Manuais de utilizador para Vivato Inc. VLJ24WFSW

índice analítico

• Copyright © 2002 Vivato, Inc.

  2
• Who Should Read This Book?

  2
• Safety Information

  3
  • FCC Declaration of Conformity

    3
  • Conventions Used in This Document

    5
  • Contact Information

    6
    • Safety Information iii

      11
    • Introduction 1

      11
    • Indoor Wi-Fi Switch Installation 3

      11
    • Outdoor Wi-Fi Switch Installation 21

      11
    • Initial Configuration Using the Built-In Web Pages 35

      12
    • Using the Main Configuration Web Pages 51

      12
    • Network Configuration Web Pages 55

      12
    • Security Configuration Web Pages 67

      12
    • Monitoring Rogue APs, Clients, and System Operations 79

      12
    • Services, Password, Config, and Firmware Web Pages 87

      13
    • Diagnostics and Help Web Screens 93

      13
    • Command Line Interface 97

      13
    • Verifying Wi-Fi Operation 151

      14
    • Network Monitoring 157

      14
    • Wi-Fi Switch Firmware Updates 163

      15
    • Point to Point Tunneling Protocol (PPTP) Operation 165

      15
• Introduction

  17
  • Multi-Channel Operation

    17
  • Basic Service Set Operation

    17
  • “Out of the Box” Settings

    17
• Indoor Wi-Fi Switch Installation

  19
  • Shipping Contents

    20
  • Where to Mount The Indoor Wi-Fi Switch

    20
    • Analyzing Room Shape for Best Coverage

      21
    • Ceiling Height Considerations

      22
    • Minimizing Obstructions

      23
    • Interfering Signal Sources

      23
    • Environmental Considerations For Indoor Use

      23
  • Assembling the Wi-Fi Switch

    24
    • Attaching the Top and Bottom Rails

      24
    • Attaching the End Caps

      25
    • Attaching the Fabric Cover

      25
  • Cable Routing to the Wi-Fi Switch

    26
    • CAUTION - Do not mount the Wi-Fi Switch upside down to change the orientation of the connections!

      26
  • Mounting the Wi-Fi Switch

    27
    • Mounting Weight Considerations

      27
    • Mounting The Wi-Fi Switch on a Wall (Flush Mount)

      27
    • Mounting the Wi-Fi Switch Using the Optional Corner Mount Kit

      30
  • Mains (AC) Power Requirements

    33
  • Connections to the Vivato Wi-Fi Switch

    33
    • Media Access Control (MAC) Addresses in the Wi-Fi Switch

      34
• Outdoor Wi-Fi Switch Installation

  37
  • Shipping Contents

    37
  • Where to Mount The Outdoor Wi-Fi Switch

    38
    • Minimizing Obstructions

      39
    • Interfering Signal Sources

      40
    • Environmental Considerations For Outdoor Use

      40
  • Mounting the Outdoor Wi-Fi Switch

    40
    • Mounting Weight Considerations

      41
    • Outdoor Wi-Fi Switch Dimensions

      42
    • Mounting Hardware

      43
      • Tower Mount Example

        44
      • Building Face Mount Example

        44
      • Roof Top Mount Example

        46
    • Mains (AC) Power Requirements and Connections

      47
      • Surge Protection

        47
      • Accessing Power and Data Connections in the Wi-Fi Switch

        48
  • Data Connections

    49
    • Media Access Control (MAC) Addresses in the Wi-Fi Switch

      49
• Initial Configuration Using the Built-In Web Pages

  51
  • Steps to Configuring the Vivato Wi-Fi Switch

    51
  • Summary of Configuration Web Page Features

    52
  • Default Configuration

    52
  • Configuration Connections

    53
    • Enabling Your Network Adapter to Access the Wi-Fi Switch

      54
      • Using APIPA to Assign a Usable IP Address For Your Client

        54
    • Wired Connection to Access the Configuration Web Page

      56
    • Wireless Configuration Connection

      57
  • Entering the Initial Configuration Information in the Quick Setup Pages

    59
    • Switch Selection

      59
    • Read Password Setup

      60
    • Enable Password Setup

      61
    • Basic Network Setup

      62
    • Basic Security Setup

      63
    • Wireless Options Setup

      64
    • Rebooting the Wi-Fi Switch

      65
    • Where Do I Go From Here?

