de Deutsch [German]

et Eesti [Estonian]
Kesolevaga kinnitab OvisLink Corp. seadme hu WLA-5000APV3 vastavust direktiivi 1999/5/E Magyar phinuetele ja nimetatud direktiivist tulenevatele [Hungarian] teistele asjakohastele stetele. Hereby, OvisLink Corp., declares that this WLA-5000APV3 is in compliance with the essential requirements and other relevant provisions of Directive 1999/5/EC. pl Polski [Polish]

en English

es Espaol [Spanish] el
Por medio de la presente OvisLink Corp. declara pt que el WLA-5000APV3 cumple con los requisitos Portugus esenciales y cualesquiera otras disposiciones [Portuguese] aplicables o exigibles de la Directiva 1999/5/CE. OvisLink Corp. sl Slovensko [Slovenian]
[Greek] WLA-5000APV3 1999/5/.
Par la prsente OvisLink Corp. dclare que OvisLink Corp tmto vyhlasuje, e WLA-5000APV3 fr sk Franais [French] l'appareil WLA-5000APV3 est conforme aux Slovensky [Slovak] spa zkladn poiadavky a vetky prslun exigences essentielles et aux autres dispositions ustanovenia Smernice 1999/5/ES. pertinentes de la directive 1999/5/CE it Italiano [Italian] Con la presente OvisLink Corp. dichiara che questo WLA-5000APV3 conforme ai requisiti essenziali ed alle altre disposizioni pertinenti stabilite dalla direttiva 1999/5/CE. fi Suomi [Finnish] OvisLink Corp vakuuttaa tten ett WLA-5000APV3 tyyppinen laite on direktiivin 1999/5/EY oleellisten vaatimusten ja sit koskevien direktiivin muiden ehtojen mukainen
Ar o OvisLink Corp. deklar, ka WLA-5000APV3 Hr me lsir OvisLink Corp yfir v a lv Latviski [Latvian] atbilst Direktvas 1999/5/EK btiskajm prasbm slenska [Icelandic] WLA-5000APV3 er samrmi vi grunnkrfur og un citiem ar to saisttajiem noteikumiem. arar krfur, sem gerar eru tilskipun 1999/5/EC. sv Svenska [Swedish] Hrmed intygar OvisLink Corp. att denna OvisLink Corp erklrer herved at utstyret no WLA-5000APV3 str I verensstmmelse med Norsk [Norwegian] WLA-5000APV3 er i samsvar med de grunnleggende de vsentliga egenskapskrav och vriga krav og vrige relevante krav i direktiv 1999/5/EF. relevanta bestmmelser som framgr av direktiv 1999/5/EG.
A copy of the full CE report can be obtained from the following address: OvisLink Corp. 5F, No.6 Lane 130, Min-Chuan Rd, Hsin-Tien City, Taipei, Taiwan, R.O.C. This equipment may be used in AT, BE, CY, CZ, DK, EE, FI, FR, DE, GR, HU, IE, IT, LV, LT, LU, MT, NL, PL, PT, SK, SI, ES, SE, GB, IS, LI, NO, CH, BG, RO, TR

Regulatory Information

Federal Communication Commission Interference Statement
This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one of the following measures: - Reorient or relocate the receiving antenna. - Increase the separation between the equipment and receiver. - Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. - Consult the dealer or an experienced radio/TV technician for help. FCC Caution: To assure continued compliance, (example - use only shielded interface cables when connecting to computer or peripheral devices) any changes or modifications not expressly approved by the party responsible for compliance could void the users authority to operate this equipment. This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation.

IMPORTANT NOTE

FCC Radiation Exposure Statement:
This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 20cm between the radiator & your body. This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter.

Copyright Statement

No part of this publication may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, whether electronic, mechanical, photocopying, recording or otherwise without the written consent of OvisLink Corp. Windows 95/98 and Windows 2000 are trademarks of Microsoft Corp. Pentium is trademark of Intel. All copyright reserved.
AirLive WLA-5000AP v3 Firmware 2.x Users Manual 1

Table of Contents

1. Introduction....1 1.1 Overview.....1 1.2 Features.....1 1.3 Wireless Operation Modes...2 1.3.1 Access Point Mode...2 1.3.2 WDS Repeater Mode...3 1.3.3 WDS Bridge Mode....3 1.3.4 Client Infrastructure Mode...4 1.3.5 Client Ad Hoc Mode...4 1.3.6 WISP Router Mode...5 1.4 Set up the device....5 1.4.1 STATIC IP....5 1.4.2 AUTOMATIC IP....5 2. Install the 802.11 A/G Access Point....6 2.1 Whats in the box?...6 2.2 Connect the cables....6 2.3 Configuration steps....6 2.4 Set up a wireless client as a DHCP client...7 2.5 Front panel....8 2.6 Connect more devices through a hub...9 3. Basic Configuration....10 3.1 Setup wizard.... 11 3.1.1 TIME SETTINGS.... 11 3.1.2 DEVICE IP SETTINGS...12 3.1.3 WIRELESS SETTINGS....13 3.1.4 FINISH SETUP WIZARD AND SAVE YOUR SETTINGS.20 3.2 Advanced settings....20 3.2.1 PASSWORD SETTINGS...21 3.2.2 SYSTEM MANAGEMENT...22 3.2.3 SNMP Settings...23 3.2.4 MAC FILTERING SETTINGS...24 3.2.5 OPERATIONAL MODE...25 3.3 Access Point Mode Settings...26 3.3.1 Wireless Settings....27 3.3.2 SSID Settings....28 3.3.3 QoS Settings...29 3.3.4 RADIUS Settings....30 3.4 Repeater Mode Settings....31 3.4.1 AP Node Settings....31 3.4.2 Repeater Node Settings...33 3.4.3 Repeater Node Local service Settings..34 3.4.4 Repeater Advance Wireless Setting...34
AirLive WLA-5000AP v3 Firmware 2.x Users Manual 2
3.4.5 QoS Settings...36 3.4.6 RADIUS Settings....37 3.5 WDS Bridge Mode Settings....38 3.5.1 Wireless Settings....40 3.6 Client Infrastructure Mode Settings...41 3.6.1 Wireless Settings....42 3.7 Client Adhoc Mode Settings....43 3.7.1 Wireless Settings....43 3.8 WISP Router Mode Settings...44 3.8.1 Wireless Settings....45 3.8.2 WISP Router DHCP Server Settings..46 3.8.3 Multiple DMZ...47 3.8.4 Virtual Server Settings...48 3.8.5 Special Applications...49 3.8.6 IP Filtering Settings...50 3.8.7 IP Routing Settings...51 3.9 ACK Timeout Setup....52 3.10 Bandwidth Control....54 3.10.1 Total Bandwidth Control...55 3.10.2 Per user Bandwidth Control...57 3.11 Multiple SSID + VLAN....59 4. Manage the WLA-5000AP v3....60 4.1 Device Status....60 4.2 System Log....61 4.3 Wireless Client Table....61 4.4 Radio Table....62 4.5 Site Survey....63 4.5.1 Signal survey...64 4.6 Firmware Upgrade...65 4.7 Configuration Save and Restore...66 4.8 Factory Default....67 4.9 Reboot System....68 4.10 What if you forgot the password?...68 4.11 Emergency Recovery...68 5. Specifications....70

