Motorola AP-7131 - Wireless Access Point Specifikace

AP-7131 Access Point Product Reference Guide

AP-7131 Access Point Product Reference GuidexDisplaying Rogue AP Details . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6-60Using

AP-7131 Access Point Product Reference Guide4-182. Copy the content of the CA Certificate message (using a text editor such as notepad) and click on P

System Configuration4-19To create a self certificate:1. Select System Configuration -> Certificate Mgmt -> Self Certificates from the access poi

AP-7131 Access Point Product Reference Guide4-204. When the form is completed, click the Generate button.The Certificate Request screen disappears and

System Configuration4-21The generated certificate request displays in Self Certificates screen text box.6. Click the Copy to Clipboard button.The cont

AP-7131 Access Point Product Reference Guide4-228. To use the certificate for a VPN tunnel, first define a tunnel and select the IKE settings to use e

System Configuration4-23Subject (required) The required Subject value contains important information about the certificate. Contact the CA signing the

AP-7131 Access Point Product Reference Guide4-244. Complete as many of the optional values within the Certificate Request screen as possible.5. When t

System Configuration4-2515. Load the certificates on the access point.16. Open the certificate file and copy its contents into the CA Certificates scr

AP-7131 Access Point Product Reference Guide4-26Use the table below to locate the MIB where the given feature can be configured.Feature MIB Feature M

System Configuration4-27SNMP allows a network administrator to manage network performance, find and solve network problems, and plan for network growt

xiNetwork LAN, DHCP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8-28Network Type Filter Commands. . . . . . . . . . . . . .

AP-7131 Access Point Product Reference Guide4-28SNMP v1/v2c community definitions allow read-only or read/write access to access point management info

System Configuration4-293. Configure the SNMP v3 User Definitions field (if SNMP v3 is used) to add and configure SNMP v3 user definitions.SNMP v3 use

AP-7131 Access Point Product Reference Guide4-304. Specify the users who can read and optionally modify the SNMP-capable client.5. If configuring SNMP

System Configuration4-317. Click Undo Changes (if necessary) to undo any changes made. Undo Changes reverts the settings displayed on the SNMP Access

AP-7131 Access Point Product Reference Guide4-324.6.1 Configuring SNMP Access ControlUse the SNMP Access Control screen (as launched from the SNMP Acc

System Configuration4-334.6.2 Enabling SNMP TrapsSNMP provides the ability to send traps to notify the administrator that trap conditions are met. Tra

AP-7131 Access Point Product Reference Guide4-341. Select System Configuration - > SNMP Access - > SNMP Trap Configuration from the access point

System Configuration4-353. Configure the SNMP v3 Trap Configuration field (if SNMP v3 Traps are used) to modify the following:4. Click Apply to save a

AP-7131 Access Point Product Reference Guide4-365. Click Undo Changes (if necessary) to undo any changes made. Undo Changes reverts the settings displ

System Configuration4-372. Configure the MU Traps field to generate traps for MU associations, MU association denials and MU authentication denials. W

AP-7131 Access Point Product Reference GuidexiiChapter 9. Configuring Mesh NetworkingMesh Networking Overview . . . . . . . . . . . . . . . . . . . .

AP-7131 Access Point Product Reference Guide4-385. Configure the System Traps field to generate traps when the access point re-initializes during tran

System Configuration4-397. Click Undo Changes (if necessary) to undo any changes made. Undo Changes reverts the settings displayed on SNMP Traps scree

AP-7131 Access Point Product Reference Guide4-403. Configure the Minimum Packets field to define a minimum packet throughput value for trap generation

System Configuration4-416. Click Logout to securely exit the access point Access Point applet. A prompt displays confirming the logout before the appl

AP-7131 Access Point Product Reference Guide4-422. From within the Current Time field, click the Refresh button to update the time since the screen wa

System Configuration4-435. If using an NTP server to supply system time to the access point, configure the NTP Server Configuration field to define th

AP-7131 Access Point Product Reference Guide4-448. Click Logout to securely exit the access point Access Point applet. A prompt displays confirming th

System Configuration4-453. Click Apply to save any changes to the Logging Configuration screen. Navigating away from the screen without clicking the A

AP-7131 Access Point Product Reference Guide4-464. Click Undo Changes (if necessary) to undo any changes made. Undo Changes reverts the settings displ

System Configuration4-47To create an importable/exportable access point configuration file:1. Select System Configuration - > Config Import/Export

xiiiConfiguration Updates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .10-6Securing Data Tunnels between the S

AP-7131 Access Point Product Reference Guide4-483. Configure the HTTP Import/Export field to import/export access point configuration settings using H

System Configuration4-494. Refer to the Status field to assess the completion of the import/export operation. CAUTION For HTTP downloads (exports) to

AP-7131 Access Point Product Reference Guide4-505. Click Apply to save the filename and Server IP information. The Apply button does not execute the i

System Configuration4-51than the name of the file previously loaded on the access point or when the file version (on the server) is different than the

AP-7131 Access Point Product Reference Guide4-52If a firmware update is required, use the Firmware Update screen to specify a filename and define a fi

System Configuration4-533. Configure the DHCP Options checkboxes to enable/disable automatic firmware and/or configuration file updates.DHCP options a

AP-7131 Access Point Product Reference Guide4-54 If updating the access point manually, configure the Update Firmware fields as required to set a file

System Configuration4-555. If the target firmware file resides within a directory, specify a complete path for the file within the Filepath(optional)

AP-7131 Access Point Product Reference Guide4-56FAIL: user interruptedFAIL: no valid interface foundFAIL: conflict ip addressFAIL: command exchange ti

Network ManagementRefer to the following for network management configuration activities supported by the access point user interface:• Configuring th

AP-7131 Access Point Product Reference GuidexivEmbedded Options - Using Option 43 . . . . . . . . . . . . . . . . . . . . . . . . . . . .B-2Global Opt

AP-7131 Access Point Product Reference Guide5-2For information on locating the access point’s MAC addresses, see Viewing WAN Statistics on page 7-2 an

Network Management5-33. Refer to the LAN Ethernet Timeout field to define how LAN Ethernet inactivity is processed by the access point.Use the Etherne

AP-7131 Access Point Product Reference Guide5-4The access point only supports 802.1x authentication over its LAN port. The access point behaves as an

Network Management5-57. Click Undo Changes (if necessary) to undo any changes made. Undo Changes reverts the settings displayed on the LAN configurati

AP-7131 Access Point Product Reference Guide5-6If it is not in the database, it simply uses a default VLAN assignment. The VLAN assignment is sent to

Network Management5-7To create a new VLAN, click the Add button, to edit the properties of an existing VLAN, click the Edit button.4. Assign a unique

AP-7131 Access Point Product Reference Guide5-88. Enter a Management VLAN Tag for LAN1 and LAN2.The Management VLAN uses a default tag value of 1. The

Network Management5-9frame arrives on the access point, it queries the VMPS for the VLAN assignment based on the source MAC address of the arriving fr

AP-7131 Access Point Product Reference Guide5-102. Configure the DHCP Configuration field to define the DHCP settings used for the LAN.NOTE Motorola r

Network Management5-11This interface is a BOOTP ClientSelect this button to enable BOOTP to set access point network address information via this LAN1

About This GuideIntroductionThis guide provides configuration and setup information for the AP-7131 model access point Document ConventionsThe followi

AP-7131 Access Point Product Reference Guide5-123. Click Apply to save any changes to the LAN1 or LAN2 screen. Navigating away from the screen without

Network Management5-13To generate a list of client MAC address to IP address mappings for the access point:1. Select Network Configuration -> LAN -

AP-7131 Access Point Product Reference Guide5-146. Click OK to return to the LAN1 or LAN2 page, where the updated settings within the Advanced DHCP Se

Network Management5-152. Use the all ethernet types, except drop-down menu to designate whether the Ethernet Types defined for the LAN are allowed or

AP-7131 Access Point Product Reference Guide5-16Packet types supported for the type filtering function include 16-bit DIX Ethernet types as well as Mo

Network Management5-172. Refer to the WAN IP Configuration field to enable the WAN interface, and set network address information for the WAN connecti

AP-7131 Access Point Product Reference Guide5-18This interface is a DHCP ClientThis checkbox enables DHCP for the access point WAN connection. This is

Network Management5-193. Use the Port Settings field to define how the access point manages throughput over the WAN port.More IP Addresses Click the M

AP-7131 Access Point Product Reference Guide5-204. Configure the PPP over Ethernet field to enable high speed dial-up connections to the access point

Network Management5-215. Click Apply to save any changes to the WAN screen. Navigating away from the screen without clicking the Apply button results

AP-7131 Access Point Product Reference GuidexviiNotational ConventionsThe following notational conventions are used in this document:• Italics are use

AP-7131 Access Point Product Reference Guide5-225.2.1 Configuring Network Address Translation (NAT) SettingsNetwork Address Translation (NAT) converts

Network Management5-232. Configure the Address Mappings field to generate a WAN IP address, define the NAT type and set outbound/inbound NAT mappings.

AP-7131 Access Point Product Reference Guide5-243. Click Apply to save any changes to the NAT screen. Navigating away from the screen without clicking

Network Management5-254. Configure the Port Forwarding screen to modify the following:Add Click Add to create a local map that includes the name, tran

AP-7131 Access Point Product Reference Guide5-265. Click OK to return to the NAT screen. Within the NAT screen, click Apply to save any changes made o

Network Management5-272. Select the Enable checkbox to allow domain name information to be updated when the IP address associated with that domain cha

AP-7131 Access Point Product Reference Guide5-287. Once the DynDNS configuration has been updated, click the Show Update Response button to open a sub

Network Management5-29If a WLAN is defined, that WLAN displays within the Wireless Configuration screen. When the access point is first booted, WLAN1

AP-7131 Access Point Product Reference Guide5-303. Click the Create button (if necessary) to launch the New WLAN screen. Use the New WLAN screen to de

Network Management5-315.3.1 Creating/Editing Individual WLANsIf the WLANs displayed within the Wireless Configuration screen do not satisfy your netwo

IntroductionAs a standalone access point, the AP-7131 provides small and medium-sized businesses with a consolidated wired and wireless networking inf

AP-7131 Access Point Product Reference Guide5-323. Set the parameters in the Configuration field as required for the WLAN.ESSID Enter the Extended Ser

Network Management5-33Name Define or revise the name for the WLAN. The name should be logical representation of WLAN coverage area (engineering, marke

AP-7131 Access Point Product Reference Guide5-344. Configure the Security field as required to set the data protection requirements for the WLAN. Enab

Network Management5-355. Configure the Advanced field as required to set MU interoperability permissions, secure beacon transmissions, broadcast ESSID

AP-7131 Access Point Product Reference Guide5-366. Click Apply to save any changes to the WLAN screen. Navigating away from the screen without clickin

Network Management5-37Configuring a WLAN security scheme with a discussion of all the authentication and encryption options available is beyond the sc

AP-7131 Access Point Product Reference Guide5-385.3.1.2 Configuring a WLAN Access Control List (ACL)An Access Control List (ACL) affords a system admi

Network Management5-392. Click the Create button to configure a new ACL policy, or select a policy and click the Edit button to modify an existing ACL

AP-7131 Access Point Product Reference Guide5-40Either the New MU ACL Policy or Edit MU ACL Policy screens display.3. Assign a name to the new or edit

Network Management5-415. Click Apply to save any changes to the New MU ACL Policy or Edit MU ACL Policy screen and return to the Mobile Unit Access Co

AP-7131 Access Point Product Reference Guide1-21.1 Feature OverviewAn AP-7131 access point supports the following feature set:• 802.11n Support• WIPS

AP-7131 Access Point Product Reference Guide5-422. Click the Create button to configure a new QoS policy, or select a policy and click the Edit button

Network Management5-433. Assign a name to the new or edited QoS policy that makes sense to the access point traffic receiving priority. More than one

AP-7131 Access Point Product Reference Guide5-445. Use the two Multicast Address fields to specify one or two MAC addresses to be used for multicast a

Network Management5-45 8. Configure the CW min and CW max (contention windows), AIFSN (Arbitrary Inter-Frame Space Number) and TXOPs Time (opportunity

AP-7131 Access Point Product Reference Guide5-469. Click Apply to save any changes to the New QoS Policy or Edit QoS Policy screen to return to the Qu

Network Management5-475.3.1.4 Configuring WLAN Hotspot SupportThe access point enables hotspot operators to provide user authentication and accounting