      65
• Using the Main Configuration Web Pages

  67
  • Navigating the Main Web Page Configuration Screens

    67
    • Status Indicators

      68
  • Home

    69
    • Summary

      69
    • Quick Setup

      70
• Network Configuration Web Pages

  71
  • Network Settings

    71
    • Summary

      71
    • Ethernet Interfaces

      71
    • Wireless Interfaces

      72
      • Configuring the Wireless Interfaces

        73
        • Configuring a Single Interface

          74
        • Configuring the Wireless Interfaces as a Group

          75
    • Bridges

      76
      • Editing an Existing Bridge

        76
      • Creating a New Bridge

        77
    • VLANs

      78
      • Creating a New VLAN

        78
      • Editing an Existing VLAN

        79
    • Routes

      81
• Security Configuration Web Pages

  83
  • Configuring Security

    83
    • Wired Equivalent Privacy (WEP)

      84
    • EAP

      85
      • Adding a New Authentication Server

        85
      • Editing or Deleting an Authentication Server

        86
      • Base Configuration

        86
      • Important Considerations When Using EAP

        87
    • Point to Point Tunneling Protocol (PPTP)

      88
      • Base Configuration

        88
      • Add a PPTP User

        89
      • Add A RADIUS Authentication Server

        89
    • Optimizing Your Wireless Client For Secure Communications

      90
      • Configuring WEP in Your Client

        92
      • Configuring EAP in Your Client

        93
• Monitoring Rogue APs, Clients, and System Operations

  95
  • System Messages

    95
  • SNMP Monitoring

    95
    • Base SNMP Options

      96
    • Create an SNMP Community

      97
    • SNMP Version 3 Configuration Settings

      97
      • Create an SNMP Version 3 Trap Sink

        97
      • Create an SNMP Version 3 User

        98
    • SNMP Version 2 Trap Sinks

      99
    • SNMP Version 1 Traps

      99
  • Rogue Access Point Detection (RAPD) and Notification

    99
  • Associated Clients

    100
• Services, Password, Config, and Firmware Web Pages

  103
  • Summary

    103
  • Services

    104
    • Set System Hostname

      104
    • Reboot System

      104
    • SSH Services Configuration

      104
    • HTTP Services Configuration

      105
  • Password

    105
  • Config

    105
    • Returning to Factory Configuration Defaults

      106
  • Firmware

    107
    • Local Firmware Options

      107
    • Remote Firmware Options

      107
      • Adding a Remote Host to The Firmware Transfer List

        108
      • Removing a Remote Host from the Firmware Transfer List

        108
      • Selecting the Local Image to Transfer

        108
  • Quick Setup

    108
• Diagnostics and Help Web Screens

  109
  • Diagnostics

    109
    • Ping

      109
    • Traceroute

      109
  • Help

    110
• Command Line Interface

  113
  • Command Levels

    113
    • CAUTION - Configuration changes are not saved until you issue the write network fla sh: or write [memory] command. Turning the W...

      113
  • Connections and Terminal Settings

    114
  • Accessing the CLI

    115
    • Accessing the Configuration Level

      116
  • Configuration Example

    117
  • Navigating the CLI

    119
    • Moving the Cursor Around on the Command LIne

      119
    • Using the “?” to Get Online Command Help

      119
    • Using the Tab Key to Complete a Command

      120
    • Command Mode Access and Prompts

      120
    • Command Conventions

      120
      • Entering Commands on the Command LIne

        120
      • Reading the Command LIsting

        121
      • Entering Variables

        121
      • Optional Entries

        121
  • Read Level Command Descriptions

    121
    • enable

      121
    • exit

      121
    • Ping

      121
      • ping <ipaddress|hostname>

        122
      • ping flood <ipaddress|hostname>

        122
      • ping flood

        122
      • ping flood count <1-100000> <ipaddress|hostname>

        122
      • ping count <1-100000> <ipaddress|hostname>

        122
      • ping count <1-100000> flood <ipaddress|hostname>

        122
    • Show Commands

      122
      • show arp

        123
      • show clock

        123
      • show cpu

        123
      • show dhcp-server interface bridge <0-4094>

        123
      • show dhcp-server interface ethernet <0-3>

        123
      • show dhcp-server interface vlan <1-4094>

        123
      • show dhcp-server interface wireless <1-13>

        124
      • show eap

        124
      • show http-server

        124
      • show interfaces

        124
      • show interfaces bridge [0-4094]

        124
      • show interfaces bridge <0-4094> fdb

        125
      • show interfaces bridge <0-4094> stp

        125
      • show interfaces ethernet [0-3]

        125
      • show interfaces vlan [vlan id]

        126
      • show interfaces vlan [vlan id] fdb

        126
      • show interfaces wireless [associations]

        127
      • show interfaces wireless <1-13> [associations]