AirLive WLA-5000AP v3 Firmware 2.x Users Manual 3

1.1 Overview

1. Introduction
For simplicity throughout this document, WLA-5000AP v3 Firmware 2.x will simply be referred to as WLA-5000AP v3.
The WLA-5000AP v3 is a wireless access-point based on IEEE 802.11a/g 5-GHz and 2.4-GHz radio technologies. It contains an 802.11a/g wireless interface and one half/full-duplex 10/100 LAN interface. WLA-5000AP v3, with the new 2.0 firmware, features a total of 6 wireless modes: Access Point, WDS Repeater, WDS Bridge, Client Infrastructure, Client Ad Hoc and WISP Router. Since the 802.11g shares the same 2.4GHz radio band with the 802.11b technology, it can interoperate with existing 802.11b (up to 11Mbps) devices. Therefore, you can reserve your existing investment in 802.11b client cards, and migrate to the high-speed 802.11g standard as your needs grow. To address growing security concerns in a wireless LAN environment, different levels of security can be enabled in WLA-5000AP v3: To disable SSID broadcast to restrict association to only those client stations that are already pre-configured with the correct SSID To enable WEP (Wireless Encryption Protocol) 64, 128, or 152-bit encryption to protect the privacy of your data. Support of Access List Control to allow you to grant/deny access to/from specified wireless stations Provisioning of centralized authentication through RADIUS Server. WPA-PSK (Wi-Fi Protected Access, Pre-Shared Key) for home users to provide authentication, data integrity, and data privacy. WPA (Wi-Fi Protected Access) works with a RADIUS server to provide stronger authentication as well as data integrity and privacy.

1.2 Features

Compliant with 802.11a, 802.11b and 802.11g, Super A and Super G standards with roaming capability. Supports 6 wireless multi-function modes: Access Point, WDS Repeater, WDS Bridge, Client Infrastructure, Client Ad Hoc and WISP Router. Static assignment or DHCP client to set the device IP address. Multiple security measures: SSID hiding, Access Control List, WEP based encryption (64, 128, 152 bits), enhanced Security with 802.1x using a primary and a backup RADIUS Server with/without dynamic WEP keys, WPA-PSK, WPA, and WPA2. Extensive monitoring capability such as event logging, traffic/error statistics monitoring. Support of remote logging. Easy configuration and monitoring through the use of a Web-browser based GUI, SNMP commands from a remote SNMP management station, and UPnP for users to automatically discover the device. Setup Wizard for easy configuration/installation. Configuration file download and restore. Firmware upgradeable. AirLive WLA-5000AP v3 Firmware 2.x Users Manual 1

1.3 Wireless Operation Modes
A group of wireless stations communicating with each other is called a Basic Service Set (BSS) and is identified by a unique SSID. When a WLA-5000AP v3 is used, it can be configured to operate in the following network configurations.

1.3.1 Access Point Mode

When configured in the Access Point mode, the WLA-5000AP v3 allows a group of wireless stations to communicate with each other through it. Such a network is called an Infrastructure BSS.
The WLA-5000AP v3 further provides bridging functions between the wireless network and the wired LAN network. When multiple access points are connected to the same LAN segment, stations can roam from one WLA-5000AP v3 to another without losing their connections, as long as they are using the same SSID. See the diagram below.

1.3.2 WDS Repeater Mode

In Repeater mode, the WLA-5000AP v3 set as a repeater extends the range of wireless LAN. The remote wireless AP/Router must also support WDS.

1.3.3 WDS Bridge Mode

When configured to operate in the Wireless Distribution System (WDS) Mode, the WLA-5000AP v3 provides bridging functions between the LAN behind it and separates LANs behind other APs operating in the WDS mode. The system will support up to eight APs in a WDS configuration. Note that a WLA-5000AP v3 runs in the WDS mode can also support wireless stations simultaneously. See the diagram below:
1.3.4 Client Infrastructure Mode
In Client Infrastructure mode, the WLA-5000AP v3 is connected to a computer and acts like a wireless station, so that the computer can wirelessly access the other networks services, such as Internet.

1.3.5 Client Ad Hoc Mode

In Client Ad Hoc mode, WLA-5000AP v3 is connected to a computer and acts like a wireless station, so that the computer can wirelessly share files and printers with other wireless stations.
AirLive WLA-5000AP v3 Firmware 2.x Users Manual 4

1.3.6 WISP Router Mode

In WISP Router Mode, WLA-5000AP v3 is connected to several computers and acts like a Client mode AP. With IP sharing function, the computers can share the WISP connection via WLA-5000AP v3.

1.4 Set up the device

The WLA-5000AP v3 can be managed remotely by a PC through either the wired or wireless network. To do this, the WLA-5000AP v3 must first be assigned an IP address, which can be done using one of the following two methods.

1.4.1 STATIC IP

The LEDs on the front of the WLA-5000AP v3 reflect the operational status of the unit. The status of the LAN, the WLAN, and Power can be monitored from this display.
WLA-5000AP v3 LED Descriptions Label SOLID OFF FLASH LAN Link is active No Wireless connection XMT/RCV Data WLAN Link is active No LAN connection XMT/RCV Data POWER Power No Power N/A
* Link is active has lower FLASH frequency than XMT/RCV Data.
AirLive WLA-5000AP v3 Firmware 2.x Users Manual 8
2.6 Connect more devices through a hub
The WLA-5000AP v3 provides an RJ45 LAN interface that you can use to connect to a PC or an external hub.
AirLive WLA-5000AP v3 Firmware 2.x Users Manual 9

3. Basic Configuration

This section describes the basic configuration procedure for the WLA-5000AP v3. It describes how to set up the WLA-5000AP v3 for wireless connections, and the configuration of the local LAN environment. All basic configurations may be effected through a standard Web browser such as Microsoft Internet Explorer. From a PC that has been configured as described in Chapter 2, enter the IP address of the WLA-5000AP v3 as the URL in your browser, e.g. http://192.168.1.1.
The IP address of your PC must be in the same IP subnet as the WLA-5000AP v3.
The Home Page of the WLA-5000AP v3 screen will appear. Its main menu displays on the right hand side of the window. The main menu includes the following choices: Setup Wizard, Device Status, Advanced Settings, System Tools, and Help. Log On If you attempt to access a configuration item from the browser menu, an administrator logon screen, shown below, will appear.
AirLive WLA-5000AP v3 Firmware 2.x Users Manual 10
If you are logging on for the first time, you should use the factory default setting airlive. The password is always displayed as a string of wildcards or dots. Click the LOG ON button to start the configuration session.

3.1 Setup wizard

The Setup Wizard will guide you through a series of configuration screens to set up the basic functionality of the device. Every time you modify the settings, remember to click APPLY button to save the changes.