AP-7131 Access Point Product Reference Guide5-483. Refer to the HTTP Redirection field to specify how the Login, Welcome, and Fail pages are maintaine

Network Management5-494. Use the External URL field to specify the location of the login page, welcome page and fail page used for hotspot access. Def

AP-7131 Access Point Product Reference Guide5-506. Click the White List Entries button (within the WhiteList Configuration field) to create a set of a

Network Management5-518. Refer to the Radius Configuration field to define a primary and secondary Radius server port and shared secret password.9. Cl

Introduction1-3• On-board Radius Server Authentication• Hotspot Support• Routing Information Protocol (RIP)• Manual Date and Time Settings• Dynamic DN

AP-7131 Access Point Product Reference Guide5-52When a client requests a URL from a Web server, the login handler returns an HTTP redirection status c

Network Management5-535.3.2 Setting the WLAN’s Radio ConfigurationEach access point WLAN can have a separate 802.11a/n or 802.11b/g/n radio configured

AP-7131 Access Point Product Reference Guide5-542. Enable the radio(s) using the Enable checkbox(es).Review the Radio Function to assess if this radio

Network Management5-554. If the Base Bridge checkbox has been selected, use the Max# Client Bridges parameter to define the client bridge load on a pa

AP-7131 Access Point Product Reference Guide5-56Once the settings within the Radio Configuration screen are applied (for an initial deployment), the c

Network Management5-57For a detailed overview on mesh networking and how to configure the radio for mesh networking support, see Configuring Mesh Netw

AP-7131 Access Point Product Reference Guide5-582. Configure the Properties field to assign a name and placement designation for the radio.Placement U

Network Management5-593. Configure the Channel, Power and Rate Settings field to assign a channel, antenna diversity setting, radio transmit power lev

AP-7131 Access Point Product Reference Guide5-60Channel Width Select the Channel Width (MHz) from the drop-down menu. The AP radio can support 20 and

Network Management5-61Set Rates Click the Set Rates button to define minimum and maximum data transmit rates for the radio. Use the Basic Rates drop-d

MOTOROLA and the Stylized M Logo are registered in the US Patent & Trademark Office. Symbol is a registered trademark of Symbol Technologies, Inc.

AP-7131 Access Point Product Reference Guide1-41.1.3 Power Setting ConfigurationThe AP-7131 power setting feature enables the user to select one of tw

AP-7131 Access Point Product Reference Guide5-624. Configure the Performance field to set the preamble, thresholds values and QoS values for the radio

Network Management5-63Support Short PreambleThe preamble is approximately 8 bytes of packet header generated by the access point and attached to a pac

AP-7131 Access Point Product Reference Guide5-64Set Aggregation Select the Enable Transmit A-MSDU checkbox (within theA-MSDU Aggregation field) to all

Network Management5-655. Refer to the Beacon Settings field to set the radio beacon and DTIM intervals.Beacon Interval The beacon interval controls th

AP-7131 Access Point Product Reference Guide5-666. Refer to the QBSS Load Element Settings field to determine whether channel usage data is transmitte

Network Management5-67be defined from within the WLANs assigned to BSSID groups 1 through 4. Each BSSID beacons only on the primary WLAN. The user sho

AP-7131 Access Point Product Reference Guide5-6811. Click Logout to securely exit the Access Point applet. A prompt displays confirming the logout bef

Network Management5-692. Select either the Radio 1(802.11b/g/n) or Radio 2(802.11a/n) tab to display the WLANs enabled for the selected radio and thei

AP-7131 Access Point Product Reference Guide5-705. Click Apply to save any changes to the Bandwidth Management screen. Navigating away from the screen

Network Management5-71The following is a network topology illustrating how WIPS functions within an AP-7131 supported wireless network:To define the a

Introduction1-5For detailed information on configuring the LAN port, see Configuring the LAN Interface on page 5-1. A Wide Area Network (WAN) is a wi

AP-7131 Access Point Product Reference Guide5-72The Wireless Intrusion Prevention System screen displays.2. Within the WIPS Status field, define wheth

Network Management5-734. Click Apply to save any changes to the WIPS screen. Navigating away from the screen without clicking Apply results in all cha

AP-7131 Access Point Product Reference Guide5-74The access point Router Table field displays a list of connected routes between an enabled subnet and

Network Management5-755.5.1 Setting the RIP ConfigurationTo set the RIP configuration:1. From within the RIP Configuration field, select the RIP Type

AP-7131 Access Point Product Reference Guide5-763. If RIP v2 or RIP v2 (v1 compat) is the selected RIP type, the RIP v2 Authentication field becomes a

Network Management5-775. If the MD5 authentication method is selected, fill in the Key #1 field (Key #2 is optional). Enter any numeric value between

AP-7131 Access Point Product Reference Guide5-78

Configuring Access Point SecuritySecurity measures for the access point and its WLANs are critical. Use the available access point security options to

AP-7131 Access Point Product Reference Guide6-26.1 Configuring Security OptionsTo configure the data protection options available on the access point,

Configuring Access Point Security6-36.2 Setting PasswordsBefore setting the access point security parameters, verify an administrative password for th

AP-7131 Access Point Product Reference Guide1-6To enable and configure WLANs on an access point radio, see Enabling Wireless LANs (WLANs) on page 5-28

AP-7131 Access Point Product Reference Guide6-45. Enter the previous password and the new admin password in the two fields provided. Click the Apply b

Configuring Access Point Security6-56.3 Enabling Authentication and Encryption Schemes To complement the built-in firewall filters on the WAN side of

AP-7131 Access Point Product Reference Guide6-6However, selecting any other authetnication or encryption checkbox displays a configuration field for t

Configuring Access Point Security6-76. Click Apply to keep changes made within the New Security Policy screen (if any). Configure encryption or authen

AP-7131 Access Point Product Reference Guide6-87. Click Cancel to return to the target WLAN screen without keeping any of the changes made within the

Configuring Access Point Security6-94. Ensure the Name of the security policy entered suits the intended configuration or function of the policy.5. Se

AP-7131 Access Point Product Reference Guide6-106. Click the Apply button to return to the WLAN screen to save any changes made within the Kerberos Co

Configuring Access Point Security6-11by clicking the Edit button. To configure a new security policy supporting 802.1x EAP, continue to step 2.2. Clic

AP-7131 Access Point Product Reference Guide6-126. Configure the Server Settings field as required to define address information for the authenticatio

Configuring Access Point Security6-137. Select the Accounting tab as required to define a timeout period and retry interval Syslog for MUs interoperat

Introduction1-7For detailed information on configuring QoS support, see Setting the WLAN Quality of Service (QoS) Policy on page 5-41. 1.1.12 Industry

AP-7131 Access Point Product Reference Guide6-149. Select the Advanced Settings tab as required to specify a MU quiet period, timeout interval, transm

Configuring Access Point Security6-156.6 Configuring WEP EncryptionWired Equivalent Privacy (WEP) is a security protocol specified in the IEEE Wireles

AP-7131 Access Point Product Reference Guide6-165. Configure the WEP 64 Settings or WEP 128 Settings field as required to define the Pass Key used to

Configuring Access Point Security6-17Default (hexadecimal) keys for WEP 128 include:6. Click the Apply button to save any changes made within the WEP

AP-7131 Access Point Product Reference Guide6-183. Select the KeyGuard radio button.The KeyGuard Settings field displays within the New Security Polic

Configuring Access Point Security6-19Default (hexadecimal) keys for KeyGuard include: 6. Select the Allow WEP128 Clients checkbox (from within the Key

AP-7131 Access Point Product Reference Guide6-20If security policies supporting WPA-TKIP exist, they appear within the Security Configuration screen.

Configuring Access Point Security6-216. Configure the Key Settings area as needed to set an ASCII Passphrase and key values.Default (hexadecimal) 256-

AP-7131 Access Point Product Reference Guide6-228. Configure the Fast Roaming (802.1x only) field as required to enable additional access point roamin

Configuring Access Point Security6-23by clicking the Edit button. To configure a new security policy supporting WPA2-CCMP, continue to step 2.2. Click

AP-7131 Access Point Product Reference Guide1-8(specified in RFC 1510) to authenticate users/clients in a wireless network environment and to securely

AP-7131 Access Point Product Reference Guide6-246. Configure the Key Settings area as needed to set an ASCII Passphrase and 128-bit key.Default (hexad

Configuring Access Point Security6-258. Configure the Fast Roaming (802.1x only) field as required to enable additional access point roaming and key c

AP-7131 Access Point Product Reference Guide6-26in order to reduce processor overhead. Use the WLAN Security screens (WEP, Kerberos etc.) as required

Configuring Access Point Security6-274. Refer to the Configurable Firewall Filters field to set the following firewall filters:5. Click Apply to save

AP-7131 Access Point Product Reference Guide6-287. Click Logout to securely exit the Access Point applet. A prompt displays confirming the logout befo

Configuring Access Point Security6-293. Configure the Rules field as required to allow or deny access to selected (enabled) protocols.Allow or Deny al

AP-7131 Access Point Product Reference Guide6-30Pre configured Rules The following protocols are preconfigured with the access point. To enable a prot

Configuring Access Point Security6-314. Click Apply to save any changes to the Subnet Access screen. Navigating away from the screen without clicking

AP-7131 Access Point Product Reference Guide6-32between two end points. ESP can also be used in tunnel mode, providing security like that of a Virtual

Configuring Access Point Security6-332. Configure the Settings field as needed to override the settings in the Subnet Access screen and import firewal

Introduction1-9formulas called algorithms, before the information is transmitted. An algorithm is a set of instructions or formula for scrambling the

AP-7131 Access Point Product Reference Guide6-344. Click Apply to save any changes to the Advanced Subnet Access screen. Navigating away from the scre

Configuring Access Point Security6-35Use the VPN screen to add and remove VPN tunnels. To configure an existing VPN tunnel, select it from the list in

AP-7131 Access Point Product Reference Guide6-36If access point #1 has the following values:• WAN IP address: 20.1.1.2• LAN IP address: 10.1.1.1• Subn

Configuring Access Point Security6-37Interface name Use the drop-down menu to specify the LAN1, LAN2 or WAN connection used for routing VPN traffic. R

AP-7131 Access Point Product Reference Guide6-384. Click Apply to save any changes to the VPN screen as well as changes made to the Auto Key Settings,

Configuring Access Point Security6-393. Configure the Manual Key Settings screen to modify the following:NOTE When entering Inbound or Outbound encryp

AP-7131 Access Point Product Reference Guide6-40AH Authentication AH provides data authentication and anti-replay services for the VPN tunnel. Select

Configuring Access Point Security6-41ESP Encryption Algorithm Select the encryption and authentication algorithms for the VPN tunnel using the drop-do

AP-7131 Access Point Product Reference Guide6-42The Inbound and Outbound SPI settings are required to be interpolated to function correctly. For examp

Configuring Access Point Security6-433. Configure the Auto Key Settings screen to modify the following:Use Perfect Forward SecrecyForward secrecy is a

AP-7131 Access Point Product Reference Guide1-10• a message integrity check • an extended initialization vector with sequencing rules • a re-keying me

AP-7131 Access Point Product Reference Guide6-444. Click Ok to return to the VPN screen. Click Apply to retain the settings made on the Auto Key Setti

Configuring Access Point Security6-456.11.3 Configuring IKE Key SettingsThe Internet Key Exchange (IKE) is an IPsec standard protocol used to ensure s

AP-7131 Access Point Product Reference Guide6-46Operation Mode The Phase I protocols of IKE are based on the ISAKMP identity-protection and aggressive

Configuring Access Point Security6-47IKE Authentication Mode Select the appropriate IKE authentication mode:• Pre-Shared Key (PSK) - Specify an authen

AP-7131 Access Point Product Reference Guide6-484. Click Ok to return to the VPN screen. Click Apply to retain the settings made on the IKE Settings s

Configuring Access Point Security6-492. Reference the Security Associations field to view the following: Tunnel Name The Tunnel Name column lists the

AP-7131 Access Point Product Reference Guide6-503. Click the Reset VPNs button to reset active VPNs. Selecting Reset VPNs forces renegotiation of all

Configuring Access Point Security6-51To configure content filtering for the access point: 1. Select Network Configuration -> WAN -> Content Filt

AP-7131 Access Point Product Reference Guide6-523. Configure the SMTP field to disable or restrict specific kinds of network mail traffic.4. Configure

