP services to the wired side of the network. If you enable the DHCP server, you need to define the DHCP lease time (default and maximum) and establish the IP address range that the DHCP server can use. When finished, click on the Apply button to apply the new settings to this session, then click on the Save button to save your changes. Figure 53. WMI: DHCP Settings Page Procedure for Configuring the DHCP Server 1. Enable DHCP Server: Choose Yes to enable DHCP services, or choose No to disable DHCP services. 2. Default Lease (seconds): This field defines the default DHCP lease time
(in seconds). The factory default is 300 seconds, but you can change the default at any time. 3. Maximum Lease (seconds): Enter a value (in seconds) to define the maximum allowable DHCP lease time. The default is 300 seconds. Configuring the XS-3900 75 Wireless LAN Array 4. Starting IP Range: Enter an IP address to define the start of the IP range that will be used by the DHCP server. 5. End IP Range: Enter an IP address to define the end of the IP range that will be used by the DHCP server. The DHCP server will only use IP addresses that fall between the start and end range that you define on this page. 6. Click on the Apply button to apply the new settings to this session. 7. Click on the Save button to save your changes (otherwise your new settings will not take effect). DNS Settings This page allows you to establish your DNS (Domain Name System) settings. At least one DNS server must be set up if you want to offer clients associating with this XS-3900 the ability to use meaningful host names instead of numerical IP addresses. When finished, click on the Apply button to apply the new settings to this session, then click on the Save button to save your changes. Figure 54. WMI: DNS Settings Page 76 Configuring the XS-3900 Wireless LAN Array Procedure for Configuring DNS Servers 1. DNS Host Name: Enter a valid DNS host name. 2. DNS Domain: Enter the DNS domain name. 3. DNS Server 1: Enter the IP address of the primary DNS server. 4. DNS Server 2: Enter the IP address of the secondary DNS server. 5. DNS Server 3: Enter the IP address of the tertiary DNS server. 6. Click on the Apply button to apply the new settings to this session. 7. Click on the Save button to save your changes (otherwise your new settings will not take effect). Configuring the XS-3900 77 Wireless LAN Array IAP Interfaces This is a status only page that allows you to review configuration data associated with each Integrated Access Point (radio). It includes a list of which IAP radios are enabled, the channel that each radio is currently using, cell sizes, and how many users are currently associated with each radio. There are no configuration options available on this page, but if you are experiencing problems or simply reviewing the radio assignments, you may want to print this page for your records. You can click on any item in the IAP column to jump to the associated configuration page. Figure 55. WMI: IAP Interfaces Page 78 Configuring the XS-3900 Wireless LAN Array IAP Settings This page allows you to enable/disable Integrated Access Points (radios), define the wireless mode for each radio, specify the channel to be used and the cell size for each radio, establish transmit/receive parameters, and select antennas. When finished, click on the Apply button to apply the new settings to this session, then click on the Save button to save your changes. To see a diagram of the layout and naming of radios, go to Figure 6 on page 10. Figure 56. WMI: IAP Settings Page Procedure for Auto Configuring IAPs (Radios) You can auto-configure radios by clicking on the Auto Configure button on the relevant WMI page (auto configuration only applies to enabled radios):
For all radios, go to the Global Settings page.
For all 802.11a radios, go to the Global Settings .11a page.
For all 802.11b/g radios, go to the Global Settings .11bg page. Configuring the XS-3900 79 Procedure for Manually Configuring IAPs (Radios) Wireless LAN Array 1. 2. 3. 4. In the Enabled column, check the box of a corresponding radio to enable the radio, or uncheck the box if you want to disable the radio. In the Mode column, select the wireless mode for this radio from the choices available in the pull-down menu (either .11a or .11b/g). In the Channel column, select the channel you want this radio to use from the channels available in the pull-down list. The sample pull-down list shown here is for the abg2 radio with its mode set to .11b/g. Any channels appearing in the list that are shown in RED are not recommended. In the Cell Size column, choose either Small, Medium, or Large to define the desired pre-
configured cell size, or choose Manual to define the wireless cell size manually. If you choose Manual, you must specify the transmit and receive powerin dBin the Tx Power dB (transmit) and Rx dB (receive) fields. The number of users and their applications are major drivers of bandwidth requirements. The network architect must account for the number of users within the XS-3900s cell diameter. In a large office, or where user density is high, you should choose Small cells to achieve a higher data rate, since walls and other objects will not define the cells naturally. For additional information about cell sizes, go to Coverage and Capacity Planning on page 21. 80 Configuring the XS-3900 Wireless LAN Array 5. In the Antenna Select column, choose the antenna you want this radio to use from the pull-down list. The list of available antennas will be different, depending on the wireless mode you selected for the radio. The sample pull-down list shown here is for an 11a radio. In cases where the configuration of the array limits the antenna choice (for example, if no external antenna is available), the Antenna Select column is greyed out. 6. Click on the Apply button to apply the new settings to this session. 7. Click on the Save button to save your changes (otherwise your new settings will not take effect at the next reboot). Configuring the XS-3900 81 Wireless LAN Array Global Settings This page allows you to establish global IAP (radio) settings. Global IAP settings include enabling or disabling all radios (regardless of their operating mode), auto-configuring channel allocations, enabling or disabling the Beacon World Mode and EDCF, specifying the short and long retry limits, and defining the beacon interval and DTIM period. Changes you make on this page are applied to all IAPs (radios), without exception. Figure 57. WMI: Global Settings Page Procedure for Configuring Global IAP Settings 1. IAP Status: Click on the Enable All IAPs button to enable all radios for this array, or click on the Disable All IAPs button to disable all radios. 2. Channel Configuration: Click on the Auto Configure button to instruct the array to determine the best channel allocation settings for each radio and select the channel automatically, based on changes in the environment. This is the recommended method for channel allocations. 82 Configuring the XS-3900 Wireless LAN Array 3. Beacon World Mode: World Mode is a feature based on 802.11d. When this feature is enabled, the XS-3900 beacons out to client devices the correct legal set of channels and transmit power settings for the defined country code. This feature eliminates concerns about misconfigured client adapters because they will automatically know the correct channel set when communicating with the XS-3900. To enable the Beacon World Mode feature, choose Yes, or choose No to disable this feature. The default is disabled. 4. Enable EDCF: This feature allows for enhanced packet transmissions per IEEE 802.11e specifications and can improve throughput. Choose Yes to enable EDCF, or choose No to disable this feature. 5. Short Retry Limit: This attribute indicates the maximum number of transmission attempts for a frame, the length of which is less than or equal to the RTS Threshold, before a failure condition is indicated. The default value is 7. Enter a new value (1 to 128) in the Short Retry Limit field if you want to increase or decrease this attribute. 6. Long Retry Limit: This attribute indicates the maximum number of transmission attempts for a frame, the length of which is greater than the RTS Threshold, before a failure condition is indicated. The default value is 4. Enter a new value (1 to 128) in the Long Retry Limit field if you want to increase or decrease this attribute. 7. Beacon Interval: When the XS-3900 sends a beacon, it includes with it a beacon interval, which specifies the period of time before it will send the beacon again. Enter the desired value in the Beacon Interval field, between 20 and 1000. The value you enter here is applied to all radios. Configuring the XS-3900 83 Wireless LAN Array 8. DTIM Period: A DTIM (Delivery Traffic Indication Message) is a signal sent as part of a beacon by the XS-3900 to a client device in sleep mode, alerting the device to a packet awaiting delivery. Enter the desired value in the DTIM Period field, between 1 and 255. The value you enter here is applied to all radios. 9. Click on the Apply button to apply the new settings to this session. 10. Click on the Save button to save your changes (otherwise your new settings will not take effect). Global Settings .11a This page allows you to establish global 802.11a IAP (radio) settings. These settings include enabling or disabling 802.11a radios and making the data rates a required parameter, enabling or disabling all 802.11a radios, auto-configuration of channel allocations for all 802.11a radios, and specifying the fragmentation and RTS thresholds for all 802.11a radios. Figure 58. WMI: Global Settings .11a Page 84 Configuring the XS-3900 Wireless LAN Array Procedure for Configuring Global 802.11a IAP Settings 1. 802.11a Data Rates: The arrays allow you to enable or disable specific data rates for all 802.11a radios.
Enabled: Allow use of this data rate.
Required: Clients must support this data rate to associate with the network. In addition, you can make a specific data rate (for example, 12 Mbps) a required data rate, which means the 802.11a radios are required to support this data rate. 2. 11a IAP Status: Click on the Enable 802.11a IAPs button to enable all 802.11a radios for this array, or click on the Disable 802.11a IAPs button to disable all 802.11a radios. 3. Channel Configuration: Click on the Auto Configure button to instruct the array to determine the best channel allocation settings for each 802.11a radio and select the channel automatically, based on changes in the environment. This is the recommended method for 802.11a channel allocations. 4. Fragmentation Threshold: This is the maximum size for directed data packets transmitted over the 802.11a radio. Larger frames fragment into several packets, their maximum size defined by the value you enter here. Enter the desired Fragmentation Threshold value in this field, between 256 and 2346). 5. RTS Threshold: The RTS (Request To Send) Threshold specifies the packet size. Packets larger than the RTS threshold will use CTS/RTS prior to transmitting the packetuseful for larger packets to help ensure the success of their transmission. Enter a value between 1 and 2347. 6. Click on the Apply button to apply the new settings to this session. 7. Click on the Save button to save your changes (otherwise your new settings will not take effect). Configuring the XS-3900 85 Wireless LAN Array Global Settings .11bg This page allows you to establish global 802.11a IAP (radio) settings. These settings include enabling or disabling 802.11a radios and making the data rates a required parameter, enabling or disabling all 802.11a radios, auto-configuration of channel allocations for all 802.11a radios, and specifying the fragmentation and RTS thresholds for all 802.11a radios. Figure 59. WMI: Global Settings .11bg Page Procedure for Configuring Global 802.11b/g IAP Settings 1. 802.11g Data Rates: The arrays allow you to enable or disable specific data rates for all 802.11g radios.
Enabled: Allow use of this data rate.
Required: Clients must support this data rate to associate with the network. In addition, you can make a specific data rate (for example, 12 Mbps) a required data rate, which means the 802.11a radios are required to support this data rate. 86 Configuring the XS-3900 Wireless LAN Array 2. 3. 802.11b Data Rates: This task is similar to Step 1, but these data rates apply only to 802.11b radios. 11bg IAP Status: Click on the Enable 802.11b/g IAPs button to enable all 802.11b/g radios for this array, or click on the Disable 802.11b/g IAPs button to disable all 802.11b/g radios. 4. Channel Configuration: Click on the Auto Configure button to instruct the array to determine the best channel allocation settings for each 802.11b/g radio and select the channel automatically, based on changes in the environment. This is the recommended method for 802.11b/g channel allocations. 5. Fragmentation Threshold: This is the maximum size for directed data packets transmitted over the 802.11b/g radio. Larger frames fragment into several packets, their maximum size defined by the value you enter here. Enter the desired Fragmentation Threshold value in this field, between 256 and 2346). 6. RTS Threshold: The RTS (Request To Send) Threshold specifies the packet size. Packets larger than the RTS threshold will use CTS/RTS prior to transmitting the packetuseful for larger packets to help ensure the success of their transmission. Enter a value between 1 and 2347. 7. Click on the Apply button to apply the new settings to this session. 8. Click on the Save button to save your changes (otherwise your new settings will not take effect). Configuring the XS-3900 87 IAP LED Settings This page allows you to set up the arrays IAP LEDs, including enabling or disabling the LED status functionality and assigning behavior preferences to the LEDs. Wireless LAN Array Figure 60. WMI: IAP LED Settings Page Procedure for Configuring the IAP LEDs 1. LED Status: Choose Enabled to enable LED status functionality, or choose Disabled to disable the LEDs. 2. LED Trigger: This option determines which event triggers the LEDs, either when a radio is enabled or when a radio first associates with the network. Choose On Radio Enabled or On First Association, as desired. 3. LED Blink Behavior: This option allows you to select when the IAP LEDs blink, based on the activities you check here. From the choices available, select one or more activities to trigger when the LEDs blink. 88 Configuring the XS-3900 Wireless LAN Array Statistics This is a status only page that provides an overview of the statistical data associated with individual radios. For more detailed information about a specific radio, simply click on any radio in the left column, or go to the statistics page for the desired radio (for example, Statistics IAP abg4). You can Refresh or Clear the data on this page at any time by clicking on the appropriate button. If you are experiencing problems, you may also want to print this page for your records. Figure 61. WMI: Statistics Page Configuring the XS-3900 89 Wireless LAN Array Statistics (for specific radios) These pages provide a detailed statistical summary of each radios performance, displayed either numerically or by percentage (your choice). The following image shows an example of the Statistics IAP abg3 page (for the abg3 radio). The default Statistics Type is NUMERIC, but you can change this to PERCENTAGE from the pull-down menu at the top of the page. In addition, you can Refresh or Clear the data on this page at any time by clicking on the appropriate button. more ... Figure 62. WMI: Statistics IAP abg3 Page (Part 1) 90 Configuring the XS-3900 Wireless LAN Array
... continued Figure 63. WMI: Statistics IAP abg3 Page (Part 2) Configuring the XS-3900 91 Wireless LAN Array SSID Management This is a status only page that allows you to review SSID (Service Set IDentifier) assignments. It includes the SSID name, whether or not an SSID is visible on the network, any security and QoS parameters defined for each SSID, associated VLAN IDs, and radio availability per SSID. There are no configuration options available on this page, but if you are experiencing problems or reviewing SSID management parameters, you may want to print this page for your records. For information to help you understand SSIDs and how multiple SSIDs are managed by the XS-3900, go to the Multiple SSIDs section of Frequently Asked Questions on page 186. Figure 64. WMI: SSID Management Page Understanding SSIDs The SSID (Service Set Identifier) is a unique identifier that wireless networking devices use to establish and maintain wireless connectivity. Multiple access points on a network or sub-network can use the same SSIDs. SSIDs are case-
sensitive and can contain up to 32 alphanumeric characters (do not include spaces when defining SSIDs). 92 Configuring the XS-3900 Wireless LAN Array Multiple SSIDs A BSSID (Basic SSID) refers to an individual access point radio and its associated clients. The identifier is the MAC address of the access point radio that forms the BSS. A group of BSSs can be formed to allow stations in one BSS to communicate to stations in another BSS by way of a backbone that interconnects each access point. The Extended Service Set (ESS) refers to the group of BSSIDs that are grouped together to form one ESS. The ESSID (often referred to as SSID or wireless network name) identifies the Extended Service Set. Clients must associate to a single ESS at any given time. Clients ignore traffic from other Extended Service Sets that do not have the same SSID. Legacy access points typically support one SSID per access point. Xirrus Wireless LAN Arrays support the ability for multiple SSIDs to be defined and used simultaneously. Using SSIDs The creation of different wireless network names allows system administrators to separate types of users with different requirements. The following policies can be tied to an SSID:
Minimum security required to join this SSID.
The wireless Quality of Service (QoS) desired for this SSID.