3.1.1 TIME SETTINGS

Setup Wizard>>Time Settings
After logging on, the Time Settings page appears. The device time is automatically set to the local time of the management PC at the first time a connection is made. To modify the devices time, modify the appropriate fields, then click APPLY.
AirLive WLA-5000AP v3 Firmware 2.x Users Manual 11

3.1.2 DEVICE IP SETTINGS

Setup Wizard>> Device IP Settings
The Device IP Settings screen allows you to configure the IP address and subnet of the device. Although you can rely on a DHCP server to assign an IP address to the WLA-5000AP v3 automatically, it is recommended that you configure a static IP address manually in most applications. If you choose to assign the IP address manually, enable the checkbox of Assign static IP to this device and then fill in the following fields IP Address and IP Subnet Mask: Default values are 192.168.1.1 and 255.255.255.0 respectively. It is important to note that there are similar addresses falling in the standard private IP address range and it is an essential security feature of the device. Because of this private IP address, the device can no longer be accessed (seen) from the Internet. Gateway IP Address: Enter the IP address of your default gateway. DNS Server: The Domain Name System (DNS) is a server on the Internet that translates logical names such as www.yahoo.com to IP addresses like 66.218.71.80. In order to do this, a query is made by the requesting device to a DNS server to provide the necessary information. If your system administrator requires you to manually enter the DNS Server addresses, you should enter them here. Click APPLY to go to the next screen. If you choose to use a DHCP Server to acquire an IP address for the WLA-5000AP v3 automatically, enable the checkbox that says, Use the DHCP client protocol to automatically get the IP address for this device. Then click Next to go to the next screen. Again, as a reminder, it is recommended that your WLA-5000AP v3 should be assigned a static IP address in order to make it easy for you to manage the device later on.
AirLive WLA-5000AP v3 Firmware 2.x Users Manual 12

3.1.3 WIRELESS SETTINGS

Setup Wizard>>Wireless Settings
Network ID (SSID): The SSID is the network name used to identify a wireless network. The SSID must be the same for all devices in the wireless network (i.e. in the same BSS). Several access points on a network can have the same SSID. The SSID length is up to 32 characters. The default SSID is airlive. Disable SSID Broadcasting: An access point periodically broadcasts its SSID along with other information, which allows client stations to learn its existence while searching for access points in a wireless network. Check Disable SSID Broadcasting if you do not want the device to broadcast the SSID. Regulatory Domain: Please make sure that your regulatory domain matches your region. The default value is United Kingdom. WLAN Mode: Select 11g/b, 11g only, 11b, 11a, SuperG or SuperA. The wireless module is IEEE 802.11g and 802.11b compliant, and choosing 11g/b allows both 802.11b and 802.11g client stations to get associated. However, choosing 11g allows only 802.11g client stations to get associated and get better overall performance. 802.11a is not compliant with either 802.11b or 802.11g; choosing 11a only allows 802.11a client stations to get associated. Channel: Select a channel from the drop down menu. All devices in a BSS must use the same channel. You can select Auto to let the system pick up the best channel for you. The available channels are different from country to country and for different WLAN mode.

AirLive WLA-5000AP v3 Firmware 2.x Users Manual 21

3.2.2 SYSTEM MANAGEMENT

Advanced Settings>> System Management Clicking the System Management button to configure system related parameters to for the WLA-5000AP v3.
HTTP Port No.: HTTP stands for Hyper Text Transfer Protocol. The default port for the HTTP Web server is 80. Time-out: This setting specifies the duration of idle time (inactivity) before a web browser or telnet management session times out. The default is 10 minutes. UPnP: The Universal Plug and Play (UPnP) feature allows a Windows XP/ME PC to discover this WLA-5000AP v3 and automatically show an icon on the screen. Then a user can double-click the icon to access this device directly (without having to find out its IP address). Syslog: Syslog is an IETF (Internet Engineering Task Force - the Internet standards body)-conformant standard for logging system events (RFC-3164). When the WLA-5000AP v3 encounters an error or warning condition (e.g., a log-in attempt with an invalid password), it will create a log in the system log table. To be able to remotely view such system log events, you need to check the Enable Syslog box and configure the IP address of a Syslog daemon. When doing so, the WLA-5000AP v3 will send logged events over network to the daemon for future reviewing. Syslog server IP address: System event messages generated by the wireless access point will be sent to a Syslog daemon running on a server identified by this IP address.
AirLive WLA-5000AP v3 Firmware 2.x Users Manual 22

3.2.3 SNMP Settings

Advanced Settings>>SNMP Settings This screen allows you to configure SNMP parameters including the system name, the location and contact information.
System Name: A name that you assign to your 802.11a+g Router. It is an alphanumeric string of up to 30 characters. System Location: Enter a system location. System Contact: Contact information for the system administrator responsible for managing your 802.11a+g Router. It is an alphanumeric string of up to 60 characters. Community String For Read: If you intend the router to be managed from a remote SNMP management station, you need to configure a read-only community string for read-only operation. The community string is an alphanumeric string of up to 15 characters. Community String For Write: For read-write operation, you need to configure a write community string. Assign a specific name and IP address for your SNMP trap manager: A trap manager is a remote SNMP management station where special SNMP trap messages are generated (by the router) and sent to in the network. AirLive WLA-5000AP v3 Firmware 2.x Users Manual 23
You can define trap managers in the system. You can add a trap manager by entering a name, an IP address, followed by pressing the ADD button. You can delete a trap manager by selecting the corresponding entry and press the DELETE SELECTED button. To enable a trap manager, check the Enable box in the corresponding entry; to disable it, un-check the Enable box.

3.3.2 SSID Settings

Advanced Settings >> SSID Settings
SSID, a name for an access point (or a network), differentiates one WLAN from another. All devices in a same AirLive WLA-5000AP v3 Firmware 2.x Users Manual 28
specific WLAN must use the same SSID. VLAN: VLAN stands for Virtual Local Area Network. It is a technique allows one or more physical LAN routers or APs to deliver packets as if they were a single physical router or AP. DiffServ Marking: Enable DiffServ Marking to have better traffic prioritization and bandwidth management. Disable SSID Broadcasting: Select this check box to hide the SSID. Security Policy: Select security policy. None, WEP, 802.1x, WPA, WPA-PSK, WPA2, WPA2-PSK, WPA-AUTO or WPA-PSK-AUTO.

3.3.3 QoS Settings

Advanced Settings >> QoS Settings
QoS stands for Quality of Service which attempts to provide different levels of quality to different types of network traffic. WMM stands for Wi-Fi Multimedia. WMM defines quality of service (QoS) in wireless networks. WMM improves audio, video and voice applications transmitted over wireless networks. WMM adds prioritized capabilities to wireless networks and optimizes the performance when multiple concurring applications. To Enable WMM, WMM Parameters of Access Point and Station are indicated. The following information is listed: AC TYPE (AC_BE; Best Effort) (AC_BK; Background)(AC_VI; Video)(AC_VO;Voice)/ ECWMIn/ ECWMax/ AIFS/ TxopLimit (11b)/ TxopLimit (11ag)ACM and Ack-policy.
AirLive WLA-5000AP v3 Firmware 2.x Users Manual 29

3.3.4 RADIUS Settings

Advanced Settings >> RADIUS Setting
RADIUS servers provide centralized authentication services to wireless clients. Two RADIUS servers can be defined: one acts as a primary, and the other acts as a backup. MAC address filtering based authentication requires a MAC address filter table to be created in either the WLA-5000AP v3 (as described in Chapter 3.2.3 MAC Filtering Settings) and/or the RADIUS server. During the authentication phase of a wireless station, the MAC address filter table is searched for a match against the wireless clients MAC address to determine whether the station is to be allowed or denied to access the network. To Enable RADIUS Server: Server IP: The IP address of the RADIUS server. Port Number: The port number that your RADIUS server uses for authentication. The default setting is 1812. RADIUS Type: RADIUS Shared Secret: This is used by your RADIUS server in the Shared Secret field in RADIUS protocol messages. The shared secret configured in the WLA-5000AP v3 must match the shared secret configured in the RADIUS server. The shared secret can contain up to 64 alphanumeric characters. RADIUS Server Reattempt Period: The number of times the WLA-5000AP v3 should attempt to contact the primary server before giving up Enter the information for a second RADIUS server in case that there are 2 on your network which you are using authenticate wireless clients. AirLive WLA-5000AP v3 Firmware 2.x Users Manual 30