Configuring Access Point Security6-535. Click Apply to save any changes to the Content Filtering screen. Navigating away from the screen without click

Introduction1-11network; however, because the data travels through the public network, it needs several layers of security. The access point can funct

AP-7131 Access Point Product Reference Guide6-54The rogue detection interval is used in conjunction with Motorola MUs that identify themselves as rogu

Configuring Access Point Security6-552. Configure the Detection Method field to set the detection method (MU or access point) and define the 802.11a/n

AP-7131 Access Point Product Reference Guide6-563. Use the Allowed AP List field to restrict Motorola AP’s from Rogue AP detection and create a list o

Configuring Access Point Security6-574. Click Apply to save any changes to the Rogue AP Detection screen. Navigating away from the screen without clic

AP-7131 Access Point Product Reference Guide6-58The Active APs screen displays with detected rogue devices displayed within the Rogue APs table.2. Ent

Configuring Access Point Security6-596. Highlight a rogue AP and click the Details button to display a screen with device and detection information sp

AP-7131 Access Point Product Reference Guide6-603. Refer to the Rogue AP Detail field for the following information:4. Refer to the Rogue Detector Det

Configuring Access Point Security6-615. Click OK to securely exit the Detail screen and return to the Active APs screen.6. Click Cancel (if necessary)

AP-7131 Access Point Product Reference Guide6-622. Highlight an MU from within the Rogue AP enabled MUs field and click the scan button.The target MU

Configuring Access Point Security6-635. Highlight a different MU from the Rogue AP enabled MUs field as needed to scan for additional rogue APs.6. Cli

AP-7131 Access Point Product Reference Guide1-12• Command Line Interface (CLI) accessed via RS-232 or Telnet. Use the access point’s DB-9 serial port

AP-7131 Access Point Product Reference Guide6-642. From within the Data Source Configuration field, use the Data Source drop-down menu to select the d

Configuring Access Point Security6-65Default Authentication TypeSpecify a PEAP and/or TTLS Authentication Type for EAP to use from the drop-down menu

AP-7131 Access Point Product Reference Guide6-664. Use the Radius Client Authentication table to configure multiple shared secrets based on the subnet

Configuring Access Point Security6-672. Enter the appropriate information within the LDAP Configuration field to allow the access point to interoperat

AP-7131 Access Point Product Reference Guide6-683. Click Apply to save any changes to the LDAP screen. Navigating away from the screen without clickin

Configuring Access Point Security6-696.14.3 Configuring a Proxy Radius ServerThe access point has the capability to proxy authentication requests to a

AP-7131 Access Point Product Reference Guide6-702. Refer to the Proxy Configuration field to define the proxy server’s retry count and timeout values.

Configuring Access Point Security6-714. To remove a row, select the row and click the Del (Delete) button.5. Click Apply to save any changes to the Pr

AP-7131 Access Point Product Reference Guide6-72Refer to the Groups field for a list of all groups in the local Radius database. The groups are listed

Configuring Access Point Security6-737. Click the List of Groups cell. A new screen displays enabling you to associate groups with the user. For more

Introduction1-13Ethernet infrastructure. This often required an electrical contractor to install power drops at each access point location. An approve

AP-7131 Access Point Product Reference Guide6-743. To add the user to a group, select the group in the Available list (on the right) and click the <

Configuring Access Point Security6-756.14.5 Defining User Access Permissions by GroupAn external AAA server maintains the users and groups database us

AP-7131 Access Point Product Reference Guide6-76The Access Policy screen displays the following fields: Groups The Groups field displays the names of

Configuring Access Point Security6-772. Review the existing access intervals assigned to each group by selecting the group from amongst those displaye

AP-7131 Access Point Product Reference Guide6-784. Define up to 10 access policies for the selected group within the Time Based Access Policy field.Us

Configuring Access Point Security6-795. Refer to the WLANs field to select existing WLANs to apply to the selected group’s set of access permissions.

AP-7131 Access Point Product Reference Guide6-80

Monitoring StatisticsThe access point has functionality to display robust transmit and receive statistics for its WAN and LAN port. Wireless Local Are

AP-7131 Access Point Product Reference Guide7-2See the following sections for more details on viewing statistics for the access point:• Viewing WAN St

Monitoring Statistics7-32. Refer to the Information field to reference the following access point WAN data:Status The Status field displays Enabled if

AP-7131 Access PointProduct Reference Guide72E-124686-01Revision AMay 2009

AP-7131 Access Point Product Reference Guide1-141.1.20 Support for CAM and PSP MUsThe access point supports both CAM and PSP powered MUs. CAM (Continu

AP-7131 Access Point Product Reference Guide7-43. Refer to the Received field to reference data received over the access point WAN port.Mask The Mask

Monitoring Statistics7-54. Refer to the Transmitted field to reference data received over the access point WAN port.5. Click the Clear WAN Stats butto

AP-7131 Access Point Product Reference Guide7-67.2 Viewing LAN StatisticsUse the LAN Stats screen to monitor the activity of the access point’s LAN1 o

Monitoring Statistics7-73. Refer to the Received field to view data received over the access point LAN port.Status Displays whether this particular LA

AP-7131 Access Point Product Reference Guide7-84. Refer to the Transmitted field to view statistics transmitted over the access point LAN port.RX Erro

Monitoring Statistics7-95. Click the Clear LAN Stats button to reset each of the data collection counters to zero in order to begin new data collectio

AP-7131 Access Point Product Reference Guide7-102. Refer to the Spanning Tree Info field to for details on spanning tree state, and root access point

Monitoring Statistics7-113. Refer to the Port Interface Table to assess the state of the traffic over the ports listed within the table for the root a

AP-7131 Access Point Product Reference Guide7-124. Click the Logout button to securely exit the Access Point applet. There will be a prompt confirming

Monitoring Statistics7-132. Refer to the WLAN Summary field to reference high-level data for each enabled WLAN.Name Displays the names of all the enab

Introduction1-151.1.23 Advanced Event Logging CapabilityThe access point periodically logs system events. Logging events is useful in assessing the th

AP-7131 Access Point Product Reference Guide7-143. Refer to the Total AP RF Traffic field to view throughput information for the access point and WLAN

Monitoring Statistics7-157.3.1 Viewing WLAN StatisticsUse the WLAN Stats screen to view detailed statistics for individual WLANs.The WLAN Stats screen

AP-7131 Access Point Product Reference Guide7-163. Refer to the Traffic field to view performance and throughput information for the WLAN selected fro

Monitoring Statistics7-174. Refer to the RF Status field to view the following MU signal, noise and performance information for the WLAN selected from

AP-7131 Access Point Product Reference Guide7-186. Click the Clear WLAN Stats button to reset each of the data collection counters to zero in order to

Monitoring Statistics7-192. Refer to the Radio Summary field to reference access point radio information.Type Displays the type of radio (either 802.1

AP-7131 Access Point Product Reference Guide7-203. Click the Clear All Radio Stats button to reset each of the data collection counters to zero in ord

Monitoring Statistics7-212. Refer to the Information field to view the access point 802.11a/n or 802.11b/g/n radio’s MAC address, placement and transm

AP-7131 Access Point Product Reference Guide7-223. Refer to the Traffic field to view performance and throughput information for the target access poi

Monitoring Statistics7-234. Refer to the RF Status field to view the following MU signal, noise and performance information for the target access poin

AP-7131 Access Point Product Reference Guide1-16The DHCP client automatically sends a DHCP request at an interval specified by the DHCP server to rene

AP-7131 Access Point Product Reference Guide7-247. Click the Logout button to securely exit the Access Point applet.7.4.1.1 Retry HistogramRefer to th

Monitoring Statistics7-25abundance of retries warrants reconfiguring the access point radio to achieve better performance.2. Click Apply to save any c

AP-7131 Access Point Product Reference Guide7-262. Refer to the MU List field to reference associated MU address, throughput and retry information.IP

Monitoring Statistics7-273. Click the Refresh button to update the data collections displayed without resetting the data collections to zero.4. Click

AP-7131 Access Point Product Reference Guide7-281. Select Status and Statistics -> MU Stats from the access point menu tree.2. Highlight a specific

Monitoring Statistics7-296. Refer to the RF Status field to view MU signal and signal disturbance information.7. Refer to the Errors field to view MU

AP-7131 Access Point Product Reference Guide7-308. Click OK to exit the screen. 7.5.2 Pinging Individual MUsThe access point can verify its link with

Monitoring Statistics7-314. Click the Ping button to begin transmitting ping packets to the station address specified.Refer to the Number of Responses

AP-7131 Access Point Product Reference Guide7-327.6 Viewing the Mesh Statistics SummaryThe access point has the capability of detecting and displaying

Monitoring Statistics7-332. Click the Refresh button to update the display of the Mesh Statistics Summary screen to the latest values.3. Click the Det

Introduction1-17Once the access point (in client bridge mode) establishes at least one wireless connection, it establishes other wireless connections

AP-7131 Access Point Product Reference Guide7-344. Click the Logout button to securely exit the Access Point applet. A prompt displays confirming the

Monitoring Statistics7-35indicating their channel, IP address, firmware version, etc. This information is used to create a known AP list. The list has

AP-7131 Access Point Product Reference Guide7-362. Click the Clear Known AP Stats button to reset each of the data collection counters to zero in orde

Monitoring Statistics7-37firmware version, ESS and client bridges currently connected to the AP radio. Use this information to determine whether this

AP-7131 Access Point Product Reference Guide7-38

CLI ReferenceThe access point Command Line Interface (CLI) is accessed through the serial port or a Telnet session. The access point CLI follows the s

AP-7131 Access Point Product Reference Guide8-28.1 Connecting to the CLI 8.1.1 Accessing the CLI through the Serial PortTo connect to the access point

8-38.2 Admin and Common CommandsAP7131>admin>Description: Displays admin configuration options. The items available under this command are shown

AP-7131 Access Point Product Reference Guide8-4AP7131>admin>helpDescription: Displays general CLI user interface help.Syntax: Example: admin>

8-5AP7131>admin>passwdDescription: Changes the password for the admin login. Syntax: Example: admin>passwdOld Admin Password:****** New Admin

AP-7131 Access Point Product Reference Guide1-18screen enables the administrator to set WLAN access based on user groups defined within the User Datab

AP-7131 Access Point Product Reference Guide8-6AP7131>admin>summaryDescription: Displays the access point’s system summary. Syntax: Example:admi

8-7AP7131>admin>..Description: Displays the parent menu of the current menu. This command appears in all of the submenus under admin. In each ca

AP-7131 Access Point Product Reference Guide8-8AP7131>admin> /Description: Displays the root menu, that is, the top-level CLI menu. This command

8-9AP7131>admin>saveDescription: Saves the configuration to system flash. The save command appears in all of the submenus under admin. In each c

AP-7131 Access Point Product Reference Guide8-10AP7131>admin>quitDescription: Exits the command line interface session and terminates the sessio

8-118.3 Network CommandsAP7131>admin(network)>Description: Displays the network submenu. The items available under this command are shown below.

