English dropdown-ico

Manual Symbol Technologies AP-5131

578 pages 5.93 mb
Download

Go to site of 578

Summary
  • Symbol Technologies AP-5131 - page 1

    AP-5131 Access Point Product Reference Guide ...

  • Symbol Technologies AP-5131 - page 2

    ...

  • Symbol Technologies AP-5131 - page 3

    AP-5131 Access Point Product Reference Guide 72E-94168-01 Revision A November 2006 ...

  • Symbol Technologies AP-5131 - page 4

    ...

  • Symbol Technologies AP-5131 - page 5

    © 2006 by Symbol T echnologies, Inc. All rights reserved. No part of this publication may be reproduced or used in any form, or by any electrical or mechanical means, without permission in writing from Symbol. This includes electronic or mechanical means, such a s photocopying, recording, or information storage and retrieval systems. The material ...

  • Symbol Technologies AP-5131 - page 6

    ...

  • Symbol Technologies AP-5131 - page 7

    Contents About This Guide Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vii Document Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vii Notational Conventions . . . . . . . . . . . . . . . . . . . . . . . . . ...

  • Symbol Technologies AP-5131 - page 8

    AP-5131 Access Poin t Product Referen ce Guide iv Single or Dual Mode Radio Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-6 Separate LAN and WAN Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-7 Multiple Mounting Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ...

  • Symbol Technologies AP-5131 - page 9

    v MU Association Process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-22 Operating Modes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-23 Management Access Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-23 Chapter 2. Hardwar ...

  • Symbol Technologies AP-5131 - page 10

    AP-5131 Access Poin t Product Referen ce Guide vi Testing Connectivity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-13 Where to Go from Here? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-14 Chapter 4. System Configuration Configuring System Settings . . . . . . . . . ...

  • Symbol Technologies AP-5131 - page 11

    vii Setting the WLAN’s Radio Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-45 Configuring the 802.11a or 802.11b/g Radio . . . . . . . . . . . . . . . . . . . . . 5-48 Configuring Bandwidth Management Settings . . . . . . . . . . . . . . . . . . . . . . . . 5-55 Configuring Router Settings . . . . . . . . . . . . . . . . ...

  • Symbol Technologies AP-5131 - page 12

    AP-5131 Access Poin t Product Referen ce Guide viii Mapping Users to Groups. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-71 Defining the User Access Policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-72 Chapter 7. Monitoring Statistics Viewing WAN Statistics . . . . . . . . . . . . . . . . . . ...

  • Symbol Technologies AP-5131 - page 13

    ix Network ACL Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-80 Network Radio Configuration Commands . . . . . . . . . . . . . . . . . . . . . . . . 8-85 Network Quality of Service (QoS) Commands . . . . . . . . . . . . . . . . . . . . 8-102 Network Bandwith Management Commands . . . . . . . . . . . . . . . . ...

  • Symbol Technologies AP-5131 - page 14

    AP-5131 Access Poin t Product Referen ce Guide x Appendix A. Technical Specifications Physical Characteristics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-2 Electrical Characteristics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-2 Radio Characteristics ...

  • Symbol Technologies AP-5131 - page 15

    About This Guide Introduction This guide pr ovides configuration a nd setup info rmation for the AP-5131 model ac cess point. Document Conventions The following document conv entions are used in this document: NOTE Indicate tips or special requirements. CAUTION Indicates conditions that can cause equipme nt damage or data loss. ! ...

  • Symbol Technologies AP-5131 - page 16

    AP-5131 Access Poin t Product Referen ce Guide viii Notational Conventions The following notational convention s are used in this document: • Italics are used to highlight specific items in the general text, and to identify chap ters and sections in this and rela ted documents. • Bullets (•) indicate: • action items • lists of alternative ...

  • Symbol Technologies AP-5131 - page 17

    AP-5131 Introduction The Symbol AP-5131 Access Point (AP) provides a bridge between Ethe rnet wired LANs or W ANs and wireless networks. It provides conne ctivity be tween Etherne t wired networks and radio-equipped mobile units (MUs). MUs include th e full line of Symbol terminal s, bar -code scanners, adapters (PC cards, Compact Flash cards an d ...

  • Symbol Technologies AP-5131 - page 18

    AP-5131 Access Poin t Product Referen ce Guide 1-2 1.1 New AP-5131 Features With this most recent 1.1 release of the AP-5131 firmware, the following new featu res have been introduced to the existing AP-5131 feature set: • Mesh Networking • Additional LAN Subnet • On-board Radius Server Authentication • Hotspot Support • Routing Informati ...

  • Symbol Technologies AP-5131 - page 19

    AP-5131 Introduct ion 1-3 Once the AP-5131 (in client bridge mode) establis hes at least one wireless conn ection, it establishes other wireless connections in the bac kground as they become available. In this way , the AP-5131 is able to establish simultaneous redundant links. An AP-5131 (in client bridge mode) c an establish up to 3 simultaneous ...

  • Symbol Technologies AP-5131 - page 20

    AP-5131 Access Poin t Product Referen ce Guide 1-4 1.1.3 On-board Radius Server Authentication The AP-5131 n ow has the ability to work as a Radius Server to pro vide user database information and user authentication. Sev eral new screens have been added to the AP-5131’ s menu tree to configure Radius server authentica tion and configure the lo c ...

  • Symbol Technologies AP-5131 - page 21

    AP-5131 Introduct ion 1-5 1.1.5 Routing Information Protocol (RIP) With the release of the 1.1 version AP-5131, Routing Informatio n Protocol (RIP) fu nctionality has been added to the AP-5131 ’ s existing Router screen. RIP is an interior ga teway protocol that sp ecifies how routers exchange rou ting-table information. The pa rent Router screen ...

  • Symbol Technologies AP-5131 - page 22

    AP-5131 Access Poin t Product Referen ce Guide 1-6 1.2 Feature Overview The Symbol AP-5131 has the followin g existing features carried forward from its initial 1.0 release: • Single or Dual Mode Radio Op tions • Separate LAN and WAN Ports • Multiple Mounting Options • Antenna Support for 2.4 GHz and 5.2 GHz Radios • Sixteen Configurable ...

  • Symbol Technologies AP-5131 - page 23

    AP-5131 Introduct ion 1-7 If the AP-5131 is manufactured as a dual-radio access point, the AP-5131 enables you to configure one radio for 802.11a, and the othe r 802.11b/g. For detailed information on config uring your AP-5131, see Setting the WLAN’ s Radio Configuration on page 5-45 . 1.2.2 Separate LAN and WA N Ports The AP-5131 has one LAN por ...

  • Symbol Technologies AP-5131 - page 24

    AP-5131 Access Poin t Product Referen ce Guide 1-8 For an overview of the Radio 1 (2.4 GHz) and Radio 2 (5.2 GHz) antennas supported on the AP-5131’ s Reverse SMA (RSM A) connectors, see Antenna Sp ecifications on page A-4 . 1.2.5 Sixteen Configurable WLANs A Wireless Local Area Network (WLAN) is a data-com munications system tha t flexibly exten ...

  • Symbol Technologies AP-5131 - page 25

    AP-5131 Introduct ion 1-9 1.2.7 Quality of Serv ice (QoS) Support The AP-5131 QoS implementation provides applic ations running on different wireless devices a variety of priority levels to transmit data to and fro m the AP-5131. Equal data transmission prio rity is fine for data traffic from applications such as Web browsers, file transfers or ema ...

  • Symbol Technologies AP-5131 - page 26

    AP-5131 Access Poin t Product Referen ce Guide 1-10 • Content Filtering For an overview on the encryption and authentication schemes available on the AP-5131, refer to Configuring Access Point Security on page 6-1 . 1.2.8.1 Kerberos Authentication Authentication is a means of verifying informat ion that is transmitted from a secure source. If inf ...

  • Symbol Technologies AP-5131 - page 27

    AP-5131 Introduct ion 1-11 An MU is not able to acces s the network if not au thenticated. When config ured for EAP support, the access point displa ys the MU as an EAP station. EAP is only supported on mobile de vices running Windows XP , Windows 2000 (using Service Pack #4) and Windows Mobile 2003 . Refer to the s ystem administra tor for informa ...

  • Symbol Technologies AP-5131 - page 28

    AP-5131 Access Poin t Product Referen ce Guide 1-12 1.2.8.4 KeyGuard Encryption Use KeyGuard to shield the master e ncryption keys from bein g discovered through hac king. KeyGuard negotiation takes place between the ac cess point and MU upon association. The ac cess point can use KeyGuard with Symbol MUs. KeyGuard is only supported on Symbol MUs m ...

  • Symbol Technologies AP-5131 - page 29

    AP-5131 Introduct ion 1-13 For detailed information on WP A2-CCMP configurations, see Configuring WP A2-C CMP (802.11i) on page 6-22 . 1.2.8.7 Firewall Security A firewall keeps personal d ata in and hackers out. The AP-5131 firewall preve nts suspicio us Internet traffic from proliferating the AP-5 131 managed netwo rk. The AP-5131 performs networ ...

  • Symbol Technologies AP-5131 - page 30

    AP-5131 Access Poin t Product Referen ce Guide 1-14 assignment. In addition to these 16 VLANs, the AP-51 31 supports dynamic, user-based, VLANs when using EAP au thentication . VLANs enable organizations to share netwo rk res ources in various network segments within larg e areas (airports, shopping malls, e tc.). A VLAN is a group of clients with ...

  • Symbol Technologies AP-5131 - page 31

    AP-5131 Introduct ion 1-15 SNMP allows a network administrator to configure the AP -5131, manage network p erformance, find and solve network problems, and plan for network growth. Th e AP-5131 supports SNMP management functions for gatherin g information from its ne twork components. The AP-5131 CDROM and th e (AP- 5131 downloads site) contains th ...

  • Symbol Technologies AP-5131 - page 32

    AP-5131 Access Poin t Product Referen ce Guide 1-16 1.2.15 V oice Prioritization Each AP-5131 WLAN has the capa bility of having its QoS policy conf igured to prioritize the network traffic requirements for associated MUs. A WLAN QoS page is available for each enabled WLAN on either the AP-5131 802.11a or 802.1 1b/g radio. Use the QoS page to enabl ...

  • Symbol Technologies AP-5131 - page 33

    AP-5131 Introduct ion 1-17 For detailed information on available AP-5131 statistical displays and the values they represent, see Monitoring Statistics on page 7-1 . 1.2.18 T ransmit Power Control The AP-5131 has a configurable power level for each radio. This enable s the network administrator to define the antenna’ s transmission power level in ...

  • Symbol Technologies AP-5131 - page 34

    AP-5131 Access Poin t Product Referen ce Guide 1-18 1.2.22 DHCP Support The AP-5131 can use Dynamic Host Config uration Protocol (DHCP) to obtain a leased IP address an d configuration in formation from a remote server . DH CP is based on the BOOTP proto col and can coexist or interoperate with BOOTP . Configure the AP-5131 to send out a DHCP reque ...

  • Symbol Technologies AP-5131 - page 35

    AP-5131 Introduct ion 1-19 digital data signal is encoded onto the carriers using a DSSS chipping algori thm . The AP-5131 rad io signal propagates into the air as ele ctromagnetic waves. A receiving antenna (on th e MU) in the path of the waves absorbs the waves as electrical signals. The receiving MU interprets (demo dulates) the signal by reappl ...

  • Symbol Technologies AP-5131 - page 36

    AP-5131 Access Poin t Product Referen ce Guide 1-20 different AP-5131. The roam occurs when the MU analy zes the reception quality at a location and determines a different AP-5131 provide s better signal strength and lower MU load distribution. If the MU does not find an AP-5131 with a workable signal, it can perform a scan to find any AP . As MUs ...

  • Symbol Technologies AP-5131 - page 37

    AP-5131 Introduct ion 1-21 1.3.3 Media T ypes The AP-5131 radio interface conforms to IE EE 802.11a/b/g spec ifications. The interface op erates at a maximum 54Mbps (802.11a radio) using direct-s equence radio technology . The AP-5131 supports multiple-cell operatio ns with fast roaming between cells. Within a d irect-sequence system, each ce ll ca ...

  • Symbol Technologies AP-5131 - page 38

    AP-5131 Access Poin t Product Referen ce Guide 1-22 1.3.5 MU Association Process An AP-5131 recognizes MUs as they begin the as sociation process with the AP-5131. An AP-5131 keeps a list of the MUs it services. MUs associate with an AP-5131 based on the following co nditions: • Signal strength between the AP-5131and MU • Number of MUs currentl ...

  • Symbol Technologies AP-5131 - page 39

    AP-5131 Introduct ion 1-23 1.3.6 Operating Modes The AP-5131 ca n operate in a couple of con figurations. • Access Point - As an Access Point , the AP-5131 functions as a layer 2 bridge (similar to Symbol’ s existing AP-4131 access point). The wired uplink can operate as a trunk and support multiple VLANs. Up to 16 WLANs can be defined and mapp ...

  • Symbol Technologies AP-5131 - page 40

    AP-5131 Access Poin t Product Referen ce Guide 1-24 • MIB (Management Information Base) access ing the AP -5131 SNMP function using a MIB Browser . The AP-5131 CDROM contains the follo wing 2 MIB files: • Symbol-CC-WS2000-MIB-2.0 (standa rd Symbol MIB file) • Symbol-AP-5131-MIB (AP-5131 specific MIB file) Make configuration changes to AP-5131 ...

  • Symbol Technologies AP-5131 - page 41

    Hardware Installation An AP-5131 installation includes mounting the AP-5131 on a table-top , wall, ceiling T -bar or above the ceiling (attic or plenum), connecting the AP-5 131 to the network (LAN or W AN port connection), connecting antennae and applying power . Installation procedu res vary for different environments. See the follow ing secti on ...

  • Symbol Technologies AP-5131 - page 42

    AP-5131 Access Poin t Product Referen ce Guide 2-2 2.1 Precautions Before installing the AP-5131 verify the following: • Do not install in wet or dusty areas without additional protection . Contact a Symbol representative for more inform ation. • V erify the environment has a continuous temperature range betwe en -20° C to 50° C. 2.2 Package ...

  • Symbol Technologies AP-5131 - page 43

    Hardware Installation 2-3 V erify the model indicated on the bottom of the AP-5131 is correct. Contact the Symbol Su pport Center to report missing or improperly functioning items. AP-5131-13 041-WWR AP-5131 802 .11a+g Dual Radi o Access Point AP-5131 Install Guide Power Inject or (Part No . AP-PSBIAS-1 P2-AFR) Software and Doc umentation CD -ROM A ...

  • Symbol Technologies AP-5131 - page 44

    AP-5131 Access Poin t Product Referen ce Guide 2-4 The Symbol power injector (Part No. AP-PSBIAS-1P2-AFR) is inclu ded in certain orderable configurations, but can be added to any co nfiguration. For more information on the Symbol powe r injector , see Symbol Pow er Injector System on page 2-8 . For an overview on the optional ante nnae available f ...

  • Symbol Technologies AP-5131 - page 45

    Hardware Installation 2-5 metal, concrete, walls or floors block transmission. Install the AP-5131 in open areas or add access points as needed to improve coverag e. Antenna coverage is analogous to lightin g. Users might find an area lit from far away to b e not bright enough. An area lit sharply might min imize coverage and create dark areas. Uni ...

  • Symbol Technologies AP-5131 - page 46

    AP-5131 Access Poin t Product Referen ce Guide 2-6 suite supporting the 2.4 GHz band and another antenn a suite supporting the 5.2 GHz band. Select an antenna model best suited to the intended operational environme nt of your AP -5131. Antenna connectors for Radio 1 are locate d in a different location from the Ra dio 2 antenna connectors. On singl ...

  • Symbol Technologies AP-5131 - page 47

    Hardware Installation 2-7 The 5.2 GHz antenna suite includes the follo wing models: For detailed specifications on the 2.4 GHz and 5.2 GHz antennae mentioned in this section, see section 2.4 GHz Antenna Matrix on page A-4 and section 5.2 GHz Antenn a Matrix on page A-4 . Symbol Part Number Antenna T ype Nominal Net Gain (dBi) ML-5299-WPNA 1-01R Pan ...

  • Symbol Technologies AP-5131 - page 48

    AP-5131 Access Poin t Product Referen ce Guide 2-8 2.5 Power Options The power options for the AP -5131 include: • Symbol Power Injector (Part No. AP-PSBIAS-1P2-AFR) • Symbol 48-V olt Power Supply (Part No. 50-24000-050) • Any standard 802.3af complian t device. 2.6 Symbol Power Injector Sy stem The AP-5131 can receive power either directly f ...

  • Symbol Technologies AP-5131 - page 49

    Hardware Installation 2-9 2.6.1 Installing the Power Injector Refer to the following sections for information on planning, installing , and validating the power injector installa tion: • Preparing for Site Installation • Cabling the Power Injector • Power Injector LED Indicators 2.6.1.1 Preparing for Site Installation The power injector can b ...

  • Symbol Technologies AP-5131 - page 50

    AP-5131 Access Poin t Product Referen ce Guide 2-10 Ensure the cable length from the Ethernet source (h ost) to the power injector and AP-5131 does not exceed 100 meters (333 ft.) The power injector has no On/Off power switch. The pow er injector receives power and is ready for AP-5131 device connection and ope ration as soon as AC power is applied ...

  • Symbol Technologies AP-5131 - page 51

    Hardware Installation 2-11 2.7 Mounting the AP-5131 The AP-5131 can rest on a flat surface, attach to a wall, mount under a suspended T -Bar or above a ceiling (plenum or attic). Choose one of the follo wing mounting options based on the physical environment of the cove rage area. Do not mount t he AP-5131 in a location that has not been approved i ...

  • Symbol Technologies AP-5131 - page 52

    AP-5131 Access Poin t Product Referen ce Guide 2-12 4. Cable the AP-5131 using either the Symbol powe r injector solution or an a pproved line cord and power supply . For Symbol power injector installations: a. Connect a RJ-45 Ethernet ca ble between th e network data supply (host) and the power injector Data In connector . b. Connect a RJ-45 E the ...

  • Symbol Technologies AP-5131 - page 53

    Hardware Installation 2-13 5. V erify the behavior of the AP-5131 LEDs. For more informa tion, see LED Indicators on page 2-20 . 6. Return the AP-5131 to an upright position and pl ac e it in the location you wish it to operate. Ensure the AP-5131 is sitting evenly on all four rubber feet. The AP-5131 is ready to co nfigure. For information on an A ...

  • Symbol Technologies AP-5131 - page 54

    AP-5131 Access Poin t Product Referen ce Guide 2-14 8. Cable the AP-5131 using either the Symbol powe r injector solution or an a pproved line cord and power supply . For Symbol power injector installations: a. Connect a RJ-45 Ethernet ca ble between th e network data supply (host) and the Power Injector Data In c onnector . b. Connect a RJ-45 E th ...

  • Symbol Technologies AP-5131 - page 55

    Hardware Installation 2-15 e. Plug the power adapter into an outlet. 9. V erify the behavior of the AP-5131 LEDs. For more informa tion, see LED Indicators on page 2-20 . The AP-5131 is ready to co nfigure. For information on an AP-5131 de fault configuration, see Getting Started on page 3-1 . For specific details on AP-5131 system configurat ions, ...

  • Symbol Technologies AP-5131 - page 56

    AP-5131 Access Poin t Product Referen ce Guide 2-16 4. Cable the AP-5131 using either the Symbol powe r injector solution or an a pproved line cord and power supply . For Symbol power injector installations: a. Connect a RJ-45 Ethernet ca ble between th e network data supply (host) and the Power Injector Data In c onnector . b. Connect a RJ-45 E th ...

  • Symbol Technologies AP-5131 - page 57

    Hardware Installation 2-17 10. Rotate the AP-5131 cha ssis 45 degrees coun ter -clockwise. The clips click as they fasten to the T -bar . 11. The AP-5131 is ready to co nfigure. For information on an AP-5131 de fault configuration, see Getting Started on page 3-1 . For specific details on AP-5131 system configurat ions, see System Configuration on ...

  • Symbol Technologies AP-5131 - page 58

    AP-5131 Access Poin t Product Referen ce Guide 2-18 The mounting hardware required to install the AP-5131 ab ove a ceiling consists of: • Light pipe • Badge for light pi pe • Decal for badge • Safety wire (strongly recommended) • Security cable (optional) T o install the AP-5131 above a ceiling: 1. If possible, remove the adjacent ceiling ...

  • Symbol Technologies AP-5131 - page 59

    Hardware Installation 2-19 9. Snap the clips of the light pipe into the bottom of the AP-5131. 10. Fit the light pipe into hole in the tile from its unfinished side. 11. Place the decal on the back of the badge and slid e the badge onto the light pipe from the finished side of the tile. 12. Attach the radio antennae to their correct connectors. 13. ...

  • Symbol Technologies AP-5131 - page 60

    AP-5131 Access Poin t Product Referen ce Guide 2-20 For Symbol power injector installations: a. Connect a RJ-45 Ethernet ca ble between th e network data supply (host) and the Power Injector Data In c onnector . b. Connect a RJ-45 E thernet cable betwe en the power in jector Data & Power Out connector and the AP-5131 LAN port. c. Ensure the cab ...

  • Symbol Technologies AP-5131 - page 61

    Hardware Installation 2-21 The five LEDs on the top housing of the AP-5131 are clearly visible in table-top, wall and below ceiling installations. The five AP-5131 top hou sing LEDs have the following display and function ality: The LEDs on the rear of the AP-5131 are viewed using a single (customer installed) extended lightpipe, adjusted as requir ...

  • Symbol Technologies AP-5131 - page 62

    AP-5131 Access Poin t Product Referen ce Guide 2-22 2.9 Setting Up MUs For a discussion of how to initially test the AP-5131 to ensure it can interoperate with the MUs intended for its operationa l environment, see Basic Device Configuration on page 3-5 and specifically T esting Connectivity on page 3-13 . Refer to the LA-5030 & LA-5033 Wireles ...

  • Symbol Technologies AP-5131 - page 63

    Getting Started The AP-5131 should be installed in an area tested fo r radio coverage usin g one of the site survey too ls available to the Symbol field servic e technician. Once an installa tion site has been identifie d, the installer should carefully follow the hardw are prec autions, requirements, moun ting guidelines and power options outlined ...

  • Symbol Technologies AP-5131 - page 64

    AP-5131 Access Poin t Product Referen ce Guide 3-2 • For instructions on installing the AP-5131 on a table top, see Desk Mounte d Installations on page 2-11 . • For instructions on AP-5131 wall mounting, see Wall Mounted Installations on page 2-13 . • For instructions on mounting an AP-5131 to a ceiling T -bar , see Suspended Ceiling T -Bar I ...

  • Symbol Technologies AP-5131 - page 65

    Getting Start ed 3-3 3.3 Default Configuration Changes The following table illu strates the changes made to the AP -5131 version 1.1 con figuration as compared to the 1.0 version con figuration: 3.4 Initially Connecting to the Access Point 3.4.1 Connecting to the Access Point using the W AN Port T o initially connect to the AP-5131 using the access ...

  • Symbol Technologies AP-5131 - page 66

    AP-5131 Access Poin t Product Referen ce Guide 3-4 3.4.2 Connecting to the Access Point using the LAN Port T o initially connect to the AP-5131 using the access po int’ s LAN port: 1. The LAN port de fault is set to DHCP . Connect the AP-5131 ’ s LAN port to a DHCP server . The AP-5131 will receive its IP address auto matically . 2. T o view th ...

  • Symbol Technologies AP-5131 - page 67

    Getting Start ed 3-5 3.5 Basic Device Configuration For the basic setup described in this section, the Java-based Web UI will be used to configure the AP-5131. Use the AP-5131’ s LAN interface for establis hing a link with the AP-5131. Con figure the AP- 5131 as a DHCP clie nt. For optimal screen resolution, set your screen resolution to 1024 x 7 ...

  • Symbol Technologies AP-5131 - page 68

    AP-5131 Access Poin t Product Referen ce Guide 3-6 Enter the current password and a new admi n password in fields provided, and click Apply . Once the admin pass word has been updated, a wa rning message d isplays stating the AP- 5131 must be set to a country . The export function will always export the encrypted Admin User pas sword. The import fu ...

  • Symbol Technologies AP-5131 - page 69

    Getting Start ed 3-7 2. Enter a Sy stem Name for the AP-5131. The System Name is useful if multiple Symbol de vices are being administered. 3. Select the Country for the AP-5131’ s country of operation from the drop-d own menu The AP-5131 prompts the user for the correct cou ntry code on the first login. A warning message also dis plays stating t ...

  • Symbol Technologies AP-5131 - page 70

    AP-5131 Access Poin t Product Referen ce Guide 3-8 4. Optionally enter the IP address of the server used to provide system time to the AP-5131 within the T i me Server field. Once the IP address is entered, the AP-5131’ s Network T ime Proto col (NT P) functionality is engaged automatically . Refer to the AP-5131 Product Reference Guide for infor ...

  • Symbol Technologies AP-5131 - page 71

    Getting Start ed 3-9 e. Define a Default Gateway address for the AP -5131’ s W AN connection. The ISP or a network administrator provides this address. f. Specify the address of a Primary DNS Server . The ISP or a network administrator provides this address. 6. Optionally , use the Enable PPP over Ethernet checkbox to enable Point-to-Point over E ...

  • Symbol Technologies AP-5131 - page 72

    AP-5131 Access Poin t Product Referen ce Guide 3-10 c. If using the static or DHCP Server option, ente r the network-assigned IP Address of the AP-5131. d. The Subnet Mask defines the size of the subnet. The first two sets of numbers specify the network domain, the next set specifies the subset of hosts within a larger network. These values help di ...

  • Symbol Technologies AP-5131 - page 73

    Getting Start ed 3-11 a. Enter the Extended Services Set Identification (ESSID) and name asso ciated with the WLAN. For additional informatio n on creating and editing up to 16 WLANs pe r AP-5131, see Creating/Editing Indiv idual WLANs on page 5-24 . b. Use the Avail able On checkboxes to define whether the target WLAN is operating over the 802.11a ...

  • Symbol Technologies AP-5131 - page 74

    AP-5131 Access Poin t Product Referen ce Guide 3-12 Multiple WLANs can share the same security policy , so be careful not to name security policies after specific WLANs or risk defining a WLAN to single policy . Symbol recommends naming the policy after the attributes of the au thentication or encryption type selected. 3. Select the WEP 1 28 (104 b ...

  • Symbol Technologies AP-5131 - page 75

    Getting Start ed 3-13 5. Click the Apply button to save the security policy and return to the AP -5131 Quick Setup screen. At this point, you can test the AP-5131 for MU interoperability . 3.5.2 T esting Connectivity V erify the AP-5131’ s link with an MU by se nding Wireless Network Management Protocol (WNMP) ping packets to the associated MU. U ...