The wired VLAN associated with this SSID. As an example, one SSID named accounting might require the highest level of security, while another SSID named guests might have low security requirements. Another example may define an SSID named voice that supports voice over Wireless LAN phones with the highest possible Quality of Service (QoS) definition. This type of SSID might also forward traffic to specific VLANs on the wired network Configuring the XS-3900 93 Create SSID This page allows you to create and manage SSIDs, and assign security parameters and VLANs on a per SSID basis. When finished, click on the Save button to save your changes, otherwise your changes will not take effect. Wireless LAN Array Figure 65. WMI: Create SSID Page Procedure for Creating SSIDs 1. New SSID: Enter a new SSID definition. 2. Security: From the pull-down list, choose the security that will be required by users for this SSID, either Open, WEP or WPA. The Open option provides no security and is not recommended. For an overview of the security options, go to Security Planning on page 31. 3. Qos Priority: From the pull-down list, select a Quality of Service (QoS) setting. The QoS setting you define here will prioritize wireless traffic for this SSID over other SSID wireless traffic. This step is optional. 4. VLAN ID: From the pull-down list, select a VLAN that you want this traffic to be forwarded to on the wired network. This step is optional. 94 Configuring the XS-3900 Wireless LAN Array 5. Click on the Create SSID button to create this SSID. The SSID you just created will appear in the SSID List on the Edit SSID page. 6. Click on the Save button to save your changes (otherwise your new settings will not take effect). Edit SSID This page allows you to edit existing SSIDs, and reassign security parameters and VLANs on a per SSID basis. When finished, click on the Apply button to apply the new settings to this session, then click on the Save button to save your changes. Figure 66. WMI: Edit SSID Page Procedure for Editing or Deleting SSIDs 1. SSID: Choose the SSID that you want to edit or delete from the list. If you are deleting a selected SSID, click on the Delete SSID button, otherwise go to Step 2. 2. Public SSID: Click on the Assign Public button to make the selected SSID visible to all clients on the network. Although the XS-3900 will not broadcast SSIDs that are hidden, clients can still associate to a hidden SSID if they know the SSID name to connect to it. Choose No if you do not want this SSID to be visible on the network. Configuring the XS-3900 95 Wireless LAN Array 3. Security: From the pull-down list, choose the security that will be required by users for the selected SSIDeither Open, WEP or WPA. The Open option provides no security and is not recommended. For an overview of the security options, go to Security Planning on page 31. 4. QoS Priority: From the pull-down list, select a Quality of Service (QoS) setting. The QoS setting you define here will prioritize wireless traffic for the selected SSID over other SSID wireless traffic. This step is optional. 5. VLAN ID: From the pull-down list, select a VLAN that you want this traffic to be forwarded to on the wired network. This step is optional. 6. Click on the Apply button to apply the new settings to this session. 7. Click on the Save button to save your changes (otherwise your new settings will not take effect). 96 Configuring the XS-3900 Wireless LAN Array Security This is a status only page that allows you to review the arrays security parameters. It includes the assigned network administration accounts, Access Control List (ACL) values, WEP and WPA status, and RADIUS configuration settings. There are no configuration options available on this page, but if you are experiencing issues with security, you may want to print this page for your records. For additional information about wireless network security, refer to:
Security Planning on page 31.
The Security section of Frequently Asked Questions on page 186. Figure 67. WMI: Security Page Configuring the XS-3900 97 Wireless LAN Array Security Management This page allows you to establish the security parameters for your wireless network, including WEP, WPA and RADIUS authentication. When finished, click on the Apply button to apply the new settings to this session, then click on the Save button to save your changes. For additional information about wireless network security, refer to Security Planning on page 31. Figure 68. WMI: Security Management Page Understanding Security The Xirrus Wireless LAN Array incorporates many security features that administrators can configure. After initially installing an array, always change the default administrator password (the default is admin), and choose a strong replacement password (a strong password contains letters, numbers and special characters). When appropriate, issue read only administrator accounts. 98 Configuring the XS-3900 Wireless LAN Array Other security considerations include:
SSH versus Telnet: Be aware that Telnet is not secure over network connections and should be used only with a direct serial port connection. When connecting to the units Command Line Interface over a network connection, you must use a Secure SHell (SSH) utility. The most commonly used freeware providing SSH tools is PuTTY.
Configuration auditing: The optional Xirrus Wireless Management System (XM-3300) offers powerful management features for small or large XS-3900 deployments, and can audit your configuration settings automatically. In addition, using the XM-3300 eliminates the need for an FTP server.
Choosing an encryption method: Wireless data encryption prevents eavesdropping on data being transmitted or received over the airwaves. The XS-3900 allows you to establish the following data encryption configuration options:
Openthis option offers no data encryption and is not recommended, though you might choose this option if clients are required to use a VPN connection through a secure SSH utility, like PuTTy.
WEP (Wired Equivalent Privacy)this option provides minimal protection (though much better than using an open network). An early standard for wireless data encryption and supported by all Wi-Fi certified equipment, WEP is vulnerable to hacking and is therefore not recommended for use by Enterprise networks.
WPA (Wi-Fi Protected Access)this is a much stronger encryption model than WEP and uses TKIP (Temporal Key Integrity Protocol) with AES (Advanced Encryption Standard) to prevent WEP cracks. TKIP solves security issues with WEP. It also allows you to establish encryption keys on a per-user-basis, with key rotation for added security. In addition, TKIP provides Message Integrity Check (MIC) functionality and prevents active attacks on the wireless network. Configuring the XS-3900 99 Wireless LAN Array AES is the strongest encryption standard and is used by government agencies; however, old legacy hardware may not be capable of supporting the AES mode (it probably wont work on older wireless clients). Because AES is the strongest encryption standard currently available, it is highly recommended for Enterprise networks. Any of the above encryption modes can be used, but only one may be used per SSID. If multiple security methods are needed, you must define multiple SSIDs.
Choosing an authentication method: User authentication ensures that users are who they say they are. For this purpose, the XS-3900 allows you to choose between the following user authentication methods:
Pre-Shared Keyusers must manually enter a key (passphrase) on the client side of the wireless network that matches the key stored by the administrator in the XS-3900. This method should be used only for smaller networks when a RADIUS server is unavailable. If PSK must be used, choose a strong passphrase containing at least 12 characters (20 is preferred). Always use a combination of letters, numbers and special characters. Never use English words separated by spaces.
RADIUS 802.1x with EAP802.1x uses a RADIUS server to authenticate large numbers of clients, and can handle different EAP (Extensible Authentication Protocol) authentication methods, including EAP-TLS, EAP-TTLS and EAP-PEAP. The RADIUS server can be internal (provided by the XS-3900) or external. An external RADIUS server offers more functionality and security, and is recommended for large deployments. When using this method, user names and passwords must be entered into the RADIUS server for user authentication. The XS-3900 will accept up to 512 ACL entries. 100 Configuring the XS-3900 Wireless LAN Array
MAC Address ACLs (Access Control Lists)MAC address ACLs provide a list of client adapter MAC addresses that are allowed or denied access to the wireless network. Access Control Lists work well when there are a limited number of usersin this case, enter the MAC addresses of each user in the Allow list. In the event of a lost or stolen MAC adapter, enter the affected MAC address in the Deny list. Procedure for Configuring Network Security 1. WPA Enabled: Choose Yes to enable WPA (Wi-Fi Protected Access), or choose No to disable WPA. 2. TKIP Enabled: Choose Yes to enable TKIP (Temporal Key Integrity Protocol), or choose No to disable TKIP. 3. AES Enabled: Choose Yes to enable AES (Advanced Encryption Standard), or choose No to disable AES. 4. WPA Group Rekey Time (in seconds): Enter a value to specify the group rekey time (in seconds). The default is 600. 5. PSK Authentication: Choose Yes to enable PSK (Pre-Shared Key) authentication, or choose No to disable PSK. 6. WPA Preshared Key / Verify Key: If you enabled PSK, enter a passphrase here, then re-enter the passphrase to verify that you typed it correctly. 7. EAP Authentication: Choose Yes to enable EAP (Extensible Authentication Protocol) or choose No to disable EAP.
A RADIUS server must be defined to use EAP. 8. WEP Enabled: Choose Yes to enable WEP (Wired Equivalent Privacy) or choose No to disable WEP. Configuring the XS-3900 101 Wireless LAN Array 9. Key Length / Mode: If you enabled WEP, choose the desired key length
(either 40 or 128) and the mode (either ASCII or Hex) from the pull-down lists. You must now provide the encryption key(s). a. Encryption Key 1 / Verify Key 1: Enter an encryption key of the length specified (either 40 or 128 characters), then re-enter the key to verify that you typed it correctly. b. Encryption Key 2 / Verify Key 2 (optional): If desired, enter a second encryption key, then re-enter the key to verify that you typed it correctly. c. Encryption Key 3 / Verify Key 3 (optional): If desired, enter a third encryption key, then re-enter the key to verify that you typed it correctly. d. Encryption Key 4 / Verify Key 4 (optional): If desired, enter a fourth encryption key, then re-enter the key to verify that you typed it correctly. 10. Default Key: Choose which key you want to assign as the default key. Make your selection from the pull-down list. 11. Click on the Apply button to apply the new settings to this session. 12. Click on the Save button to save your changes (otherwise your new settings will not take effect). 102 Configuring the XS-3900 Wireless LAN Array Radius Server This page allows you to set up the arrays internal RADIUS server, or define the use of an external RADIUS server for user authentication.
The internal RADIUS server will only authenticate wireless clients that want to associate to the array. This can be useful if an external RADIUS server is not available. When finished, click on the Apply button to apply the new settings to this session, then click on the Save button to save your changes. Figure 69. WMI: Radius Server Page Procedure for Configuring Radius Servers 1. Radius Server Mode: Choose Internal if you want to use the XS-3900s internal RADIUS server, or choose External to use an external RADIUS server. 2. Primary IP Address: If you are using an external RADIUS server, enter the primary servers IP address. 3. Radius Primary Port Number: If you are using an external RADIUS server, enter the primary port number. Configuring the XS-3900 103 Wireless LAN Array 4. Secondary IP Address (optional): If desired, enter the secondary RADIUS servers IP address. If the primary RADIUS server becomes off-line, the array will failover to the secondary RADIUS server (defined here). 5. Radius Secondary Port Number: If desired, enter the secondary port number. 6. Radius Timeout: Define the maximum idle time (in seconds) before the RADIUS session times out. The default is 600 seconds. 7. Primary Shared Secret / Verify Secret: If you are using RADIUS, enter the primary shared secret, then re-enter the primary shared secret to verify that you typed it correctly. 8. Secondary Shared Secret / Verify Secret: If you are using RADIUS, enter the secondary shared secret, then re-enter the secondary shared secret to verify that you typed it correctly. 9. Click on the Apply button to apply the new settings to this session. 10. Click on the Save button to save your changes (otherwise your new settings will not take effect). 104 Configuring the XS-3900 Wireless LAN Array Radius User This page allows you to create, delete and manage local RADIUS user accounts. When finished, click on the Apply button to apply the new settings to this session, then click on the Save button to save your changes. Figure 70. WMI: Radius User Page Procedure for Configuring Radius Users 1. New User Name: Enter a new RADIUS user name. 2. User Password: Enter a password for this user. 3. Verify Password: Re-enter the user password to verify that you typed it correctly. 4. SSID (Network Name): Choose an SSID from the pull-down list. 5. Click on the Create User button to add this user to the list. Configuring the XS-3900 105 Wireless LAN Array 6. User Name: If you want to edit an existing RADIUS user account, choose the user from the pull-down list. You must now enter the user password and select an SSID. a. User Password: Enter the password of the user account you want to edit. b. Verify Password: Re-enter the password to verify that you typed it correctly. c. SSID (Network Name): Choose an SSID from the pull-down list. 7. User Management: You can delete users by selecting the user from the list and clicking on the Delete User button. 8. Click on the Save button to save your changes (otherwise your new settings will not take effect). MAC Access List This page allows you to create new MAC access lists, delete existing lists, and add/remove MAC addresses. When finished, click on the Save button to save your changes. Figure 71. WMI: MAC Access List Page 106 Configuring the XS-3900 Wireless LAN Array Procedure for Configuring MAC Access Lists 1. MAC Access List Type: Select the MAC Access List typeeither Disabled, Allow List or Deny List, then click on the Apply Edit button to apply your changes.
Allow List: Only allows these MAC addresses to associate to the array.
Deny List: Allows all MAC addresses except the addresses defined in this list.
In addition to these lists, other authentication methods (for example, RADIUS) are still enforced for users. 2. New MAC Address: If you want to add a MAC address to the ACL, enter the new MAC address here, then click on the Add MAC button. The MAC address is added to the ACL. 3. MAC Access List Management: You can delete a MAC Access List by selecting the list you want to delete then clicking on the Delete ACL button. 4. Click on the Save button to save your changes (otherwise your new settings will not take effect). Configuring the XS-3900 107 Create Admin This page allows you to create and manage network administrator accounts. It also allows you to limit account access to a read only status. When finished, click on the Save button to save your changes. Wireless LAN Array Figure 72. WMI: Create/Delete Admin Page Procedure for Creating Network Administrator Accounts 1. New Admin ID: Enter a meaningful description for this new network administrator ID. 2. Read Only: Choose Yes to restrict this administrator ID to read only status, or choose No if you want to give this administrator ID full read/
write privileges. In the read only mode, administrators cannot save changes to configurations. 3. Admin Password: Enter a password for this ID. 4. Verify Password: Re-enter the password in this field to verify that you typed the password correctly. If you do not re-enter the correct password, an error message is displayed). 108 Configuring the XS-3900 Wireless LAN Array 5. Click on the Create Admin button to add this administrator ID to the list. 6. Click on the Save button to save your changes (otherwise your new settings will not take effect). Edit Admin This page allows you to edit or delete existing administrator accounts. When finished, click on the Apply button to apply the new settings to this session, then click on the Save button to save your changes. Figure 73. WMI: Edit Admin Page Procedure for Modifying Network Administrator Accounts 1. Admin ID: Choose the administrator ID you want to edit or delete from the list. If you are deleting the selecting administrator ID, click on the Delete Admin button, otherwise go to Step 2. 2. Read Only: Choose Yes to restrict the selected administrator ID to read only status, or choose No if you want to give this administrator ID full privileges. Configuring the XS-3900 109 Wireless LAN Array 3. Admin Password / Verify Password: Enter the password for the selected administrator ID in the left field, then re-enter the password in the right field (the two fields must match). 4. Click on the Apply button to apply the new settings to this session. 5. Click on the Save button to save your changes (otherwise your new settings will not take effect). Users This is a status only page that allows you to review the users currently associated with the network. You can choose how you want to sort the information that is displayed by choosing a sort option from the pull-down list. There are no configuration options available on this page, but if you are experiencing issues with network users, you may want to print this page for your records. Figure 74. WMI: Users Page 110 Configuring the XS-3900 Wireless LAN Array Services This is a status only page that allows you to review the current status of syslog and SNMP services. There are no configuration options available on this page, but if you are experiencing issues with network services, you may want to print this page for your records. Figure 75. WMI: Services Page Configuring the XS-3900 111 Wireless LAN Array System Log This page allows you to enable or disable the Syslog server, define the servers IP address, and set the level for Syslog reportingthe Syslog service will send Syslog messages to the defined Syslog server. When finished, click on the Apply button to apply the new settings to this session, then click on the Save button to save your changes. Figure 76. WMI: System Log Page Procedure for Configuring Syslog 1. Enable Syslog Server: Choose Yes to enable Syslog functionality, or choose No to disable this feature. 2. Server IP Address: If you enabled Syslog, enter the IP address of the Syslog server. 3. Syslog Server Level: Choose the level of Syslog reporting from the pull-
down list (between 0 and 7). 4. Click on the Apply button to apply the new settings to this session. 5. Click on the Save button to save your changes (otherwise your new settings will not take effect). 112 Configuring the XS-3900 Wireless LAN Array SNMP This page allows you to enable or disable SNMP and define the SNMP parameters. SNMP allows remote management of the array by the Xirrus Management System (XM-3300), or other SNMP-based management system. When finished, click on the Apply button to apply the new settings to this session, then click on the Save button to save your changes. Figure 77. WMI: SNMP Page Procedure for Configuring SNMP 1. Enable SNMP: Choose Yes to enable SNMP functionality, or choose No to disable this feature. 2. SNMP Link IP Address: Enter the IP address of the SNMP link. 3. Trap Port: Enter the trap port. 4. Community String: Enter the community string. 5. Click on the Apply button to apply the new settings to this session. 6. Click on the Save button to save your changes (otherwise your new settings will not take effect). Configuring the XS-3900 113 Wireless LAN Array Software This page displays the current system software version, the arrays serial number, and the arrays controller version. It also allows you to upgrade the system software. Procedure for Upgrading the System Firmware 1. Download the software upgrade file to your local PC. 2. From the WMI, go to the Software page. This page allows you to upgrade the system firmware. Figure 78. WMI: Software Page 3. Software Upgrade: Enter the name of the upgrade file, then click on the Browse button to locate the file. 4. Click on the Upload button to upgrade the system software. 5. Reboot the array for the new software to take effectthe array must be rebooted for the new software to become active. 114 Configuring the XS-3900 Wireless LAN Array Tools This page allows you to reset the systems configuration parameters to their factory default values, reboot the system, and ping other IP addresses for diagnostic purposes. Figure 79. WMI: Tools Page Procedure for Configuring System Tools 1. System Configuration Reset: Click on the Reset button to reset the systems current configuration settings to the factory default valuesall previous configuration settings will be lost. 2. System Reboot: Click on the Reboot button to reboot the systemyou must reboot the array. 3. System Tools: Choose Trace Route or Ping. 4. IP Address: Enter the IP address of the target device. 5. Timeout: Enter a value (in seconds) before the action times out. 6. Click on the Execute button to perform the test. Results are displayed in the Output frame. Configuring the XS-3900 115 Wireless LAN Array Event Log This is a status only page that allows you to review the event log. System alerts and messages are displayed on this page. There are no configuration options available on this page, but if you are experiencing issues with the network, you may want to print this page for your records. Figure 80. WMI: Event Log Page 116 Configuring the XS-3900 Wireless LAN Array The Command Line Interface This chapter covers configuration and management tasks using the products Command Line Interface (CLI), and includes a procedure for establishing a Telnet connection to the XS-3900. Section headings for this chapter include:
Establishing a Secure Shell (SSH) Connection
Basic Commands
Command Modes
Selecting Interfaces
Command Line Keywords
Interface Selection Establishing a Secure Shell (SSH) Connection Use this procedure to initialize the system and log in to the Command Line Interface (CLI) via a Secure Shell (SSH) utility, such as PuTTY. 1. Start your SSH session and communicate with the XS-3900 via its default IP address (10.0.1.1). When connected to the XS-3900, a login prompt appears on your screen. The default login user name and password is admin (for both). Login names and passwords are case-sensitive. 2. Enter admin when prompted for a user name and password. You are now logged in to the XS-3900s Command Line Interface. Figure 81. Command Line Interface The Command Line Interface 117 Wireless LAN Array Basic Commands Help To get help at any point type help or ?. Tab Key The Tab Key allows auto-completion of commands such that only a few unique characters need to be entered followed by the Tab Key, which will automatically fill in the rest of the command.