        128
      • show ip domainname

        128
      • show ip host

        128
      • show ip hostname

        128
      • show ip nameserver

        128
      • show ip route

        128
      • show ip ssh

        129
      • show ip traffic-shaping

        129
      • show logging

        129
      • show memory

        129
      • show pptp

        129
      • show rapd

        129
      • show rapd-full

        130
      • show snmp-server

        130
      • show uptime

        131
      • show version

        131
      • show flash:

        131
      • show running-config

        131
    • traceroute <ipaddress|hostname>

      131
  • Enable Level Command Descriptions

    131
    • configure [terminal]

      132
    • Commands for Managing Configuration Files

      132
      • configure network flash: <filename>

        132
      • copy flash: flash:

        133
      • copy flash: scp:

        133
      • copy scp: flash:

        133
      • copy tftp: flash:

        134
      • delete flash: <filename>

        134
      • dir

        134
      • write [memory]

        134
      • write network fla sh:

        134
      • write network scp:

        134
      • write terminal

        135
    • Configure System (boot system flash:)

      135
    • Configure Clock

      135
      • clock set <hour> <minutes> <seconds> <day> <month> <year>

        135
      • clock timezone

        135
    • Configure Crypto (Generate Keys)

      136
      • crypto key generate <dsa|rsa|rsa1>

        136
    • Configure EAP Commands

      136
      • eap

        137
      • eap auth-threshold <1-60>

        138
      • eap conn-info <text>

        138
      • eap encrypt-threshold <1-10>

        138
      • eap ifname interface <bridge 0-4094|vlan 1-4094>

        138
      • eap max-auth-error <1-10>

        138
      • eap max-encrypt-error <1-10>

        138
      • eap nas <text>

        138
      • eap secret <secret number(1-4)> <secret>

        138
      • eap secret <secret number(1-4)> <ENTER> (prompt) <secret>

        138
      • eap server <RADIUS Server id(1-4)> <ipaddress> <portnum> <timeout> <max retry>

        139
    • Configure No EAP Commands

      139
      • no eap

        139
      • no eap server <RADIUS Server ID (1-4)> <ipaddress> <portnum> <timeout> <max retry>

        139
    • Configure Enable Secret

      139
      • enable secret [<password type (0|5)>] <password text>

        139
    • Configure HTTP-Server

      140
      • http-server

        140
      • http-server redirect

        140
      • no http-server redirect

        140
      • no http-server

        140
    • Configure Interface Commands

      140
      • interface bridge <0-4094>

        140
        • add interface ethernet <0-3>

          141
        • no add interface ethernet <0-3>

          141
        • add interface wireless <1-13>

          141
        • no add interface wireless <1-13>

          141
        • aging-time <10-1000000 seconds>

          141
        • dhcp-server

          141
        • dhcp-server broadcast-address <ip address>

          141
        • no dhcp-server broadcast-address <ip address>

          141
        • dhcp-server domain-name <domain name>

          141
        • no dhcp-server domain-name <domain name>

          141
        • dhcp-server gateway <ip address>

          141
        • no dhcp-server gateway <ip address>

          142
        • dhcp-server ip-pool <start ip address> <end ip address> <netmask>

          142
        • no dhcp-server ip-pool <start ip address> <end ip address> <netmask>

          142
        • dhcp-server lease <1-4294967295>

          142
        • no dhcp-server lease <1-4294967295>

          142
        • dhcp-server name-server <ip address>

          142
        • no dhcp-server name-server <ip address>

          142
        • dhcp-server ntp-server <ip address>

          142
        • no dhcp-server ntp-server <ip address>

          142
        • dhcp-server wins <ip address>

          142
        • no dhcp-server wins <ip address>

          142
        • exit

          143
        • forward-time <4-200 seconds>

          143
        • no forward-time

          143
        • hello-time <1-10 seconds>

          143
        • no hello-time

          143
        • ip address <ipaddress> <netmask> [secondary]

          143
        • ip address dhcp

          143
        • no ip address dhcp

          143
        • ip address dhcp release

          144
        • ip address dhcp renew

          144
        • ip broadcast-address <ipaddress> [secondary]

          144
        • ip routing

          144
        • jail [add mac <mac address>]

          144
        • no jail [add mac <mac address>]

          144
        • max-age <6-200 seconds>

          144
        • no max-age

          144
        • path-cost interface <ethernet 0-3|wirless 1-13> <0-65535>

          145
        • port-priority <ethernet 0-3|wirless 1-13> <0-255>

          145
        • priority <0-65535>

          145
        • shutdown

          145
        • no shutdown

          145
        • stp

          145
        • no stp

          145
        • show <text>

          145
        • shutdown

          145
        • source-nat interface <bridge <0-4094>|ethernet <0-3>|vlan <1-4094>|wireless <1-13>>

