#
Nortel Networks e-mobility Access Point

##
Product Reference Guide

Version 2.00-08 - January 2001

©2001 by Nortel Networks

1.0 Introduction

1.1 Access Point (AP)

1.2 Radio Basics

Network Topology

Cellular Coverage

The Root AP and Association Process

IEEE 802.1d Spanning Tree Support

Site Topography

Site Surveys

1.3 Access Point Functional Theory

MAC Layer Bridging

Filtering and Access Control

Auto Fallback to Wireless Mode

DHCP Support

Media Types

Bridging Support

PPP Connection

Direct Sequence Spread Spectrum

MU Association Process

Mobile IP

Supporting CAM and PSP Stations

Data Encryption

HTTP, HTML Web Server Support

Management Options

Programmable SNMP Trap Support

Using SNMP

Increased MIB Support

Using the UI

2.0 Configuring the AP

2.1 Gaining Access to the UI

Using Telnet

Using Direct Serial Connection

Using a Dial-Up Connection

Using a Web Browser

Set Up Network Web Server Help File Access

Accessing Web Browser UI

2.2 Navigating the UI

Entering Admin Mode

Changing the Access to the UI

Configuring for Dial-Up to the UI

Configuring Serial Port

Configuring the Dial-Up System

Hanging Up

Navigating the UI Using a Web Browser

2.3 Access Point Installation

Additional Gateways

2.4 Configuring Security Parameters

System Password Administration

Encryption Key Setup

2.5 Configuring System Parameters

Configuring Mobile Home MD5 Key

2.6 Configuring Radio Parameters

2.7 Wireless Operation Parameters

2.8 Configuring the SNMP Agent

Configure Read Only Community

Configure Read-Write Community

2.9 Configuring PPP

PPP Direct

Establishing Connection

PPP with Modems

Originating AP

Answering AP

Initiating Modem Connection

2.10 Configuring the ACL

Ranges of MUs

Removing Ranges of MUs

Adding Allowed MUs

Removing Allowed MUs

Enable/Disable the ACL

Removing All Allowed MUs

Load ACL from MU List

2.11 Configuring Address Filtering

Adding Disallowed MUs

Removing Disallowed MUs

Clearing Disallowed Filters

2.12 Configuring Type Filtering

Adding Filter Types

Removing Filter Types

Controlling Type Filters

2.13 Clearing MUs from the AP

2.14 Updating AP Firmware

Updating using TFTP

Update ALL Access Points

2.15 Mobile IP Using MD5 Authentication

2.16 Special Functions

2.17 Saving the Configuration

2.18 Resetting the AP

2.19 Flashing AP LEDs

3.0 Monitoring Statistics

3.1 System Properties

3.2 Interface Statistics

3.3 Forwarding Counts

3.4 EthernetStats

3.5 RF (Radio) Statistics

3.6 Wireless AP Statistics

3.7 Miscellaneous Statistics

3.8 Analyzing Channel Use

3.9 Analyzing Retries

3.10 Known APs

3.11 Mobile Units

3.12 Clearing Statistics

4.0 Hardware Installation

4.1 Precautions

4.2 Package Contents

4.3 Requirements

Network Connection

10Base-T UTP

Single Cell

4.4 Placing the AP

4.5 Power Options

4.6 Mounting the AP

4.7 Connecting the Power Adapter

4.8 LED Indicators

WLAP Modes - LED Indicators

4.9 Troubleshooting

4.10 Setting Up MUs

A.0 Specifications

A.1 Physical Characteristics

A.2 Radio Characteristics

A.3 Network Characteristics

B.0 About This Document

Conventions

### 1.0 Introduction

Nortel Networks e-mobility is a spread spectrum wireless local area network that operates in the 2.4 GHz (Gigahertz) to 2.5 GHz unlicensed ISM (Industrial, Scientific, Medical) band. By using multiple e-mobility Access Points (APs) in a building or campus to provide continuous RF coverage areas, a high-capacity wireless network may be built that facilitates reliable mobile access in a manner similar to cellular networks.

The Nortel Networks e-mobility 802.11b Wireless LAN DSSS access point (AP) is an e-mobility direct sequence product. The e-mobility products use direct sequence technology to provide a high-capacity, high-data-rate wireless network.

The e-mobility DS infrastructure products include:

- bridging architecture to provide communication between radio and wired multiple network segments
- a design based on the IEEE 802.11 standard
- an 11 Mbps data rate for fast operation
- seamless roaming for mobile users with devices such as laptops, wireless PCs, scanning terminals and other computers with PCMCIA slots.

#### 1.1 Access Point (AP)

The Access Point (AP) provides a bridge between Ethernet wired LANs and e-mobility wireless networks. It provides connectivity between Ethernet wired networks and radio-equipped mobile units (MUs). MUs include the full line of Nortel Networks e-mobility Wireless Voice Over IP telephones, along with third party bar-code scanners, terminals, and other devices.

The AP provides an 11 Mbps data transfer rate on the radio network. It monitors Ethernet traffic and forwards appropriate Ethernet messages to MUs over the e-mobility network. It also monitors MU radio traffic and forwards MU packets to the Ethernet LAN.

The AP meets the following:

- the regulatory requirements for Europe and many other areas of the world
- FCC part 15 class A with no external shielding
- FCC part 15 class B, ETS 300-339 compliance, including CE mark.

The AP has the following features:

- built-in diagnostics including a power-up self-check
- built-in dual antenna assembly with optional diversity
- wireless MAC interface
- field upgradable Firmware
- 10baseT Ethernet port interface with full 10 Mbps line rate filtering
- power supply IEC connector and a country-specific AC power cable
- PC/AT Serial Port Interface
- support for up to 127 mobile units
- data encryption
- increased MIB support
- SNMP support
- Mobile IP support.
- DHCP support
- HTTP Web server support
- short or long RF preamble (AP default is short preamble)
- wireless AP

When properly configured, an MU communicating with an AP appears on the network as a peer to other network devices. The AP receives data from its wired interfaces and forwards the data to the proper interface.

The AP has connections for the wired network and power supply. The AP attaches to a wall or ceiling depending on installation-site requirements.

#### 1.2 Radio Basics

The e-mobility devices use electromagnetic waves, radio signals, to transmit and receive information without wires. Users communicate with the network by establishing radio links between terminals and APs.

Nortel Networks e-mobility devices use FM (frequency modulation) to transmit digital data from one device to another. Using FM, a radio signal begins with a carrier signal that provides the base or center frequency. The digital data signal is superimposed on the carrier signal (modulation). The radio signal propagates into the air as electromagnetic waves. A receiving antenna in the path of the waves absorbs the waves as electrical signals. The receiving device demodulates the signal by removing the carrier signal. This demodulation results in the original digital data.

Nortel Networks e-mobility devices use the environment (the air and certain objects) as the transmission medium. The e-mobility radio devices transmit in the 2.4 to 2.5-GHz frequency range, a license-free range throughout most of the world. The actual range is country-dependent. The 2.4 GHz unlicensed ISM (Industrial, Scientific, Medical) band, when used for Direct Sequence Spread Spectrum communications, is subdivided into fourteen 22 MHz wide channels, with the center frequency of each channel separated by 5 MHz from the next.

The e-mobility devices, like other Ethernet devices, have unique, hardware-encoded Media Access Control (MAC) or IEEE addresses. MAC addresses determine the device sending or receiving data. A MAC address is a 48-bit number written as six hexadecimal bytes separated by colons. For example:

00:20:D8:05:12:34

#### Network Topology

The variations possible in e-mobility network topologies depend on the following factors:

- the AP function in the network
- the data transfer rate
- the wireless AP (WLAP) interface

NOTE: | A WLAP communicates only with its root AP through the wireless interface as discussed in The Root AP and Association Process.

Select from the following topologies:

- A single AP used without the wired network provides a single-cell wireless network for peer-to-peer MUs.
- A single AP can bridge the Ethernet and radio networks.
- Multiple APs can coexist as separate, individual networks at the same site by using different ESS_IDs. The ESS_ID (Extended Service Set ID) may be thought of as a Wireless LAN Network Identifier. These separate Wireless LANs may be configured to use different channel assignments to avoid RF interference.
- Multiple APs wired together provide a network with better coverage area and performance when using the same ESS_ID.

In WLAP mode, a wireless AP-to-AP connection functions:

- as a bridge to connect two Ethernet networks
- as a repeater to extend coverage area without additional network cabling

NOTE: | When using a wireless AP-to-AP connection, use the optimal antenna configuration for the site. For example, use an omnidirectional antenna when establishing a dedicated wireless bridge or repeater.

- A wireless AP network is possible, depending on the network bandwidth and configuration. Each wireless AP can have connections with up to four other wireless APs.

Using more than two WLAPs to establish a connection slows network performance for all topologies. To increase WLAP performance, disable WNMP Functions and AP-AP State Xchg parameters under the Set System Configuration screen.

To set up an AP for wireless operation automatically, select the /Enabled/ option for the WLAP Mode parameter. To set these values see Configuring Radio Parameters.

NOTE: | The WLAP initialization process length depends on the time specified in the WLAP Forward Delay field. See Wireless AP Setup.

#### Cellular Coverage

The AP establishes an average communication range with MUs called a Basic Service Set (BSS). This BSS can be equated to a cell. When in a particular cell, the MU associates and communicates with the AP of that cell. Each cell has a Basic Service Set Identifier (BSS_ID). In IEEE 802.11, the MAC (Media Access Control) address of the AP represents the BSS_ID.

The e-mobility devices, like other network devices, have unique, hardware-encoded MAC or IEEE addresses. MAC addresses determine the device sending or receiving the data. A MAC address is a 48-bit number written as six hexadecimal bytes separated by colons. For example:

00:20:D8:05:12:34

To locate the MAC address of the AP, see the bottom of the unit.

The MU recognizes the AP it associates with using the BSS_ID. Adding APs to a single LAN establishes more cells to extend the range of the network. Configuring the same ESS_ID on all APs make them part of the same Wireless LAN.

APs with the same Net_ID (ESS_ID) define the coverage area. The MU searches for APs with a matching ESS_ID and associates with an AP to establish communications. This allows MUs within the coverage area to move about or roam. As the MU roams from cell to cell, it switches APs. The switch occurs when the MU analyzes the reception quality at a location and decides the AP to communicate with based on the best signal strength and lowest MU load distribution.

If the MU does not find an AP with a workable signal, it performs a scan to find any AP. As MUs switch APs, the AP updates the association table.

The user can configure the ESS_ID. A valid ESS_ID is an alphanumeric, case-sensitive identifier up to 32 characters. Ensure all nodes within one LAN use the same ESS_ID to communicate on the same LAN. Multiple wireless LANs can coexist in a single environment by assigning different ESS_IDs for APs.

#### The Root AP and Association Process

By default, APs with WLAP Mode enabled and within range of each other automatically associate and configure wireless operation parameters at power up. This association process determines the wireless connection viability and establishes the Root AP and subsequently designated WLAPs.

NOTE: | APs communicating wirelessly together require the same Net_ID (ESS), Encryption mode, Data Rate and Short RF Preamble settings.

The root AP maintains the wireless connection among WLAPs by sending out beacons, sending and receiving configuration BPDU (Bridge Protocol Data Unit) packets between each designated WLAP. The WLAP with the lowest WLAP ID becomes the Root AP. A concatenation of the WLAP Priority value and the MAC address becomes the WLAP ID. Ensure the WLAPs associated with the Root AP use the Root AP channel, DTIM (Delivery Traffic Indication Message) and TIM (Traffic Indication Map) interval. All WLAPs have a default Priority of 0x8000. Nortel Networks recommends using 0x8000 as the Priority of the Root WLAP. Reconfigure other WLAPs to have a higher Priority value (lower priority). The maximum Priority value is 0xFFFF.

In this configuration, the WLAP Priority value is the default 8000 Hex. On concatenating this value to the MAC addresses of the APs, AP A on Ethernet I has the lowest WLAP ID with 800000A0F800181A, making it the Root AP. AP C uses the AP A channel, DTIM and TIM interval.

If AP D on Ethernet II has data for a device on Ethernet I, it requires a bridge or a repeater. In this configuration, AP C functions as a repeater. To ensure transmission to devices on Ethernet I, AP D has to use the AP A hop sequence, DTIM and TIM interval.

To manually designate AP B as the Root AP, assign it a lower WLAP Priority value. Refer to Wireless AP Parameters. Assigning a WLAP Priority value of 7000 Hex to the AP B MAC address 00:A0:F8:11:23:5D causes AP B to become the Root AP by having the lowest WLAP ID 700000A0F811235D.

#### IEEE 802.1d Spanning Tree Support

This protocol creates a loop-free topography with exactly ONE path between every LAN. This is the shortest path from the Root AP to each AP and LAN. If an AP or LAN fails, a new route is calculated and added to the tree. All packet forwarding follows the spanning tree. APs have to choose one AP as the Root AP. The same holds true for WLAPs associating with the root AP or another AP connected to the Ethernet LAN to prevent forming loops.

#### Site Topography

For optimal performance, locate MUs and APs away from transformers, heavy-duty motors, fluorescent lights, microwave ovens, refrigerators and other industrial equipment.

Signal loss can occur when metal, concrete, walls or floors block transmission. Locate APs in open areas or add APs as needed to improve coverage.

#### Site Surveys

A site survey analyzes the installation environment and provides users with recommendations for the equipment and its placement. The optimum placement of 11 Mbps access points differs from 1 or 2 Mbps access points, because the locations and number of access points required are different.

NOTE: | Nortel Networks recommends conducting a new site survey and developing a new coverage area floor plan when switching from 1 or 2 Mbps frequency-hopping access points to 11 Mbps direct-sequence access points.

#### 1.3 Access Point Functional Theory

To improve AP management and performance, users need to understand basic AP functionality and configuration options. The AP includes features for different interface connections and network management.

The AP provides MAC layer bridging between its interfaces. The AP monitors traffic from its interfaces and, based on frame address, forwards the frames to the proper destination. The AP tracks the frames' sources and destinations to provide intelligent bridging as MUs roam or network topologies change. The AP also handles broadcast and multicast message initiations and responds to MU association requests.