  • Symbol Technologies AP-5131 - page 76

    AP-5131 Access Poin t Product Referen ce Guide 3-14 4. Click the Ping button to begin transmitting pack ets to the specified MU address. Refer to the Number of Responses va lue to asse ss the number of responses from the MU versus the number of ping packets trans mitted by the AP-5131. Use the ratio of packe ts sent versus the number of packets rec ...

  • Symbol Technologies AP-5131 - page 77

    Sy stem Configuration The Symbol AP-5131 contains a built-in browser in terface for system configu ration and remote management using a stan dard Web browser such as Microsoft Internet Explore r , Netscape Navigator or Mozilla Firefox. The browser interface also allows for system monito ring of the AP-5131. Web management of the AP-5131 requires ei ...

  • Symbol Technologies AP-5131 - page 78

    AP-5131 Access Poin t Product Referen ce Guide 4-2 . System configuration topics includ e: • Configuring System Settings • Configuring Data Access • Managing Certificate Authority (CA) Certificate s • Configuring SNMP Settings • Configuring Network T ime Protocol (NTP) • Logging Configuration • Importing/Exporting Configurations • U ...

  • Symbol Technologies AP-5131 - page 79

    System Configurat ion 4-3 2. Configure the AP-5131 Sy stem Settings field to assign a system n ame and location, set the country of operation and view devic e version information. System Name Specify a device name for the AP-5131 . Symbol recommends selecting a name serving as a reminder of the user base the AP-5131 supports (engineering, retail, e ...

  • Symbol Technologies AP-5131 - page 80

    AP-5131 Access Poin t Product Referen ce Guide 4-4 3. Refer to the Factory Defaults field to restore either a full o r partial defa ult configuration. Country The AP-5131 prompts the user for the correct country code after the first login. A warning message also displays stating that an incorrect country setting will lead to an illegal use of the A ...

  • Symbol Technologies AP-5131 - page 81

    System Configurat ion 4-5 4. Use the Restart AP-5131 field to restart the AP (if necessa ry). 5. Click Apply to save any changes to the System Settings screen. Navigating away from the screen without clicking the Apply bu tton results in all changes to the screen being lost. 6. Click Undo Changes (if necessary) to undo any changes made. Undo Change ...

  • Symbol Technologies AP-5131 - page 82

    AP-5131 Access Poin t Product Referen ce Guide 4-6 7. Click Logout to securely exit the AP -5131 Symbol Access Point applet. A prompt display s confirming the logout before the applet is closed. 4.2 Configuring Data Access Use the AP-5131 Access screen to enable /disable data throughput to the AP-51 31’ s LAN1, LAN2 and/or W AN interfaces and dis ...

  • Symbol Technologies AP-5131 - page 83

    System Configurat ion 4-7 3. Refer to the Applet T imeout field to set an HTTPS timeout interval. 4. Configure the Secure Shell field to set timeout values to reduce network inactivity . 5. Use the Admin Authentication buttons to specify the authentication server conn ection method. Applet HTTP (port 80) Select the L AN1, LAN2 and/or W AN checkboxe ...

  • Symbol Technologies AP-5131 - page 84

    AP-5131 Access Poin t Product Referen ce Guide 4-8 6. Use the Radius Server if a Radius server has been selected as the authentication server , enter the required network addre ss information. 7. Update the Administrator Access field to change the administ rative password used to access the AP-5131 configuration se ttings. 8. Click Apply to save an ...

  • Symbol Technologies AP-5131 - page 85

    System Configurat ion 4-9 4.3 Managing Certificate Aut hority (CA) Certificates Certificate management includes the follo wing sections: • Importing a CA Certificate • Creating Self Certificates for Accessing the VPN 4.3.1 Importing a CA Certificate A certificate authority (CA) is a network authority that issues and manages security credentials ...

  • Symbol Technologies AP-5131 - page 86

    AP-5131 Access Poin t Product Referen ce Guide 4-10 2. Copy the content of the CA Certificate message (using a text editor such as notepad) and then click on Paste from Clipboard . The content of the certi ficate displays in the Import a root CA Certificate field. 3. Click the Import root CA Certificate button to import it into the CA Certificate l ...

  • Symbol Technologies AP-5131 - page 87

    System Configurat ion 4-11 T o create a self certificate: 1. Select Sy stem Configuration -> Certificate Mgmt -> Self Certificates from the AP-5131 menu tree. 2. Click on the Add button to create the certificate request. The Certificate Request screen di splays. 3. Complete the request form with the pertinent informatio n. Only 4 values are r ...

  • Symbol Technologies AP-5131 - page 88

    AP-5131 Access Poin t Product Referen ce Guide 4-12 4. When the form is completed, click the Generate button. The Certificate Reques t screen disappears and the ID of the generated certificate request displays in the drop-down list of certifi cates within the Self Certificates screen. 5. Click the Generate Request butt on. The generated certificate ...

  • Symbol Technologies AP-5131 - page 89

    System Configurat ion 4-13 6. Click the Copy to Clipboard button. The content of certificate request is copied to the clipboard. Create an email to your CA, paste the content of the request into the body of the message and send it to the CA. The CA signs the certificate a nd will send it back. Once received, copy the content from the email into the ...

  • Symbol Technologies AP-5131 - page 90

    AP-5131 Access Poin t Product Referen ce Guide 4-14 1. Select Sy stem Configuration -> Certificate Mgmt -> Self Certificates from the AP-5131 menu tree. 2. Click on the Add button to create the certificate request. The Certificate Request screen di splays. 3. Complete the request form with the pertinent information. Key ID (required) Enter a ...

  • Symbol Technologies AP-5131 - page 91

    System Configurat ion 4-15 4. Complete as many of the optional va lues within the Certificate Request scree n as possible. 5. When the form is completed, click the Generate button from within the Certificate Request screen. The Certificate Reques t screen disappears and the ID of the generated certificate request displays in the drop-down list of c ...

  • Symbol Technologies AP-5131 - page 92

    AP-5131 Access Poin t Product Referen ce Guide 4-16 7. Click the Copy to clipboard button. Save the certificate content to a secure location. 8. Connect to the Window s 2000 or 20 03 server used to sign th e certificate. 9. Select the Request a certificate option. Click Next to continue. 10. Select the Advanced request checkbox from within the Choo ...

  • Symbol Technologies AP-5131 - page 93

    System Configurat ion 4-17 A File Download screen displays prompting the use r to select the download location for the certificate. 14. Click the Save button and save the certifi cate to a secure location. 15. Load the certificates on the AP-5131 . 16. Open the certificate file and c opy its contents in to the CA Certificates sc reen by clickin g t ...

  • Symbol Technologies AP-5131 - page 94

    AP-5131 Access Poin t Product Referen ce Guide 4-18 If using the Symbol-CC-WS20 00-MIB-2.0 and/or Sy mbol-AP-5131-MIB to config ure the AP-5131, use the table below to locate the MIB wh ere the featu re can be configured. NOTE The Symbol-AP-5131-MIB contains the majority of the info rmation contained within the Symb ol-CC-WS200 0-MIB-2.0 file. This ...

  • Symbol Technologies AP-5131 - page 95

    System Configurat ion 4-19 SNMP allows a network administrator to manage network performance, fin d and solve network problems, and plan for network growth. The AP-5131 suppo rts SNMP management functions for gathering information from its network compon ents, communicating that information to specified users and configuring the AP-5131. All the fi ...

  • Symbol Technologies AP-5131 - page 96

    AP-5131 Access Poin t Product Referen ce Guide 4-20 community strings for read-only and read /write access. SNMP vers ion 3 (v3) further enhances protocol features, providing much improved security . SNMP v3 encrypts transmissions and provides authentication for users generating requ ests. T o configure SNMP v1/v2c community definitions and SNMP v3 ...

  • Symbol Technologies AP-5131 - page 97

    System Configurat ion 4-21 3. Configure the SNMP v3 User De finitions field (if SNMP v3 is used) to a dd and configure SNMP v3 us er definitio ns. SNMP v3 user definitions allow read-o nly or read/write access to ma nagement information as appropriate. Delete Select Delete to remove a SNMP v1/v2c community definition. Community Use the Communi ty f ...

  • Symbol Technologies AP-5131 - page 98

    AP-5131 Access Poin t Product Referen ce Guide 4-22 4. Specify the users who can read and optionally modify the SNMP-ca pable client. 5. If configuring SNMP v3 user definitions, se t the SNMP v3 engine ID. 6. Click Apply to save any changes to the SNMP Access screen. Na vigating away fro m the screen without clicking the Appl y button results in al ...

  • Symbol Technologies AP-5131 - page 99

    System Configurat ion 4-23 7. Click Undo Changes (if necessary) to undo any changes made. Undo Changes reverts the settings displayed on the SNMP Access screen to the last sav ed configuration. 8. Click Logout to securely exit the AP -5131 Symbol Access Point applet. A prompt displays confirming the logout before the applet is closed. For additiona ...

  • Symbol Technologies AP-5131 - page 100

    AP-5131 Access Poin t Product Referen ce Guide 4-24 2. Configure the SNMP Acces s Control screen to a dd the IP addresses of those users rece iving SNMP access. Access Control List Enter Start IP and End IP addresses (numerical addresses only , no DNS names supported) to specify a range of user that can access the AP-5131 SNMP interface. An SNMP-ca ...

  • Symbol Technologies AP-5131 - page 101

    System Configurat ion 4-25 4.4.2 Enabling SNMP T raps SNMP provides the ability to send traps to notify the administra tor that trap cond itions are met. T raps are network packets containin g data relating to network devices, or SNMP agents, that send th e traps. SNMP management applications can receive and interpret these packets, and optio nally ...

  • Symbol Technologies AP-5131 - page 102

    AP-5131 Access Poin t Product Referen ce Guide 4-26 2. Configure the SNMP v1/v2c T rap Config uration field (if SNMP v1/v2c T raps are used) to modify the following: 3. Configure the SNMP v3 T rap Configuration field (if SNMP v3 T raps are used) to modify the following: Add Click Add to create a new SNMP v1/v2c T rap Configuration entry . Delete Cl ...

  • Symbol Technologies AP-5131 - page 103

    System Configurat ion 4-27 4. Click Apply to save any changes to the SNMP T rap Configur ation screen. Naviga ting away from the screen without clicking the Ap ply button results in all changes to the screen being lost. 5. Click Undo Changes (if necessary) to undo any change s made. Undo Changes reverts the settings dis played on SNM P T rap Config ...

  • Symbol Technologies AP-5131 - page 104

    AP-5131 Access Poin t Product Referen ce Guide 4-28 4.4.3 Configuring S pecific SNMP T raps Use the SNMP T raps screen to enable specific traps on the AP-5131. Symb ol recommends definin g traps to capture unauthorized devices ope rating within the AP-5131 coverage area. T rap configuration depends on the network machin e that receives the generate ...

  • Symbol Technologies AP-5131 - page 105

    System Configurat ion 4-29 3. Configure the SNMP T raps field to generate traps when SNMP capable MUs are denied authentication privileges o r are subject of an ACL violation . When a trap is enabled, a tra p is sent every 5 seconds until the c ondition no lon ger exists. 4. Configure the Network T rap s field to generate traps when th e AP-5131’ ...

  • Symbol Technologies AP-5131 - page 106

    AP-5131 Access Poin t Product Referen ce Guide 4-30 6. Click Apply to save any changes to the SNMP T raps screen. Navigating away from the screen without clicking the Appl y button results in all changes to the screen being lost. 7. Click Undo Changes (if necessary) to undo any change s made. Undo Changes reverts the settings displayed o n SNMP T r ...

  • Symbol Technologies AP-5131 - page 107

    System Configurat ion 4-31 2. Configure the RF T rap Thresholds field to define device threshold valu es for SNMP traps. NOTE A verage Bit Speed,% of Non-Unicast, Average Signal, Average Retries,% Dropped and % Undecryptable are not AP-51 31 statistics. Pkts/s Enter a maximum threshold for the total throughput in Pps (Packets per second). Throughpu ...

  • Symbol Technologies AP-5131 - page 108

    AP-5131 Access Poin t Product Referen ce Guide 4-32 3. Configure the Minimum Packets field to define a minimum packet throughput value for trap generation. 4. Click Apply to save any changes to the SNMP RF T raps screen. Na vigating away from th e screen without clicking the Appl y button results in all changes to the screen being lost. 5. Click Un ...

  • Symbol Technologies AP-5131 - page 109

    System Configurat ion 4-33 T o manage clock synchronization on the AP-51 31: 1. Select Sy stem Configuration - > Date/T ime from the AP -5131 menu tree. 2. From within the Current T ime field, click the Refresh button to update the time since the screen was displayed by the user . The Current T i me field displays the current ti me based on the ...

  • Symbol Technologies AP-5131 - page 110

    AP-5131 Access Poin t Product Referen ce Guide 4-34 This option is disabled when the Enable NTP on AP-51 31 checkbox has been selected, an d therefore should be vie wed as a second means to define the AP-5131 system time . 4. If using the Manual Date/T ime Setting screen to define the AP-5131’ s system time, re fer to the T ime Zone field to sele ...

  • Symbol Technologies AP-5131 - page 111

    System Configurat ion 4-35 4.6 Logging Configuration The AP-5131 provides the capability for p eriodically logging syste m events that pr ove useful in assessing the throughput and performance of the AP-5131 or troubleshooting problems on the AP-5131 managed Local Area Network (LAN). Use the Logging Configuration screen to set the desired logging l ...

  • Symbol Technologies AP-5131 - page 112

    AP-5131 Access Poin t Product Referen ce Guide 4-36 3. Click Apply to save any changes to the Logging C onfigura tion screen. Navigating away from the screen without clicking the Apply button resu lts in all changes to the screen being lo st. Vie w L og Click Vie w to save a log of events retained on the AP-5131 . The system displays a prompt reque ...

  • Symbol Technologies AP-5131 - page 113

    System Configurat ion 4-37 4. Click Undo Changes (if necessary) to undo any changes made. Undo Changes reverts the settings displayed on the Loggin g Configuration screen to the last save d configuration. 5. Click Logout to securely exit the AP-5131 Symbol Access Point applet. A prompt displays confirming the logout before the applet is closed. 4.7 ...

  • Symbol Technologies AP-5131 - page 114

    AP-5131 Access Poin t Product Referen ce Guide 4-38 T o create an importable/ex portable AP-5131 co nfiguration file: 1. Select Sy stem Configuration - > Config Import/Export from the AP-5131 menu tree. 2. Configure the F TP and TF TP Import/Export field to import/export configuration settings. Filename Specify the name of the configuration file ...

  • Symbol Technologies AP-5131 - page 115

    System Configurat ion 4-39 3. Configure the HTTP Import/Export field to import/export AP-5131 configuration settings using HTTP . Username Specify a username to be used when logging in to the F TP server . A username is not required for TF TP server logins. Password Define a password allowing access to the F TP server for the import or export opera ...

  • Symbol Technologies AP-5131 - page 116

    AP-5131 Access Poin t Product Referen ce Guide 4-40 4. Refer to the Status field to assess the comple tion of the import/export operation. Status After executing an operation (by clicking any of the buttons in the window), check the Status field for a progress indicator and messages about the success or errors in executing the Import/ Export operat ...

  • Symbol Technologies AP-5131 - page 117

    System Configurat ion 4-41 5. Click Apply to save the filename and Server IP information. The App ly button does not execute the import or export operation , only saves the settings enter ed. 6. Click Undo Changes (if necessary) to undo any changes made. Undo Changes reverts the settings displayed on Config Import/E xport screen to the last saved c ...

  • Symbol Technologies AP-5131 - page 118

    AP-5131 Access Poin t Product Referen ce Guide 4-42 For detailed update s cenarios involvin g both a Windows DHCP and a Linux BootP server configuration, see Configuring Automatic Updates usin g a DHCP or Linux BootP Serv er Configuration on page B-1 . If a firmware update is required, use the Firmware Update screen to specify a file name and defin ...

  • Symbol Technologies AP-5131 - page 119

    System Configurat ion 4-43 3. Configure the DHCP Options field to enable automatic firmwa re and/or config uration file updates. DHCP options are used for out-of-the-box rapid dep loyment for Symbol wireless products. The following are the two DHCP options availa ble on the AP-5131: • Enable Automatic Firmware Update • Enable Automatic Configur ...

  • Symbol Technologies AP-5131 - page 120

    AP-5131 Access Poin t Product Referen ce Guide 4-44 The DHCP Server needs to be configured with th e above mentio ned vendor specific options and vendor class identifie r . The update is conducted ov er the LAN or W AN port depending on which is the active port at the time the firmware update request is made. Configure the Update Firmware field as ...

  • Symbol Technologies AP-5131 - page 121

    System Configurat ion 4-45 • Username - Specify a username for the F TP server login. • Password - Specify a password for F TP server login. Default is symbol. 9. Click the Perform Update button to initiate the update. Upon confirming the firmware update, the AP reboots and com pletes the update. 10. After the AP reboots, return to the Firmware ...

  • Symbol Technologies AP-5131 - page 122

    AP-5131 Access Poin t Product Referen ce Guide 4-46 11. Confirm the AP-5131 configuration is the same as it was b efore the firmware upda te. If they are not, restore the settings. Refer to Importing/Exporting Configu rations on pa ge 4-37 for instructions on expo rting the configu ration back to the AP-5131. 12. Click Apply to save the filename an ...

  • Symbol Technologies AP-5131 - page 123

    System Configurat ion 4-47 NOTE For a discussion on the implications of replacing an existing Symbol AP-4131 deployment with an AP -5131, see Replacing an AP-4131 with an AP-5131 on page B-1 9 . ...

  • Symbol Technologies AP-5131 - page 124

    AP-5131 Access Poin t Product Referen ce Guide 4-48 ...

  • Symbol Technologies AP-5131 - page 125

    Network Management Configuring network managemen t includes confi guring network aspects in nume rous areas. See the following sections for more information on AP-5131 ne twork management: • Configuring the LAN Interface • Configuring W AN Settings • Enabling Wireless LANs (WLANs) • Configuring Router Settings 5.1 Configuring the LAN Interf ...

  • Symbol Technologies AP-5131 - page 126

    AP-5131 Access Poin t Product Referen ce Guide 5-2 Use the LAN Configuration screen to enable one (or both) of an AP-5131’ s LAN interfaces, assign them names, define which L AN is currently active on the AP-5 131 Ethernet port and assign a timeout value to disable the LAN connection if no data traffic is detec ted within a defined interval. T o ...

  • Symbol Technologies AP-5131 - page 127

    Network Manage ment 5-3 3. Click Apply to save any changes to the LAN Configuration sc reen. Navigating a way from the screen without clicking the Apply button results in all change s to the screen being lost if the prompts are ignored. 4. Click Undo Changes (if necessary) to undo any changes made. Undo Changes reverts the settings displayed o n th ...

  • Symbol Technologies AP-5131 - page 128

    AP-5131 Access Poin t Product Referen ce Guide 5-4 5. Click Logout to securely exit the AP -5131 Symbol Access Point applet. A prompt display s confirming the logout before the applet is closed. 5.1.1 Configuring VLAN Support A V irtua l Local Area Ne twork (VLAN) is a means to electronically separate data on the same AP-5131 from a single broadcas ...

  • Symbol Technologies AP-5131 - page 129

    Network Manage ment 5-5 AP-5131. The AP-5131 then maps the target WLAN for the assigne d VLAN and traffic passes normally , allowing for the completion of the DHCP request and further traffic. T o create new VLANs or edit the properties of an existing VLAN: 1. Select Network Configuration -> LAN from the AP-5131 menu tree. 2. Ensure the Enable 8 ...

  • Symbol Technologies AP-5131 - page 130

    AP-5131 Access Poin t Product Referen ce Guide 5-6 T o create a new VLAN, click the Create button, to edit the properties of an existing VLAN, click the Edit bu tton. 4. Assign a unique VLAN ID (from 1 to 4095) to each VLAN added or modified. The VLAN ID associates a frame with a specific VLAN and provides the info rmation the AP-5131 needs to proc ...

  • Symbol Technologies AP-5131 - page 131

    Network Manage ment 5-7 8. Enter a Management VLAN T ag for LAN1 and LAN2. The Management VLAN uses a default tag value of 1. The Management VLAN is used to distinguish VLAN traffic flows for the LAN. The trunk port marks the frames with specia l tags as they pass between the AP-5131 and its destination, the se tags help distin guish data traffic. ...

  • Symbol Technologies AP-5131 - page 132

    AP-5131 Access Poin t Product Referen ce Guide 5-8 arrives on the AP-5131, it queries the VMPS for the VLAN assignme nt based on the source MAC address of the arriving frame. If statically mapping VLANs, leave the Dynamic checkbox specific to the target WLAN and its intended VLAN unselected. The admin istrator is then re quired to configure VLAN me ...

  • Symbol Technologies AP-5131 - page 133

    Network Manage ment 5-9 2. Configure the DHCP Configuration field to define the DHCP settings used for the LAN. NOTE Symbol recommends the WAN and LAN ports should no t both be configured as DHCP clients. This interface is a DHCP Client Select this button to enable DHCP to set AP-5131 network address information via this LAN1 or LAN2 connection. Th ...

  • Symbol Technologies AP-5131 - page 134

    AP-5131 Access Poin t Product Referen ce Guide 5-10 This interface is a BOOTP Client Select this button to enable BOOTP to set AP-5131 network address information via this LAN1 or LAN2 connection. When selected, only BOOTP responses are accepted by the AP-5131 . If both DHCP and BOOTP services are required, do not select BOOTP Client. This interfac ...

  • Symbol Technologies AP-5131 - page 135

    Network Manage ment 5-11 3. Click Apply to save any changes to the LAN1 or LAN2 scre en. Navigating away from the screen without clicking the Apply b utton results in all changes to the scre en being lost if the prompts are ignored. 4. Click Undo Changes (if necessary) to undo any changes made. Undo Changes reverts the settings displayed o n the LA ...

  • Symbol Technologies AP-5131 - page 136

    AP-5131 Access Poin t Product Referen ce Guide 5-12 available IP addresses. This is useful, for example, in education and custom er environments where MU users change frequently . Use longer leases if there are fewer users. T o generate a list of client MAC address to IP address mappings for the AP-513 1: 1. Select Network Configuration -> LAN - ...

  • Symbol Technologies AP-5131 - page 137

    Network Manage ment 5-13 7. Click Cancel to undo any changes made. Undo Chang es reverts the settings displayed to the last saved configuration. 5.1.2.2 Setting the T ype Filter Configuration Each AP-5131 LAN (either LAN1 or LAN2) can keep a list of frame types that it forwards or discards. The T ype Filtering feature prevents specific (a pote ntia ...

  • Symbol Technologies AP-5131 - page 138

    AP-5131 Access Poin t Product Referen ce Guide 5-14 3. T o add an Etherne t type, click the Add button. The Add Ethernet T ype screen displa ys. Use this sc reen to add one type filter option at a time, for a list of up to 16 entries. Packet types supported for the type filtering function include 16-bit DIX Ethernet types as well as Symbol propriet ...

  • Symbol Technologies AP-5131 - page 139

    Network Manage ment 5-15 T o configure W AN settings for the AP-5 131: 1. Select Network Configuration -> WAN from the AP-5131 menu tree. 2. Refer to the WAN IP Configuration field to enable the WAN interface, and set network address information for the W AN connection. NOTE Symbol recommends that the W AN and LAN ports should not both be config ...

  • Symbol Technologies AP-5131 - page 140

    AP-5131 Access Poin t Product Referen ce Guide 5-16 This interface is a DHCP Client This checkbox enables DHCP for the AP-5131 W AN connection. This is useful, if the larger corporate network or Internet Service Provider (ISP) uses DHCP . DHCP is a protocol that includes mechanisms for IP address allocation and delivery of host-spec ific config ura ...

  • Symbol Technologies AP-5131 - page 141

    Network Manage ment 5-17 3. Configure the PPP over Ethernet field to enable high spe ed dial-up connections to the AP-5131 W AN port. More IP Addresses Click the More IP Addresses button to specify additional static IP addresses for the AP-5131 . Additional IP addresses are required when users within the W AN need dedicated IP addresses, or when se ...

  • Symbol Technologies AP-5131 - page 142

    AP-5131 Access Poin t Product Referen ce Guide 5-18 4. Click Apply to save any changes to the W AN screen. Navigating away fro m the screen without clicking the Apply butt on results in all changes to the screen bein g lost. 5. Click Undo Changes (if necessary) to undo any change s made. Undo Changes reverts the settings displayed on the W AN scree ...

  • Symbol Technologies AP-5131 - page 143

    Network Manage ment 5-19 5.2.1 Configuring Network Addr ess T ranslation (NA T) Settings Network Address T ranslatio n (NA T) conve rts an IP address in one netw ork to a different IP address or set of IP addresses in another network. The AP-5 131 router maps its local (inside) network addres ses to W AN (outside) IP addresses, and translate s the ...

  • Symbol Technologies AP-5131 - page 144

    AP-5131 Access Poin t Product Referen ce Guide 5-20 2. Configure the Address Ma ppings field to generate a WAN IP address, define the NA T type and set outbound/inb ound NA T m appings. 3. Click Apply to save any changes to the NA T screen. Navigating away from the scre en without clicking the Apply butt on results in a ll changes to the screens be ...

  • Symbol Technologies AP-5131 - page 145

    Network Manage ment 5-21 5. Click Logout to securely exit the AP -5131 Symbol Access Point applet. A prompt displays confirming the logout before the applet is closed. 5.2.1.1 Configuring Port Forwarding Use the Port Forwarding screen to configure port forwarding parameters fo r inbound traffic from the associated W AN IP address. T o configure por ...

  • Symbol Technologies AP-5131 - page 146

    AP-5131 Access Poin t Product Referen ce Guide 5-22 5. Click Ok to return to the NA T screen. Within the NA T screen, click Apply to save any changes made on the Port Forwarding scree n. 6. Click Canc el to un do any changes made on Port Forwardin g screen. This reverts all settings for the Port Forwarding screen to the la st saved configuration. 5 ...

  • Symbol Technologies AP-5131 - page 147

    Network Manage ment 5-23 T o configure WLANs on the AP-5131: 1. Select Network Configuration -> Wireless from the AP-5131 menu tree. If a WLAN is defined, th at WLAN displays wi thin the Wireless Configuration screen. When the AP-5131 is first booted, WLAN1 exists as a default WLAN available immediately for connection. 2. Refer to the informatio ...

  • Symbol Technologies AP-5131 - page 148

    AP-5131 Access Poin t Product Referen ce Guide 5-24 3. Click the Create button (if necessary) to launch the New WLAN screen. Use the New WLAN screen to defin e the properties of a new WLAN that would display an d be selectable within the Wireless Configuration screen. For additio nal information, see Creating/Editing Individual WLANs on page 5-24 . ...