? Key The ? key displays the list of available commands at any point of typing in the command line. Save You must type save to save the current configuration to flash memory so that changes are kept when the array is rebooted. Command Modes Configure Mode Allows major functional changes to interfaces and configuration. Requires Read/Write Administrator Privilege Xirrus-Array# configure Xirrus-Array(config)#
The prompt will change to show the current mode in parentheses. SSID Mode Allows configuration changes to SSID definitions. Requires Read/Write Administrator Privilege From configure mode type ssid <ENTER>
Xirrus-Array(config)# ssid Xirrus-Array(config-SSID)#
118 The Command Line Interface Wireless LAN Array Radius Mode Allows configuration changes to the internal RADIUS server. Requires Read/Write Administrator Privilege From configure mode type radius <ENTER>
Xirrus-Array(config)# radius Xirrus-Array(config-radsrv)#
Run Test Mode Allows configuration and execution of tests Requires Read/Write Administrator Privilege From configure mode type run-tests <ENTER>
Xirrus-Array(config)# run-tests Xirrus-Array(Run Test)#
Selecting Interfaces From the configure mode select the desired interface. interface {console | iap | gig1 | gig2 | eth0};
console iap gig1 gig2 eth0 asyncronous serial console port integrated access point interface gigabit Ethernet interface gigabit Ethernet interface 10/100 Ethernet interface Example:
Xirrus-Array(config)# interface iap Xirrus-Array(config-iap)#
The Command Line Interface 119 Wireless LAN Array Command Line Keywords This section provides a brief description of available keywords, including any user-defined parameters associated with the keyword. An example of the keywords usage is also provided. Keywords are grouped by function. If you need to find a specific keyword, go to Alphabetical Listing of CLI Keywords on page 173 and click on the keywordyou will be taken to the keyword definition within this section. Functional groups in this section include:
Interface Selection
Interface Configuration
Radio Configuration
Beacon Information
System Administration
System Testing
Security
Station Timeouts
SSID Configuration
DNS Configuration
NTP Configuration
DHCP Configuration
Syslog Configuration
SNMP Configuration
Filters
Radius Configuration
Reports
Data Handling
Data Clearance
Show Information
Remove Configuration
Help 120 The Command Line Interface Wireless LAN Array Interface Selection The following keywords are used when choosing an interface. dot11a Description: Select 802.11a WLAN interface Usage:
interface { dot11a }
Parameters: none dot11g Description: Select 802.11g WLAN interface Usage:
interface { dot11g }
Parameters: none faste Description: Select 10/100 Fast Ethernet interface Usage:
interface { faste }
Parameters: none gigabit Description: Select 10/100/1000 Gigabit Ethernet interface Usage:
interface { gigabit }
Parameters: none interface Description: Select the interface you want to configure Usage:
interface { line | dot11a | dot11g | gigabit | faste }
Parameters: none line Description: Select the asynchronous serial port Usage:
interface { line }
Parameters: none The Command Line Interface 121 Wireless LAN Array Interface Configuration The following keywords are used for configuring the selected interface (assumes the interface has already been selected). autoduplex Description: Select the duplex mode automatically Usage: <genum> | <fenum> { autoduplex }
Parameters: <genum> defines the Gigabit interface, either 1 or 2, where:
1 = Primary, 2 = Secondary
<fenum> defines the Fast Ethernet interface (must be zero) baud Description: Set the asynchronous port baud rate Usage: <linenum> { baud <brate> }
Parameters: <linenum> defines which asynchronous interface is used
<brate> defines the range for the baud rate, between 2,400 and 19,200 bps bytesize Description: Define the asynchronous port word size Usage: <linenum> { bytesize <bsz> }
Parameters: <linenum> defines which asynchronous interface is used
<bsz> defines the byte/word size, either 7 or 8, where:
7 = 7 bits, 8 = 8 bits def Description: Reset the interface to the default values Usage: <genum> | <fenum> { def }
Parameters: <genum> defines the Gigabit interface, either 1 or 2, where:
1 = Primary, 2 = Secondary
<fenum> defines the Fast Ethernet interface (must be zero)
<mtusz> defines the maximum allowable Maximum Transmission Unit (MTU) , between 64 and 1794 122 The Command Line Interface Wireless LAN Array dhcpbind Description: Obtain a DHCP address for this interface Usage: <genum> | <fenum> { dhcpbind <dbind> }
Parameters: <genum> defines the Gigabit interface, either 1 or 2, where:
1 = Primary, 2 = Secondary
<fenum> defines the Fast Ethernet interface (must be zero)
<dbind> defines how the IP address is generated, either 0 or 1, where:
0 = Use static IP address, 1 = Use DHCP to get IP address down Description: Shut down this interface Usage: <genum> | <fenum> { down }
Parameters: <genum> defines the Gigabit interface, either 1 or 2, where:
1 = Primary, 2 = Secondary
<fenum> defines the Fast Ethernet interface (must be zero) fullduplex Description: Select the full duplex mode Usage: <genum> | <fenum> { fullduplex }
Parameters: <genum> defines the Gigabit interface, either 1 or 2, where:
1 = Primary, 2 = Secondary
<fenum> defines the Fast Ethernet interface (must be zero) gateway Description: Define a gateway IP address Usage: <genum> | <fenum> { gateway <gway> }
Parameters: <genum> defines the Gigabit interface, either 1 or 2, where:
1 = Primary, 2 = Secondary
<fenum> defines the Fast Ethernet interface (must be zero)
<gway> defines a valid gateway IP address The Command Line Interface 123 Wireless LAN Array halfduplex Description: Select the half duplex mode Usage: <genum> | <fenum> { halfduplex }
Parameters: <genum> defines the Gigabit interface, either 1 or 2, where:
1 = Primary, 2 = Secondary
<fenum> defines the Fast Ethernet interface (must be 0) ip-addr Description: Define a static IP address Usage: <genum> | <fenum> { ip-addr <statip> }
Parameters: <genum> defines the Gigabit interface, either 1 or 2, where:
1 = Primary, 2 = Secondary
<fenum> defines the Fast Ethernet interface (must be zero)
<statip> defines a valid static IP address management Description: Allow management on this interface Usage: <genum> | <fenum> { management <mgmt> }
Parameters: <genum> defines the Gigabit interface, either 1 or 2, where:
1 = Primary, 2 = Secondary
<fenum> defines the Fast Ethernet interface (must be zero)
<mgmt> selects management or no management, where:
0 = No, 1 = Yes mask Description: Define the subnet mask IP address Usage: <genum> | <fenum> { mask <ipmask> }
Parameters: <genum> defines the Gigabit interface, either 1 or 2, where:
1 = Primary, 2 = Secondary
<fenum> defines the Fast Ethernet interface (must be zero)
<ipmask> defines a valid subnet mask IP address 124 The Command Line Interface Wireless LAN Array mtu Description: Set the maximum allowable MTU size Usage: <genum> | <fenum> { mtu <mtusz> }
Parameters: <genum> defines the Gigabit interface, either 1 or 2, where:
1 = Primary, 2 = Secondary
<fenum> defines the Fast Ethernet interface (must be zero)
<mtusz> defines the maximum allowable MTU size, between 64 and 1794 parity Description: Establish the asynchronous ports parity Usage: <linenum> { parity <prty> }
Parameters: <linenum> defines which asynchronous interface is used
<prty> defines the parity, either 0, 1 or 2, where:
0 = No parity, 1 = Odd parity, 2 = Even parity speed Description: Set the Ethernet interface speed Usage: <genum> | <fenum> { speed <spdsel> }
Parameters: <genum> defines the Gigabit interface, either 1 or 2, where:
1 = Primary, 2 = Secondary
<fenum> defines the Fast Ethernet interface (must be zero)
<spdsel> defines the link speed, either 0 or 1, where:
0 = 100 Mbps, 1 = 1000 Mbps stopbits Description: Set the asynchronous ports number of stop bits Usage: <linenum> { stopbits <sbit> }
Parameters: <linenum> defines which asynchronous interface is used
<sbit> defines the number of stop bits, either 0, 1 or 2 The Command Line Interface 125 Wireless LAN Array up Description: Bring up this interface Usage: <genum> | <fenum> { up }
Parameters: <genum> defines the Gigabit interface, either 1 or 2, where:
1 = Primary, 2 = Secondary
<fenum> defines the Fast Ethernet interface (must be zero) Radio Configuration The following keywords are used when configuring the XS-3900s radios
(assumes the interface has already been selected). antenna Description: Set the direction for this radio antenna Usage: <rnum> { antenna }
Parameters: <rnum> defines the radio number, between 1 and 16 antennaexternal Description: Show the external antenna settings Usage: <rnum> { antennaexternal }
Parameters: <rnum> defines the radio number, between 1 and 16 basic1 Description: Require 1 Mbps rate Usage: <rnum> { basic1 }
Parameters: <rnum> defines the radio number, between 13 and 16 basic11 Description: Require 11 Mbps rate Usage: <rnum> { basic11 }
Parameters: <rnum> defines the radio number, between 13 and 16 basic12 Description: Require 12 Mbps rate Usage: <rnum> { basic12 }
Parameters: <rnum> defines the radio number, between 1 and 16 126 The Command Line Interface Wireless LAN Array basic18 Description: Require 18 Mbps rate Usage: <rnum> { basic18 }
Parameters: <rnum> defines the radio number, between 1 and 16 basic2 Description: Require 2 Mbps rate Usage: <rnum> { basic2 }
Parameters: <rnum> defines the radio number, between 13 and 16 basic24 Description: Require 24 Mbps rate Usage: <rnum> { basic24 }
Parameters: <rnum> defines the radio number, between 1 and 16 basic36 Description: Require 36 Mbps rate Usage: <rnum> { basic36 }
Parameters: <rnum> defines the radio number, between 1 and 16 basic48 Description: Require 48 Mbps rate Usage: <rnum> { basic48 }
Parameters: <rnum> defines the radio number, between 1 and 16 basic5 Description: Require 5 Mbps rate Usage: <rnum> { basic5 }
Parameters: <rnum> defines the radio number, between 13 and 16 basic54 Description: Require 54 Mbps rate Usage: <rnum> { basic54 }
Parameters: <rnum> defines the radio number, between 1 and 16 The Command Line Interface 127 Wireless LAN Array basic6 Description: Require 6 Mbps rate Usage: <rnum> { basic6 }
Parameters: <rnum> defines the radio number, between 1 and 16 basic9 Description: Require 9 Mbps rate Usage: <rnum> { basic9 }
Parameters: <rnum> defines the radio number, between 1 and 16 cca Description: Employ Clear Channel Assessment function Usage: <rnum> { cca <ccadb> }
Parameters: <rnum> defines the radio number, between 1 and 16
<ccadb> is a number between 0 and 60 to define the floor noise level in dB increments cell-size Description: Define cell size Usage: <rnum> { cell-size <cszset> }
Parameters: <rnum> defines the radio number, between 1 and 16
<cszset> is defined as either 0, 1 or 2, where:
0 = smallest, 1 = medium, 2 = largest channelnum Description: Define static channel setting Usage: <rnum> { channelnum <cnum> }
Parameters: <rnum> defines the radio number, between 1 and 16
<cnum> defines the static channel number configure Description: Configure each radio individually Usage: <rnum> { configure }
Parameters: <rnum> defines the radio number, between 1 and 16 128 The Command Line Interface Wireless LAN Array default_rates Description: Set default rates Usage: <rnum> { default_rates }
Parameters: <rnum> defines the radio number, between 1 and 16 description Description: Specify a name to identify this interface Usage: <rnum> { description <dot11desc> }
Parameters: <rnum> defines the radio number, between 1 and 16
<dot11desc> is defined as a string of up to 50 alphanumeric characters dot11gonly Description: Enable support for 802.11g only Usage: <rnum> { dot11gonly }
Parameters: <rnum> defines the radio number, between 1 and 16 dot11preamble Description: Define the preamble Usage: <rnum> { dot11preamble }
Parameters: <rnum> defines the radio number, between 1 and 16 down Description: Shut down (disable) this radio interface Usage: <rnum> { down }
Parameters: <rnum> defines the radio number, between 1 and 16 edcf Description: Enable EDCF support Usage: <rnum> { edcf }
Parameters: <rnum> defines the radio number, between 1 and 16 enable1 Description: Allow 1 Mbps rate Usage: <rnum> { enable1 }
Parameters: <rnum> defines the radio number, between 13 and 16 The Command Line Interface 129 Wireless LAN Array enable11 Description: Allow 11 Mbps rate Usage: <rnum> { enable11 }
Parameters: <rnum> defines the radio number, between 13 and 16 enable12 Description: Allow 12 Mbps rate Usage: <rnum> { enable12 }
Parameters: <rnum> defines the radio number, between 1 and 16 enable18 Description: Allow 18 Mbps rate Usage: <rnum> { enable18 }
Parameters: <rnum> defines the radio number, between 1 and 16 enable2 Description: Allow 2 Mbps rate Usage: <rnum> { enable2 }
Parameters: <rnum> defines the radio number, between 13 and 16 enable24 Description: Allow 24 Mbps rate Usage: <rnum> { enable24 }
Parameters: <rnum> defines the radio number, between 1 and 16 enable36 Description: Allow 36 Mbps rate Usage: <rnum> { enable36 }
Parameters: <rnum> defines the radio number, between 1 and 16 enable48 Description: Allow 48 Mbps rate Usage: <rnum> { enable48 }
Parameters: <rnum> defines the radio number, between 1 and 16 130 The Command Line Interface Wireless LAN Array enable5 Description: Allow 5 Mbps rate Usage: <rnum> { enable5 }
Parameters: <rnum> defines the radio number, between 13 and 16 enable54 Description: Allow 54 Mbps rate Usage: <rnum> { enable54 }
Parameters: <rnum> defines the radio number, between 1 and 16 enable6 Description: Allow 6 Mbps rate Usage: <rnum> { enable6 }
Parameters: <rnum> defines the radio number, between 1 and 16 enable9 Description: Allow 9 Mbps rate Usage: <rnum> { enable9 }
Parameters: <rnum> defines the radio number, between 1 and 16 frag-threshold Description: Define the fragmentation threshold Usage: <rnum> { frag-threshold <fragt> }
Parameters: <rnum> defines the radio number, between 1 and 16
<fragt> defines the fragment size least_congested Description: Scan for the best frequency Usage: <rnum> { least_congested }
Parameters: <rnum> defines the radio number, between 1 and 16 long-retry-limit Description: Specify the long retry limit Usage: <rnum> { long-retry-limit <lrl> }
Parameters: <rnum> defines the radio number, between 1 and 16
<lrl> defines the long retry limit The Command Line Interface 131 Wireless LAN Array max-client-txpwr Description: Limit the clients maximum transmit power Usage: <rnum> { max-client-txpwr <mcp> }
Parameters: <rnum> defines the radio number, between 1 and 16
<mcp> specifies a number (in milliwatts) off Description: Turn OFF this feature Usage: <rnum> { off }
Parameters: <rnum> defines the radio number, between 1 and 16 on Description: Turn ON this feature Usage: <rnum> { on }
Parameters: <rnum> defines the radio number, between 1 and 16 prelong Description: Enable long preamble for the selected radio Usage: <rnum> { prelong }
Parameters: <rnum> defines the radio number, between 1 and 16 preshort Description: Enable short preamble for the selected radio Usage: <rnum> { preshort }
Parameters: <rnum> defines the radio number, between 1 and 16 range Description: Set rates for best range Usage: <rnum> { range }
Parameters: <rnum> defines the radio number, between 1 and 16 rate1 Description: Configure the 1 Mbps rate Usage: <rnum> { rate1 }
Parameters: <rnum> defines the radio number, between 13 and 16 132 The Command Line Interface Wireless LAN Array rate11 Description: Configure the 11 Mbps rate Usage: <rnum> { rate11 }
Parameters: <rnum> defines the radio number, between 13 and 16 rate12 Description: Configure the 12 Mbps rate Usage: <rnum> { rate12 }
Parameters: <rnum> defines the radio number, between 1 and 16 rate18 Description: Configure the 18 Mbps rate Usage: <rnum> { rate18 }
Parameters: <rnum> defines the radio number, between 1 and 16 rate2 Description: Configure the 2 Mbps rate Usage: <rnum> { rate2 }
Parameters: <rnum> defines the radio number, between 13 and 16 rate24 Description: Configure the 24 Mbps rate Usage: <rnum> { rate24 }
Parameters: <rnum> defines the radio number, between 1 and 16 rate36 Description: Configure the 36 Mbps rate Usage: <rnum> { rate36 }
Parameters: <rnum> defines the radio number, between 1 and 16 rate48 Description: Configure the 48 Mbps rate Usage: <rnum> { rate48 }