#### MAC Layer Bridging

The AP listens to all packets on all interfaces and builds an address database using the unique IEEE 48-bit address (MAC address). An address in the database includes the interface media that the device uses to associate with the AP. The AP uses the database to forward packets from one interface to another. The bridge forwards packets addressed to unknown systems to the Default Interface(either Ethernet or PPP).

NOTE: | The AP internal stack interface handles all messages directed to the AP.

Each AP stores information on destinations and their interfaces to facilitate forwarding. When a user sends an ARP (Address Resolution Protocol) request packet, the AP forwards it over all enabled interfaces (Ethernet, PPP, radio and WLAP) except over the interface the ARP request packet was received. On receiving the ARP response packet, the AP database keeps a record of the destination address along with the receiving interface. With this information, the AP forwards any directed packet to the correct destination. The AP forwards packets for unknown destinations to the Ethernet interface.

NOTE: | ARP request packets received over radio echo back over radio for other MUs to hear.

The AP removes from its database destinations or interfaces not used for a specified time. The AP refreshes its database when it transmits or receives data from these destinations and interfaces.

#### Filtering and Access Control

The AP provides facilities to limit the MUs that associate with it and the data packets that can forward through it. Filters can provide network security or improve performance by eliminating broadcast/multicast packets from the radio network.

The ACL (Access Control List) contains the MAC addresses for MUs allowed to associate with the AP. This provides security by preventing unauthorized access.

The AP uses a disallowed address list of destinations. This feature prevents the AP from communicating with specified destinations. This can include network devices that do not require communication with the AP or its MUs.

Depending on the setting, the AP can keep a list of frame types that it forwards or discards. The Type Filtering option prevents specific frames (indicated by the 16-bit DIX Ethernet Type field) from being processed by the AP. These include certain broadcast frames from devices unimportant to the wireless LAN but which take up bandwidth. Filtering out unnecessary frames can also improve performance.

#### Auto Fallback to Wireless Mode

The AP supports an Auto Fallback to Wireless when the hardware Ethernet connection fails or becomes broken. The Auto Fallback function operates only with an AP in WLAP Mode and connected to the Ethernet network. The AP resets itself and during initialization attempts to associate with any other WLAP in the network.

Refer to Configuring System Parameters and Wireless Operation Parameters.

NOTE: | To make this feature available set the WLAP Mode to Link Required.

#### DHCP Support

The AP can use Dynamic Host Configuration Protocol (DHCP) to obtain a leased IP address and network configuration information from a remote server. DHCP is based on BOOTP protocol. DHCP can coexist or interoperate with BOOTP. An AP sends out a DHCP request searching for a DHCP server to acquire the network configuration and firmware file names. Because BOOTP and DHCP are interoperable, whichever responds first becomes the server allocating the information. The DHCP client automatically sends a DHCP request every XX hours/days to renew the IP address lease as long as the AP is running. (This parameter is programmed at the DHCP server. Example: Windows NT servers typically are set for 3 days.)

The AP can optionally download two files when a boot takes place, the firmware file and an HTML file.Users can program the DHCP or BOOTP server to transfer these two files when a DHCP request is made.

When the AP receives a network configuration change or is not able to renew the IP address lease the AP sends out an SNMP trap.

NOTE: | Mobile IP is not available when DHCP is used. Disable DHCP support when configuring an AP and mobile device for Mobile IP.

#### Media Types

The AP supports bridging between Ethernet, radio and serial media.

The Ethernet interface fully complies with Ethernet Rev. 2 and IEEE 802.3 specifications. The AP supports 10 Mbps half duplex communication over 10BASE-T wired connections. The data transfer rate over radio waves is 11 Mbps. The Ethernet interface is optional for single-cell or PPP-connected networks.

The radio interface conforms to IEEE 802.11 specification. The interface operates at 11 Mbps using direct sequence radio technology. The AP supports multiple-cell operations with fast roaming between cells. With the direct sequence system, each cell operates independently. Each cell provides an 11 Mbps bandwidth. Adding cells to the network provides increased coverage area and total system capacity. The AP supports MUs operating in Power Save Polling (PSP) mode or Continuously Aware Mode (CAM) without user intervention.

The DB 9-pin RS-232 serial port provides a UI (User Interface) or a (Point to Point Protocol) connection. The UI provides basic management tools for the AP. The PPP provides a link between APs using a serial connection. The serial link supports short haul (direct-serial)or long haul (telephone-line) connections. The AP is a DTE (Data Terminal Equipment) device with male pin connectors for the RS-232 port. Connecting the AP to a PC requires a null modem cable and connecting the AP to a modem requires a straight-through cable.

#### Bridging Support

The AP PPP (Point to Point Protocol) interface, accessible from the serial port at the rear of the AP, provides two types of bridging operations:

- Data-link bridging between two APs. A network using a data-link bridge provides radio coverage by using a remote AP in a location that is geographically distant from the AP connected to the Ethernet network. The remote AP cannot provide an Ethernet connection to other APs. MUs associating with the remote AP transmit and receive from the Ethernet network through the PPP link.
- Internet Protocol bridging between an AP and a computer. To establish an Internet Protocol bridge with an AP, ensure the computer includes the appropriate Telnet software with PPP and TCP/IP protocols. By using Telnet, a computer at a remote location can connect to any AP on an Ethernet network, as long as data transfers through IP packets.

A PPP link provides the option of using a direct serial link or modem to extend wired Ethernet topologies.

Once in PPP mode, the AP automatically attempts to communicate with the other device using the Data-Link Bridging (DLB) protocol. An AP using DLB communicates on the MAC level, and receives and transmits Ethernet frames.

If the other device does not support DLB, the AP attempts to communicate using Internet Protocol Control Protocol (IPCP). An AP using IPCP communicates on the IP level, and receives and transmits IP (Internet Protocol) packets.

The PPP implementation in the AP uses the Link Control Protocol (LCP) and Network Control Protocol (NCP) as described in:

- RFC 1171: the Point-to-Point Protocol, July 1990.
- RFC 1220: PPP Extensions for Bridging, April 1991.
- RFC 1332: The PPP Internet Protocol Control Protocol, May 1992.
- RFC 1661: The Point-to-Point Protocol, July 1994.

RFCs are Requests For Comments used in Internet Communities.

The AP database dynamically tracks MUs and APs on the PPP interface. Packets forward to the PPP link after the AP determines their destination.

NOTE: | The PPP implementation in the AP uses the NCP as described in RFC 1220: PPP Extensions for Bridging to encapsulate packets at the Ethernet level. The PPP provides IP bridging control as defined by RFC 1172 and MAC-level bridging. It provides support for PPP negotiations conforming to RFC 1661. Users cannot plug a non-AP node directly into the AP serial port, only AP-to-AP PPP links.

Refer to RFC 1171: The Point to Point Protocol and RFC 1220: PPP Extensions for Bridging for information.

RFCs (Request For Comments) can be found on the Web at: http://www.cis.ohio-state.edu/hypertext/information/rfc.html or http://www.sri.ucl.ac.be/SRI/normes/rfc.html.

#### PPP Connection

Connecting two APs with a direct serial link requires a null-modem serial cable. |
Connecting two APs with modem devices requires straight-through cables between the APs and modems. Using modems requires using a telephone line for as long as the link remains active. |
When using a modem connection, one AP represents the originating AP and the other represents the answering AP. When using a PPP link, do not use the serial port to access the UI. Access to the UI requires establishing a Telnet session with the AP.

#### Direct Sequence Spread Spectrum

Spread spectrum (broadband) uses an algorithm, applied against a narrowband signal, to spread the transmission over a wider segment of the radio frequency band or spectrum. Direct sequence is a spread spectrum technique where the narrowband signal is combined with a "chipping sequence" to spread the radio signal sequentially across the entire frequency range specified by the channel of operation. Nortel Networks e-mobility 802.11b High Rate (HR) access points use Direct Sequence Spread Spectrum (DSSS) for radio communication.

Direct sequence systems communicate by continuously transmitting a redundant pattern of bits called a chipping sequence. Each bit of transmitted data is mapped into chips by the access point and rearranged into a pseudorandom spreading code to form the chipping sequence. The chipping sequence is combined with a transmitted data stream to produce the AP output signal.

NOTE: | In the United States, there are 11 individual DSSS channel assignments available, channels 1 - 11. When APs are placed in adjacent or overlapping cells, nonoverlapping channels should be selected to minimize radio interference between APs. In the United States, the three nonoverlapping direct sequence channels are 1, 6 and 11.

Mobile Units receiving a direct sequence transmission use the spreading code to map the chips within the chipping sequence back into bits to recreate the original data transmitted by the access point. Intercepting and decoding a direct sequence transmission requires a predefined algorithm to associate the spreading code used by the transmitting access point to the receiving MU. This algorithm is established when the access point and MU are configured. The bit redundancy within the chipping sequence enables the receiving MU to recreate the original data pattern, even if bits in the chipping sequence are corrupted by interference.

The ratio of chips per bit is called the spreading ratio. A high spreading ratio increases the resistance of the signal to interference. A low spreading ratio increases the bandwidth available to the user. The access point uses two chips per bit among three channels within the 2.4 GHz band in a pattern avoiding any 1 or 2 Mbps systems operating in the same area. The access point is capable of an 11 Mbps data transmission rate, but the coverage area is less than a 1 or 2 Mbps access point since coverage area decreases as bandwidth increases.

#### MU Association Process

APs recognize MUs as they associate with the AP. The AP keeps a list of the MUs it services. MUs associate with an AP based on the the following conditions:

- the signal strength between the AP and MU
- MUs currently associated with the AP
- the MUs encryption and authentication capabilities and the type enabled
- the MU supported data rate (1 Mbps, 2 Mbps, 5.5 Mbps or 11 Mbps)

MUs perform preemptive roaming by intermittently scanning for APs and associating with the best available AP. Before roaming and associating with APs, MUs perform full or partial scans to collect AP statistics and determine the direct sequence channel used by the AP.

Scanning is a periodic process where the MU sends out probe messages on all frequencies defined by the country code. The statistics enable an MU to reassociate by synchronizing its frequency to the AP. The MU continues communicating with that AP until it needs to switch cells or roam.

MUs perform full scans at start-up. In a full scan, an MU uses a sequential set of channels as the scan range. For each channel in range, the MU tests for CCA (Clear Channel Assessment). When a transmission-free channel becomes available, the MU broadcasts a probe with the ESS_ID and the broadcast BSS_ID. An AP-directed probe response generates an MU ACK (Mobile Unit Acknowledgment) and the addition of the AP to the AP table with a proximity classification. An unsuccessful AP packet transmission generates another MU probe on the same channel. If the MU fails to receive a response within the time limit, it repeats the probe on the next channel in the sequence. This process continues through all channels in the range.

MUs perform partial scans at programmed intervals, when missing expected beacons or after excessive transmission retries. In a partial scan, the MU scans APs classified as proximate on the AP table. For each channel, the MU tests for CCA. The MU broadcasts a probe with the ESS_ID and broadcast BSS_ID when the channel is transmission-free. It sends an ACK to a directed probe response from the AP, and updates the AP table. An unsuccessful AP packet transmission causes the MU to broadcast another probe on the same channel. The MU classifies an AP as out-of-range in the AP table if it fails to receive a probe response within the time limits. This process continues through all APs classified as proximate on the AP table.

An MU can roam within a coverage area by switching APs. Roaming occurs when:

- an unassociated MU attempts to associate or reassociate with an available AP
- the supported rate changes and the MU finds a better transmit rate with another AP
- the RSSI (received signal strength indicator) of a potential AP exceeds the current AP
- the ratio of good-transmitted packets to attempted-transmitted packets falls below a threshold
- when the MU detects an imbalance in the number of MUs associated with available APs and roams to a less loaded AP

An MU selects the best available AP and adjusts itself to the AP direct sequence channel to begin association. Once associated, the AP begins forwarding any frames it receives addressed to the MU. Each frame contains fields for the current direct sequence channel. The MU uses these fields to resynchronize to the AP.

#### Mobile IP

The Internet Protocol identifies a station's point of attachment to a network through its IP address. The AP forwards packets according to the location information contained in the packet header. If the MU roams across routers to another subnet, the following situations occur:

- The MU changes its point of attachment without changing its IP address causing forthcoming packets to become undeliverable.
- The MU changes its IP address when it moves to a new network causing it to lose connection to applications that have identified the MU by its IP address.

Mobile IP enables an MU to communicate with other hosts using only its home IP address after changing its point-of-attachment to the Internet/intranet.

Mobile IP is like giving an individual a local post office a forwarding address when leaving home for an extended period. When mail arrives for the individual's home address it is forwarded by the local post office to the individual's current care-of-address. This way only the local post office need be notified of the individual's current address instead of each correspondent. While the example given is the general concept of Mobile IP operation and functionality it does not represent the implementation of Mobile IP used.

A tunnel is the path taken by the original packet encapsulated within the payload portion of a second packet to some destination on the network.

A home agent is an AP acting as a router on the MU's home network. The home agent intercepts packets sent to the MU's home address and tunnels the message to the MU at its current location. This happens as long as the MU keeps its home agent informed of its current location on some foreign link.

A foreign agent is an AP acting as a router at the MU's location on a foreign link. The foreign agent de-tunnels packets for the MU sent by the MU's home agent. The foreign agent also serves as the default router for packets sent out by the MU connected on the same foreign link.

A care-of-address is the IP address used by the MU visiting a foreign link. This address changes each time the MU moves to another foreign link. It can be viewed as an exit point of a tunnel between the MU's home agent and the MU itself.

The Mobile IP (roaming across routers) feature enables an MU on the Internet to move from one subnet to another while keeping its IP address unchanged.

NOTE: | To configure this feature, refer to Configuring System Parameters.

The scanning and association process continues for active MUs. This allows the MUs to find new APs and discard out-of-range or deactivated APs. By always testing the airwaves, the MUs can choose the best network connection available.

The following diagram illustrates Mobile IP (roaming across routers):

NOTE: | Set the MU for Mobile IP as specified in the MU's user documentation.