AirLive WLA-5000AP v3 Firmware 2.x Users Manual 37
Enter the information for a second RADIUS server in case that there are 2 on your network which you are using authenticate wireless clients.
3.5 WDS Bridge Mode Settings
Advanced Setting >> Operation Mode>> WDS Bridge Select WDS Bridge mode and then press the APPLY button. Additionally, to use the WDS as AP-client mode with SSID, please choose Infrastructure Mode radio button.
AirLive WLA-5000AP v3 Firmware 2.x Users Manual 38
To use MAC registration mode WDS, please select the Pure MAC Mode radial button. When configured as a WDS Bridge Pure MAC mode, you need to further configure the name and MAC address of its peer WDS devices.
AirLive WLA-5000AP v3 Firmware 2.x Users Manual 39

3.5.1 Wireless Settings

Advanced Setting >> Wireless Setting
RTS Threshold: RTS/CTS frames are used to gain control of the medium for transmission. Any unicast (data or control) frames larger than specified RTS threshold must be transmitted following the RTS/CTS handshake exchange mechanism. The RTS threshold should have a value between 256-2347 bytes, with a default of 2347. It is recommended that this value does not deviate from the default too much. Fragmentation: When the size of a unicast frame exceeds the fragmentation threshold, it will be fragmented before the transmission. It should have a value of 256-2346 bytes, with a default of 2346. If you experience a high packet error rate, you should slightly decrease the Fragmentation Threshold. Transmit Power: Transmit power output depends upon the size and RF characteristics because that will determine the number of APs, channels, and need for antennas. Ack TimeOut (11a)/ (11g)/: The "ACK time-out" determines how long the program waits after receiving a packet from a file stream to determine that stream to be a complete file. For details, please go to Section 3.9.
AirLive WLA-5000AP v3 Firmware 2.x Users Manual 40

3.6 Client

Infrastructure Mode Settings
Advanced Setting>>Operation Mode>> Client Infrastructure

AirLive WLA-5000AP v3 Firmware 2.x Users Manual 58
3.11 Multiple SSID + VLAN
You can configure up to 4 SSIDs on your access point and assign different configuration settings to each SSID. All the SSIDs are active at the same time; that is, client devices can associate to the access point using any of the SSIDs. You can also assign VALN on each SSID to separate clients. Note that the VLAN accept only tagged packet only.
Switch with TAG VALN function

SSID 2 VLAN 2

SSID 1 VLAN 1

VLAN 2

SSID 1 VLAN 2
In the above example, laptops in VALN 1 can only communicate with those in VLAN 1 and laptops in VALN 2 can only communicate with those in VLAN 2.
AirLive WLA-5000AP v3 Firmware 2.x Users Manual 59
4. Manage the WLA-5000AP v3
This Chapter covers other management aspects of your WLA-5000AP v3: Check Device Information View System Log Wireless Client Table Radio Table Site Survey Upgrade Firmware Save or Restore Configuration Changes Reset to Factory Default Reboot AP What if you forgot the password?

4.1 Device Status

Device status >> Device Information You can monitor the system status and get general device information from the Device Information screen:
This is at the left-bottom corner of the Device Status window.
AirLive WLA-5000AP v3 Firmware 2.x Users Manual 60

4.2 System Log

Device Status >> System Log The WLA-5000AP v3 maintains a system log that you can use to track events that have occurred in the system. Such event messages can sometimes be helpful in determining the cause of a problem that you may have encountered. You can select System Log on the left side of the Device Status window to view log events recorded in the system. The System Log entries are shown in the main screen along with the log level, the severity level of messages that are being displayed (lower is severer), and the uptime, which is the amount of time since the WLA-5000AP v3 was boot-up.
4.3 Wireless Client Table

Device Status >> Wireless Client Table The wireless client table lists the current wireless clients and its MAC address, state, and traffic statistics. You can check this table by clicking Wireless Client Table at the left side of the Device Status window.
AirLive WLA-5000AP v3 Firmware 2.x Users Manual 61

4.4 Radio Table

Device Status >> Radio Table The Radio Table indicates wireless radio counters data under one of the six operational modes: Access Point; WDS Repeater; WDS Bridge; Client Infrastructure, Client Adhoc and WISP Router. Radio Table will indicate the following information: Radio Name, Mode, Op Channel, Assoc. Tx Pkts, Rx Pkts and Error.
AirLive WLA-5000AP v3 Firmware 2.x Users Manual 62

4.5 Site Survey

Device Status >> Site Survey The Site Survey table shows the wireless Access Point and Ad Hoc stations in your environment detected by the 802.11 A/G Access Point. You can click the REFRESH button to get latest environment information. Site Survey list will indicate the following information: ESSID, MAC Address, Conn Mode, Channel, Turbo, Super, XR, WME, Signal strength (%), Security and Network The Site Survey table is available for only the following operation modes: (1) Access Point (2) WDS Repeater (3) Client Infrastructure (4) Client Adhoc (5) WISP Router
AirLive WLA-5000AP v3 Firmware 2.x Users Manual 63

4.5.1 Signal survey

Device Status >> Site Survey >> Signal Survey This is a unique feature from AirLive. It provides real-time signal strength between two nodes. Better signal strength means better alignment results, which aims to improve link quality. Click the SIGNAL SURVEY button. A pop-up window will continuously display signal strength in real time. The user can readjust the antenna position in order to achieve maximum signal strength.
AirLive WLA-5000AP v3 Firmware 2.x Users Manual 64

4.6 Firmware Upgrade

System tools >> Firmware Upgrade You can upgrade the firmware of your WLA-5000AP v3 (the software that controls your WLA-5000AP v3s operation). Normally, this is done when a new version of firmware offers new features that you want, or solves problems that you have encountered with the current version. System upgrade can be performed through the System Upgrade window as follows: Step 1 Select System Tools, then Firmware Upgrade from the menu.

Step 2

To update the WLA-5000AP v3 firmware, first download the firmware from the distributors web site to your local disk, and then from the above screen enter the path and filename of the firmware file (or click Browse to locate the firmware file). Next, Click the Upgrade button to start.

The new firmware will be loaded to your WLA-5000AP v3. After a message appears telling you that the operation is completed, you need to reset the system to have the new firmware take effect. Do not power off the device while upgrading the firmware. It is recommended that you do not upgrade your WLA-5000AP v3 unless the new firmware has new features you need or if it has a fix to a problem that youve encountered.
AirLive WLA-5000AP v3 Firmware 2.x Users Manual 65
4.7 Configuration Save and Restore
System Tools >> Configuration Save and Restore You can save system configuration settings to a file, and later download it back to the WLA-5000AP v3 by following the steps. Step 1 Select Configuration Save and Restore from the System Tools menu.
Enter the path of the configuration file to save-to/restore-from (or click the Browse button to locate the configuration file). Then click the SAVE TO FILE button to save the current configuration into the specified file, or click the RESTORE FROM FILE button to restore the system configuration from the specified file.
AirLive WLA-5000AP v3 Firmware 2.x Users Manual 66

4.8 Factory Default

System Tools >> Factory Default You can reset the configuration of your WLA-5000AP v3 to the factory default settings. To do it: Step 1 Select Factory Default from the System Tools menu.
Step 2 Click YES to go ahead and restore the configuration to the factory default.
AirLive WLA-5000AP v3 Firmware 2.x Users Manual 67

4.9 Reboot System

System tools>>Reboot System You can reset your WLA-5000AP v3 from the Browser. To reset it: Step 1 Select Reboot System from the System Tools menu.
Step 2 Click YES to reboot the WLA-5000AP v3.
Rebooting the WLA-5000AP v3 would disconnect any active clients and therefore will disrupt any current data traffic.
4.10 What if you forgot the password?
Hardware Reset To Factory Defaults If you forgot the password, the only way to recover is to clear the device configuration and return the unit to its original state as shipped from the factory. You can reset the Access Points Settings to factory defaults by pushing a paperclip in the RESET hole on the back panel. Push and hold for around 2 seconds until the lights at the front of the Access Point are off. Doing so will clear your current configuration.