Parameters: <rnum> defines the radio number, between 1 and 16 The Command Line Interface 133 Wireless LAN Array rate5 Description: Configure the 5 Mbps rate Usage: <rnum> { rate5 }
Parameters: <rnum> defines the radio number, between 13 and 16 rate54 Description: Configure the 54 Mbps rate Usage: <rnum> { rate54 }
Parameters: <rnum> defines the radio number, between 1 and 16 rate6 Description: Configure the 6 Mbps rate Usage: <rnum> { rate6 }
Parameters: <rnum> defines the radio number, between 1 and 16 rate9 Description: Configure the 9 Mbps rate Usage: <rnum> { rate9 }
Parameters: <rnum> defines the radio number, between 1 and 16 receiving Description: Configure the input antenna Usage: <rnum> { receiving }
Parameters: <rnum> defines the radio number, between 1 and 16 rts-threshold Description: Define the RTS threshold Usage: <rnum> { rts-threshold <rtst> }
Parameters: <rnum> defines the radio number, between 1 and 16
<rtst> defines the packet size at which the device issues a Request to Send (RTS) before sending the packet Rxdiversity Description: Choose the antenna with the best signal Usage: <rnum> { Rxdiversity }
Parameters: <rnum> defines the radio number, between 1 and 16 134 The Command Line Interface Wireless LAN Array Rxleft Description: Specify the left antenna Usage: <rnum> { Rxleft }
Parameters: <rnum> defines the radio number, between 1 and 16 Rxright Description: Specify the right antenna Usage: <rnum> { Rxright }
Parameters: <rnum> defines the radio number, between 1 and 16 short-retry-limit Description: Define t short retry limit Usage: <rnum> { short-retry-limit <srl> }
Parameters: <rnum> defines the radio number, between 1 and 16
<srl> defines the short retry limit speed Description: Set allowed radio bit rates Usage: <rnum> { speed }
Parameters: <rnum> defines the radio number, between 1 and 16 throughput Description: Set rates for best throughput Usage: <rnum> { throughput }
Parameters: <rnum> defines the radio number, between 1 and 16 transmiting Description: Configure the output antenna Usage: <rnum> { transmiting }
Parameters: <rnum> defines the radio number, between 1 and 16 Txdiversity Description: Choose the antenna with the best signal Usage: <rnum> { Txdiversity }
Parameters: <rnum> defines the radio number, between 1 and 16 The Command Line Interface 135 Wireless LAN Array Txleft Description: Specify the left antenna Usage: <rnum> { Txleft }
Parameters: <rnum> defines the radio number, between 1 and 16 tx-pwr Description: Define the transmit power settings Usage: <rnum> { tx-pwr <pwrset> }
Parameters: <rnum> defines the radio number, between 1 and 16
<pwrset> is defined as either 0, 1 or 2, where:
0 = quarter, 1 = half, 2 = maximum Txright Description: Specify the right antenna Usage: <rnum> { Txright }
Parameters: <rnum> defines the radio number, between 1 and 16 up Description: Bring up (enable) this radio interface Usage: <rnum> { up }
Parameters: <rnum> defines the radio number, between 1 and 16 worldbeacon Description: Enable support for world mode beacons Usage: <rnum> { worldbeacon }
Parameters: <rnum> defines the radio number, between 1 and 16 Beacon Information The following keywords are used when establishing beacon information. beacon Description: Establish beacon information Usage: beacon { period | DTIM-rate }
Parameters: none 136 The Command Line Interface Wireless LAN Array DTIM-rate Description: Determine beacon periods before the Delivery Traffic Indication Message (DTIM) is sent Usage: beacon { DTIM-rate <beaconr> }
Parameters: <beaconr> defines the period between DTIM frames, in Kusecs
(kilo microseconds), where 1 Kusec = 1024 microseconds period Description: Establish the amount of time between beacons Usage: beacon { period <beaconp> }
Parameters: <beaconp> defines the period between beacons, in Kusecs (kilo microseconds), where 1 Kusec = 1024 microseconds System Administration The following keywords are used for system administration tasks. administrator Description: Define the administrator access parameters Usage:
administrator { defpw | userid <uid> }
Parameters: <uid> enter a unique user ID clock-set Description: Set the date/time within the XS-3900 Usage:
clock-set <curdate>
Parameters: <curdate> defines the current date and time, specified in the following format: MMDDhhmmYYYY contact-info Description: Define the contact information for assistance on this XS-3900 Usage:
contact-info { name <conname> | email <emailcontact>|
telephone <contele> }
Parameters: <conname> defines the contact name, up to 50 characters
<emailcontact> defines the email address of the contact, up to 50 characters
<contele> defines the telephone number of the contact The Command Line Interface 137 Wireless LAN Array copy Description: Copy a file to another file copy <fromfile> <tofile>
Usage:
Parameters: <fromfile> specifies the originating file
<tofile> specifies the destination file default-gateway Description: Define the default gateway IP address Usage:
ip { default-gateway <defgtwy> }
Parameters: <defgtwy> specifies the default gateway IP address defpw Description: Define the default password, up to 50 characters Usage:
administrator { defpw }
Parameters: none dhcp-server Description: Define the DHCP server IP address Usage:
ip { dhcp-server <dhcpservr> }
Parameters: <dhcpservr> specifies the DHCP server IP address dir Description: List the directory contents Usage: dir Parameters: none domain-name Description: Define the domain site name Usage:
ip { domain-name <domainnm>}
Parameters: <domainnm> specifies the domain name for unqualified hosts 138 The Command Line Interface Wireless LAN Array email Description: Define an email address for assistance on this XS-3900 Usage:
contact-info { email <emailcontact> }
Parameters: <emailcontact> defines the email address of the contact, up to 50 characters erase Description: Delete a file from the flash file system Usage:
erase <erasefile>
Parameters: <erasefile> specifies the target file to erase ftp Description: Open an FTP connection with a remote server Usage:
ftp <addr>
Parameters: <addr> specifies the host name or IP address of the FTP server hostname Description: Define a hostname for this XS-3900 Usage: hostname <hname>
Parameters: <hname> defines the host name given to this XS-3900 ip Description: Define the IP command set Usage:
ip { default-gateway <defgtwy> | dhcp-server <dhcpservr> |
name-server <nameservr> | domain-name <domainnm>}
Parameters: <defgtwy> specifies the default gateway IP address
<dhcpservr> specifies the DHCP server IP address
<nameservr> specifies the DNS host name
<domainnm> specifies the domain name for unqualified hosts location Description: Define the location for this XS-3900 Usage:
location <locname>
Parameters: <locname> defines the location assigned to this XS-3900 The Command Line Interface 139 Wireless LAN Array logout Description: Log out the current administrator Usage:
logout Parameters: none model Description: Get model number Usage:
show-version { model }
Parameters: none more Description: Get more (list file) Usage: more <morefile>
Parameters: <morefile> specifies the target file to list name Description: Define a contact name for assistance on this XS-3900 Usage:
contact-info { name <conname> }
Parameters: <conname> defines the contact name, up to 50 characters name-server Description: Define the DNS host name Usage:
ip { name-server <nameservr> }
Parameters: <nameservr> specifies the DNS host name radios Description: Get radio board version numbers Usage:
show-version { radios }
Parameters: none reboot Description: Reboot the XS-3900 Usage:
reboot Parameters: none 140 The Command Line Interface Wireless LAN Array reload Description: Reload and reset the XS-3900 Usage:
reload Parameters: none reset Description: Reset the XS-3900 to its factory defaults Usage:
reset Parameters: none serial Description: Get serial number Usage:
show-version { serial }
Parameters: none show-version Description: Get system version information Usage:
show-version { model | serial | software | radios }
Parameters: none shut-down Description: Shut down the entire system Usage:
shut-down Parameters: none software Description: Get software version Usage:
show-version { software }
Parameters: none userid Description: Define individual user IDs Usage:
administrator { userid <uid> }
Parameters: <uid> enter a unique user ID The Command Line Interface 141 Wireless LAN Array System Testing The following keywords are used for system testing. led Description: Run LED tests Usage:
run-tests { led <ledtst> }
Parameters: <ledtst> specifies the LED to test (defined by LED number, 0 to 9refer to Now that the XS-3900 is physically installed, you must run the Express Setup procedure from the units Web Management Interface to enable the radios and establish initial system configuration settings. Go to Powering Up the XS-
3900 on page 44. on page 43) linktest Description: Run link tests Usage:
run-tests { linktest <ltest> }
Parameters: <linktest> specifies the link test, 1 through 4, where:
1 = tbd, 2 = tbd, 3 = tbd, 4 = tbd ping Description: Execute the ping utility Usage:
run-tests { ping <pingname> }
Parameters: <pingname> specifies target IP address or DNS name to ping run-tests Description: Run a selected test Usage:
run-tests { traceroute <tracename> | ping <pingname> | led
<ledtst> | linktest <ltest> }
142 The Command Line Interface Wireless LAN Array Parameters: <tracename> specifies target IP address or DNS name to trace
<pingname> specifies target IP address or DNS name to ping
<ledtst> specifies the LED to test (defined by LED number, 0 to 9refer to Now that the XS-3900 is physically installed, you must run the Express Setup procedure from the units Web Management Interface to enable the radios and establish initial system configuration settings. Go to Powering Up the XS-
3900 on page 44. on page 43)
<linktest> specifies the link test, 1 through 4, where:
1 = tbd, 2 = tbd, 3 = tbd, 4 = tbd traceroute Description: Run a trace on an IP route or DNS name Usage:
run-tests { traceroute <tracename> }
Parameters: <tracename> specifies target IP address or DNS name to trace Security The following keywords are used for system security. all11a Description: Specify that any settings will apply to all 802.11a radios Usage:
security { radioid { all11a }}
Parameters: none all11g Description: Specify that any settings will apply to all 802.11g radios Usage:
security { radioid { all11g }}
Parameters: none allradios Description: Specify that any settings will apply to all radios Usage:
security { radioid { allradios }}
Parameters: none broadcastkey Description: Use the encryption key during broadcast The Command Line Interface 143 Wireless LAN Array Usage:
security { radioid { all11g { broadcastkey }}}
Parameters: none capabilitychange Description:
Usage:
Issue a new key if the previous non-key STA disassociates, or the first non-key STA associates (optional) security { radioid { all11g { capabilitychange }}}
Parameters: none change Description: Specify the time between key rotations (optional) Usage:
security { radioid { all11g { change <chgsecs> }}}
Parameters: <chgsecs> sets the time (in seconds) between key rotations ciphers Description: Enable a cipher suite for encryption Usage:
security { radioid { allradios { encryption { ciphers { tkip {
tkipwep40 }}}}}}
Parameters: none client-timeout Description: Define a timeout period while waiting for a client station Usage:
security { radioid { all11g { client-timeout <ct01x> }}}
Parameters: <ct01x> sets the client time out, in seconds from 1 to 65555 dot1x Description: Specify the 802.1x STA timeout parameters Usage:
security { radioid { all11g { dot1x }}}
Parameters: none encryption Description: Define which WEP key will be used for data encryption security { radioid { allradios { encryption <keynum> }}}
Parameters: <keynum> specifies the encryption key number, 1 to 4 Usage:
144 The Command Line Interface Wireless LAN Array keyhash Description: Use encryption key hashing Usage:
security { radioid { allradios { encryption { ciphers { tkip {
tkipwep40 { keyhash }}}}}}}
Parameters: none mandatory Description: Force station to use encryption to communicate with the XS-
3900 security { radioid { allradios { encryption { mandatory }}}}
Usage:
Parameters: none The Command Line Interface 145 Wireless LAN Array membershiptermination Description: Specify the time between key rotations (optional) Usage:
security { radioid { all11g { membershiptermination }}}
Parameters: none mic Description: Use the Message Integrity Check (MIC) function Usage:
security { radioid { allradios { encryption { ciphers { tkip {
tkipwep40 { mic }}}}}}}
Parameters: none optional Description: Allow station to communicate with the XS-3900 with or without encryption security { radioid { allradios { encryption { optional }}}}
Usage:
Parameters: none optkeyhash Description: Use encryption key hashing (optional) Usage:
security { radioid { allradios { encryption { optional {
optkeyhash }}}}}
Parameters: none radioid Description: Choose which radio (or all radios) Usage:
security { radioid { allradios | all11a | all11g | <radionum> }}}
Parameters: <radionum> specifies the radio number (1 to 16) reauth-period Description: Define the reauthentication period, in seconds Usage:
security { radioid { all11g { reauth-period <reauthper> }}}
Parameters: <reauthper> specifies the time before the next authentication attempt, between 1 and 65555 seconds 146 The Command Line Interface Wireless LAN Array security Description: Set the security parameters for the XS-3900s radios Usage:
security { radioid { allradios { encryption <keynum> }}}
Parameters: <keynum> specifies the encryption key number, 1 to 4 server Description: Use the RADIUS server's reauthentication value instead of reauth-period value security { radioid { all11g { server }}}
Usage:
Parameters: none tkip Description: Specify TKIP as the cipher suite Usage:
security { radioid { allradios { encryption { ciphers { tkip {
tkipwep40 }}}}}}
Parameters: none tkipwep128 Description: Use 128 bit WEP with the TKIP cipher suite Usage:
security { radioid { allradios { encryption { ciphers { tkip {
tkipwep128 }}}}}}
Parameters: none tkipwep40 Description: Use 40 bit WEP with the TKIP cipher suite Usage:
security { radioid { allradios { encryption { ciphers { tkip {
tkipwep40 }}}}}}
Parameters: none wep Description: Select the encryption type when configured for WEP Usage:
security { radioid { allradios { encryption { wep }}}}
Parameters: none The Command Line Interface 147 Wireless LAN Array wep128 Description: Use 128 bit WEP encryption Usage:
security { radioid { allradios { encryption { wep128 }}}}
Parameters: none wep40 Description: Use 40 bit WEP encryption Usage:
security { radioid { allradios { encryption { wep40 }}}}
Parameters: none Station Timeouts The following keywords are used for establishing STA timeouts. activity-timeout Description: Set the time period before the XS-3900 flags an inactive station Usage:
sta-timeouts { activity-timeout <at> }
Parameters: <at> specifies the time, in seconds, before the system flags an inactive STA reauth-period Description: Set the period after a station fails to authenticate before allowing more attempts sta-timeouts { reauth-period <ht> }
Usage:
Parameters: <ht> specifies the time, in seconds, before the next authentication attempt sta-timeouts Description: Set the station timeouts Usage:
sta-timeouts { activity-timeout <at> | reauth-period <ht> }
Parameters: <at> specifies the time, in seconds, before the system flags an inactive STA
<ht> specifies the time, in seconds, before the next authentication attempt 148 The Command Line Interface Wireless LAN Array SSID Configuration The following keywords are used for establishing SSID parameters. add Description: Add this SSID Usage:
ssid-manager { ssid <ss> { add }}
Parameters: <ss> specifies the SSID, up to 32 characters del Description: Delete this SSID Usage:
ssid-manager { ssid <ss> { del }}
Parameters: <ss> specifies the SSID, up to 32 characters policy Description: Define the policy associated with this SSID Usage:
ssid-manager { ssid <ss> { policy <sp> }}
Parameters: <ss> specifies the SSID, up to 32 characters
<sp>specifies the policy for this SSID, either 0, 1, 2 or 3, where:
0 = Open, 1 = MAC Auth., 2 = EAP Auth., 3 = Guest qos-ssid Description: Define QoS associated with this SSID Usage:
ssid-manager { ssid <ss> { qos-ssid <qs> }}
Parameters: <ss> specifies the SSID, up to 32 characters