Security has become a concern to mobile users. Enabling the Mobile-Home MD5 key option in System Configuration generates a 16-byte checksum authenticator using an MD5 algorithm. The MU and AP share the checksum, called a key, to authenticate transmitted messages between them. The key is shared between the AP and MU while the MU is visiting a foreign subnet. The MU and AP have to use the same key. If not, the AP refuses to become the home agent for the MU. The maximum key length is 13 characters. The AP allows all printable characters.

#### Supporting CAM and PSP Stations

CAM (Continuously Aware Mode) leave their radios on continuously and hear every beacon and message transmitted. These systems operate without any adjustments by the AP. A beacon is a uniframe system packet broadcasted by the AP to keep the network synchronized. A beacon includes the Net_ID (ESS_ID), the AP address, the Broadcast destination addresses, a time stamp, a DTIM (Delivery Traffic Indication Message), and the TIM (Traffic Indication Map).

PSP (Power Save Polling) stations power off their radios for long periods. When an e-mobility MU in PSP mode associates with an AP, it notifies the AP of its activity status. The e-mobility access point responds by buffering packets received for the MU. The access point uses a PSP performance index from 1 to 5, where 1 provides the quickest response time and 5 provides the most efficient power consumption. Performance index 0 is reserved for CAM. Using this index, the access point selects an appropriate tuning value for the power save algorithm. The access point firmware switches to CAM when frames are sent or directed frames are received.

The performance index is used to select how long the adapter stays in CAM after transmit or receive activity and to configure the PSP interval when there is no activity. The awake interval in PSP performance index 1 is long enough to allow for round-trip packet response times. The packet response time in PSP performance index 5 is only 25 msec. The adapter goes back to sleep and requires another wake up period to receive data.

When the MU wakes up and sees its bit set in the TIM, it issues a poll request to the AP for packets stored for it. The AP sends them to the MU and the MU goes back to sleep. A DTIM field is a countdown field informing MUs of the next window for listening to broadcast and multicast messages. When the AP has buffered broadcast or multicast messages for associated MUs, it sends the next DTIM with a DTIM Interval value. To prevent a PSP-mode MU from sleeping through a DTIM notification, select a PSP mode value less than or equal to the DTIM value. PSP-mode MUs hear the beacons and awaken to receive the broadcast and multicast messages.

A TIM is a compressed virtual bitmap identifying the AP associated MUs in PSP mode that have buffered directed messages. MUs issue a poll request when APs issue a TIM. A beacon with the broadcast-indicator bit set causes the MU to note DTIM Count field value. The value informs the MU of the beacons remaining before next DTIM. This ensures the MU turns on the receiver for the DTIM and the following BC/MC packet transmissions.

#### Data Encryption

Any wireless LAN device, including Nortel Networks e-mobility devices operating on a wireless network, face possible information theft which occurs when an unauthorized user eavesdrops on someone else to glean information. The absence of a physical connection makes wireless links particularly vulnerable to this form of theft.

Encryption becomes the most efficient method in preventing information theft and improving data security. Encryption entails scrambling and coding of information, typically with mathematical formulas called algorithms, before information is transmitted over any a network. An encryption algorithm is a set of instructions or formula for scrambling the data. A key is the specific code used by the algorithm to encrypt or decrypt the data. Decryption is decoding and unscrambling the received encrypted data.

The same device, host computer or front-end processor, usually performs both encryption and decryption. The data transmit or receive direction determines whether the encryption or decryption function is performed. The device takes plain text, encrypts or scrambles it typically by mathematically combining the key with the plain text as instucted by the algorithm; it then transmits the data over the network. At the receiving end another device takes the encrypted text and decrypts, unscrambles, it revealing the original message. An authorized user can know the algorithm, but cannot interpret the encrypted data without the appropriate key. Only the sender and receiver of the transmitted data know the key.

Nortel Networks uses the Wired Equivalent Privacy (WEP) algorithm, specified in IEEE 802.11 section 8, for encryption and decryption. WEP uses the same secret key for both encrypting and decrypting plain text. Typically an external key management service distributes the secret key. Users should change the key often for added security. IEEE 802.11 defines two types of authentication, Open System and Shared Key. Open system authentication is a null authentication algorithm. Shared key authentication is an algorithm where both the AP and the MU share an authentication key to perform a checksum on the original message. Both 40 bit and 128 bit shared key encryption algorithms are supported in the Nortel Networks e-mobility AP.

By default, IEEE 802.11 devices operate in an open system network where any wireless device can associate with an AP without authorization. A wireless device with a valid shared key is allowed to associate with the AP. Authentication management messages (packets) are unicast, meaning authentication messages transmit from one AP to one MU only, not broadcast or multicast.

#### HTTP, HTML Web Server Support

The Nortel Networks e-mobility access point includes a web server to allow the user to access the AP with a standard Java-compatible browser. This function provides the user with a Web-based format for configuration and firmware download.

Using either Netscape Navigator 4.5 or greater, or Microsoft Internet Explorer 4.0 or greater, point your browser at either the IP address of the AP or, if the AP is defined in DNS, at the DNS name of the AP. A window opens that allows the user to access configuration, setup, and performance information for the AP as well as additional diagnostic information.

#### Management Options

Managing e-mobility includes viewing network statistics and setting configuration options. Statistics track network activity of associated MUs and data transfers on the AP interfaces. Configuration involves setting system operating parameters.

The AP requires one of the following to perform a custom installation or maintain the e-mobility network:

- SNMP (Simple Network Management Protocol)
- wired LAN workstation with a Telnet client
- terminal or PC with RS-232 connection and ANSI emulation.

Make configuration changes to APs individually. Each AP requires an individual IP address.

#### Programmable SNMP Trap Support

The SNMP protocol defines the method for obtaining information about networks operating characteristics and changing router and gateway parameters. The SNMP protocol consists of four elements:

- Management Stations containing an application suite used for network management, data analysis, fault management and so on.
- Management Agent performing management operations on a configured device for the management station.
- Management Information Base (MIB) defining the structure and contents of a database for the information exchanged between a management station and a management agent.
- Network Management Protocol (SNMP) is the protocol linking the management agent to the management station and specifying the rules for communciation between the two devices.

Nodes can perform as hosts, routers, bridges or other devices that can communicate status information. An SNMP Agent is a node running the SNMP management process to systematically monitor and manage the network. The management station manages the network by running the special management application suite that analyzes network operation.

An SNMP trap is an unsolicited alert to all configured management station indicating some significant event has occurred on the network. The management station queries for details of each specific event, including what, when, where the event took place and the current status of the node or network. The format or structure is defined in the SNMP protocol. The MIB defines and monitors the variables.

#### Using SNMP

The AP includes SNMP agent versions accessible through an SNMP manager application such as Nortel Networks' Optivity NMS, HP Open View or other third-party SNMP MIB browser. The SNMP agent supports SNMP version 1 and a subset of version 2, MIB II, the 802.11 MIB and one proprietary MIB. The SNMP agent supports read-write, read-only or disabled modes. The AP supports traps that return to the SNMP manager when certain events occur. The Wireless LAN Installation and Utilities disk packaged with MUs contains the MIB.

#### Increased MIB Support

The MIB (Management Information Base) defines what the management station needs to understand and which objects the station manages.

#### Using the UI

The UI (User Interface) is a maintenance tool integrated into the AP. It provides statistical displays, AP configuration options, and firmware upgrades. Access to the UI requires one of the following:

Telnet Client | Access to the AP built-in Telnet server from any AP interface includes remote Ethernet connections. Refer to Using Telnet.
Direct Serial Connection | The AP acts as a DTE device to connect directly to a DTE device with a null-modem serial cable. The direct serial access method requires a communication program with ANSI emulation. Refer to Using Direct Serial Connection.
Dial Up Access | The dial-up access method requires a communication program with ANSI emulation on the remote terminal or PC. The terminal or PC dials to an AP with a modem connection. The AP supports connection to a Hayes-compatible 28,800-baud or faster modem. Refer to Using a Dial-Up Connection.
SNMP Using a MIB Browser | Access to the AP SNMP function using a MIB Browser. Typically a Network Manager uses this feature. However, Nortel Networks does not recommend AP access using this interface method. Refer to the MIB Browser documentation for usage.
Web Browser | Access to the AP built-in Web server from any AP interface including Ethernet connections. Refer to Using a Web Browser.

### 2.0 Configuring the AP

Software configuration requires setting up a connection to the AP and gaining access to the UI (User Interface). The methods of accessing the UI include serial, Telnet, Web, and SNMP. Most of these access methods first require the configuration of an IP address. In order to access the AP to change the IP address, use the serial port and a terminal emulation program.

Connect to the DB9 serial port using a null modem cable. Set your terminal emulation program for 19,200 bps, 8 bits, No parity, 1 Stop Bit, and No flow control. Select the AP Installation screen, and enter the appropriate IP configuration parameters for your network.

#### 2.1 Gaining Access to the UI

Setting up access to the UI depends on the connection used. Select the setup that best fits the network environment.

#### Using Telnet

Using a Telnet session to gain access to the UI requires a remote station to have a TCP/IP stack. The remote station can be on the wired or wireless LAN.

To access the AP from the workstation:

1. From the DOS prompt Telnet to the AP using its IP address:
   Telnet xxx.xxx.xxx.xxx
2. At the prompt enter the password:
   Nortel

   NOTE: | The password is case-sensitive.

3. Press the ESC key. The AP displays the Main Menu.

- If the session is idle (e.g. no input) for the configured time, the session terminates.
- To manually terminate the session, press CTRL+D.

Set the System Password in the Set System Configuration screen.

#### Using a Direct Serial Connection

The AP serial port is a DB-9 9-pin male connector. The serial port allows PPP connections to another AP, or a UI connection to a configuration PC. Connecting the AP directly to a PC with a DB 9-pin serial port requires a null modem cable with the following configuration: |

The factory-configured AP accepts a direct serial connection to the UI. In Serial Port Configuration configure the AP for the following:

- Set Port Use to UI.
- Set Modem Connected to No.

NOTE: | Configure these settings in the Set Serial Port Configuration screen within the UI. Refer to Configuring for Dial-Up to the UI.

Assuming the UI and serial port are enabled on the AP:

1. Attach a null modem serial cable from the AP to the terminal or PC serial port.
2. From the terminal, start the communication program such as HyperTerminal for windows.
3. Select the correct COM port along with the following parameters:

   emulation | ANSI
   baud rate | 19200 bps
   data bits | 8
   stop bits | 1
   parity | none
   flow control | none

   There is no password requirement.
4. Press ESC to refresh the display. The AP displays the Main Menu.
5. Exit the communication program to end the session.

#### Using a Dial-Up Connection

The AP supports a dial-up connection to the UI. This requires accessing the UI from Telnet or a direct serial connection and changing the serial port configuration. Configure the AP for the following:

- Set serial port for UI.
- Disable any modem connection.
- Set AP to answer mode.

Configure these settings in the Set Serial Port Configuration within the UI. Refer to Configuring for Dial-Up to the UI.

#### Using a Web Browser

A Web Browser is a program used to view Web documents or pages. The browser retrieves the requested page, interprets its text and displays the page properly formatted on a computer screen.

Using a Web browser to gain access to the UI requires the workstation to have a TCP/IP stack and access to a web browser. The remote station can be on the wired or wireless LAN.

NOTE: | To use this feature the Web browser must support JavaScript as do Internet Explorer 4.0 and higher or Netscape.

#### Set Up Network Web Server Help File Access

A network Web server is required to access the Help file from the e-mobility Access Point Configuration Management System web pages. This procedure applies to the Microsoft Internet Information Server. The network Web server can be different; if so, some of the procedures will differ.

NOTE: | This procedure is for Network or System Administration personnel only.

To create the Help file on a network Web server:

1. Create a directory on the network Web server for the AP Web Site Help Files to reside. Often this is a subdirectory to C:\InetPub\wwwRoot.
2. Copy the *.gif and *.htm files to this directory/folder. The files are maintained in the x:\firmware\AP\AP Web Site\Help File directory where x is the letter assigned to the computer CDROM drive.

NOTE: | This installation example is for Windows NT 4.0.

3. From the windows Task Bar select Start
4. From the drop down menu select Programs.
5. From this menu select Microsoft Internet Server(common).
6. From this menu select Internet Service Manager to launch the Internet Information Server Service Manager.
   Click on the Web service.

NOTE: | Ensure the server WWW service is running.

7. Select Properties.
8. Select Service Properties to display the WWW service properties for the server.
9. The WWW Service Properties window opens.
10. Select the Directories Tab.
11. Select the Add button to open the Directories window.
12. Type the Directory/Folder path created in step one.
13. Select the Virtual Directory button.
14. Type a folder alias such as WebHelp and select OK.
15. Select the Enable Default Document checkbox.
16. Type NNXAPHelp.htm as the default document and select Apply.
17. Select OK to exit the window.
18. Test the accessibility to the Help file using a Web browser with a URL similar to: http://xxx.xxx.xxx.xxx/WebHelp where xxx.xxx.xxx.xxx is the IP address of the server.

#### Accessing Web Browser UI

Using a Web Browser to gain access to the UI requires the workstation to have a TCP/IP stack and access to a Web browser. The remote station can be on the wired or wireless LAN.

To ensure the Web Server option is enabled for the AP:

1. Access the UI using a Serial or Telnet connection.
2. Select the System Configuration screen.
3. Verify the Web Server option on the System Configuration screen is enabled. If not, use the TAB key to select the Web Server option. Use the LEFT/RIGHT ARROW key to toggle the option to Enable.
4. Save the configuration by selecting Save-[F1].

Reset the AP for changes to take effect.