WLA-5000AP

Access Point Mode

Users Guide

Copyright Statement
No part of this publication may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, whether electronic, mechanical, photocopying, recording or otherwise without the prior writing of the publisher. Windows 95/98 and Windows 2000 are trademarks of Microsoft Corp. Pentium is trademark of Intel. All copyright reserved.

Regulatory Information

Federal Communication Commission Interference Statement
This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one of the following measures: Reorient or relocate the receiving antenna. Increase the separation between the equipment and receiver. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. Consult the dealer or an experienced radio/TV technician for help. FCC Caution: To assure continued compliance, (example - use only shielded interface cables when connecting to computer or peripheral devices) any changes or modifications not expressly approved by the party responsible for compliance could void the users authority to operate this equipment. This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation.
IMPORTANT NOTE: FCC Radiation Exposure Statement: This equipment complies with FCC
radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 20cm between the radiator & your body.
This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter.

Table of Contents

1. INTRODUCING THE WLA-5000AP 802.11 A/G ACCESS POINT 1.1 OVERVIEW 1.2 FEATURES 1.3 NETWORK CONFIGURATION EXAMPLES 1.3.1 AS AN ACCESS POINT 1.3.2 AS A STAND-ALONE REPEATER 1.3.3 AS A POINT TO MULTI-POINTS BRIDGE 1.4 SET UP THE DEVICE 2. INSTALL THE WLA-5000AP 802.11 A/G ACCESS POINT 2.1 WHATS IN THE BOX? 2.2 CONNECT THE CABLES 2.3 CONFIGURATION STEPS 2.4 SET UP A WIRELESS CLIENT AS A DHCP CLIENT 2.5 A LOOK AT THE FRONT PANEL 2.6 CONNECT MORE DEVICES THROUGH A HUB 3. BASIC CONFIGURATION OF THE 802.11A/G ACCESS POINT 3.1 SETUP WIZARD 3.1.1 TIME SETTINGS 3.1.2 DEVICE IP SETTINGS 3.1.3 WIRELESS SETTINGS 3.1.4 FINISH SETUP WIZARD AND SAVE YOUR SETTINGS 3.2 ADVANCED SETTINGS 3.2.1 PASSWORD SETTINGS 3.2.2 SYSTEM MANAGEMENT 3.2.3 MAC FILTERING SETTINGS 3.2.4 WIRELESS SETTINGS 3.2.5 OPERATIONAL MODE 3.2.6 RADIUS SETTINGS 4. MANAGE THE 802.11A/G ACCESS POINT
4.1 DEVICE INFORMATION 4.2 SYSTEM LOG 4.3 WIRELESS CLIENT TABLE 4.4 BRIDGE TABLE 4.5 FIRMWARE UPGRADE 4.6 CONFIGURATION SAVE AND RESTORE 4.7 FACTORY DEFAULT 4.8 REBOOT SYSTEM 4.9 WHAT IF YOU FORGOT THE PASSWORD? SPECIFICATION
1. Introducing the WLA-5000AP 802.11 A/G Access Point

1.1 Overview

The WLA-5000AP 802.11A/G ACCESS POINT is an access-point based on IEEE 802.11a/g based 2.4-GHz radio technology. It contains an 802.11a/g and a full-duplex 10/100 LAN interfaces. The 802.11A/G ACCESS POINT can function as a simple Access Point (AP), and act as the center point of a wireless network supporting a data rate of up to 54 Mbps. It can also connect these wireless devices to wired network through the LAN interface. The 802.11A/G ACCESS POINT can also function in a repeater mode, which is used to extend the physical coverage of the wireless network. Finally, the 802.11A/G ACCESS POINT can also function in a Wireless Distribution System (WDS) mode. Multiple 802.11A/G ACCESS POINTs can be configured to operate in the WDS mode to inter-connect wired LAN segments that are attached to these 802.11A/G ACCESS POINTs. Since the 802.11g shares the same 2.4GHz radio band as the 802.11b technology, it can inter-operate with existing 11Mbps 802.11b devices. Therefore you can protect your existing investment in 802.11b client cards, and migrate to the high-speed 802.11g standard as your needs grow. To address growing security concerns in a wireless LAN environment, different levels of security can be enabled in the 802.11A/G ACCESS POINT: To disable SSID broadcast to restrict association to only those client stations that are already pre-configured with the correct SSID To enable WEP (Wireless Encryption Protocol) 64, 128, or 156-bit encryption to protect the privacy of your data. Support of Access List Control to allow you to grant/deny access to/from specified wireless stations Provisioning of centralized authentication through Radius Server(s). WPA-PSK (Wi-Fi Protected Access, Pre-Shared Key) for home users to provide authentication, data integrity, and data privacy. WPA (Wi-Fi Protected Access) works with a RADIUS server to provide stronger authentication as well as data integrity and privacy.

1.2 Features

Compliant with draft 802.11a, 802.11b and 802.11g standards with roaming capability. Support of the standard access point mode for connection to wireless clients. Support of the repeater mode to extend infrastructure coverage. Support of the WDS mode for interconnecting LAN segments. Built-in DHCP Server to assign IP addresses to wired/wireless clients automatically. Static assignment or DHCP client to set the device IP address. Multiple security measures: SSID hiding, Access Control List, WEP based encryption (64, 128, 152 bits), enhanced Security with 802.1x using a primary and a backup Radius Server with/without dynamic WEP keys, WPA-PSK, and WPA. Extensive monitoring capability such as event logging, traffic/error statistics monitoring. Support of remote logging. Easy configuration and monitoring through the use of a Web-browser based GUI, SNMP commands from a remote SNMP management station, and UPnP for users to automatically discover the device. Setup Wizard for easy configuration/installation. Configuration file download and restore. Firmware upgradeable.
1.3 Network configuration examples
A group of wireless stations communicating with each other is called a Basic Service Set (BSS) and is identified by a unique SSID. When an 802.11A/G ACCESS POINT is used, it can be configured to operate in the following three network configurations

1.3.1 AS AN ACCESS POINT

When configured in the Access Point mode, the 802.11A/G ACCESS POINT allows a group of wireless stations to communicate with each other through it. Such a network is called an Infrastructure BSS.
The 802.11A/G ACCESS POINT further provides bridging functions between the wireless network and the wired LAN network. When multiple access points are connected to the same LAN segment, stations can roam from one 802.11A/G ACCESS POINT to another without losing their connections, as long as they are using the same SSID. See the diagram below.
1.3.2 AS A STAND-ALONE REPEATER
The purpose of a repeater is to expand an existing infrastructure BSS. When configured to operate in the Repeater Mode, the 802.11A/G ACCESS POINTs sit between wireless stations and a root AP whose BSS is being expanded, as shown below:
1.3.3 AS A POINT TO MULTI-POINTS BRIDGE
When configured to operate in the Wireless Distribution System (WDS) Mode, the 802.11A/G ACCESS POINT provides bridging functions between the LAN behind it and separates LANs behind other APs operating in the WDS mode. The system will support up to eight such AP in a WDS configuration. Note that an 802.11A/G ACCESS POINT running in the WDS mode can also support wireless stations simultaneously. See the diagram below:

1.4 Set up the device

The 802.11A/G ACCESS POINT can be managed remotely by a PC through either the wired or wireless network. To do this, the WLA-5000AP must first be assigned an IP address, which can be done using one of the following two methods. 1.4.1 STATIC IP The default IP address of the LAN interface of an WLA-5000AP is a private IP address of 192.168.1.1, and a network mask of 255.255.255.0. This means IP addresses of other devices on the LAN should be in the range of 192.168.1.2 to 192.168.1.254. This IP address can be modified to either a different address in this same subnet or to an address in a different subnet, depending on the existing network settings (if there is any) or users preference. 1.4.2 AUTOMATIC IP The WLA-5000AP can also be configured to obtain an IP address automatically from a DHCP server on the network. This address is called dynamic because it is only dynamically assigned to the device, which may change depends on the IP assignment policy used by the DHCP server on the network. Since the IP address in this case may change from time to time, this method is not recommended - unless the user uses UPnP or other management tools that do not depend on a fixed IP address.