<qs> identifies the QoS for this SSID ssid Description: Define this SSID Usage:
ssid-manager { ssid <ss> { add }
Parameters: <ss> specifies the SSID, up to 32 characters The Command Line Interface 149 Wireless LAN Array ssid-brdcst Description: Specify if you want to broadcast this SSID Usage:
ssid-manager { ssid <ss> { ssid-brdcst <sb> }}
Parameters: <ss> specifies the SSID, up to 32 characters
<sb> specifies if you want to broadcast this SSID, either 0 or 1, where:
0 = No, 1 = Yes ssid-manager Description: Set up SSID for a specific radio or the complete system Usage:
ssid-manager { ssid <ss> { add }
Parameters: <ss> specifies the SSID, up to 32 characters vlan Description: Define a VLAN ID associated with this SSID Usage:
ssid-manager { ssid <ss> { vlan <sv> }}
Parameters: <sv> identifies the VLAN for this SSID DNS Configuration The following keywords are used for establishing the DNS parameters. dns Description: Configure DNS settings Usage: dns { hostname <hname> }
Parameters: <hname> specifies the host name domain Description: Enter your domain name Usage: dns { domain <dom> }
Parameters: <dom> specifies your domain name, for example:
www.mydomain.com 150 The Command Line Interface Wireless LAN Array hostname Description: Enter your host name Usage: dns { hostname <hname> }
Parameters: <hname> specifies the host name server1 Description: Enter the primary DNS server Usage: dns { server1 <srv1> }
Parameters: <srv1> specifies the primary DNS server server2 Description: Enter the primary DNS server Usage: dns { server2 <srv2> }
Parameters: <srv2> specifies the secondary DNS server server3 Description: Enter the tertiary DNS server Usage: dns { server3 <srv3> }
Parameters: <srv3> specifies the tertiary DNS server NTP Configuration The following keywords are used for establishing the NTP parameters. disable Description: Disable NTP services Usage: ntp { disable }
Parameters: none enable Description: Enable NTP services Usage: ntp { enable }
Parameters: none The Command Line Interface 151 Wireless LAN Array ntp Description: Enable/disable or configure NTP services Usage: ntp { enable | disable }
Parameters: none pri-nts Description: Establish the primary NTP server IP address or DNS name Usage: ntp { pri-nts <pntp> }
Parameters: <pntp> specifies the IP address or DNS name (primary) sec-nts Description: Establish the secondary NTP server IP address or DNS name Usage: ntp { sec-nts <sntp> }
Parameters: <sntp> specifies the IP address or DNS name (secondary) DHCP Configuration The following keywords are used for establishing the DHCP parameters. configure Description: Configure DHCP services Usage: dhcp { configure { start-ip-range <sipr> }}
Parameters: <sipr> specifies the starting IP address default-lease Description: Define the default lease period Usage: dhcp { configure { default-lease <defl> }}
Parameters: <defl> specifies the default lease period, in minutes dhcp Description: Enable/disable or configure DHCP services Usage: dhcp { enable | disable | configure { start-ip-range <sipr> }}
Parameters: <sipr> specifies the starting IP address 152 The Command Line Interface Wireless LAN Array disable Description: Disable DHCP services Usage: dhcp { disable }
Parameters: none enable Description: Enable DHCP services Usage: dhcp { enable }
Parameters: none end-ip-range Description: Define the DHCP servers ending IP address Usage: dhcp { configure { end-ip-range <eipr> }}
Parameters: <eipr> specifies the ending IP address max-lease Description: Define the maximum allowable lease period Usage: dhcp { configure { max-lease <maxl> }}
Parameters: <maxl> specifies the maximum allowable lease period, in minutes start-ip-range Description: Define the DHCP servers starting IP address Usage: dhcp { configure { start-ip-range <sipr> }}
Parameters: <sipr> specifies the starting IP address Syslog Configuration The following keywords are used for establishing the Syslog parameters. buffered Description: Set the size of the local Syslog file Usage:
syslog { buffered <logfilesz> }
Parameters: <logfilesz> sets the number of records the local Syslog file holds before wrapping around The Command Line Interface 153 Wireless LAN Array configure Description: Configure Syslog services Usage:
syslog { configure { ipsyslog <slip> }}
Parameters: <slip> specifies the Syslog server IP address console Description: Display syslog messages on your console Usage:
syslog { configure { ipsyslog <slip> }}
Parameters: <slip> specifies the Syslog server IP address ipsyslog Description: Define the Syslog server IP address Usage:
syslog { console }
Parameters: none level Description: Log all messages with the level you define here Usage:
syslog { level <slev> }
Parameters: <slev> defines the syslog capture level on Description: Turn on Syslog services Usage:
syslog { on }
Parameters: none syslog Description: Turn on/off or configure Syslog services Usage:
syslog { on | configure { ipsyslog <slip> }}
Parameters: <slip> specifies the Syslog server IP address 154 The Command Line Interface Wireless LAN Array SNMP Configuration The following keywords are used for establishing the SNMP parameters. community Description: Define the SNMP communnity snmp { community <csnmp> }
Usage:
Parameters: <csnmp> specifies the SNMP Community string (letters and number only, no spaces or special characters) disable Description: Disable SNMP services Usage:
snmp { disable }
Parameters: none enable Description: Enable SNMP services Usage:
snmp { enable }
Parameters: none snmp Description: Enable/disable or configure SNMP services snmp { enable | disable | snmpti <tisnmp> }
Parameters: <tisnmp> specifies the SNMP trap IP address Usage:
snmpta Description: Send traps for authorization failures Usage:
snmp { snmpta <tasnmp> }
Parameters: <tasnmp> specifies whether or not to send traps, either 1 or 2, where:
1 = Send, 2= Dont send snmptp Description: Define the SNMP trap port snmp { snmptp <tpsnmp> }
Usage:
Parameters: <tpsnmp> specifies the SNMP trap port The Command Line Interface 155 Wireless LAN Array snmpti Description: Define the SNMP trap IP address Usage:
snmp { snmpti <tisnmp> }
Parameters: <tisnmp> specifies the SNMP trap IP address Filters The following keywords are used for setting up filters. configure Description: Configure filters Usage:
filters { configure }
Parameters: none disable Description: Disable filters Usage:
filters { disable }
Parameters: none enable Description: Enable filters Usage:
filters { enable }
Parameters: none filters Description: Enable/disable or configure filters Usage:
filters { enable | disable | configure }
Parameters: none 156 The Command Line Interface Wireless LAN Array Radius Configuration The following keywords are used for configuring Radius services. client-timeout Description: Define 802.1x reply time from a client station Usage:
radius { radius-server { dot1x { client-timeout <cto1x> }}}
Parameters: <cto1x> specifies the time (in seconds) waiting for a client station 802.1x reply before timing out configure Description: Configure Radius server parameters Usage:
radius { radius-server { configure { radius-ip <radip> }}}
Parameters: <radip> specifies the IP address of the Radius server dot1x Description: Define 802.1x client (STA) settings Usage:
radius { radius-server { configure { dot1x }}}
Parameters: none radius Description: Configure Radius services Usage:
radius { radius-server { configure { radius-ip <radip> }}}
Parameters: <radip> specifies the IP address of the Radius server radius-ip Description: Define the Radius server IP address Usage:
radius { radius-server { configure { radius-ip <radip> }}}
Parameters: <radip> specifies the IP address of the Radius server radius-port Description: Define the Radius authentication port Usage:
radius { radius-server { configure { radius-port <radport> }}}
Parameters: <radport> specifies the Radius authentication port The Command Line Interface 157 Wireless LAN Array radius-secret Description: Define the Radius shared secret Usage:
radius { radius-server { configure { radius-secret <radsecret> }}}
Parameters: <radsecret> specifies the Radius shared secret radius-server Description: Configure the Radius server Usage:
radius { radius-server { configure { radius-ip <radip> }}}
Parameters: <radip> specifies the IP address of the Radius server reauth-period Description: Specify the elapsed time before allowing a client station to reattempt authentication radius { radius-server { dot1x { reauth-period <reauthper> }}}
Parameters: <reauthper> specifies the amount of time (in seconds) after a Usage:
timeout you wait before allowing a client station to retry authentication server Description: Use the reauth-period configured in the RADIUS server Usage:
radius { radius-server { dot1x { server }}}
Parameters: none Reports The following keywords are used for generating reports. assoc Description: Discover the number of devices associated with this XS-3900 Usage:
reports { assoc }
Parameters: none clear Description: Clear all stored values for the selected interface Usage:
reports { clear { GigE <gnum> }}
Parameters: <gnum> defines the gigabit interface number, either 0 or 1 158 The Command Line Interface Wireless LAN Array configure Description: Configure and request reports for the selected interface Usage:
reports { configure { Dot11 <rnum> }}
Parameters: <rnum> defines the radio number, between 1 and 16 disable Description: Disable report generation Usage:
reports { disable }
Parameters: none Dot11 Description: Generate reports for the selected radio reports { configure { Dot11 <rnum> }}
Usage:
Parameters: <rnum> defines the radio number, between 1 and 16 enable Description: Enable report generation Usage:
reports { enable }
Parameters: none GigE Description: Generate reports for the selected gigabit interface Usage:
reports { configure { GigE <gnum> }}
Parameters: <gnum> defines the gigabit interface number, either 0 or 1 num-ap Description: Discover the number of AP devices associated with this XS-
3900 reports { num-ap }
Usage:
Parameters: none num-Client Description: Discover the number of clients associated with this XS-3900 Usage:
reports { num-Client }
Parameters: none The Command Line Interface 159 Wireless LAN Array reports Description: Enable/disable or configure report generation reports { enable | disable | configure | clear }}}
Usage:
Parameters: none Data Handling The following keywords are used for defining how data is handled by the system. packet Description: Define global packet commands Usage: packet { retries <pktretry> | payload-encapsulation <encap1> }
Parameters: <pktretry> specifies the packet retry value
<encap1> choose either dot1H or snap payload-encapsulation Description: Define the type of encapsulation to use Usage: packet { payload-encapsulation <encap1> }
Parameters: <encap1> choose either dot1H or snap retries Description: Define the maximum number of retries for sending a packet Usage: packet { retries <pktretry> }
Parameters: <pktretry> specifies the packet retry value Data Clearance The following keywords are used for clearing or removing data from selected elements. clear Description: Remove/clear requested elements Usage:
clear { dot11 { client <stamacaddr> }}
Parameters: <stamacaddr> specifies the MAC address of a client station you want to disassociate 160 The Command Line Interface Wireless LAN Array client Description: Designates a client station to deauthenticate Usage:
clear { dot11 { client <stamacaddr> }}
Parameters: <stamacaddr> specifies the MAC address of a client station you want to disassociate dot11 Description: Designates a wireless interface Usage:
clear { dot11 { client <stamacaddr> }}
Parameters: <stamacaddr> specifies the MAC address of a client station you want to disassociate statistics Description: Designates accumulated counters, such as amount of data transmissions clear { dot11 { statistics <statmac> }}
Usage:
Parameters: <statmac> specifies the MAC address of a client station from which you want clear all statistical data Show Information The following keywords are used for displaying system information. adjacent-ap Description: Select all adjacent APs that are members of a WDS roaming neighborhood show { dot11 { adjacent-ap }}
Usage:
Parameters: none carrier-busy Description: Show the percentage of CCA that is busy Usage:
show { carrier-busy }
Parameters: none The Command Line Interface 161 Wireless LAN Array controllers Description: Display radio baseband information Usage:
show { controllers { dot11radio <contnum> }}
Parameters: <contnum> specifies the radio ID or number (1 to 16) dot11 Description: Select the wireless interface show { dot11 { adjacent-ap }}
Usage:
Parameters: none dot11radio Description: Select a specific radio Usage:
show { controllers { dot11radio <contnum> }}
Parameters: <contnum> specifies the radio ID or number (1 to 16) file Description: Display the individual file size show { file { info <showfnm> }
Usage:
Parameters: <showfnm> specifies the individual file name flash Description: Display the flash size and free space Usage:
show { flash }
Parameters: none hosts Description: Display cached host names Usage:
show { hosts }
Parameters: none info Description: Displayinformation that is specific to an individual file name Usage:
show { file { info <showfnm> }
Parameters: <showfnm> specifies the individual file name 162 The Command Line Interface Wireless LAN Array interface Description: Display all available interface information Usage:
show { interface }
Parameters: none line Description: Display the terminal status Usage:
show { line }
Parameters: none local-server Description: Display the embedded RADIUS server on this XS-3900 Usage:
show { radius { local-server { statistics }}}
Parameters: none radius Description: Display the Radius server information Usage:
show { radius { local-server { statistics }}}
Parameters: none running_config Description: Display the configuration the XS-3900 is currently executing Usage:
show { running_config }
Parameters: none show Description: Display current information about the selected item Usage:
show { version }
Parameters: none startup_config Description: Display the configuration the XS-3900 booted from Usage:
show { startup_config }
Parameters: none The Command Line Interface 163 statistics Description: Display statistics for this embedded RADIUS server Usage:
show { radius { local-server { statistics }}}
Wireless LAN Array Parameters: none system-files Description: List all system file names and sizes Usage:
show { file { system-files }}
Parameters: none users Description: Display user information Usage:
show { users }
Parameters: none version Description: Display the system version information Usage:
show { version }
Parameters: none Remove Configuration The following keywords are used to remove/disable existing configurations. activity-timeout Description: Set the client inactivity timeout to the default value Usage: no { dot11 { activity-timeout }}
Parameters: none authentication Description: Disable all authentication support (open system) Usage: no { security { authentication }}
Parameters: none 164 The Command Line Interface Wireless LAN Array beacon Description: Disable all beacon support Usage: no { dot11 { beacon }}
Parameters: none client Description: Reset to default the maximum power a client can transmit (this will be advertised by the XS-3900) Usage: no { dot11 { power { client }}}
Parameters: none client-timeout Description: Set to default the amount of time a client must wait for a EAP response Usage: no { dot1x { client-timeout }}
Parameters: none dhcp-server Description: Disable DHCP services Usage: no { ip { dhcp-server }}
Parameters: none domain-lookup Description: Disable all DNS servers Usage: no { ip { domain-lookup }}
Parameters: none dot11 Description: Make the no command specific to the WLAN Usage: no { dot11 { activity-timeout }}
Parameters: none The Command Line Interface 165 Wireless LAN Array dot1x Description: Make the no command specific to 802.1x components Usage: no { dot1x { client-timeout }}
Parameters: none encryption Description: Disable all encryption Usage: no { dot11 { encryption }}
Parameters: none holdoff-time Description: Set to default the amount of time to wait for client authentication Usage: no { dot11 { holdoff-time }}
Parameters: none http-port Description: Set the HTTP port to the default value of 80 Usage: no { ip { http-port }}