1. Select the Special Functions screen.
2. Select Reset AP.
3. Select Yes at the confirmation prompt.

To enable Help file access, change the Help URL parameter:

1. Select the Special Functions screen.
2. Use the TAB or UP/DOWN ARROW key to select the Alter Filename(s)/HELP URL/TFTP Server/DHCP.
3. Press ENTER.
4. Use the TAB or DOWN ARROW key to select the .HELP URL field.
5. Type the IP address/URL of the Web server and the folder alias for the Help file location: http://xxx.xxx.xxx.xxx/WebHelp where xxx.xxx.xxx.xxx is the IP address of the server.
6. Press ENTER.
7. Use the TAB or DOWN ARROW key to select OK-[CR] and press ENTER.
8. Save the new setting by selecting the Save Configuration option.
9. At the confirmation prompt, select Yes.
10. The Main Menu displays.
11. Reset the AP for changes to take effect. Select the Special Functions screen.
12. Select Reset AP.
13. At the confirmation prompt, select Yes.

To access the AP UI using a Web Browser from a workstation:

1. From the NCPA Properties window set the IP address of the workstation and the subnet mask. The system tells the user to reboot for property changes to take effect.

   NOTE: | The workstation, in this case, is the workstation or laptop running the Web browser.

2. To verify the connection, ping the AP. At the default DOS prompt, type:
   Ping -t xxx.xxx.xxx.xxx

   If the ping receives no response, verify that the hardware connections, IP address, gateway address and subnet mask are correct. If correct, contact the site System Administrator for network assistance.

3. Start a Web browser such as Internet Explorer 4.0 or greater or Netscape 3.0 or greater.

   Enter the IP address for the associated AP to access the AP using a Web browser:
   http://xxx.xxx.xxx.xxx

   The e-mobility Access Point Configuration Management System displays.

NOTE: | The Web pages look different than the Telnet or Direct Serial or Dial-Up Connections. Access the different pages using the nodes located in the left frame. Refer to the online help for Web page navigation, page content and parameter use.

To view configuration, function, or option changes on the Web page(s) turn off the caching function for the browser used.

- For Netscape, from the menu bar select Edit, Properties, Advanced, Cache. Select Document in cache is compared to document on network: Every time.
- For Internet Explorer from the menu bar select View, Internet Options, Settings.
  - From the Temporary Internet files element, select Check for newer versions of stored pages: Every visit to the page.
  - Select OK.

NOTE: | If this property/option is not turned off the brower returns the previous view of the page without the changes. To ensure the latest version of a web page is viewed set this option in the browser.

To access help from any e-mobility Access Point Configuration Management System web page, select the Help button always located in the top right corner of the right frame on each page.

For access to the Easy Setup and Configuration pages a popup dialog box appears. Nothing needs to be entered for the User Name. Then enter the default Password:
Nortel

NOTE: | The password is case sensitive.

To manually terminate the session, exit the browser.

#### 2.2 Navigating the UI

The following conventions apply:

- The left frame displays a menu tree of the e-mobility Access Point web management system. Click the icons to expand or collapse the tree. The document nodes allow you to view and manipulate information in the Access Point. The right frame shows the selected page.
- In the menu tree click on the icon to view a page.
- Some pages are 'refreshable' every five seconds. Select the Start Refresh button. The icon in the upper right of the screen is active when refresh has been selected.
- To stop automatic refresh select 'Stop Refresh'. The icon in the upper right of the screen stops moving and the page no longer updates.
- Pages which accept entries will validate those entries when Save Settings is selected. If an entry is incorrect it will be flagged with a red arrow on the left and an error message at the top of the screen. No parameters are updated until all entries are valid.
- To clear entries instead of saving them select Clear Entries.

#### Entering Admin Mode

The UI defaults to User mode that allows read-only access to the AP's functions (e.g., view statistics). To access configuration:

1. Select Configuration|Security from the Access Point menu tree. A prompt for User Name and Password appears.
2. The User Name entry may be ignored. Enter the default System Password.
   Nortel

   NOTE: | The password is case sensitive.

If the password is correct, the AP displays the selected page.
If the password is incorrect, the AP rerequests the User Name and Password.

NOTE: | Set the System Password in the Security Setup page.

#### Changing the Access to the UI

To prevent unauthorized access, change the configuration access to the UI. This includes enabling or disabling the Telnet Logins or changing the System Password.

To change Telnet access to the AP:

1. Select Configuration|Security from the Access Point menu tree.
2. Select Enabled or Disabled for Telnet Logins.
3. Select Save Settings at the bottom of the page.

To change the System Password:

1. Select Configuration|Security from the Access Point menu tree.
2. Select Modify|System Password.
3. Type in the new password to the right of System Password.
4. Type in the new password to the right of Confirm System Password.
5. Select Save Settings at the bottom of the page.

#### Configuring for Dial-Up to the UI

A dial-up connection to gain access to the UI requires a straight-through cable between the modem and the AP. The remote PC requires a modem and a communication program (e.g. Microsoft Windows Terminal program).

#### Configuring Serial Port

To enable and configure the serial port connection on the AP:

1. Select Configuration|PPP/Modem from the Access Point menu tree.
2. Set the Serial Port Use parameter to PPP.
3. Set the Modem Connected parameter to Yes.
4. Configure the other settings as required on the AP.

   Answer Wait Time | The time waiting for a remote connection before dropping the attempt. The default is 60 seconds from a 5 to 255 second range.
   Modem Speaker | AP sends a command to the modem to enable/disable the modem speaker. The default is Enabled.
   Inactivity Timeout | The inactivity time on the UI that causes the AP to terminate the connection while using a modem. The default is 5 minutes from a 0 to 255 minute range. The zero (0) value indicates no time-out.

5. Select Save Settings at the bottom of the page.

#### Configuring the Dial-Up System

Assuming the PPP, serial port and answer mode are enabled on the AP:

1. Attach a straight-through serial cable from the AP to the modem.
2. Verify modem connects to the telephone line and has power. Refer to modem documentation.
3. From the remote terminal, start the communication program.
4. Select the correct serial port along with the following parameters.

   emulation | ANSI
   baud rate | 19200 bps
   data bits | 8
   stop bits | 1
   parity | none
   flow control | none

5. Dial out to the AP with the correct telephone number. No password required.
6. Press ESC to refresh the display. The AP displays the Main Menu.

#### Hanging Up

To hang up from the UI while connected:

1. Select the Configuration|PPP/Modem from the Main Menu.
2. Check Modem Hangup.
3. Select Save Settings at the bottom of the page.

#### Navigating the UI Using a Web Browser

Refer to the online help file for information on Web Browser navigation and basic functionality.

#### 2.3 Access Point Installation

The AP UI includes an Easy Setup page to set basic parameters for an e-mobility network. These parameters include designating gateway addresses that provide the ability to forward messages across routers on the wired Ethernet.

To install an AP:

1. Select Easy Setup from the Access Point menu tree.
2. If prompted enter the password.
3. The Easy Setup page is displayed where:

   Unit Name | identifies the AP name
   IP Address | the network-assigned Internet Protocol address of the AP
   Gateway IP Address | IP address of a router the AP uses on the Ethernet
   Subnet Mask | The first two sets of numbers specify the network domain, the next set specifies the subset of hosts within a larger network, and the final set specifies an individual computer. These values help divide a network into sub networks and simplify routing and data transmission. The subnet mask defines the size of the subnet.
   DHCP | The AP uses DHCP to obtain a leased IP address and network configuration information from a remote server.
   Help URL | Web address of the AP Configuration Management Help file
   ESS_ID | the unique 32-character, alphanumeric, case-sensitive network identifier of the AP
   Diversity | enables selection of antenna diversity (Primary Only, On)
   Additional Gateways | The IP addresses of the additional gateways used. Access up to seven additional gateways.

4. Verify the values set reflect the network environment. Change them as needed.
5. Select Save Settings to register settings or Clear Entries to return to the original values.

#### Additional Gateways

To add or modify an Additional Gateway:

1. Select Easy Setup from the Access Point menu tree.
2. Select Add/Delete Gateways to access the Easy Setup - Add/Delete Gateways page.
3. Select a field to the right of one of the Gateways.
4. Enter the IP address of a gateway.
5. Select Save Settings to register settings or Clear Entries to return to the original values.

#### 2.4 Configuring Security Parameters

The AP provides configuration options for how the unit operates including security access and interface control. Some parameters do not require modification.

1. Select Configuration|Security from the Access Point menu tree to display the Security Setup page.
2. Configure the AP system settings as required:

   Telnet Logins | Specifies if the AP accepts or rejects Telnet Logins. The default value is Enabled.
   System Password | Select Modify. For administrative access, select any alphanumeric, case-sensitive entry up to 13 characters for a password. Make the same entry for System Password and Confirm System Password. Select Save Settings. The default System Password is Nortel.
   Access Control | Specifies enabling or disabling the access control feature. If enabled, the ACL (Access Control List) specifies the MAC addresses of MUs that can associate with this AP. The default is Disabled.
   Allowed Mobile Units | View/Add/Delete MU entries by individual MAC address in the Access Control List (ACL).
   Ranges of Allowed Mobile Units | View/Add/Delete MU entries by a range of MAC addresses in the Access Control List.
   Disallowed Mobile Units | View/Add/Delete MUs not allowed to associate with the AP.
   Encryption Administration | Indicates which interface can change the encryption keys and encryption key index. Any Interface allows users to change encryption keys through any interface. Serial Only allows users to change the encryption parameters only through the serial port. Default is Any Interface.
   Strong Encryption | Allows access to and use of the 128 bit encryption keys. Some countries will not have access to 128 bit encryption due to encryption export restrictions. To access the 128 bit encryption key screen contact the Nortel Networks Customer Support Center for a unique access code to enable this feature.
   WEP (Privacy) | Enables or disables the use of the WEP algorithm. The default is Disabled.
   WEP Algorithm | Defines the number of bits and type of WEP algorithm. Default is 40 bit shared key. 128 bit shared key is an alternate choice.
   Encryption Key | Allows the user to select the Active Key (1-4) used to transmit data packets.
   Encryption Key Setup | Select View/Modify to configure the encryption keys. The selected WEP Algorithm determines the screen displayed for the user. Two screens are possible, one for the 40 bit encryption and one for the 128 bit encryption. Refer to Encryption Key Setup.

3. Verify the values set reflect the network environment. Change them as needed.
4. Select Save Settings to register settings or Clear Entries to return to the original values.

#### System Password Administration

This page allows the network administrator to configure the password for the AP.

1. Select Configuration|Security from the Access Point menu tree.
2. Select Modify|System Password.
3. Configure the AP password settings as required:

System Password | Select any alphanumeric, case-sensitive entry of up to 13 characters. The characters selected are displayed as asterisks. Changing this passowrd changes the Read/Write Community password found in the SNMP Configuration screen. The default password is Nortel.
Confirm System Password | Select the same alphanumeric, case-sensitive entry of up to 13 characters as System Password. The characters selected are displayed as asterisks.

4. Select Save Settings at the bottom of the page.

#### Encryption Key Setup

Two pages allow the user to configure the encryption keys used for the site network. WEP Algorithm determines the screen displayed for the user, either 40 bit or 128 bit encryption. These two pages are view only if Encryption Administration is Serial Only. To enable the Open System option, select Disabled for WEP (Privacy) on Security Setup.

This table shows the AP association capability with the selected WEP Algorithm.

AP Selected WEP Algorithm | MU Selected WEP Algorithm | Association Status
--- | --- | ---
Open (disable) | Open | Associated
Open (disable) | 40 | No Association
Open (disable) | 128 | No Association
40 | Open | No Association
40 | 40 | Associated
40 | 128 | Associated, but can't transmit data
128 | Open | No Association
128 | 40 | Associated, but can't transmit data
128 | 128 | Associated

Each 40 bit encryption key is a subset of the respective 128 bit encryption key. The first 40 bits of each encryption key is the same for the respective 40 bit and 128 bit encryption keys. When a 40 bit encryption key is changed the first 40 bits of the respective 128 bit key is also changed. Consequently, when a 128 bit encryption key is changed the first 40 bits of the 40 bit encryption key is changed. Moreover, configuring the encryption Keys using the SNMP Trap Manager overrides the Key value(s) for the AP(s) accessed by the SNMP Trap Manager.

Nortel Networks provides a total of four Encryption Keys. Each key enables encryption between the AP and an associated MU with the same encryption Key and Key value.

Considerable care is required when assigning keys. Keys have to be in the same order with the same value per key for the AP and MU to authenticate data transmission using encryption.

Example: An AP uses Key 1 with a value of 1011121314. The associated MU requires the same Key 1 to have the value 1011121314.

NOTE: | Some countries do not have access to the 128 bit encryption screens due to imposed encryption export restrictions.

1. Select Configuration|Security from the Access Point menu tree to display the Security Setup page.
2. Select View/Modify | Encryption Key Setup to display the 40 or 128 Bit Shared Key Encryption Setup page. For 40 Bit Shared Key Encryption, each of the four keys has 40 bits available to the user for configuration displayed in 2 twenty bit segments. The remaining 24 IV (initialization vector) bits are factory set and not user configurable. For 128 Bit Shared Key Encryption, each of the four keys has 124 bits available to the user for configuration displayed in two 20 bit segments and four 16 bit segments. The remaining 24 IV bits are factory set and not user configurable.
3. Configure the settings as required:

   Selected Key | The default is 1. Select the appropriate radio button to change the selected Encryption Key.
   Key 1 to 4 | Four separate Encryption Keys maximum. Each key enables encryption between the AP and an associated MU with the same encryption key and value. Note: Keys have to be in the same order with the same value per key for the AP and MU to authenticate data transmission using encryption. Example: AP uses 40 Bit Shared Key 1 with a value of 1011121314. The associated MU requires the same Key 1 with a value of 1011121314.

4. Verify the values set reflect the network environment. Change them as needed.
5. Select Save Settings to register settings or Clear Entries to return to the original values.

#### 2.5 Configuring System Parameters

The AP provides configuration options for how the unit operates including interface control. Some parameters do not require modification.