AP-7131 Access Point Product Reference Guide8-128.3.1 Network LAN CommandsAP7131>admin(network.lan)>Description: Displays the LAN submenu. The i

8-13AP7131>admin(network.lan)> showDescription: Displays the access point LAN settings. Syntax: Example:admin(network.lan)>showLAN On Etherne

AP-7131 Access Point Product Reference Guide8-14Network Mask : 255.255.255.255 Default Gateway : 192.168.1.1Domain Name : Primary DNS Server : 192

8-15AP7131>admin(network.lan)> setDescription: Sets the LAN parameters for the LAN port. Syntax: Example: admin(network.lan)>admin(network.la

Introduction1-191.1.33 Manual Date and Time SettingsAs an alternative to defining a NTP server to provide access point system time, the access point c

AP-7131 Access Point Product Reference Guide8-168.3.1.1 Network LAN, Bridge CommandsAP7131>admin(network.lan.bridge)>Description: Displays the a

8-17AP7131>admin(network.lan.bridge)> showDescription: Displays the mesh bridge configuration parameters for the access point’s LANs.Syntax: Ex

AP-7131 Access Point Product Reference Guide8-18AP7131>admin(network.lan.bridge)> setDescription: Sets the mesh configuration parameters for th

8-198.3.1.2 Network LAN, WLAN-Mapping Commands AP7131>admin(network.lan.wlan-mapping)>Description: Displays the WLAN/Lan/Vlan Mapping submenu.Fo

AP-7131 Access Point Product Reference Guide8-20AP7131>admin(network.lan.wlan-mapping)> show Description: Displays the VLAN list currently defi

8-21admin(network.lan.wlan-mapping)>show wlanWLAN1:WLAN Name :WLAN1ESSID :101Radio :VLAN :Security Policy :DefaultQoS Policy :DefaultFor informatio

AP-7131 Access Point Product Reference Guide8-22AP7131>admin(network.lan.wlan-mapping)> set Description: Sets VLAN parameters for the access po

8-23AP7131>admin(network.lan.wlan-mapping)> create Description:Creates a VLAN for the access point. Syntax: Example:admin(network.lan.wlan-mappi

AP-7131 Access Point Product Reference Guide8-24AP7131>admin(network.lan.wlan-mapping)> editDescription:Modifies a VLAN’s name and ID.Syntax: F

8-25AP7131>admin(network.lan.wlan-mapping)> deleteDescription:Deletes a specific VLAN or all VLANs.Syntax: For information on deleting VLANs us

AP-7131 Access Point Product Reference Guide1-20For a information overview of the adaptive AP feature as well as how to configure it, refer to Adaptiv

AP-7131 Access Point Product Reference Guide8-26AP7131>admin(network.lan.wlan-mapping)> lan-mapDescription:Maps an access point VLAN to a WLAN.S

8-27AP7131>admin(network.lan.wlan-mapping)> vlan-mapDescription:Maps an access point VLAN to a WLAN.Syntax: admin(network.lan.wlan-mapping)>v

AP-7131 Access Point Product Reference Guide8-288.3.1.3 Network LAN, DHCP CommandsAP7131>admin(network.lan.dhcp)>Description: Displays the acces

8-29AP7131>admin(network.lan.dhcp)> showDescription: Shows DHCP parameter settings.Syntax: Example:admin(network.lan.dhcp)>show**LAN1 DHCP I

AP-7131 Access Point Product Reference Guide8-30AP7131>admin(network.lan.dhcp)> setDescription: Sets DHCP parameters for the LAN port. Syntax:Ex

8-31AP7131>admin(network.lan.dhcp)> addDescription: Adds static DHCP address assignments. Syntax: Example: admin(network.lan.dhcp)>add 1 00A0

AP-7131 Access Point Product Reference Guide8-32AP7131>admin(network.lan.dhcp)> deleteDescription: Deletes static DHCP address assignments. Synt

8-33AP7131>admin(network.lan.dhcp)> listDescription: Lists static DHCP address assignments. Syntax:Example:admin(network.lan.dhcp)>list 1----

AP-7131 Access Point Product Reference Guide8-348.3.1.4 Network Type Filter CommandsAP7131>admin(network.lan.type-filter)>Description: Displays

8-35AP7131>admin(network.lan.type-filter)> showDescription: Displays the access point’s current Ethernet Type Filter configuration. Syntax:Examp

Introduction1-21For information on enabling QBSS and defining the channel utilization transmission interval, see Configuring the 802.11a/n or 802.11b/

AP-7131 Access Point Product Reference Guide8-36AP7131>admin(network.lan.type-filter)> setDescription: Defines the access point Ethernet Type Fi

8-37AP7131>admin(network.lan.type-filter)> addDescription: Adds an Ethernet Type Filter entry. Syntax: Example: admin(network.lan.type-filter)&g

AP-7131 Access Point Product Reference Guide8-38AP7131>admin(network.lan.type-filter)> deleteDescription: Removes an Ethernet Type Filter entry

8-398.3.2 Network WAN CommandsAP7131>admin(network.wan)>Description: Displays the WAN submenu. The items available under this command are shown

AP-7131 Access Point Product Reference Guide8-40AP7131>admin(network.wan)> showDescription: Displays the access point WAN port parameters. Synta

8-41AP7131>admin(network.wan)> setDescription: Defines the configuration of the access point WAN port. Syntax: Example: admin(network.wan)>ad

AP-7131 Access Point Product Reference Guide8-428.3.2.1 Network WAN NAT CommandsAP7131>admin(network.wan.nat)>Description: Displays the NAT subm

8-43AP7131>admin(network.wan.nat)> showDescription: Displays access point NAT parameters. Syntax: Example: admin(network.wan.nat)>show 2WAN I

AP-7131 Access Point Product Reference Guide8-44AP7131>admin(network.wan.nat)> setDescription: Sets NAT inbound and outbound parameters. Syntax:

8-45AP7131>admin(network.wan.nat)> addDescription: Adds NAT entries. Syntax: Example: admin(network.wan.nat)>add 1 indoors udp 20 29 10.10.2.

AP-7131 Access Point Product Reference Guide1-22• Management Access Options• AP-7131 MAC Address Assignment1.2.1 Wireless CoverageAn access point esta

AP-7131 Access Point Product Reference Guide8-46AP7131>admin(network.wan.nat)> deleteDescription: Deletes NAT entries. Syntax: Example:admin(net

8-47AP7131>admin(network.wan.nat)> listDescription: Lists access point NAT entries for the specified index. Syntax: Example: admin(network.wan.n

AP-7131 Access Point Product Reference Guide8-488.3.2.2 Network WAN, VPN CommandsAP7131>admin(network.wan.vpn)>Description: Displays the VPN sub

8-49AP7131>admin(network.wan.vpn)> add Description: Adds a VPN tunnel entry. Syntax: Example: admin(network.wan.vpn)>add 2 SJSharkey 209.235.

AP-7131 Access Point Product Reference Guide8-50AP7131>admin(network.wan.vpn)> setDescription: Sets VPN entry parameters. Syntax: set type <n

8-51For information on configuring VPN using the applet (GUI), see Configuring VPN Tunnels on page 6-35. salife <name> <lifetime> Defines

AP-7131 Access Point Product Reference Guide8-52AP7131>admin(network.wan.vpn)> deleteDescription: Deletes VPN tunnel entries. Syntax: Example: a

8-53AP7131>admin(network.wan.vpn)> listDescription: Lists VPN tunnel entries. Syntax: Example:admin(network.wan.vpn)>list--------------------

AP-7131 Access Point Product Reference Guide8-54AP7131>admin(network.wan.vpn)> resetDescription: Resets all of the access point’s VPN tunnels. S

8-55AP7131>admin(network.wan.vpn)> statsDescription: Lists statistics for all active tunnels. Syntax: Example: admin(network.wan.vpn)>stats -

Introduction1-23interface to another. The bridge forwards packets addressed to unknown systems to the Default Interface (Ethernet). The access point i

AP-7131 Access Point Product Reference Guide8-56AP7131>admin(network.wan.vpn)> ikestateDescription: Displays statistics for all active tunnels u

8-578.3.2.3 AP7131>admin(network.wan.content)>Description: Displays the Outbound Content Filtering menu. The items available under this command

AP-7131 Access Point Product Reference Guide8-58AP7131>admin(network.wan.content)> addcmdDescription: Adds control commands to block outbound tr

8-59AP7131>admin(network.wan.content)> delcmdDescription: Deletes control commands to block outbound traffic. Syntax:Example:admin(network.wan.c

AP-7131 Access Point Product Reference Guide8-60AP7131>admin(network.wan.content)> listDescription: Lists application control commands. Syntax:E

8-618.3.2.4 Network WAN, Dynamic DNS CommandsAP7131>admin(network.wan.dyndns)>Description: Displays the Dynamic DNS submenu. The items available

AP-7131 Access Point Product Reference Guide8-62AP7131>admin(network.wan.dyndns)> setDescription: Sets the access point’s Dynamic DNS configurat

8-63AP7131>admin(network.wan.dyndns)> updateDescription: Updates the access point’s current WAN IP address with the DynDNS service. Syntax:Examp

AP-7131 Access Point Product Reference Guide8-64AP7131>admin(network.wan.dyndns)> showDescription: Shows the current Dynamic DNS configuration.

8-658.3.3 Network Wireless CommandsAP7131>admin(network.wireless)Description: Displays the access point wireless submenu. The items available under

AP-7131 Access Point Product Reference Guide1-24Intercepting and decoding a direct-sequence transmission requires a predefined algorithm to associate

AP-7131 Access Point Product Reference Guide8-668.3.3.1 Network WLAN CommandsAP7131>admin(network.wireless.wlan)>Description: Displays the acces

8-67AP7131>admin(network.wireless.wlan)> showDescription: Displays the access point’s current WLAN configuration. Syntax:Example:admin(network.w

AP-7131 Access Point Product Reference Guide8-68AP7131>admin(network.wireless.wlan)> createDescription: Defines the parameters of a new WLAN. Sy

8-69answer Broadcast ESSID : disableQoS Policy : Defaultadmin(network.wireless.wlan.create)>show security----------------------------------------

AP-7131 Access Point Product Reference Guide8-70AP7131>admin(network.wireless.wlan)> editDescription: Edits the properties of an existing WLAN p

8-71AP7131>admin(network.wireless.wlan)> deleteDescription: Deletes an existing WLAN.Syntax:For information on deleting a WLAN using the applet

AP-7131 Access Point Product Reference Guide8-72AP7131>admin(network.wireless.wlan.hotspot)>Description: Displays the Hotspot submenu. The items

8-73AP7131>admin(network.wireless.wlan.hotspot)> showDescription: Displays the current access point Rogue AP detection configuration.Syntax:Exam

AP-7131 Access Point Product Reference Guide8-74AP7131>admin(network.wireless.wlan.hotspot)> redirectionDescription: Goes to the hotspot redirec

8-75AP7131>admin(network.wireless.wlan.hotspot)> radiusDescription: Goes to the hotspot Radius menu.Syntax:For information on configuring the Ho

Introduction1-25• Ratio of good-transmitted packets to attempted-transmitted packets that fall below a threshold.An MU selects the best available acce

AP-7131 Access Point Product Reference Guide8-76AP7131>admin(network.wireless.wlan.hotspot.radius)> setDescription: Sets the Radius hotspot conf

8-77AP7131>admin(network.wireless.wlan.hotspot.radius)> showDescription: Shows Radius hotspot server details.Syntax:Example:admin(network.wirele

AP-7131 Access Point Product Reference Guide8-78AP7131>admin(network.wireless.wlan.hotspot)> white-listDescription: Goes to the hotspot white-li

8-798.3.3.2 Network Security CommandsAP7131>admin(network.wireless.security)>Description: Displays the access point wireless security submenu. T

AP-7131 Access Point Product Reference Guide8-80AP7131>admin(network.wireless.security)>showDescription: Displays the access point’s current sec

8-81AP7131>admin(network.wireless.security)>setDescription: Enables/disables the WPA countermeasure.Syntax:Example:admin(network.wireless.securi

AP-7131 Access Point Product Reference Guide8-82AP7131>admin(network.wireless.security)>createDescription: Defines the parameter of access point

8-83secret <sidx> <secret> Sets the EAP shared secret <secret> (1-63 characters) for server <sidx> (1-primary or 2-secondary).