  • Symbol Technologies AP-5131 - page 149

    Network Manage ment 5-25 Use the New WLAN and Edit WLAN screens as re quired to create/modify a WLAN. T o create a n ew WLAN or edit the properties of an existing WL AN: 1. Select Network Configuration -> Wireless from the AP-5131 menu tree. The Wireless Co nfiguration screen disp lays. 2. Click the Create button to config ure a new WLAN, or hig ...

  • Symbol Technologies AP-5131 - page 150

    AP-5131 Access Poin t Product Referen ce Guide 5-26 3. Set the parameters in the Configuration field as required for the WLAN. ESSID Enter the Extended Services Set Identification (ESSID) associated with the WLAN. The WLAN name is auto-generated using the ESSID until changed by the user . The maximum number of characters that can be used for the ES ...

  • Symbol Technologies AP-5131 - page 151

    Network Manage ment 5-27 Name Define or revise the name for the WLAN. The name should be logical representation of WL AN coverage area (engineering, marketing etc.). The maximum number of characters that can be used for the name is 31. Available On Use the Available On checkboxes to define whether the WLAN you are creating or editing is available t ...

  • Symbol Technologies AP-5131 - page 152

    AP-5131 Access Poin t Product Referen ce Guide 5-28 4. Configure the Security field as required to set the data protection requ irements for the WLAN. 5. Configure the Advanced field as required to set MU in teroperability permissions, secure beacon transmissions, broadca st ESSID acceptance and Quality of Servic e (QoS) policies. CAUTION A WLAN ca ...

  • Symbol Technologies AP-5131 - page 153

    Network Manage ment 5-29 6. Click Apply to save any cha nges to the WLAN screen . Navigating away from the screen without clicking Apply results in all changes to the screens being lost. 7. Click Cancel to securely exit the New WLAN or Edit WLAN screen and return to the Wireless Configuration scree n. 5.3.1.1 Configuring WLA N Security Policies As ...

  • Symbol Technologies AP-5131 - page 154

    AP-5131 Access Poin t Product Referen ce Guide 5-30 security requirements of the WLAN. Once new policies are defined, they are available within the New WLAN or Edit WLAN scre ens and can be mapped to any WLAN. A s ingle security policy can be used by more than one WL AN if its logical to do so. For example, there m ay be two or more WLANs within cl ...

  • Symbol Technologies AP-5131 - page 155

    Network Manage ment 5-31 2. Click Logout to exit the Security Configuration screen. 5.3.1.2 Configuring a WLAN Access Control List (ACL) An Access Control Lists (ACL) affords a system administrato r the ability to gra nt or restrict MU access by specifying a MU MAC address or range of MAC addresses to either include or exclude from AP-5131 connecti ...

  • Symbol Technologies AP-5131 - page 156

    AP-5131 Access Poin t Product Referen ce Guide 5-32 The Mobile Unit Acce ss Control List Configura tion screen displays with existing ACL policies and their current WLAN (if mapped to a WLAN). 2. Click the Create button to configure a new ACL policy , or select a policy and click the Edit button to modify an existing ACL policy . The AP-5131 suppor ...

  • Symbol Technologies AP-5131 - page 157

    Network Manage ment 5-33 Either the New MU ACL Policy or Edit MU ACL Policy screens display . 3. Assign a name to the new or edited ACL polic y that repres ents an inclusion or exclusion policy specific to a pa rticular type of MU traffic you may w ant to use with a single or gr oup of WLANs. More than one WLAN can use th e same ACL policy . 4. Con ...

  • Symbol Technologies AP-5131 - page 158

    AP-5131 Access Poin t Product Referen ce Guide 5-34 5. Click Apply to save any cha nges to the New MU ACL P olicy or Edit MU ACL Policy screen and return to the Mobile Unit Access Control List Configuration scree n. Navigating away from the screen without clicking Apply results in all changes to the screens being lost. 6. Click Cancel to securely e ...

  • Symbol Technologies AP-5131 - page 159

    Network Manage ment 5-35 2. Click the Create button to configure a new QoS policy , or select a policy and click the Edit button to modify an existing QoS policy . The AP-5131 suppo rts a maximum of 16 QoS policies. ...

  • Symbol Technologies AP-5131 - page 160

    AP-5131 Access Poin t Product Referen ce Guide 5-36 3. Assign a name to the new or edited QoS policy that makes sense to the AP-513 1 traffic receiving priority . More than one WLAN can use the same QoS policy . 4. Select the Support V oice prioritization checkbox to allow legacy voice prioritization . Certain products may not rece ive priority ove ...

  • Symbol Technologies AP-5131 - page 161

    Network Manage ment 5-37 5. Use the two Multicast Address fields to specify one o r two MAC addresses to be used for multicast applications. Some VoIP devices make use of multicast addresses. Using this mechanism ensures tha t the multicast pack ets for these de vices are not delayed by the packet queue. 6. Use the drop-down menu to select the radi ...

  • Symbol Technologies AP-5131 - page 162

    AP-5131 Access Poin t Product Referen ce Guide 5-38 8. Configure the CW min and CW max (co ntention windows), AIFSN ( Arbitrary Inter- Frame Space Number ) and TXOPs T ime (opportunity to transmit) fo r each Ac cess Category . Their values are explained as follows. Background Backgrounds traffic is typically of a low priority (file transfers, print ...

  • Symbol Technologies AP-5131 - page 163

    Network Manage ment 5-39 9. Click Apply to save any changes to the New QoS Policy or Edit QoS Policy scre en to return to the Quality of Service Configuration scr een. Navigating away from the sc reen without clicking Apply results in all changes to the screens b eing lost. 10. Click Cancel to securely exit th e New QoS Policy or Edit QoS Policy sc ...

  • Symbol Technologies AP-5131 - page 164

    AP-5131 Access Poin t Product Referen ce Guide 5-40 5.3.1.4 Configuring WLAN Hotspot Support The AP-5131 enables hotspot operators to provide user au thentication and accounting without a special client ap plication. The AP-5 131 uses a tradi tional Internet b rowser as a secure authentication device. Rather than rely o n built-in 802.11 security f ...

  • Symbol Technologies AP-5131 - page 165

    Network Manage ment 5-41 3. Refer to the HTTP Redirection field to specify how the Login, Welcome, and Fail pages are maintained for this specific WLAN. The pages can be hosted locally or remotely . . 4. Use the External URL field to specify the loca tion of the login page, welcome page and fail page used for hotspot access . Defining these setting ...

  • Symbol Technologies AP-5131 - page 166

    AP-5131 Access Poin t Product Referen ce Guide 5-42 5. Click the White List Entries button (within the WhiteList Configuration field) to create a set of allowed destination IP addre sses. These allowed de stination IP addresses are c alled a White List. T en configurable IP addresses are allowed for ea ch WLAN. For more information, see Defining th ...

  • Symbol Technologies AP-5131 - page 167

    Network Manage ment 5-43 8. Click OK to save any changes to the Hotspot Configuratio n screen. Navigating away from the screen without clicking Apply results in all changes to the screens being lost. 9. Click Cancel (if necessary) to undo an y changes made. Cancel rev erts the settings displayed on the Hotspot Configuration screen to the last save ...

  • Symbol Technologies AP-5131 - page 168

    AP-5131 Access Poin t Product Referen ce Guide 5-44 When a client requests a URL from a Web server , the login handler retu rns an HTTP redire ction status code (for example, 301 Moved Permanently), which indicates to th e browser it should look for the page at another URL. This other URL can be a local or remote login page (b ased on the hotspot c ...

  • Symbol Technologies AP-5131 - page 169

    Network Manage ment 5-45 5.3.2 Setting the WLAN’ s Radio Configuration Each AP-5131 WLAN can hav e a separate 802.11a or 8 02.11b/g radio configured and mapped to that WLAN. The first step is to enable the radio. One of two possible radio configurat ion pages are available on the AP -5131 depending on which model SKU is purchased. If the AP-5131 ...

  • Symbol Technologies AP-5131 - page 170

    AP-5131 Access Poin t Product Referen ce Guide 5-46 2. Enable the radio(s) using the Enable checkbox(es). Refer to RF Band of Operation parameter to en sure you are enablin g the correct 8 02.11a or 802.11b/g radio. After the settings are applied within this Radio Configuration screen, the Radio Status and MUs connected values update. If this is an ...

  • Symbol Technologies AP-5131 - page 171

    Network Manage ment 5-47 The maximum number of client bridge con nections per AP-513 1 radio is 12, with 24 representing the maximum for dual-radio models. Once the s ettings within the Radio Config uration screen are applied (for an initial deployment), the current number of client bridge connection s for this specific radio displays within the CB ...

  • Symbol Technologies AP-5131 - page 172

    AP-5131 Access Poin t Product Referen ce Guide 5-48 within the BBs Connec ted field. If this is an existing r adio within a mesh network, the se values update in real-time. 6. Click the Advanced button to define a prioritized list of access points to define Mesh Connection links. Fo r a detailed overview on mesh ne tworking and how to configu re th ...

  • Symbol Technologies AP-5131 - page 173

    Network Manage ment 5-49 On a single-radio AP-5131, Radio1 could ei ther be an 80 2.11a or 802.11b/g radio depending on which radio has been enabled. 2. Configure the Properties field to assign a name and plac ement designation for the radio. Placement Use the Placement drop-down menu to specify whether the radio is located outdoors or indoors. Def ...

  • Symbol Technologies AP-5131 - page 174

    AP-5131 Access Poin t Product Referen ce Guide 5-50 3. Configure the Radio Settings field to assign a c hannel, ante nna diversity settin g, radio transmit power level and data rate. ERP Protection Extended Rate PHY (ERP) allows 802.11g MUs to interoperate with 802.11b only MUs. ERP Protection is managed automatically by the AP-5131 and informs use ...

  • Symbol Technologies AP-5131 - page 175

    Network Manage ment 5-51 4. Refer to the Beacon Settings field to set th e radio beacon an d DTIM interv als. Set Rates Click the Set Rates button to display a window for selecting minimum and maximum data transmit rates for the radio. At least one Basic Rate must be selected as a minimum transmit rate value. Supported Rates define the data rate th ...

  • Symbol Technologies AP-5131 - page 176

    AP-5131 Access Poin t Product Referen ce Guide 5-52 5. Configure the Performa nce field to set the preamble, thresholds values, data rates and QoS values for the radio. Beacon Interval The beacon interval controls the performance of power save stations. A small interval may make power save stations more responsive, but it will also caus e them to c ...

  • Symbol Technologies AP-5131 - page 177

    Network Manage ment 5-53 6. Select the Advanced Settings tab to strategically map BSSIDs to WLANs in order to define them as primary WLANs. Set RF QoS Click the Set RF QoS button to display the Set RF QOS screen to set QoS parameters for the AP-5131 radio. Do no t confuse with the QoS configuration screen used for a WLAN. The Set RF QoS screen init ...

  • Symbol Technologies AP-5131 - page 178

    AP-5131 Access Poin t Product Referen ce Guide 5-54 Defining Primary WLANs allows an administrator to dedicate BSSIDs (4 BSSIDs are available for mapping) to WLANs. From that initial BSSID assignment, Primary WLANs can be defined from within the WLANs assigned to BSSID group s 1 through 4. Each BSSID beacons only on the primary WLAN. The user shoul ...

  • Symbol Technologies AP-5131 - page 179

    Network Manage ment 5-55 7. Use the Primary WLAN drop-down menu to select a WLAN from those WLANs sharing th e same BSSID. The selected WLAN is the primary WLAN for the specified BSSID. 8. Click Apply to save any changes to the Radio Settings an d Advanced Settin gs screens. Navigating away from the screen without clicki ng Apply resu lts in change ...

  • Symbol Technologies AP-5131 - page 180

    AP-5131 Access Poin t Product Referen ce Guide 5-56 2. Use the Bandwidth Share Mod e drop-down menu to define the order enable d WLANs receive AP-5131 services. Selec t one of the following three options: 3. Configure the Bandwidth Sha re for Each WLAN field to set a raw weight (for WLANs using the Weighted Round-Robin option) for each WLAN. The we ...

  • Symbol Technologies AP-5131 - page 181

    Network Manage ment 5-57 4. Click Apply to save any changes to the Bandwidth Management screen. Navigating away from the screen without clicking Apply results in all changes to the screens being lost. 5. Click Undo Changes (if necessary) to undo any changes made. Undo Changes reverts the settings displayed on the Bandwidth Managemen t s creen to th ...

  • Symbol Technologies AP-5131 - page 182

    AP-5131 Access Poin t Product Referen ce Guide 5-58 2. Refer to the AP-5131 Router T able field to view existing routes. The AP-5131 Router T ab le field displays a list of connected route s between an enabled subnet and the ro uter . These routes can be changed by modifying the IP address and subnet masks of the enabled subnets. The information in ...

  • Symbol Technologies AP-5131 - page 183

    Network Manage ment 5-59 5. Use the User Defined Routes field to add or delete static routes. The User Defined Routes field allows the ad ministrator to view , add or delete internal static (dedicated) routes. a. Click the Add button to create a new table entry . b. Highlight an entry and click the Del (delete) button to r emove an entry . c. Speci ...

  • Symbol Technologies AP-5131 - page 184

    AP-5131 Access Poin t Product Referen ce Guide 5-60 2. Select a routing direction from the RIP Direction drop-down menu. Both (for both directions), Rx only (receive only), and TX only (transmit only) are available options. 3. If RIP v2 or RIP v2 (v1 compa t) is the selected RIP type, the RIP v2 Authentication field becomes active. Select the type ...

  • Symbol Technologies AP-5131 - page 185

    Network Manage ment 5-61 4. If the Simple au thenticati on method is selected, s pecify a password of up to 15 alphanumeric characte rs in the Password (Simple Authentication) area. 5. If the MD5 au thentication me thod is selected, fill in the Ke y #1 field (Key #2 is optional). Enter any numeric v alue between 0 and 256 into the MD5 ID area. Ente ...

  • Symbol Technologies AP-5131 - page 186

    AP-5131 Access Poin t Product Referen ce Guide 5-62 ...

  • Symbol Technologies AP-5131 - page 187

    Configuring Access Point Security Security measures for the AP-5131 and its WLANs are critical. Use the available AP-5131 security options to protect the AP-5131 LAN from wireless vu lnerabilities, and safeg uard the transmission of RF packets between the AP-5131 and its associated MUs. WLAN security can be configured o n an ESS by ESS basis on the ...

  • Symbol Technologies AP-5131 - page 188

    AP-5131 Access Poin t Product Referen ce Guide 6-2 6.1 Configuring Security Options T o configure the data prote ction options ava ilable on the AP-51 31, refer to the following: • T o set an administrative passwo rd for secure AP-5131 logins, see Setting Passwords on page 6-3 . •R e f e r t o Enabling Authentication and Encryption Sch emes on ...

  • Symbol Technologies AP-5131 - page 189

    Configurin g Access Point Securit y 6-3 6.2 Setting Passwords Before setting the AP-5131 security parameters, ve rify an administrative password for the AP-5131 has been created to restrict access to the device before ad vanced device security is configured. T o password prote ct and restrict AP-5131 d evice access: 1. Connect a wired co mputer to ...

  • Symbol Technologies AP-5131 - page 190

    AP-5131 Access Poin t Product Referen ce Guide 6-4 4. Log in using the “ ad min ” as the default User ID and “ sym bol ” as the default Password. If the default login is successful, the Change Admin Password window displays. Change the default login and password to significantly dec rease the likelihood of hacking. 5. Enter the previous p a ...

  • Symbol Technologies AP-5131 - page 191

    Configurin g Access Point Securit y 6-5 4. Press <ESC> or <Enter> to access the AP-5131 CLI. A serial connection has now been establish ed and the user sho uld be able to view the serial connection window . 5. Reset the AP-5131. An AP-5131 can be reset by removing and re-inse rting the LAN cable or removing an d re- inserting the power ...

  • Symbol Technologies AP-5131 - page 192

    AP-5131 Access Poin t Product Referen ce Guide 6-6 Each WLAN (16 WLANs available in total to an AP-5131 regard less of the model) can have a separa te security policy . However , more than one WLAN can use the same secu rity policy . Therefore, to avoid confusion, do not name security po licies the same name as WLANs. Once security policies ha ve b ...

  • Symbol Technologies AP-5131 - page 193

    Configurin g Access Point Securit y 6-7 3. Use the Name field to define a logical security po licy name. Remember , multiple WLANs can share the same security policy , so be careful not to name security policies after specific WLANs or risk defining a WLAN to single polic y . Symbol recommends naming the policy after the a ttributes of the authenti ...

  • Symbol Technologies AP-5131 - page 194

    AP-5131 Access Poin t Product Referen ce Guide 6-8 6. Click Apply to keep changes made within the New Security Polic y screen (if any). Configure encryption or authentication supported security policies by referring to the following: AP-5131 authentication: • T o create a security policy supporting Ke rberos, see, Configuring Kerberos Au thentica ...

  • Symbol Technologies AP-5131 - page 195

    Configurin g Access Point Securit y 6-9 7. Click Ca ncel to return to the target WLAN screen without keeping any of the changes made within the New Securi ty Policy screen. 6.4 Configuring Kerberos Authentication Kerberos (designed and developed by MIT) prov ides strong authentication for clie nt/server applications using secret-key crypto graphy . ...

  • Symbol Technologies AP-5131 - page 196

    AP-5131 Access Poin t Product Referen ce Guide 6-10 3. Select the Kerberos radio button. The Kerberos Config uration field displays within the New Security Policy screen. 4. Ensure the Name of the secu rity policy entered suits the intended con figuration or function of the policy . 5. Set the Kerberos Configuration field as required to define the ...

  • Symbol Technologies AP-5131 - page 197

    Configurin g Access Point Securit y 6-11 6. Click the Apply button to return to the WLAN screen to save any changes mad e within the Kerberos Configuration field of the New Security Policy screen. 7. Click the Cancel button to undo any changes made within the Kerberos Configuration field and return to the WLAN screen. T his reverts all settings fo ...

  • Symbol Technologies AP-5131 - page 198

    AP-5131 Access Poin t Product Referen ce Guide 6-12 3. Select the 802.1x EAP ra dio button. The 802.1x EAP Settings field displays within the New Security Po licy screen. 4. Ensure the Name of the secu rity policy entered suits the intended con figuration or function of the policy . 5. If using the AP-5131’ s Internal Radius server , leave th e R ...

  • Symbol Technologies AP-5131 - page 199

    Configurin g Access Point Securit y 6-13 Radius Server Address If using an External Radius Server , specify the numerical (non-DNS) IP address of a primary Remote Dial-In User Service (Radius) server . Optionally , specify the IP address of a secondary server . The secondary server acts as a failover server if the primary server cannot be contacted ...

  • Symbol Technologies AP-5131 - page 200

    AP-5131 Access Poin t Product Referen ce Guide 6-14 7. Select the Accounting tab as required to define a timeout pe riod and retry interval Syslog for MUs interoperating with the AP-5131 and EAP authentication server . The items within this tab could be enable d or disabled depending on whether in ternal or External has been selected from the Radiu ...

  • Symbol Technologies AP-5131 - page 201

    Configurin g Access Point Securit y 6-15 9. Select the Advanced Settings tab as required to specify a MU quiet period, timeou t interval, transmit period, and re try period for MUs and the authentication server . The ite ms within this tab are identical re gardless of whet her Internal or Exte rnal is selected from the Radius Server drop-down menu. ...

  • Symbol Technologies AP-5131 - page 202

    AP-5131 Access Poin t Product Referen ce Guide 6-16 11. Click the Cancel button to undo any changes m ade within the 802.1x EAP Setting s field and return to the WLAN screen. This reverts all settings fo r the 802.1x EAP Settings field to the last saved configuratio n. 6.6 Configuring WEP Encryption Wired Equivalent Privacy (WEP) is a security prot ...

  • Symbol Technologies AP-5131 - page 203

    Configurin g Access Point Securit y 6-17 5. Configure the WEP 64 Settings or WEP 128 Settings field as required to defin e the Pass Key used to generate the WEP k eys. These keys must be the same betw een the AP-5131 and its MU to encrypt packets between the two devices. Default (hexadecimal) keys for WEP 64 include : Pass K ey Specify a 4 to 32 ch ...

  • Symbol Technologies AP-5131 - page 204

    AP-5131 Access Poin t Product Referen ce Guide 6-18 Default (hexadecimal) keys for WEP 128 include: 6. Click the Apply button to save any changes ma de within the WEP 64 Setting or WEP 128 Setting field of the New Security Policy screen. 7. Click the Cancel button to undo any changes mad e within the WEP 64 Setting or WEP 128 Setting field and retu ...

  • Symbol Technologies AP-5131 - page 205

    Configurin g Access Point Securit y 6-19 3. Select the Ke yGuard radio button . The KeyGuard Settings field displays within the New Security Policy screen. 4. Ensure the Name of the security policy entered suits the intended configuration or function of the policy . 5. Configure the KeyGuard Settings field as re quired to define the Pass Key used t ...

  • Symbol Technologies AP-5131 - page 206

    AP-5131 Access Poin t Product Referen ce Guide 6-20 Default (hexadecimal) keys for KeyGuard include: 6. Select the Allow WEP128 Clients checkbox (from within the KeyGuard Mixed Mod e field) to enable WEP128 clients to associate with an AP-5131’ s KeyGuard supported WLAN. The WEP128 clients mus t use the same keys a s the KeyGuard clients to inter ...

  • Symbol Technologies AP-5131 - page 207

    Configurin g Access Point Securit y 6-21 3. Select the WP A/TKIP radio button. The WP A/TKIP Setti ngs field displays within the New Security Policy scre en. 4. Ensure the Name of the secu rity policy entered suits the intended con figuration or function of the policy . 5. Configure the Key Rotation Settings area as needed to bro adcast encryption ...

  • Symbol Technologies AP-5131 - page 208

    AP-5131 Access Poin t Product Referen ce Guide 6-22 Default (hexadecimal) 256-bit keys for WP A/TKIP include: 1011121314151617 18191A1B1C1D1E1F 2021222324252627 28292A2B2C2D2E2F 7. Click the Apply button to save any changes made within the WPA/TKIP Settings field of the New Security Policy screen. 8. Click the Cancel button to undo any change s mad ...

  • Symbol Technologies AP-5131 - page 209

    Configurin g Access Point Securit y 6-23 If security policies supporting WP A2 -CCMP exist, they appear within the Security Configuration screen. These exis ting policies can be used as is, or the ir properties edited by clicking the Edit button. T o configure a new security policy supporting WP A2-CCMP , continue to step 2. 2. Click the Create but ...

  • Symbol Technologies AP-5131 - page 210

    AP-5131 Access Poin t Product Referen ce Guide 6-24 6. Configure the Key Settings area as needed to set an ASCII Passphra se and 128-bit key . Default (hexadecimal) 256-bit keys for WP2A/CCMP include: 1011121314151617 18191A1B1C1D1E1F 2021222324252627 28292A2B2C2D2E2F 7. Configure the WP A2-C CMP Mixed M ode field as needed to allow TKIP and WP A2 ...

  • Symbol Technologies AP-5131 - page 211

    Configurin g Access Point Securit y 6-25 8. Configure the Fast Roaming (802.1x only) field as requ ired to en able ad ditional AP-5131 roaming and key c aching options. This featur e is applicable only when using 802.1 x EAP authentication with WP A2/CCMP . 9. Click the Apply button to save any changes made within the WPA2/CCMP Settings field of th ...

  • Symbol Technologies AP-5131 - page 212

    AP-5131 Access Poin t Product Referen ce Guide 6-26 2. Refer to the Global Firewall Disable field to enable or disable th e AP-5131 firewall. 3. Refer to the T imeout Configuration field to define a timeout interval to terminate IP address translations. 4. Refer to the Configurable Firewall Filters field to set the following firewall filters: Disab ...

  • Symbol Technologies AP-5131 - page 213

    Configurin g Access Point Securit y 6-27 5. Click Apply to save any changes to the Firewall screen. Na vigating away fro m the screen without clicking the Apply button results in a ll changes to the screens being lost. 6. Click Undo Changes (if necessary) to undo any change s made. Undo Changes reverts the settings displayed on the Firewall sc reen ...

  • Symbol Technologies AP-5131 - page 214

    AP-5131 Access Poin t Product Referen ce Guide 6-28 6.10.1 Configuring LA N to W AN Access The AP-5131 LAN can be configured to communicate with the WAN side of the AP-5131. Use the Subnet Access screen to allow/deny access to the AP-5131 W AN protocols, specify names and properties for e xisting protocols a nd enable pre-co nfigured protoco ls (F ...

  • Symbol Technologies AP-5131 - page 215

    Configurin g Access Point Securit y 6-29 3. Configure the Rules field as required to allow or deny access to selected (enabled) protocols. Allow or Deny all protocols, except Use the drop-down menu to select either Allow or Deny . The selected setting applies to all protocols except those with enabled checkboxes and any traffic that is added to the ...

  • Symbol Technologies AP-5131 - page 216

    AP-5131 Access Poin t Product Referen ce Guide 6-30 Pre configured Rules The following protocols are preconfigured with the AP-5131 . T o enable a protocol, check the box next to the protocol name. • HTTP - Hypertext T ransfer Protocol is the protocol for transferring files on the Web. HTTP is an application protocol running on top of the TCP/IP ...

  • Symbol Technologies AP-5131 - page 217

    Configurin g Access Point Securit y 6-31 4. Click Apply to save any changes to the Subnet Access s creen. Navigating away from the screen without clicking the Apply bu tton results in all changes to the screens being lost. 5. Click Undo Changes (if necessary) to undo any change s made. Undo Changes reverts the settings displayed on the Subnet Acces ...

  • Symbol Technologies AP-5131 - page 218

    AP-5131 Access Poin t Product Referen ce Guide 6-32 between two end points. ESP can also be used in tunnel mod e, providing security like that of a Vi rtual Private Network (VPN). • GRE - General Routing Encapsulation supports VPNs acro ss the Internet. GRE is a mechanism for encapsulating netwo rk layer prot ocols over any other netw ork layer p ...

  • Symbol Technologies AP-5131 - page 219

    Configurin g Access Point Securit y 6-33 2. Configure the Settings field as needed to override the settings in the Subnet Acces s screen and import firewall rules into the Advanced Su bnet Access screen. 3. Configure the Firewall Rules field as required a dd, insert or delete firewall rules into the list of advanced rules. Override Subnet Access se ...

  • Symbol Technologies AP-5131 - page 220

    AP-5131 Access Poin t Product Referen ce Guide 6-34 4. Click Apply to save any changes to the Advanced Subnet Acce ss screen. Navigating awa y from the screen without clicking Apply results in all changes to the screens being lost. 5. Click Undo Changes (if necessary) to undo any changes made. Undo Changes reverts the settings displayed on the Ad v ...

