Instruction/ maintenance manual of the product WI2040n Funkwerk
Go to page of 432
Manual bintec WLAN and Industrial WLAN Reference Copyright© V ersion 9.0, 2010 Funkwerk Enterprise Communications GmbH F unkwerk Enterprise Communications GmbH Manual bintec WLAN and Industr ial WLAN.
Legal Notice Aim and purpose This document is par t of the user manual f or the installation and configuration of funkwerk de vices. For the latest inf or mation and notes on the curr ent software r elease, please also read our r elease notes, par ticularly if y ou are updating y our software to a higher r elease version.
T able of Contents Chapter 1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Chapter 2 About this guide . . . . . . . . . . . . . . . . . . . . . . . . . 3 Chapter 3 Installation. . . . . . . . . . . . . . . . . . . . . . . . . . .
Chapter 6 T echnical data . . . . . . . . . . . . . . . . . . . . . . . . 28 6.1 Scope of supply . . . . . . . . . . . . . . . . . . . . . . . . . 28 6.2 General P roduct F eatures . . . . . . . . . . . . . . . . . . . . . 30 6.3 LEDs . . . . . . . . .
Chapter 9 Sy stem Management . . . . . . . . . . . . . . . . . . . . . 75 9.1 Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75 9.2 Global Set tings . . . . . . . . . . . . . . . . . . . . . . . . . . 78 9.2.1 Syst em . . . . . . .
1 0.3.1 Relay C onfiguration . . . . . . . . . . . . . . . . . . . . . . . . 131 Chapter 1 1 LAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 32 1 1 .1 IP Configur ation . . . . . . . . . . . . . . . . . . . . . . . . . 132 1 1 .1 .1 Interf aces .
1 3.3.1 Slave A ccess Points . . . . . . . . . . . . . . . . . . . . . . . 1 87 1 3.3.2 Radio Modules . . . . . . . . . . . . . . . . . . . . . . . . . . 189 1 3.3.3 Radio P rofiles . . . . . . . . . . . . . . . . . . . . . . . . . . 1 92 1 3.3.4 Wir eless Net works (VSS) .
1 4.6.3 QoS Interf aces/Policies . . . . . . . . . . . . . . . . . . . . . . 246 Chapter 1 5 W AN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 253 1 5.1 Internet + Dialup . . . . . . . . . . . . . . . . . . . . . . . . . 253 1 5.1 .1 PPP oE .
1 7 .2 Int erfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31 5 1 7 .2.1 Gr oups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31 5 1 7 .3 A ddresses . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31 6 1 7 .3.1 A ddress List .
1 8.6.1 Hosts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 348 1 8.6.2 Interf aces . . . . . . . . . . . . . . . . . . . . . . . . . . . . 350 1 8.6.3 T emperature . . . . . . . . . . . . . . . . . . . . . . . . . . . 352 1 8.6.4 Ping Generator .
20.4 SNMP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 383 20.4.1 SNMP T rap Options . . . . . . . . . . . . . . . . . . . . . . . . 384 20.4.2 SNMP T rap Hosts . . . . . . . . . . . . . . . . . . . . . . . . 385 20.5 A ctivity Monitor .
T able of Cont ents F unkwerk Enterprise Communications GmbH x bintec WLAN and Industr ial WLAN.
Chapter 1 Intr oduction The new generation access points are manuf actured in an environmentall y fr iendl y way and meet the RoHS directiv e. They suppor t the latest WLAN technology and are designed f or use par ticularly in the prof essional environment.
The de vices are designed for use with W iLMA . WiLMA , the WLAN management solution from F unkwerk, off ers a software application in a client/ser v er architectur e that allows you to centrally monitor , control and maintain all F unkwerk access points in medium and large wireless LANs.
Chapter 2 About this guide This document is valid f or bintec devices with syst em software as of sof t war e version 7 .9.5. The guide, which you have in front of you, contains the following chapter .
Chapter Description Local Services Maintenance External Reporting Monitoring Glossar y The glossary contains a ref erence to the most impor tant tech- nical terms used in net work technology .
T ypographical element Use bold, e.g . Windows Start menu Indicates ke ys , ke y combinations and Windows terms. bold, e.g . Licence Key Indicates fields. italic, e.g . Indicates values that you enter or that can be configured.
Chapter 3 Installation Note Please read the safety notices carefully befor e installing and star ting up your de vice. These are supplied with the de vice. Ref er to chapter T echnical data on page 28 . 3.1 Setting up and connecting Note All you need for this are the cables and antennas supplied with the equipment.
F ig. 2: Connection options bintec W1 0 02n F unkwerk Enterprise Communications GmbH 3 Installation bintec WLAN and Industr ial WLAN 7.
F ig. 3: Connection options bintec WIx040n and bintec WIx065n . When set ting up and connecting, carr y out the steps in the following sequence (ref er to the connection diagrams for the individual de.
used as a table-top device . W all mounting T o att ach the de vice to the wall, use the brack ets on the back of the housing. Op- tional wall mounting with thef t protection is availab le. W arning Bef ore dr illing , make sure that there are no building installations where you are dr illing.
F ig. 5: W all mounting of the bintec WIx040n (standar d design, DIN rail or theft pr otection optional) 3 Installation F unkwerk Enterprise Communications GmbH 1 0 bintec WLAN and Industr ial WLAN.
F ig. 6: W all mounting of the bintec WIx065n (standar d design and with theft prot ection) Use as a table-top device The access point can also be used as a table-t op device . F or this option, use the f our self-adhesive feet on the bot tom of the device.
Note If the bintec WIx065n is installed outdoors , the lines laid outside the building are to be categorized as TNV1 electric circuits in accordance with EN60950, as their SEL V lev el can also be overridden by transient ov er volt age (e.g. dur ing storms) dur ing operation in line with the regulations.
3.3 Suppor t inf ormation If you have questions about your product or are looking f or additional inf or mation, the F unk- werk Enterprise Communications GmbH Suppor t Centre can be reached Monday to Friday bet ween the hours of 8.00 am and 5 pm. They can be contacted as follo ws: Email hotline@funkwerk-ec.
Chapter 4 Basic configur ation Y ou can use the Dime Manager (IP address assignment) and the F unkwerk Configura- tion Interface (other configuration steps) for the basic configuration of your device . The basic configur ation is e xplained below step-b y-st ep.
configuration (see Configuring a PC on page 18 ). (c) Assigning a fixed IP address Y ou can use the Dime Manager to assign a new IP address and the required pass- wor d to your device.
4.2 Sy stem requir ements F or configuration, your PC must meet the f ollowing sy stem requir ements: • Micr osoft Windows operating sy stem Windo ws 2000 or higher • Int er net Explorer 6 or 7 , Mozilla Firef ox V ersion 1 .
and netmasks. In cases of doubt, ask your sy stem administrator . Basic configuration F or a basic configuration of your gat ew ay , you need information that relates to your net- work envir onment: I.
Access data Example value Y our values P reshar ed Ke y #$ " MA C address of remot e bridge %%%%&%' T o use the br idge link autocon.
Allocate an IP address to your PC as f ollows: (1) Select Internet Prot ocol (TCP/IP) and click on Pr oper ties . (2) Choose Use following IP address and enter a suitable IP address, the matching net- mask, your default gat ew ay and your pref erred DNS ser ver .
F ig. 7: Dime Manag er initial scr een The Dime Manag er detects the devices installed in the net work. (2) In the list, double click the de vice you want to configure.
The Device name parameter may contain only the lett ers "a"-"z", "A"-"Z", the digitss "0"-"9", dash "-" and dot "." to avoid error s by other syst ems dur ing inter pr etation of the Device name .
4.5 Modify sy stem passw ord All bintec de vices are deliver ed with the same username and passwor d. As long as the pass word remains unchanged, they are theref ore not protect ed against unauthor ised use.
(1 0) Click OK . (1 1) Sav e the configuration by clicking on the Save Configur ation b ut ton abov e the menu navigation. 4.7 Setting up a bridge link If you run your de vice in Br idge mode, you must set up a br idge link. Bridge link autoconfigur ation (1) Go to Wir eless LAN -> WLAN -> Wir eless Module Settings -> .
(6) In Preshar ed Key ent er, for ex ample, #$ " . (7) F or Remote MA C addr ess , enter the MAC address of the br idge to which your bridge is to set up a connection, e.g . %%%%&%' .
your device will be updated automatically . When installation of the new software is com- plete , you will be invited to rest ar t the device . Caution Once you have clicked on GO , the update cannot be cancelled/interrupted. If an error occurs during the update, do not re-start the device and contact suppor t.
Chapter 5 R eset If the configur ation is incorrect or if your device cannot be accessed, you can reset the de vice to the ex works standard set tings using the Reset but ton on the bot tom of the de vice. P ractically al existing configuration data will then be ignored, only the current user pass- wor ds are retained.
Note If you delete the boot configuration using the F unkwer k Configuration Interface , all pass words will also be reset and the current boot configuration deleted. The next time, the de vice will boot with the standard ex works settings . On de vices of the WI series , there is a fur ther but ton - the HW reset.
Chapter 6 T echnical data This chapter summarises all of the hardwar e proper ties of the devices W1 0 02n , WI1 040n , WI2040n , WI1 065n and WI2065n . Caution bintec WIx065n is a class A set-up. This set-up can cause interf erence in living areas; in this case the operator can request f or appropriate measures to be taken.
Cable sets/mains unit/other Sof twar e Documentation 2-pole scre w ter minal bar f or relay Mounting brack et for wall mounting 1 scre w pin set Blind stops f or Ether net inter - faces bintec WI2040n.
Cable sets/mains unit/other Sof twar e Documentation relay 1 scre w pin set Blind stops f or Ether net inter - faces 4 threaded caps f or antennas bintec WI2065n Ethernet cable (RJ-45, STP) Serial cab.
Pr oper ty V alue (W x L x H) Weight appro x. 430 g LEDs 4 (1x Status, 1x WLAN, 2x Ethernet) P ower consumption of the de vice 5-1 0 Wat t, depending on ext ensions V oltage suppl y External switched-mode po wer supply 1 2 V DC, 1 .
Pr oper ty V alue 2,4 GHz 802.1 1n 40 MHz: MSC0 -87 dBm; MSC1 -84 dBm; MCS2 -82 dBm; MCS3 -79 dBm; MCS4 -75 dBm; MSC5 -71 dBm; MCS6 -69 dBm; MCS7 -67 dBm; MCS8 -86 dBm; MCS9 -83 dBm; MCS1 0 -79 dBm; MCS1 1 -77 dBm; MCS12 -7 4 dBm; MCS1 3 -69 dBm; MCS14 -67 dBm; MCS1 5 -65 dBm 5 GHz 802.
Pr oper ty V alue F requency bands 2.4 GHz Indoor/Outdoor (241 2-2472 MHz) 5 GHz Indoor (51 50-5350 MHz) 5 GHz Outdoor (5470-5725 MHz) 5 GHz BFW A (5755-5875 MHz) only in Germany and Great Britain (r epor ting oblig ations in Ger many , licencing oblig ations in Great Britain).
Pr oper ty V alue Dimensions and weights: Equipment dimensions without cable (W x L x H) 220 mm x 1 85 mm x 42 mm without feet Weight appro x. 1,200 g (3 WLAN modules) LEDs bintec WI1 040n 6 (1x Failu.
Pr oper ty V alue Serial interf ace V .24 9-pin Sub-D connector Relay s witching contact N/O 42 V AC 1 A / 30 V DC 2 A potential-fr ee, sof t war e con- figurab le, switchab le Ethernet interface RJ45 sock et Antennas: Antenna connection RTNC soc ket T ransmit P ower (WLAN) max.
Pr oper ty V alue E1 -mark (vehicle licencing) But tons Reset and r eset to ex w ork settings possib le with t wo but- tons (1x conf ig reset, 1x HW r eset) Securit y f eatures WEP , WP A, WP A2, Acce.