AP-7131 Access Point Product Reference Guide8-84mu-retry <count> Sets the EAP maximum number of MU retries to <count> (1-10).svr-timeout &

8-85For information on configuring the encryption and authentication options available to the access point using the applet (GUI), see Configuring Sec

AP-7131 Access Point Product Reference Guide1-26The access point requires one of the following connection methods to perform a custom installation and

AP-7131 Access Point Product Reference Guide8-86AP7131>admin(network.wireless.security.edit)> Description: Edits the properties of a specific se

8-87AP7131>admin(network.wireless.security)> deleteDescription: Deletes a specific security policy. Syntax: For information on configuring the e

AP-7131 Access Point Product Reference Guide8-888.3.3.3 Network ACL CommandsAP7131>admin(network.wireless.acl)>Description: Displays the access

8-89AP7131>admin(network.wireless.acl)> showDescription: Displays the access point’s current ACL configuration. Syntax:Example:admin(network.wir

AP-7131 Access Point Product Reference Guide8-90AP7131>admin(network.wireless.acl)> createDescription: Creates an MU ACL policy. Syntax: Example

8-91AP7131>admin(network.wireless.acl.edit)>Description: Edits the properties of an existing MU ACL policy.Syntax: For information on configurin

AP-7131 Access Point Product Reference Guide8-92AP7131>admin(network.wireless.acl)> deleteDescription: Removes an MU ACL policy. Syntax: For inf

8-938.3.3.4 Network Radio Configuration Commands AP7131>admin(network.wireless.radio)>Description: Displays the access point Radio submenu. The

AP-7131 Access Point Product Reference Guide8-94AP7131>admin(network.wireless.radio)> showDescription: Displays the access point’s current radio

8-95AP7131>admin(network.wireless.radio)> setDescription: Enables an access point Radio and defines the RF band of operation.Syntax: Example: ad

Introduction1-271.2.8 AP-7131 MAC Address AssignmentFor an AP-7131 model access point, MAC address assignments are as follows:• WAN (GE2) - The access

AP-7131 Access Point Product Reference Guide8-96AP7131>admin(network.wireless.radio.802-11n[2.4 GHz])>Description: Displays a specific 802.11n 2

8-97AP7131>admin(network.wireless.radio.802-11n[2.4 GHz])>show Description: Displays specific 802.11n (2.4 GHz) radio settings.Syntax: Example:

AP-7131 Access Point Product Reference Guide8-98admin(network.wireless.radio.802-11n[2.4 GHz])>show ratesBasic Rates 1 2 5.5 11Supported Rates 1 2

8-99admin(network.wireless.radio.802-11n[2.4 GHz])>show qosRadio QOS Parameter Set 11n-default-----------------------------------------------------

AP-7131 Access Point Product Reference Guide8-100AP7131>admin(network.wireless.radio.802-11n[2.4 GHz])> setDescription: Defines specific 802.11n

8-101AP7131>admin(network.wireless.radio.802-11n[2.4 GHz].advanced)>Description: Displays the advanced submenu for the 802.11n (2.4 GHz) radio.

AP-7131 Access Point Product Reference Guide8-102AP7131>admin(network.wireless.radio.802-11n[2.4 GHz].advanced)> showDescription: Displays the B

8-103AP7131>admin(network.wireless.radio.802-11n[2.4 GHz].advanced)> setDescription: Defines advanced parameters for the target 802.11n (2.4 GHz

AP-7131 Access Point Product Reference Guide8-104AP7131>admin(network.wireless.radio.802-11n[2.4 GHz].mesh)>Description: Displays the mesh confi

8-105AP7131>admin(network.wireless.radio.802-11n[2.4 GHz].mesh)> showDescription: Displays mesh settings and status for the 802.11n (2.4 GHz) ra

AP-7131 Access Point Product Reference Guide1-28

AP-7131 Access Point Product Reference Guide8-106AP7131>admin(network.wireless.radio.802-11n[2.4 GHz].mesh)> setDescription: Defines mesh parame

8-107AP7131>admin(network.wireless.radio.802-11n[2.4 GHz].mesh)> addDescription: Adds a 802.11n (2.4 GHz) radio mesh connection.Syntax: Example:

AP-7131 Access Point Product Reference Guide8-108AP7131>admin(network.wireless.radio.802-11n[2.4 GHz].mesh)> deleteDescription: Deletes a 802.11

8-109AP7131>admin(network.wireless.radio.802-11n[5.0 GHz])>Description: Displays a specific 802.11n (5.0 GHz) radio 2 submenu. The items availab

AP-7131 Access Point Product Reference Guide8-110AP7131>admin(network.wireless.radio.802-11n[5.0 GHz])> showDescription: Displays specific 802.1

8-111admin(network.wireless.radio.802-11n[5.0 GHz])>show ratesBasic Rates 6 12 24Supported Rates 6 9 12 18 24 36 48 54Short Guard Interval disable-

AP-7131 Access Point Product Reference Guide8-112admin(network.wireless.radio.802-11n[5.0 GHz])>show qosRadio QOS Parameter Set 11n-default--------

8-113AP7131>admin(network.wireless.radio.802-11n[5.0 GHz])> setDescription: Defines specific 802.11n (5.0 GHz) radio parameters.Syntax: Example:

AP-7131 Access Point Product Reference Guide8-114AP7131>admin(network.wireless.radio.802-11n[5.0 GHz].advanced)>Description: Displays the advanc

8-115AP7131>admin(network.wireless.radio.802-11n[5.0 GHz].advanced)> showDescription: Displays the BSSID to WLAN mapping for the 802.11n (5.0 GH

Hardware InstallationAn AP-7131 access point installation includes mounting the access point, connecting the access point to the network, connecting a

AP-7131 Access Point Product Reference Guide8-116AP7131>admin(network.wireless.radio.802-11n[5.0 GHz].advanced)> setDescription: Defines advance

8-117AP7131>admin(network.wireless.radio.802-11n[5.0 GHz].mesh)>Description: Displays the mesh configuration submenu for the 802.11n (5.0 GHz) r

AP-7131 Access Point Product Reference Guide8-118AP7131>admin(network.wireless.radio.802-11n[5.0 GHz].mesh)> showDescription: Displays mesh sett

8-119AP7131>admin(network.wireless.radio.802-11n[5.0 GHz].mesh)> setDescription: Defines mesh parameters for the 802.11n (5.0 GHz) radio.Syntax:

AP-7131 Access Point Product Reference Guide8-120AP7131>admin(network.wireless.radio.802-11n[5.0 GHz].mesh)> addDescription: Adds a 802.11n (5.0

8-121AP7131>admin(network.wireless.radio.802-11n[5.0 GHz].mesh)> deleteDescription: Deletes a 802.11n (5.0 GHz) radio mesh connection by specifi

AP-7131 Access Point Product Reference Guide8-1228.3.3.5 Network Quality of Service (QoS) CommandsAP7131>admin(network.wireless.qos)>Description

8-123AP7131>admin(network.wireless.qos)> showDescription: Displays the access point’s current QoS policy by summary or individual policy. Syntax

AP-7131 Access Point Product Reference Guide8-124AP7131>admin(network.wireless.qos.create)>Description: Defines an access point QoS policy. Synt

8-125AP7131>admin(network.wireless.qos.edit)>Descripton:Edits the properties of an existing QoS policy.Syntax: For information on configuring th

AP-7131 Access Point Product Reference Guide2-22.1 PrecautionsBefore installing an AP-7131 model access point verify the following:• Do not install in

AP-7131 Access Point Product Reference Guide8-126AP7131>admin(network.wireless.qos)> deleteDescription: Removes a QoS policy. Syntax: For inform

8-1278.3.3.6 Network Bandwith Management CommandsAP7131>admin(network.wireless.bandwidth)>Description: Displays the access point Bandwidth Manag

AP-7131 Access Point Product Reference Guide8-128AP7131>admin(network.wireless.bandwidth)> showDescription: Displays the access point’s current

8-129AP7131>admin(network.wireless.bandwidth)> setDescription: Defines the access point Bandwidth Management configuration. Syntax: For informat

AP-7131 Access Point Product Reference Guide8-1308.3.3.7 Network Rogue-AP CommandsAP7131>admin(network.wireless.rogue-ap)>Description: Displays

8-131AP7131>admin(network.wireless.rogue-ap)> showDescription: Displays the current access point Rogue AP detection configuration.Syntax:Example

AP-7131 Access Point Product Reference Guide8-132AP7131>admin(network.wireless.rogue-ap)> setDescription: Defines the access point ACL rogue AP

8-133AP7131>admin(network.wireless.rogue-ap.mu-scan)>Description: Displays the Rogue-AP mu-scan submenu.Syntax: add Add all or just one scan res

AP-7131 Access Point Product Reference Guide8-134AP7131>admin(network.wireless.rogue-ap.mu-scan)> startDescription: Initiates an MU scan from a

8-135AP7131>admin(network.wireless.rogue-ap.mu-scan)> showDescription: Displays the results of an MU scan. Syntax: For information on configurin

Hardware Installation2-32.4 Access Point PlacementFor optimal performance, install the access point away from transformers, heavy-duty motors, fluores

AP-7131 Access Point Product Reference Guide8-136AP7131>admin(network.wireless.rogue-ap.allowed-list)>Description: Displays the Rogue-AP allowed

8-137AP7131>admin(network.wireless.rogue-ap.allowed-list)> showDescription: Displays the Rogue AP allowed List. Syntax: Example: admin(network.w

AP-7131 Access Point Product Reference Guide8-138AP7131>admin(network.wireless.rogue-ap.allowed-list)> addDescription: Adds an AP MAC address an

8-139AP7131>admin(network.wireless.rogue-ap.allowed-list)> deleteDescription: Deletes an AP MAC address and ESSID to existing allowed list.Synta

AP-7131 Access Point Product Reference Guide8-1408.3.3.8 WIPS CommandsAP7131>admin(network.wireless.wips)>Description: Displays the WIPS submenu

8-141AP7131>admin(network.wireless.wips> showDescription: Shows the WLAN Intrusion Prevention configuration.Syntax: Example:admin(network.wirele

AP-7131 Access Point Product Reference Guide8-142AP7131>admin(network.wireless.wips setDescription: Sets the WLAN Intrusion Prevention configuratio

8-1438.3.3.9 Network MU Locationing CommandsAP7131>admin(network.wireless.mu-locationing)>Description: Displays the MU Locationing submenu. The

AP-7131 Access Point Product Reference Guide8-144AP7131>admin(network.wireless.mu-locationing> showDescription: Displays the MU probe table conf

8-145AP7131>admin(network.wireless.mu-locationing> setDescription: Defines the MU probe table configuration used for locating MUs. Syntax: Examp

AP-7131 Access Point Product Reference Guide2-4• Install the access point at an ideal height of 10 feet from the ground.• Orient the access point ante

AP-7131 Access Point Product Reference Guide8-1468.3.4 Network Firewall CommandsAP7131>admin(network.firewall)>Description: Displays the access

8-147AP7131>admin(network.firewall)> showDescription: Displays the access point firewall parameters. Syntax: Example:admin(network.firewall)>

AP-7131 Access Point Product Reference Guide8-148AP7131>admin(network.firewall)> setDescription: Defines the access point firewall parameters. S

8-149AP7131>admin(network.firewall)> accessDescription: Enables or disables firewall permissions through LAN to WAN ports.Syntax: Example:admin

AP-7131 Access Point Product Reference Guide8-150AP7131>admin(network.firewall)> advancedDescription: Displays whether an access point firewall

8-1518.3.5 Network Router CommandsAP7131>admin(network.router)>Description: Displays the router submenu. The items available under this command

AP-7131 Access Point Product Reference Guide8-152AP7131>admin(network.router)> showDescription: Shows the access point route table. Syntax: Exam

8-153AP7131>admin(network.router)> setDescription: Shows the access point route table. Syntax: For information on configuring the Router options

AP-7131 Access Point Product Reference Guide8-154AP7131>admin(network.router)> addDescription: Adds user-defined routes. Syntax: Example: admin(

8-155AP7131>admin(network.router)> deleteDescription: Deletes user-defined routes. Syntax: Example: admin(network.router)>list---------------

Hardware Installation2-5R1 defines the AP-7131’s radio 1 antenna connectors and R2 defines the AP-7131’s radio 2 antenna connectors.The AP-7131 2.4 GH

AP-7131 Access Point Product Reference Guide8-156AP7131>admin(network.router)> listDescription: Lists user-defined routes. Syntax: Example: admi

8-1578.4 System CommandsAP7131>admin(system)>Description: Displays the System submenu. The items available under this command are shown below. r

AP-7131 Access Point Product Reference Guide8-158AP7131>admin(system)>restart Description: Restarts the access point access point. Syntax: Examp

8-159AP7131>admin(system)>showDescription: Displays high-level system information helpful to differentiate this access point. Syntax: Example: a

AP-7131 Access Point Product Reference Guide8-160AP7131>admin(system)>setDescription: Sets access point system parameters. Syntax: admin(system)

8-161AP7131>admin(system)>lastpwDescription: Displays last expired debug password.Example:admin(system)>lastpwAP-7131 MAC Address is 00:15:70

AP-7131 Access Point Product Reference Guide8-162AP7131>admin(system)>arpDescription: Dispalys the access point’s arp table.Example:admin(system

8-1638.4.1 Power Setup CommandsAP7131>admin(system)>power-setupDescription:Displays the Power Setup submenu.For information on configuring power

AP-7131 Access Point Product Reference Guide8-164AP7131>admin(system.power-setup)>showDescription: Displays the access point’s current power con

8-165AP7131>admin(system.power-setup)>setDescription: Sets access point’s power consumption configuration. Syntax: admin(system.power-setup)>