1. Select Configuration|System from the Access Point menu tree to display the System Setup page.
2. Configure the AP system settings as required:

   Unit Name | Identifies the AP name.
   Channel | The direct sequence channel used by the access point.
   Frequency | Number of Channels | Country
   --- | --- | ---
   2412-2470 | 1-11 | United States
   2430-2447 | 5-8 | Israel
   2457-2463 | 10-11 | Spain
   2458-2472 | 10-13 | France
   2483-2485 | 14 | Japan
   Mobile IP | If enabled, this feature allows MUs to roam across routers.
   MU-MU Disallowed | If enabled, mobile units associated with the same AP are not allowed to communicate with each other. The default is disabled.
   Mobile Home MD5 Key | Select Modify to change the secret key used for Mobile-Home registration and authentication.
   Ethernet Timeout | Disables the radio interface if there is no activity detected on the Ethernet line after the seconds indicated (30-255). The AP disassociates MUs and prevents further associations until it detects Ethernet activity again. The default is disabled. 10-BaseT Timeout detects if the 10Base-T line goes down. If the value is Send WLAP Alive and the WLAP has connected to the Root AP, the WLAP sends a WLAP Alive BPDU on the Ethernet line every WLAP Hello Time seconds to allow WLAPs on the Ethernet line to detect its existence. If the value is Timeout WLAP Alive the WLAP tracks the WLAP Alive BPDU. If the BPDU is missing for WLAP Hello Time seconds, the WLAP state changes to WLAP Lost on Ethernet. Once the WLAP Alive BPDU is detected, the WLAP resets and starts over. When the Ethernet connection is broken, the AP clears the MU table and disables the RF interface until the Ethernet connection comes up.
   Agent Ad Interval | Specifies the time in seconds between the mobility agent advertisement transmissions.
   AP-AP State Xchg | Specifies AP-to-AP communication exchanged. If Disabled, prevents AP load leveling function.
   WNMP Functions | Specifies if this AP can perform WNMP functions. The default value is Enabled.
   Ethernet Interface | Enables or disables wired Ethernet. The default value is Enabled.
   RF Interface | Enables or disables radio. The default value is On.
   Default Interface | Specifies the default interface (Ethernet, PPP or WLAP) to which the AP forwards a frame if it cannot find the address in its forwarding database. The default interface is Ethernet.

3. Verify the values set reflect the network environment. Change them as needed.
4. Select Save Settings to register settings or Clear Entries to return to the original values.

#### Configuring Mobile Home MD5 Key

This page allows the network administrator to configure the secret key used for Mobile Home registration and authentication.

1. Select Configuration|System from the Access Point menu tree.
2. Select Modify|Mobile Home MD5 Key.
3. Configure the Mobile Home MD5 Key setting as required:

Mobile Home MD5 Key | Select any alphanumeric, case-sensitive entry of up to 13 characters.
Confirm Mobile Home MD5 Key | Select the same alphanumeric, case-sensitive entry of up to 13 characters as Mobile Home MD5 Key.

4. Select Save Settings at the bottom of the page.

#### 2.6 Configuring Radio Parameters

The AP auto configures most radio parameters. Only advanced users, Nortel Networks trained users, or Nortel Networks representatives should configure radio parameters for the AP. Options in the RF Setup and WLAP Setup screens fine-tune the radio functions.

1. Select Configuration|RF from the Access Point menu tree to display the RF Setup page.
2. Configure the settings as required:

   BC/MC Queue Max | Determines the memory allocated for the queue used in the AP to temporarily hold broadcast/multicast messages. Unit measure is in packets and corresponds to maximum-sized Ethernet packets. The default is 10.
   Max Retries (data) | The maximum allowed retries before aborting a single data packet transmission. The default is 15. Do not modify.
   Max Retries (voice) | The maximum allowed retries before aborting a single data packet transmission. The default is 5. Do not modify.
   Multicast Mask (data) | Supports broadcast download protocols for Point-of-Sale terminals that load a new operating image over the network instead of using a local nonvolatile drive. The multicast mask for RF data packets is the top 32 bits of the MAC address and allows for a series of MAC addresses to receive multicast messages. The AP transmits these messages immediately and does not queue them for processing at DTIM intervals.
   | Multicast Mask (voice) | Supports broadcast, or part-line, voice communication. All multicast downstream data packets that match the top 32 bits of the multicast mask are forwarded immediately instead of being queued for transmission at the next DTIM interval.
   Beacon Interval | The time between beacons in Kilo-microseconds. The default is 100. Avoid changing this parameter because it can adversely affect PSP-mode terminal performance.
   Accept Broadcast ESS_ID | Allows the AP to respond to any station sending probe packets with the industry-standard broadcast ESS_ID. If Enabled, this feature allows industry-standard devices interoperability. The AP probe response includes the ESS_ID and information about the network. By default, this feature is Disabled and the AP responds only to stations that know the ESS_ID. This helps preserve network security. MUs require using Broadcast ESS_ID to utilize this function.
   MU Inactivity Timeout | Allows industry-standard devices interoperability by specifying the time the AP allows for MU inactivity. An e-mobility AP recognizes MU activity through data packet transmission and reception, and through scanning. Nortel Networks e-mobility MUs conduct active scanning. Other industry-standard MUs might conduct passive scans and an e-mobility AP can classify them as inactive.
   Rate Control (Mb/s) | Defines the data transmission rate. The defaults are: 11 Mb/sec - Optional 5.5 Mb/sec - Optional 2 Mb/sec - Required 1 Mb/sec - Required The defaults allow the AP to automatically select the the best transmit rate allowed by the conditions. These settings allow a mixture of 1 Mb/sec, 2 Mb/sec, 5.5 Mb/sec, and 11 Mb/sec radios in the same network. Different combinations of the data rates can be selected as Optional, Required or Not Used; but, it is essential to set the lowest selected rate to Required. All IEEE 802.11 broadcast and management frames are sent out on the lowest required data rate.
   RTS Threshold | Request to Send threshold (256 - 2347). Allows the AP to use RTS (Request To Send) on frames longer than the specified length. The default is 2347 bytes. (Not configurable)
   Short RF Preamble | Determines whether the AP uses a short or long preamble. The preamble is approximately 8 bytes of the packet header generated by the AP and attached to the packet prior to transmission. The preamble length is transmission data rate dependant. The short preamble is 50% shorter than the long preamble. This feature is only available to version 2.0 radio hardware. Equipment without the version 2.0 radios cannot enable the short preamble function and cannot see, receive or acknowledge messages from short preamble enabled version 2.0 hardware. Disable this feature in a mixed hardware network and use the long preamble. MUs and APs are required to have the same Short RF Preamble settings for interoperability. The default is Enabled.

3. Verify the values set reflect the network environment. Change them as needed.
4. Select Save Settings to register settings or Clear Entries to return to the original values.

#### 2.7 Wireless Operation Parameters

The AP supports up to four WLAP interfaces. Nortel Networks recommends using one WLAP as an interface on high traffic networks and for low traffic networks no more than two WLAPs because excessive channel contention causes the WLAP to miss beacons from the Root AP shown in the example.

Refer to LED Indicators for indication of AP status. If more than two WLAPs operate in a repeater configuration, Nortel Networks recommends the WLAPs with the lowest WLAP IDs be placed on the wired network.

To avoid forming a loop, per the IEEE 802.1d Spanning Tree Protocol, the Wireless WLAP associates with only one wired WLAP.

1. Set the default interface for AP A to Ethernet.
2. Set the default interface for AP B to Ethernet.
3. Set the default interface for AP C to WLAP.
   This allows the MUs to roam and transmit data between AP B and C.

If an AP functions as a bridge between wired LANs, Nortel Networks recommends one LAN contain the lower WLAP IDs.

To configure the AP for wireless operation:

1. Select Configuration|Wireless AP from the Access Point menu tree.
2. Configure the settings as required.

   WLAP Mode | Specifies the AP's wireless-AP operation status. Enabled, the AP sets up automatically for wireless operation. The AP can operate in any of these configurations: Wireless, Repeater or Ethernet Bridge. Disabled, no wireless operation possible. Default setting. Link Required. At power up: If the WLAP is the Root AP, an Ethernet connection is required. If the WLAP is a designated WLAP, association to the Root AP is required. During normal operation: If the Ethernet connection is lost, the Root AP resets. If the WLAP association is lost, the designated AP resets.
   WLAP Priority | Allows a user to determine the Root and the Designated WLAP in wireless operation. Concatenate the priority value as the most significant portion of the MAC address. An AP with a lower numerical value for priority is more likely to become the root AP. The default is 8000 hex from the 0 - 0xFFFF range.
   WLAP Manual BSS ID | Specifies the BSS_ID of a particular WLAP and forces the current AP to associate only with that WLAP. If setting the WLAP Manual BSS_ID to the current BSS_ID, the current AP jumps into Functional State immediately and waits for an Association Request from the other WLAP. Refer to Radio Statistics. This feature speeds up the association process and minimizes confusion when more than two WLAPs try to associate with each other.
   WLAP Hello Time | Sets the time lapse, in seconds, between Config BPDU packets sent to the Root AP by a designated WLAP. The default is 20 seconds. If the Root AP fails to hear from the designated WLAP within the WLAP Max Age time, it removes the designated WLAP from its interface table. The WLAP Hello Time of the Root AP overwrites the WLAP Hello Time of designated WLAPs. The WLAP Hello Time does not refer to the time lapse between beacons sent by the Root AP. If a designated WLAP fails to receive a beacon, it knows that its Root WLAP has lost the Root status.
   WLAP Max Age | Defines time, in seconds, before discarding aged configuration messages. This causes a disconnection between the two WLAPs. The recommended value is a multiple of the WLAP Hello Time. The default is 100 seconds. The WLAP Max Age of the Root AP overwrites the WLAP Max Age of designated WLAPs.
   WLAP Forward Delay | Specifies the time, in seconds, to prevent an AP from forwarding data packets to and from an interface during initialization. The WLAPs involved and the wireless operation state, refer to Radio Statistics, affect the WLAP Forward Delay time. This delay ensures that all WLAP nodes are heard. The default is five seconds per wireless operation state. The WLAP Forward Delay of the Root AP overwrites the WLAP Forward Delay of designated WLAPs.

3. Select Save Settings to register settings or Clear Entries to return to the original values.

#### 2.8 Configuring the SNMP Agent

An SNMP manager application gains access to the AP SNMP agent if it has the AP IP address. An AP can be accessed through the SNMP Trap Manager to configure settings and parameters. Nortel Networks does not recomment this process.

NOTE: | Configuring the keys using the SNMP Trap Manager overrides the Key values for the AP or APs accessed by the SNMP Trap Manager.

The agent configures as read-only, read/write or disabled to provide security when using SNMP. The AP sends specific traps for some conditions. Ensure the SNMP trap manager recognizes how to manage these traps.

NOTE: | Refer to the Nortel MIB on the Wireless LAN Installation disk for specific entries.

The AP supports SNMP V1, MIB-II, and the NORTEL.MIB.

1. Select Configuration|SNMP from the Access Point menu tree.
2. Configure the settings as required.

   SNMP Agent Mode | Defines the SNMP agent mode: Disabled disables SNMP functions. Read Only allows get and trap operations. Read-Write (default) allows get, set and trap operations.
   Read Only Community | User-defined password string up to 31 characters identifying users with read-only privileges. Select Modify to change.
   Read-Write Community | User-defined password up to 13 characters for users with read and write privileges. The password used matches the System Password used to gain access to the configuration screens. Select Modify to change.
   Trap Host 1 IP Address | Trap manager 1 IP address. The default is 0.0.0.0
   Trap Host 2 IP Address | Trap manager 2 IP address. The default is 0.0.0.0
   All SNMP Traps | Enables selected or disables all trap operations. The default value is Disable All.
   Cold Boot | Send a trap to manager when the AP cold boots. The default value is Deselected. Other choices are Trap Host 1, Trap Host 2 and Both Trap Hosts.
   Authentication Failure | Indicates that community strings other than those specified for the Read-Only Community and the Read-Write Community were submitted. The default value is Deselected. Other choices are Trap Host 1, Trap Host 2 and Both Trap Hosts.
   Radio Restart | Send a trap to manager for radio restart. The default value is Deselected. Other choices are Trap Host 1, Trap Host 2 and Both Trap Hosts.
   Access Control Violation | Send a trap to manager when an ACL violation occurs. The default value is Deselected. Other choices are Trap Host 1, Trap Host 2 and Both Trap Hosts.
   DHCP Change | If selected and enabled, this trap generates the following enterprise-specific traps: Gateway Address Change - Indicates the gateway address for the router has changed. IP Address Change - Indicates the IP address for the AP has changed. IP Address Lease - Informs the user the IP address leased from the DHCP server is about to expire. The default value is Deselected. Other choices are Trap Host 1, Trap Host 2 and Both Trap Hosts.
   WLAP Connection Change | If selected and enabled, this trap generates the following enterprise-specific traps: Root WLAP Up - Indicates that the Root WLAP connection is set up and ready to forward data. Root WLAP Lost - If the current WLAP fails to receive a Beacon packet from its Root WLAP within one second, it considers the Root WLAP lost. The WLAP eventually resets itself to reestablish the network topology. Designated WLAP Up - Indicates that the Designated WLAP connection is set up and ready to forward data. Designated WLAP Lost - If the current WLAP fails to receive a Config BPDU packet from its Designated WLAP for MAX AGE time, it considers the Designated WLAP lost. The default value is Deselected.

3. Select Save Settings to register settings or Clear Entries to return to the original values.

#### Configure Read Only Community

This page allows the network administrator to configure the Read Only Community password for the AP.

1. Select Configuration|SNMP from the Access Point menu tree.
2. Select Modify|Read Only Community.
3. Configure the Read Only Community password settings as required:

Read Only Community | Select any alphanumeric, case-sensitive entry of up to 31 characters.
Confirm Read Only Community | Select the same alphanumeric, case-sensitive entry of up to 31 characters as Read Only Community.

4. Select Save Settings at the bottom of the page.

#### Configure Read-Write Community

This page allows the network administrator to configure the Read-Write Community password for the AP. Note that this password matches the System Password used to gain access to any System Configuration page.

1. Select Configuration|SNMP from the Access Point menu tree.
2. Select Modify|Read-Write Community.
3. Configure the Read-Write Community password settings as required:

Read-Write Community | Select any alphanumeric, case-sensitive entry of up to 13 characters.
Confirm Read-Write Community | Select the same alphanumeric, case-sensitive entry of up to 13 characters as Read-Write Community.