          146
      • interface ethernet <0-3>

        146
        • DHCP Operation

          146
        • exit

          146
        • ip address <ipaddress> <netmask>

          146
        • ip broadcast-address <ipaddress> [secondary]

          146
        • ip address dhcp

          146
        • no ip address dhcp

          146
        • ip address dhcp renew

          147
        • ip address dhcp release

          147
        • ip routing

          147
        • jail [add mac <mac address>]

          147
        • show <text>

          147
        • shutdown

          147
        • no shutdown

          147
        • source-nat interface <bridge <0-4094>|ethernet <0-3>|vlan <1-4094>|wireless <1-13>>

          147
      • interface vlan <vlan id>

        147
        • add interface ethernet <0-3>

          148
        • no add interface ethernet <0-3>

          148
        • add interface wireless <1-13>

          148
        • no add interface wireless <1-13>

          148
        • add mac <mac address>

          148
        • no add mac <mac address>

          148
        • aging-time <10-1000000>

          148
        • default

          148
        • no default

          148
        • DHCP Operation

          148
        • exit

          148
        • forward-time <4-200 seconds>

          149
        • no forward-time

          149
        • hello-time <1-10 seconds>

          149
        • no hello-time

          149
        • ip address <ipaddress> <netmask>

          149
        • ip address <ipaddress> <netmask> secondary

          149
        • no ip address secondary

          149
        • ip broadcast-address <ipaddress> [secondary]

          149
        • no ip broadcast-address [secondary]

          149
        • ip address dhcp

          150
        • no ip address dhcp

          150
        • ip address dhcp renew

          150
        • ip address dhcp release

          150
        • ip routing

          150
        • jail [add mac <mac address>]

          150
        • max-age <6-200 seconds>

          150
        • no max-age

          150
        • path-cost interface <ethernet 0-3|wirless 1-13> <0-65535>

          151
        • port-priority <ethernet 0-3|wirless 1-13> <0-255>

          151
        • priority <0-65535>

          151
        • shutdown

          151
        • no shutdown

          151
        • source-nat interface <bridge <0-4094>|ethernet <0-3>|vlan <1-4094>|wireless <1-13>>

          151
      • interface wireless <1-13|all>

        151
        • channel <1-11>

          152
        • DHCP Operation

          152
        • disable beacon-essid

          153
        • no disable beacon-essid

          153
        • essid <text>

          153
        • exit

          153
        • ip address <ipaddress> <netmask>

          153
        • ip address <ipaddress> <netmask> secondary

          153
        • no ipaddress <ipaddress> <netmask>

          153
        • ip address dhcp

          153
        • no ip address dhcp

          153
        • ip address dhcp renew

          154
        • ip address dhcp release

          154
        • ip broadcast <ipaddress> [secondary]

          154
        • no ip broadcast-address [secondary]

          154
        • ip routing

          154
        • jail [add mac <mac address>]

          154
        • key <value> <1-4>

          154
        • sensitivity <1-5>

          154
        • shutdown

          155
        • no shutdown

          155
        • no wep

          155
        • show <text>

          155
        • shutdown

          155
        • source-nat interface <bridge <0-4094>|ethernet <0-3>|vlan <1-4094>|wireless <1-13>>

          155
        • wds <port (1-6)>

          155
        • wds <port (1-6)> <mac>

          155
        • wep <1-4>

          155
    • Configure No Interface Commands

      156
      • no interface bridge <0-4094>

        156
      • no interface vlan <1-4094>

        156
    • Configure IP Command

      156
      • ip domainname <text>

        156
      • ip host <hostname> [ipaddress]

        156
      • ip hostname <hostname>

        156
      • ip name-server <ipaddress>

        156
      • ip route <destination prefix> <destination mask> <forwarding router address>

        156
      • ip routing

        157
      • ip ssh genkey

        157
      • ip ssh server

        157
      • ip traffic-shaping sfq

        157
    • Configure Log Commands

      157
      • logging local

        157
      • logging remote <ipaddress|hostname>

        157
      • no logging local

        157
      • no logging remote

        157
    • Configure PPTP Commands

      158
      • pptp

        158
      • pptp auth <pap|chap|mschap|mschap-v2|radius>

        158
      • pptp chap-secrets <username> <password>

        158
      • pptp encryption <mppe-40|mppe-128>

        158
      • pptp listen <ipaddress>

        158
      • pptp localip <ipaddress>

        158
      • pptp msdns <ipaddress> [secondary]