Pr oper ty V alue WLAN modules P rotection ag ainst theft Thef t protection is av ailable as an option T emperature sensor T emperature monit or ing and sof t war e-controlled actions possible Envir o.
Pr oper ty V alue Modulation Modulation IEEE 802.1 1 standards: a,h (5 GHz) b/g (2.4 GHz) Modulation types: 1 1, 5.5, 2 and 1 Mbit/s (DSSS) 2.4 GHz; 54, 48, 36, 24, 1 8, 12, 9 and 6 Mbit/s (OFDM) 2.4 and 5 GHz Channels IEEE802.1 1b/g: 1 3 channels (Europe) IEEE802.
the connection to ear th is under the cover . F ig. 1 1: Connection to earth bintec WIx040n 6.3 LEDs The LEDs show the radio status, radio activit y , Ethernet activit y and LED states of your de vice. The LED states are indicated by combinations of the LEDs which are explained in detail in this chapter .
LED Status Information ETH 1/2 of f No cable or no Ethernet link on Cab le plugged in and link on (flic kering) Cab le plugged in and link with data traf fic During the heating phase the red F ailure LED flashes. Once this temperatur e has been reached, the device continues with the star t-up process .
LED Status Infor mation on (static) Error s on (flashing) Ready WLAN 1/2/3 (3x green) on (flashing slowly) F ree on (static) At least one client is register ed.
F ig. 1 4: LEDs of bintec WI1 065n and bintec WI2065n In operation mode, the LEDs display the following status inf or mation for your device: LED stat us display bintec WI1 065n and bintec WI2065n LED Status Infor mation F ailure (red) on Aft er power -up and during booting or if an error occurs.
During the boot operation, only the red LED is on. The other LEDs then come on during booting (if the units are initialised). 6.4 Connector s All the connections are located on the underside of the device . On bintec W1 0 02n the third antenna connection is located on the underside of the de vice.
ANT2 = TX/RX2 (Connection of second option directional an- tenna) bintec WI1 040n , and bintec WI2040n have t wo Ether net connections and a serial inter - f ace.
3 HW R eset but ton perf or ms restart 4 Cfg Deletes the configuration 5 SFP SFP slot f or 1 00 Mbit/s fibre module (optional) 6 Serial Serial interf ace RS232 7 Relay N/O Alarm relay contact 6.5 Antenna connector s for industrial WLAN devices with 802.
F ig. 19: Ant enna configuration f or bintec WIx065n devices 6.6 Pin Assignments 6.6.1 Ethernet int erface Y our de vice has t wo Ether net interfaces . These are used to connect individual PCs or other s witches. The connection is made via an RJ45 socket.
W1 0 02n . 6.6.2 Serial int erface Y our de vice has a Ser ial interf ace for connection to a console. This suppor ts Baud rates from 1 200 to 1 1 5200 Bps.
Pin assignment of the connector for the pow er supply Pin Configur ation 1 + 2 - 3 + 6.7 F r equencies and channels Dif fer ent cer tification regulations apply around the world. ETSI standards generally apply (predominantl y used in Europe). For operation in Europe, please read the notes in the R&TTE Compliance Information.
6.8 WEEE infor mation F unkwerk Enterprise Communications GmbH 6 T echnical data bintec WLAN and Industr ial WLAN 49.
Chapter 7 A ccess and conf igur ation This chapter describes all the access and configuration options. 7 .1 Access Options The v arious access options are presented below . Select the procedure to suit your needs. There are various ways you can access your device to configur e it: • V ia your LAN • V ia the ser ial interf ace 7 .
• The fix ed IP address assigned via the Dime Manager P ress the Enter (Ret urn) key . 7 .1 .1 .2 T elnet Apar t from configuration using a web browser , with a T elnet connection you can also ac- cess the SNMP shell and use other configuration options.
de vice: (1) Log in to one of the t ypes already availab le on your device (e.g. via T elnet - f or login see Logging in on page 55 ). (2) Ent er " for the input prompt. Y ou are now in the Flash Management shell. (3) C all up a list of all the files saved on the device: " .
If you have made sure that all the ke ys needed are available on the device , you have to check whether an SSH client is installed on your PC. Most UNIX and Linux distributions in- stall a SSH client by default. Additional sof t ware , e.g . PuTTY , usually has to be installed on a Windo ws PC.
the corresponding parameter s (see below). P roceed as follo ws to access your device via the serial interface: (1) Clic k on Pr ograms -> Accessor ies -> HyperT erminal in the Windows Star t menu. (2) P ress Ret urn (at least once) af ter the HyperT er minal window opens.
7 .2 Logging in With the help of cer tain access data, you can log in on your device and carr y out diff erent actions. The ext ent of the actions availab le depend on the author isations of the user con- cerned. A login prompt appears first, reg ardless of how you access your device .
7 .2.2 Logging in for Conf iguration Set up a connection to the de vice. The access options are described in Access Options on page 50 . F unkwer k Configur ation Interface Log in via the HTML surface as follo ws: (1) Ent er your user name in the User field of the input window .
The configur ation options availab le to you depend on the t ype of connection to your device: T ypes of connections and configurations T ype of connection P ossible types of configur ation LAN Assist.
F ig. 24: F unkwer k Configur ation Interface home page 7 .3.1 .1 Calling up F unkwer k Configur ation Interface (1) Chec k whether the device is connected and switched on and that all the necessar y cables are correctly connected (see T echnic al data on page 28 ).
7 .3.1 .2 Operating elements F unkwer k Configur ation Interface window The F unkwer k Configur ation Interface window is divided into three areas: • The header • The navigation bar • The main configuration window F ig. 25: Areas of the F unkwer k Configur ation Interface Header F ig.
F unction to carr y out the configuration. Ger man and English are avail- able . Vie w : Select the desired view from the dropdo wn menu. Stand- ard and SNMP bro wsers can be selected. Online Help : Click this but ton if you want help with the menu now active.
F ig. 28: Menus The Save Configur ation but ton is found in the navigation bar . If you save a current configuration, you can save this as the boot configur ation or you can also archiv e the pre vious boot configuration as a backup .
The navigation bar also contains the main configuration menus and their sub-menus. Click the main menu you requir e. The corresponding sub-menu then opens. If you click the sub-menu you want, the entr y selected will be displayed in red. All the other sub-menus will be closed.
But ton F unction automatic detection of all the access points availab le and con- nected by Ether net in the net work. In the Syst em Management -> Cer tif icates -> Certificates and the S yst em Manag ement -> Certificates -> CRLs menus, this but ton opens the sub-menus for configuring the cer tificates or CRL impor ts.
Icon F unction T r iggers a WLAN bandscan. Displays the next page in a list. Displays the pre vious page in a list. Y ou can select the following operating functions in the list view: F unkwer k Configur ation Interface list options F unction Update Interval Here you can set the interval in which the view is to be updated.
The menus of the F unkwerk Configuration Interface contain the following basic struc- tures: F unkwer k Configur ation Interface Menu archit ectur e F unction Basic configur ation menu/list When you select a menu from the navigation bar , the menu of basic paramet ers is displayed first.
F unction Dropdo wn menus e.g. Click the arrow to open the list. Select the requir ed option using the mouse. Internal lists e.g. Click . A new list entr y is created. Enter the correspond- ing data. If list input fields remain empty , these are not saved when you confirm with OK .
7 .3.1 .3 F unkwerk Configur ation InterfaceMenus The configur ation options of your device are contained in the sub-menus, which are dis- played in the navigation bar in the lef t-hand par t of the window . Note Please note that not all de vices have the full range of functions.
Menu F unction Y ou can also manage licences that are necessary for the use of cer tain functions. Interface Mode / Bridge Groups In this menu, you define the mode in which the interfaces of your device are to run (routing or br idging) and if necessar y can define br idge groups.
Wir eless LAN Controller Menu F unction Wizar d The Wizard helps you to set up a WLAN infrastr uctur e. Controller Configur a- tion In this menu, you make the basic wireless LAN controller set- tings. Slave AP Configur a- tion In this menu, you configure the slave access points.
Menu F unction IPSec In this menu, you configure VPN connections over IPSec. L2TP In this menu you configure the use of L2TP (Layer 2 T unnelling P rot ocol). GRE This menu shows a list of all configur ed GRE tunnels. Fir ewall Menu F unction P olicies In this menu you configure the filt er rules for the fire wall.
Menu F unction Diagnostics In this menu you can test the accessibilit y of hosts, DNS servers or routing . Sof tware & Configur a- tion In this menu, you can manage your de vice's configuration files . Y ou can sav e them either locally on your device or on your computer , for example .
Menu F unction WLAN This menu shows you the WLAN connections statistics. Bridges In this menu you can view the current values of the configured bridges. Hotspot Gate way This menu shows a list of all bintec Hotspot users . QoS In this menu, statistics are displayed for all interf aces f or which QoS has been configured.
The BOO Tmonitor is star ted as follows . The de vices passes through various functional states when star ting: • Start Mode • BOO Tmonitor mode • Normal mode Af ter some self-tests have been successfully carr ied out in the star t mode, your device reaches the BOO Tmonitor mode.
Chapter 8 A ssistants The Assistants menu off ers step-by -step instructions for the following basic configuration tasks: • F irst steps • Int er net access • VPN • W ireless LAN • V oIP PBX.
Chapter 9 S yst em Management The S yst em Management menu contains general syst em information and set tings. Y ou see a syst em status overview . Global syst em parameter s such as the syst em name, date/time , passwor ds and licences are managed and the access and authentication meth- ods are configured.
F ig. 32: Syst em Management -> Status The S yst em Management -> Status menu consists of the f ollowing fields: Fields in the Status Sy stem Infor mation menu Field V alue Uptime Displays the time past since the de vice was reboot ed. Sy stem Date Displays the current sy stem date and sy stem time.
Field V alue sensor . This shows the current temper ature and the maximum and minimum temperatur es reached. Activ e Sessions (SIF , R TP , etc... ) Displays the total of all SIF , TDRC, and IP load balancing ses- sions.
Field V alue • Sof t war e version of the wireless card Bridge mode: • Operation Mode: Bridge or Of f • The channel used on this wireless module • Number of configured bridge links • Sof t war e version of the wireless card Interf ace specifics for relay: • C onfigur ed Mode Recent Sy stem Logs Display s the last 1 0 sy stem messages.
F ig. 33: Syst em Management -> Global Settings -> Sy stem The S yst em Management -> Global Settings -> Sy stem men u consists of the following fields: Fields in the Sy stem Basic P arameters menu Field V alue Sy stem Name Enter the sy stem name of your device .
Field V alue The def ault v alue is . Y ou can view the stored messages in Monitor ing -> Internal Log . Maximum Message Le vel of Sy slog Entr ies Select the priorit y of syst em messages abov e which a log should be creat ed.
F ig. 34: Syst em Management -> Global Settings -> Pass words Note All bintec de vices are deliver ed with the same username and passwor d. As long as the pass wor d remains unchanged, they are not protect ed against unauthorised use.
Field V alue SNMP Read Community Ent er the pass word f or the user name . SNMP W rite Comm unity Enter the passw ord for the user name 2 .
F ig. 35: Syst em Management -> Global Settings -> Date and Time Y ou have the follo wing options for determining the sy stem time (local time): Manual The sy stem time can be set manually on the device .
Note If a method for automatically der iving the time is defined on the device, the values ob- tained in this way automaticall y have higher pr iority .
Field Description IP address . In addition, select the protocol for the time ser v er request. P ossible values: • 84 (def ault value): This ser ver uses the simple net work time prot ocol with UDP por t 1 23. • 4 / 5 ,9 : This ser v er uses the Time ser vice with UDP por t 37 .