  • Symbol Technologies AP-5131 - page 221

    Configurin g Access Point Securit y 6-35 Use the VPN screen to add and remove VPN tunnels. T o configure an existing VPN tun nel, select it from the list in the VPN T unnels field. The selected tunnel’ s configuration displays in a VPN T unnel Config field. T o configure a VPN tunn el on the AP -5131: 1. Select Network Configuration -> WAN -&g ...

  • Symbol Technologies AP-5131 - page 222

    AP-5131 Access Poin t Product Referen ce Guide 6-36 If AP-5131 #1 has the following values : • W AN IP address: 20.1.1.2 • LAN IP address: 10.1.1.1 • Subnet Mask: 255.0.0.0 Then, the VPN values for AP-5131 #2 should be: • Remote subnet: 10.1.1.0 or 10.0.0.0 • Remote subnet mask: 255.0.0.0 • Remote gateway: 20.1.1.2 3. If a VPN tunnel h ...

  • Symbol Technologies AP-5131 - page 223

    Configurin g Access Point Securit y 6-37 Subnet name Use the drop-down menu to specify the LAN1 or LAN2 connection used for routing VPN traffic. Remember , only one LAN connection can be active on the AP-5131 Ethernet port at a time. The LAN connection specified from the LAN screen to receive priority for Ethernet port connectivity may be the bette ...

  • Symbol Technologies AP-5131 - page 224

    AP-5131 Access Poin t Product Referen ce Guide 6-38 4. Click Apply to save a ny changes to the VPN screen as well as changes made to the Auto Key Settings, IKE Settings and Man ual Key Settings screens. Naviga ting away from the screen without clicking the Appl y button results in all changes to the screen s being lost. 5. Click Undo Changes (if ne ...

  • Symbol Technologies AP-5131 - page 225

    Configurin g Access Point Securit y 6-39 3. Configure the Manual Key Settings screen to modify the following: NOTE When entering Inbound o r Outbound encryption or authen tication keys, an error message could display stating the keys provide d are “weak”. Some WEP attack tools invoke a dictio nary to hack WEP keys based on commonly used words. ...

  • Symbol Technologies AP-5131 - page 226

    AP-5131 Access Poin t Product Referen ce Guide 6-40 Inbound AH Authentication Key Configure a key for computing the integrity check on inbound traffic with the selected authentication algorithm. The key must be 32/40 (for MD5/SHA1) hexadecimal (0-9, A-F) characters in length. The key value must match the corresponding outbound key on the remote sec ...

  • Symbol Technologies AP-5131 - page 227

    Configurin g Access Point Securit y 6-41 The Inbound and Ou tbound SPI settings are required to be in terpolated to function c orrectly . For example: AP1 Inbound SPI = 800 AP1 Outbound SPI = 801 Inbound ESP Encryption Key Enter a key for inbound traffic. The length of the key is determined by the selected encryption algorithm. The key must match t ...

  • Symbol Technologies AP-5131 - page 228

    AP-5131 Access Poin t Product Referen ce Guide 6-42 AP2 Inbound SPI = 801 AP2 Outbound SPI = 800 4. Click Ok to return to the VPN screen. Click A pply to retain the s ettings made on the Manual Key Settings screen. 5. Click Cancel to return to the VPN screen without retaining the changes made to the Manual Key Settings screen. 6.11.2 Configuring Au ...

  • Symbol Technologies AP-5131 - page 229

    Configurin g Access Point Securit y 6-43 3. Configure the Auto Key Settings screen to modify the following: Use Perfect Forward Secrecy Forward secrecy is a key-establishment protocol guaranteeing the discovery of a session key or long-term private k ey does not compromise the keys of other sessions. Select Ye s to enable Perfect Forward Secrecy . ...

  • Symbol Technologies AP-5131 - page 230

    AP-5131 Access Poin t Product Referen ce Guide 6-44 4. Click Ok to return to the VPN screen. Click Apply to retain the settings made on the Auto Key Settings screen. 5. Click Canc el to return to the VPN screen without re tain ing the changes made to this screen. 6.11.3 Configuring IKE Key Settings The Internet Key E xchange (IKE) is a n IPsec stan ...

  • Symbol Technologies AP-5131 - page 231

    Configurin g Access Point Securit y 6-45 3. Configure the IKE Key Settings screen to modify the following: Operation Mode The Phase I protocols of IKE are based on the ISAKMP identity- protection and aggressive exchanges. IKE main mode refers to the identity-protection exchange, and IKE aggressive mode refers to the aggressive exchange. • Main - ...

  • Symbol Technologies AP-5131 - page 232

    AP-5131 Access Poin t Product Referen ce Guide 6-46 Local ID T ype Select the ty pe of ID to be used for the AP-5131 end of the SA. • IP - Select IP if the local ID type is the IP address specified as part of the tunnel. • FQDN - Use FQDN if the local ID is a fully qualified domain name (such as sj.symbol.com ). • UFQDN - Select UFQDN if the ...

  • Symbol Technologies AP-5131 - page 233

    Configurin g Access Point Securit y 6-47 IKE Authentication Algorithm IKE provides data authentication and anti-replay services for the VPN tunnel. Select an authenticati on methods from the drop-down menu. • MD5 - Enables the Message Digest 5 algorithm. No keys are required to be manually provided. • SHA1 - Enables Secure Hash Algorithm. No ke ...

  • Symbol Technologies AP-5131 - page 234

    AP-5131 Access Poin t Product Referen ce Guide 6-48 4. Click Ok to return to the VPN screen. Click Apply to retain the settings made on the IKE Settings screen. 5. Click Cancel to return to the VPN screen without retaining the changes made to the IKE Settings screen. 6.11.4 Vi ewing VPN Status Use the VPN Status screen to display the status of the ...

  • Symbol Technologies AP-5131 - page 235

    Configurin g Access Point Securit y 6-49 2. Reference the Security Associations field to view the following: T unnel Name The T unnel Name column lists the names of all the tunnels configured on the AP-5131 . For information on configuring a tunnel, see Configuring VPN T unnels on page 6-34 . Status The Status column lists the status of each config ...

  • Symbol Technologies AP-5131 - page 236

    AP-5131 Access Poin t Product Referen ce Guide 6-50 3. Click the Reset VPNs button to reset active VPNs. Selecting Reset VPNs forces renegotiation of all the Security Associations and keys. Users could notice a slight p ause in network performance. 4. Reference the IKE Summary field to view the following: 5. Click Logout to securely exit the AP-5 1 ...

  • Symbol Technologies AP-5131 - page 237

    Configurin g Access Point Securit y 6-51 T o configure content filte ring for the AP -5131: 1. Select Network Configuration -> WAN -> Content Filtering from the AP-5131 menu tree. 2. Configure the HTTP field to config ure block Web proxies and URL extensions. Block Outbound HTTP HyperT ext T ransport Protocol (HTTP) is the protocol used to tr ...

  • Symbol Technologies AP-5131 - page 238

    AP-5131 Access Poin t Product Referen ce Guide 6-52 3. Configure the SMTP field to disable or restrict sp ecific kinds of network mail traffic. 4. Configure the FT P field to block or restrict vari ous F TP traffic on the network. Block Outbound SMTP Commands Simple Mail T ransport Protocol (SMTP) is the Internet standard for host-to-host mail tran ...

  • Symbol Technologies AP-5131 - page 239

    Configurin g Access Point Securit y 6-53 5. Click Apply to save any changes to the Co ntent Filtering screen. Nav igating away from the screen without clicking the Apply bu tton results in all changes to the screens being lost. 6. Click Undo Changes (if necessary) to undo any change s made. Undo Changes reverts the settings dis played on the Co nte ...

  • Symbol Technologies AP-5131 - page 240

    AP-5131 Access Poin t Product Referen ce Guide 6-54 The rogue detection interval is used in conjuncti on with Symb ol MUs that identify themselv es as rogue detection c apable to th e AP-5131. The detection interval defines how often the AP-5131 requests these MUs to scan for a rogue AP . A shorter interval can effect the perfo rmance of the MU, bu ...

  • Symbol Technologies AP-5131 - page 241

    Configurin g Access Point Securit y 6-55 3. Use the Allowed AP List field to restrict Symbol AP’ s from Rogue AP detection and create a list of device MAC addresses and ESSID’ s approved for interoperability with the AP -5131. RF Scan by MU Select the RF Scan by MU checkbox to enable MUs to scan for potential rogue APs within the network. Defin ...

  • Symbol Technologies AP-5131 - page 242

    AP-5131 Access Poin t Product Referen ce Guide 6-56 4. Click Apply to save any changes to the Rogue AP Detection scree n. Navigating away fro m the screen without clicking Apply results in all changes to the screens being lost. 5. Click Undo Changes (if necessary) to undo any change s made. Undo Changes reverts the settings displayed on the Rogue A ...

  • Symbol Technologies AP-5131 - page 243

    Configurin g Access Point Securit y 6-57 The Active APs screen displays with detecte d rogue devices displayed within the Rogue APs table. 2. Enter a value (in minutes) in the Allowed AP s Age Out T ime field to indicate the number of elapsed minutes before an AP will be remove d from the approv ed list and reevaluated. A zero (0) for this value (d ...

  • Symbol Technologies AP-5131 - page 244

    AP-5131 Access Poin t Product Referen ce Guide 6-58 6. Highlight a rogue AP and click the Details butto n to display a screen with device and detection information specific to that rog ue device. This informatio n is helpful in determining if a rogue AP should be moved to the Allo wed APs table. For more information on the displaying information on ...

  • Symbol Technologies AP-5131 - page 245

    Configurin g Access Point Securit y 6-59 3. Refer to the Rogue AP Detail field for the following in formation: 4. Refer to the Rogue Detector Det ail field for the follow ing informatio n: BSSID/MAC Displays the MAC address of the rogue AP . This information could be useful if the MAC address is determined to be a Symbol MAC address and the device ...

  • Symbol Technologies AP-5131 - page 246

    AP-5131 Access Poin t Product Referen ce Guide 6-60 5. Click OK to securely exit the Detail screen and return to the Active APs screen. 6. Click Canc el (if necessary) to undo any chan ges made and return to the Active APs sc reen. 6.13.2 Using MUs to Detect Rogue Devices The AP-5131 can use an associa ted MU that has its rogue AP detection feature ...

  • Symbol Technologies AP-5131 - page 247

    Configurin g Access Point Securit y 6-61 2. Highlig ht an MU from within the Rogue AP enabled MUs field and click the s can button. The target MU begins scannin g for rogue devices using the detection parameters defined within the Rogue AP Detection screen. T o modify th e detection parameters, see Configuring Rogue AP Detection on page 6-53 . Thos ...

  • Symbol Technologies AP-5131 - page 248

    AP-5131 Access Poin t Product Referen ce Guide 6-62 6. Click Logout to return to the Rogue AP Detectio n screen. 6.14 Configuring User Authentication The AP-5131 can work with external RADIUS and LDAP Servers (AAA Servers) to provide user database informatio n and user authentication. 6.14.1 Configuring the Radius Server The Radius Server screen en ...

  • Symbol Technologies AP-5131 - page 249

    Configurin g Access Point Securit y 6-63 3. Use the TTLS/PEAP Configuration field to specify the Radius Server defau lt EAP type, EAP authentication type and a Server or CA certificate (if used). LDAP If LDAP is selected, the switch w ill use the data in an LDAP server . Configure the LDAP server settings on the LDAP screen under RADIUS Server on t ...

  • Symbol Technologies AP-5131 - page 250

    AP-5131 Access Poin t Product Referen ce Guide 6-64 Default Authentication Ty p e Specify a PEAP and/or TTLS Authentication T ype for EAP to use from the drop-down menu to the right of each checkbox item. PEAP options include: •G T C - EAP Generic T oken Card (GTC) is a challenge handshake authentication protocol using a hardware token card to pr ...

  • Symbol Technologies AP-5131 - page 251

    Configurin g Access Point Securit y 6-65 4. Use the Radius Client Authenticat ion table to config ure multiple shared secrets based on the subnet or host attempting to authentic ate with the Radius server . Use the Add button to add entries to th e list. Modify the foll owing in formation as needed within the table. 5. Click Apply to save any chang ...

  • Symbol Technologies AP-5131 - page 252

    AP-5131 Access Poin t Product Referen ce Guide 6-66 2. Enter the appropriate information within the LDAP Configuration field to allow the AP-513 1 to interoperate with the LDAP server . Consult with your LDAP server administrator for details on how to define the values in this screen. LDAP Server IP Enter the IP address of the external LDAP server ...

  • Symbol Technologies AP-5131 - page 253

    Configurin g Access Point Securit y 6-67 3. Click Apply to save any changes to the L DAP screen. Navigating a way from the scre en without clicking Apply results in all changes to the screen b eing lost. 4. Click Undo Changes (if necessary) to undo any change s made. Undo Changes reverts the settings displayed on the LDAP s creen to the last saved ...

  • Symbol Technologies AP-5131 - page 254

    AP-5131 Access Poin t Product Referen ce Guide 6-68 2. Refer to the Proxy Configuratio n field to define the proxy server’ s retry count and time out values. 3. Use the Add button to add a new proxy server . Define the following information for each entry : Retry Count Enter a value between 3 and 6 to indicate the number of times the AP-5131 atte ...

  • Symbol Technologies AP-5131 - page 255

    Configurin g Access Point Securit y 6-69 4. T o remove a ro w , select the row a nd click the De l (Delete) button. 5. Click Apply to save any changes to the Proxy screen. Navigating away from th e screen without clicking Apply results in all changes to the screen b eing lost. 6. Click Undo Changes (if necessary) to undo any change s made. Undo Cha ...

  • Symbol Technologies AP-5131 - page 256

    AP-5131 Access Poin t Product Referen ce Guide 6-70 Refer to the Groups field for a list of all groups in the local Rad ius database. The groups are listed in the order added . Although groups c an be added an d deleted, there is no ca pability to edit a group na me. 2. Click the Add button and enter the name of the group in the new blan k field in ...

  • Symbol Technologies AP-5131 - page 257

    Configurin g Access Point Securit y 6-71 7. Click the List of Groups cell. A new screen displays enabling you to associa te groups with the user . For more information on mapping gro ups with a user , see Mapping Users to Groups on page 6-71 . 8. Click Apply to save a ny changes to the Users screen. Navigating away from the screen without clicking ...

  • Symbol Technologies AP-5131 - page 258

    AP-5131 Access Poin t Product Referen ce Guide 6-72 3. T o add the user to a group, select the group in the Available list (on the right) and click the <-Add button. Assigned users will display within the Assigned table. Map one or more groups as needed for group authentication acce ss for this particular user . 4. T o remove the user from a gro ...

  • Symbol Technologies AP-5131 - page 259

    Configurin g Access Point Securit y 6-73 WLAN or editing the properties of an existing WLAN, see Creating/Editing Individual WLANs on page 5-24 1. Select User Authentication -> Radius Server -> Access Policy from the AP-513 1 menu tree. 2. Click the WLANs button to the right o f a specific g roup name. A pop-up window displays with the name o ...

  • Symbol Technologies AP-5131 - page 260

    AP-5131 Access Poin t Product Referen ce Guide 6-74 7. Click Logout to securely exit the AP-5 131 Symbol Access Point applet. A prompt display s confirming the logout before the applet is closed. ...

  • Symbol Technologies AP-5131 - page 261

    Monitoring Statistics The AP-5131 has functionality to display robust transmit and receive statistics for its W AN and LAN port. Wireless Local Area Network (WLAN) stats can also be displayed collectively for each enabled WLAN as well as individually for up to 16 specific WLANs. T ransmit and receive s tatistics can also be displayed for th e AP-51 ...

  • Symbol Technologies AP-5131 - page 262

    AP-5131 Access Poin t Product Referen ce Guide 7-2 See the following section s for more details on viewing statistics for the AP-5131: • Viewing W AN Statistics • Viewing LAN Statistics • Viewing Wireless Statistics • Viewing Radio Statistics Summary • Viewing MU Statistics Summary • Viewing the Mesh Statistics Summary • Viewing Known ...

  • Symbol Technologies AP-5131 - page 263

    Monitor ing Statisti cs 7-3 2. Refer to the Information field to reference the following AP-5131 W AN data: Status The Status field displays Enabled if the W AN interfac e is enabled on the WAN screen. If the W AN interface is disabled on the W AN screen, the W AN Stats sc reen displays no connection information and statistics. T o enable the W AN ...

  • Symbol Technologies AP-5131 - page 264

    AP-5131 Access Poin t Product Referen ce Guide 7-4 3. Refer to the Received field to reference data received over the AP-5131 W AN port. 4. Refer to the T ransmitted field to reference data received over the AP-5131 WAN port. Link The Link field displays Up if the W AN connection is active between the AP-5131 and network, and Down if the WAN connec ...

  • Symbol Technologies AP-5131 - page 265

    Monitor ing Statisti cs 7-5 5. Click the Clear WAN Stats button to reset each of the data collection counters to zero in order to begin new data collections. The RX/TX Pack ets and RX/TX Bytes totals remain at their present values and are not cleared. Do not clear the W AN stats if currently in an important data gathering activity or risk losing al ...

  • Symbol Technologies AP-5131 - page 266

    AP-5131 Access Poin t Product Referen ce Guide 7-6 7.2 V iewing LAN Statistics Use the LAN Stats screen to monitor the activity of the AP-5131 LAN1 or LAN2 connection. The Information field of the LAN Stats screen displays network traffic information as monito red over the AP-5131 LAN1 or LAN2 port. The Received and T ransmitted fields of the scree ...

  • Symbol Technologies AP-5131 - page 267

    Monitor ing Statisti cs 7-7 3. Refer to the Received field to view data received over the AP-5131 LAN port. 4. Refer to the T ransmitted field to view statistics transmitted over the AP-5131 LAN port. Network Mask The first two sets of numbers specify the network domain, the next set specifies the subset of hosts within a larger network. These valu ...

  • Symbol Technologies AP-5131 - page 268

    AP-5131 Access Poin t Product Referen ce Guide 7-8 5. Click the Clear LAN Stats button to reset each of the data collection counters to zero in order to begin new data collections. The RX/TX Pack ets and RX/TX Bytes totals remain at their present values and are not cleared. 6. Click the Logout button to securely exit the AP-5131 Symbol Access Point ...

  • Symbol Technologies AP-5131 - page 269

    Monitor ing Statisti cs 7-9 7.2.1 V iewing a LAN’ s STP Statistics Each AP-5131 LAN has the ability to tra ck its own unique STP sta tistics. Refer to the LAN STP Stats page when assessing mesh networking function ality for each of the two AP-5131 LANs. AP-51 31s in bridge mode exchange config uration messages at regul ar intervals (typically 1 t ...

  • Symbol Technologies AP-5131 - page 270

    AP-5131 Access Poin t Product Referen ce Guide 7-10 3. Refer to the Port Interface T able to assess the state of the traffic over the ports listed within the table for the root and bridge and designated bridges. Designated Root Displays the AP-5131 MAC address of the bridge defined as the root bridge in the Bridge STP Configuration screen. For info ...

  • Symbol Technologies AP-5131 - page 271

    Monitor ing Statisti cs 7-11 4. Click the Logout button to securely exit the AP-5131 Symb ol Access Point applet. There will be a prompt confirming logout before the applet is closed. 7.3 V iewing Wireless Statistics Use the WLAN Statistics Summary screen to view overview statistics for active (en abled) WLANs on the AP-5131. The WLAN Summary field ...

  • Symbol Technologies AP-5131 - page 272

    AP-5131 Access Poin t Product Referen ce Guide 7-12 2. Refer to the WLAN Summary field to reference high-level data for each enabled WLAN. Name Displays the names of all the enabled WLANs on the AP-5131 . For information on enabling a WLAN, see Enabling Wireless LANs (WLANs) on page 5-22 . MUs Displays the total number of MUs currently associated w ...

  • Symbol Technologies AP-5131 - page 273

    Monitor ing Statisti cs 7-13 3. Refer to the T otal AP RF T raffic field to view throug hput information for the AP-5131 and WLAN. 4. Click the Clear RF Stats button to reset eac h of the data collec tion counters to zero in ord er to begin new data collections. 5. Click the Logout button to securely exit the AP-5131 Symbol Access Point ap plet. A ...

  • Symbol Technologies AP-5131 - page 274

    AP-5131 Access Poin t Product Referen ce Guide 7-14 information. The T raffic field displays statistics on RF traffic and through put. The RF Status field displays information on RF signal averages from the as sociated MUs. The Error field display s RF traffic errors based on re tries, dropped pack ets, and undecry ptable packets. The WLAN Stats sc ...

  • Symbol Technologies AP-5131 - page 275

    Monitor ing Statisti cs 7-15 3. Refer to the T raffic field to view performance and through put information for the WLAN selected from the AP-5131 menu tree. Encryption T ype Displays the encryption method defined for the WLAN. If the encryption type does not match the desired scheme for the WLAN or needs to be enabled, see Enabling Authentication ...

  • Symbol Technologies AP-5131 - page 276

    AP-5131 Access Poin t Product Referen ce Guide 7-16 4. Refer to the RF Status field to view the following MU sign al, noise and perfo rmance information for the WLAN selected from the AP-5131 men u tree. 5. Refer to the Errors field to view MU association error s t atistics for the WLAN selected from the AP-5131 menu tree. Avg MU Signal Displays th ...

  • Symbol Technologies AP-5131 - page 277

    Monitor ing Statisti cs 7-17 6. Click the Clear WLAN Stats button to rese t each of the data collection c ounters to zero in order to begin new data collectio ns. Do not clear the WLAN stats if currently in an important data gathering activity or risk losing all data calculations to that point. 7. Click the Logout button to securely exit the AP-513 ...

  • Symbol Technologies AP-5131 - page 278

    AP-5131 Access Poin t Product Referen ce Guide 7-18 3. Click the Clear All Radio Stats button to reset each of the da ta collection counters to zero in order to begin new data collection s. Do not clear the radio stats if currently in an important data gathering acti vity or risk losing all data calculations to that point. For information on viewin ...

  • Symbol Technologies AP-5131 - page 279

    Monitor ing Statisti cs 7-19 dropped or could not decrypt. The info rmation within the 802.11 a Radio Statistics screen is view-only with no configurable data fields. T o view detailed radio statistics: 1. Select Status and Statistics -> Radio Stats -> Radio1(802.11b/g) Stats from th e AP-5131 menu tree. 2. Refer to the Information field to v ...

  • Symbol Technologies AP-5131 - page 280

    AP-5131 Access Poin t Product Referen ce Guide 7-20 3. Refer to the T raffic field to view performan ce and through put information for the target AP-5131 802.11a or 802.1 1b/g radio. Placement Lists whether the AP-5131 radio is indoors or outdoors. T o change the placement setting, see Configuring the 802.11a or 802.11b/g Radio on page 5-48 . Curr ...

  • Symbol Technologies AP-5131 - page 281

    Monitor ing Statisti cs 7-21 4. Refer to the RF Status field to view the following MU sign al, noise and perfo rmance information for the targe t AP-5131 802.11a or 802.11b/g radio. 5. Refer to the Errors field to reference retry information as well as data transmissions the target AP-5131 802.11a or 802.11 b/g radio eithe r gave up on could not de ...

  • Symbol Technologies AP-5131 - page 282

    AP-5131 Access Poin t Product Referen ce Guide 7-22 7.4.1.1 Retry Histogram Refer to the Retry Histrogra m screen for an overview of the retries transmitted by an AP -5131 radio and whether those retries contained any data packe ts. Use this information in combination with the error fields within a Radio Stats screen to assess overall radio perform ...

  • Symbol Technologies AP-5131 - page 283

    Monitor ing Statisti cs 7-23 2. Click Apply to save any changes to the Ra dio Histogram screen. Navigatin g away from the screen without clicking Apply results in chan ges to the screens being lost. 3. Click Un do Changes (if necessary) to undo any changes made to the s creen. Undo Changes reverts the settings to the last saved configur ation. 4. C ...

  • Symbol Technologies AP-5131 - page 284

    AP-5131 Access Poin t Product Referen ce Guide 7-24 2. Refer to the MU List field to reference associated MU address, throughput and retry information. 3. Click the Refresh button to update the data collections displayed without resetting the data collections to zero. 4. Click the Echo T est button to display a screen for verifyin g the link with a ...

  • Symbol Technologies AP-5131 - page 285

    Monitor ing Statisti cs 7-25 8. Click the Logout button to securely exit the AP-5131 Sym bol Access Point applet. A prom pt displays confirming the logout before the applet is closed. 7.5.1 Viewing MU Details Use the MU Details screen to displa y throughput, signal streng th and transmit error informatio n for a specific MU associated with the AP-5 ...

  • Symbol Technologies AP-5131 - page 286

    AP-5131 Access Poin t Product Referen ce Guide 7-26 5. Refer to the T raffic field to view individual MU RF throughput information. QoS Client T ype Displays the data type transmitted by the mobile unit. Possible types include Legacy , Voi c e , WMM Baseline and Power S ave . For more information, see Setting the WLAN Quality of Service (QoS) Polic ...

  • Symbol Technologies AP-5131 - page 287

    Monitor ing Statisti cs 7-27 6. Refer to the RF Status field to view MU signal and signal disturbance information. 7. Refer to the Errors field to view MU retry information and statistics on packets not transmitted. 8. Click OK to exit the screen. 7.5.2 Pinging Individual MUs The AP-5131 can verify its link with an MU by sending WNMP ping packets t ...

  • Symbol Technologies AP-5131 - page 288

    AP-5131 Access Poin t Product Referen ce Guide 7-28 T o ping a specific MU to assess its connectio n with an AP-5131: 1. Select Status and Statistics - > MU Stats from the AP-5131 menu tree. 2. Select the Echo T est button from within the MU Stats Summary screen 3. Specify the following ping test parameters . 4. Click the Ping button to begin tr ...

  • Symbol Technologies AP-5131 - page 289

    Monitor ing Statisti cs 7-29 7.6 V iewing the Mesh Statistics Summary The AP-5131 has the capability of dete cting and disp laying the pro perties of other access points in mesh network (either bas e bridges or client bridges) mode . This info rm ation is used to c reate a list of known wireless bridges. T o view detected mesh network statistics: 1 ...

  • Symbol Technologies AP-5131 - page 290

    AP-5131 Access Poin t Product Referen ce Guide 7-30 2. Click the Refresh button to update the display of the Mesh Statistics Summary screen to the latest values. 3. Click the Details button to displa y address and radio information for those AP-5131s in a client bridge config uration with this detecting AP-5131. 4. Click the Logout button to secure ...