ContentsChapter 1. IntroductionFeature Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

AP-7131 Access Point Product Reference Guide2-6The AP-7131 5 GHz antenna suite includes the following models:For detailed specifications on the 2.4 GH

AP-7131 Access Point Product Reference Guide8-1668.4.2 Adaptive AP Setup CommandsAP7131>admin(system)>aap-setupDescription: Displays the Adaptiv

8-167AP7131>admin(system.aap-setup)>showDescription: Displays the access point’s Adaptive AP configuration. Syntax: Example:admin(system.aap-set

AP-7131 Access Point Product Reference Guide8-168AP7131>admin(system.aap-setup)>setDescription: Sets access point’s Adaptive AP configuration. S

8-169AP7131>admin(system.aap-setup)>deleteDescription: Deletes static switch address assignments.Syntax: Example:admin(system.aap-setup)>dele

AP-7131 Access Point Product Reference Guide8-1708.4.3 System Access CommandsAP7131>admin(system)>accessDescription: Displays the access point a

8-171AP7131>admin(system.access)>setDescription: Defines the permissions to access the access point applet, CLI, SNMP as well as defining their

AP-7131 Access Point Product Reference Guide8-172AP7131>admin(system.access)>showDescription: Displays the current access point access permissio

8-1738.4.4 System Certificate Management CommandsAP7131>admin(system)>cmgrDescription: Displays the Certificate Manager submenu. The items avail

AP-7131 Access Point Product Reference Guide8-174AP7131>admin(system.cmgr)> genreqDescription: Generates a certificate request.Syntax: Note: The

8-175AP7131>admin(system.cmgr)> delselfDescription: )Deletes a self certificate. Syntax: Example: admin(system.cmgr)>delself MyCert2 For info

Hardware Installation2-72.6 AP-7131 Power Injector SystemAn AP-7131 access point can receive power via an Ethernet cable connected to the access point

AP-7131 Access Point Product Reference Guide8-176AP7131>admin(system.cmgr)> loadselfDescription: Loads a self certificate signed by the Certific

8-177AP7131>admin(system.cmgr)> listselfDescription: Lists the loaded self certificates.Syntax: For information on configuring self certificate

AP-7131 Access Point Product Reference Guide8-178AP7131>admin(system.cmgr)> loadcaDescription: Loads a trusted certificate from the Certificate

8-179AP7131>admin(system.cmgr)> delcaDescription: Deletes a trusted certificate. Syntax: For information on configuring certificate settings usi

AP-7131 Access Point Product Reference Guide8-180AP7131>admin(system.cmgr)> listcaDescription: Lists the loaded trusted certificate. Syntax: For

8-181AP7131>admin(system.cmgr)> showreqDescription: Displays a certificate request in PEM format. Syntax: For information on configuring certifi

AP-7131 Access Point Product Reference Guide8-182AP7131>admin(system.cmgr)> delprivkeyDescription: Deletes a private key. Syntax: For informatio

8-183AP7131>admin(system.cmgr)> listprivkeyDescription: Lists the names of private keys. Syntax: For information on configuring certificate sett

AP-7131 Access Point Product Reference Guide8-184AP7131>admin(system.cmgr)> expcert Description: Exports the certificate file to a user defined

8-185AP7131>admin(system.cmgr)> impcertDescription: Imports the target certificate file.Syntax: To import certificate information from an AP-713

AP-7131 Access Point Product Reference Guide2-82.6.1 Installing the Power Injector Refer to the following sections for information on planning, instal

AP-7131 Access Point Product Reference Guide8-1868.4.5 System SNMP CommandsAP7131>admin(system)> snmp Description: Displays the SNMP submenu. Th

8-1878.4.5.1 System SNMP Access CommandsAP7131>admin(system.snmp.access)Description: Displays the SNMP Access menu. The items available under this

AP-7131 Access Point Product Reference Guide8-188AP7131>admin(system.snmp.access)> showDescription: Shows the SNMP v3 engine ID. Syntax: Example

8-189AP7131>admin(system.snmp.access)> addDescription: Adds SNMP access entries for specific v1v2 and v3 user definitions. Syntax: For informati

AP-7131 Access Point Product Reference Guide8-190AP7131>admin(system.snmp.access)> deleteDescription: Deletes SNMP access entries for specific v

8-191AP7131>admin(system.snmp.access)> listDescription: Lists SNMP access entries. Syntax: Example:admin(system.snmp.access)>list acl -------

AP-7131 Access Point Product Reference Guide8-1928.4.5.2 System SNMP Traps CommandsAP7131>admin(system.snmp.traps) Description: Displays the SNMP t

8-193AP7131>admin(system.snmp.traps)> showDescription: Shows SNMP trap parameters. Syntax: Example: admin(system.snmp.traps)>show trapSNMP MU

AP-7131 Access Point Product Reference Guide8-194AP7131>admin(system.snmp.traps)> setDescription: Sets SNMP trap parameters.Syntax: For informat

8-195AP7131>admin(system.snmp.traps)> addDescription:Adds SNMP trap entries. Syntax: Example: admin(system.snmp.traps)>add v1v2 203.223.24.2

Hardware Installation2-9Ensure the cable length from the Ethernet source (host) to the Power Injector and access point does not exceed 100 meters (333

AP-7131 Access Point Product Reference Guide8-196AP7131>admin(system.snmp.traps)> deleteDescription: Deletes SNMP trap entries. Syntax: Example:

8-197AP7131>admin(system.snmp.traps)> listDescription: Lists SNMP trap entries. Syntax: Example: admin(system.snmp.traps)>add v1v2 203.223.24

AP-7131 Access Point Product Reference Guide8-1988.4.6 System User Database CommandsAP7131>admin(system)> userdb Description: Goes to the user d

8-1998.4.5.1 Adding and Removing Users from the User DatabseAP7131>admin(system.userdb)> userDescription: Adds and remvoves users from the user

AP-7131 Access Point Product Reference Guide8-200AP7131>admin(system.userdb.user)> addDescription: Adds a new user to the user database. Syntax:

8-201AP7131>admin(system.userdb.user)> deleteDescription: Removes a new user to the user database. Syntax: Example: admin(system.userdb.user>

AP-7131 Access Point Product Reference Guide8-202AP7131>admin(system.userdb.user)>clearallDescription: Removes all existing user IDs from the sy

8-203AP7131>admin(system.userdb.user)>setDescription: Sets a password for a user..Syntax: Example: admin(system.userdb.user>set george passwo

AP-7131 Access Point Product Reference Guide8-2048.4.5.2 Adding and Removing Groups from the User DatabseAP7131>admin(system.userdb)> groupDescr

8-205AP7131>admin(system.userdb.group> createDescription: Creates a group name. Once defined, users can be added to the group.Syntax: Example: a

AP-7131 Access Point Product Reference Guide2-10

AP-7131 Access Point Product Reference Guide8-206AP7131>admin(system.userdb.group> deleteDescription: Deletes an existing group.Syntax: Example:

8-207AP7131>admin(system.userdb.group> clearallDescription: Removes all existing group names from the system.Syntax: Example: admin(system.userd

AP-7131 Access Point Product Reference Guide8-208AP7131>admin(system.userdb.group> addDescription: Adds a user to an existing group.Syntax: Exam

8-209AP7131>admin(system.userdb.group> removeDescription: Removes a user from an existing group.Syntax: Example: admin(system.userdb.group>re

AP-7131 Access Point Product Reference Guide8-210AP7131>admin(system.userdb.group> showDescription: Displays existing groups.Syntax: Example: ad

8-2118.4.7 System Radius CommandsAP7131>admin(system)> radius Description: Goes to the Radius system submenu.Syntax: For information on configur

AP-7131 Access Point Product Reference Guide8-212AP7131>admin(system.radius)> set/showDescription: Sets or displays the Radius user database.Syn

8-2138.4.6.1 AP7131>admin(system.radius)> eapDescription: Goes to the EAP submenu.Syntax: For information on configuring EAP Radius using the ap

AP-7131 Access Point Product Reference Guide8-214AP7131>admin(system.radius.eap)> peapDescription: Goes to the Peap submenu.Syntax: For informat

8-215AP7131>admin(system.radius.eap.peap> set/showDescription: Defines and displays Peap parametersSyntax: Example: admin(system.radius.eap.peap

Hardware Installation2-111. Xerox copy the template (on the previous page) to a blank piece of paper. Do not reduce or enlarge the scale of the templa

AP-7131 Access Point Product Reference Guide8-216AP7131>admin(system.radius.eap)> ttlsDescription: Goes to the TTLS submenu.Syntax: For informat

8-217AP7131>admin(system.radius.eap.ttls> set/showDescription: Defines and displays TTLS parametersSyntax: Example: admin(system.radius.eap.ttls

AP-7131 Access Point Product Reference Guide8-2188.4.6.2 AP7131>admin(system.radius)> policyDescription: Goes to the access policy submenu.Synta

8-219AP7131>admin(system.radius.policy> set Description: Defines the group’s WLAN access policy.Syntax: Example: admin(system.radius.policy)>

AP-7131 Access Point Product Reference Guide8-220AP7131>admin(system.radius.policy> access-time Description: setGoes to the time-based login sub

8-221AP7131>admin(system.radius.policy> show Description: Displays a group’s access policy.Syntax: Example: admin(system.radius.policy)>showL

AP-7131 Access Point Product Reference Guide8-2228.4.6.3 AP7131>admin(system.radius)> ldapDescription: Goes to the LDAP submenu.Syntax: For info

8-223AP7131>admin(system.radius.ldap)> setDescription: Defines the LDAP parameters.Syntax: Example: admin(system.radius.ldap)>set ipadr 157.2

AP-7131 Access Point Product Reference Guide8-224AP7131>admin(system.radius.ldap)> show allDescription: Displays existing LDAP parameters.Syntax

8-2258.4.6.4 AP7131>admin(system.radius)> proxyDescription: Goes to the Radius proxy server submenu.Syntax: For information on configuring Radiu

AP-7131 Access Point Product Reference Guide2-1210. Cable the AP-7131 using either the Power Injector solution or an approved line cord and power supp

AP-7131 Access Point Product Reference Guide8-226AP7131>admin(system.radius.proxy)> addDescription: Adds a proxy.Syntax: Example: admin(system.r

8-227AP7131>admin(system.radius.proxy)> deleteDescription: Adds a proxy.Syntax: Example: admin(system.radius.proxy)>delete lancelotadmin(syst

AP-7131 Access Point Product Reference Guide8-228AP7131>admin(system.radius.proxy)> clearallDescription: Removes all proxy server records from t

8-229AP7131>admin(system.radius.proxy)> setDescription: Sets Radius proxy server parameters.Syntax: Example: admin(system.radius.proxy)>set d

AP-7131 Access Point Product Reference Guide8-2308.4.6.5 AP7131>admin(system.radius)> clientDescription: Goes to the Radius client submenu.Synta

8-231AP7131>admin(system.radius.client> addDescription: Adds a Radius client to those available to the Radius server.Syntax: Example: admin(syst

AP-7131 Access Point Product Reference Guide8-232AP7131>admin(system.radius.client> deleteDescription: Removes a specified Radius client from th

8-233AP7131>admin(system.radius.client> showDescription: Displays a list of configured Radius clients.Syntax: Example: admin(system.radius.clien

AP-7131 Access Point Product Reference Guide8-2348.4.8 System Network Time Protocol (NTP) CommandsAP7131>admin(system)> ntp Description: Display

8-235AP7131>admin(system.ntp)> showDescription: Displays the NTP server configuration. Syntax: Example: admin(system.ntp)>showcurrent time (U

Hardware Installation2-131. Motorola recommends you loop a safety wire—with a diameter of at least 1.01 mm (.04 in.), but no more than 0.158 mm (.0625

AP-7131 Access Point Product Reference Guide8-236 AP7131>admin(system.ntp)> date-zoneDescription: Show date, time and time zone.Syntax: Example:

8-237AP7131>admin(system.ntp)> zone-listDescription: Displays an extensive list of time zones for countries around the world.Syntax: Example: ad

AP-7131 Access Point Product Reference Guide8-238AP7131>admin(system.ntp)> setDescription: Sets NTP parameters for access point clock synchroniz

8-2398.4.9 System Log CommandsAP7131>admin(system)> logs Description: Displays the access point log submenu. Logging options include:Syntax: sho

AP-7131 Access Point Product Reference Guide8-240AP7131>admin(system.logs)> showDescription: Displays the current access point logging settings.