Parameters: none http-server Description: Disable internal Web services (the Web-based configuration will be disabled) Usage: no { ip { http-server }}
Parameters: none ip Description: Define IPs to apply the no (removal) command Usage: no { ip { dhcp-server }}
Parameters: none 166 The Command Line Interface Wireless LAN Array local Description: Reset to default the maximum power the AP can transmit Usage: no { dot11 { power { local }}}
Parameters: none name-server Description: Disable this specific DNS server by IP address Usage: no { ip { name-server <nsip> }}
Parameters: <nsip> specifies the IP address of the target name server to disable no Description: Disable if enabled, or set to default value Usage: no { ip { dhcp-server }}
Parameters: none power Description: Reset power settings to their default values Usage: no { dot11 { power { client }}}
Parameters: none preamble Description: Reset preamble to the deault Usage: no { dot11 { preamble }}
Parameters: none radio Description: Disable a specific radio Usage: no { dot11 { radio <noradionum> }}
Parameters: <noradionum> specifies the target radio to disable (1-16) reauth-period Description: Set the number of authentication retries to default Usage: no { reauth-period }
Parameters: none The Command Line Interface 167 Wireless LAN Array rts Description: Disable RTS support Usage: no { dot11 { rts }}
Parameters: none security Description: Disable security commands or reset to defaults Usage: no { security { authentication }}
Parameters: none ssid Description: Remove a specific SSID Usage: no { dot11 { ssid <nossid> }}
Parameters: <nossid> specifies the target SSID to remove from the system syslog Description: Disable the Syslog services Usage: no { ip { syslog }}
Parameters: none worldmode Description: Disable world mode Usage: no { worldmode }
Parameters: none Help The following keyword is used to provide a description of the interactive Help system. help Description: Provide a description of the Help system Usage: help Parameters: none 168 The Command Line Interface Wireless LAN Array Appendix A: Quick Reference Guide This chapter contains XS-3900 product reference information. Use this chapter to locate the information you need quickly and efficiently. Section headings for this chapter include:
Review of WMI Pages
Alphabetical Listing of CLI Keywords
Factory Default Settings
Keyboard Shortcuts
Keyboard Shortcuts Review of WMI Pages This section provides a review of the products WMI pages, with a brief explanation of their function and content. Click on any of the listed pages to go to the corresponding procedure at the referenced destination. Page Function Array Status Express Setup Network Interfaces Network Settings VLAN Settings Provides a snapshot of the global configuration settings for all XS-3900 network interfaces and radios. Establish global configuration settings that will enable basic XS-3900 functionality. Provides a snapshot of the configuration settings currently established for the network interfaces. Establish basic configuration settings for the network interfaces. Add or remove VLANs, associate VLANs to a specific network interface, and enable VLAN tagging of outgoing traffic. Appendix A: Quick Reference Guide 169 Page Network Statistics DHCP Server Settings DNS Settings IAP Interfaces IAP Settings Global Settings Global Settings .11a Global Settings .11bg Wireless LAN Array Function Provides statistical data associated with network interfaces and their activity. Enable or disable DHCP (Dynamic Host Configuration Protocol) server functionality. Set up a DNS server (or multiple servers), if you want to offer clients associating with the XS-3900 the ability to use meaningful domain names (URLs) instead of numerical IP addresses. Provides a snapshot of global configuration data associated with radios. Enable or disable radios, define the wireless mode for each radio, establish the transmit and receive parameters, and define global settings for the beacon interval and DTIM period. Establish global IAP (radio) settings. Global IAP settings include enabling or disabling all radios (regardless of their operating mode). Establish global 802.11a IAP (radio) settings. Establish global 802.11b/g IAP
(radio) settings. IAP LED Settings Set the behavior of LEDs. Statistics Provides an overview of statistical data associated with individual radios. 170 Appendix A: Quick Reference Guide Wireless LAN Array Page SSID Management Create SSID Edit SSID Security Security Management Radius Server Radius User MAC Access List Function Provides a snapshot of SSID (Service Set IDentifier) assignments. It includes the SSID name, whether or not an SSID is visible on the network, any security and QoS parameters defined for each SSID, associated VLAN IDs, guest access, and radio availability per SSID. Create, delete (or restore) and manage SSIDs. It also allows you to assign security parameters and VLANs on a per SSID basis. Edit existing SSIDs and reassign security parameters and VLANs on a per SSID basis. Provides a snapshot of XS-3900 global security configuration parameters, including administration accounts, ACL values, WEP/WPA/WPA2 status, and RADIUS configuration settings. Establish the security parameters for your wireless network, including WEP, WPA and RADIUS authentication. Set up the XS-3900s internal RADIUS server, or set up an external RADIUS server for user authentication. Create, delete and manage RADIUS user accounts. Create new MAC-based Access Control Lists (ACLs), delete existing ACLs, and add, remove, or restore MAC addresses. Appendix A: Quick Reference Guide 171 Page Create Admin Edit Admin Users Services System Log SNMP Software Tools Event Log Wireless LAN Array Function Create new network administrator accounts, delete existing accounts, or restore accounts. It also allows you to limit account access to a read only status. Edit existing network administrator accounts, change passwords, and re-
define whether an account is limited to a read only status. Provides a snapshot of users currently associated with the network. Provides a current status of Syslog and SNMP services. Enable or disable the Syslog server, define the servers IP address, and set the level for Syslog reporting. Enable or disable SNMP and define the SNMP parameters. Upgrade the system firmware. Ping the XS-3900 and obtain a status of the units performance. Provides an event log for the wireless network. 172 Appendix A: Quick Reference Guide Wireless LAN Array Alphabetical Listing of CLI Keywords This section provides a listing of all available CLI keywords, sorted alphabetically. Where the same keyword appear multiple times, the functional areas that it pertains to are also included (italicized). Click on any keyword to jump to the referenced destination. A activity-timeout station timeouts activity-timeout remove config. add adjacent-ap administrator all11a all11g allradios antenna antennaexternal assoc authentication autoduplex B basic1 basic11 basic12 basic18 basic2 basic24 basic36 basic48 basic5 basic54 basic6 basic9 baud beacon beacon information beacon remove config. broadcastkey buffered bytesize C capabilitychange carrier-busy cca cell-size change channelnum ciphers clear radius config. clear data clearance client data clearance client remove config. client-timeout security client-timeout radius config. client-timeout remove config. clock-set community configure radio config. configure dhcp config. configure syslog config. configure filters configure radius config. configure reports console Appendix A: Quick Reference Guide 173 contact-info controllers copy D def default-gateway default-lease default_rates defpw del description dhcp dhcpbind dhcp-server system admin. dhcp-server remove config. dir disable ntp config. disable dhcp config. disable snmp config. disable filters disable reports dns domain domain-lookup domain-name Dot11 dot11 data clearance dot11 show information dot11 remove config. dot11a dot11g dot11gonly dot11preamble dot11radio Wireless LAN Array dot1x security dot1x radius config. dot1x remove config. down interface config. down radio config. DTIM-rate E edcf email enable ntp config. enable dhcp config. enable snmp config. enable filters enable reports enable1 enable11 enable12 enable18 enable2 enable24 enable36 enable48 enable5 enable54 enable6 enable9 encryption security encryption remove config. end-ip-range erase F faste file 174 Appendix A: Quick Reference Guide Wireless LAN Array filters flash frag-threshold ftp fullduplex G gateway gigabit GigE H halfduplex help holdoff-time hostname system admin. hostname dns config. hosts http-port http-server I info interface interface selection interface show information ip system config. ip remove config. ip-addr ipsyslog K keyhash L least_congested led level line interface selection line show information linktest local local-server location logout long-retry-limit M management mandatory mask max-client-txpwr max-lease membershiptermination mic model more mtu N name name-server system admin. name-server remove config. no ntp num-ap num-Client O off on radio configuration Appendix A: Quick Reference Guide 175 on syslog configuration optional optkeyhash P packet parity payload-encapsulation period ping policy power preamble prelong preshort pri-nts Q qos-ssid R radio radioid radios radius radius config. radius show information radius-ip radius-port radius-secret radius-server range rate1 rate11 rate12 rate18 Wireless LAN Array rate2 rate24 rate36 rate48 rate5 rate54 rate6 rate9 reauth-period security reauth-period station timeouts reauth-period radius config. reauth-period remove config. reboot receiving reload reports reset retries rts rts-threshold running_config run-tests Rxdiversity Rxleft Rxright S sec-nts security security security remove config. serial server security server radius config. server1 server2 176 Appendix A: Quick Reference Guide tx-pwr Txright U up interface config. up radio config. userid users V version vlan W wep wep128 wep40 worldbeacon worldmode Wireless LAN Array server3 short-retry-limit show show-version shut-down snmp snmpta snmptp snmpti software speed interface config. speed radio config. ssid ssid config. ssid remove comfig. ssid-brdcst ssid-manager startup_config start-ip-range sta-timeouts statistics data clearance statistics show information stopbits syslog syslog config. syslog remove config. system-files T throughput tkip tkipwep128 tkipwep40 traceroute transmiting Txdiversity Txleft Appendix A: Quick Reference Guide 177 Factory Default Settings The following tables show the XS-3900s factory default settings. Wireless LAN Array Network Interfaces Serial Baud Rate Word Size Stop Bits Parity Time Out Gigabit 1 and Gigabit 2 Setting Default Value 115200 8 bits 1 No parity 10 seconds Setting Default Value Enabled DHCP Bind Default IP Address Default IP Mask Default Gateway Auto Negotiate Duplex Speed MTU Size Management Enabled Yes Yes 10.0.1.2 255.0.0.0 None On Full 1000 Mbps 1500 Yes 178 Appendix A: Quick Reference Guide Setting Default Value Wireless LAN Array Fast Ethernet Enabled DHCP Bind Default IP Address Default IP Mask Default Gateway Auto Negotiate Duplex Speed MTU Size Management Enabled Integrated Access Points (IAPs) Setting Antenna Mode Channel Maximum Transmit Power Cell Size Yes Yes 10.0.1.1 255.0.0.0 None On Full 100 Mbps 1500 Yes Default Value 0 11a for a1 to a12 11g for abg1 to abg4 Auto 0 Medium Appendix A: Quick Reference Guide 179 Server Settings DHCP Setting Enabled Maximum Lease Time Default Lease Time IP Start Range IP End Range External RADIUS Wireless LAN Array Default Value No 300 minutes 300 minutes 192.168.1.1 192.168.1.100 Setting Default Value Enabled Primary Server Primary Port Primary Secret Secondary Server Secondary Port Secondary Secret Yes 0.0.0.0 1812 xirrus null (no IP address) 1812 null (no secret) Time Out (before primary server is retired) 600 seconds 180 Appendix A: Quick Reference Guide Wireless LAN Array Internal RADIUS Setting Enabled Default Value No The user database is cleared upon reset to the factory defaults. For the Internal RADIUS Server you have a maximum of 200 entries. Setting Setting NTP Enabled Primary Secondary Syslog Enabled SNMP Default Value No time.nist.gov 192.6.15.29 Default Value No Setting Default Value Enabled Coomunity String Trap Host Trap Port Authorization Fail Port No xirrus null (no setting) 162 1 Appendix A: Quick Reference Guide 181 Wireless LAN Array Setting Default Value Default SSID ID VLAN Encryption Encryption Type QoS Enabled Encryption Setting Enabled WEP Keys WEP Key Length Default Key ID WPA Enabled TKIP Enabled AES Enabled EAP Enabled PSK Enabled Pass Phrase Group Rekey xirrus None Off None None Yes Default Value Yes null (all 4 keys) null (all 4 keys) 0 No Yes No Yes No null 600 182 Appendix A: Quick Reference Guide Wireless LAN Array Administrator Account and Password ID Password Management Telnet SSH Setting Default Value admin admin Setting Default Value On On Appendix A: Quick Reference Guide 183 Keyboard Shortcuts The following table shows the most common keyboard shortcuts. Wireless LAN Array Action Cut selected data and place it on the clipboard. Copy selected data to the clipboard. Paste data from the clipboard into a document
(at the insertion point). Shortcut Ctrl + X Ctrl + C Ctrl + V Copy the active window to the clipboard. Alt + Print Screen Copy the entire desktop image to the clipboard. Print Screen Abort an action at any time. Go back to the previous screen. Access the Help screen. Esc b
184 Appendix A: Quick Reference Guide Wireless LAN Array Appendix B: Technical Support This chapter provides valuable support information that can help you resolve technical difficulties. Before contacting Xirrus, review all sections in this chapter and try to determine if your problem resides with XS-3900 or your network infrastructure. Section headings for this chapter include:
General Hints and Tips
Frequently Asked Questions
Frequently Asked Questions
Contact Information
Contact Information General Hints and Tips This section provides some useful tips that will optimize the reliability and performance of your XS-3900 unit(s).
The XS-3900 requires careful handling. For best performance, units should be mounted in a dust-free and temperature-controlled environment.
If using multiple XS-3900s at the same location, we recommend maintaining a distance of at least 50 feet between units.
Keep the XS-3900 away from electrical devices or appliances that generate RF noise. Because the XS-3900 is generally mounted on ceilings, be aware of its position relative to lighting (especially fluorescent lighting).
If using AC power, each XS-3900 unit requires its own dedicated AC power outlet. Do not attempt to piggy-back AC power to multiple units. If deploying multiple units, consider using the optional Xirrus Remote DC Power System (XP-3100).
If you are deploying multiple units, ensure that the clock face of all units is aligned in the same direction.
The XS-3900 should only be used with Wi-Fi certified client devices. Appendix B: Technical Support 185 Frequently Asked Questions This section answers some of the most frequently asked questions, organized by functional area. Wireless LAN Array Multiple SSIDs Q. What Are BSSIDs and SSIDs?
A. BSSID (Basic Service Set Identifier) refers to an individual access point radio and its associated clients. The identifier is the MAC address of the access point radio that forms the BSS. A group of BSSs can be formed to allow stations in one BSS to communicate to stations in another BSS by way of a backbone that interconnects each access point. The Extended Service Set (ESS) refers to the group of BSSIDs that are grouped together to form one ESS. The ESSID (often referred to as SSID or wireless network name) identifies the Extended Service Set. Clients must associate to a single ESS at any given time. Clients ignore traffic from other Extended Service Sets that do not have the same SSID. Legacy access points typically support one SSID per access point. Xirrus Wireless LAN Arrays support the ability for multiple SSIDs to be defined and used simultaneously. Q. What would I use SSIDs for?
A. The creation of different wireless network names allows system administrators to separate types of users with different requirements. The following policies can be tied to an SSID:
Minimum security required to join this SSID.
The wireless Quality of Service (QoS) desired for this SSID.