Field Description • 4 / 5 4+ : This ser v er uses the Time ser vice with TCP por t 37 . • 8 : This time ser v er is not currently used for the time re- quest. Time Update Inter v al Ent er the time inter v al in minut es at which the time is automatic- ally updated.
The f ollowing licence t ypes exist: • Licences already available in the device's ex works state • F ree extr a licences • Extra licences at additional cost The data sheet for your device tells you which licences are available in the de vice's e x works stat e and which can also be obtained free of charge or at additional cost.
F ig. 36: Syst em Management -> Global Settings -> Sy stem Licenses -> New Activ ating extra licences Y ou activat e extra licences by adding the receiv ed licence information in the Syst em Man- agement -> Global Settings -> Syst em Licenses -> New menu.
Deactivating a licence P roceed as follo ws to deactivat e a licence: (1) Go to Sy stem Manag ement -> Global Settings -> Syst em Licenses . (2) P ress the icon in the line containing the licence you want to delete . (3) C onfirm with OK . The licence is deactivated.
The names of the interf aces connected to an Ether net por t are made up of the following par ts: (a) Abbre viation for interf ace t ype (b) Number of the Ethernet por t (c) Number of the interf ace E.
(c) Number of the interf ace connected to the Ether net por t (d) Number of the vir tual interf ace Example: (first vir tual interf ace based on the first interf ace on the first Ether net por t) 9.3.1 Interfaces Y ou define separatel y whether each interf ace is to operate in routing or bridging mode.
Field Description Interf ace Description Displays the name of the interf ace. Mode / Bridge Group Select whether you want to run the interf ace in 6"$ ? or whether you want to assign the interface to an existing ( # , # etc.
F ig. 38: Syst em Management -> Interface Mode / Bridge Groups -> Interfaces -> Edit Y ou can realise bridging for devices behind access clients with the MAC Bridge function. In wildcard mode you cannot define how Unicast non-IP frames or non-ARP frames are pro- cessed.
Field V alue • 8 (default value): Wildcard mode is not used. • "" : With this setting , you must enter the MAC address of a de vice that is connected ov er IP under Wildcar d MA C Ad- dress . Each pack et without IP and without ARP is forwar ded to this device .
9.4.1 Access In the Administr ative Access -> Access menu, a list of all IP -configurab le interf aces is shown. F ig. 39: Syst em Management -> Administrativ e Access -> Access F or the Ethernet interf ace you can select the access paramet ers 42" , = , =44 , =4 4 , $ and 8? .
9.4.1 .1 Add P ress the Ad d but ton to configure administrative access for additional interf aces. F ig. 40: Syst em Management -> Administrativ e Access -> Access -> Add The S yst em Manage.
F ig. 41: Syst em Management -> Administrativ e Access -> SSH Y ou need an SSH client application, e.g. PuTTY , to be able to reach the SSH Daemon. If you wish to use SSH Login together with the P uTTY client, you may need to comply with some special configur ation requir ements, f or which we have prepared F A Qs.
Field V alue The function is enabled by default. Compr ession Select whether data compression should be used. The function is activated by choosing 0#2 . The function is disabled by default. TCP K eepalives Select whether the device is to send keepaliv e pack ets.
Field V alue P ossible options: • ?9 • = • 6!?9 ?9 , = and 6!?9 are enabled by default. Fields in the SSH Ke y Status menu Field V alue RS A Ke y Status Shows the status of the RS A key .
9.4.3 SNMP SNMP (Simple Net work Management P rot ocol) is a net work prot ocol used to monitor and control net work elements (e.g . rout ers, ser ver s, s witches, pr int ers , computer s etc.) from a central station. SNMP controls communication bet ween the monitored devices and monit- oring station.
Field V alue SNMP V ersion Select the SNMP version your device is to use to listen for ex - ternal SNMP accesses. P ossible values: • / : SNMP V er sion 1 • / : Community -Based SNMP V ersion 2 • /' : SNMP V er sion 3 / , / and /' are active by default.
the RADIUS server , which then searches its database. If the user is f ound and can be au- thenticated, the RADIUS ser v er sends corresponding confirmation to your device. This con- firmation also contains parameters (called RADIUS at tr ib utes), which your device uses as W AN connection parameter s.
Field V alue If a RADIUS ser ver is used for accounting, your de vice sends an accounting message to the RADIUS server at the end of each connection. In the S yst em Management -> Remote Authentication -> RADIUS menu, a list of all re- gister ed RADIUS ser ver s is displayed.
Field V alue P ossible values: • "1"" (default value): The RADIUS ser ver is used f or controlling access to a net work. • "$ : The RADIUS ser v er is used for recording stat- istical call data.
Field V alue The function is activated by choosing 0#2 . The function is enabled by default. Group Description Define a new RADIUS group descr iption or assign the new RA- DIUS entry to a predef ined group . The configured RADIUS ser v ers f or a gr oup are queried according to pr iority and policy .
Field V alue and response in milliseconds. Af ter timeout, the request is repeat ed according to Retr ies or the ne xt configur ed RADIUS ser ver is request ed. P ossible values are whole number s bet ween and . The def ault v alue is (1 second).
Field V alue If the function is active, you can enter the f ollowing options: • 62 7"/2 Enter the time per iod in seconds bet ween the update inter v als. The def ault entry here is i.e. an automatic reload is not car - ried out.
F ig. 44: Syst em Management -> Remote Authentication -> T AC A CS+ -> New The S yst em Management -> Remote Authentication -> T A C ACS+ -> New menu con- sists of the following fields: Fields in the T AC A CS+ Basic Par ameters menu Field Description A uthentication T ype Displays which T A C ACS+ function is to be used.
Field Description ne xt-highest prior ity is used. The av ailable values are to , the default value is . Entr y active Select whether this ser ver is to be used for login authentication. The function is activated by choosing 0#2 .
Field Description At the end of the block time, the ser ver is set to the status spe- cified in the Administrativ e Status field. The possible values are to ' , the default value is . The value means that the ser ver is nev er set to (2 status and thus no other ser ver s are queried.
F ig. 45: Syst em Management -> Remote Authentication -> Options The S yst em Management -> Remote Authentication -> Options menu consists of the f ollowing fields: Fields in the Options G.
9.6 Cer tif icates An asymmetric cr yptos yst em is used to encr ypt data to be transpor t ed in a net work, to gen- erat e or check digital signatures and the authenticate users. A ke y pair consisting of a pub- lic ke y and a private ke y is used to encr ypt and decr ypt the data.
F ig. 46: Syst em Management -> Cer tif icates -> Certificate List -> The cer tificat es and key s themselv es cannot be changed, but a fe w e xternal at tr ibut es can be changed, depending on the t ype of the selected entry .
Field Description Certificate Re vocation List (CRL) Checking Only for Certificate is a C A cer tif icate = 4 . Define the ext ent to which cer tificat e re vocation lists (CRLs) are to be included in the validation of cer tificat es issued by the own- er of this cer tificate .
Registr ation authorit y cer tificates are used by some Certificate Authorities (C As) to handle cer tain tasks (signature and encr yption) dur ing SCEP communication with separate ke ys , and to delegat e the operation to separate registration authorities, if applicable.
Field Description scription Mode Select the way in which you want to request the cer tificat e. P ossible settings: • ?2 (def ault value): Y our device generates a PKCS#1 0 f or the ke y . This file can then be uploaded directly in the bro wser or copied in the Edit menu using the Vie w Details field.
Field Description trat or can pro vide you with the necessar y data. If no CA cer tificates are available , the device will first down- load the C A cer tificate of the rele vant CA. It then continues with the enrolment process , pro vided no more impor tant para- meter s are missing.
Field Description Custom Select whether you want to enter the name components of the subject name individually as specified by the CA or want to enter a special subject name. If 0#2 is selected, a subject name can be given in Sum- mary with attribut es that are not off ered in the list.
Field Description Enter the countr y according to C A. The Ad vanced Set tings menu consists of the follo wing fields: Fields in the Ad vanced Settings Subject Alter native Names menu Field Description #1, #2, #3 F or each entry , define the type of name and enter additional subject names.
F ig. 48: Syst em Management -> Cer tif icates -> Certificate List -> Impor t The S yst em Management -> Cer tif icates -> Certificate List -> Impor t menu consists of the f ollowing.
Field Description Enter the passw ord here. 9.6.2 CRLs In the S yst em Management -> Cer tif icates -> CRLs menu a list of all CRLs is shown. If a ke y is no longer to be used, e.g . because it has fallen into the wrong hands or has been lost, the corresponding cer tificat e is declared inv alid.
Field Description External Filename Enter the file path and name of the CRL to be impor ted, or use Bro wse ... to select it from the file browser . Local Certificate De- scription Enter a unique description for the CRL. File Encoding Select the t ype of encoding, so that your device can decode the CRL.
F ig. 50: Syst em Management -> Cer tif icates -> Certificate Servers -> New The S yst em Management -> Cer tif icates -> Certificate Servers -> New menu consists of the f ollowing f.
Chapter 1 0 Phy sical Interfaces In this menu, you configure the phy sical interf aces that you have used when connecting your gat ew ay . The configuration interf ace only shows the interf aces that are available on your device .
The Phy sical Interfaces -> Ethernet P or ts -> Port Configur ation menu consists of the f ollowing fields: Fields in menu Port Configur ation Field Description P or t Shows the respectiv e por t. The numbering corresponds to the numbering of the Ethernet por ts on the back of the device .
1 0.2 Serial P ort The serial interf ace can be operated as a console or as a data interf ace. In data interface mode, the data f or the serial interf ace can be transmit ted ov er an IP infrastructure (Ser ial ov er IP).
If the 9" " option is selected f or the P ort Mode , an extra configuration section opens. F ig. 53: Physical Interfaces -> Serial P or t -> Serial P ort with Port Mode = 9" " Fields in the Serial Port Serial Settings menu Field Description Baudrat e Select which baud rate should be used.
Field Description • (default value) • • E • Dat a Bits Select how many data bits should be sent in sequence f or traf fic data. P ossible values: • (default value): Eight data bits are sent in sequence.
Field Description • 645+4 : The hardwar e handshake used controls the data flo w ov er the RTS and CTS lines. • D<85D< : If the sof t war e handshake is used, the recipient sends special signs to the sender to control the data flo w .
Field Description The function is enabled by default. P ossible values: .. ' . Default value: . Inter -Byte Gap Enter the time in ms since receiving the fir st charact er , which is used as a tr igger for data transmission. The function is activated with 0#2 .
1 0.3.1 R elay Configur ation In this menu, you can configure the por t mode. F ig. 54: Physical Interfaces -> Relay -> Relay Configuration The Phy sical Interfaces -> Relay -> Relay Confi.
Chapter 1 1 LAN In this menu, you configure the addresses in your LAN and can str ucture your local net work using VLANs. 1 1 .1 IP Conf igur ation In this menu, you can edit the IP configuration of the LAN and Ether net interf aces of your de vice. 1 1 .
configuration, you will only be able to access your device over this IP address . The de vice will no longer obtain an IP configuration dynamically over DHCP . Example of subnets If your device is connected to a LAN that consists of t wo subnets, you should enter a second IP Address/Netmask .
Field Description Based on Ethernet Inter - f ace This field is only displayed if you are editing a vir tual routing in- terf ace. Select the Ethernet interf ace for which the vir tual interf ace is to be configur ed. Addr ess Mode Select how an IP address is assigned to the interf ace.
Field Description VLAN ID Only if Interface Mode = 4$$ B3.8C This option only applies f or routing interf aces. Assign the inter - f ace to a VLAN by entering the VLAN ID of the relev ant VLAN. P ossible values are (def ault value) to && .
Field Description The function is activated by choosing 0#2 . The function is disabled by default. TCP -MSS Clamping Select whether your device is to apply MSS Clamping. T o pre- vent IP pack ets fragmenting, the MSS (Maximum Segment Size) is automatically decreased by the device to the v alue set here .