2. Install the WLA-5000AP 802.11 A/G Access Point
This section describes the installation procedure for the WLA-5000AP. It starts with a summary of the content of the package you have purchased, followed by steps of how to power up and connect the WLA-5000AP. Finally, this section explains how to configure a Windows PC to communicate with the WLA-5000AP.

2.1 Whats in the box?

The WLA-5000AP package contains the following items: One WLA-5000AP One 5V AC power adapter with a barrel connector CD of the WLA-5000AP User Guide

2.2 Connect the cables

The Back Panel of the WLA-5000AP appears as follows:
Follow these steps to install your WLA-5000AP: Step 1. Connect a LAN hub to the LAN port on the WLA-5000AP using the supplied LAN cable. Step 2. Connect the power adapter to an electrical outlet and the WLA-5000AP.
You can reset the Access Points Settings to factory defaults by pushing a paperclip in the RESET hole. Push and hold until the lights at the front of the Access Point are off.

2.3 Configuration steps

This section describes configuration required for the WLA-5000AP before it can work properly in your network. First, it is assumed that in your LAN environment, a separate DHCP server will be available for assigning dynamic (and often private) IP addresses to requesting DHCP clients. This means that the WLA-5000AP normally will not need to enable the DHCP server function. Additionally, since you need to perform various configuration changes to the 802.11A/G ACCESS POINT, including the SSID, Channel number, the WEP key, , etc., it is necessary to associate a fixed IP address with the 802.11A/G ACCESS POINT, which is why the 802.11A/G ACCESS POINT will be shipped with a factory default private IP address of 192.168.1.1 (and a network mask of 255.255.255.0). Therefore, during the system installation time, you need to build an isolated environment with the 802.11A/G ACCESS POINT and a PC, and then perform the following steps: Step 1. Step 2. Manually change the IP address of the PC to become 192.168.1.3. Connect the PC to the 802.11A/G ACCESS POINT and change its configuration to a static IP address based on your network environment. For example, if there is a DHCP server that assigns IP addresses from the range 192.168.23.10 - 192.168.23.254 to DHCP client devices, it can reserve 192.168.23.10 for the 802.11A/G ACCESS POINT and then the address pool with the DHCP server becomes 192.168.23.11 192.168.23.254. If there is no DHCP server on your network environment, you just have to make sure that there is no machine in the environment has the same IP address as another machine. Please note that after you change the IP address of the ACCESS POINT, the PC client may not be able to reach the ACCESS POINT. This is because they may no longer belong to the same IP network address space. Step 3. Change the setting of the PC back to obtain IP addresses dynamically. Now you can put the 802.11A/G ACCESS POINT and the PC to your network where the DHCP server is connected. From then on, any wireless client configured to obtain IP addresses dynamically will work with the AP, with each other, and with devices on the wired LAN network.

2.4 Set up a wireless client as a DHCP client
The following will give detailed steps of how to configure a PC or a wireless client to obtain IP addresses automatically. In the case of using a LAN attached PC, the PC must have an Ethernet interface installed properly, be connected to the 802.11A/G ACCESS POINT either directly or through an external LAN switch, and have TCP/IP installed and configured to obtain an IP address automatically from a DHCP server in the network. In the case of using a wireless client, the client must also have an 802.11a/b/g wireless interface installed properly, be physically within the radio range of the 802.11A/G ACCESS POINT, and have TCP/IP installed and configured to obtain an IP address automatically from a DHCP server in the network. Then perform the following steps for either of the cases above. To configure types of workstations other than Windows 95/98/NT/2000, please consult the manufacturers documentation. Step 1. Step 2. Step 3. From the Win95/98/2000 Start Button, select Settings, then Control Panel. The Win95/98/2000 Control Panel displays. Double-click on the Network icon. Check your list of Network Components in the Network window Configuration tab. If TCP/IP has already been installed, go to Step 8. Otherwise, select Add to install it now. In the new Network Component Type window, select Protocol. In the new Select Network Protocol window, select Microsoft in the Manufacturers area. In the Network Protocols area of the same window, select TCP/IP, then click OK. You may need your Win95/98 CD to complete the installation. After TCP/IP installation is complete, go back to the Network window described in Step 4. Select TCP/IP in the list of Network Components. Click Properties, and check the settings in each of the TCP/IP Properties window: Bindings Tab: both Client for Microsoft Networks and File and printer sharing for Microsoft Networks should be selected. Gateway Tab: All fields should be blank. DNS Configuration Tab: Disable DNS should be selected. IP Address Tab: Obtain IP address automatically should be selected. With the 802.11A/G ACCESS POINT powered on, reboot the PC/wireless client. After the PC/wireless client is re-booted, you should be ready to configure the 802.11A/G ACCESS POINT. See Chapter 3.

Step 4. Step 5.

Step 6. Step 7.

Step 8.

The procedure required to set a static IP address is not too much different from the procedure required to set to obtain IP addresses dynamically - except that at the end of step 7, instead of selecting obtain IP addresses dynamically, you should specify the IP address explicitly.
2.5 A look at the front panel
The LEDs on the front of the 802.11A/G ACCESS POINT reflect the operational status of the unit. The status of the LAN, the wireless, and power can be monitored from this display.
802.11A/G ACCESS POINT LED Description
Label Constant Light OFF FLASH Wireless Link is active No Wireless connection Radio off XMT/RCV Data LAN Link is active No LAN connection XMT/RCV Data POWER Power Normal Operation No Power N/A under boot-up
2.6 Connect more devices through a hub
The 802.11A/G ACCESS POINT provides an RJ45 LAN interface that you can use to connect to a PC or an external hub.
3. Basic Configuration of the 802.11A/G ACCESS POINT
This section describes the basic configuration procedure for the 802.11A/G ACCESS POINT. It describes how to set up the 802.11A/G ACCESS POINT for wireless connections, and the configuration of the local LAN environment. All basic configurations may be effected through a standard Web browser such as Microsoft Internet Explorer. From a PC that has been configured as described in Chapter 2, enter the IP address of the 802.11A/G ACCESS POINT as the URL in your browser, e.g. http://192.168.1.1.
The IP address of your PC must be in the same IP subnet as the 802.11A/G ACCESS POINT.
The Home Page of the 802.11A/G ACCESS POINT screen will appear. Its main menu displays on the right hand side of the window. The main menu includes the following choices: Setup Wizard, Device Status, Advanced Settings, System Tools, and Help. Log On If you attempt to access a configuration item from the browser menu, an administrator logon screen, shown below, will appear.
If you are logging on for the first time, you should use the factory default password setting airlive. The password is always displayed as a string of dots. Click the LOG ON button to start the configuration session.