4. Select Save Settings at the bottom of the page.

#### 2.9 Configuring PPP

To use a PPP connection, choose the hardware connection, direct or modem, and verify the enabled status of serial port (default) in the PPP-Modem Setup page.

#### PPP Direct

A direct null modem serial cable connection between two APs.

From the UI:

1. Select Configuration|PPP/Modem from the Access Point menu tree.
2. Set the Serial Port Use parameter to PPP.
3. Verify the Modem Connected parameter setting is No.
4. Set the Modem Connect Mode parameter to Answer.
5. Select Save Settings to register settings.
6. Repeat for the other AP. Set the other AP's Modem Connect Mode to Originate.

#### Establishing Connection

To establish the PPP port connection on both APs:

1. Select Configuration|PPP/Modem from the Access Point menu tree.
2. Set the PPP Interface to Enabled.
3. Select Save Settings.

#### PPP with Modems

The PPP interface provides a connection using modems over a telephone line. Connect modems to the APs with straight-through serial cables. Designate one AP as the Originating AP and the other as the Answering AP. Configure the Originating AP with dial-out information to the answering AP. The answering AP waits for the originating AP to dial into it. Refer to Supported Modems for modems supported by the AP.

Dial out manually through the Special Functions menu or dial out automatically on boot.

#### Originating AP

From the originating APs UI:

1. Select Configuration|PPP/Modem from the Access Point menu tree.
2. Set the Serial Port Use parameter to PPP.
3. Set the Modem Connected parameter to Yes.
4. Set the Modem Connect Mode to Originate.
5. Select Dialout Number and enter the dial out telephone number for the answering AP, maximum 31 characters. This string is the same as what follows a typical Hayes Smartmodem ATDT command. Possible characters include pauses, numbers and letters. Refer to the modem documentation.
6. Set the Dialout Mode to Auto.
7. Configure the other settings as required.

   PPP Interface | Enables or disables serial PPP. The default value is Disabled.
   Modem Speaker | Sends a command to the modem to turn on or off the modem speaker. The default is Enabled.
   Answer Wait Time | Time in seconds waiting for a remote connection before dropping attempt. The default is 60 from a 5 to 255-second range.
   PPP Inactivity Timeout | Controls the time out between issuing a PPP packet and expecting a reply. This is necessary if the serial connection has long delay periods. The 0 value indicates no time out. The default is 3 from a 0 to 255-second range.
   Maximum PPP Terminates | Controls the number of PPP terminate requests the AP issues when a PPP-linked AP does not respond to a terminate request. The AP closes the PPP connection after making the maximum requests. The default is 10 from a 0 to 255-terminate request range.

8. Select Save Settings to register settings.

#### Answering AP

From the answering APs UI:

1. Select Configuration|PPP/Modem from the Access Point menu tree.
2. Set the Serial Port Use parameter to PPP.
3. Set the Modem Connected parameter to Yes.
4. Set the Modem Connect Mode to Answer.
5. Configure the other required settings as on the originating AP.
6. Select Save Settings to register settings.

#### Initiating Modem Connection

To manually initiate dial-out from the originating AP to the answering AP:

1. Select the Configuration|PPP/Modem from the Access Point menu tree.
2. Select Modem Dialout.
3. Select Save Settings to register settings.

The AP dials out and attempts to make connection according to parameters set in Port Configuration. If dial-out fails, the AP switches to manual dial-out.

For automatic dial-out:

1. Select the Configuration|PPP/Modem from the Access Point menu tree.
2. Set Dialout Mode to Auto.
3. Select Save Settings to register settings.
4. Select Configuration|Special Functions from the Access Point menu tree.
5. Check Reset AP.
6. Select Perform Function.

The AP Leds flash as if powering up and the AP returns to a STATUS-flashing state.

To hang up:

1. Select the Configuration|PPP/Modem from the Access Point menu tree.
2. Select Modem Hangup.
3. Select Save Settings to register settings.

#### 2.10 Configuring the ACL

The ACL supports adding MU entries by range of MAC addresses or by individual MAC address.

#### Ranges of MUs

To select a range of MAC addresses:

1. Select the Configuration|Security option from the Access Point menu tree.
2. Select View/Add/Delete to the right of Ranges of Allowed Mobile Units.
3. Type in the minimum MAC address as the left value.
4. Type in the maximum MAC address as the right value.
5. Select Add Range to accept the values.

When the Access Control option is enabled on the Security Setup page, all MUs within the range specified can associate with the AP. Specify up to eight ranges as needed or add to the ACL using individual address entries.

#### Removing Ranges of MUs

The Access Control List - Add/Delete Ranges of Mobile Units page provides a facility to remove ranges of MUs from the ACL.

1. Select the Configuration|Security option from the Access Point menu tree.
2. Select View/Add/Delete to the right of Allowed Ranges of Mobile Units.
3. Select the range of MAC addresses to be deleted.
4. Select Delete Range to remove.

#### Adding Allowed MUs

The Access Control List - Add/Delete Allowed Mobile Units page provides a facility to add up to 512 (allowed or disallowed) MUs to the ACL.

1. Select the Configuration|Security option from the Access Point menu tree.
2. Select View/Add/Delete to the right of Allowed Mobile Units.
3. Type in the MAC address to the left of Add MU.
4. Select Add MU to accept the value.

NOTE: | Users can enter MAC addresses without colons.

#### Removing Allowed MUs

The Access Control List - Add/Delete Allowed Mobile Units page provides a facility to remove MUs from the ACL.

1. Select the Configuration|Security option from the Access Point menu tree.
2. Select View/Add/Delete to the right of Allowed Mobile Units.
3. Under Mobile Units select the MAC address to be deleted.
4. Select Delete MU to remove the value.

#### Enable/Disable the ACL

To switch between enable and disable locate Access Control in the Security Setup page.

1. Select the Configuration|Security option from the Access Point menu tree.
2. Select Enabled or Disabled to the right of Access Control.
3. Select Save Settings to register the new setting.

#### Removing All Allowed MUs

The AP provides a facility to remove all MUs from the ACL.

1. Select the Configuration|Special Functions from the Access Point menu tree.
2. Check Clear Access Control List (ACL)-Individual or Clear Access Control List(ACL)-Range or both.
3. Select Perform Function to remove the MUs.

#### Load ACL from MU List

This option from the Configuration|Special Functions menu takes all associated MUs and creates an ACL from them. This builds an ACL without having to manually enter addresses. Edit the ACL using the add and delete functions.

1. Select Configuration|Special Functions from the Access Point menu tree.
2. Check Load ACL from MU List to add addresses for associated MUs to
   the ACL.
3. Select Perform Function.

#### 2.11 Configuring Address Filtering

The AP can keep a list of MAC addresses for MUs not allowed to associate with it. The Disallowed Addresses provides security by preventing unauthorized access by known devices. Use it for preferred association of MUs to APs.

1. Select Configuration|Security from the Access Point menu tree.
2. Select View/Add/Delete to the right of Disallowed Mobile Units.

#### Adding Disallowed MUs

The Access Control List - Add/Delete Disallowed Mobile Units page provides a facility to add up to 512 (disallowed or allowed) MUs to the list.

1. Type in the MAC address to the left of Add Disallowed MU.
2. Select Add Disallowed MU to accept the value.

NOTE: | Users can enter MAC addresses without colons.

#### Removing Disallowed MUs

The Access Control List - Add/Delete Disallowed Mobile Units page provides a facility to remove MUs from the list:

1. Under Disallowed MU Address select the MAC address to be deleted.
2. Select Delete Disallowed MU to remove the value.

#### Clearing Disallowed Filters

Clear all disallowed MUs from the list by:

1. Select Configuration|Special Functions from the Access Point menu tree.
2. Check Clear Address Filters.
3. Select Perform Function.

The AP clears all disallowed MUs.

#### 2.12 Configuring Type Filtering

Packet types supported for the type filtering function include the 16-bit DIX Ethernet types. The list can include up to 16 types.

#### Adding Filter Types

The Filtering Setup page provides a facility to add types to the list.

1. Select Configuration|Filtering from the Access Point menu tree.
2. Type in the 4 hex digits of address to the left of Add filter.
3. Select Add Filter to accept the value.

#### Removing Filter Types

The Filtering Setup page provides a facility to remove types from the list.

1. Select Configuration|Filtering from the Access Point menu tree.
2. Select the 4 hex digits of address to delete to the left of Delete filter.
3. Select Delete Filter to remove the type.

#### Controlling Type Filters

Set the type filters to Disabled, Forward or Discard. The default value is Disabled. To control the type filtering mode:

1. Select Configuration|Filtering from the Access Point menu tree.
2. Select Forward, Discard or Disabled for Type Filtering.
3. Select Save Settings.

NOTE: | Users can only enable one type filtering option at a time.

#### 2.13 Clearing MUs from the AP

Clear the MU association table for diagnostic purposes. This is necessary if the AP has many MU associations no longer in use. Use this option to ensure that MUs associating with the AP are active.

To clear MUs associated with the AP:

1. Select Configuration|Special Functions from the Access Point menu tree.
2. Check Clear MU Table.
3. Select Perform Function.

The AP removes MUs associated with it. MUs cleared from one AP try to reassociate with the AP or another nearby AP.

#### 2.14 Updating AP Firmware

When updating or downgrading the HTML files the user is required to use the Both option under the function heading Use XMODEM to Update Access Point's or Use TFTP to update Access Point's on the serial interface or check Firmware and HTML File by TFTP update THIS Access Point's on the web interface. Both the firmware and HTML files are required to be loaded on the TFTP server or users hard disk.

Options for updating the firmware:

- A TFTP host
- Any computer using the Xmodem file transfer protocol.

The default files for firmware updates are dsap_fw.bin and nrtl_htm.bin.

#### Updating using TFTP

The Ethernet TFTP upgrade method requires a connection between the AP and PC on the same Ethernet segment. Verify the PC has a TFTP server running on it. Running the server requires the use of either the Nortel Networks TFTP server or third-party TFTP servers such as ones available from FTP software. You can obtain the Nortel Networks TFTP server from the Nortel Networks support Web page at http://www12.nortelnetworks.com/software. The wireless TFTP upgrade method requires a wireless connection between the AP and a device acting as a TFTP server. The TFTP server can be running on a PC workstation using the Nortel Networks e-mobility wireless network interface card.

Updating the firmware requires a TFTP server running in the background.

To update the AP firmware:

1. Copy the firmware files dsap_fw.bin and nrtl_htm.bin to the PC hard disk.
2. Select Configuration|Firmware from the Access Point menu tree.
3. Enter the firmware file name in the Firmware Filename field.

   NOTE: | Change this only if a new file name is desired. The defaults are dsap_fw.bin and nrtl_htm.bin unless the user changed the names.

   NOTE: | Verify the path for the file name is accurate.

4. Enter the TFTP Server IP address in the TFTP Server field.
5. Select Perform Function to save new settings before the update is performed.
6. Check TFTP update THIS Access Point's Firmware and/or TFTP update THIS Access Point's HTML File.
7. Select Perform Function.
8. A confirmation window appears. Select OK to continue.

NOTE: | The WIRED LAN ACTIVITY indicator on the AP does NOT flash.

NOTE: | To view the file transfer log, switch to the TFTP application.

The AP resets when the file transfer and flash programming completes.
9. Select Statistics|System Properties from the Access Point menu tree.
10. Verify the version numbers are correct on the System Properties screen.
11. Repeat process for other APs in the network.

#### Update ALL Access Points

The TFTP Update ALL Access Points' option up/downgrades the firmware for all associated APs with the same ESS_ID on the same subnet and includes all recognized hardware platforms regardless of firmware version. The initiating AP is responsible for sending the correct file name for each Nortel Networks platform. The initiating AP does not send update commands to non-Nortel platforms.

Users can find the specific APs that have firmware up/downgraded on the Known APs screen. The time interval between the WNMP update firmware commands for updating each AP is 2 seconds. This interval prevents more than one AP at a time from accessing the TFTP server and causing network congestion.

The Ethernet TFTP upgrade method requires a conection between the AP and PC on the same Ethernet segment. Verify the PC has a TFTP server running on it. Running the server requires third party software like FTP PC/TCP for DOS or OnNet for Windows.

The wireless TFTP upgrade method requires a connection between the AP and a TFTP server. The TFTP server can be running on an e-mobility device.

Updating the firmware requires a TFTP server running in the background.

To update the AP firmware:

1. Copy the Firmware files dsap_fw.bin and nrtl_htm.bin to the PC hard disk.
2. Select Configuration|Firmware from the Access Point menu tree.
3. Enter the firmware file name in the Firmware Filename field.
4. Enter the HTML file name in the HTML Filename field.

   NOTE: | Change this only if a new file name is desired. The defaults are dsap_fw.bin and nrtl_htm.bin unless the user changed the names.

   NOTE: | Verify the path for the file name is accurate.

5. Enter the TFTP Server IP address in the TFTP Server field.
6. Select Perform Function to save new settings.
7. Check TFTP update ALL Access Points' Firmware and/or TFTP update ALL Access Points' HTML File.
8. Select Perform Function to save the settings before the update is performed.

NOTE: | The WIRED LAN ACTIVITY indicator on the AP does NOT flash.

NOTE: | To view the file transfer log, switch to the TFTP application.

The AP resets when the file transfer and flash programming completes.
9. Select Statistics|System Properties from the Access Point menu tree.
10. Verify the version number is correct on the System Properties screen.

#### 2.15 Mobile IP Using MD5 Authentication

Users can achieve true authentication by using the MD5 algorithm with a shared key configured into the AP and its MU. MD5 is a message-digest algorithm that takes an arbitrarily long message and computes a fixed-length digest version, consisting of 16 bytes (128 bits), of the original message. Users can think of the message-digest as a fingerprint of the original message. Since the message-digest is computed using a mathematical formula or algorithm, this makes the probability of its reproduction the equivalent of two people having the same fingerprints. The message-digest is the authentication checksum of a message from a mobile MU to an AP during the Home Agent registration process. The MD5 algorithm's purpose, therefore, prevents an MU from inpersonating an authenticated MU.