  • Symbol Technologies AP-5131 - page 291

    Monitor ing Statisti cs 7-31 The Known AP Statistics screen displays the following info rmation: 2. Click the Clear Known AP Stats button to reset each of the data collection counters to zero in order to begin new data collection s. 3. Click the Details button to display AP-5131 addres s and radio information. IP Address The network-assigned Intern ...

  • Symbol Technologies AP-5131 - page 292

    AP-5131 Access Poin t Product Referen ce Guide 7-32 The Known AP Details screen displays the ta r get AP’ s MAC address, IP address, radio channel, number o f associated MUs, packet th roughput per second, radio type(s), mode l, firmware version, ESS and client bridges currently connected to the AP radio. Use this information to determine whe the ...

  • Symbol Technologies AP-5131 - page 293

    Monitor ing Statisti cs 7-33 5. Click the Send Cfg to APs button to send the your AP-5131’ s configuration to other AP- 5131’ s. Recipient AP-5131 must be the same single or dual-radio model as the AP-5131 sending the configuration. The sending and re cipient AP-5131’ s must also be running the same major firmware version (i.e., 1.1 to 1.1). ...

  • Symbol Technologies AP-5131 - page 294

    AP-5131 Access Poin t Product Referen ce Guide 7-34 ...

  • Symbol Technologies AP-5131 - page 295

    Command Line Interface Reference The AP-5131 Command Line Interface (CLI) is access ed through the serial port or a T elnet sessio n. The AP-5131 CLI follows the same conventions as the Web-based user interface. The CLI do es, however , provide an “escape seq uence” to provide diagno st ics for problem identification and resolution. The AP-5131 ...

  • Symbol Technologies AP-5131 - page 296

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-2 8.1.2 Accessing the CLI via T elnet T o connect to the AP-5131 CLI through a T eln et connection: 1. T elnet into the AP-5131 using an IP address of 19 2.168.0.1 2. Enter the default usern ame of admin and the de fault password of symbol . If this is your first time logging into the AP-5131, you a ...

  • Symbol Technologies AP-5131 - page 297

    Command Line Interfa ce Reference 8-3 8.2 Admin and Common Commands AP5131>admin> Description: Displays admin configuration options. The items available under this command are shown below . Syntax: help Displays general user interface help. passwd Changes the admin password. summary Shows a system summary . network Goes to the network submen ...

  • Symbol Technologies AP-5131 - page 298

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-4 AP5131>admin>help Description: Displays general CLI user interface help. Syntax: Example: admin> help ? : display command help - Eg. ?, show ?, s? * Restriction of “?”: : “?” after a function argument is treated : as an argument : Eg. admin<network.lan> set lan enable? : (He ...

  • Symbol Technologies AP-5131 - page 299

    Command Line Interfa ce Reference 8-5 AP5131>admin>passwd Description: Changes the password for the admin log in. Syntax: Example: admin> passwd Old Admin Password:****** New Admin Password:****** Verify Admin Password:****** Password successfully updated For information on configuring passwords using the applet (GUI), see Setting Pas swor ...

  • Symbol Technologies AP-5131 - page 300

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-6 AP5131>admin>summary Description: Displays the AP-5131’ s system summary . Syntax: Example: admin> summary AP-5131 firmware version 1.1.0.0-xxx country code us serial number 00A0F8716A74 WLAN 1: WLAN Name WLAN1 ESS ID 101 Radio 11a, 11b/g VLAN VLAN1 Security Ploicy Default QoS Ploicy De ...

  • Symbol Technologies AP-5131 - page 301

    Command Line Interfa ce Reference 8-7 AP5131>admin>.. Description: Displays the parent menu of the current men u. This command appea rs in all of th e submenus under admin. In each case, it ha s the same function, to move up on e level in the directory structure. Example: admin(network.lan)> .. admin(network)> ...

  • Symbol Technologies AP-5131 - page 302

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-8 AP5131>admin> / Description: Displays the root menu, that is, the top-level CLI menu. This command appears in all of the submenu s under admin. In each case, it has the same function, to move up to the top level in the directory structure. Example: admin(network.lan)> / admin> ...

  • Symbol Technologies AP-5131 - page 303

    Command Line Interfa ce Reference 8-9 AP5131>admin>save Description: Saves the configuration to system flash. The save command appears in all of the submenus under admin. In eac h case, it has the same function, to save the current configuration. Syntax: Example: admin> save admin> save Saves configuration settings. The sa ve command wo ...

  • Symbol Technologies AP-5131 - page 304

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-10 AP5131>admin>quit Description: Exits the command line interface session and terminates the s ession. The quit command appears in all of the sub menus under admin. In each case, it has the same function, to exit out of the CLI. On ce the quit command is executed, the login promp t displays a ...

  • Symbol Technologies AP-5131 - page 305

    Command Line Interfa ce Reference 8-11 8.3 Network Commands AP5131>admin(network)> Description: Displays the network submenu . The items available under this command are shown below . lan Goes to the LAN submenu. wan Goes to the W AN submenu. wireless Goes to the Wireless Configuration submen u. firewall Goes to the firewall submenu. router G ...

  • Symbol Technologies AP-5131 - page 306

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-12 8.3.1 Network LAN Commands AP5131>admin(network.lan)> Description: Displays the LAN submenu. The items availa ble under this command are show n below . For an overview of the AP-5131’ s LAN config uration options using the applet (GUI), see Configuring the LAN In terface on page 5-1 . sho ...

  • Symbol Technologies AP-5131 - page 307

    Command Line Interfa ce Reference 8-13 AP5131>admin(network.lan)> show Description: Displays the AP-5131 LAN settings. Syntax: Example: admin(network.lan)> show LAN On Ethernet Port : LAN1 LAN Ethernet Timeout : disable 802.1x Port Authentication: Username : admin Password : ******** ** LAN1 Information ** LAN Name : LAN1 LAN Interface : e ...

  • Symbol Technologies AP-5131 - page 308

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-14 Primary DNS Server : 192.168.0.2 Secondary DNS Server : 192.168.0.3 WINS Server : 192.168.0.255 admin(network.lan)> For information on displaying LAN information using the applet (GUI), see Configuring the LAN Interface on page 5-1 . ...

  • Symbol Technologies AP-5131 - page 309

    Command Line Interfa ce Reference 8-15 AP5131>admin(network.lan)> set Description: Sets the LAN paramete rs for the LAN port. Syntax: Example: admin(network.lan)> admin(network.lan)> set lan 1 enable admin(network.lan)> set name 1 engineering admin(network.lan)> set ethernet-port-lan 1 admin(network.lan)> set timeout 45 admin(n ...

  • Symbol Technologies AP-5131 - page 310

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-16 8.3.1.1 Network LAN, Bridge Commands AP5131>admin(network.lan.bridge)> Description: Displays the AP-5131 Bridge subm enu. For an overview of the AP-5131’ s mesh netwo rking options using the applet (GUI), see Configuring Me sh Networking on page 9-1 . show Displays the mesh config uration ...

  • Symbol Technologies AP-5131 - page 311

    Command Line Interfa ce Reference 8-17 AP5131>admin(network.lan.bridge)> show Description: Displays the mesh bridge co nfiguration parameters for the AP-5131’ s LANs. Syntax: Example: admin(network.lan.bridge)> show ** LAN1 Bridge Configuration ** Bridge Priority :32768 Hello Time (seconds) :2 Message Age Time (seconds) :20 Forward Delay ...

  • Symbol Technologies AP-5131 - page 312

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-18 AP5131>admin(network.lan.bridge)> set Description: Sets the mesh co nfiguration para meters for the AP-5131’ s LANs. Syntax: Example: admin(network.lan.bridge)> set priority 2 32768 admin(network.lan.bridge)> set hello 2 2 admin(network.lan.bridge)> set msgage 2 20 admin(network. ...

  • Symbol Technologies AP-5131 - page 313

    Command Line Interfa ce Reference 8-19 8.3.1.2 Network LAN, WLAN-Mapping Commands AP5131>admin(network.lan.wlan-mapping)> Description: Displays the WLAN/Lan/Vlan Map ping submenu. For an overview of the AP-5131’ s VLAN configuration options using the applet (GUI), see Configuring VLAN Support on page 5-4 . show Displays the VLAN list curren ...

  • Symbol Technologies AP-5131 - page 314

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-20 AP5131>admin(network.lan .wlan-mapping)> show Description: Displays the VLAN list currently defined for the AP-5131.. These parameters are defined with the set command. Syntax: Example: admin(network.lan.wlan-mapping)> show name ----------------------------------------------------------- ...

  • Symbol Technologies AP-5131 - page 315

    Command Line Interfa ce Reference 8-21 admin(network.lan.wlan-mapping)> show wlan WLAN1: WLAN Name :WLAN1 ESSID :101 Radio : VLAN : Security Policy :Default QoS Policy :Default For information on displaying the AP-5131 VLAN screens using the ap plet (GUI), see Configuring VL AN Support on p age 5-4 . ...

  • Symbol Technologies AP-5131 - page 316

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-22 AP5131>admin(network.lan.wlan-mapping)> set Description: Sets VLAN parameters for the AP-5131. Syntax: Example: admin(network.lan.wlan-mapping)> set mgmt-tag 1 admin(network.lan.wlan-mapping)> set native-tag 2 admin(network.lan.wlan-mapping)> set mode 1 static admin(network.lan.wla ...

  • Symbol Technologies AP-5131 - page 317

    Command Line Interfa ce Reference 8-23 AP5131>admin(network.lan.wlan-mapping)> create Description: Creates a VLAN for the AP-5131. Syntax: Example: admin(network.lan.wlan-mapping)> admin(network.lan.wlan-mapping)> create 5 vlan-5 For information on creating VLANs using the ap plet (GUI), see Co nfiguring VLAN Support on page 5-4 . creat ...

  • Symbol Technologies AP-5131 - page 318

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-24 AP5131>admin(network.lan.wlan-mapping)> edit Description: Modifies a VLAN’ s name and ID. Syntax: For information on editing VLANs using the applet (GUI), see Configuring VLAN Support on page 5-4 . edit name < n a m e > Modifies an exisiting VLAN name (1-31 characters in length) id ...

  • Symbol Technologies AP-5131 - page 319

    Command Line Interfa ce Reference 8-25 AP5131>admin(network.lan .wlan-mapping)> delete Description: Deletes a specific VLAN or all VLANs. Syntax: For information on deleting VLANs using the app let (GUI), see Config uring VLAN Support on page 5-4 . delete < V L A N i d > Deletes a specific VLAN ID (1-16). all Deletes all defined VLANs. ...

  • Symbol Technologies AP-5131 - page 320

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-26 AP5131>admin(network.lan .wlan-mapping)> lan-map Description: Maps an AP-5131 VLAN to a WLAN. Syntax: .. admin(network.lan.wlan-mapping)> lan-map wlan1 lan1 For information on mapping VLANs using the applet (GUI), see Configuring VLAN Support on page 5-4 . lan-map <wlan name> <l ...

  • Symbol Technologies AP-5131 - page 321

    Command Line Interfa ce Reference 8-27 AP5131>admin(network.lan .wlan-mapping)> vlan-map Description: Maps an AP-5131 VLAN to a WLAN. Syntax: admin(network.lan.wlan-mapping)> vlan-map wlan1 vlan1 For information on mapping VLANs using the applet (GUI), see Configuring VLAN Support on page 5-4 . vlan-map <wlan name> <vlan name> ...

  • Symbol Technologies AP-5131 - page 322

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-28 8.3.1.3 Network LAN, DHCP Commands AP5131>admin(network.lan.dhcp)> Description: Displays the AP-5131 DHCP submen u. The items available are displayed be low . show Displays DHCP parameters. set Sets DHCP parameters. add Adds static DHCP addre ss assignments. delete Deletes static DHCP a ddr ...

  • Symbol Technologies AP-5131 - page 323

    Command Line Interfa ce Reference 8-29 AP5131>admin(network.lan.dhcp)> show Description: Shows DHCP parameter setting s. Syntax: Example: admin(network.lan.dhcp)> show **LAN1 DHCP Information** DHCP Address Assignment Range: Starting IP Address : 192.168.0.100 Ending IP Address : 192.168.0.254 Lease Time : 86400 **LAN2 DHCP Information** D ...

  • Symbol Technologies AP-5131 - page 324

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-30 AP5131>admin(network.lan.dhcp)> set Description: Sets DHCP parameters for the LAN port. Syntax: Example: admin(network.lan.dhcp)> set range 1 192.168.0.100 192.168.0.254 admin(network.lan.dhcp)> set lease 1 86400 admin(network.lan.dhcp)> show **LAN1 DHCP Information** DHCP Address ...

  • Symbol Technologies AP-5131 - page 325

    Command Line Interfa ce Reference 8-31 AP5131>admin(network.lan.dhcp)> add Description: Adds static DHCP address assignments. Syntax: Example: admin(network.lan.dhcp)> add 1 00A0F8112233 192.160.24.6 admin(network.lan.dhcp)> add 1 00A0F1112234 192.169.24.7 admin(network.lan.dhcp)> list 1 ---------------------------------------------- ...

  • Symbol Technologies AP-5131 - page 326

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-32 AP5131>admin(network.lan.dhcp)> delete Description: Deletes static DHCP address assignments. Syntax: Example: admin(network.lan.dhcp)> list 1 ----------------------------------------------------------------------------- Index MAC Address IP Address --------------------------------------- ...

  • Symbol Technologies AP-5131 - page 327

    Command Line Interfa ce Reference 8-33 AP5131>admin(network.lan.dhcp)> list Description: Lists static DHCP address assignments. Syntax: Example: admin(network.lan.dhcp)> list 1 ----------------------------------------------------------------------------- Index MAC Address IP Address --------------------------------------------------------- ...

  • Symbol Technologies AP-5131 - page 328

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-34 8.3.1.4 Network T ype Filter Commands AP5131>admin(network.lan.type-filter)> Description: Displays the AP-5131 T ype Filter submenu. The items available under this command include: e show Displays the current Ethernet T ype exception list. set Defines Ethernet T ype Filter parameters. add A ...

  • Symbol Technologies AP-5131 - page 329

    Command Line Interfa ce Reference 8-35 AP5131>admin(network.lan.type-filter)> show Description: Displays the AP-5131’ s current Ethernet T ype Filter configuration. Syntax: Example: admin(network.lan.type-filter)> show 1 Ethernet Type Filter mode : allow ----------------------------------------------------------------------------- index ...

  • Symbol Technologies AP-5131 - page 330

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-36 AP5131>admin(network.lan.type-filter)> set Description: Defines the AP-5131 Ethernet T ype Filter configuration. Syntax: Example: admin(network.lan.type-filter)> set mode 1 allow For information on configuring the AP-5131’ s type filter settings using the applet (GUI), see Setting the ...

  • Symbol Technologies AP-5131 - page 331

    Command Line Interfa ce Reference 8-37 AP5131>admin(network.lan.type-filter)> add Description: Adds an Ethernet T ype Filter entry . Syntax: Example: admin(network.lan.type-filter)> admin(network.wireless.type-filter)> add 1 8137 admin(network.wireless.type-filter)> add 2 0806 admin(network.wireless.type-filter)> show 1 Ethernet T ...

  • Symbol Technologies AP-5131 - page 332

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-38 AP5131>admin(network.l an.type-filter)> delete Description: Removes an Ethe rnet T ype Filter entry indiv idually or the e ntire T ype Filter lis t. Syntax: Example: admin(network.lan.type-filter)> delete 1 1 admin(network.lan.type-filter)> show 1 Ethernet Type Filter mode : allow --- ...

  • Symbol Technologies AP-5131 - page 333

    Command Line Interfa ce Reference 8-39 8.3.2 Network WAN Commands AP5131>admin(network.wan)> Description: Displays the W AN submenu. The items available under this command are shown below . For an overview of the AP-5131’ s W AN con fig uration options using the applet (GUI), see Co nfiguring W AN Settings on page 5 -14 . show Displays the ...

  • Symbol Technologies AP-5131 - page 334

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-40 AP5131>admin(network.wan)> show Description: Displays the AP-5131 W AN port parameters. Syntax: Example: admin(network.wan)> show Status : enable WAN DHCP Client Mode : disable IP address : 0.0.0.0 Network Mask : 0.0.0.0 Default Gateway : 10.10.1.1 Primary DNS Server : 0.0.0.0 Secondary ...

  • Symbol Technologies AP-5131 - page 335

    Command Line Interfa ce Reference 8-41 AP5131>admin(network.wan)> set Description: Defines the configuration of the AP-5131 WAN port. Syntax: Example: admin(network.wan)> admin(network.wan)> set dhcp disable admin(network.wan)> set ipadr 157.169.22.5 admin(network.wan)> set dgw 157.169.22.1 admin(network.wan)> set dns 1 157.169 ...

  • Symbol Technologies AP-5131 - page 336

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-42 8.3.2.1 Network W AN NA T Commands AP5131>admin(network.wan.nat)> Description: Displays the NA T submenu . The items available under th is command are shown below . For an overview of the AP-5131 NA T configuration options available using the applet (GUI), s ee Configuring Network Add ress ...

  • Symbol Technologies AP-5131 - page 337

    Command Line Interfa ce Reference 8-43 AP5131>admin(network.wan.nat)> show Description: Displays AP-5131 NA T parameters. Syntax: Example: admin(network.wan.nat)> show 2 WAN IP Mode : disable WAN IP Address : 157.235.91.2 NAT Type : 1-to-many One to many nat mapping : LAN1 LAN2 Inbound Mappings : Port Forwarding unspecified port forwarding ...

  • Symbol Technologies AP-5131 - page 338

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-44 AP5131>admin(network.wan.nat)> set Description: Sets NA T inbound and outboun d parameters. Syntax: Example: admin(network.wan.nat)> set type 1-to-many admin(network.wan.nat)> set ip 157.235.91.2 admin(network.wan.nat)> set mode 2 disable admin(network.wan.nat)> set unspec-ip 2 ...

  • Symbol Technologies AP-5131 - page 339

    Command Line Interfa ce Reference 8-45 AP5131>admin(network.wan.nat)> add Description: Adds NA T entries. Syntax: Example: admin(network.wan.nat)> add 1 indoors udp 20 29 10.10.2.2 admin(network.wan.nat)> list 1 ----------------------------------------------------------------------------- index name prot start port end port internal ip ...

  • Symbol Technologies AP-5131 - page 340

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-46 AP5131>admin(network.wan.nat)> delete Description: Deletes NA T entries. Syntax: Example: admin(network.wan.nat)> list 1 ----------------------------------------------------------------------------- index name prot start port end port internal ip translation port ------------------------ ...

  • Symbol Technologies AP-5131 - page 341

    Command Line Interfa ce Reference 8-47 AP5131>admin(network.wan.nat)> list Description: Lists AP-5131 NA T entries for the spec ified index. Syntax: Example: admin(network.wan.nat)> list 1 ----------------------------------------------------------------------------- index name Transport start port end port internal ip translation port ---- ...

  • Symbol Technologies AP-5131 - page 342

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-48 8.3.2.2 Network W AN, VPN Commands AP5131>admin(network.wan.vpn)> Description: Displays the VPN submenu. The items availab le under this command include: For an overview of the AP-5131 VPN options ava ilable using th e applet (GUI), see Configuring VPN T unnels on page 6-34 . add Adds VPN t ...

  • Symbol Technologies AP-5131 - page 343

    Command Line Interfa ce Reference 8-49 AP5131>admin(netwo rk.wan.vpn)> add Description: Adds a VPN tunnel entry . Syntax: Example: admin(network.wan.vpn)> add 2 SJSharkey 209.235.44.31 206.107.22.46 255.255.255.224 206.107.22.1 If tunnel type is Manual, proper SPI values and Keys must be configured after adding the tunnel admin(network.wan ...

  • Symbol Technologies AP-5131 - page 344

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-50 AP5131>admin(netwo rk.wan.vpn)> set Description: Sets VPN entry parameters. Syntax: set type <name> <tunnel type> Sets the tunnel type <name> to Auto or Manual for the specified tunnel name. authalgo <name> <authalgo> Sets the authentication algorith m for < ...

  • Symbol Technologies AP-5131 - page 345

    Command Line Interfa ce Reference 8-51 For information on configuring VPN using the applet (GUI), see Configuring VPN T unnels on page 6-34 . salife <name> <lifetime> Defines the name of the tunnne l <name> the Security Association Life T ime <300-65535> applies to in seconds. ike opmode <name> <opmode> Sets the ...

  • Symbol Technologies AP-5131 - page 346

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-52 AP5131>admin(network .wan.vpn)> delete Description: Deletes VPN tunnel entries. Syntax: Example: admin(network.wan.vpn)> list -------------------------------------------------------------------------- Tunnel Name Type Remote IP/Mask Remote Gateway Local WAN IP --------------------------- ...

  • Symbol Technologies AP-5131 - page 347

    Command Line Interfa ce Reference 8-53 AP5131>admin(network.wan.vpn)> list Description: Lists VPN tunnel entries. Syntax: Example: admin(network.wan.vpn)> list -------------------------------------------------------------------------- Tunnel Name Type Remote IP/Mask Remote Gateway Local WAN IP ---------------------------------------------- ...

  • Symbol Technologies AP-5131 - page 348

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-54 AP5131>admin(network .wan.vpn)> reset Description: Resets all of the AP-5131’ s VPN tunnels. Syntax: Example: admin(network.wan.vpn)> reset VPN tunnels reset. admin(network.wan.vpn)> For information on configuring VPN using the applet (GUI), see Configuring VPN T unnels on page 6-34 ...

  • Symbol Technologies AP-5131 - page 349

    Command Line Interfa ce Reference 8-55 AP5131>admin(network.wan.vpn)> stats Description: Lists statistics for all active tunnels. Syntax: Example: admin(network.wan.vpn)> stats ----------------------------------------------------------------------------- Tunnel Name Status SPI(OUT/IN) Life Time Bytes(Tx/Rx) -------------------------------- ...

  • Symbol Technologies AP-5131 - page 350

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-56 AP5131>admin(network .wan.vpn)> ikestate Description: Displays statistics for all active tunnels using Internet Key Exchange (IKE). Syntax: Example: admin(network.wan.vpn)> ikestate ---------------------------------------------------------------------- Tunnel Name IKE State Dest IP Remai ...

  • Symbol Technologies AP-5131 - page 351

    Command Line Interfa ce Reference 8-57 8.3.3 Network Wireless Commands AP5131>admin(network.wireless) Description: Displays the AP-5131 wireless submen u. The items available under this command in clude: wlan Displays the WLAN submenu used to create and configure up to 16 WLANs per AP-5131. security Displays the security submen u used to create ...

  • Symbol Technologies AP-5131 - page 352

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-58 8.3.3.1 Network WLAN Commands AP5131>admin(network.wireless.wlan)> Description: Displays the AP-5131 wireless LAN (WLAN) submenu . The items available under this command in clude: e For an overview of the Wireless configuration options av ailable to the AP-5131 using the apple t (GUI), see ...

  • Symbol Technologies AP-5131 - page 353

    Command Line Interfa ce Reference 8-59 AP5131>admin(network.wireless.wlan)> show Description: Displays the AP-5131’ s current WLAN configuration. Syntax: Example: admin(network.wireless.wlan)> show summary WLAN1 WLAN Name : Lobby ESSID : 101 Radio : 11a, 11b/g VLAN : Security Policy : Default QoS Policy : Default admin(network.wireless.w ...

  • Symbol Technologies AP-5131 - page 354

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-60 AP5131>admin(network.wireless.wlan)> create Description: Defines the parameters of a new AP -5131 WLAN. Syntax: sh Example: admin(network.wireless.wlan.create)> show wlan ESS Identifier : WLAN Name : 802.11a Radio : available 802.11b/g Radio : not available Client Bridge Mesh Backhaul : ...

  • Symbol Technologies AP-5131 - page 355

    Command Line Interfa ce Reference 8-61 Accept Broadcast ESSID : disable QoS Policy : Default admin(network.wireless.wlan.create)> show security ---------------------------------------------------------------------- Secu Policy Name Authen Encryption Associated WLANs ---------------------------------------------------------------------- 1 Default ...

  • Symbol Technologies AP-5131 - page 356

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-62 AP5131>admin(network.wireless.wlan)> edit Description: Edits the properties of an existing WLAN policy . Syntax: For information on editing a WLAN using the applet (GUI), see Creating/Editing Individual WLANs on page 5-24 . edit <index> Edits the properties of an ex isting WLAN policy ...

  • Symbol Technologies AP-5131 - page 357

    Command Line Interfa ce Reference 8-63 AP5131>admin(network.wireless.wlan)> delete Description: Deletes an existing WLAN. Syntax: For information on deleting a WLAN using the applet (GUI), see Creating/Editing Ind ividual WLANs on page 5-24 . delete <wlan-name> Deletes a target WLAN by name supplied. all Deletes all WLANs defined. ...

  • Symbol Technologies AP-5131 - page 358

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-64 AP5131>admin(network.w ireless.wlan.hotspot)> Description: Displays the Hotspot submenu. The items av ailable under this command include: e For information on configuring the Hotspot option s av ailable to the AP-5131 using the applet (GUI), see Configuring WLAN Hotspot Support on pa ge 5-4 ...

  • Symbol Technologies AP-5131 - page 359

    Command Line Interfa ce Reference 8-65 AP5131>admin(network.wireless.wlan.hotspot)> show Description: Displays the current AP -5131 Rogue AP detection configura tion. Syntax: Example: admin(network.wireless.wlan.hotspot)> show hotspot 1 WLAN1 Hotspot Mode : enable Hotspot Page Location : default External Login URL : www.sjsharkey.com Exter ...

  • Symbol Technologies AP-5131 - page 360

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-66 AP5131>admin(network.wireless. wlan.hotspot)> redirection Description: Goes to the hotspot redirection menu. Syntax: Example: admin(network.wireless.wlan.hotspot)> set page-loc 1 www.sjsharkey.com admin(network.wireless.wlan.hotspot)> set exturl 1 fail www.sjsharkey.com For informatio ...

  • Symbol Technologies AP-5131 - page 361

    Command Line Interfa ce Reference 8-67 AP5131>admin(network.wirel ess.wlan.hotspot)> radius Description: Goes to the hotspot Radius menu. Syntax: For information on configuring the Hotspot option s av ailable to the AP-5131 using the applet (GUI), see Configuring WLAN Hotspot Support on page 5-40 . set Sets the Radius hotspot configuration. s ...

  • Symbol Technologies AP-5131 - page 362

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-68 AP5131>admin(network.wireles s.wlan.hotspot.radius)> set Description: Sets the Radius hotspot configura tion. Syntax: Example: admin(network.wireless.wlan.hotspot.radius)> set server 1 primary 157.235.121.1 admin(network.wireless.wlan.hotspot.radius)> set port 1 primary 1812 admin(net ...