3.1 Setup wizard

The Setup Wizard will guide you through a series of configuration screens to set up the basic functionality of the device. After you finish these screens, press the FINISH button on the last screen to make all your modifications effective. See Chapter 3.1.4.

3.1.1 TIME SETTINGS

After logging on, the time settings page appears. The device time is automatically set to the local time of the management PC at the first time a connection is made. To modify the devices time, modify the appropriate fields, then click NEXT.

3.1.2 DEVICE IP SETTINGS

The Device IP Settings screen allows you to configure the IP address and subnet of the device. Although you can rely on a DHCP server to assign an IP address to the 802.11A/G ACCESS POINT automatically, it is recommended that you configure a static IP address manually in most applications. If you choose to assign the IP address manually, enable the checkbox of Assign static IP to this device and then fill in the following fields IP Address and IP Subnet Mask: Default values are 192.168.1.1 and 255.255.255.0 respectively. It is important to note that there are similar addresses falling in the standard private IP address range and it is an essential security feature of the device. Because of this private IP address, the device can no longer be accessed (seen) from the Internet. Gateway IP Address: Enter the IP address of your default gateway. DNS Server: The Domain Name System (DNS) is a server on the Internet that translates logical names such as www.yahoo.com to IP addresses like 66.218.71.80. In order to do this, a query is made by the requesting device to a DNS server to provide the necessary information. If your system administrator requires you to manually enter the DNS Server addresses, you should enter them here. Click Next to go to the next screen. If you choose to use a DHCP Server to acquire an IP address for the 802.11A/G Access Point automatically, enable the checkbox that says, Use the DHCP client protocol to automatically get the IP address for this device. Then click Next to go to the next screen.
Again, as a reminder, it is recommended that your 802.11A/G ACCESS POINT should be assigned a static IP address in order to make it easy for you to manage the device later on.

3.1.3 WIRELESS SETTINGS

Network ID (SSID): The SSID is the network name used to identify a wireless network. The SSID must be the same for all devices in the wireless network (i.e. in the same BSS). Several access points on a network can have the same SSID. The SSID length is up to 32 characters. The default SSID is airlive. Disable SSID Broadcasting: An access point periodically broadcasts its SSID along with other information, which allows client stations to learn its existence while searching for access points in a wireless network. Check Disable SSID Broadcasting if you do not want the device to broadcast the SSID. Regulatory Domain: Please make sure that your regulatory domain matches your region. The default value is FCC. WLAN Mode: The wireless module is IEEE 802.11g and 802.11b compliant, and choosing 11g/b allows both 802.11b and 802.11g client stations to get associated. However, choosing 11g allows only 802.11g client stations to get associated and get better overall performance. 802.11a is not compliant with either 802.11b or 802.11g; choosing 11a only allows 802.11a client stations to get associated. Channel: Select a channel from the drop down menu. All devices in a BSS must use the same channel. You can select Auto to let the system pick up the best channel for you.

3.1.4 FINISH SETUP WIZARD AND SAVE YOUR SETTINGS
After stepping through the Wizards pages, you can press the FINISH button for your modification to take effect. This also makes your new settings saved into the permanent memory on your system.
Congratulations! You are now ready to use the WLA-5000AP 802.11A/G ACCESS POINT. Note: If you change the devices IP address, as soon as you click on FINISH you will no longer be able to communicate with your 802.11A/G ACCESS POINT. You need to change your IP address and then re-boot your computer in order to resume the communication.

3.2 Advanced settings

The advanced settings tab on the top row of the window allows you to perform modifications that normally you may not need to do for general operations except changing your password from the default factory setting (this is highly recommended for security purposes).

3.2.1 PASSWORD SETTINGS

The default factory password is airlive. To change the password, press the Password Settings button to enter the Password Settings screen, then enter the current password followed by the new password twice. The entered characters will appear as asterisks.

3.2.2 SYSTEM MANAGEMENT

Clicking the System Management button to configure system related parameters to for the 802.11A/G ACCESS POINT.
Management Utility Port Definition: The standard port settings for the HTTP Web server and the Telnet utility may be replaced by entering new port numbers in these fields. Management Session Time-out: This setting specifies the duration of idle time (inactivity) before a web browser or telnet management session times out. The default time-out value is 10 minutes. UPnP: The Universal Plug and Play (UPnP) feature allows a Windows XP/ME PC to discover this 802.11A/G Access Point and automatically show an icon on the screen. Then a user can double-click the icon to access this device directly (without having to find out its IP address). Syslog: Syslog is an IETF (Internet Engineering Task Force - the Internet standards body)-conformant standard for logging system events (RFC-3164). When the 802.11A/G ACCESS POINT encounters an error or warning condition (e.g., a log-in attempt with an invalid password), it will create a log in the system log table. To be able to remotely view such system log events, you need to check the Enable Syslog box and configure the IP address of a Syslog daemon. When doing so, the 802.11A/G ACCESS POINT will send logged events over network to the daemon for future reviewing. Syslog server IP address: The IP address of the PC where the Syslog daemon is running.
3.2.3 MAC FILTERING SETTINGS
The 802.11A/G ACCESS POINT allows you to define a list of MAC addresses that are allowed or denied to access the wireless network. Disable MAC address control list: When selected, no MAC address filtering will be performed. Enable GRANT address control list: When selected, data traffic from only the specified devices in the table will be allowed in the network. Enable DENY address control list: When selected, data traffic from the devices specified in the table will be denied/discarded by the network.

To add a MAC address into the table, enter a Mnemonic Name and the MAC Address, and then click ADD. The table lists all configured MAC Filter entries. To delete entries, check the corresponding select boxes and then press DELETE SELECTED.

3.2.4 WIRELESS SETTINGS

Beacon Interval: The 802.11A/G ACCESS POINT broadcasts beacon frames regularly to announce its existence. The beacon Interval specifies how often beacon frames are transmitted in time unit of milliseconds. The default value is 100, and a valid value should be between 1 and 65,535. RTS Threshold: RTS/CTS frames are used to gain control of the medium for transmission. Any unicast (data or control) frames larger than specified RTS threshold must be transmitted following the RTS/CTS handshake exchange mechanism. The RTS threshold should have a value between 256-2347 bytes, with a default of 2347. It is recommended that this value does not deviate from the default too much. Fragmentation: When the size of a unicast frame exceeds the fragmentation threshold, it will be fragmented before the transmission. It should have a value of 256-2346 bytes, with a default of 2346. If you experience a high packet error rate, you should slightly decrease the Fragmentation Threshold. DTIM Interval: The 802.11A/G ACCESS POINT buffers packets for stations that operate in the power-saving mode. The Delivery Traffic Indication Message (DTIM) informs such power-conserving stations that there are packets waiting to be received by them. The DTIM interval specifies how often the beacon frame should contain DTIMs. It should have a value between 1 to 255, with a default value of 3.

3.2.5 OPERATIONAL MODE

The 802.11A/G ACCESS POINT can be configured to operate in one of the following three modes as mentioned previously in Chapter 1: (1) Access Point (2) Repeater (3) Wireless Distribution System (WDS) When configured as a WDS, you need to further configure the name and MAC address of its peer WDS devices.