F ig. 56: VL AN segmenting VLAN for Br idging and VLAN for R outing In the LAN -> VLAN menu, VLANs (vir tual LANs) are configur ed with interf aces that oper - ate in bridging mode. Using the VLAN menu, you can make all the set tings needed f or this and query their status.
1 1 .2.1 VLANs In this menu, you can display all the VLANs already configured, edit your settings and cre- ate new VLANs. By def ault, the ?$" VLAN is available , to which all interf aces are assigned. 1 1 .2.1 .1 Edit/New Choose the icon to edit existing entries.
Field Description F or each entry , also select whether the frames to be transmit ted from this por t are to be transmit ted "$$ (i.e. with VLAN in- f or mation) or "$$ (i.
Field Description Drop non-members If this option is enabled, all tagged frames that are tagged with a VLAN ID to which the selected por t does not belong are dis- carded. 1 1 .2.3 A dministration In this menu, you make general settings for a VLAN. The options must be configured sep- arat ely for each bridge group .
Chapter 1 2 W ireless LAN In the case of wireless LAN (WLAN = Wireless Local Area Net work), this relates to the cre- ation of a net work using wireless technology . Netw ork functions Like a wired net work, a WLAN of fer s all the main net work functions.
An amendment to the T elecommunications Act (TKG) allowed the 5.8 GHz band (5755 MHz - 5875 MHz) to be used for so-called BFWA applications (Broadband Fix ed Wireless Access). This simply requires registration with the Feder al Net work Agency . Howev er , the use of TPC and DFS is mandatory in this case.
F ig. 61: Wireless LAN -> WLAN -> Radio Settings -> Ad vanced Settings for Operation Mode " F unkwerk Enterprise Communications GmbH 1 2 Wir eless LAN bintec WLA.
F ig. 62: Wireless LAN WLAN Radio Settings for Operation Mode = +2" The W ireless LAN -> WLAN -> Radio Settings Settings -> menu consists of the fol- lowing fields:.
Field Description ture mode, all clients communicate with each other via access points only . There is no direct communication bet ween the in- dividual clients. • = : In ad-hoc mode, an access client can be used as central interf ace bet ween a number of terminals.
Field Description 7 "" and Operation Band = & >=F or >=F P ossible values: • 7<" (def ault value) • 7 • <" IEEE 802.
Field Description • F or Operation Band = >=F 75<" and >=F <" and >=F <" Only the " option is possible here . Access Client mode: In Access Client mode you can only select the required channel in Client Mode = = .
Field Description P ossible values: • (default value): T wo traf fic flows are used. • : One traf fic flow is used. Max. Link Distance Only f or Oper ation Mode = ($ Enter the maximum link range. If the , 2" option is enabled, the automatically gener - ated range is used.
Field Description • # : Y our device operates only in accordance with 802.1 1b and for ces all clients to adapt to it. • ; B#5$C : Y our device adapts to the client technology and operates according to either 802.
Field Description automaticall y . • @32A : Depending on the set ting for Operation Band , Bandwidth , Number of spatial streams and Wir eless Mode , dif fer ent whole v alues in mbps will be available for se- lection. Burst Mode Activat e this function to increase the transmission speed for 802.
Field Description Enter the time in milliseconds bet ween the sending of t wo beacons. This v alue is transmit ted in Beacon and P robe Response F rames.
Field Description P ossible values are to . The def ault v alue is E . Long Retry Limit Enter the maximum number of at tempts to send a data packet of length less than or equal to the value defined in R TS Threshold . Af ter this many failed at tempts , the packet is dis- carded.
Field Description Scan channels Choose the channels which the WLAN client automatically scans f or av ailable wireless net works. P ossible values: • 22 (def ault value): All channels are scanned. • " : The channel is automaticall y selected.
Field Description 6$ . The default v alue is . The value disables the scan in the back ground. The value enables the scan of all avail- able frequencies. Min. Time P er iod for Act- ive Scan Indicates the minimum time in milliseconds a frequency is act- ivel y scanned.
Field Description P ossible values are to . The def ault v alue is E . Long Retry Limit Enter the maximum number of at tempts to send a data packet of length less than or equal to the value defined in R TS Threshold . Af ter this many failed at tempts , the packet is dis- carded.
In contrast to a LAN set up over Ether net, a wireless LAN does not have any cables for set- ting up a per manent connection bet ween the ser ver and clients.
of fice, Home off ice). Theref ore , all the wireless LAN subscribers must know the PSK, be- cause it is used to generat e the session key . WP A2 WP A2 is the enhancement of WP A.
1 2.1 .2.1 Virtual Ser vice Sets -> New/ Choose the icon to edit existing entr ies. Choose the New but ton to configure other wire- less net works. F ig.
Field Description The function is enabled by default. ARP P rocessing Select whether the ARP processing function should be enabled. The ARP data traf fic is reduced in the net work by the fact that ARP broadcasts that have been conv er ted to ARP unicasts are f orwar ded to IP addresses that are known internally .
Field Description • 7"/ (default value): Neither encr yption nor authentica- tion • 0 & : WEP 40 Bit • 0 & : WEP 1 04 Bit • : WP A P reshar ed Ke y • 0"! : 802.
Field Description • 0 : AES is used. • 0 47 : AES or TKIP is used. WP A2 Cipher Only for Security Mode = and 0"! and f or WP A Mode = and Select the type of encr yption you want to apply to WP A2.
Field Description Allowed Addr esses Use Add to make entr ies and enter the MA C addresses ( MA C Ad dress ) of the clients to be per mit ted. 1 2.1 .3 WDS Links If you operate your device in access p.
F ig. 65: Wireless LAN -> WLAN -> WDS Links -> -> /Ne w The W ireless LAN -> WLAN -> WDS Links -> -> /Ne w menu consists of the following fields: Fields in the WDS Links Basic Paramet ers menu Field Description WDS Description Enter a name f or the WDS link.
Field Description and in T ransmission Ke y , select the default key . • 0& : Data traf fic on this WDS link is encr ypted with WEP1 04. In WEP Key 1 - 4 , enter the ke y for this WDS link and in T ransmission Ke y , select the default key .
Fields in the Remot e Partner menu Field Description Remot e MAC Address Enter the MAC address of the WDS par tner . 1 2.1 .4 Client Link If you operate your device in access client mode ( Wir eless L.
Fields in the Client Link Basic Paramet ers menu Field Description Net work Name (SSID) Enter the name of the wireless net work (SSID). Enter an ASCII str ing with a maximum of 32 charact ers .
Field Description • (default value): Only WP A is used. • : Only WP A2 is used. P reshar ed Ke y Only if Security Mode = Enter the WP A passwor d.
F ig. 67: Wireless LAN -> WLAN -> Client Link -> Scan Af ter successful scanning, a selection of potential scan par tners is displayed in the scan list. In the Action column, click [Select] to connect the local clients with this client. If the par tners are connected with one another , the icon appears in the Connected column.
Field Description Signal Displays the signal strength of the detect ed client link in dBm. Connect ed Displays the status of the link on your client. Action Y ou can change the status of the client link. The av ailable ac- tions are displayed in this field.
Caution Ne ver connect t wo br idges that have set up a connection to each other with radio to the same LAN segment. This leads to unavoidable ov erloading of your net work and stops all net work traf fic. Some of the possible net work topologies are descr ibed here to give you an overview of the options av ailable when you use bintec bridges.
F ig. 70: Wir eless backbone F ig. 71: Wir eless bridge with connection of wireless clients T o be able to set up a wireless link to bintec br idges , an uninterrupted view must e xist bet ween the antennas at both ends. This is called a line of sight, abbre viated to L OS.
gitudinal axis. At least 60 % of the 1st Fr esnel zone must remain free of obstacles. The ra- dius (or the small semi-axis) depends on the frequency used and the distance bet ween the antennas . F ig. 72: 1 . Fr esnel zone Example: Radius of 1st Fr esnel zone as a function of distance from transmit antenna for antenna separation of 5 km at 2.
Distance from transmit an- tenna (km) Radius of 1st F resnel zone (m) Radius at 60 % of 1st F resnel zone (m) 4,500 7 ,4 5,7 4,750 5,4 4,2 Example: Radius of 1st Fr esnel zone as a function of distance to the transmit antenna for a distance of 700 m at 2.
F ig. 73: Antenna connection A label containing details of the t wo antennas is located on the back of the de vice. The primar y antenna is designated Ant 1 . 1 2.1 .5.1 Bridge Links -> New/ Choose the icon to edit existing entr ies. Choose the New but ton to configure other bridge links.
Field Description If the option is not activated, you can enter a suitable name in the input field. The , " option is enabled by default. Remot e Configuration Select whether setup of a bridge link from a remote br idge is to be permitt ed.
F ig. 75: Wireless LAN -> WLAN -> Bridge Links -> Aut omatic Bridge Link Configur ation Af ter successful scanning, a selection of potential bridge par tners is displayed in the scan list. In the Action column, click on [Connect] to connect the local bridge with this br idge .
Field Description Remot e Link Descr iption Displays the name of the br idge link configured on the remot e bridge. Remot e Device Name Displays the name of the remot e br idge . Signal dBm Display s the signal strength of the detect ed br idge link. Remot e MAC Address Shows the MAC address of the remote bridge.
Field Description Region Select the countr y in which the access point is to be run. P ossible values are all the countries configured on the de vice's wireless module. The range of channels availab le for selection ( Channel in the WLAN W ireless Modules menu) changes depending on the countr y setting .
Chapter 1 3 W ireless LAN Controller By using the wireless LAN controller , you can set up and manage a WLAN infrastructure with up to 24 access points (APs). The WLAN controller has a Wizard which assists you in the configur ation of your access points.
The wireless LAN controller uses the follo wing settings: Region Select the country in which the wireless controller is to be operated. Note: The range of channels that can be used varies depending on the countr y set ting. Interface Select the interf ace to be used for the wireless controller .
Click on to edit an e xisting entr y . Y ou can also delete entries with the aid of . With Ad d , you can create new entr ies. Y ou can creat e up to eight wireless net works (VSS) f or a wireless module. Note: If you wish to use the default wireless net work that is set up, then you must at least change the Preshar ed Ke y paramet ers .
Depending on whether you wish to use WP A or WP A 2 or both, select for Security Mode = or 0"! .
1 3.1 .4 Star t aut omatic installation Y ou will see a list of all detected access points. If you wish to change the set tings of a detected AP , click on in the corresponding entry . Y ou will see the settings for all selected access points. Y ou can change these settings .
Displays the transmission pow er in dBm. Y ou can select another transmission power . By pressing OK you apply the set tings in the A ccess Point Settings windo w . Select the access points that your WLAN controller shall manage. In the Manage column, click on the desired entr ies or click on Select All in order to select all entr ies.
1 3.2.1 General F ig. 77: Wireless LAN Controller -> Controller Configuration -> General The W ireless LAN Controller -> Controller Conf iguration -> General menu consists of the f ollowin.
Field Description and slav es. Note: Make sure that option 138 is active when using an ext er n- al DHCP server . P ossible values: • 9=+ / "1 #2 +.
1 3.3.1 Slave Access P oints F ig. 78: Wireless LAN Controller -> Slave AP configuration -> Slave Access Points In the W ireless LAN Controller -> Slave AP configuration -> Slave Access Points menu, a list of all located APs is displayed with help from the Wizard.
1 3.3.1 .1 Edit Choose the icon to edit existing entries. Y ou can also delete entries with the aid of . If you have deleted APs, these will be loc- ated again but shall not be configured.
Field Description C APW AP Encr yption Select whether communication bet ween the master and slaves is to be encr ypt ed. The function is activated by choosing 0#2 . The function is enabled by default. Y ou can ov err ide the encr yption in order to view the communic- ation f or debugging pur poses.