#### 2.16 Special Functions

The AP supports several specific functions.

1. Select Configuration|Special Functions from the Access Point menu tree.
2. Check one or more of the functions.
   - Clear All Statistics
   - Clear MU Table
   - Clear Access Control List(ACL) - Individual
   - Clear Access Control List(ACL) - Range
   - Clear Address Filters
   - Load ACL from MU List
   - Start Flashing AP LEDs
   - Reset AP
   - Save Configuration to All APs
3. Select Perform Function.

#### 2.17 Saving the Configuration

The AP keeps only saved configuration changes after a reset. To make configuration changes permanent, save as needed.

To save all changes to all APs:

1. Select Configuration|Special Functions from the Access Point menu tree.
2. Check Save Configuration to All APs.
3. Select Perform Function.

#### 2.18 Resetting the AP

Resetting an AP clears statistics and restores the last saved configuration information. If changes are made without being saved, the AP clears those changes on reset. If changes are never saved, a reset restores the last saved configuration.

1. Select Configuration|Special Functions from the Access Point menu tree.
2. Check Reset AP.
3. Select Perform Function.

The AP flashes its LEDs as if powering up and returns to a STATUS - flashing state.

#### 2.19 Flashing AP LEDs

Flashing all of the AP LEDs simultaneously allows visual confirmation of location. To start flashing the LEDs:

1. Select Configuration|Special Functions from the Access Point menu tree.
2. Check Start Flashing AP LEDs.
3. Select Perform Function.

The AP flashes all of its LEDs on and off. The selection on the Special Functions page is Stop Flashing AP LEDs. To stop flashing the LEDs:

1. Select Configuration|Special Functions from the Access Point menu tree.
2. Check Stop Flashing AP LEDs.
3. Select Perform Function.

### 3.0 Monitoring Statistics

The AP keeps statistics of its transactions during operation. These statistics indicate traffic, transmission success and the existence of other radio network devices. Clear statistics as needed.

#### 3.1 System Properties

The System Properties screen displays information about the AP's configuration.

To view information about the AP configuration select Statistics|System Properties from the Access Point menu tree.

Information includes:

Unit Name | Identifies the AP name.
MAC Address (BSS) | Identifies the unique 48-bit, hard-coded Media Access Control address.
IP Address | Identifies the network-assigned Internet Protocol address.
ESS_ID | Identifies the unique 32-character, alphanumeric, case-sensitive network identifier.
Channel | The direct sequence algorithm used for the operating country.
Country | Identifies AP country code that in turn determines the AP direct sequence channel and channel range.
Diversity | Indicates whether the AP is configured for single (Primary Only) or dual antenna (On) mode.
Rate control 11 Mb/sec 5.5 Mb/sec 2 Mb/sec 1 Mb/sec | Defines the data transmission rate. Default is 11 and 5.5 Mb/sec Optional and 2 and 1 Mb/sec Required.
WEP (Privacy) | Enables or disables the use of the WEP algorithm. The default is Disabled.
WEP Algorithm | Defines the number of bits and type of WEP algorithm use. The default is 40 Bit Shared Key.
Access Control | Specifies if the access control feature is enabled or disabled. If enabled, the ACL (Access Control List) specifies the MAC addresses of the MUs that can associate with this AP.
CCA Mode | Clear Channel Assessment (CCA) Mode is the method used to detect transmissions from other sources. The access point uses the Carrier Sense form of CCA.
CCA Threshold | The energy threshold or level above which the airwaves are considered busy.
Model Number | Identifies the model number.
Serial Number | States the APs unique identifier.
Hardware Revision | Specifies the hardware version.
Manufacture Date | Specifies the date of manufacture of the AP.
AP Firmware Version | Specifies the firmware version.
RF Firmware Version | Specifies the radio firmware version.
HTML File Version | Specifies the HTML file version.
Current MUs | Specifies the current number of MUs associated with this AP.
Total Associations | Specifies the total MU associations handled by this AP.
System Up Time | Specifies how long the system has been operational.

#### 3.2 Interface Statistics

Select Statistics|Interface from the Access Point menu tree to display the Interface Statistics screen. This screen provides:

- packet forwarding statistics for each interface (Ethernet, PPP, RF)
- performance information for each interface in packets per second and bytes per second.

The AP interface indicates packets sent to the AP protocol stack (e.g. configuration requests, SNMP, Telnet).

- To update the values once reselect the Interface icon.
- To have the AP automatically update the display every five seconds select Start Refresh.

#### 3.3 Forwarding Counts

Select Statistics|Forwarding Counts from the Access Point menu tree to display the Forwarding Counts screen. Forwarding Counts provides information on packets transmitted from one interface to another (Ethernet, PPP, RF(radio), AP). Forwarding Counts also displays the broadcast packets transmitted from the AP.

- To update the values once select the Forwarding Counts icon.
- To have the AP automatically update the display every five seconds select Start Refresh.

#### 3.4 Ethernet Statistics

The AP keeps Ethernet performance statistics including packet transmission and data retries until reset. The display also includes information used only by the Nortel Networks Support Center.

Select Statistics|Ethernet from the Access Point menu tree.

Displayed for ethernet statistical units:

Packets Seen | packets received on Ethernet interface
Packets Forwarded | packets forwarded from Ethernet interface to other interfaces
Discarded/NoMatch | packets discarded because of unknown destinations (destinations not in the known list of database entries)
Discarded/Forced | packets discarded because of the applied address filters
Discarded/Buffer | packets discarded because insufficient buffers in AP
Discarded/CRC | packets discarded because of data errors
Broadcast/Multicast | total broadcast or multicast packets received
Individual Address | packets received with designated individual addresses
Packets Sent | total packets sent out
Any Collision | packets affected by at least one collision
1 + Collisions | packets affected by more than one collision
Maximum Collisions | packets affected by the maximum number of collisions
Late Collisions | collisions occurring after the first 64 bytes
Defers | the times the AP had to defer transmit requests on the Ethernet because of a busy medium

To update the values once reselect Ethernet.
To have the AP automatically update the display every five seconds select Start Refresh.

#### 3.5 RF (Radio) Statistics

The AP keeps radio performance statistics including packet and communication information.

To view RF statistics select Statistics|RF from the Access Point menu ree.

Radio performance statistics include:

Data Packets Sent | total data packets transmitted
Encrypted Packets Sent | total encrypted packets transmitted
Data Bytes Sent | total data packets transmitted in bytes
BC/MC Packets Sent | broadcast/multicast user data packets successfully transmitted
BC/MC Bytes Sent | broadcast/multicast user data bytes successfully transmitted
System Packets Sent | system packets successfully transmitted
SBC/MC Packets Sent | broadcast/multicast system packets successfully transmitted
Successfully Transmitted Fragmented Packets | fragmented packets successfully transmitted
Unsuccessfully Transmitted Fragmented Packets | fragmented packets unsuccessfully transmitted
Fragments Sent | packet fragments transmitted
Packets without Retries | transmitted packets not affected by retries
Packets with Retries | transmitted packets affected by retries
Packets with Maximum Retries | transmitted packets affected by the maximum limit of retries
Total Retries | retries occurring on the interface. A retry occurs if the device fails to receive an acknowledgment (ACK) from a destination.
Data Packets Received | total data packets received
Encrypted Packets Received | total encrypted packets received
Data Bytes Received | total data packets received in bytes
BC/MC Packets Received | broadcast/multicast user data packets successfully received
BC/MC Bytes Received | broadcast/multicast user data bytes successfully received
System Packets Received | system packets successfully received
SBC/MC Packets Received | broadcast/multicast system packets successfully received
Successfully Reassembled Fragmented Packets | packets successfully reassembled
Unsuccessfully Reassembled Fragmented Packets | packets unsuccessfully reassembled
Fragments Received | packet fragments received
Received Duplicate Packets | duplicate packets received by the AP. This indicates the AP sent an ACK, but the MU didn't receive it and transmitted the packet again.
Undecryptable Packets | total data packets that could not be decrypted
Received CRC Errors | packets received that contained CRC (Cyclic Redundancy Check) errors. An MU transmitted a corrupt data packet and failed to pass the CRC verification. Ensure that any acknowledgment of the data packet contains the correct CRC word. An incorrect CRC causes the AP to discard the data packet.
Received ICV Errors | packets received that contained ICV (Identity Check Value) errors. An MU transmitted a corrupt data packet and failed to pass the ICV verification. Ensure that any acknowledgment of the data packet contains the correct ICV checksum.

To update the values once reselect RF.
To have the AP automatically update the display every five seconds select Start Refresh.

#### 3.6 Wireless AP Statistics

The AP keeps wireless AP performance statistics including packet and communication information.

To view Wireless AP statistics select Statistics|Wireless AP from the Access Point menu tree.

Wireless AP performance statistics include:

Current # WLAP Interfaces | Refers to the current Wireless AP interfaces in use from a 1-4 range.
Current State | On initialization, the AP can be in any of the following states of wireless operation: starting the initializing process: Initializing Sending Probe Send Assoc Req (association request) Send Cfg BPDU (configuration Bridge Protocol Data Unit) Wait for Probe Send Probe Rsp (probe response) Send Assoc Rsp (association response) Send Cfg Rsp (configuration response) Received Root Rsp (Root response) operating in wireless mode: Root WLAP lost Disabled Functional The Root AP and Association Process provides an explanation of a Root AP.
Priority | States the WLAP priority value assigned to the AP. See Configuring Radio Parameters.
Root Interface | States the interface leading to the Root AP
Root Priority | States the priority value of the Root AP
Root IEEE Address | States the MAC address of the Root AP
Root Path Cost | Indicates the hops between the current WLAP and the Root AP

The Wireless AP interface table shows for each interface:

Itf ID | Identifies the wireless interface on which this AP communicates with another.
WLAP Interface IEEE Address | States the MAC address of the associated WLAP.
Interface State | Identifies the state of the interface from: Disabled - the interface is disabled Listen - the AP listens for information Learn - the AP learns the information Forward - the AP forwards data Block - the AP blocks transmission.
Path Cost | An abstract unit added to the Root Path Cost field in the Config BPDU received on this interface. The unit represents a hop on the path to the Root AP.
Designated Root ID | An ID designated by the Root AP. APs in WLAP mode negotiate the position of Root AP at power up. The AP with the lowest Root ID, path and WLAP ID becomes the Root AP. Both the Root ID and the WLAP ID are 16-digit numbers. The first 4 digits represent the Priority value and the remaining 12 digits represent the MAC address of the AP.
Designated Cost | A path cost designated by the Root AP.
Designated WLAP ID | A WLAP ID assigned by the Root AP.
Designated Itf ID | An Itf ID assigned by the Root AP.

To update the values once reselect Wireless AP.
To have the AP automatically update the display every five seconds select Start Refresh.

#### 3.7 Miscellaneous Statistics

The AP keeps statistics on WNMP and SNMP packets, filtering violations, serial port use, and mobile IPs. The Miscellaneous Statistics screen shows grouped statistics.

- Select Statistics|Miscellaneous from the Access Point menu tree.
- WNMP statistics are:

  Echoes | echo requests received by the AP
  Pings | ping requests received by the AP
  Passthrough Echoes | echoes for MUs associated with the AP

- SNMP statistics are:

  Requests | configuration requests received from the SNMP manager
  Traps | AP messages sent to the SNMP manager

- Filter statistics are:

  ACL Violations | attempts by MU, not in ACL list to associate with this AP
  Address | packets discarded by address filter
  Type | packets discarded by type filter

- Modem statistics for the serial port are:

  Number of Dialouts | dial out attempts by the AP
  Dialout Failures | dial out failures by the AP
  Number of Answers | answer attempts by the AP
  Current Call Time | current connection session length in seconds
  Last Call Time | last connection session length in seconds

- Mobile IP statistics are:

  Agent Ad Sent | number of agent advertisements sent from this AP
  Registration Request Received | number of mobile IP registration requests received
  Registration Reply Sent | number of mobile IP registration replies sent

- To update the values once reselect Miscellaneous.
- To have the AP automatically update the display every five seconds select Refresh.

#### 3.8 Analyzing Channel Use

The AP keeps statistics for individual channels (frequencies). These identify channels that have difficulty transmitting or receiving due to retries.

To view statistics for individual channels:

1. Select Statistics|Frequency Retries from the Access Point menu tree.
2. The display shows counters for the packets sent, received and retries for each channel.

#### 3.9 Analyzing Retries

The AP keeps statistics of packets with multiple retries. Use these statistics to identify severe occurrences of retries. Retries occur when the transmitting station fails to receive an acknowledgment for a transmitted packet. This lack of acknowledgment can result from:

- two or more stations transmitting simultaneously and causing collisions
- the receiving station moving out of range
- the receiving station being powered off.

Any one of these results causes both devices to back off and retry at random times. Too many retries can indicate a system problem.

To view retry severity:

1. Select Statistics|Retry Histogram from the Access Point menu tree.
2. The display indicates the packets that experience retries (up to 15 retries).

#### 3.10 Known APs

This display shows a list of the known APs derived from AP-to-AP communication. The list includes the MAC and IP addresses and configuration information for each AP. The first AP on the list is the AP providing the information. Other APs listed in subsequent lines are recognized by the AP. A broadcast message to APs every 12 seconds determines this list.

NOTE: | The TFTP update ALL Access Points' Firmware and/or TFTP update ALL Access Points' HTML File functions in Configuration|Firmware configure firmware and HTML File for each AP shown in the Known APs menu. Users can perform these options only among the same hardware platforms and firmware version.

Select Statistics|Known APs from the Access Point menu tree.

The AP displays for each known AP:

MAC Address | The unique 48-bit, hard-coded Media Access Control address, is also known as the station identifier of the device.
IP Address | The network-assigned Internet Protocol address
Channel | The direct sequence channel used by the AP.
MUS | The MUs associated with the AP.
KBIOS | The data traffic handled by the AP in kilobytes in and out per second.
Firmware | The firmware version used by the AP.
Away | Determines if the AP is a functional part of the network or away. Away indicates the last known transmission took place 12 or more seconds.