3.2.6 RADIUS SETTINGS

Radius servers provide centralized authentication services to wireless clients. Two Radius servers can be defined: one acts as a primary, and the other acts as a backup.
Two user authentication methods can be enabled: one based on MAC address filter, and the other based on 802.1x EAP authentication. MAC address filtering based authentication requires a MAC address filter table to be created in either the 802.11A/G ACCESS POINT (as described in Chapter 3.2.3 MAC Filtering Settings) and/or the Radius server. During the authentication phase of a wireless station, the MAC address filter table is searched for a match against the wireless clients MAC address to determine whether the station is to be allowed or denied to access the network. The Radius server can also be used for 802.1x EAP authentication. IEEE 802.1x is an IEEE standard that is based on a framework that involves stations to be authenticated (called Supplicant), an authentication server (a Radius Server) that provides authentication services, and an authenticator that provides necessary translation and mediating functions between the authentication server and the stations to be authenticated. The 802.11A/G ACCESS POINT acts as an authenticator, and it relays authentication messages between the RADIUS server and client devices being authenticated.

IEEE 802.1x EAP authentication is enabled by selecting the Security Policy as 802.1x or WPA, and this selection is in the Wireless Settings under Setup Wizard. Enable MAC Address Access Control: Check this option to enable MAC address access control through a RADIUS server. Enable Primary/Secondary Server: Check this if you want to enable RADIUS authentication using the primary/secondary Radius Server. If both are selected, the primary server will be tried first. Server IP: The IP address of the RADIUS server. Port Number: The port number that your RADIUS server uses for authentication. The default setting is 1812. Shared Secret: This is used by your RADIUS server in the Shared Secret field in Radius protocol messages. The shared secret configured in the 802.11A/G ACCESS POINT must match the shared secret configured in the RADIUS server. The shared secret can contain up to 64 alphanumeric characters. Retry Times: The number of times the 802.11A/G ACCESS POINT should attempt to contact the primary server before giving up. Reattempt Period: After failed to contact the primary RADIUS server, the 802.11A/G ACCESS POINT will re-attempt to contact the primary server every this number of minutes.
4. Manage the WLA-5000AP 802.11A/G Access Point
This Chapter covers other management aspects of your WLA-5000AP 802.11A/G ACCESS POINT: Check Device Information View System Log Wireless Client Table Bridge Table Upgrade Firmware Save or Restore Configuration Changes Reset to Factory Default Reboot AP What if you forgot the password?

4.1 Device Information

You can monitor the system status and get general device information from the Device Information screen:
This is at the left-bottom corner of the Device Status window.

4.2 System Log

The WLA-5000AP 802.11A/G ACCESS POINT maintains a system log that you can use to track events that have occurred in the system. Such event messages can sometimes be helpful in determining the cause of a problem that you may have encountered. You can select System Log on the left side of the Device Status window to view log events recorded in the system. The System Log entries are shown in the main screen along with the log level, the severity level of messages that are being displayed (lower is severer), and the uptime, which is the amount of time since the 802.11A/G ACCESS POINT was boot-up.

4.3 Wireless Client Table
The wireless client table lists the current wireless clients and its MAC address, state, and traffic statistics. You can check this table by clicking Wireless Client Table at the left side of the Device Status window.

4.4 Bridge Table

The bridge table shows all MAC entries learned from the wired LAN interface, wireless clients, and WDS peers (if running in the WDS mode). You can check this table by clicking Bridge Table at the left side of the Device Status window.

4.5 Firmware Upgrade

You can upgrade the firmware of your 802.11A/G ACCESS POINT (the software that controls your 802.11A/G ACCESS POINTs operation). Normally, this is done when a new version of firmware offers new features that you want, or solves problems that you have encountered with the current version. System upgrade can be performed through the System Upgrade window as follows: Step 1 Select System Tools, then Firmware Upgrade from the menu.
Step 2 To update the 802.11A/G ACCESS POINT firmware, first download the firmware from the distributors web site to your local disk, and then from the above screen enter the path and filename of the firmware file (or click Browse to locate the firmware file). Next, Click the Upgrade button to start. The new firmware will be loaded to your 802.11A/G ACCESS POINT. After a message appears telling you that the operation is completed, you need to reset the system to have the new firmware take effect. Note: It is recommended that you do not upgrade your 802.11A/G ACCESS POINT unless the new firmware has new features you need or if it has a fix to a problem that youve encountered.
4.6 Configuration Save and Restore
You can save system configuration settings to a file, and later download it back to the 802.11A/G ACCESS POINT by following the steps. Step 1 Select Configuration Save and Restore from the System Tools menu.
Step 2 Enter the path of the configuration file to save-to/restore-from (or click the Browse button to locate the configuration file). Then click the SAVE TO FILE button to save the current configuration into the specified file, or click the RESTORE FROM FILE button to restore the system configuration from the specified file.

4.7 Factory Default

You can reset the configuration of your 802.11A/G ACCESS POINT to the factory default settings. To do it: Step 1 Select Factory Default from the System Tools menu.
Step 2 Click YES to go ahead and restore the configuration to the factory default.

4.8 Reboot System

You can reset your 802.11A/G ACCESS POINT from the Browser. To reset it: Step 1 Select Reboot System from the System Tools menu.
Step 2 Click YES to reboot the 802.11A/G ACCESS POINT. Note: Rebooting the 802.11A/G ACCESS POINT disconnects any active clients, and therefore will disrupt any current data traffic.

4.9 What if you forgot the password?
If you forgot the password, the only way to recover is to clear the device configuration and return the unit to its original state as shipped from the factory. You can reset the Access Points Settings to factory defaults by pushing a paperclip in the RESET hole on the back panel. Push and hold for around 2 seconds until the lights at the front of the Access Point are off. Doing so will clear your current configuration.

Specification

Product Name Control Number OS IEEE 802.11a/g SOHO Access Point CA8-4 Linux 2.4.18 IEEE 802.11a/b/g IEEE 802.1d Spanning Tree IEEE 802.1x IEEE 802.3u Ethernet protocol Infrastructure Bridge Mode (WDS) Repeater Mode IEEE 802.11a Standard: 54, 48, 36, 24, 18, 12, 9 & 6 Mbps with auto fallback IEEE 802.11g Draft Standard: 54, 48, 36, 24, 18, 12, 9 & 6 Mbps with auto fallback 11, 5.5, 2 & 1 Mbps with auto fallback External Power Adapter with DC5V/2A Input PCB Dimension: 100 mm x 100 mm Desktop Instillation Wall/Ceiling Mountable 1 x RJx Restore Button 1x External Antenna & 1x embedded antenna 6 x LED (1 x Power, 2 x LAN, 3 x WLAN) WEP 64-bit, 128-bit, 152-bit Encryption MAC Access Control for the wireless interface EAP & 802.1x support Support Primary & secondary RADUIUS server WPA and WPA-PSK Web-Based Management Tool UPnP Upload & download test-based configuration file via HTTP browser Firmware upgrade via HTTP browser SysLog DHCP Client Static IP Address Operation Temperature: 0 ~40 C. Storage Temperature: -20 ~ 65 C Operating Humidity: 10% ~80% (without Condensation) FCC UL TELEC/JTEC SRRC/CCC DGT CE Wi-Fi Class 2.4 GHz 802.11a/g (Planning)

Standard

WLAN Network Architecture Type Wireless Transfer Data Rate for IEEE 802.11a Draft Standard Wireless Transfer Data Rate for IEEE 802.11g Draft Standard Wireless Transfer Data Rate for IEEE 802.11b Physical Specification

Hardware & Antenna

Security

Management

IP Address Assignment
Environmental Specification

EMC Certification

Certificate