  • Symbol Technologies AP-5131 - page 363

    Command Line Interfa ce Reference 8-69 AP5131>admin(network.wireles s.wlan.hotspot.radius)> show Description: Shows Radius hotspot server details. Syntax: Example: admin(network.wireless.wlan.hotspot.radius)> show radius 1 Primary Server Ip adr : 157.235.12.12 Primary Server Port : 1812 Primary Server Secret : ****** Secondary Server Ip ad ...

  • Symbol Technologies AP-5131 - page 364

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-70 AP5131>admin(network.wireles s.wlan.hotspot)> white-list Description: Goes to the hotspot white-list menu. Syntax: Example: admin(network.wireless.wlan.hotspot.whitelist)> add rule 1 157.235.21.21 admin(network.wireless.wlan.hotspot.whitelist)> show white-rule 1 ---------------------- ...

  • Symbol Technologies AP-5131 - page 365

    Command Line Interfa ce Reference 8-71 8.3.3.2 Network Security Commands AP5131>admin(network.wireless.security)> Description: Displays the AP-5131 wireless security submenu. The items available unde r this command include: For information the security config uration options available to the AP -5131 using the applet (GUI), see Configuring Se ...

  • Symbol Technologies AP-5131 - page 366

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-72 AP5131>admin(network.wir eless.security)> show Description: Displays the AP-5131’ s current security configuration. Syntax: Example: admin(network.wireless.security)> show summary ---------------------------------------------------------------------- Secu Policy Name Authen Encryption ...

  • Symbol Technologies AP-5131 - page 367

    Command Line Interfa ce Reference 8-73 AP5131>admin(network.wir eless.security)> create Description: Defines the parameter of AP -5131 security policies. ...

  • Symbol Technologies AP-5131 - page 368

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-74 Syntax: create Defines the parameters of a security policy . show Displays new or existing security policy parameters. set sec-name <name> Sets the name of the security policy . auth <authtype> Sets the authentication type for WLAN <idx> to <type> ( none , eap , or kerbero ...

  • Symbol Technologies AP-5131 - page 369

    Command Line Interfa ce Reference 8-75 retry <number> Sets the maximum numbe r of reauthentication retries <retry> ( 1 - 99 ). accounting mode <mode> Enable or disable Radius accoun ting. server <ip> Set external Radius server IP address. port <port> Set external Radius server port number . secret <secret> Set ex ...

  • Symbol Technologies AP-5131 - page 370

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-76 wep- keyguard passkey <passkey> The passkey used as a text abbreviation for the entire key length ( 4-32 ). index <key index> Selects the WEP/KeyGuard key (from one of the four potential values of <key index> ( 1 - 4 ). hex-key <kidx> <key string> Sets the WEP/Key Gu ...

  • Symbol Technologies AP-5131 - page 371

    Command Line Interfa ce Reference 8-77 For information on configuring the encryption and authentication options available to the AP-5131 usin g the applet (GUI), se e Configuring Security Options on page 6-2 . preauth <mode> Enables or disables preauthentication (fast roaming). add-policy Adds the policy and exits. .. Disregards the policy cr ...

  • Symbol Technologies AP-5131 - page 372

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-78 AP5131>admin(network.wireless.security .edit)> Description: Edits the properties of a specific security policy . Syntax: Example: admin(network.wireless.security)> edit 1 admin(network.wireless.security.edit)> show Policy Name : Default Authentication : Manual Pre-shared key/No Authen ...

  • Symbol Technologies AP-5131 - page 373

    Command Line Interfa ce Reference 8-79 AP5131>admin(network.wir eless.security)> delete Description: Deletes a specific security policy . Syntax: For information on configuring the encryption and authentication options available to the AP-5131 usin g the applet (GUI), se e Configuring Security Options on page 6-2 . delete <sec-name> Rem ...

  • Symbol Technologies AP-5131 - page 374

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-80 8.3.3.3 Network ACL Commands AP5131>admin(network.wireless.acl)> Description: Displays the AP-5131 Mobile Unit Access Control List (ACL) submenu. The ite ms available under this command include: show Displays the AP-5131’ s current ACL configuration. create Creates an MU ACL policy . edit ...

  • Symbol Technologies AP-5131 - page 375

    Command Line Interfa ce Reference 8-81 AP5131>admin(network.wireless.acl)> show Description: Displays the AP-5131’ s current ACL configuration. Syntax: Example: admin(network.wireless.acl)> show summary ---------------------------------------------------------------------- ACL Policy Name Associated WLANs -------------------------------- ...

  • Symbol Technologies AP-5131 - page 376

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-82 AP5131>admin(network.wireless.acl)> create Description: Creates a n MU ACL po licy . Syntax: Example: admin(network.wireless.acl.create)> show Policy Name : Front Lobby Policy Mode : allow ----------------------------------------------------------------------------- index start mac end m ...

  • Symbol Technologies AP-5131 - page 377

    Command Line Interfa ce Reference 8-83 AP5131>admin(network.wireless.acl.edit)> Description: Edits the properties of an existing MU ACL policy . Syntax: For information on configuring the ACL options avai lable to the AP-513 1 using the applet (GUI), see Configuring a WLAN Access Control List (ACL) on page 5-31 . show Displays MU ACL policy a ...

  • Symbol Technologies AP-5131 - page 378

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-84 AP5131>admin(network.wireless.acl)> delete Description: Removes an MU ACL policy . Syntax: For information on configuring the ACL options avai lable to the AP-513 1 using the applet (GUI), see Configuring a WLAN Acce ss Control List (ACL) on page 5-31 . delete <acl name> Deletes a pa ...

  • Symbol Technologies AP-5131 - page 379

    Command Line Interfa ce Reference 8-85 8.3.3.4 Network Radio Co nfiguration Commands AP5131>admin(network.wireless.radio)> Description: Displays the AP-5131 Radio subm enu. The items available und er this command include: e show Summarizes AP -5131 radio para meters at a high-l evel. set Defines the AP-5131 ra dio configuration. radio1 Displa ...

  • Symbol Technologies AP-5131 - page 380

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-86 AP5131>admin(network.wireless.radio)> show Description: Displays the AP-5131’ s current radio configuration. Syntax: Example: admin(network.wireless.radio)> show Radio Configuration Radio 1 Name : Radio 1 Radio Mode : enable RF Band of Operation : 802.11b/g (2.4 GHz) Wireless AP Config ...

  • Symbol Technologies AP-5131 - page 381

    Command Line Interfa ce Reference 8-87 AP5131>admin(network.wireless.radio)> set Description: Enables an AP-5131 Radio and defines the RF band of operation. Syntax: Example: admin(network.wireless.radio)> set 11a disable admin(network.wireless.radio)> set 11bg enable admin(network.wireless.radio)> set mesh-base enable admin(network.w ...

  • Symbol Technologies AP-5131 - page 382

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-88 AP5131>admin(network.wireless.radio.radio1)> Description: Displays a specific 802.11b/g radio submenu. The items available under this command include: Syntax: For information on configuring Radio 1 Configuration opti o ns available to the AP-5131 usin g the applet (GUI), see Setting the WLA ...

  • Symbol Technologies AP-5131 - page 383

    Command Line Interfa ce Reference 8-89 AP5131>admin(network.wirel ess.radio.radio1)> show Description: Displays specific 802.11b/g radio settings. Syntax: Example: admin(network.wireless.radio.radio1)> show radio Radio Setting Information Placement : indoor MAC Address : 00A0F8715920 Radio Type : 802.11b/g ERP Protection : Off Channel Sett ...

  • Symbol Technologies AP-5131 - page 384

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-90 admin(network.wireless.radio.radio1)> show qos Radio QOS Parameter Set 11g-default ----------------------------------------------------------------------------- Access Category CWMin CWMax AIFSN TXOPs (32 usec) TXOPs ms -------------------------------------------------------------------------- ...

  • Symbol Technologies AP-5131 - page 385

    Command Line Interfa ce Reference 8-91 AP5131>admin(network.wireless.radio.802-11bg)> set Description: Defines specific 802.11b/g radio param eters. Syntax: Example: admin(network.wireless.radio.802-11bg)> set placement indoor admin(network.wireless.radio.802-11bg)> set ch-mode user admin(network.wireless.radio.802-11bg)> set channel ...

  • Symbol Technologies AP-5131 - page 386

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-92 AP5131>admin(network.wireless.radio.802-11bg.advanced)> Description: Displays the advanced sub menu for the 802.11b/g radio. The items av ailable under this command include: Syntax: show Displays advanced ra dio setting s for the 802. 11b/g radi o. set Defines advanced parameters fo r the 8 ...

  • Symbol Technologies AP-5131 - page 387

    Command Line Interfa ce Reference 8-93 AP5131>admin(network.wireless. radio.802-11bg.advanced)> show Description: Displays the BSSID to WLAN mapping for the 802 .11b/g radio. Syntax: Example: admin(network.wireless.radio.802-11bg.advanced)> show advanced ----------------------------------------------------------------------------- WLAN BSS ...

  • Symbol Technologies AP-5131 - page 388

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-94 AP5131>admin(network.wireless. radio.802-11bg.advanced)> set Description: Defines advanced parameters for the targe t 802.11b/g radio. Syntax: Example: admin(network.wireless.radio.802-11bg.advanced)> set wlan demoroom 1 admin(network.wireless.radio.802-11bg.advanced)> set bss 1 demor ...

  • Symbol Technologies AP-5131 - page 389

    Command Line Interfa ce Reference 8-95 AP5131>admin(network.wireless.radio.radio2)> Description: Displays a specific 802.11a rad io submenu. The items available un der this command include: Syntax: show Displays 802.11a radio s ettings set Defines specific 802.11a radio parameters. advanced Displays the Advanced radio settings subme nu. mesh ...

  • Symbol Technologies AP-5131 - page 390

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-96 AP5131>admin(network.wireless.radio.802-11a)> show Description: Displays specific 802.11a rad io settings. Syntax: Example: admin(network.wireless.radio.802-11a)> show radio Radio Setting Information Placement : indoor MAC Address : 00A0F8715920 Radio Type : 802.11a Channel Setting : use ...

  • Symbol Technologies AP-5131 - page 391

    Command Line Interfa ce Reference 8-97 admin(network.wireless.radio.802-11a)> show qos Radio QOS Parameter Set: 11a default ----------------------------------------------------------------------------- Access Category CWMin CWMax AIFSN TXOPs (32 sec) TXOPs ms ----------------------------------------------------------------------------- Backgroun ...

  • Symbol Technologies AP-5131 - page 392

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-98 AP5131>admin(network.wirel ess.radio.802-11a)> set Description: Defines sp ecific 802.11 a radio para meters. Syntax: Example: admin(network.wireless.radio.802-11a)> admin(network.wireless.radio.802-11a)> set placement indoor admin(network.wireless.radio.802-11a)> set ch-mode user ...

  • Symbol Technologies AP-5131 - page 393

    Command Line Interfa ce Reference 8-99 AP5131>admin(network.wirel ess.radio.802-11a.advanced)> Description: Displays the advanced sub menu for the 802-11a radio. The items available unde r this command include: Syntax: show Displays advanced radio settings for th e 802-11a radio. set Defines advanced parameters fo r the 802-11a radio. .. Goes ...

  • Symbol Technologies AP-5131 - page 394

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-100 AP5131>admin(network.wireless. radio.802-11a.advanced)> show Description: Displays the BSSID to WLAN mapping for the 802 .11a radio. Syntax: Example: admin(network.wireless.radio.802-11a.advanced)> show advanced --------------------------------------------------------------------------- ...

  • Symbol Technologies AP-5131 - page 395

    Command Line Interfa ce Reference 8-101 AP5131>admin(network.wireless. radio.802-11a.advanced)> set Description: Defines advanced parameters for the targe t 802..11a radio. Syntax: Example: admin(network.wireless.radio.802-11a.advanced)> set wlan demoroom 1 admin(network.wireless.radio.802-11a.advanced)> set bss 1 demoroom For informati ...

  • Symbol Technologies AP-5131 - page 396

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-102 8.3.3.5 Network Quality of Service (QoS) Commands AP5131>admin(network.wireless.qos)> Description: Displays the AP-5131 Quality of Service (QoS) submenu. The items available under this command inc lude: e show Displays AP-5131 QoS policy inform ation. create Defines the parameters of the Q ...

  • Symbol Technologies AP-5131 - page 397

    Command Line Interfa ce Reference 8-103 AP5131>admin(network.wireless.qos)> show Description: Displays the AP-5131’ s current QoS policy by summary or individual policy . Syntax: Example: admin(network.wireless.qos)> show summary ---------------------------------------------------------------------- QOS Policy Name Associated WLANs ----- ...

  • Symbol Technologies AP-5131 - page 398

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-104 AP5131>admin(network.wireless.qos.create)> Description: Defines an AP-5131 QoS policy . Syntax: For information on configuring the WLAN QoS option s av ailable to the AP-5131 using the applet (GUI), see Setting the WLAN Quality of Service (QoS) Policy on page 5-34 . show Displays QoS polic ...

  • Symbol Technologies AP-5131 - page 399

    Command Line Interfa ce Reference 8-105 AP5131>admin(network.wireless.qos.edit)> Descripton: Edits the properties of an existing QoS policy . Syntax: For information on configuring the WLAN QoS option s av ailable to the AP-5131 using the applet (GUI), see Setting the WLAN Quality of Service (QoS) Policy on page 5-34 . show Displays QoS polic ...

  • Symbol Technologies AP-5131 - page 400

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-106 AP5131>admin(network.wireless.qos)> delete Description: Removes a QoS policy . Syntax: For information on configuring the WLAN QoS option s av ailable to the AP-5131 using the applet (GUI), see Setting the WLAN Quality of Service (QoS) Policy on page 5-34 . delete <qos-name> <all& ...

  • Symbol Technologies AP-5131 - page 401

    Command Line Interfa ce Reference 8-107 8.3.3.6 Network Bandwith Management Commands AP5131>admin(network.wireless.bandwidth)> Description: Displays the AP-5131 Bandwidth Management submenu. The items available under this command include: e show Displays Bandwidth Management information for how data is processed by the AP-5131. set Defines Ba ...

  • Symbol Technologies AP-5131 - page 402

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-108 AP5131>admin(network.wireless.bandwidth)> show Description: Displays the AP-5131’ s current Bandwidth Management configuratio n. Syntax: Example: admin(network.wireless.bandwidth)> show Bandwidth Share Mode : First In First Out For information on configuring the Bandwidth Manage ment ...

  • Symbol Technologies AP-5131 - page 403

    Command Line Interfa ce Reference 8-109 AP5131>admin(network.wireless.bandwidth)> set Description: Defines the AP-5131 Bandwidth Management configuration. Syntax: For information on configuring the Bandwidth Manage ment opti ons available to the AP-5131 us ing the applet (GUI), see Configuring Bandwidth Manageme nt Settings on page 5-55 . set ...

  • Symbol Technologies AP-5131 - page 404

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-110 8.3.3.7 Network Rogue-AP Commands AP5131>admin(network .wireless.rogue-ap)> Description: Displays the Rogue AP submenu. The ite ms available under this command include: e show Displays the current AP-5131 Rogue AP detection config uration. set Defines the Rogue AP detection method. mu-scan ...

  • Symbol Technologies AP-5131 - page 405

    Command Line Interfa ce Reference 8-111 AP5131>admin(network.w ireless.rogue-ap)> show Description: Displays the current AP -5131 Rogue AP detection configura tion. Syntax: Example: admin(network.wireless.rogue-ap)> show MU Scan : disable MU Scan Interval : 60 minutes On-Channel : disable Detector Radio Scan : enable Auto Authorize Symbol ...

  • Symbol Technologies AP-5131 - page 406

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-112 AP5131>admin(network.w ireless.rogue-ap)> set Description: Defines the AP-5131 ACL rogue AP method. Syntax: Example: admin(network.wireless.rogue-ap)> admin(network.wireless.rogue-ap)> set mu-scan enable admin(network.wireless.rogue-ap)> set interval 10 admin(network.wireless.rogu ...

  • Symbol Technologies AP-5131 - page 407

    Command Line Interfa ce Reference 8-113 AP5131>admin(network.wir eless.rogue-ap.mu-scan)> Description: Displays the Rogue-AP mu-sca n submenu. Syntax: show Displays all APs located by the MU scan. start Initiates scan immediately by the MU. .. Goes to the parent menu. / Goes to the root menu. save Saves the configuration to system flash. quit ...

  • Symbol Technologies AP-5131 - page 408

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-114 AP5131>admin(network.wireles s.rogue-ap.mu-scan)> start Description: Initiates an MU scan from a user provided MAC address. Syntax: For information on configuring the Rogue AP options available to the AP-5131 us ing the ap plet (GUI), see Configuring Rogue AP Detection on page 6-53 . start ...

  • Symbol Technologies AP-5131 - page 409

    Command Line Interfa ce Reference 8-115 AP5131>admin(network.wirel ess.rogue-ap.mu-scan)> show Description: Displays the results of an MU scan. Syntax: For information on configuring the Rogue AP options available to the AP-5131 using the applet (GUI), see Configuring Rogue AP Detection on pag e 6-53 . show Displays all APs located by the MU ...

  • Symbol Technologies AP-5131 - page 410

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-116 AP5131>admin(network.wirel ess.rogue-ap.allowed-list)> Description: Displays the Rogue-AP allowed-lis t submenu. show Displays the rogue AP allowed list add Adds an AP MAC address and ESSID to the allowed list. delete Deletes an entry or all en tries from the allowed list. .. Goes to the p ...

  • Symbol Technologies AP-5131 - page 411

    Command Line Interfa ce Reference 8-117 AP5131>admin(network.wireless. rogue-ap.allowed-list)> show Description: Displays the Rogue AP allowed List . Syntax: Example: admin(network.wireless.rogue-ap.allowed-list)> show ----------------------------------------------------------------------------- index ap essid ----------------------------- ...

  • Symbol Technologies AP-5131 - page 412

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-118 AP5131>admin(network.wireless. rogue-ap.allowed-list)> add Description: Adds an AP MAC address and ESSID to existing allowed list. Syntax: Example: admin(network.wireless.rogue-ap.allowed-list)> add 00A0F83161BB 103 admin(network.wireless.rogue-ap.allowed-list)> show ---------------- ...

  • Symbol Technologies AP-5131 - page 413

    Command Line Interfa ce Reference 8-119 AP5131>admin(network.wireless. rogue-ap.allowed-list)> delete Description: Deletes an AP MAC address and ESSID to existing allowed list. Syntax: For information on configuring the Rogue AP options available to the AP-5131 using the applet (GUI), see Configuring Rogue AP Detection on pag e 6-53 . delete ...

  • Symbol Technologies AP-5131 - page 414

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-120 8.3.4 Network Firewall Commands AP5131>admin(network.firewall)> Description: Displays the AP-5131 firewall su bmenu. The items available under this command include : show Displays the AP-5131’ s curre nt firewall c onfiguration. set Defines the AP-5131’ s firewall parameters. access En ...

  • Symbol Technologies AP-5131 - page 415

    Command Line Interfa ce Reference 8-121 AP5131>admin(network.firewall)> show Description: Displays the AP-5131 fi rewall parameters. Syntax: Example: admin(network.firewall)> show Firewall Status : disable NAT Timeout : 10 minutes Configurable Firewall Filters: ftp bounce attack filter : enable syn flood attack filter : enable unaligned ip ...

  • Symbol Technologies AP-5131 - page 416

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-122 AP5131>admin(network.firewall)> set Description: Defines the AP-5131 firewall parameters. Syntax: Example: admin(network.firewall)> set mode enable admin(network.firewall)> set ftp enable admin(network.firewall)> set ip enable admin(network.firewall)> set seq enable admin(netwo ...

  • Symbol Technologies AP-5131 - page 417

    Command Line Interfa ce Reference 8-123 AP5131>admin(network.firewall)> access Description: Enables or disables firewa ll permissions through LAN to W AN ports. Syntax: Example: admin(network.firewall)> set override disable admin(network.firewall)> access admin(network.firewall.lan-wan-access)> set rule allow admin(network.firewall.l ...

  • Symbol Technologies AP-5131 - page 418

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-124 AP5131>admin(network.firewall)> advanced Description: Displays whether an AP-5131 fire wall rule is intended for inbo und traffic to an interface or outbound traffic from that interfa ce.. Syntax: Example: admin(network.firewall)> set override enable admin(network.firewall)> advanced ...

  • Symbol Technologies AP-5131 - page 419

    Command Line Interfa ce Reference 8-125 8.3.5 Network Router Commands AP5131>admin(network.router)> Description: Displays the router submenu. The items ava ilable under this command are: show Displays the existing AP-5131 router configuration. set Sets the RIP parameters. add Adds user -defined routes. delete Deletes user-defined routes. list ...

  • Symbol Technologies AP-5131 - page 420

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-126 AP5131>admin(netwo rk.router)> show Description: Shows the AP-5131 route table. Syntax: Example: admin(network.router)> show routes ---------------------------------------------------------------------------- index destination netmask gateway interface metric --------------------------- ...

  • Symbol Technologies AP-5131 - page 421

    Command Line Interfa ce Reference 8-127 AP5131>admin(network.router)> set Description: Shows the AP-5131 route table. Syntax: For information on configuring the Router options av ailable to the AP-5 131 using the applet (GUI), see Configuring Router Settings on pa ge 5-57 . set auth Sets the RIP authentication type. dir Sets RIP direction. id ...

  • Symbol Technologies AP-5131 - page 422

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-128 AP5131>admin(network.router)> add Description: Adds user -defined routes. Syntax: Example: admin(network.router)> add 192.168.3.0 255.255.255.0 192.168.2.1 LAN 1 1 admin(network.router)> list ---------------------------------------------------------------------------- index destinati ...

  • Symbol Technologies AP-5131 - page 423

    Command Line Interfa ce Reference 8-129 AP5131>admin(netwo rk.router)> delete Description: Deletes user -defined routes. Syntax: Example: admin(network.router)> list ---------------------------------------------------------------------------- index destination netmask gateway interface metric ----------------------------------------------- ...

  • Symbol Technologies AP-5131 - page 424

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-130 AP5131>admin(network.router)> list Description: Lists user -defined routes. Syntax: Example: admin(network.router)> list ---------------------------------------------------------------------------- index destination netmask gateway interface metric -------------------------------------- ...

  • Symbol Technologies AP-5131 - page 425

    Command Line Interfa ce Reference 8-131 8.4 Sy stem Commands AP5131>admin(sy stem)> Description: Displays the System submenu. The ite ms ava ilable under this command are shown be low . restart Restarts the AP-5131. show Shows AP-5131 system paramete r settings. set Defines AP-5131 system parameter settings. debug Accesses AP-5131 p assword-p ...

  • Symbol Technologies AP-5131 - page 426

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-132 AP5131>admin(sy stem)>restart Description: Restarts the AP-5131 access poin t. Syntax: Example: admin(system)> restart ********************************WARNING*********************************** ** Unsaved configuration changes will be lost when the AP-5131 is reset. ** Please be sure to ...

  • Symbol Technologies AP-5131 - page 427

    Command Line Interfa ce Reference 8-133 AP5131>admin(sy stem)>show Description: Displays high-level AP-5131 sys tem information. Syntax: Example: admin(system)> show system name : BldgC system location : Atlanta Field Office admin email address : johndoe@mycompany.com system uptime : 0 days 4 hours 41 minutes AP-5131 firmware version : 1.1 ...

  • Symbol Technologies AP-5131 - page 428

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-134 AP5131>admin(sy stem)>set Description: Sets AP-5131 s ystem parameters . Syntax: ? Example: admin(system)> show system name : AP5131 system location : San Jose Engineering admin email address : SJSharkey@symbol.com system uptime : 0 days 4 hours 33 minutes AP-5131 firmware version : 1.1 ...

  • Symbol Technologies AP-5131 - page 429

    Command Line Interfa ce Reference 8-135 8.4.1 Sy stem Debug and Last Password Commands AP5131>admin(sy stem)>debug Description: Accesses AP-5131 debug information. This informatio n is designed for field service use only , and should not be used by unqualif ied personnel. Example: admin(system)>debug Debug Password: AP-5131 MAC Address is ...

  • Symbol Technologies AP-5131 - page 430

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-136 8.4.2 Sy s tem Access Commands AP5131>admin(sy stem)>access Description: Displays the AP-5131 access su bmenu. show Displays AP-5131 system access capa bilities. set Goes to the AP-5131 system access submenu. .. Goes to the parent menu. / Goes to the root menu. save Saves the current confi ...

  • Symbol Technologies AP-5131 - page 431

    Command Line Interfa ce Reference 8-137 AP5131>admin(sy stem.access)>set Description: Defines the permissions to access the AP-5131 ap plet, CL I, SNMP as well as defining their timeout values. Syntax: For information on configuring AP-5131 access s ettings using the a pplet (GUI), see Configuring Data Access on page 4-6 . set applet Defines ...

  • Symbol Technologies AP-5131 - page 432

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-138 AP5131>admin(sy stem.access)>show Description: Displays the current AP -5131 access permissions and timeout valu es. Syntax: Example: admin(system.access)> show -------------------------------From LAN1-------From LAN2-------From WAN applet http access from lan enable enable enable apple ...

  • Symbol Technologies AP-5131 - page 433

    Command Line Interfa ce Reference 8-139 8.4.3 Sy s tem Certificat e Management Commands AP5131>admin(sy stem)>cmgr Description: Displays the Certificate Manager submenu . The items available und er this command in clude: genreq Generates a Certificate Request. delself Deletes a Self Certificate. loadself Loads a Self Certificate signed by CA. ...

  • Symbol Technologies AP-5131 - page 434

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-140 AP5131>admin(sy stem.cmgr)> genreq Description: Generates a certificate request. Syntax: Note: The parameters in [square brackets] a re optional. Check with the CA to determine what fields a re necessary . For example, most CAs require an email address and an IP address, but no t the addre ...

  • Symbol Technologies AP-5131 - page 435

    Command Line Interfa ce Reference 8-141 AP5131>admin(sy stem.cmgr)> delself Description: ) Deletes a self certificate. Syntax: Example: admin(system.cmgr)> delself MyCert2 For information on configuring self certif icate settings using the ap plet (GUI), see Creating Self Certificates for Accessing the VPN on pag e 4-10 . delself <IDnam ...

  • Symbol Technologies AP-5131 - page 436

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-142 AP5131>admin(sy ste m.cmgr)> loadself Description: Loads a self certificate signed by the Certificate Authority . Syntax: For information on configuring self certif icate settings using the ap plet (GUI), see Creating Self Certificates for Accessing the VPN on pag e 4-10 . loadself <IDn ...