8-241AP7131>admin(system.logs)> setDescription: Sets log options and parameters. Syntax: admin(system.logs)>set mode enableadmin(system.logs)

AP-7131 Access Point Product Reference Guide8-242AP7131>admin(system.logs)> viewDescription: Displays the access point system log file. Syntax:

8-243AP7131>admin(system.logs)> deleteDescription: Deletes the log files. Syntax: Example: admin(system.logs)>deleteFor information on config

AP-7131 Access Point Product Reference Guide8-244AP7131>admin(system.logs)> sendDescription: Sends log and core file to an FTP Server. Syntax: E

8-2458.4.10 System Configuration-Update CommandsAP7131>admin(system.config)>Description: Displays the access point configuration update submenu

AP-7131 Access Point Product Reference Guide2-148. Rotate the AP-7131 chassis 45 degrees clockwise.9. Push the back of the AP-7131 chassis on to the b

AP-7131 Access Point Product Reference Guide8-246AP7131>admin(system.config)> defaultDescription: Restores the full access point factory default

8-247AP7131>admin(system.config)> partialDescription: Restores a partial factory default configuration. The access point’s LAN, WAN and SNMP set

AP-7131 Access Point Product Reference Guide8-248AP7131>admin(system.config)> showDescription: Displays import/export parameters for the access

8-249AP7131>admin(system.config)> setDescription: Sets the import/export parameters. Syntax: Example: admin(system.config)>set server 192.168

AP-7131 Access Point Product Reference Guide8-250AP7131>admin(system.config)> exportDescription: Exports the configuration from the system. Synt

8-251AP7131>admin(system.config)> importDescription: Imports the access point configuration to the access point. Errors could display as a resul

AP-7131 Access Point Product Reference Guide8-2528.4.11 Firmware Update CommandsAP7131>admin(system)>fw-updateDescription: Displays the firmware

8-253AP7131>admin(system.fw-update)>showDescription: Displays the current access point firmware update settings.Syntax: Example:admin(system.fw-

AP-7131 Access Point Product Reference Guide8-254AP7131>admin(system.fw-update)>setDescription: Defines access point firmware update settings an

8-255AP7131>admin(system.fw-update)>updateDescription: Executes the access point firmware update over the WAN or LAN port using either ftp or tf

Hardware Installation2-15the unit. An above the ceiling AP-7131 installation enables installations compliant with drop ceilings, suspended ceilings an

AP-7131 Access Point Product Reference Guide8-2568.5 Statistics CommandsAP7131>admin(stats)Description: Displays the access point statistics submen

8-257AP7131>admin(stats)> showDescription: Displays access point system information. Syntax: For information on displaying WAN port statistics u

AP-7131 Access Point Product Reference Guide8-258AP7131>admin(stats)> send-cfg-apDescription: Copies the access point’s configuration to another

8-259AP7131>admin(stats)> send-cfg-allDescription: Copies the access point’s configuration to all of the access points within the known AP table

AP-7131 Access Point Product Reference Guide8-260AP7131>admin(stats)> clearDescription: Clears the specified statistics counters to zero to begi

8-261AP7131>admin(stats)> flash-all-ledsDescription: Starts and stops the illumination of a specified access point’s LEDs.Syntax: Example:admin(

AP-7131 Access Point Product Reference Guide8-262AP7131>admin(stats)> echoDescription: Defines the echo test values used to conduct a ping test

8-263AP7131>admin.stats.echo)> showDescription: Shows Mobile Unit Statistics Summary.Syntax: Example:admin(stats.echo)>show------------------

AP-7131 Access Point Product Reference Guide8-264AP7131>admin.stats.echo)> listDescription: Lists echo test parameters and results.Syntax: Examp

8-265AP7131>admin.stats.echo)>setDescription: Defines the parameters of the echo test.Syntax: For information on MU Echo and Ping tests using th

AP-7131 Access Point Product Reference GuideviWi-Fi Protected Access (WPA) Using TKIP Encryption . . . . . . . . . . . . . . .1-9WPA2-CCMP (802.11i)

AP-7131 Access Point Product Reference Guide2-167. Remove the light pipe’s rubber stopper before installing the light pipe.8. Connect the light pipe t

AP-7131 Access Point Product Reference Guide8-266AP7131>admin.stats.echo)> startDescription: Initiates the echo test.Syntax: Example:admin(stats

8-267AP7131>admin(stats)> pingDescription: Defines the ping test values used to conduct a ping test to an AP with the same ESSID.Syntax: For inf

AP-7131 Access Point Product Reference Guide8-268AP7131>admin.stats.ping)> showDescription: Shows Known AP Summary Details.Syntax: Example:admin

8-269AP7131>admin.stats.ping)> listDescription: Lists ping test parameters and results.Syntax: Example:admin(stats.ping)>listStation Address

AP-7131 Access Point Product Reference Guide8-270AP7131>admin.stats.ping)> setDescription: Defines the parameters of the ping test.Syntax: Examp

8-271AP7131>admin.stats.echo)> startDescription: Initiates the ping test.Syntax: Example:admin(stats.ping)>startadmin(stats.ping)>listStat

AP-7131 Access Point Product Reference Guide8-272

Configuring Mesh Networking9.1 Mesh Networking OverviewAn AP-7131 can be configured in two modes to support the new mesh networking functionality. The

AP-7131 Access Point Product Reference Guide9-2access points configured as both a base and a client bridge function as repeaters to transmit data with

Configuring Mesh Networking9-3If an access point is configured as a base bridge (but not as a client bridge) it operates normally at boot time. The ba

Hardware Installation2-17b. Connect a RJ-45 CAT5e (or CAT6) Ethernet cable between the Power Injector Data & Power Out connector and the AP-7131 G

AP-7131 Access Point Product Reference Guide9-4The access point in client bridge mode attempts to establish up to 3 simultaneous wireless connections.

Configuring Mesh Networking9-59.1.3 Defining the Mesh TopologyWhen a user wants to control how the spanning tree determines client bridge connections,

AP-7131 Access Point Product Reference Guide9-69.1.5 Normal OperationOnce the mesh network is defined, all normal access point operations are still al

Configuring Mesh Networking9-7As the Spanning Tree Protocol (STP) mentions, each mesh network maintains hello, forward delay and max age timers. The b

AP-7131 Access Point Product Reference Guide9-86. Click OK to return to either the LAN1 or LAN2 screen where updates to the Mesh STP Configuration can

Configuring Mesh Networking9-99.2.2 Configuring a WLAN for Mesh Networking SupportEach access point comprising a particular mesh network is required t

AP-7131 Access Point Product Reference Guide9-103. Assign an ESSID and Name to the WLAN that each access point will share when using this WLAN within

Configuring Mesh Networking9-114. Use the Available On checkboxes to specify the access point radio(s) used with the target WLAN within the mesh netwo

AP-7131 Access Point Product Reference Guide9-12If none of the existing policies are suitable, select the Create button to the right of the Security P

Configuring Mesh Networking9-1310. Select the Use Secure Beacon checkbox to not transmit the ESSID amongst the access points and devices within the me

AP-7131 Access Point Product Reference Guide2-18 The LEDs on the top housing of the AP-7131 are clearly visible in wall and below ceiling installatio

AP-7131 Access Point Product Reference Guide9-14To configure the access point radio for mesh networking support:1. Select Network Configuration ->

Configuring Mesh Networking9-15Configuration screen, the Radio Status and MUs connected values update. If this is an existing radio within a mesh netw

AP-7131 Access Point Product Reference Guide9-16If the Client Bridge checkbox has been selected, use the Mesh Network Name drop-down menu to select th

Configuring Mesh Networking9-17the user from selecting the order base bridges are added to the mesh network when one of the three associated base brid

AP-7131 Access Point Product Reference Guide9-1812. Highlight a MAC address from the Preferred Base Bridge List and click the Up button to assign that

Configuring Mesh Networking9-1917. Click Apply to save any changes to the Radio Configuration screen. Navigating away from the screen without clicking

AP-7131 Access Point Product Reference Guide9-209.3 Mesh Network Deployment - Quick SetupThis section provides instructions on how to quickly setup an

Configuring Mesh Networking9-21 2. Assign a Mesh STP Priority of 40000 to LAN1 Interface.NOTE Enable the LAN1 Interface of AP#1 as a DHCP Server if yo

AP-7131 Access Point Product Reference Guide9-223. Define a mesh supported WLAN.4. Enable base bridge functionality on the 802.11a/n radio (Radio 2).

Configuring Mesh Networking9-235. Define a channel of operation for the 802.11a/n radio.

Hardware Installation2-192.8.1 Dual Radio (2.4/5 GHz) AP-7131A dual radio (2.4/5 Ghz) model AP-7131 has the following unique LED behavior: 2.8.2 Sing

AP-7131 Access Point Product Reference Guide9-24 6. If needed, create another WLAN mapped to the 802.11b/g/n radio if 802.11b/g/n support is required

Configuring Mesh Networking9-259.3.1.2 Configuring AP#2AP#2 can be configured the same as AP#1 with the following exceptions: • Assign an IP Address t

AP-7131 Access Point Product Reference Guide9-269.3.1.3 Configuring AP#3To define the configuration for AP#3 (a client bridge connecting to both AP#1

Configuring Mesh Networking9-273. Create a mesh supported WLAN with the Enable Client Bridge Backhaul option selected. 4. Select the Client Bridge ch

AP-7131 Access Point Product Reference Guide9-285. If needed, create another WLAN mapped to the 802.11b/g/n radio if 802.11b/g/n support is required f

Configuring Mesh Networking9-299.3.2 Scenario 2 - Two Hop Mesh Network with a Base Bridge Repeater and a Client BridgeBy default, the mesh algorithm r

AP-7131 Access Point Product Reference Guide9-309.3.2.2 Configuring AP#2AP#2 requires the following modifications from AP#2 in the previous scenario t

Configuring Mesh Networking9-312. Enable client and base bridge functionality on the 802.11a/n radio9.3.2.3 Configuring AP#3To define AP #3’s configur

AP-7131 Access Point Product Reference Guide9-322. Add the 802.11a/n Radio MAC Address. In scenario #2, the mesh WLAN is mapped to BSS1 on the 802.11a

Configuring Mesh Networking9-33 9.3.2.4 Verifying Mesh Network Functionality for Scenario #2You now have a three AP demo multi-hop mesh network ready

AP-7131 Access Point Product Reference Guide2-202.8.3 Single Radio 5 GHz AP-7131 LEDs The single 5 Ghz radio model AP-7131 has the following unique L

AP-7131 Access Point Product Reference Guide9-349.4 Mesh Networking Frequently Asked QuestionsThe following scenarios represent issues that could be e

Configuring Mesh Networking9-35Mesh Deployment Issue 4 - Do I need to map a WLAN to a radio when configuring mesh backhaul on a Client Bridge?When cre

AP-7131 Access Point Product Reference Guide9-36Mesh Deployment Issue 8 - Can I mesh between an AP-7131, AP-5131 and an AP-5181?Can I mesh between the

Configuring Mesh Networking9-37ResolutionYes, mesh nodes also support Automatic Firmware/Configuration updates using DHCP Options. Make sure you creat

AP-7131 Access Point Product Reference Guide9-38

Adaptive AP10.1 Adaptive AP OverviewAn adaptive AP (AAP) is an AP-7131 access point that can adopt like an AP300 (L3). The management of an AAP is con

AP-7131 Access Point Product Reference Guide10-2The benefits of an AAP deployment include:• Centralized Configuration Management & Compliance - Wi

Adaptive AP10-310.1.2 Adaptive AP ManagementAn AAP can be adopted, configured and managed like a thin access port from the wireless switch. Once an a

AP-7131 Access Point Product Reference Guide10-410.1.4.1 Auto Discovery using DHCPExtended Global Options 189, 190, 191, 192 can be used or Embedded O

Adaptive AP10-510.1.4.2 Manual Adoption ConfigurationA manual switch adoption of an AAP can be conducted using:• Static FQDN - A switch fully qualifie

Hardware Installation2-212.9 Setting Up MUs2.9.1 Legacy MUsFor a discussion of how to initially test the access point to ensure it can interoperate wi

AP-7131 Access Point Product Reference Guide10-610.1.7 Configuration UpdatesAn AAP receives its configuration from the switch initially as part of its