Click on the Star t but ton under Channel Reallocation in order to reassign any assigned channels, e.g. when a new access point has been added. 1 3.3.2.
Field Description Y ou can select another wireless module prof ile from the list if se ver al wireless module prof iles are set up. Channel Display s the channel that is assigned. Y ou can select another channel. The number of channels you can selected depends on the countr y setting .
Field Description P ossible values: • ?; (default value): The maximum antenna power is used. • ( • ( • ( • & ( • ( Assigned Wir eless Net- works (VSS) Displays the wireless net works that are currently assigned.
1 3.3.3.1 Edit/New Choose the icon to edit existing entries. Select the New but ton in order to creat e new wireless module profiles . F ig. 83: Wireless LAN Controller -> Slave AP Configuration -&.
Field Description P ossible values: • < (def ault value) The wireless module profile is not active . • " : Y our device is used as an access point in your net work. Operation Band Select the frequenc y band of the wireless module prof ile.
Field Description • (default value): T wo traf fic flows are used. • : One traf fic flow is used. Fields in the Wir eless Modules Perf ormance Settings menu Field Description Wir eless Mode Select the wireless technology that the access point is to use.
Field Description P ossible values: • 5 : Y our device operates according to either 802.1 1a or 802.1 1n. • : Y our device operates only according to 802.1 1n. • : The device operates only in accordance with 802.
Field Description P ossible values: • 22 : All channels can be dialled when a channel is selected. • " : Depending on the region, operation band, wireless mode and bandwidth, the channels that have a distance of 4 channels are provided.
Field Description Shor t Guard Interval Enable this function to reduce the guard interval (= time bet ween transmission of t wo data symbols) from 800 ns to 400 ns. Shor t Retr y Limit Ent er the maximum number of att empts to send a frame of length less than or equal to the value defined in R TS Threshold .
1 3.3.4 Wir eless Networks (VSS) F ig. 84: Wireless LAN Controller -> Slave AP Configuration -> Wir eless Networks (VSS) In the W ireless LAN Controller -> Slave AP Configuration -> Wir eless Networks (VSS) menu, an overview of all wireless net works that have been created is displayed.
F ig. 85: Wireless LAN Controller -> Slave AP Configuration -> Wir eless Networks (VSS) -> /New The W ireless LAN Controller -> Slave AP Configuration -> Wir eless Networks (VSS) - >.
Field Description The function is enabled by default. ARP P rocessing Select whether the ARP processing function should be enabled. The ARP data traf fic is reduced in the net work by the fact that ARP broadcasts that have been conv er ted to ARP unicasts are f orwar ded to IP addresses that are known internally .
Field Description • 7"/ (default value): Neither encr yption nor authentica- tion • 0 & : WEP 40 Bit • 0 & : WEP 1 04 Bit • : WP A P reshar ed Ke y • 0"! : 802.
Field Description • 0 : AES is used. • 0 47 : AES or TKIP is used. WP A2 Cipher Only for Security Mode = and 0"! and f or WP A Mode = and Select the type of encr yption you want to apply to WP A2.
Field Description A CL Mode Select whether only cer tain clients are to be per mit ted for this wireless net work. The function is activated by choosing 0#2 . The function is disabled by default. Allowed Addr esses Use Add to make entr ies and enter the MA C addresses ( MA C Ad dress ) of the clients to be per mit ted.
1 3.4.1 Activ e Clients F ig. 86: Wireless LAN Controller -> Monitoring -> Activ e Clients In the W ireless LAN Controller -> Monitoring -> Activ e Clients menu, the current v alues of all activ e clients are shown.
1 3.4.2 Neighbor APs F ig. 87: Wireless LAN Controller -> Monitoring -> Neighbor APs In the W ireless LAN Controller -> Monitoring -> Neighbor APs menu, all neighbour ing APs that are located dur ing the scan are displayed.
1 3.5.1 Fir mwar e Maintenance F ig. 88: Wireless LAN Controller -> Maintenance -> Fir mwar e Maintenance In the W ireless LAN Controller -> Maintenance -> Fir mwar e Maintenance a list of all Managed Access Points is displayed.
Field Description that are requir ed. P ossible values: • ,!" - " " : Y ou can also star t an update of the syst em sof t ware .
Chapter 1 4 R outing 1 4.1 R outes Default Rout e With a default rout e, all data is automaticall y forw arded to one connection if no other suit- able rout e is availab le. If you set up access to the Internet, you must configur e the route to your Internet Ser vice P ro vider (ISP) as a default route .
F ig. 89: Routing -> Routes -> IP Routes -> New with Extended Route = 8" "/" If the 0;" 6" option is selected f or Route Class , an e xtra configuration section opens. F ig.
The Routing -> Routes -> IP Routes -> New menu consists of the following fields: Fields in the IP Rout es Route Class menu Field Description Extended Rout e Select whether the rout e is to be defined with e xtended para- meter s.
Field Description • in the W AN: Y ou define a rout e without a transit net work. • 7" : • in the LAN: Y ou define a gate way rout e. • in the W AN: Y ou define a rout e with a transit net work. Local IP Addr ess Only f or Network T ype = 9" .
Field Description Fir st select the por t number range. P ossible values: • - (def ault value): The route is valid for all por t number s. • $2 : Enables the entr y of a por t number . • 6$ : Enables the entr y of a range of por t numbers .
Field Description P ossible values: • 7$ (def ault value): The t ype of ser vice is ignored. • 9+ : Relates to a Diff erentiat ed Ser vices Code P oint to RFC 3260. • 4< (- 32 : The T OS value is specified in binar y f or mat, e.
F ig. 91: Routing -> Routes -> Options The Routing -> Routes -> Options menu consists of the following fields: Fields in the Options Back Route V erify menu Field Description Mode Select how the interf aces to be activat ed f or Back Rout e V er ify are to be specified.
Field Description Back Rout e V erify Only for Mode = 0#2 ! " Select whether 6" 6" +1$ is to be enabled for this interf ace. The function is activated with 0#2 .
F ig. 92: Routing -> NA T -> NA T Interfaces F or each NA T interf ace, you can select the options 84 "/ , 2" 9- and 4 "1$1 . In addition, "$ displays how many por t forwar ding r ules were configured f or this interf ace.
Field Description P or tforw ardings Shows the number of por tf orwarding r ules configured in Rout- ing -> NA T -> P or tforw arding . 1 4.2.2 NA T Configur ation In the Routing -> NA T -> NA T Configuration menu you can ex clude data from NA T in a simple and conv enient manner .
Field Description T ype of traf fic Select the type of data traf fic for which NA T is to be configured. P ossible values: • $ B9 "" 84C (default value): The data traf fic that comes from outside.
Field Description method = 22 , "" or !" "" .
Field Description • -!"2 • .4 • < • , • 69 • 63 • 7 • 4+ • 4. • ,9 • 366 • D879 Source IP Addr ess / Net- mask Enter the source IP address and, if required, the corresponding netmask of the or iginal data packets .
Field Description New Destination IP Ad- dress/Netmask Only for T ype of T raf f ic = $ B9 "" 84C . Enter the destination IP address and, if requir ed, the corres- ponding netmask to which the original destination IP address is to be translated.
1 4.3 RIP The entries in the routing table can be defined statically or the routing tab le can be updated constantl y by dynamic ex change of routing information bet ween sev eral devices . This ex - change is controlled by a Routing P rot ocol, e.g. RIP (Routing Information P rotocol).
1 4.3.1 .1 Edit F or each RIP interface , you can, in the menu, select the options 3 , 6 / 3 and 6" .
Field Description • 67 3 ?2" " : For sending RIP V2 messages ov er the multicast address 224.0.0.9. • 67 3 4$$ : RIP V1 messages are sent, receiv ed and processed as per RFC 2091 (triggered RIP).
1 4.3.2 RIP Filter In this menu, you can specify ex actly which rout es are to be expor t ed or impor ted. Y ou can use the following strategies for this: • Y ou explicitl y deactivat e the impor t or e xpor t of cer tain rout es. The impor t or export of all other rout es that are not listed is still allowed.
lect the position to which the filt er is to be moved. 1 4.3.2.1 New Choose the New but ton to set up more RIP filter s. F ig. 97: Routing -> RIP -> RIP Filt er -> New The Routing -> RIP -.
Field Description Metric Of fset f or Activ e Interf aces Select the v alue to be added to the rout e metric if the status of the interf ace is "up". During e xpor t, the value is added to the ex - por ted metric if the interf ace status is "up".
Field Description ceiving RIP updates , is only for test pur poses. If the set ting is changed, this can mean that your de vice sends and listens at a por t that no other devices use. The def ault v alue 520 should be ret ained. Def ault Rout e Distr ib u- tion Select whether the default route of your device is to be propag- ated via RIP updates .
Fields in the RIP Options Timer for RIP V2 (RFC 2453) menu Field Description Update Timer Only for RFC 2453 V ariable Timer = 0#2 An RIP update is sent on e xpir y of this period of time.
1 4.4 Load Balancing 1 4.4.1 Load Balancing Gr oups The increasing amount of data traff ic over the Internet means it is necessary to send data ov er diff erent interf aces to increase the total bandwidth availab le.
f ollowing fields: Fields in the Load Balancing Groups Basic P aramet ers menu Field Description Group Description Enter the desired descr iption of the interf ace group . Distribution Polic y Select the way the data traf fic is to be distr ibut ed to the inter - f aces configur ed for the group .
In the Interface Selection for Load Balancing area, you add and configur e interf aces that match the current group conte xt. Y ou can also delete interf aces.
Ad dress r ange for m ulticast F or , IPv4 the IP addresses 224.0.0.0 to 239.255.255.255 (224.0.0.0/4) are reser v ed for multicast in the class D net work. An IP address from this range repr esents a multicast gr oup to which sev eral recipients can log in.
passed. • IGMP: IGMP is used to gather information about the potential recipients in a subnet. In the case of a hop, incoming multicast data traf fic can thus be selected. Tip With multicast, the f ocus is on ex cluding data traff ic from unw anted multicast groups.
Field Description All Multicast Groups Select whether all multicast groups, i.e. the complete multicast address range 224.0.0.0/4, are to be forw arded from the defined Source Interface to the defined.
1 4.5.2.1 New Choose the New but ton to configure IGMP on other interf aces. F ig. 1 0 1: R outing -> Multicast -> IGMP -> /New The Routing -> Multicast -> IGMP -> /Ne w menu consists of the following fields: Fields in the IGMP IGMP Settings menu Field Description Interf ace Select the interf ace on which IGMP is to be enabled, i.
Field Description P ossible values are to . The def ault v alue is . Rob ustness Select the multiplier for controlling the timer values.
F ig. 1 02: IGMP Pr oxy The Ad vanced Set tings menu consists of the follo wing fields: Fields in the menu Adv anced Settings Field Description IGMP P ro xy Select whether your de vice is to forw ard the hosts' IGMP mes- sages in the subnet via its defined Pr oxy Interface .
F ig. 1 03: Routing -> Multicast -> Options The Routing -> Multicast -> Options menu consists of the following fields: Fields in the Options Basic Settings menu Field Description IGMP Status Select the IGMP status.
Field Description ternally and in repor ts . Maximum Sources Enter the maximum number of sources that are specified in ver - sion 3 reports and the maximum number of internally managed sources per group . IGMP Stat e Limit Enter the maximum per mit ted tot al number of incoming quer ies and messages per second.
F ig. 1 04: Routing -> QoS -> QoS Filter -> New The Routing -> QoS -> QoS Filter -> New menu consists of the following fields: Fields in the QoS F ilter Basic Par ameter s menu Field Description Description Enter the name of the filt er.
Field Description The def ault v alue is - . Connection State If Pr otocol = "! , you can define a filt er that takes the status of the TCP connections into account. P ossible values: • 0 "#2 1 : All TCP pack ets that would not open any new TCP connection on routing ov er the gate way match the filter .