  • Symbol Technologies AP-5131 - page 437

    Command Line Interfa ce Reference 8-143 AP5131>admin(sy stem.cmgr)> listself Description: Lists the loaded self certificates. Syntax: For information on configuring self certif icate settings using the ap plet (GUI), see Creating Self Certificates for Accessing the VPN on pag e 4-10 . listself Lists all self certificates that are loaded. ...

  • Symbol Technologies AP-5131 - page 438

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-144 AP5131>admin(sy stem.cmgr)> loadca Description: Loads a trusted certificate fro m the Certificate Authority . Syntax: For information on configuring certificate settings using the applet (GUI), see Importing a CA Certificate on pag e 4-9 . loadca Loads the trusted certificate (in PEM form ...

  • Symbol Technologies AP-5131 - page 439

    Command Line Interfa ce Reference 8-145 AP5131>admin(sy stem.cmgr)> delca Description: Deletes a trusted certificate. Syntax: For information on configuring certificate settings using the applet (GUI), see Importing a CA Certificate on pag e 4-9 . delca <IDname> Deletes the trusted certificate. ...

  • Symbol Technologies AP-5131 - page 440

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-146 AP5131>admin(sy stem.cmgr)> listca Description: Lists the loaded trusted certificate. Syntax: For information on configuring certificate settings using the applet (GUI), see Importing a CA Certificate on pag e 4-9 . listca Lists the loaded trusted certificates. ...

  • Symbol Technologies AP-5131 - page 441

    Command Line Interfa ce Reference 8-147 AP5131>admin(sy ste m.cm gr)> showreq Description: Displays a certificate request in PEM format. Syntax: For information on configuring certificate settings using the applet (GUI), see Importing a CA Certificate on pag e 4-9 . showreq <IDname> Displays a certificate request name d <IDname> g ...

  • Symbol Technologies AP-5131 - page 442

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-148 AP5131>admin(sy stem. cmgr)> delprivkey Description: Deletes a private key . Syntax: For information on configuring certificate settings using the applet (GUI), see Creating Self Certificates for Accessing the VPN on page 4-10 . delprivkey <IDname> Deletes private key named <IDnam ...

  • Symbol Technologies AP-5131 - page 443

    Command Line Interfa ce Reference 8-149 AP5131>admin(sy stem. cmgr)> listprivkey Description: Lists the names of private keys. Syntax: For information on configuring certificate settings using the applet (GUI), see Importing a CA Certificate on pag e 4-9 . listprivkey Lists all private keys. ...

  • Symbol Technologies AP-5131 - page 444

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-150 AP5131>admin(sy ste m.cmgr)> expcert Description: Exports the certificaqte file. Syntax: For information on configuring certificate settings using the applet (GUI), see Importing a CA Certificate on pag e 4-9 . expcert Exports the certificaqte file. ...

  • Symbol Technologies AP-5131 - page 445

    Command Line Interfa ce Reference 8-151 AP5131>admin(sy stem.cmgr)> impcert Description: Imports the target certificate file. Syntax: For information on configuring certificate settings using the applet (GUI), see Importing a CA Certificate on pag e 4-9 . impcert Imports the target certificate file. ...

  • Symbol Technologies AP-5131 - page 446

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-152 8.4.4 Sy stem SNMP Commands AP5131>admin(sy stem)> snmp Description: Displays the SNMP submenu. Th e items available under this command are shown below . access Goes to the SNMP access submenu. traps Goes to the SNMP trap s submenu. .. Goes to the parent menu. / Goes to the root m enu. sav ...

  • Symbol Technologies AP-5131 - page 447

    Command Line Interfa ce Reference 8-153 8.4.4.1 Sy stem SNMP Access Commands AP5131>admin(sy s tem.snmp.access) Description: Displays the SNMP Access menu. The items available under this command are sho wn below . show Shows SNMP v3 engine ID. add Adds SNMP access entries. delete Deletes SNMP access entries. list Lists SNMP acc ess entries. .. G ...

  • Symbol Technologies AP-5131 - page 448

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-154 AP5131>admin(sy stem. snmp.access)> show Description: Shows the SNMP v3 engine ID. Syntax: Example: admin(system.snmp.access)> show eid AP-5131 snmp v3 engine id : 000001846B8B4567F871AC68 admin(system.snmp.access)> For information on configuring SNMP access settin gs using the apple ...

  • Symbol Technologies AP-5131 - page 449

    Command Line Interfa ce Reference 8-155 AP5131>admin(sy stem. snmp.access)> add Description: Adds SNMP access entries for specific v1v2 and v3 user definitions. Syntax: For information on configuring SNMP access settin gs using the applet (GUI), see Configuring SNMP Access Control on pag e 4-23 . add acl <ip1> <ip2> Adds an entry ...

  • Symbol Technologies AP-5131 - page 450

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-156 AP5131>admin(sy stem. snmp.access)> delete Description: Deletes SNMP access entries for specific v1v2 and v3 user de finitions. Syntax: Example: admin(system.snmp.access)> list acl ----------------------------------------------------------------------------- index start ip end ip ------ ...

  • Symbol Technologies AP-5131 - page 451

    Command Line Interfa ce Reference 8-157 AP5131>admin(sy stem. snmp.access)> list Description: Lists SNMP access entries. Syntax: Example: admin(system.snmp.access)> list acl ---------------------------------------------------------------- index start ip end ip ---------------------------------------------------------------- 1 209.236.24.1 ...

  • Symbol Technologies AP-5131 - page 452

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-158 8.4.4.2 Sy stem SNMP T raps Commands AP5131>admin(sy stem.snmp.traps) Description: Displays the SNMP traps submenu. The ite ms available under this command are shown be low . show Shows SNMP trap parameters. set Sets SNMP trap parameters. add Adds SNMP trap entries. delete Deletes SNMP trap e ...

  • Symbol Technologies AP-5131 - page 453

    Command Line Interfa ce Reference 8-159 AP5131>admin(sy stem. snmp.traps)> show Description: Shows SNMP trap parameters. Syntax: Example: admin(system.snmp.traps)> show trap SNMP MU Traps mu associated : enable mu unassociated : disable mu denied association : disable mu denied authentication : disable SNMP Traps snmp authentication failur ...

  • Symbol Technologies AP-5131 - page 454

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-160 AP5131>admin(sy stem.snmp.traps)> set Description: Sets SNMP trap parameters. Syntax: For information on configuring SNMP traps using the applet (GUI), see Configuring Specific SNMP T raps on pag e 4-28 . set mu-assoc enable / disable Enables/disables the MU associated trap. mu-unassoc ena ...

  • Symbol Technologies AP-5131 - page 455

    Command Line Interfa ce Reference 8-161 AP5131>admin(sy stem. snmp.traps)> add Description: Adds SNMP trap entries. Syntax: Example: admin(system.snmp.traps)> add v1v2 203.223.24.2 333 mycomm v1 admin(system.snmp.traps)> list v1v2c ---------------------------------------------------------------------- index dest ip dest port community v ...

  • Symbol Technologies AP-5131 - page 456

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-162 AP5131>admin(sy stem.snmp.traps)> delete Description: Deletes SNMP trap entries. Syntax: Example: admin(system.snmp.traps)> delete v1v2 all For information on configuring SNMP traps using the applet (GUI), see Configuring SNMP Settings on pag e 4-17 . delete v1v2c <idx> Deletes en ...

  • Symbol Technologies AP-5131 - page 457

    Command Line Interfa ce Reference 8-163 AP5131>admin(sy stem. snmp.traps)> list Description: Lists SNMP trap entries. Syntax: Example: admin(system.snmp.traps)> add v1v2 203.223.24.2 162 mycomm v1 admin(system.snmp.traps)> list v1v2c ---------------------------------------------------------------------- index dest ip dest port community ...

  • Symbol Technologies AP-5131 - page 458

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-164 8.4.5 Sy s tem Network T ime Protocol (NTP) Commands AP5131>admin(sy stem)> ntp Description: Displays the NTP menu. The corre ct network time is required for numerous functions to be config ured accuaretly on the AP-513 1. Syntax: set show Shows NTP parameters settings. date-zone Show date ...

  • Symbol Technologies AP-5131 - page 459

    Command Line Interfa ce Reference 8-165 AP5131>admin(sy stem.ntp)> show Description: Displays the NTP server configuratio n. Syntax: Example: admin(system.ntp)> show current time (UTC) : 2006-07-31 14:35:20 Time Zone: ntp mode : enable preferred Time server ip : 203.21.37.18 preferred Time server port : 123 first alternate server ip : 203. ...

  • Symbol Technologies AP-5131 - page 460

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-166 AP5131>admin(sy stem.ntp)> date-zone Description: Show date, time and time zone. Syntax: Example: admin(system.ntp)> date-zone Date/Time : Sat 1970-Jan-03 20:06:22 +0000 UTC Time Zone : date-zone Show date, time and time zone. ...

  • Symbol Technologies AP-5131 - page 461

    Command Line Interfa ce Reference 8-167 AP5131>admin(sy ste m.ntp)> zone-list Description: Displays an ex tensive list of time zone s for countries aro und the world . Syntax: Example: admin(system.ntp)> zone-list zone-list Displays list of time zones for every known zone. ...

  • Symbol Technologies AP-5131 - page 462

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-168 AP5131>admin(sy stem.ntp)> set Description: Sets NTP parameters for AP-5131 clo ck synchronization. Syntax: Example: admin(system.ntp)> set mode enable admin(system.ntp)> set server 1 203.21.37.18 admin(system.ntp)> set port 1 123 admin(system.ntp)> set intrvl 15 admin(system.n ...

  • Symbol Technologies AP-5131 - page 463

    Command Line Interfa ce Reference 8-169 8.4.6 Sy stem Log Commands AP5131>admin(sy stem)> logs Description: Displays the AP-5131 log submenu . Logging options in clude: Syntax: show Shows logging options. set Sets log options and parameters. view V iews system log. delete Deletes the sys tem log. send Sends log to the designated F TP Server . ...

  • Symbol Technologies AP-5131 - page 464

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-170 AP5131>admin(sy stem.logs)> show Description: Displays the current AP -5131 logging settings. Syntax: Example: admin(system.logs)> show log level : L6 Info syslog server logging : enable syslog server ip address : 192.168.0.102 For information on configuring logging settings us ing the ...

  • Symbol Technologies AP-5131 - page 465

    Command Line Interfa ce Reference 8-171 AP5131>admin(sy stem.logs)> set Description: Sets log options and parameters. Syntax: For information on configuring logging settings u sing the app let (GUI), see Logging Con figuration on page 4-35 . set level <level> Sets the level of the events that will be logged. All ev ents with a level at ...

  • Symbol Technologies AP-5131 - page 466

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-172 AP5131>admin(sy stem.logs)> view Description: Displays the AP-5131 syste m log file. Syntax: Example: admin(system.logs)> view Jan 7 16:14:00 (none) syslogd 1.4.1: restart (remote reception). Jan 7 16:14:10 (none) klogd: :ps log:fc: queue maintenance Jan 7 16:14:41 (none) klogd: :ps log ...

  • Symbol Technologies AP-5131 - page 467

    Command Line Interfa ce Reference 8-173 AP5131>admin(sy stem.logs)> delete Description: Deletes the log files. Syntax: Example: admin(system.logs)> delete For information on configuring logging settings u sing the app let (GUI), see Logging Con figuration on page 4-35 . delete Deletes the AP-5131 sy stem log file. ...

  • Symbol Technologies AP-5131 - page 468

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-174 AP5131>admin(sy stem.logs)> send Description: Sends log and core file to an F TP Server . Syntax: Example: admin(system.logs)> send File transfer : [ In progress ] File transfer : [ Done ] admin(system.logs)> For information on configuring logging settings us ing the app let (GUI), s ...

  • Symbol Technologies AP-5131 - page 469

    Command Line Interfa ce Reference 8-175 8.4.7 Sy stem Configuration-Update Commands AP5131>admin(sy stem.config)> Description: Displays the AP-5131 config uration update submenu. Syntax: default Restores the default AP-5131 configuration. partial Restores a partia l default AP-5131 co nfiguration. show Shows import/export parameters. set Sets ...

  • Symbol Technologies AP-5131 - page 470

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-176 AP5131>admin(sy stem. config)> default Description: Restores the full AP-5131 factory default configuration. Syntax: Example: admin(system.config)> default Are you sure you want to default the configuration? <yes/no>: For information on importing/exp orting AP-5131 configur ations ...

  • Symbol Technologies AP-5131 - page 471

    Command Line Interfa ce Reference 8-177 AP5131>admin(sy stem. config)> partial Description: Restores a partial factory default configuratio n. The AP-5131’ s LAN, W AN and SNMP settings are une ffected by the partial re stor e. Syntax: Example: admin(system.config)> partial Are you sure you want to partially default the AP-5131? <yes/ ...

  • Symbol Technologies AP-5131 - page 472

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-178 AP5131>admin(sy ste m.config)> show Description: Displays import/export param eters for the AP-5131 configuration file. Syntax: Example: admin(system.config)> show cfg filename : cfg.txt cfg filepath : ftp/tftp server ip address : 192.168.0.101 ftp user name : myadmin ftp password : *** ...

  • Symbol Technologies AP-5131 - page 473

    Command Line Interfa ce Reference 8-179 AP5131>admin(sy stem.config)> set Description: Sets the import/export parameters. Syntax: Example: admin(system.config)> set server 192.168.22.12 admin(system.config)> set user myadmin admin(system.config> set passwd georges admin(system.config)> show cfg filename : cfg.txt cfg filepath : ft ...

  • Symbol Technologies AP-5131 - page 474

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-180 AP5131>admin(sy ste m.config)> export Description: Exports the configuration from the syste m. Syntax: Example: Export F TP Example: admin(system.config)> set server 192.168.22.12 admin(system.config)> set user myadmin admin(system.config)> set file config.txt admin(system.config) ...

  • Symbol Technologies AP-5131 - page 475

    Command Line Interfa ce Reference 8-181 AP5131>admin(sy ste m.config)> import Description: Imports the AP-5131 configuration to the AP-51 31. Errors could di splay a s a result of invaid configuration p arameters. Correct the sepcified lines and import the file aga in until the import operation is error free. Syntax: Example: Import F TP Exam ...

  • Symbol Technologies AP-5131 - page 476

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-182 8.4.8 Firmware Update Commands AP5131>admin(sy stem)>fw-update Description: Displays the firmware update sub menu. The items available un der this command are shown below . NOTE The AP-5131 must complete the reboot proc ess to succe ssfully upd ate the device firmware, regardless of whethe ...

  • Symbol Technologies AP-5131 - page 477

    Command Line Interfa ce Reference 8-183 AP5131>admin(sy ste m.fw-update)>show Description: Displays the current AP -5131 firmware update settings. Syntax: Example: admin(system.fw-update)> show automatic firmware upgrade : enable automatic config upgrade : enable automatic upgrade interface : WAN firmware filename : APFW.bin firmware path ...

  • Symbol Technologies AP-5131 - page 478

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-184 AP5131>admin(sy ste m.fw-update)>set Description: Defines AP-5131 firmware update settings and user permissions. Syntax: For information on upda ting AP-5131 d evice firmware using th e applet (GUI), see Updating Device Firmware on page 4 -41 . set fw-auto <mode> Whe n enabled, updat ...

  • Symbol Technologies AP-5131 - page 479

    Command Line Interfa ce Reference 8-185 AP5131>admin(sy ste m.fw-update)>update Description: Executes the AP-5131 firmware update over t he W AN or LAN port using either ftp or tftp. Syntax: For information on updating AP-5131 device firm ware using the applet (GUI), see Updating Device Firmware on page 4-41 . update <mode><iface> ...

  • Symbol Technologies AP-5131 - page 480

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-186 8.5 Statistics Commands AP5131>admin(stats) Description: Displays the AP-5131 statistics submenu . The items a vailable under this command are: show Displays AP-5131 WLAN, MU, LAN an d W AN statistics. send-cfg-ap Sends a config file to another AP-5131 within the know n AP table. send-cfg-all ...

  • Symbol Technologies AP-5131 - page 481

    Command Line Interfa ce Reference 8-187 AP5131>admin(stats)> show Description: Displays AP-5131 system inform ation. Syntax: For information on displaying W AN port statistics using the applet (GUI), see Viewing W AN Statistics on page 7-2 . For information on displaying LAN port statistics using the applet (GUI), see Viewing LAN Statistics o ...

  • Symbol Technologies AP-5131 - page 482

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-188 AP5131>admin(sta ts)> send-cfg-ap Description: Copies the AP-5131’ s configuration to another AP-5131 within the known AP table. Syntax: Example: admin(stats)> send-cfg-ap 2 admin(stats)> For information on copying the AP-5131 config to another AP-5131 using the ap plet (GUI), see ...

  • Symbol Technologies AP-5131 - page 483

    Command Line Interfa ce Reference 8-189 AP5131>admin(stats )> send-cfg-all Description: Copies the AP-5131’ s configuration to all o f the AP-5131s within the known AP table. Syntax: Example: admin(stats)> send-cfg-all admin(stats)> For information on copying the AP-513 1 config to another AP-5131 using the ap plet (GUI), see Viewing ...

  • Symbol Technologies AP-5131 - page 484

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-190 AP5131>admin(stats)> clear Description: Clears the specified statistics counters to zero to begin new data calculations. Syntax: clear wan Clears W AN statistics counters. lan Clears LAN statistics counters. all-rf Clears all RF data. all-wlan Clears all WLAN summary information. wlan Clea ...

  • Symbol Technologies AP-5131 - page 485

    Command Line Interfa ce Reference 8-191 AP5131>admin(stats)> flash-all-leds Description: Starts and stops the illumination of a specified access point’ s LEDs. Syntax: Example: admin(stats)> admin(stats)> flash-all-leds 1 start Password ******** admin(stats)> flash-all-leds 1 stop admin(stats)> For information on flashing AP-513 ...

  • Symbol Technologies AP-5131 - page 486

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-192 AP5131>admin(stats)> echo Description: Defines the echo test values used to condu ct a ping test to an associated MU. Syntax: For information on MU Echo and Ping tests using the app let (GUI), see Pin ging Individual MUs on page 7-2 7 . show Shows the Mobile Unit Statistics Summary . list ...

  • Symbol Technologies AP-5131 - page 487

    Command Line Interfa ce Reference 8-193 AP5131>admin.stats.echo)> show Description: Shows Mobile Unit Statistics Summary . Syntax: Example: admin(stats.echo)> show ---------------------------------------------------------------------------- Idx IP Address MAC Address WLAN Radio T-put ABS Retries -------------------------------------------- ...

  • Symbol Technologies AP-5131 - page 488

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-194 AP5131>admin.stats.echo)> list Description: Lists echo test parameters and results. Syntax: Example: admin(stats.echo)> list Station Address : 00A0F8213434 Number of Pings : 10 Packet Length : 10 Packet Data (in HEX) : 55 admin(stats.echo)> For information on MU Echo and Ping tests u ...

  • Symbol Technologies AP-5131 - page 489

    Command Line Interfa ce Reference 8-195 AP5131>admin.stats.echo)>set Description: Defines the parameters of the echo test. Syntax: For information on MU Echo and Ping tests using the applet (GUI), se e Pin ging Individual MUs on page 7-27 . set station <mac> Defines MU target MAC address. request <num> Sets nu mber of echo packets ...

  • Symbol Technologies AP-5131 - page 490

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-196 AP5131>admin.stats.echo)> start Description: Initiates the echo test. Syntax: Example: admin(stats.echo)> start admin(stats.echo)> list Station Address : 00A0F843AABB Number of Pings : 10 Packet Length : 100 Packet Data (in HEX) : 1 Number of MU Responses : 2 For information on MU Ec ...

  • Symbol Technologies AP-5131 - page 491

    Command Line Interfa ce Reference 8-197 AP5131>admin(stats)> ping Description: Defines the ping test values used to conduct a ping test to an AP with th e same ESSID. Syntax: For information on Known AP tests using the applet (GUI), see Pinging Ind ividual MUs on page 7-27 . ping show Shows Known AP Summary details. list Defines ping test pac ...

  • Symbol Technologies AP-5131 - page 492

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-198 AP5131>admin.stats.ping)> show Description: Shows Known AP Summary Details. Syntax: Example: admin(stats.ping)> show ---------------------------------------------------------------------------- Idx IP Address MAC Address MUs KBIOS Unit Name ---------------------------------------------- ...

  • Symbol Technologies AP-5131 - page 493

    Command Line Interfa ce Reference 8-199 AP5131>admin.stats.ping)> list Description: Lists ping test parameters and results. Syntax: Example: admin(stats.ping)> list Station Address : 00A0F8213434 Number of Pings : 10 Packet Length : 10 Packet Data (in HEX) : 55 admin(stats.ping)> For information on Known AP tests using the applet (GUI), ...

  • Symbol Technologies AP-5131 - page 494

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-200 AP5131>admin.stats.ping)> set Description: Defines the parameters of the ping test. Syntax: Example: admin(stats.ping)> set station 00A0F843AABB admin(stats.ping)> set request 10 admin(stats.ping)> set length 100 admin(stats.ping)> set data 1 admin(stats.ping)> For informati ...

  • Symbol Technologies AP-5131 - page 495

    Command Line Interfa ce Reference 8-201 AP5131>admin.stats.echo)> start Description: Initiates the pin g test. Syntax: Example: admin(stats.ping)> start admin(stats.ping)> list Station Address : 00A0F843AABB Number of Pings : 10 Packet Length : 100 Packet Data (in HEX) : 1 Number of AP Responses : 2 For information on Known AP tests usi ...

  • Symbol Technologies AP-5131 - page 496

    AP-5131 Acce ss Point Pro duct Refere nce Guide 8-202 ...

  • Symbol Technologies AP-5131 - page 497

    Configuring Mesh Networking 9.1 Mesh Networking Overview An AP-5131 can be configured in two modes to support the new mesh networking functio nality . Th e AP-5131 can be set to a client bridge mode and /or a base bridge mode (which accepts connections from client bridges). Base bridge and client bridge mode can be used at the same time by an indiv ...

  • Symbol Technologies AP-5131 - page 498

    AP-5131 Access Poin t Product Referen ce Guide 9-2 AP-5131s configured as both a base and a client bridge functio n as repeaters to transmit data with associated MUs in their coverage area (client br idge mode) as well as forward traffic to other AP- 5131s in the mesh network (base brid ge mode). T he number of AP-5131s and their intended func tion ...

  • Symbol Technologies AP-5131 - page 499

    Configuring M esh Networki ng 9-3 If an AP-5131 is configured as a base bridge (but not as a client bridge) it o perates normally at boot time. The base bridge AP-513 1 supports connection s made by other client bridge AP-51 31s. The dual-radio model AP-5131 affords users better optimization of the mesh networking feature by enabling the AP-5131 to ...

  • Symbol Technologies AP-5131 - page 500

    AP-5131 Access Poin t Product Referen ce Guide 9-4 The dual-radio model AP-5131 affords users better optimization of the mesh networking feature by allowing the AP-5131 to transmit to other AP-513 1s (in base or client bridge mode) using one independent radio and transmit with its associ ated MUs using the second indep endent radio. A single-radio ...

  • Symbol Technologies AP-5131 - page 501

    Configuring M esh Networki ng 9-5 Limit the wireless client’ s connections to reduce the to tal number of hops required to get to the wired network. Use each radio’ s "preferred" base b ridge list to define which AP-5131s the client bridge is allowed to connect to. For more information, see Co nfiguring Mesh Networking Support on pa g ...

  • Symbol Technologies AP-5131 - page 502

    AP-5131 Access Poin t Product Referen ce Guide 9-6 However , if using the Known AP Statistics screen’ s Send Cfg to APs functionality , “auto-select” and preferred list” settings do not get imported. 9.2 Configuring Mesh Networking Support Configuring the AP-5131 for Mesh Bridging support entails: • Setting the LAN Configuration for Mesh ...

  • Symbol Technologies AP-5131 - page 503

    Configuring M esh Networki ng 9-7 V erify the enabled LAN is named appropriately in respect to its intended function in supporting the mesh network. 3. Select Network Configuration -> LAN -> LAN1 or LAN2 from the AP-5131 menu tree. 4. Click the Mesh STP Configuration button on the bottom off the screen. 5. Define the properties for the follow ...

  • Symbol Technologies AP-5131 - page 504

    AP-5131 Access Poin t Product Referen ce Guide 9-8 6. Click OK to return to either the LAN1 or LAN2 screen where up dates to the Mesh STP Configuration can be saved by clicking the Apply butto n. 7. Click Cancel to discard the changes made to the Mesh STP Configu ration and return to the LAN1 or LAN2 screen. Once the Mesh STP Configuration is defin ...

  • Symbol Technologies AP-5131 - page 505

    Configuring M esh Networki ng 9-9 The Wireless Configuration screen displays with those existin g WLANs displayed within the table. 2. Select the Cre ate button to configure a new WLAN specifically to s upport mesh networking. An existing WLAN can be modified (or used as is) for mesh ne tworking support by selectin g it from the list of available W ...

  • Symbol Technologies AP-5131 - page 506

    AP-5131 Access Poin t Product Referen ce Guide 9-10 Symbol recommends assigning a unique name to a WLAN supporting a mes h network to differentiate it from WLANs defined for non mes h support. The name assig ned to the WLAN is what is selected from the Radio Configuration screen for use within the mesh network. 4. Use the A vailable On checkboxes t ...

  • Symbol Technologies AP-5131 - page 507

    Configuring M esh Networki ng 9-11 are typically not guest networks, wherein pub lic assess is more important than data protection. Symbol also discourages user-based authentication schemes such as Kerberos and 802.1 x EAP , a s these authentication schemes are not supported within a mesh network. If none of the existing policies are suitable, sele ...

  • Symbol Technologies AP-5131 - page 508

    AP-5131 Access Poin t Product Referen ce Guide 9-12 10. Select the Use Secure Beac on checkbox to not transmit the AP- 5131’ s ESSID amongst the AP-5131s and devices within the mesh ne twork. If a hacker tries to find an ESSID via an MU, the AP- 5131’ s ESSID does not display since the ESSID is not in the beacon. Symbol recommend s keeping the ...

  • Symbol Technologies AP-5131 - page 509

    Configuring M esh Networki ng 9-13 1. Select Network Co nfiguration -> Wireless -> Radio Configuration from the AP-5131 menu tree. 2. Enable the radio(s) using the Enable checkbox(es) for both Radio 1 and Radio 2. Refer to RF Band of Operation parameter to en sure you are enablin g the correct 8 02.11a or 802.11b/g radio. After the settings a ...

  • Symbol Technologies AP-5131 - page 510

    AP-5131 Access Poin t Product Referen ce Guide 9-14 mesh network data from those client bridges within the mesh network and never the initiator . 4. If the Base Bridge checkbox has been se lected, use the Max# Client Bridges parameter to define the client bridge load on a particular base bridge. The maximum number of client bridge con nections per ...