#### 3.11 Mobile Units

Mobile Units statistics provide information on MUs associated with the AP. These include information on data sent and received, activity and association. An MU shows only in the Home/Foreign Agents screens when an MU has roamed to another AP on a different subnet. Once an MU has roamed, the MU IP Address displays on the Home Agents screen of the MU "home" AP with the IP Address of the Foreign Agent to tell the "home" AP where to forward packets.

The MU IP Address is also shown in the Foreign Agents table and Known Mobile Units screens of the new "foreign" AP to tell the new AP where to expect packets from for newly associated MUs. The AP Known Mobile Units screen shows only the MUs associated "locally" on the same subnet.

Select Mobile Units|Known Mobile Units from the Access Point menu tree. The display shows the currently associated MUs listed by MAC address. An entry in the list appears as follows:
addr [p:i#eV]
where:

addr | MU's MAC address in xx:xx:xx:xx:xx:xx format
p | MU's power mode: P for PSP, C for CAM. An unassociated MU does not display any character.
i | MU location on AP interfaces. R for radio, P for PPP. MUs with an A were associated with the AP in the past, but no longer associate with it at time of verifying status.
# | APs current Radio transmit rate for the messages sent to the MU. (1, 2, 5 for 5.5, and 11)
e | Encryption is enabled for this mobile unit.
V | Indicates a Nortel Networks Voice enabled device.

To update the known MUs automatically select Start Refresh.

To bring up more detailed information on an MU, select Stats to the right of the listing.
Information displayed includes:

Interface | The AP interface shows the MU connection (RF, Ethernet, PPP or AP)
State | The connection state between the AP and the MU: Host indicates the unit is on the AP or PPP interface. Associated indicates current association on the radio interface. Away indicates the unit is no longer associated with the AP.
Power Mode | The MU power mode (CAM, PSP or N/A).
Station ID | The IEEE 802.11 specification requires that each AP assign a station ID to all associated MUs, regardless of the MU power mode (PSP or CAM).
Begin Current Association | The time the current association begins in hours, minutes and seconds.
Supported Rates | Data transmission rates the station supports.
Current Transmit Rate | The current rate the AP transmits data to the station.
Priority | Indicates whether the MU is a voice or data type device. Voice indicates packet delivery is high priority. Normal indicates packet delivery in not time critical.
Encryption | MU encryption support: On or Off.
Packets Sent | The packets sent by the AP to the MU.
Packets Received | The packets received by the AP from the MU.
Bytes Sent | The bytes sent by the AP to the MU.
Bytes Received | The bytes received by the AP from the MU.
Discard Pkts/CRC | The packets discarded because of data error.
Last Activity | The time in hours, minutes and seconds since the last communication with the MU.
Last Data Activity | The time in hours, minutes and seconds since the last data transfer.

- To update the values once select Refresh.

Home Agents and Foreign Agents display the mapping of MUs to mobility agents. Refer to Roaming Across Routers.

#### 3.12 Clearing Statistics

To clear statistics:

1. Select Configuration|Special Functions from the Access Point menu tree.
2. Check Clear ALL Statistics.
3. Select Perform Function.

The AP zeroes all statistics.

NOTE: | Resetting the AP also clears statistics.

### 4.0 Hardware Installation

AP installation includes connecting the AP to the wired network, attaching antennas, AP placement and power up. Installation procedures vary for different environments.

#### 4.1 Precautions

Before installing the AP verify the following:

- The location for the unit is dry and dust free. Do not install in wet or dusty areas without additional protection. Contact a Nortel Networks representative for more information.
- Verify the environment has a temperature range between -20° C to 55° C.
- If attaching to a wired Ethernet network, keep the AP on the same subnet or configure the AP for the Mobile IP (Roaming Across Routers) feature.
- If attaching to a wired Ethernet network, ensure the hub or switch is configured for 10 Mbps Half Duplex operation.

#### 4.2 Package Contents

Check package contents for:

- AP
- power adapter

NOTE: | Report missing or malfunctioning items to the Nortel Networks Support Center.

Verify the AP model indicated on the bottom of the unit and packaging.

#### 4.3 Requirements

The minimum installation requirements for a single-cell, peer-to-peer network are:

- a power outlet
- an antenna

The AP supports a 10BASE-T unshielded twisted pair (UTP) wired LAN cabling connection. For management user interface access to the serial connector, use a standard null-modem cable for direct serial connections. Nortel Networks style 7527 console kit may be ordered by contacting a Nortel Networks sales representative or authorized business partner.

#### Network Connection

Locate connectors for Ethernet and power on the back of the AP.

Ethernet configurations vary according to the environment. Determine the Ethernet wiring to connect the AP, 10Base-T or single cell.

NOTE: | the site survey determines the number of APs to install and their location.

#### 10Base-T UTP

Use a 10Base-T connection for an AP attached to a wired UTP Ethernet hub or switch. Normal 10Base-T limitations apply.

1. Plug the data cable RJ-45 connector into the AP RJ-45 connector.
2. Plug the other end of the data cable into the LAN access port (possibly a hub or wall connection).
3. Add more access points as needed.

#### Single Cell

The single-cell connection option allows a single AP to bridge MUs without a wired network. MUs appear as peers as in any Ethernet environment.

#### 4.4 Placing the AP

AP antenna coverage resembles lighting in that an area lit from far away might not be bright enough. An area lit sharply with few lights minimizes coverage and creates dark areas where no light exists. Uniform AP placement (like even placement of light bulbs) provides even, efficient coverage.

Place the antenna using the following guidelines:

- Install the antenna as high as practical
- Orient the antenna vertically for best reception
- Point the antenna downward if attaching the AP to the ceiling.

The AP requires one antenna and can use two. Two antennas provide diversity that can improve signal reception.

Attach antennas to connectors on the back of the AP. For a single antenna, use the primary antenna connector. This is the left antenna connector when viewed from the front of the unit. It is identified by one vertical bar on the bottom of the unit. The secondary antenna is marked with two vertical bars. In the user interface, set Antenna Diversity to Primary Only.

The standard antenna performs well in most office environments. Obtain additional or higher-performance antennas from Nortel Networks. Contact a Nortel Networks representative to order the following models:

- Standard rubber antenna
- Single high-performance antenna
- Twin high-performance diversity antennas
- Mountable F-plane antenna

#### 4.5 Power Options

- Standard 24 volt, 1 amp power supply 115/230VAC, 50/60 Hz.
- US line cord

NOTE: | A Nortel Networks e-mobility 802.11b Wireless LAN DSSS Remote Power Interface system can also be used to combine low-voltage DC with Ethernet data in a single cable connecting to an access point.

#### 4.6 Mounting the AP

The AP rests on a flat surface or attaches to a wall, or any hard, flat, stable surface. Use the standard-mounting kit provided with the e-mobility Access Point.

Choose one of the options based on environment.

Resting flat | Rests on the four rubber pads on the underside of the AP. Place on a surface clear of debris and away from traffic.
Attaching on the wall | Rests on screws. Orient the AP in a downward position on the wall so the LEDs face the floor.

#### 4.7 Connecting the Power Adapter

The power adapter connects to the rear of the AP and to a power outlet.

1. Verify the power adapter is correct according to the country.
2. Plug the power adapter cable into the socket at the back of the AP.
3. Plug the adapter into an outlet. The AP is functional when the Status indicator on the front of the AP reaches a consistent flashing and the Wireless LAN Activity indicator begins flickering. This indicates that the AP is ready for MUs to associate with it.

The AP works without user intervention after setup. Refer to the AP LED indicators to verify that the unit operates properly.

#### 4.8 LED Indicators

The top panel LED indicators provide a status display indicating power and activity. The indicators are:

Power | Flashing indicates AP initialization. The LED is green during operation.
Link | Flashing indicates data transfers on wired connection.
Activity | Flickering indicates beacons and data transfers with MUs, i.e. wireless activity.

#### WLAP Modes - LED Indicators

When in the WLAP mode this chart signifies the APs LED indicator status. For the IEEE 802.11 protocol and APs using firmware version 4.00-20 or above only.

1. After power up, system initialization begins:

   LED | State
   --- | ---
   Power | Blinks
   Link | Blinks if activity occurs
   Activity | Off

2. When a WLAP begins a full scan :

   LED | State
   --- | ---
   Power | On
   Link | Off
   Activity | Blinks slowly

3. When one or more WLAPs are found, but still in full scan state:

   LED | State
   --- | ---
   Power | On
   Link | Off
   Activity | Blinks slowly

4. When the WLAP is in functional state, but one or more WLAP connections are not in Forward state:

   LED | State
   --- | ---
   Power | Blinks regularly
   Link | Blinks if activity occurs
   Activity | Blinks slowly

5. When all WLAP connections are in Forward state:

   LED | State
   --- | ---
   Power | Blinks regularly
   Link | Blinks if activity occurs
   Activity | Blinks if activity occurs

Special cases:

- If the WLAP manual BSS_ID is NOT set and no other WLAP is found the WLAP goes to the functional state.
- If the WLAP manual BSS_ID is set and the specified WLAP not found, the WLAP remains in FULL Scan state permenantly. The LEDs have the following indicator status permenantly:

  LED | State
  --- | ---
  Power | On
  Link | Off
  Activity | Blinks slowly

- If the WLAP manual BSS_ID is set with the broadcast bit ON (i.e.: the first Byte is 01) and the specified WLAP not found, the WLAP tries to associate with another WLAP. If it still cannot find another WLAP it goes to Functional State.
- If the RF interface is disabled the LED indicator status displays:

  LED | State
  Power | On
  Link | Blinks slowly
  Activity | Off

#### 4.9 Troubleshooting

Check the following symptoms and their possible causes before contacting the Nortel Networks Support Center.

Ensure wired network is operating.

Verify AP operation:

1. AP does not power up:

- faulty AP power supply
- failed AC supply
- Electrical Management System (EMS) operating outlet.

2. After the AP resets and hardware is initialized, it performs an SRAM test. If the test passes, all three LEDs turn on. If the test fails, the LEDs all turn off and the AP resets.

Identify wired network problems:

1. No operation:

- Verify AP configuration through Telnet, PPP or UI. Review procedures for Ethernet and serial connection of the AP. Review AP firmware revisions and update procedures.
- Verify network configuration by ensuring that there are no duplicate IP addresses.
  Power down the device in question and ping the assigned address of the device. Ensure no other device responds to that address.

2. AP powered on but has no connection to the wired network:

- Check connections for proper wiring.

3. Verify network wiring and topology for proper configuration:

- Check that the cables used have proper pinouts and connectors.
- Verify router configuration and filtration setting.
- Check that network band use does not exceed 37% of bandwidth.
- Verify MU operations.
- Confirm AP operation.
- Confirm AP and MU Net_ID (ESS_ID).
- Check that the radio driver loaded properly.
- Check that the MU PROTOCOL.INI or NET.CFG file is compatible with the network operating system.

4. Slow or erratic performance:

- Check MU and RF communications range.
- Check antenna, connectors and cabling.
- Verify the AP is using the primary antenna connection for single antenna use.
- Verify that antenna diversity setting for AP is appropriate. If using one antenna, the setting is Primary Only; if using two antennas, the setting is Primary and Secondary.
- Verify network traffic does not exceed 37% of bandwidth.
- Check to see that the wired network does not exceed 10 broadcast messages per second.
- Verify wired network topology and configuration.

#### 4.10 Setting Up MUs

Refer to MU documentation for installing drivers, client software and testing. Use the default values for the Net_ID (ESS_ID) and other configuration parameters until network connection verification.

MUs attach to the network and interact with the AP transparently.

### A.0 Specifications

#### Physical Characteristics

Dimensions | 1.75" H x 6.0" L x 8.5" W (4.45 cm H x 15.24 cm L x 21.59 cm W)
Weight (w/power supply) | 1 lbs (0.454 kg)
Operating Temperature | -4 ºF to 131 ºF (-20 ºC to 55 ºC)
Storage Temperature | -40 ºF to 149 ºF (-40 ºC to 65 ºC)
Humidity | 10% to 95% noncondensing
Shock | 40 G, 11 ms, half-sine
ESD | meets CE-Mark
Drop | withstands up to a 30 in. (76 cm) drop to concrete with possible surface marring

#### A.2 Radio Characteristics

Frequency Range | country dependent; within 2400 MHz to 2500 MHz
Frequency | Number of Channels | Country
--- | --- | ---
2412-2470 | 1-11 | United States
2430-2447 | 5-8 | Israel
2457-2463 | 10-11 | Spain
2458-2472 | 10-13 | Spain
2483-2485 | 14 | Japan
Radio Data Rate |
11 Mbps | - Optional
5.5 Mbps | - Optional
2 Mbps | - Required
1 Mbps | - Required
Radio Power Output | 100mW version
TX Max. Radiated EIRP | US: FCC part 15.247 Europe: ETS 300 320 Japan: RCR STD-33
Modulation | Binary GFSK
TX Out-of-Band Emissions | US: FCC part 15.247, 15.205, 15.209 Europe: ETS 300 320 Japan: RCR STD-33

#### A.3 Network Characteristics

Driver Support | NDIS v4.0 and v5.0
Ethernet Frame | DIX, Ethernet_II and IEEE 802.3
Filtering Packet Rate | 14,400 frames per second filtering and forwarding
Ethernet Connection | 10Base-T (RJ-45)
Serial | PC/AT serial port - DB9 Female, RS-232 using a DTE termination, 19200 bps
SNMP | Version 1, Version 2 subset, Nortel MIB, 802.11 MIB and MIB-II

### B.0 About This Document

#### Conventions

Typeface conventions used include.

<angles> | indicates mandatory parameters in a given syntax.
[brackets] | for command line, indicates available parameters; in configuration files brackets act as separators for options.
GUI Screen text | indicates the name of a control in a GUI-based application.
Italics | indicates the first time a term is used, a book title, and menu titles.

This document uses the following for certain conditions or types of information:

NOTE: | Indicates tips or special requirements.

CAUTION: | Indicates conditions that can cause equipment damage or data loss.