        159
      • pp tp mswins <ipaddress> [secondary]

        159
      • pptp pap-secrets <username> <password>

        159
      • pptp radius-authserver <ipaddress|servername> <port number> <secret>

        159
      • pptp radius-authserver <ipaddress|servername> <port number> <ENTER> (prompt) <secret>

        159
      • pptp remoteip start <start ip address> end <2-254>

        159
    • Configure No PPTP Commands

      159
      • no pptp

        160
      • no pptp auth <pap|chap|mschap-v2|radius>

        160
      • no pptp chap-secrets <username> <password>

        160
      • no pptp encryption <mppe-40|mppe-128>

        160
      • no pptp listen <ipaddress>

        160
      • no pptp localip <ipaddress>

        160
      • no pptp msdns <ipaddress>

        160
      • no pp tp mswins <ipaddress> [secondary]

        160
      • no pptp pap-secrets <username> <password>

        160
      • no pptp radius-authserver <ipaddress> <port number> <secret>

        160
      • no pptp radius-authserver <server name> <port number> <secret>

        161
      • no pptp remoteip <ipaddress>

        161
    • Configure RAPD

      161
      • rapd

        161
      • no rapd

        161
    • Configure SNMP-Server Commands

      161
      • snmp-server

        161
      • snmp-server community <community name> RO|RW [<source ip address>]

        161
      • snmp-server contact <text>

        161
      • snmp-server engineID <engine identifier>

        161
      • snmp-server host <hostname|ipaddress> traps version 1 <community name>

        162
      • snmp-server host <hostname|ipaddress> traps|informs version 2c <community name>

        162
      • snmp-server host <hostname|ipaddress> traps|informs version 3 user <username> [auth MD5|SHA <password> [priv DES <password>]]

        162
      • snmp-server location <text>

        162
      • snmp-server name <text>

        162
      • snmp-server user <username> [auth MD5|SHA <password> [priv DES [<password>]]]

        162
    • Configure No SNMP-Server Commands

      163
      • no snmp-server

        163
      • no snmp-server community <community name>

        163
      • no snmp-server contact

        163
      • no snmp-server engineID

        163
      • no snmp-server host <hostname|ipaddress> traps|informs version <1|2c|3>

        163
      • no snmp-server location

        164
      • no snmp-server name

        164
      • no snmp-server user <username> [auth MD5|SHA <password> [priv DES <password>]]

        164
    • Configure Username Admin (Read Level) Secret

      164
      • username admin secret [<password type (0|5)> <password text>

        164
    • Configure Vivato Packet Shaping

      164
      • vps

        164
      • no vps

        164
    • disable

      164
    • edit flash:

      165
    • exit

      165
    • no <configuration command>

      165
    • reboot

      165
      • CAUTION - Any changes made to the configuration that have not been saved are lost when this command is issued.

        165
• Verifying Wi-Fi Operation

  167
  • Verification Process

    167
    • Wireless Client Does Not “Find” the Vivato Wi-Fi Switch

      169
      • Variations in Client Performance Due to Physical Orientation

        169
    • Wireless Client Can’t Access Wi-Fi Switch Configuration Web Page

      170
    • Wireless Client Cannot Access the Local Wired Network

      171
    • Wireless Client Cannot Access an Outside Network

      171
    • Unauthorized Clients Are Able to Associate With The Wi-Fi Switch

      171
• Network Monitoring

  173
  • SNMP Operations

    173
    • Supported MIBs

      174
      • 80211-MIB.txt

        174
      • RFC1213-MIB.txt

        175
      • RFC1493-MIB.txt

        175
      • VIVATO-EXP-MIB.txt

        175
      • SNMPv2-MIB.txt

        175
    • Enabling SNMP Operation

      176
• Wi-Fi Switch Firmware Updates

  179
  • Firmware Update Process Using the Command Line Interface

    179
    • Firmware Update Example

      180
• Point to Point Tunneling Protocol (PPTP) Operation

  181
  • PPTP Configuration

    181
    • Creating a Bridge Using a VLAN

      181
    • Specifying a Secondary IP Address for the Default Bridge

      182
    • Example Configuration

      182
    • Configuring PPTP in Clients

      183
• Index

  185
  • A

    185
  • B

    185
  • C

    185
  • D

    185
  • E

    186
  • F

    186
  • G

    186
  • H

    186
  • I

    186
  • L

    186
  • M

    186
  • N

    186
  • O

    186
  • P

    186
  • Q

    187
  • R

    187
  • S

    187
  • T

    187
  • U

    187
  • V

    187
  • W

    187