Field Description used to signal the prior ity of IP pack ets (indicated in binar y f or mat; currently not implemented). • 9+ 92 32 : Diff erentiat ed Ser vices Code P oint is used to signal the prior ity of IP pack ets (indicated in decim- al f ormat; possible values to ' ; currentl y not implemented).
F ig. 1 05: Routing -> QoS -> QoS Classification -> New The Routing -> QoS -> QoS Classification -> New menu consists of the following fields: Fields in the QoS Classif ication Basic P aramet ers menu Field Description Class map Choose the class plan you want to creat e or edit.
Field Description Routing -> QoS -> QoS Filter menu. Direction Select the direction of the data packets to be classified. P ossible values: • 7$ : Incoming data pack ets are to be classified. • <"$$ (default value): Outgoing data pack ets are to be classified.
P ackets in the high-prior ity class alw ays take pr iority over data with class IDs 1 ... 254. It is possible to assign or guarantee each queue and thus each data class a cer tain par t of the tot al bandwidth of the interf ace. In addition, you can optimise the transmission of voice data (real time data).
Field Description P rior isation algor ithm Select the algorithm according to which the queues are to be processed. This activat es and deactivates QoS on the selected interf ace. P ossible values: • "- I$ (def ault value): QoS is activat ed on the interf ace.
Field Description • 0"1" (default value) • 0"1" 3.8 • 0 • 0 3.8 • 7 / 0"1" • 7 / 0"1" 3.
Field Description real time data is routed. Queues/P olicies Configur e the desired QoS queues. F or each class created from the class plan, which is associated with the selected interf ace, a queue is generated automatically and displayed here (only f or outgoing classified data traff ic and f or data traf fic classified in both directions).
Field Description W eight Only if Pr iorisation algorithm = $1" 6 6# or $1" I$ Choose the weight of the queue. Possib le values are to & . The def ault v alue is .
Field Description on the interf ace. If O verbooking allowed is deactivated, the queue can ne ver occup y bandwidth bey ond the bandwidth limit that has been set. The function is activated with 0#2 . The function is disabled by default. Burst size Only for T raf fic Shaping = Enabled.
Chapter 1 5 W AN This menu off ers various options for configuring accesses or connections from your LAN to the W AN. Y ou can also optimise v oice transmission here f or telephone calls ov er the Inter - net. 1 5.1 Int ernet + Dialup In this menu, you can set up Internet access or dialup connections.
Default Rout e With a default rout e, all data is automaticall y forw arded to one connection if no other suit- able rout e is availab le. Access to the Internet should alway s be set up as the def ault rout e to the Internet Ser vice P ro vider (ISP).
1 5.1 .1 PPP oE In the W AN -> Internet + Dialup -> PPP oE men u, a list of all PPP oE interf aces is shown. PPP ov er Ether net (PPPoE) is the use of the Point-t o-P oint P rot ocol (PPP) net work pro- tocol ov er an Ethernet connection. T oday , PPP oE is used for ADSL connections in Ger - many .
Field Description Description Enter a name to uniquely identify the PPP oE par tner . The fir st charact er in this field must not be a number and no special charact ers or umlauts must be used.
Field Description The function is activated with 0#2 . The function is disabled by default. Only activat e this option if you have Internet access with a flat- rat e charge . Connection Idle Timeout Only if Alw ays on is disabled. Enter the idle time in seconds f or static shor t hold.
Field Description The function is enabled by default. Local IP Addr ess Only if IP Addr ess Mode = "" Enter the static IP address of the connection par tner. Rout e Entr ies Onl y if IP Ad dress Mode = "" Define other routing entr ies for this connection par tner .
Field Description encr ypt ed. • 5+= : P r imarily r un CHAP , otherwise P AP . • ?+=/ : Only r un MS-CHAP version 1 (PPP Microsof t Challenge Handshake Authentication P rotocol).
1 5.1 .2.1 New Choose the New but ton to set up new PPTP interf aces. F ig. 1 08: W AN -> Internet + Dialup -> PPTP -> New The W AN -> Internet + Dialup -> PPTP -> New menu consists .
Field Description If you want to use an e xter nal DSL modem, select the Ether net por t to which the modem is connected. When using the internal DSL modem, select here the EthoA in- terf ace, e.g. "1 , configur ed for this connection in Phy sical Interfaces -> A TM -> Prof iles -> New .
Field Description ally assigned a temporaril y valid IP address from the provider . • "" : Y ou enter a static IP address . Def ault Rout e Select whether the route to this connection par tner is to be defined as the default rout e.
Field Description Maximum Number of Di- alup Retries Enter the number of unsuccessful att empts to setup a connec- tion bef ore the interf ace is block ed. P ossible values are to . The def ault v alue is . A uthentication Select the authentication protocol for this Internet connection.
Field Description PPTP Addr ess Mode Displays the address mode. The value cannot be changed. P ossible values: • "" : The IP address of the Ether net por t selected in PPTP Interface will be used. Local PPTP IP Address Assign the PPTP interf ace an IP address that is used as the source address.
F ig. 1 09: W AN -> Internet + Dialup -> IP P ools -> Ad d The W AN -> Internet + Dialup -> IP P ools -> Add menu consists of the follo wing fields: Fields in the Inter net + Dialup IP Pools menu Field Description IP P ool Name Enter the name of the IP pool.
1 5.2.1 .1 New Click o the New but ton to set up por t f orwar ding for other interf aces. F ig. 1 1 0: W AN -> Real Time Jit ter Control -> Controlled Interfaces -> New The W AN -> Real T.
Field Description the selected interf ace. F unkwerk Enterprise Communications GmbH 1 5 W AN bintec WLAN and Industr ial WLAN 267.
Chapter 1 6 VPN A connection that uses the Internet as a "transpor t medium" but is not publicl y accessible is ref erred to as a VPN (Vir tual P rivat e Net work). Only authorised users have access to such a VPN, which is seemingly also ref erred to as a VPN tunnel.
F ig. 1 1 1: VPN -> IPSec -> IPSec Peers P eer Monitoring The menu for monitoring a peer is called by selecting the but ton for the peer in the peer list. See V alues in the list IPSec T unnels on page 391 . 1 6.1 .1 .1 New Choose the New but ton to set up more IPSec peers.
F ig. 1 1 2: VPN -> IPSec -> IPSec Peers -> New The VPN -> IPSec -> IPSec Peer s -> New menu consists of the follo wing fields: Fields in the IPSec P eers Peer Par ameters menu Field Description Administr ative Status Select the status to which you wish to set the peer af ter saving the peer configur ation.
Field Description The maximum length of the entr y is 255 character s. P eer Addr ess Enter the off icial IP address of the peer or its resolv able host name. The entry can be omitt ed in cer tain configur ations, whereby your device then cannot initiate an IPSec connection.
Field Description IP Assignment P ool Only if IP Address Assignment = 70 +$ ? / Select an IP pool configured in the VPN -> IP P ools men u. If an IP pool has not been configured here yet, the message 8" -" appears in this field.
Field Description def ault in Phase-2 Prof iles : 8 B 92" 2C . XA UTH P rofile Select a profile created in VPN -> IPSec -> XA UTH profiles if you wish to use this IPSec peer XAuth for authentication.
Field Description • ,! 9" : Y our device only responds to an ARP re- quest if the status of the connection to the IPSec peer is ,! (active) or 9" . In the case of 72 , your device only re- sponds to the ARP request; the connection is not set up until someone actually wants to use the rout e.
F ig. 1 1 4: VPN -> IPSec -> Phase-1 Pr ofiles -> New The VPN -> IPSec -> Phase-1 Prof iles -> New menu consists of the following fields: Fields in the Phase-1 Pr ofiles Phase-1 (IKE) Par ameter s menu Field Description Description Enter a description that uniquely defines the type of r ule.
Field Description • (2 1 : Blowfish is a very secure and fast algor ithm. T wofish can be regar ded as the successor to Blowfish. • +4 : CA ST is also a very secure algorithm, marginall y slower than Blowfish, but fast er than 3DES.
Field Description DH Group The Diff ie-Hellman group defines the parameter set used as the basis f or the key calculation dur ing phase 1 . "MODP" as sup- por ted by bintec devices stands f or "modular e xponentiation".
Field Description • 6 $" : Phase 1 ke y calculations are authenticated using the RS A algor ithm. • 6 0-!" : In RSA encr yption the ID payload is also encr ypt ed for additional secur ity .
Field Description F or A uthentication Method = 9 $" , 6 $ " or 6 0-!" , the Use Subject Name from cer- tificat e option is shown.
Field Description the mode suppor t ed by the remot e terminal. • 9 : Y our device sends and expects no hear tbeat. Set this option if you use de vices from other manuf acturer s. • ="#" B0;!" 2-C : Y our device expects a hear tbeat from the peer but does not send one itself .
Field Description is used. The function is activated with 0#2 . The function is enabled by default. C A Cer tificat es Onl y if Authentication Method = 9 $".
1 6.1 .3.1 New Choose the New but ton to set up new profiles . F ig. 1 16: VPN -> IPSec -> Phase-2 Prof iles -> New The VPN -> IPSec -> Phase-2 Prof iles -> New menu consists of the .
Field Description f ast ke y setup, low memory requirements , high le vel of secur - ity against at tacks and general speed. Here , it is used with a ke y length of 1 28 bits.
Field Description The field has the follo wing options: • BE ("C : During the Dif fie-Hellman key calculation, modular e xponentiation at 768 bits is used to create the en- cr yption material.
Field Description The function is activated with 0#2 . The function is disabled by default. Alive Check Select whether and how IPSec hear tbeats are used. A bintec IPSec hear tbeat is implemented to determine whether or not a Secur ity Association (SA) is still valid.
as a client: • As a ser v er the gat eway requires a proof of authorisation. • As a client the gat eway provides proof of author isation. In server mode multiple users can obtain authentication via XAuth, e.g . users of Apple iPhones. Authorisation is v erified either on the basis of a list or via a Radius Ser ver .
Field Description Description Enter a description for this XAuth profile . Role Select the role of the gat eway for XAuth authentication. P ossible values: • / (default value): The gate way requir es a proof of au- thorisation. • +2" : The gat ew ay pro vides proof of authorisation.
1 6.1 .5 IP P ools In the IP Pools menu a list of all IP pools for your configur ed IPSec connections is dis- played. If hav e set IP Addr ess Assignment 70 +$ ? / for an IPSec peer , you must define the IP pools from which the IP addresses are assigned.
1 6.1 .6 Options F ig. 1 19: VPN -> IPSec -> Options The VPN -> IPSec -> Options menu consists of the following fields: Fields in the Options Global Options menu Field Description Enable IPSec Select whether you want to activate IPSec. The function is activated with 0#2 .
Field Description IPSec Debug Lev el Select the priorit y of the syslog messages of the IPSec subsy s- tem to be recorded internally . P ossible values: • 0$- (highest pr iority) .
Field Description The function is disabled by default. Use Zero Cookies Select whether zeroed ISAKMP Cookies are to be sent. These are equivalent to the SPI (Secur ity P arameter Inde x) in IKE proposals; as they are redundant, they are nor mally set to the v alue of the negotiation currently in progr ess.
Field Description The function is enabled by default. Deactivat e this function if you do not wish to send the peer the cer tificat es of all lev els (from your lev el to the CA lev el). Send CRLs Select whether CRLs are to be sent during IKE (phase 1).
F ig. 1 20: VPN -> L2TP -> T unnel Prof iles -> New The VPN -> L2TP -> T unnel Prof iles -> New menu consists of the follo wing fields: Fields in the T unnel Prof iles Basic Par ameters menu Field Description Description Enter a description for the current prof ile.