  • Symbol Technologies AP-5131 - page 511

    Configuring M esh Networki ng 9-15 If the Client Bridge checkbox h as been selected, use the Mesh Network Name drop-down menu to select the WLAN (ESS) the client bridge uses to establis h a wireless link. The default setting, is (WLAN1). Symb ol recommend s creating (and naming) a WLAN specifically for mesh networking support to differentiate the M ...

  • Symbol Technologies AP-5131 - page 512

    AP-5131 Access Poin t Product Referen ce Guide 9-16 the user from selecting the order b ase bridges are a dded to the mesh network w hen one of the three associated base brid ges becomes unavailable. 8. Refer to the Available Base Bridge List to view devices located by the AP-5131 using the WLAN selected from the Radio Configuration sc reen. Refer ...

  • Symbol Technologies AP-5131 - page 513

    Configuring M esh Networki ng 9-17 If a MAC address is not desirable as others but still worthy of being on the prefe rred list, select it, and click the Down button to decrease its likelihood of being selecte d as a member of the mesh network. 13. If a device MAC address is on the Preferred Base Brid ge List and constitutes a threat as a potential ...

  • Symbol Technologies AP-5131 - page 514

    AP-5131 Access Poin t Product Referen ce Guide 9-18 9.3 Usage Scenario - T rion Enterprises T rion Enterprises is a new ship ping and receiving comp any . T rion wants to create an outdoor wire less coverage area (in addition to its indoo r wireless in frastru cture) that can expand as they grow their business. As T rion expand s the wireless cover ...

  • Symbol Technologies AP-5131 - page 515

    Configuring M esh Networki ng 9-19 1. The T rion IT department verifies connectivity with both of the AP-513 1s following the instructions in T esting Connectivity on page 3- 13 . 2. The T rion IT Departme nt installs the AP1 on a wall with the antenna s orienting outward in to the shipping and receiving yard. The team then installs the AP2 on a wa ...

  • Symbol Technologies AP-5131 - page 516

    AP-5131 Access Poin t Product Referen ce Guide 9-20 3. The T rion IT dep artment selects Network Configuration -> LAN from the AP-5131 menu tree. 4. The T rion IT department verifies the LAN used to support the mesh network is enabled for both AP1 and AP2, (by selecting the Enable checkbox). 5. The T rion IT department then selects Network Confi ...

  • Symbol Technologies AP-5131 - page 517

    Configuring M esh Networki ng 9-21 6. The IT team sele cts the Mesh STP Configuration button on the bottom off the screen. 7. The T rion IT departme nt sets the Priority setting to 1 (for AP1) in order for future members of the mesh network to defer to AP1 as the AP defining the mesh netwo rk configuration (setting this value to 1 AP1 to what is co ...

  • Symbol Technologies AP-5131 - page 518

    AP-5131 Access Poin t Product Referen ce Guide 9-22 The Wireless Configuration screen displays with those e xisting WLANs displayed within the table. This is T rion’ s first deploy ment fo r this new dual-radio AP-5131, up on reviewing the Wireless Page they determine the existing default WLAN should be left as is and a new WLAN should be created ...

  • Symbol Technologies AP-5131 - page 519

    Configuring M esh Networki ng 9-23 12. The team assigns the name of “ trion mesh ” to the WLAN so it will not be confused with other WLANs used in o ther areas of the T rio n facility . This name also serves to associate the name of the WLAN with its intended mesh network utiliza tion of data. entry within the shipping y ard 13. For AP1 the tea ...

  • Symbol Technologies AP-5131 - page 520

    AP-5131 Access Poin t Product Referen ce Guide 9-24 19. The Broadcast Key Rotation checkbox is selected, as th e IT team plans to change the ke ys from time to time (for security purposes) an d wants these keys to be broadcasted using the default interval 86400 seconds. 20. The IT team does not want to use a passphrase to repres ent the 256-bit key ...

  • Symbol Technologies AP-5131 - page 521

    Configuring M esh Networki ng 9-25 23. The IT team assigns the name of “ trion mesh network ” to the ACL to eliminat e any confusion with the ACLs intended function 24. Since the range of client bridge MAC addre sses for the shipping yard mesh network is known to the IT T eam, they select the Deny drop-down menu option, as the team wants to den ...

  • Symbol Technologies AP-5131 - page 522

    AP-5131 Access Poin t Product Referen ce Guide 9-26 26. The team decides to le ave the Disallow MU to MU Communication checkbox unselec ted for the WLAN, as the team considers all MU traf fic within the secure shipping a nd receiving yard known and not a threat to the initial 2 AP mesh network de ployment. 27. The team selects the Use Secure Beacon ...

  • Symbol Technologies AP-5131 - page 523

    Configuring M esh Networki ng 9-27 31. The IT T eam does not p lan on supporting any legacy 802.11b vo ice enabled de vices, so they leave the Support V oice prioritization checkbox unselected. 32. The IT T eam selects 11ag-default from the drop -down menu to best describe the type of data proliferating the m esh network. With this setting selected ...

  • Symbol Technologies AP-5131 - page 524

    AP-5131 Access Poin t Product Referen ce Guide 9-28 37. For AP2, the IT T eam enables both Radio 1 and Radio 2 and defines radio 1 as a client bridge. 38. The IT T eam leaves each radio’ s Max # Client Bridge setting at the default setting of 12. This ensures as client bridges are added to the growin g mesh network they can be accounted for . 39. ...

  • Symbol Technologies AP-5131 - page 525

    Configuring M esh Networki ng 9-29 For the next six months, T rion Enterprises’ mesh netwo rk only consists of AP1 an d AP2. AP1 has already been defined as the root bridge in the mesh netwo rk when it was assigned a Priority value of 1 within th e Bridge STP Configuration screen. 41. The T rion IT T eam clicks Apply within both the AP1 and AP2 R ...

  • Symbol Technologies AP-5131 - page 526

    AP-5131 Access Poin t Product Referen ce Guide 9-30 broadcast range (see the illustration below). T he T rion IT departme nt follows the instructions in Wall Mounted Installations on page 2-13 to install AP3 and AP4. 3. The T rion IT dep artment selects Network Configuration -> LAN from the AP-5131 menu tree. 4. The T rion IT department verifies ...

  • Symbol Technologies AP-5131 - page 527

    Configuring M esh Networki ng 9-31 5. The T rion IT department then selects Network Configuration -> LAN -> trion from the AP-5131 menu tree. 6. The IT team sele cts the Mesh STP Configuration button on the bottom of the screen. 7. The T rion IT department leaves the Priority setting to at 32768 for AP3 and AP4 for both to defer to AP1 (which ...

  • Symbol Technologies AP-5131 - page 528

    AP-5131 Access Poin t Product Referen ce Guide 9-32 9. The team selects the Edit button to revise (and rename) the existing default WLAN to support mesh networking. 10. The T rion IT team assigns AP 3 and AP4 an ES SID of 103. Therefore, AP 1 and AP2 should be able to “see” AP3 and AP4 as soon as they are deployed. 11. The team assigns the name ...

  • Symbol Technologies AP-5131 - page 529

    Configuring M esh Networki ng 9-33 13. The team does not want any MUs connecting to the mesh WLAN, only the dev ices comprising the mesh network. Therefore, the team leave s the Maximum MUs field as is, and will use the Radio Config uration page to control the nu mber of client bridge connections. 14. The team verifies the Enable Client Bridge Back ...

  • Symbol Technologies AP-5131 - page 530

    AP-5131 Access Poin t Product Referen ce Guide 9-34 21. Now a QoS policy needs to be defined for the shipp ing and receiving mesh WLAN. The IT T eam still envisions little (if any) video or voic e traffic within the shippi ng as the MUs within primarily scan bar cod es and uplo ad data. Th is holds true for the QoS requiremen ts for AP3 and AP4 as ...

  • Symbol Technologies AP-5131 - page 531

    Configuring M esh Networki ng 9-35 25. For both AP3 and AP4, the IT T eam uses the Mesh Network Name drop-down m enu to assign the “ trion mesh ” WL AN to radio 1. This is the WL AN the AP3 and AP4 radios will use to interoperate with the MUs populating the shipping ya rd. 26. As with AP1 and AP2, the IT T eam d ecides to not select the Advance ...

  • Symbol Technologies AP-5131 - page 532

    AP-5131 Access Poin t Product Referen ce Guide 9-36 9.3.3 Adding 2 More Client Br idges to the T rion Network After an additional six months with their existing 4 AP-5131 mesh network, T rion Enterprises needs and approves the addition of two additional AP -5131s (AP5 and AP6) to be conf igured as client bridges. The team will configure AP5 and AP6 ...

  • Symbol Technologies AP-5131 - page 533

    Configuring M esh Networki ng 9-37 3. The T rion IT dep artment selects Network Configuration -> LAN from the AP-5131 menu tree. 4. The T rion IT department verifies the LAN used to support the mesh netwo rk is enabled for both AP5 and AP6, (by selecting the Enable checkbox). 5. The T rion IT department then selects Network Configuration -> L ...

  • Symbol Technologies AP-5131 - page 534

    AP-5131 Access Poin t Product Referen ce Guide 9-38 7. The T rion IT departm ent leaves the Priority setting to at 32768 for AP5 and AP6 for bo th to defer to AP1 (which was assigned a priority of 1 for root design ation) as the AP-5131 defining the mesh ne twork configuratio n. The remainder of the Mesh STP Configurat ion settings are left unchang ...

  • Symbol Technologies AP-5131 - page 535

    Configuring M esh Networki ng 9-39 9. The team selects the Edit button to revise (and rename) the existing defa ult WLAN to support mesh networking. 10. The T rion IT team assigns the WLAN an ESSID of 103 to be consistent with the trion mesh WLAN ESSID of the other four AP-5131s within the mesh network. 11. The team assigns the name of “ tr ion m ...

  • Symbol Technologies AP-5131 - page 536

    AP-5131 Access Poin t Product Referen ce Guide 9-40 13. The team still does not want any MUs connecting to the mesh WLAN, only th e devices comprising the mesh network. There fore, the team leaves the Maxim um MUs field as is, and will use the Radio Configuration page to control the number of c lient bridge connections within the mesh WLAN. 14. The ...

  • Symbol Technologies AP-5131 - page 537

    Configuring M esh Networki ng 9-41 22. The IT team sele cts Network Configuration -> Wireless -> Radio Configuration from the AP-5131 menu tree. The Radio Configuration screen disp lays. 23. For both AP5 and AP6, the IT T eam enables Radi o 1 and defines the radio as a client brid ge. 24. For both AP5 and AP6, the IT T eam uses the Mesh Netwo ...

  • Symbol Technologies AP-5131 - page 538

    AP-5131 Access Poin t Product Referen ce Guide 9-42 ...

  • Symbol Technologies AP-5131 - page 539

    T echnical Specifications This appendix provides technical specifications in the following area s: • Physical Characterist ics • Electrical Characteristics • Radio Charac teristics • Antenna Specification s • Country Code s ...

  • Symbol Technologies AP-5131 - page 540

    AP-5131 Access Poin t Product Referen ce Guide A-2 A.1 Phy sical Characteristics The AP-5131 has the following phy sical characteris tics: A.2 Electrical Characteristics The AP-5131 has the following electrical characteristic s: Dimensions 5.32 inches long x 9.45 inches wide x 1.77 inches thick. 135 mm long x 240 mm wide x 45 mm thick. Housing Meta ...

  • Symbol Technologies AP-5131 - page 541

    Technical Specifications A-3 A.3 Radio Characteristics The AP-5131 has the following radio cha racteristics: Operating Channels 802.11a radio - Channels 34-161 (5170-5825 MHz) 802.11b/g radio - Channels 1-13 (2412-2472 MHz) 802.11b/g radio - Channel 14 (2484 MHz Japan only) Actual operating frequencies depend on regulatory rules and certification a ...

  • Symbol Technologies AP-5131 - page 542

    AP-5131 Access Poin t Product Referen ce Guide A-4 A.4 Antenna Specifications The AP-5131 antenna suite has the following specificatio ns: A.4.1 2.4 GHz Antenna Matrix The following table describes each 2.4 GHz antenna approved for use with the AP-5131. A.4.2 5.2 GHz Antenna Matrix The following table d escribes each 5.2 GHz antenna approved for us ...

  • Symbol Technologies AP-5131 - page 543

    Technical Specifications A-5 A.4.3 Additional Antenna Components The following table lists the Symbol part number fo r vario us antenna accessories. This table also includes the loss for each access ory at both 2.4 and 5.2 GHz. A.4.4 Antenna Accessory Connectors, Cable T ype and Length The following table d escribes each antenn a accessory’ s con ...

  • Symbol Technologies AP-5131 - page 544

    AP-5131 Access Poin t Product Referen ce Guide A-6 A.5 Country Codes The following list of c ountries and their country codes is useful wh en using the AP -5131 configuration file, CLI or the MIB to configure the AP-5131: Country Code Country Code Argentina AR New Zealand NZ Australia AU Norway NO Austria A T Oman OM Bahrain BH Peru PE Belarus BY P ...

  • Symbol Technologies AP-5131 - page 545

    Technical Specifications A-7 Germany DE T urkey TR Greece GR Ukraine UA Hong Kong HK UAE AE Hungary HU United Kingdom UK Iceland IS USA US India IN Uruguay UY Indonesia ID Vietnam VN Ireland IE V enezuela VE Israel IL Italy IT Japan JP Jordan JO Kazakhanstan KZ Kuwait KW Latvia L V Liechtenstein LI Lithuania L T Luxembourg LU Malaysia MY Malta MT M ...

  • Symbol Technologies AP-5131 - page 546

    AP-5131 Access Poin t Product Referen ce Guide A-8 ...

  • Symbol Technologies AP-5131 - page 547

    AP-5131 Usage Scenarios This appendix provides practica l usage scenarios for many of the AP-5131 ’ s key features. This information should be referenced as a suppleme nt to the information contained within this AP-5131 Product Reference Guide. The following scenarios are described: • Configuring Au tomatic Updates using a DHCP or Linux BootP S ...

  • Symbol Technologies AP-5131 - page 548

    AP-5131 Access Poin t Product Referen ce Guide B-2 The firmware is automatically updated each time firmware versions are found to be different between the AP-5131 and the firmware file locate d on the DHCP/BootP server . The configu ration file is automatically applied only if the filename is different than what resides on the AP-5131. B.1.1 Window ...

  • Symbol Technologies AP-5131 - page 549

    AP-5131 Us age Scenarios B-3 e. Add the following 3 new options under AP513 1 Options class: f. Highlight Scope Options from the tree and select Configure Options . g. Go to the Advanced tab. From under the Vendor Class AP5131 Options, check all three options mentioned in the table above and enter a value for each option. 3. Copy the firmware and c ...

  • Symbol Technologies AP-5131 - page 550

    AP-5131 Access Poin t Product Referen ce Guide B-4 B.1.1.2 Global Options - Using Extended/Standard Options The following are in structions for automatic firmwa re and configuratio n file updates via DHCP us ing extended options or standard options con figured globally . The setup example described in this section includes: • 1 AP-5131 • 1 Micr ...

  • Symbol Technologies AP-5131 - page 551

    AP-5131 Us age Scenarios B-5 d. Under the General tab, check a ll 3 options mention ed within the Exte nded Options table and enter a value for each option. 3. Copy both the firmwa re and con figuration files to the appropriate d irectory on the T F TP Server . By default, auto update is enabled on the AP-5131 (s ince the LAN Port is a DHCP Client, ...

  • Symbol Technologies AP-5131 - page 552

    AP-5131 Access Poin t Product Referen ce Guide B-6 If the DHCP Server is configured for options 186 and 66 (to assign TF TP Server IP addresses) the AP-5131 uses the IP add ress configured for option 186. Similarly , if the DHCP Server is configured for options 187 and 67 (for the firmware file) the AP-5131 use s the file name configured for option ...

  • Symbol Technologies AP-5131 - page 553

    AP-5131 Us age Scenarios B-7 B.1.2.1 BootP Options This section contains instructio ns for the automatic update of the AP-513 1 firmware and configurat ion file using a Boot P Server . The setup example described in this section includes: • 1 AP-5131 • 1 Linux/Unix BOOTP Server • 1 TF TP Server . T o configure BootP options us ing a Linux/Uni ...

  • Symbol Technologies AP-5131 - page 554

    AP-5131 Access Poin t Product Referen ce Guide B-8 Using options sa, bf a nd 136: 3. Copy the firmware and configuratio n files to the appropriate directory on the TF TP Server . By default, auto update is enabled on the AP-5131 (s ince the LAN Port is a DHCP Client, out-of-the-box auto update sup port is on the LAN Port). 4. Restart the AP-5131. 5 ...

  • Symbol Technologies AP-5131 - page 555

    AP-5131 Us age Scenarios B-9 B.1.2.2 BootP Priorities The following flowchart displays the priorities used by the AP-5131 when the BootP server is configured fo r multiple option s: If the BootP Server is configured for options 186 and 66 (to assign TF TP server IP addresses) the AP-5131 uses the IP address configured for option 186. Simila rly , i ...

  • Symbol Technologies AP-5131 - page 556

    AP-5131 Access Poin t Product Referen ce Guide B-10 B.2.1 Configuring a VPN T un nel Between T wo AP-5131s The AP-5131 can con nect to a no n-AP device supporting IP Sec, such as a Cisco VPN device - labeled as "Device #2". For this usage scen ario, the following compo nents are required: • 2 AP-5131s • 1 PC on each s ide of the AP-5 ...

  • Symbol Technologies AP-5131 - page 557

    AP-5131 Us age Scenarios B-11 8. Click Apply to save the changes. 9. Select the Auto (IKE) Key Exchange checkbox. 10. Select the Auto Key Settings button. 11. For the ESP T ype, select ESP with Authentication and use AES 128-bit as the ESP Encryption Algorithm. Click OK . 12. Select the IKE Settings button. NOTE For this example, Auto IKE Key Excha ...

  • Symbol Technologies AP-5131 - page 558

    AP-5131 Access Poin t Product Referen ce Guide B-12 13. Select Pre Shared Key (PSK) from the IKE Authentication Mode drop-do wn menu. 14. Enter a Passphrase . Pa ssphrases must match on both VP N devices. 15. Select AES 128-bit as the IKE Encry ption Algorithm. 16. Select Group 2 as the Diffie -He llman Group. Click OK . This will take you back to ...

  • Symbol Technologies AP-5131 - page 559

    AP-5131 Us age Scenarios B-13 19. On AP-5131 #2/ Device #2, repeat the same procedure. However , replace AP-5131 #2 information with AP-5131 #1 information. 20. Once both tunne ls are established, ping each side o f the tunnel to ensu re connectivity . B.2.2 Configuring a Cisco VPN Device This section includes general in structions for co nfiguring ...

  • Symbol Technologies AP-5131 - page 560

    AP-5131 Access Poin t Product Referen ce Guide B-14 B.2.3 Frequently Asked VPN Questions The following are c ommon questions that arise w hen configuring a VPN tunnel using the AP-5131 . • Question 1: Does the AP- 5131 IPSec tunnel support mu ltiple subnets on the other end of a VPN concentrator? Ye s . The AP-5 131 can access multiple subnets on ...

  • Symbol Technologies AP-5131 - page 561

    AP-5131 Us age Scenarios B-15 • Question 2: Even if a wild card entry of "0.0 .0.0" i s entered in the Remote Subnet field in the VPN configuration page, can the AP access multip le subnets on the other end of a VPN concentrator for the APs LAN/W AN side? No. Using a "0.0.0.0" wildcard is an unsupported configuration. In orde ...

  • Symbol Technologies AP-5131 - page 562

    AP-5131 Access Poin t Product Referen ce Guide B-16 Ye s . • Question 6: Can an IPSec tunnel over a PPPoE co nnection be estab lished - such as a PPPoE enab led DSL link? Ye s . The AP-5 131 supports tunne ling when using a PPPoE u sername and passw ord. • Question 7: Can I setup a n AP-5131 so clie nts can access b oth the WAN normally and onl ...

  • Symbol Technologies AP-5131 - page 563

    AP-5131 Us age Scenarios B-17 • UFQDN - tries to match the user entered remote ID data string to the email address field of the received certificate. • Question 9: I am using a direct cable connection betwee n my two VPN gateway s for testing an d cannot get a tunn el established, ye t it works when I set t hem up across another network or rout ...

  • Symbol Technologies AP-5131 - page 564

    AP-5131 Access Poin t Product Referen ce Guide B-18 • Question 11: I still can't get my tunnel to work after attempting to initiate traffic between the two sub nets. What no w? T ry the following troubleshooting tips: • V erify you can ping each of the remote Gateway IP ad dresses from clients on either side. Failed pings can indicate gene ...

  • Symbol Technologies AP-5131 - page 565

    AP-5131 Us age Scenarios B-19 These three rules should be configured abo ve all other rules (default or u ser defined). When Advanced LAN Access is used, certain inbou nd/outbound rules need to be config ured to control incoming/ou tgoing packet flow for IPSec to work properly (with Advanced LAN Access). These rules should be config ured first befo ...

  • Symbol Technologies AP-5131 - page 566

    AP-5131 Access Poin t Product Referen ce Guide B-20 • The interface para meter has been removed from the Auto Update config uration feature. • The W AN interface now has http/telnet/https/ssh connectivity enabled by default. ...

  • Symbol Technologies AP-5131 - page 567

    Customer Support Symbol T echnologies provides its customers with prompt and accurate customer support. Use the Symbol Support Center as the primary contact fo r any technical problem, questio n or support issu e involving Symbol products. If the Symbol Customer Support specia lists cannot so lve a pro blem, access to all technical disciplines with ...

  • Symbol Technologies AP-5131 - page 568

    AP-5131 Access Poin t Product Referen ce Guide C-2 North American Contacts Inside North America: Symbol T echnologies, Inc. One Symbol Plaza Holtsville, New Y ork 11742-1300 T elephone: 1-631-738-2400 /1-800-SCAN 234 Fax: 1-631-738-5990 Symbol Support Center (for warra nty and service information): telephone: 1-800-653-5350 fax: (631) 738-5410 Emai ...

  • Symbol Technologies AP-5131 - page 569

    Customer Support C-3 W eb Support Sites MySymbolCare http://www .symb ol.com/services/msc /msc.html Symbol Services Homepage http://symbol.com/servic es Symbol Software Updates http://symbol.com/servic es/downloads Symbol Developer Program http:// devzone .symbol.com Additional Information Obtain additional information by contacting Sym bol at: 1-8 ...

  • Symbol Technologies AP-5131 - page 570

    AP-5131 Access Poin t Product Referen ce Guide C-4 ...

  • Symbol Technologies AP-5131 - page 571

    A access options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-23 access point CAM . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-16 encryption . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-11 PSP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-16 RSSI . . . . . . . . ...

  • Symbol Technologies AP-5131 - page 572

    AP-5131 Access Poin t Product Referen ce Guide IN-6 CAM stations . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-16 PSP stations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-16 BSSID . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-8 bullets, use of . . . . . . . . . . . . . . . . . . . . . . ...

  • Symbol Technologies AP-5131 - page 573

    IN-7 I importing certificates . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-8 importing/exp orting conf igurations . . . . . . . . . . . . . . . 4-37 installation, ceiling . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-17 installation, ceiling T-Bar . . . . . . . . . . . . . . . . . . . . . . . 2-15 installation, desk mounting . ...

  • Symbol Technologies AP-5131 - page 574

    AP-5131 Access Poin t Product Referen ce Guide IN-8 R radio options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-6 radio, retry histogram . . . . . . . . . . . . . . . . . . . . . . . . . . 7-22 radio, statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-17 restore default configur at ion . . . . . . . ...

  • Symbol Technologies AP-5131 - page 575

    IN-9 WAN, statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-2 WEP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-11 WEP encryption . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-9, 1-11 Wi-Fi Protected Access (WPA) . . . . . . . . . . . . . . . . . . 1-12 WLAN, ACL . . . . . . . . . ...

  • Symbol Technologies AP-5131 - page 576

    AP-5131 Access Poin t Product Referen ce Guide IN-10 ...

  • Symbol Technologies AP-5131 - page 577

    ...

  • Symbol Technologies AP-5131 - page 578

    Symbol T echnolog ies, Inc. One Symbol Plaza Holtsville, New Y ork 11742-1300 72E-94168-01 Revision A - November 2006 ...

Manufacturer Symbol Technologies Category Network Router

Documents that we receive from a manufacturer of a Symbol Technologies AP-5131 can be divided into several groups. They are, among others:
- Symbol Technologies technical drawings
- AP-5131 manuals
- Symbol Technologies product data sheets
- information booklets
- or energy labels Symbol Technologies AP-5131
All of them are important, but the most important information from the point of view of use of the device are in the user manual Symbol Technologies AP-5131.

A group of documents referred to as user manuals is also divided into more specific types, such as: Installation manuals Symbol Technologies AP-5131, service manual, brief instructions and user manuals Symbol Technologies AP-5131. Depending on your needs, you should look for the document you need. In our website you can view the most popular manual of the product Symbol Technologies AP-5131.

Similar manuals

A complete manual for the device Symbol Technologies AP-5131, how should it look like?
A manual, also referred to as a user manual, or simply "instructions" is a technical document designed to assist in the use Symbol Technologies AP-5131 by users. Manuals are usually written by a technical writer, but in a language understandable to all users of Symbol Technologies AP-5131.

A complete Symbol Technologies manual, should contain several basic components. Some of them are less important, such as: cover / title page or copyright page. However, the remaining part should provide us with information that is important from the point of view of the user.

1. Preface and tips on how to use the manual Symbol Technologies AP-5131 - At the beginning of each manual we should find clues about how to use the guidelines. It should include information about the location of the Contents of the Symbol Technologies AP-5131, FAQ or common problems, i.e. places that are most often searched by users in each manual
2. Contents - index of all tips concerning the Symbol Technologies AP-5131, that we can find in the current document
3. Tips how to use the basic functions of the device Symbol Technologies AP-5131 - which should help us in our first steps of using Symbol Technologies AP-5131
4. Troubleshooting - systematic sequence of activities that will help us diagnose and subsequently solve the most important problems with Symbol Technologies AP-5131
5. FAQ - Frequently Asked Questions
6. Contact detailsInformation about where to look for contact to the manufacturer/service of Symbol Technologies AP-5131 in a specific country, if it was not possible to solve the problem on our own.

Do you have a question concerning Symbol Technologies AP-5131?

Use the form below

If you did not solve your problem by using a manual Symbol Technologies AP-5131, ask a question using the form below. If a user had a similar problem with Symbol Technologies AP-5131 it is likely that he will want to share the way to solve it.

Copy the text from the picture

Captcha
New picture

Comments (0)