Adaptive AP10-710.1.10 Remote Site Survivability (RSS)RSS can be used to turn off RF activity on an AAP if it loses adoption (connection) to the switc

AP-7131 Access Point Product Reference Guide10-810.2 Supported Adaptive AP TopologiesFor this version of the access point firmware, the following AAP

Adaptive AP10-910.2.2 Extended WLANs OnlyAn extended WLAN configuration forces all MU traffic through the switch. No wireless traffic is locally bridg

AP-7131 Access Point Product Reference Guide10-1010.2.5 Extended WLAN with Mesh NetworkingMesh networking is an extension of the existing wired networ

Adaptive AP10-11• Configure the switch’s IP address on the AAP• Provide the switch IP address using DHCP option 189 on a DHCP server. The IP address i

AP-7131 Access Point Product Reference Guide10-1210.4 Establishing Basic Adaptive AP ConnectivityThis section defines the activities required to confi

Adaptive AP10-132. Select the Auto Discovery Enable checkbox. Enabling auto discovery will allow the AAP to be detected by a switch once its connectiv

AP-7131 Access Point Product Reference Guide10-147. Click Apply to save the changes to the AAP setup. 10.4.1.2 Adopting an Adaptive AP Using a Configu

Adaptive AP10-1510.4.2 Switch ConfigurationBoth a WS5100 (running firmware version 3.1 or later) or a RFS6000/ RFS7000 (running firmware version 1.1 o

AP-7131 Access Point Product Reference Guide2-22Select Disable when the 802.11n rate settings and performance values defined on the AP-7131 cannot be

AP-7131 Access Point Product Reference Guide10-165. Select the target WLAN you would like to use for AAP support from those displayed and click the Ed

Adaptive AP10-17Once an AAP is adopted by the switch, it displays within the switch Access Port Radios screen (under the Network parent menu item) as

AP-7131 Access Point Product Reference Guide10-1810.4.3 Adaptive AP Deployment ConsiderationsBefore deploying your switch/AAP configuration, refer to

Adaptive AP10-1910.4.4 Sample Switch Configuration File for IPSec and Independent WLANThe following constitutes a sample RFS7000 switch configuration

AP-7131 Access Point Product Reference Guide10-20snmp-server manager v2 snmp-server manager v3 snmp-server user snmptrap v3 encrypted auth md5 0x7be2c

Adaptive AP10-21wlan 4 enable wlan 4 ssid qs5-open wlan 4 vlan 230 wlan 5 enable wlan 5 ssid Mesh wlan 5 vlan 111 wlan 5 encryption-type ccmp wlan 5 d

AP-7131 Access Point Product Reference Guide10-22radio 4 bss 2 6 radio 4 channel-power indoor 48 4 radio 4 rss enable radio 4 client-bridge bridge-sel

Adaptive AP10-23!interface ge3 switchport mode trunk switchport trunk native vlan 1 switchport trunk allowed vlan none switchport trunk allowed vlan a

AP-7131 Access Point Product Reference Guide10-24line con 0 line vty 0 24 ! end

Technical SpecificationsThis appendix provides technical specifications in the following areas: • AP-7131 Physical Characteristics• Electrical Charact

Getting StartedThe access point should be installed in an area tested for radio coverage using one of the site survey tools available to the field ser

AP-7131 Access Point Product Reference GuideA-2A.1 AP-7131 Physical CharacteristicsThe AP-7131 has the following physical characteristics: Dimensions

Technical SpecificationsA-3A.2 Electrical CharacteristicsThe AP-7131 access point has the following electrical characteristics:A.3 Radio Characteristi

AP-7131 Access Point Product Reference GuideA-4A.4 Antenna SpecificationsA.4.1 2.4 GHz Antenna MatrixThe following table describes each 2.4 GHz antenn

Technical SpecificationsA-5A.4.1.2 AP-5131 Additional Antenna ComponentsThe following table lists the Motorola part number for various antenna accesso

AP-7131 Access Point Product Reference GuideA-6A.5 Country CodesThe following list of countries and their country codes is useful when using the acces

Technical SpecificationsA-7Cypress CY Serbia RSCzech Rep. CZ Singapore SGDenmark DK Slovak Republic SKDominican Republic DO Slovenia SIEcuador EC Sout

AP-7131 Access Point Product Reference GuideA-8Japan JPJordan JOKazakhstan KZKuwait KWLatvia LVLebanon LBLiechtenstein LILithuania LTLuxembourg LUMace

Usage ScenariosThis appendix provides practical usage scenarios for many of the access point’s key features. This information should be referenced as

AP-7131 Access Point Product Reference GuideB-2WAN port depending on which server responds first to the access point’s request for an automatic update

Usage ScenariosB-31. Set the Windows DHCP Server and access point on the same Ethernet segment.2. Configure the Windows based DHCP Server as follows:a

AP-7131 Access Point Product Reference Guide3-2• For instructions on mounting a AP-7131 to a wall, see Wall Mounted Installations on page 2-9.• For in

AP-7131 Access Point Product Reference GuideB-4The setup example described in this section includes:• 1 AP-7131 model access point• 1 Microsoft Window

Usage ScenariosB-5By default, auto update is enabled on the access point (since the LAN Port is a DHCP Client, out-of-the-box auto update support is o

AP-7131 Access Point Product Reference GuideB-6If the DHCP Server is configured for options 186 and 66 (to assign TFTP Server IP addresses) the access

Usage ScenariosB-7B.1.2.1 BootP OptionsThis section contains instructions for the automatic update of the access point firmware and configuration file

AP-7131 Access Point Product Reference GuideB-8Using options sa, bf and 136: 3. Copy the firmware and configuration files to the appropriate directory

Usage ScenariosB-9B.1.2.2 BootP PrioritiesThe following flowchart displays the priorities used by the access point when the BootP server is configured

AP-7131 Access Point Product Reference GuideB-10B.2 Configuring an IPSEC Tunnel and VPN FAQsThe access point has the capability to create a tunnel bet

Usage ScenariosB-115. Enter the WAN port IP address of AP #1 for the Local WAN IP.6. Within the Remote Subnet and Remote Subnet Mask fields, enter the

AP-7131 Access Point Product Reference GuideB-1211. For the ESP Type, select ESP with Authentication and use AES 128-bit as the ESP encryption algorit

Usage ScenariosB-1315. Select AES 128-bit as the IKE Encryption Algorithm.16. Select Group 2 as the Diffie -Hellman Group. Click OK. This will take yo

Getting Started3-33.3 Initially Connecting to the Access Point 3.3.1 Connecting to the Access Point using the WAN PortTo initially connect to the acce

AP-7131 Access Point Product Reference GuideB-14

Usage ScenariosB-15B.2.3 Frequently Asked VPN QuestionsThe following are common questions that arise when configuring a VPN tunnel.• Question 1: Does

AP-7131 Access Point Product Reference GuideB-16• Question 6: Can an IPSec tunnel over a PPPoE connection be established - such as a PPPoE enabled DSL

Usage ScenariosB-17 • Question 9: I am using a direct cable connection between my two VPN gateways for testing and cannot get a tunnel established, ye

AP-7131 Access Point Product Reference GuideB-18• Verify you can ping each of the remote Gateway IP addresses from clients on either side. Failed ping

Usage ScenariosB-19These three rules should be configured above all other rules (default or user defined). When Advanced LAN Access is used, certain i

AP-7131 Access Point Product Reference GuideB-20

Customer SupportComprehensive on-line support is available at the Support Central site at http://www.symbol.com/support/. Support Central provides our

AP-7131 Access Point Product Reference GuideC-2North American ContactsSupport (for warranty and service information): telephone: 1-800-653-5350 fax: (

Customer SupportC-3Web Support SitesProduct Downloadshttp://support.symbol.com/support/product/softwaredownloads.doManualshttp://support.symbol.com/su

viiDirect-Sequence Spread Spectrum . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1-23MU Association Process . . . . . . . . . . .

AP-7131 Access Point Product Reference Guide3-43. Configure the following settings:• Baud Rate - 19200• Data Bits - 8• Stop Bits - 1• No Parity• No Fl

AP-7131 Access Point Product Reference GuideC-4

Aaccess options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-25access pointCAM . . . . . . . . . . . . . . . . . . . . . . . . .

AP-7131 Access Point Product Reference GuideIN-6CLI, ACL commands . . . . . . . . . . . . . . . . . . . . . . . . . . .8-88CLI, bandwith management .

IN-7LLAN port. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-4LAN to WAN access . . . . . . . . . . . . . . . . . . . . .

AP-7131 Access Point Product Reference GuideIN-8service information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . viiisingle sku . . . .

MOTOROLA INC.1303 E. ALGONQUIN ROADSCHAUMBURG, IL 60196http://www.motorola.com72E-124686-01 Revision AMay 2009

Getting Started3-52. If the default login is successful, the Change Admin Password window displays. Change the password.Enter the current password and

AP-7131 Access Point Product Reference Guide3-6The export function will always export the encrypted Admin User password. The import function will impo

Getting Started3-7The System Name is useful if multiple devices are being administered.3. Select the Country for the access point’s country of operati

AP-7131 Access Point Product Reference Guide3-84. Optionally enter the IP address of the server used to provide system time to the access point within

Getting Started3-9e. Define a Default Gateway address for the access point’s WAN connection. The ISP or a network administrator provides this address.

AP-7131 Access Point Product Reference Guide3-10c. If using the static or DHCP Server option, enter the network-assigned IP Address of the access poin

Getting Started3-11a. Enter the Extended Services Set Identification (ESSID) and name associated with the WLAN. For additional information on creating

AP-7131 Access Point Product Reference Guide3-12The New Security Policy screen displays with the Manually Pre-shared key/No authentication and No Encr

Getting Started3-134. Configure the WEP 128 Settings field as required to define the Pass Key used to generate the WEP keys.Pass Key Specify a 4 to 3

AP-7131 Access Point Product Reference GuideviiiConnecting to the Access Point using the LAN Port . . . . . . . . . . . . . . . . . . . . .3-3Basic De

AP-7131 Access Point Product Reference Guide3-145. Click the Apply button to save the security policy and return to the access point Quick Setup scree

Getting Started3-153.4.3 Where to Go from Here?Once basic connectivity has been verified, the access point can be fully configured to meet the needs o

AP-7131 Access Point Product Reference Guide3-16

System ConfigurationThe access point contains a built-in browser interface for system configuration and remote management using a standard Web browser

AP-7131 Access Point Product Reference Guide4-2System configuration topics include: • Configuring System Settings• Configuring Power Settings• Adaptiv

System Configuration4-32. Configure the access point System Settings field to assign a system name and location, set the country of operation and view

AP-7131 Access Point Product Reference Guide4-43. Refer to the Factory Defaults field to restore either a full or partial default configuration. Admin

System Configuration4-54. Use the Restart access point field to restart the AP (if necessary).5. Click Apply to save any changes to the System Setting

AP-7131 Access Point Product Reference Guide4-66. Click Undo Changes (if necessary) to undo any changes made. Undo Changes reverts the settings displa

System Configuration4-7If 3af is selected, the AP is configured assuming 12.95 watts are available using a 3af power budget, even though there may act

ixEnabling Wireless LANs (WLANs) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5-28Creating/Editing Individual WLANs . .

AP-7131 Access Point Product Reference Guide4-8Refer to the following to assess the AP-7131’s current power state. Once known, determine how available

System Configuration4-9To configure the access point’s switch discovery method and connection medium:1. Select System Configuration -> Adaptive AP

AP-7131 Access Point Product Reference Guide4-103. Refer to the 12 available Switch IP Addresses to review the addresses the access point uses to adop

System Configuration4-11However, if the access point receives one or more IP addresses from the DHCP server, it will not solicit an IP address from a

AP-7131 Access Point Product Reference Guide4-122. Use the access point Access field checkboxes to enable/disable the following on the access point’s

System Configuration4-133. Refer to the Applet Timeout field to set an HTTPS timeout interval.4. Configure the Secure Shell field to set timeout value

AP-7131 Access Point Product Reference Guide4-147. Update the Administrator Access field to change the administrative password used to access the conf

System Configuration4-158. Refer to the Login Message field to optionally define a message displayed to the customer as they login into the access poi

AP-7131 Access Point Product Reference Guide4-169. Click Apply to save any changes to the access point Access screen. Navigating away from the screen

System Configuration4-17select the IKE settings to use either RSA or DES certificates. For additional information on configuring VPN tunnels, see Conf