Field Description Remot e Hostname Enter the host name of the LNS or LAC . • LA C: Defines the value f or Local Host Name of the LNS (contained in the SCCRQs receiv ed from the LNS and the SCCRPs receiv ed from the LAC).
Field Description UDP Destination P or t Enter the destination por t number to be used for all calls based on this prof ile. The remot e LNS that receiv es the call must mon- itor this por t on L2TP connections. P ossible values are ... ' .
Field Description The av ailable values are to , the default value is . Dat a Pac kets Sequence Numbers Select whether your device is to use sequence numbers for data packets sent through a tunnel on the basis of this prof ile. The function is not currently used.
F ig. 1 21: VPN -> L2TP -> Users -> New The VPN -> L2TP -> Users -> New menu consists of the following fields: Fields in the Users Basic Par ameters menu Field Description Description Enter a name for uniquely identifying the L2TP par tner .
Field Description P ossible values: • .8 (def ault value): If you select this option, the L2TP par tner is configur ed so that it accepts L2TP tunnels and rest ores the encapsulated PPP traf fic flo w .
Field Description Y our de vice dynamically assigns an IP address to the remote terminal. • >" 7 : Only for Connection T ype = .
Field Description Block af ter connection f ailure for Enter the wait time in seconds befor e the device should tr y again af ter an at tempt to set up a connection has failed. The de- f ault value is ' . A uthentication Select the authentication protocol for this L2TP par tner .
Field Description The function is activated with 0#2 . The function is disabled by default. P rior itize TCP ACK P ackets Select whether the TCP download is to be optimised in the e vent of intensiv e TCP upload. This function can be specially applied f or asymmetrical bandwidths (ADSL).
Field Description a connection already exists to the L2TP par tner . DNS Negotiation Select whether your device receiv es IP addresses for Pr imary DNS Server , Secondar y DNS Server , primary WINS and sec- ondary WINS from the L2TP par tner or sends these to the L2TP par tner .
Field Description tion UDP destination port ) as the local source por t for the L2TP connection. The function is activated with ; . The function is disabled by default.
1 6.3.1 .1 New Choose the New but ton to set up new GRE tunnels. F ig. 1 23: VPN -> GRE -> GRE T unnels The VPN -> GRE -> GRE T unnels menu consists of the f ollowing fields: Fields in the GRE T unnels Basic Par ameters menu Field Description Description Enter a description for the GRE tunnel.
Field Description Rout e Entr ies Define other routing entr ies for this connection par tner . Add a new entr y with Add . • 6" 7 : IP address of the destination host or net work. • 8" : Netmask of Remote IP Ad dress .
Chapter 1 7 F ire wall The Stat eful Inspection Fire wall (SIF) pro vided f or bintec gat ew ays is a powerful securit y f eature . The SIF with dynamic packet filtering has a decisive advantage over .
NA T One of the basic functions of NA T is the translation of the local IP addresses of your LAN into the global IP addresses you are assigned by your ISP and vice ver sa. All connections initiated ext er nally are first block ed, i.e. e very pack et your de vice cannot assign to an e xist- ing connection is rejected.
1 7 .1 .1 F ilter R ules The def ault behavior with Action = consists of t wo implicit filter r ules: If an incom- ing pack et can be assigned to an existing connection and if a suitab le connection is e xpec- ted (e.g. such as an af filiated connection of an existing connection), the pack et is allowed.
1 7 .1 .1 .1 New Choose the New but ton to set up new parameter s. F ig. 1 25: Fir ewall -> Policies -> Filter Rules -> New The F ire wall -> Policies -> Filter Rules -> New menu con.
Field Description The v alue - means that neither the destination interf ace nor the destination address is check ed. Ser vice Select one of the preconf igured ser vices to which the packet to be filt ered must be assigned. The e xtensiv e range of services configured ex works includes the f ollowing: • 4 • 40.
Field Description If QoS is not activated for this policy , bear in mind that the data cannot be prioritised on the sender side either . A policy for which QoS has been enabled is also set for the fir e- wall.
F ig. 1 26: Fir ewall -> Policies -> QoS -> New The F ire wall -> Policies -> QoS -> New menu consists of the following fields: Fields in the QoS Conf igure QoS Interface menu Field Description Interf ace Select the interf ace on which bandwidth management is to be carried out.
Field Description f or the service specified under Services . is enter ed by de- f ault. • F ixed : Select whether the bandwidth defined in Bandwidth can be e xceeded in the longer term. By activating this field, you specify that it cannot be e xceeded.
Field Description Logged Actions Select the fir ew all sy slog lev el. The messages are output together with messages from other subsy stems. P ossible values: • 22 (def ault value): All fire wall activities are displayed. • 9- : Only reject and deny ev ents are shown, see "Action".
1 7 .2 Int erfaces 1 7 .2.1 Groups In the F ire wall -> Interfaces -> Groups menu, a list of all configured interf ace groups is shown. Y ou can gr oup together the interf aces of your device . This makes it easier to configure fir e- wall r ules .
1 7 .3 A ddr esses 1 7 .3.1 Addr ess List In the F ire wall -> Addr esses -> Addr ess List men u, a list of all configured addresses is shown. 1 7 .
Field Description • 6$ : Enter an IP address range with a star t and end address . Addr ess / Subnet Only if Addr ess T ype = 5 #" Enter the IP address of the host or a net work address and the relat ed netmask.
The F ire wall -> Addresses -> Groups -> New menu consists of the following fields: Fields in the Groups Basic Par ameters menu Field Description Description Enter the desired descr iption of the address group . Selection Select the members of the gr oup from the availab le Ad dresses .
Field Description Description Enter an alias for the ser vice you want to configure. P rot ocol Select the prot ocol on which the ser vice is to be based.
Field Description • 01 • 4 0; • " #2 • 4 "! • 4 "! 6!2- • 7.
F ig. 1 32: Fir ewall -> Ser vices -> Groups -> New The F ire wall -> Ser vices -> Groups -> New menu consists of the follo wing fields: Fields in the Groups Basic Par ameters menu Field Description Description Enter the desired descr iption of the ser vice gr oup.
Chapter 1 8 Local Ser vices This menu off ers ser vices for the f ollowing application areas: • Name resolution (DNS) • Locating of dynamic IP addresses using a DynDNS provider • C onfiguration .
F or local applications, the IP address of your device or the general loopback address (1 27 .0.0.1) can be enter ed as the global name ser v er . Y our de vice can also receive the global name ser v ers dynamically and transf er them dy - namically if necessar y .
1 8.1 .1 Global Set tings F ig. 1 33: Local Services -> DNS -> Global Settings The menu Local Ser vices -> DNS -> Global Set tings consists of the following fields: Fields in the Global Set tings Basic Par ameters menu Field Description Domain Name Enter the standard domain name of your device.
Field Description Secondar y DNS ser ver . WINS Server P rimar y Secondar y Enter the IP address of the first and, if necessar y , alter nativ e global Windo ws Internet Name Ser ver (=WINS) or NetBIOS Name Server (=NBNS).
Field Description The def ault v alue is & . Maximum TTL for Neg- ative Cache Entries Enter the value set to which the TTL is to be set in the case of a negativ e dynamic entr y in the cache.
1 8.1 .2 Static Hosts In the Local Ser vices -> DNS -> Static Hosts menu, a list of all configur ed static hosts is shown. 1 8.1 .2.1 New Choose the New but ton to set up new static hosts.
Field Description Entries with spaces are not allowed. Response In this entr y , select the type of response to DNS requests . P ossible values: • 8$"/ : A DNS request for Name is ans wered with a negativ e response. • "/ (default value): A DNS request for Name is ans wered with the associated IP Addr ess .
F ig. 1 35: Local Services -> DNS -> Domain Forw arding -> New The Local Services -> DNS -> Domain Forw arding -> New menu consists of the follow - ing fields: Fields in the Domain F orwarding Forw arding Par ameters menu Field Description F orwar ding Select whether a host or domain is to be f orwar ded.
Field Description If a name is entered without a full stop , once you confirm with OK " <Default Domain>. " " is added. F orwar d to Select the forw arding destination requests to the name defined in Host or Domain .
F ig. 1 36: Local Services -> DNS -> Cache Y ou can select individual entr ies using the checkbo x in the corresponding line, or select them all using the Select All but ton. A dynamic entry can be conv er ted to a static entr y by marking the entr y and confir ming with Set to Static .
1 8.1 .5 Statistics F ig. 1 37: Local Services -> DNS -> Statistics In the menu Local Ser vices -> DNS -> Statistics , the following statistical values are shown: Fields in the Statistics .
Field Description Ser v er F ailures Shows the number of requests that were not answer ed by any name server (either positiv ely or negativ ely). 1 8.2 HTTPS Y ou can operat e the user interf ace of your device from any PC with an up-to-date Web bro wser via an HTTPS connection.
Field Description HTTPS TCP P or t Enter the por t via which the HTTPS connection is to be estab- lished. P ossible values are to ' . The def ault v alue is &&' . Local Certificate Select a cer tificat e that you want to use for the HTTPS connec- tion.
1 8.3.1 DynDNS Update In the Local Ser vices -> DynDNS Client -> DynDNS Update menu, a list of all configur ed DynDNS registrations is shown that are to be updated. 1 8.3.1 .1 New Choose the New but ton to set up fur ther DynDNS registrations to be updated.
Field Description P asswor d Enter the passw ord as regist ered with the DynDNS provider . P ro vider Select the DynDNS provider with which the above data is re- gister ed. A choice of DynDNS pro viders is already available in the uncon- figur ed state and their protocols are suppor ted.
1 8.3.2.1 New Choose the New but ton to set up new DynDNS pro viders. F ig. 1 40: Local Services -> DynDNS Client -> DynDNS Pro vider -> New The Local Services -> DynDNS Client -> DynDN.
Field Description The def ault v alue is . P rot ocol Select one of the protocols implemented. P ossible values: • 9-98 (default value) • "" 9-98 • <9 • =8 • 9M8 • >97=4?.
1 8.4.1 DHCP Pool T o activate your device as a DHCP ser v er , you must fir st define IP address pools from which the IP addresses are distributed to the requesting clients. In the Local Ser vices -> DHCP Server -> DHCP P ool menu, a list of all configur ed IP ad- dress pools is shown.
Field Description When a DHCP request is receiv ed ov er this Interface , one of the addresses from the address pool is assigned. IP Addr ess Range Enter the first (first field) and last (second field) IP address of the IP address pool.
Field Description DHCP Options Specify which additional data is forwar ded to the DHCP client. P ossible values f or Option : • 4 / (default value): Enter the IP address of the time server to be sent to the client. • 98 / : Enter the IP address of the DNS ser ver to be sent to the client.
F ig. 1 42: Local Services -> DHCP Ser v er -> IP/MA C Binding -> New The Local Services -> DHCP Ser v er -> DHCP Binding -> New menu consists of the f ol- lowing fields: Fields in t.
F ig. 1 43: Local Services -> DHCP Ser v er -> DHCP Relay Settings The Local Ser vices -> DHCP Server -> DHCP Relay Settings menu consists of the fol- lowing fields: Fields in the DHCP Rel.
1 8.5.1 Schedule In the Local Ser vices -> Scheduling -> Time Schedule menu, a list of all scheduled tasks is shown. 1 8.5.1 .1 New Choose the New but ton to set up new tasks.
Field Description • 6#" / (default value): Y our device is rebooted. • "/" " : The interf ace defined in the Select Interface field is activat ed.
Field Description Source = =44 / Enter the name of the HTTP server from which you wish to download a configuration file. TFTP Ser ver Only if Select action = 4$$ $" #! Enter the IP address of the TF TP ser ver to which you wish to transf er a configuration file.
Field Description P ossible values f or Condition Settings with Condition T ype = 9- "1 "1 : ... ' . Star t Time Enter the time from which the initiator is to be activat ed. Activa- tion is carr ied on the next scheduling inter v al.