The wired VLAN associated with this SSID. As an example, one SSID named accounting might require the highest level of security, while another SSID named guests might have low security requirements. 186 Appendix B: Technical Support Wireless LAN Array Another example may define an SSID named voice that supports voice over Wireless LAN phones with the highest possible Quality of Service
(QoS) definition. This type of SSID might also forward traffic to specific VLANs on the wired network. Q. How do I set up SSIDs?
A. Use the following procedure as a guideline. For more detailed information, go to SSID Management on page 92. 3. 1. From the Web Management Interface, go to the Create SSID page. Select Yes to make the SSID visible to all clients on the network. 2. Although the XS-3900 will not broadcast SSIDs that are hidden, clients can still associate to a hidden SSID if they know the SSID name to connect to it. Select the minimum security that will be required by users for this SSID. If desired (optional), select a Quality of Service (QoS) setting for this SSID. The QoS setting you define here will prioritize wireless traffic for this SSID over other SSID wireless traffic. If desired (optional), select a VLAN that you want this traffic to be forwarded to on the wired network. If desired (optional), you can select which radios this SSID will not be available onthe default is to make this SSID available on all radios. 4. 5. 6. 7. Click on the Apply button to apply your changes to this session. 8. Click on the Save button to save your changes. 9. If you need to edit any of the SSID settings, you can do so from the Edit SSID page. Appendix B: Technical Support 187 Wireless LAN Array Security Q. How do I know my management session is secure?
A. Follow these guidelines:
Administrator passwords Always change the default administrator password (the default is admin), and choose a strong replacement password. When appropriate, issue read only administrator accounts.
SSH versus Telnet Be aware that Telnet is not secure over network connections and should be used only with a direct serial port connection. When connecting to the units Command Line Interface over a network connection, you must use a Secure SHell (SSH) utility. The most commonly used freeware providing SSH tools is PuTTY.
Configuration auditing Do not change approved configuration settings. The optional Xirrus Wireless Management System (XM-3300) offers powerful management features for small or large XS-3900 deployments, and can audit your configuration settings automatically. In addition, using the XM-3300 eliminates the need for an FTP server. Q. Which wireless data encryption method should I use?
A. Wireless data encryption prevents eavesdropping on data being transmitted or received over the airwaves. The XS-3900 allows you to establish the following data encryption configuration options:
Open This option offers no data encryption and is not recommended, though you might choose this option if clients are required to use a VPN connection through a secure SSH utility, like PuTTy. 188 Appendix B: Technical Support Wireless LAN Array
WEP (Wired Equivalent Privacy) This option provides minimal protection (though much better than using an open network). An early standard for wireless data encryption and supported by all Wi-Fi certified equipment, WEP is vulnerable to hacking and is therefore not recommended for use by Enterprise networks.
WPA (Wi-Fi Protected Access) This is a much stronger encryption model than WEP and uses TKIP (Temporal Key Integrity Protocol) with AES (Advanced Encryption Standard) to prevent WEP cracks. TKIP solves security issues with WEP. It also allows you to establish encryption keys on a per-user-basis, with key rotation for added security. In addition, TKIP provides Message Integrity Check (MIC) functionality and prevents active attacks on the wireless network. AES is the strongest encryption standard and is used by government agencies; however, old legacy hardware may not be capable of supporting the AES mode (it probably wont work on older wireless clients). Because AES is the strongest encryption standard currently available, it is highly recommended for Enterprise networks. Any of the above encryption modes can be used (and can be used at the same time). Q. Which user authentication method should I use?
A. User authentication ensures that users are who they say they are. For this purpose, the XS-3900 allows you to choose between the following user authentication methods:
Pre-Shared Key Users must manually enter a key (pass phrase) on the client side of the wireless network that matches the key stored by the administrator in the XS-3900. Appendix B: Technical Support 189 Wireless LAN Array
RADIUS 802.1x with EAP 802.1x uses a RADIUS server to authenticate large numbers of clients, and can handle different EAP (Extensible Authentication Protocol) authentication methods, including EAP-TLS, EAP-
TTLS and EAP-PEAP. The RADIUS server can be internal
(provided by the XS-3900) or external. An external RADIUS server offers more functionality and is recommended for large Enterprise deployments. When using this method, user names and passwords must be entered into the RADIUS server for user authentication.
MAC Address ACLs (Access Control Lists) MAC address ACLs provide a list of client adapter MAC addresses that are allowed or denied access to the wireless network. Access Control Lists work well when there are a limited number of usersin this case, enter the MAC addresses of each user in the Allow list. In the event of a lost or stolen MAC adapter, enter the affected MAC address in the Deny list. Q. Why do I need to authenticate my XS-3900 units?
A. When deploying multiple XS-3900 units, you may need to define which units are part of which wireless network (for example, if you are establishing more than one network). In this case, you need to employ the Xirrus Wireless Management System (XM-3300) which can authenticate your XS-3900 units automatically and ensure that only authorized units are associated with the defined wireless network. Q. What is rogue AP (Access Point) detection?
A. The XS-3900 has a dedicated radio (abg/4) which constantly scans the local wireless environment for rogue APs (non-Xirrus devices that are not part of your wireless network), unencrypted transmissions, and other security issues. Administrators can then classify each rogue AP and ensure that these devices do not interrupt or interfere with the network. 190 Appendix B: Technical Support Wireless LAN Array VLAN Support Q. What Are VLANs?
A. VLANs (Virtual Local Area Networks) are a logical grouping of network devices that share a common network broadcast domain. Members of a particular VLAN can be on any segment of the physical network but logically only members of a particular VLAN can see each other. VLANs are defined and implemented using the wired network switches that are VLAN capable. Packets are tagged for transmission on a particular VLAN according to the IEEE 802.1Q standard, with VLAN switches processing packets according to the tag. Q. What would I use VLANs for?
A. Logically separating different types of users, systems, applications, or other logical division aids in performance and management of different network devices. Different VLANs can also be assigned with different packet priorities to prioritize packets from one VLAN over packets from another VLAN. VLANs are managed by software settingsinstead of physically plugging in and moving network cables and userswhich helps to ease network management tasks. Q. What are Wireless VLANs?
A. Wireless VLANs allow similar functionality to the wired VLAN definitions and extend the operation of wired VLANs to the wireless side of the network. Wireless VLANs can be mapped to wireless SSIDs so that traffic from wired VLANs can be sent to wireless users of a particular SSID. The reverse is also true, where wireless traffic originating from a particular SSID can be tagged for transmission on a particular wired VLAN. Sixteen SSIDs can be defined on the XS-3900, allowing a total of sixteen VLANs to be accessed (one per SSID). Appendix B: Technical Support 191 Wireless LAN Array As an example, to provide guest user access an SSID of guest might be created. This SSID could be mapped to a wired VLAN that segregates unknown users from the rest of the wired network and restricts them to Internet access only. Wireless users could then associate to the wireless network via the guest SSID and obtain access to the Internet through the selected VLAN, but would be able to access other privileged network resources. Q. How do I set up Wireless VLANs?
A. Use the following procedure as a guideline. For more detailed information, go to VLAN Settings on page 71. 1. From the Web Management Interface, go to the VLAN Settings page. 2. Create a new VLAN by defining the same VLAN ID as the one you are using on the wired network. If desired (optional), assign a description to this VLAN. Select the wired Ethernet interface that this VLAN is defined for. Select Tag Outgoing Packets. 3. 4. 5. 6. Go to the SSID Management menu and either create a new SSID or edit an existing SSID. From the SSID property page, choose the desired VLAN for this SSID. 7. Click on the Apply button to apply your changes to this session. 8. Click on the Save button to save your changes. 192 Appendix B: Technical Support Wireless LAN Array Contact Information Xirrus, Inc. is located in Westlake Village, California, just 45 minutes northwest of downtown Los Angeles and 45 minutes southeast of Santa Barbara. Xirrus, Inc. 370 North Westlake Blvd, Suite 200 Westlake Village, CA 91362 USA Tel: 1.805.497.0955 Fax: 1.805.449.1180 www.xirrus.com Appendix B: Technical Support 193 Use this space for your notes ... Wireless LAN Array 194 Appendix B: Technical Support Wireless LAN Array Glossary of Terms 802.11a A supplement to the IEEE 802.11 WLAN specification that describes radio transmissions at a frequency of 5 GHz and data rates of up to 54 Mbps. 802.11b A supplement to the IEEE 802.11 WLAN specification that describes radio transmissions at a frequency of 2.4 GHz and data rates of up to 11 Mbps. 802.11d A supplement to the Media Access Control (MAC) layer in 802.11 to promote worldwide use of 802.11 WLANs. It allows Access Points to communicate information on the permissible radio channels with acceptable power levels for user devices. Because the 802.11 standards cannot legally operate in some countries, 802.11d adds features and restrictions to allow WLANs to operate within the rules of these countries. 802.11g A supplement to the IEEE 802.11 WLAN specification that describes radio transmissions at a frequency of 2.4 GHz and data rates of up to 54 Mbps. 802.1Q An IEEE standard for MAC layer frame tagging (also known as encapsulation). Frame tagging uniquely assigns a user-defined ID to each frame. It also enables a switch to communicate VLAN membership information across multiple (and multi-vendor) devices by frame tagging. AES
(Advanced Encryption Standard) A data encryption scheme that uses three different key sizes (128-bit, 192-bit, and 256-bit). AES was adopted by the U.S. government in 2002 as the encryption standard for protecting sensitive but unclassified electronic data. Glossary of Terms 195 Wireless LAN Array authentication The process that a station, device, or user employs to announce its identify to the network which validates it. IEEE 802.11 specifies two forms of authentication, open system and shared key. bandwidth Specifies the amount of the frequency spectrum that is usable for data transfer. In other words, it identifies the maximum data rate a signal can attain on the medium without encountering significant attenuation (loss of power). beacon interval When a device in a wireless network sends a beacon, it includes with it a beacon interval, which specifies the period of time before it will send the beacon again. The interval tells receiving devices on the network how long they can wait in low power mode before waking up to handle the beacon. Network administrators can adjust the beacon intervalusually measured in milliseconds (ms) or its equivalent, kilo-microseconds (Kmsec). bit rate The transmission rate of binary symbols ('0' and '1'), equal to the total number of bits transmitted in one second. BSS
(Basic Service Set) When a WLAN is operating in infrastructure mode, each access point and its connected devices are called the Basic Service Set. BSSID The unique identifier for an access point in a BSS network. See also, SSID. cell The basic geographical unit of a cellular communications system. Service coverage of a given area is based on an interlocking network of cells, each with a radio base station (transmitter/receiver) at its center. The size of each cell is determined by the terrain and forecasted number of users. 196 Glossary of Terms Wireless LAN Array channel A specific portion of the radio spectrumthe channels allotted to one of the wireless networking protocols. For example, 802.11b and 802.11g use 14 channels in the 2.4 GHz band, only 3 of which don't overlap (1, 6, and 11). In the 5 GHz band, 802.11a uses 8 channels for indoor use and 4 for outdoor use, none of which overlap. CoS
(Class of Service) A category based on the type of user, type of application, or some other criteria that QoS systems can use to provide differentiated classes of service. default gateway The gateway in a network that a computer will use to access another network if a gateway is not specified for use. In a network using subnets, a default gateway is the router that forwards traffic to a destination outside of the subnet of the transmitting device. DHCP
(Dynamic Host Configuration Protocol) A method for dynamically assigning IP addresses to devices on a network. DHCP issues IP addresses automatically within a specified range to client devices when they are first powered up. DHCP lease The DHCP lease is the amount of time that the DHCP server grants to the DHCP client for permission to use a particular IP address. A typical DHCP server allows its administrator to set the lease time. DNS
(Domain Name System) A system that maps meaningful domain names with complex numeric IP addresses. DNS is actually a separate networkif one DNS server cannot translate a domain name, it will ask a second or third until a server is found with the correct IP address. Glossary of Terms 197 Wireless LAN Array domain The main name/Internet address of a user's Internet site as registered with the InterNIC organization, which handles domain registration on the Internet. For example, the domain address for Xirrus is: http://www.xirrus.com, broken down as follows:
http:// represents the Hyper Text Teleprocessing Protocol used by all Web pages.
www is a reference to the World Wide Web.
xirrus refers to the company.
com specifies that the domain belongs to a commercial enterprise. DTIM
(Delivery Traffic Indication Message) A DTIM is a signal sent as part of a beacon by an access point to a client device in sleep mode, alerting the device to a packet awaiting delivery. EAP
(Extensible Authentication Protocol) When you log on to the Internet, you're most likely establishing a PPP connection via a remote access server. The password, key, or other device you use to prove that you are authorized to do so is controlled via PPP's Link Control Protocol (LCP). However, LCP is somewhat inflexible because it has to specify an authentication device early in the process. EAP allows the system to gather more information from the user before deciding which authenticator to use. It is called extensible because it allows more authenticator types than LCP (for example, passwords and public keys). EDCF
(Enhanced Distributed Coordinator Function) A QoS extension which uses the same contention-based access mechanism as current devices but adds offset contention windows that separate high priority packets from low priority packets (by assigning a larger random backoff window to lower priorities than to higher priorities). The result is statistical priority, where high-priority packets usually are transmitted before low-priority packets. encapsulation A way of wrapping protocols such as TCP/IP, AppleTalk, and NetBEUI in Ethernet frames so they can traverse an Ethernet network and be unwrapped when they reach the destination computer. 198 Glossary of Terms Wireless LAN Array encryption Any procedure used in cryptography to translate data into a form that can be decrypted and read only by its intended receiver. Fast Ethernet A version of standard Ethernet that runs at 100 Mbps rather than 10 Mbps. FCC
(Federal Communications Commission) US wireless regulatory authority. The FCC was established by the Communications Act of 1934 and is charged with regulating Interstate and International communications by radio, television, wire, satellite and cable. frame A packet encapsulated to travel on a physical medium, like Ethernet or Wi-Fi. If a packet is like a shipping container, a frame is the boat on which the shipping container is loaded. Gigabit 1 The primary Gigabit Ethernet interface. See also, Gigabit Ethernet. Gigabit 2 The secondary Gigabit Ethernet interface. See also, Gigabit Ethernet. Gigabit Ethernet The newest version of Ethernet, with data transfer rates of 1 Gigabit (1,000 Mbps). host name The unique name that identifies a computer on a network. On the Internet, the host name is in the form comp.xyz.net. If there is only one Internet site the host name is the same as the domain name. One computer can have more than one host name if it hosts more than one Internet site (for example, home.xyz.net and comp.xyz.net. In this case, comp and home are the host names and xyz.net is the domain name. IPsec A Layer 3 authentication and encryption protocol. Used to secure VPNs. Glossary of Terms 199 Wireless LAN Array MAC address
(Media Access Control Address) A 6-byte hexadecimal address assigned by a manufacturer to a device. Mbps
(Megabits per second) A standard measure for data transmission speeds (for example, the rate at which information travels over the Internet). 1 Mbps denotes one million bits per second. MTU
(Maximum Transmission Unit) The largest physical packet sizemeasured in bytesthat a network can transmit. Any messages larger than the MTU are divided into smaller packets before being sent. Every network has a different MTU, which is set by the network administrator. Ideally, you want the MTU to be the same as the smallest MTU of all the networks between your machine and a message's final destination. Otherwise, if your messages are larger than one of the intervening MTUs, they will get broken up (fragmented), which slows down transmission speeds. NTP
(Network Time Protocol) An Internet standard protocol (built on top of TCP/IP) that ensures the accurate synchronization (to the millisecond) of computer clock times in a network of computers. Running as a continuous background client program on a computer, NTP sends periodic time requests to servers, obtaining server time stamps and using them to adjust the client's clock. packet Data sent over a network is broken down into many small piecespacketsby the Transmission Control Protocol layer of TCP/IP. Each packet contains the address of its destination as well the data. Packets may be sent on any number of routes to their destination, where they are reassembled into the original data. This system is optimal for connectionless networks, such as the Internet, where there are no fixed connections between two locations. PLCP
(Physical Layer Convergence Protocol) Defined by IEEE 802.6, a protocol specified within the Transmission Convergence layer that defines exactly how cells are formatted within a data stream for a particular type of transmission facility. 200 Glossary of Terms Wireless LAN Array preamble Preamble (sometimes called a header) is a section of data at the head of a packet that contains information that the access point and client devices need when sending and receiving packets. PLCP has two structures, a long and a short preamble. All compliant 802.11b systems have to support the long preamble. The short preamble option is provided in the standard to improve the efficiency of a network's throughput when transmitting special data, such as voice, VoIP (Voice-
over IP) and streaming video. private key In cryptography, one of a pair of keys (one public and one private) that are created with the same algorithm for encrypting and decrypting messages and digital signatures. The private key is provided only to the requestor and never shared. The requestor uses the private key to decrypt text that has been encrypted with the public key by someone else. PSK
(Pre-Shared Key) A TKIP passphrase used to protect your network traffic in WPA. public key In cryptography, one of a pair of keys (one public and one private) that are created with the same algorithm for encrypting and decrypting messages and digital signatures. The public key is made publicly available for encryption and decryption. QoS
(Quality of Service) QoS can be used to describe any number of ways in which a network provider guarantees a service's performance, such as an average or minimum throughput rate. RADIUS
(Remote Authentication Dial-In User Service) A client-server security protocol, developed to authenticate, authorize, and account for dial-up users. The RADIUS server stores user profiles, which include passwords and authorization attributes. RDPS
(Remote Distribution Power Supply) A Xirrus proprietary power supply used for delivering power from a remote source to the Xirrus family of products. Glossary of Terms 201 Wireless LAN Array Remote DC Power System (XP-3100) An optional Xirrus proprietary product that provides distributed DC power to multiple XS-3900 units, eliminating the need to run dedicated AC power to each unit and facilitating backup power when connected via a UPS. RSSI
(Received Signal Strength Indicator) A measure of the energy observed by an antenna when receiving a signal. SDMA
(Spatial Division Multiple Access) A wireless communications mode that optimizes the use of the radio spectrum and minimizes cost by taking advantage of the directional properties of antennas. The antennas are highly directional, allowing duplicate frequencies to be used for multiple zones. SNMP
(Simple Network Management Protocol) A standard protocol that regulates network management over the Internet. SNTP
(Simple Network Time Protocol) A simplified version of NTP. SNTP can be used when the ultimate performance of the full NTP implementation described in RFC 1305 is not needed or justified. SSH
(Secure SHell) Developed by SSH Communications Security, Secure Shell is a program to log into another computer over a network, to execute commands in a remote machine, and to move files from one machine to another. It provides strong authentication and secure communications over insecure channels. SSH protects a network from attacks, such as IP spoofing, IP source routing, and DNS spoofing. Attackers who has managed to take over a network can only force SSH to disconnectthey cannot play back the traffic or hijack the connection when encryption is enabled. When using SSH's slogin (instead of rlogin) the entire login session, including transmission of password, is encrypted making it almost impossible for an outsider to collect passwords. 202 Glossary of Terms Wireless LAN Array SSID
(Service Set IDentifier) Every wireless network or network subset (such as a BSS) has a unique identifier called an SSID. Every device connected to that part of the network uses the same SSID to identify itself as part of the familywhen it wants to gain access to the network or verify the origin of a data packet it is sending over the network. In short, it is the unique name shared among all devices in a WLAN. subnet mask A mask used to determine what subnet an IP address belongs to. An IP address has two components: (1) the network address and (2) the host address. For example, consider the IP address 150.215.017.009. Assuming this is part of a Class B network, the first two numbers (150.215) represent the Class B network address, and the second two numbers (017.009) identify a particular host on this network. TKIP
(Temporal Key Integrity Protocol) Provides improved data encryption by scrambling the keys using a hashing algorithm and, by adding an integrity-
checking feature, ensures that the encryption keys havent been tampered with. transmit power The amount of power used by a radio transceiver to send the signal out. Transmit power is generally measured in milliwatts, which you can convert to dBm. VLAN
(Virtual LAN) A group of devices that communicate as a single network, even though they are physically located on different LAN segments. Because VLANs are based on logical rather than physical connections, they are extremely flexible. A device that is moved to another location can remain on the same VLAN without any hardware reconfiguration. Glossary of Terms 203 Wireless LAN Array VLAN tagging
(Virtual LAN tagging) Static port-based VLANs were originally the only way to segment a network without using routing, but these port-based VLANs could only be implemented on a single switch (or switches) cabled together. Routing was required to transfer traffic between unconnected switches. As an alternative to routing, some vendors created proprietary schemes for sharing VLAN information across switches. These methods would only operate on that vendor's equipment and were not an acceptable way to implement VLANs. With the adoption of the 802.1Q standard, traffic can be confined to VLANs that exist on multiple switches from different vendors. This interoperability and traffic containment across different switches is the result of a switch's ability to use and recognize 802.1Q tag headerscalled VLAN tagging. Switches that implement 802.1Q tagging add this tag header to the frame directly after the destination and source MAC addresses. The tag header indicates:
1. That the packet has a tag. 2. Whether the packet should have priority over other packets. 3. Which VLAN it belongs to, so that the switch can forward or filter it correctly. WEP
(Wired Equivalent Privacy) An optional IEEE 802.11 function that offers frame transmission privacy similar to a wired network. The Wired Equivalent Privacy generates secret shared encryption keys that both source and destination stations can use to alter frame bits to avoid disclosure to eavesdroppers. Wi-Fi Alliance A nonprofit international association formed in 1999 to certify interoperability of wireless Local Area Network products based on IEEE 802.11 specification. The goal of the Wi-Fi Alliance's members is to enhance the user experience through product interoperability. Wireless LAN Array (XS-3900) A Xirrus proprietary high capacity wireless access point utilizing multiple channels, specifically designed for the Enterprise market. Wireless Management System (XM-3300) A Xirrus proprietary product used for managing large XS-3900 deployments from a centralized Web-based interface. 204 Glossary of Terms Wireless LAN Array WPA
(Wi-Fi Protected Access) A Wi-Fi Alliance standard that contains a subset of the IEEE 802.11i standard, using TKIP as an encryption method and 802.1X for authentication. XM-3300 The Xirrus Wireless Management System (XM-3300) is a Xirrus proprietary product used for managing large XS-3900 deployments from a centralized Web-
based interface. XP-3100 The Xirrus Remote DC Power System (XP-3100) is an optional Xirrus proprietary product that provides distributed DC power to multiple XS-3900 units, eliminating the need to run dedicated AC power to each unit and facilitating backup power when connected via a UPS. XS-3900 The Xirrus Wireless LAN Array (XS-3900) is a high capacity, multi-wireless access point specifically designed for the Enterprise market. Glossary of Terms 205 Use this space for your notes ... Wireless LAN Array 206 Glossary of Terms Wireless LAN Array Index Numerics 802.11a 11 802.11a/b/g 11 802.11b/g 11 802.11e 12 802.11p 12 802.11q 12 A AES 12 authentication 12 B beam distribution 11 benefits 10 C channels non-overlapping 12 character restrictions 56 CLI commands 120 beacon information 136 data clearance 160 data handling 160 DHCP configuration 152 DNS configuration 150 filters 156 help 168 interface configuration 122 interface selection 121 NTP configuration 151 radio configuration 126 Radius services 157 remove configuration 164 reports 158 security 143 show information 161 SNMP configuration 155 SSID configuration 149 station timeouts 148 Syslog configuration 153 system administration 137 system testing 142 testing 142 Telnet connection 117 Command Line Interface 117 commands alphabetical listing of 173 CLI 117 compliance 12 configuration changes applying 56 contact information 193 coverage extended 11 critical messages 55 D default settings 178 deployment ease of 12 DHCP server 19, 75 DNS settings 76 E EAP-MDS 12 EAP-TLS 12 EAP-TTLS 12 encryption 12 event log 116 Index 207 event messages 55 express setup 47, 61 external RADIUS server 802.1x 19 M MIC 12 mounting the unit 38 Wireless LAN Array F factory default settings 178 FAQs 186 features 10 frequently asked questions 186 FTP server 19 G glossary of terms 195 H help button 56 HyperTerminal 18 I installation 17 installing the MCAP-3616 37 mounting the unit 38 requirements 17 unpacking the unit 36 workflow 35 installation workflow 35 interfaces Web 53 Internet Explorer 18 K key features 10 keyboard shortcuts 184 keywords 120 L logging 112, 116 logging in 57 208 N Netscape Navigator 18 network interfaces 66 settings 67 statistics 74 VLAN settings 71 network installation 17 non-overlapping channels 12 O overview 6 P password 57 PEAP 12 performance 10 power outlet 17 print button 56 product installation 17 product overview 6 product specifications 13 PuTTy 17 Q QoS 12 Quality of Service 12 quick reference guide 169 R radio distribution 10 RADIUS server 19, 103, 105 rogue detection 11 Index structure and navigation 55 W warning messages 55 Web interface 53 WEP 12 Wi-Fi compliance 12 workflow 35 WPA2 6 X Xirrus Management System 6, 9, 12, 19 Xirrus Remote Power System 17, 19 XMS 6, 9, 12, 19 XRPS 17, 19 XS 3900 management 57 management 98 RADIUS server 103, 105 Wireless LAN Array S Secure Shell 17 security 6, 12, 97 serial port 18 services 111 SNMP 9, 113 software 114 specifications 13 SSH 17 SSID creating 94 deleting 94 editing 95 management 92 statistics 74 status bar 56 system log 112 T technical support contact information 193 frequently asked questions 186 establishing a connection 117 Telnet TKIP 12 tools 115 U unpacking the unit 36 user interface 53 users 110 V VLAN settings 71 VoWLAN 12 Index 209 Wireless LAN Array 210 Index
frequency | equipment class | purpose | ||
---|---|---|---|---|
1 | 2005-04-25 | 5260 ~ 5320 | NII - Unlicensed National Information Infrastructure TX | Original Equipment |
2 | 5745 ~ 5825 | DTS - Digital Transmission System |
app s | Applicant Information | |||||
---|---|---|---|---|---|---|
1 2 | Effective |
2005-04-25
|
||||
1 2 | Applicant's complete, legal business name |
Cambium Networks
|
||||
1 2 | FCC Registration Number (FRN) |
0016216152
|
||||
1 2 | Physical Address |
3800 Golf Rd #360
|
||||
1 2 |
Rolling Meadows, Illinois 60008
|
|||||
1 2 |
United States
|
|||||
app s | TCB Information | |||||
1 2 | TCB Application Email Address |
h******@AmericanTCB.com
|
||||
1 2 | TCB Scope |
A4: UNII devices & low power transmitters using spread spectrum techniques
|
||||
app s | FCC ID | |||||
1 2 | Grantee Code |
SK6
|
||||
1 2 | Equipment Product Code |
XS37008
|
||||
app s | Person at the applicant's address to receive grant or for contact | |||||
1 2 | Name |
S******** M******** P********
|
||||
1 2 | Title |
Principal Staff Engineer - RF
|
||||
1 2 | Telephone Number |
847-6********
|
||||
1 2 | Fax Number |
1-888********
|
||||
1 2 |
s******@cambiumnetworks.com
|
|||||
app s | Technical Contact | |||||
1 2 | Firm Name |
Elliott Laboratories Inc.
|
||||
1 2 | Name |
M****** B******
|
||||
1 2 | Physical Address |
684 West Maude Ave.
|
||||
1 2 |
Sunnyvale, California 94085
|
|||||
1 2 |
United States
|
|||||
1 2 | Telephone Number |
408-2******** Extension:
|
||||
1 2 | Fax Number |
408-2********
|
||||
1 2 |
d******@elliottlabs.com
|
|||||
app s | Non Technical Contact | |||||
1 2 | Firm Name |
Elliott Laboratories Inc.
|
||||
1 2 | Name |
D****** G****
|
||||
1 2 | Physical Address |
684 West Maude Ave.
|
||||
1 2 |
Sunnyvale, California 94085
|
|||||
1 2 |
United States
|
|||||
1 2 | Telephone Number |
408-2********
|
||||
1 2 | Fax Number |
408-2********
|
||||
1 2 |
d******@elliottlabs.com
|
|||||
app s | Confidentiality (long or short term) | |||||
1 2 | Does this application include a request for confidentiality for any portion(s) of the data contained in this application pursuant to 47 CFR § 0.459 of the Commission Rules?: | Yes | ||||
1 2 | Long-Term Confidentiality Does this application include a request for confidentiality for any portion(s) of the data contained in this application pursuant to 47 CFR § 0.459 of the Commission Rules?: | No | ||||
if no date is supplied, the release date will be set to 45 calendar days past the date of grant. | ||||||
app s | Cognitive Radio & Software Defined Radio, Class, etc | |||||
1 2 | Is this application for software defined/cognitive radio authorization? | No | ||||
1 2 | Equipment Class | NII - Unlicensed National Information Infrastructure TX | ||||
1 2 | DTS - Digital Transmission System | |||||
1 2 | Description of product as it is marketed: (NOTE: This text will appear below the equipment class on the grant) | XS-3700 Wireless LAN Array | ||||
1 2 | Related OET KnowledgeDataBase Inquiry: Is there a KDB inquiry associated with this application? | No | ||||
1 2 | Modular Equipment Type | Does not apply | ||||
1 2 | Purpose / Application is for | Original Equipment | ||||
1 2 | Composite Equipment: Is the equipment in this application a composite device subject to an additional equipment authorization? | Yes | ||||
1 2 | Related Equipment: Is the equipment in this application part of a system that operates with, or is marketed with, another device that requires an equipment authorization? | No | ||||
1 2 | Grant Comments | Power Output listed is maximum conducted per transmitter per band. The aggregate power transmitted simultaneously on all beams per band has been evaluated and shown to meet the FCC Limits as given within this application. The maximum output power on a certain channels must be reduced as specified within this application. The antenna(s) used for this transmitter must be installed to provide a separation distance of at least 25 cm from all persons and must not be co-located or operating in conjunction with any other antenna or transmitter other than those contained within this device. End-users and installers must be provided with antenna installation instructions and transmitter operating conditions for satisfying RF exposure compliance. | ||||
1 2 | Power Output listed is maximum conducted per transmitter per band. The aggregate power transmitted simultaneously on all beams per band has been evaluated and shown to meet the FCC Limits as given within this application. The maximum output power on a certain channels must be reduced as specified within this application. The antenna(s) used for this transmitter must be installed to provide a separation distance of at least 25 cm from all persons and must not be colocated or operating in conjunction with any other antenna or transmitter other than those contained within this device. End-users and installers must be provided with antenna installation instructions and transmitter operating conditions for satisfying RF exposure compliance. | |||||
1 2 | Is there an equipment authorization waiver associated with this application? | No | ||||
1 2 | If there is an equipment authorization waiver associated with this application, has the associated waiver been approved and all information uploaded? | No | ||||
app s | Test Firm Name and Contact Information | |||||
1 2 | Firm Name |
Elliott Laboratories LLC
|
||||
1 2 | Name |
D******** B********
|
||||
1 2 | Telephone Number |
408-2********
|
||||
1 2 | Fax Number |
408-2********
|
||||
1 2 |
d******@elliottlabs.com
|
|||||
Equipment Specifications | |||||||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Line | Rule Parts | Grant Notes | Lower Frequency | Upper Frequency | Power Output | Tolerance | Emission Designator | Microprocessor Number | |||||||||||||||||||||||||||||||||
1 | 1 | 15E | CC | 5180 | 5240 | 0.012 | |||||||||||||||||||||||||||||||||||
1 | 2 | 15E | CC | 5260 | 5320 | 0.058 | |||||||||||||||||||||||||||||||||||
Line | Rule Parts | Grant Notes | Lower Frequency | Upper Frequency | Power Output | Tolerance | Emission Designator | Microprocessor Number | |||||||||||||||||||||||||||||||||
2 | 1 | 15C | CC | 2412 | 2462 | 0.047 | |||||||||||||||||||||||||||||||||||
2 | 2 | 15C | CC | 5745 | 5825 | 0.094 |
some individual PII (Personally Identifiable Information) available on the public forms may be redacted, original source may include additional details
This product uses the FCC Data API but is not endorsed or certified by the FCC