Fields in the Options Scheduling Options menu Field Description Schedule Interval Select whether the schedule interval is to be enabled for the in- terf ace. Enter the interval in seconds dur ing which the syst em checks whether there are planned tasks.
F ig. 1 46: Local Services -> Sur v eillance -> Hosts -> New The Local Services -> Sur v eillance -> Hosts -> New menu consists of the follo wing fields: Fields in the Hosts Host Paramet ers menu Field Description Group ID Select an ID for the group of hosts whose availability is to be monitor ed by your device .
Field Description uses as the source address of the pack et sent to the host to be monitor ed. P ossible values: • "" (def ault value): The IP address is determined automaticall y . • ! : Enter the IP address in the adjacent input field.
1 8.6.2.1 Edit/New Choose the icon to edit existing entries. Choose the New but ton to set up monitoring for other interf aces. F ig. 1 47: Local Services -> Sur v eillance -> Interfaces -> N.
Field Description The action is applied to the Interf ace(s) selected in Interface . P ossible values: • 0#2 (default value): Activation of interf ace(s) • 9 #2 : Deactivation of interf ace(s) Interf ace Select the interf ace(s) f or which the action defined in Interface Action is to be perf or med.
1 8.6.3.1 New Click on the New but ton to configure new limits. F ig. 1 48: Local Services -> Sur v eillance -> T emperat ure -> New The Local Services -> Sur v eillance -> T emperat ur.
Field Description Interf ace Select the interf ace via which the action is to be carried out. P ossible values: • 62- (default value): The over stepping of the limit is coupled with the relay . • @7"A : On ov erst epping the temperatur e limit, the se- lected interf ace is tur ned off .
Fields in the Ping Generat or Basic Par ameters menu Field Description Destination IP Addr ess Enter the IP address to which the ping is automatically sent. Source IP Addr ess Enter the source IP address of the outgoing ICMP echo request pack ets. P ossible values: • "" : The IP address is determined automatically .
the 22 option to quer y all interf aces. The current discov er y status is displayed for each individual interf ace under Discov er y Status. 8 means that discovery is not active . 9 /- is displayed when discovery is currentl y being carried out.
F ig. 151: Local Ser vices -> F unkwerk Discov ery -> Device Discov ery -> The Local Services -> F unkwerk Discovery -> Device Discov er y -> menu consists of the f ollowing fields: Fields in the Device Discovery Basic Par ameters Field Description Interf ace The v alue of this field can only be read.
Field Description A uthentication P asswor d Y ou must enter the administrat or passwor d for the access point, otherwise you cannot carr y out the configuration operation. Last W rite Result The value of this field can only be read. Displays the result of the last configuration operation.
1 8.7 .2 Options In this menu, you can grant permission for your de vice to be discov ered by other bintec de vices using the funkwer k Discovery prot ocol and to be configur ed by means of this.
The bintec HotSpot Solution consists of a bintec gate way installed onsite (with its own WLAN access point or additional connected WLAN device or wired LAN) and of the Hot- spot server , centrally located at a computing centre. The operator account is administer ed on the server via an administration terminal (e.
Note Activ ation may requir e 2-3 business days. Access data f or gate way conf iguration RADIUS Server IP 62.245.1 65.180 RADIUS Server P asswor d Set by F unkwerk Enterpr ise Communications GmbH Dom.
F ig. 153: Local Ser vices -> Hotspot Gatew ay -> Hotspot Gate way -> Y ou can use the Enabled option to enable or disable the corresponding entr y . 1 8.8.1 .1 Edit/New In the Local Ser vices -> Hotspot Gatew ay -> Hotspot Gatew ay -> menu, you config- ure the Hotspot net works.
F ig. 154: Local Ser vices -> Hotspot Gatew ay -> Hotspot Gate way -> The Local Services -> Hotspot Gatew ay -> Hotspot Gatew ay -> menu consists of the f ollowing fields: Fields in the Hotspot Gate way Basic P aramet ers menu Field Description Interf ace Choose the interf ace to which the Hotspot LAN or WLAN is con- nected.
Field Description Domain at the HotSpot Ser v er Enter the domain name that you used when set ting up the Hot- Spot server f or this customer . The domain name is requir ed so that the Hotspot ser ver can distinguish bet ween the diff erent cli- ents (customer s).
Fields in the menu Adv anced Settings Field Description Tic ket T ype Select the tick et t ype. P ossible values: • 31 : Only the user name must be enter ed. Define a de- f ault pass word in the input field. • , 5 (def ault value): User name and pass- wor d must be entered.
F ig. 155: Local Ser vices -> Hotspot Gatew ay -> Options The Local Ser vices -> Hotspot Gatew ay -> Options menu consists of the follo wing fields: Fields in the Options Basic Paramet ers.
Chapter 1 9 Maint enance This menu provides you with numerous functions for maintaining your device. It fir stly pro vides a menu for testing availability within the net work. Y ou can manage your sy stem configuration files. If more recent syst em software is availab le, you can use this menu to in- stall it.
1 9.1 .2 DNS T est F ig. 157: Maintenance -> Diagnostics -> DNS T est The DNS test is used to check whether the domain name of a par ticular host is correctly re- solv ed. The Output field shows the DNS test messages. The DNS test is star t ed by enter - ing the domain name to be test ed in DNS Addr ess and clicking on the Go but ton.
Y ou use the traceroute test to display the route to a par ticular address (IP address or do- main name), if this can be reached. The Output field shows the tracer oute test messages. The tracer oute test is star ted by entering the address to be test ed in T racer oute Ad dress and clicking on the Go but ton.
stor ed in the working memor y (RAM). The contents of the RAM are lost if the device is s witched of f. So if you modify your configuration and want to keep these changes f or the ne xt time you star .
F ig. 159: Maintenance -> Softw are & Configur ation -> Options The Maintenance -> Softw are & Configur ation -> Options menu consists of the follo wing fields: Fields in the Options Curr ent Installed Softw are menu Field Description BOSS Shows the current software version loaded on your device .
Field Description • 7!" $" : Under Filename select a config- uration file you want to impor t. Note: Click Go to load the file under the name #" in the flash memor y for the device . Y ou must restar t the device to enable it.
Field Description field. Filename Only for Action = 7!" $" , 7!" 2 $$ , ,!" - " " . Enter the path and name of the file or select the file with Browse.
Field Description tion file . 1 9.3 R eboot 1 9.3.1 Sy stem Reboot In this menu, you can tr igger an immediate reboot of your device . Once your sy stem has rest ar ted, you must call the F unkwerk Configur ation Interface again and log in. P ay att ention to the LEDs on your de vice.
Chapter 20 Exter nal Reporting In this sy stem menu, you define what sy stem prot ocol messages are saved on which com- puter s, and whether the syst em administrat or should receiv e an e-mail f or cer tain ev ents. Inf or mation on IP data traf fic can also be saved--depending on the individual interf aces.
In the Exter nal Reporting -> Sy slog -> Sy slog Ser v ers menu, a list of all configur ed sys- tem log ser v ers is shown. 20.1 .1 .1 New Choose the New but ton to set up new syslog ser v ers .
Field Description • $ • 8" • 7" (default value) • 9#$ (lowest pr iority) Sy slog messages are only sent to the host if they have a higher or identical priorit y to that indicated, i.
20.2 IP Accounting In modern net works, inf or mation about the t ype and number of data packets sent and re- ceived ov er the net work connections is of ten collected for commercial reasons . This inf or m- ation is e xtremely impor tant f or Internet Ser vice P rovider s that bill their customers by data volume .
20.2.2 Options In this menu, you configure general set tings f or IP Accounting . F ig. 163: External Reporting -> IP Accounting -> Options In the Exter nal Reporting -> IP Accounting -> Options menu you can set the Log F ormat of the IP accounting messages.
Field Description %p P ack ets sent %o Oct ets sent %P P ackets receiv ed %O Octets receiv ed %s Serial Number for accounting message %% % By def ault, the following format instructions are enter ed in the Log F ormat field. 7804% OO"OOO%O5O A O7%O65OO!OOO<)O * 20.
Field Description Aler t Ser vice Enable or disable the function. Sender E-Mail Addr ess Ent er the mail address to be enter ed in the sender field of the E- mail. Maximum Messages per Minut e Limit the number of outgoing mails per minute . P ossible values are to , the default value is .
Field Description The def ault v alue is seconds. 20.3.2 E-mail Alert Recipient In the E-mail Aler t Recipient menu, a list of syslog messages is displayed.
Field Description enter ed theref ore usually contains wildcards. T o be informed of all sy slog messages of the selected lev el, just enter "*". Se verity Select the se verit y at which the string configured in the Match- ing String field must occur to trigger an E-mail aler t.
Every SNMP management sy stem contains an MIB. SNMP can be used to configure , con- trol and administrate various net work components from one sy stem. Such an SNMP tool is included on your device: the Configur ation Manager . As SNMP is a standard protocol, you can use any other SNMP managers , e.
Field Description SNMP T rap Broadcast- ing Select whether the transfer of SNMP traps is to be activat ed. Y our de vice then sends SNMP traps to the LAN's broadcast ad- dress . The function is activated by choosing 0#2 . The function is disabled by default.
F ig. 167: External Reporting -> SNMP -> SNMP T r ap Hosts -> New The Exter nal Reporting -> SNMP -> SNMP T rap Hosts -> New menu consists of the fol- lowing fields: Fields in the SNMP T rap Hosts Basic P arameters menu Field Description IP Addr ess Enter the IP address of the SNMP trap host.
IP address . One packet is sent per time interval, which can be adjusted individually to val- ues from 1 - 60 seconds. Up to 1 00 ph ysical and vir tual interf aces can be monitor ed, pro vided the packet size of 4096 bytes is not ex ceeded.
Field Description • 8 (default value): Deactivates the sending of inf ormation to the Activity Monitor . • 1- 2 : Only information about the phy sical interf aces is sent.
Chapter 21 Monit oring This menu contains information that enable you to locate prob lems in your net work and monitor activities, e.g. at your de vice's WAN interf ace. 21 .1 Int ernal Log 21 .1 .1 S yst em Messag es In the Monitor ing -> Internal Log -> Sy stem Messages men u, a list of all internally stored sy stem messages is shown.
Field Description No . Displays the serial number of the sy stem message. Dat e Displays the date of the record. Time Displays the time of the record. Le vel Display s the hierarch y lev el of the message. Subsy stem Display s which subsy stem of the device generated the mes- sage.
Field Description Remot e IP Address Displays the IP address of the remot e IPSec P eers. Remot e Net works Displays the currentl y negotiated subnets of the remote termin- al. Securit y Algor ithm Displays the encr yption algor ithm of the IPSec tunnel.
Field Description Remot e ID Shows the ID of the peer . Negotiation T ype Shows the ex change type. A uthentication Method Shows the authentication method. MTU Sho ws the current MTU (Maximum T ransf er Unit). Alive Check Shows the method for checking that the peer is reachable .
F ig. 1 72: Monitor ing -> IPSec -> IPSec Statistics The Monitor ing -> IPSec -> IPSec Statistics menu consists of the following fields: Field in the IPSec Statistics Licenses menu Field Description IPSec T unnels Shows the IPSec licenses currentl y in use ( In use ) and the maximum number of licenses usable ( Maximum ).
Field Description the tot al number of phase-2 SAs ( T otal ). Field in the IPSec Statistics Pack et Statistics menu Field Description T otal Shows the number of all processed incoming ( Incoming ) or outgoing ( Outgoing ) pack ets. P assed Shows the number of incoming ( Incoming ) or outgoing ( Outgo- ing ) pack ets forw arded in plain te xt.
F ig. 1 73: Monitor ing -> Interfaces -> Statistics Y ou change the state of the interf ace by pressing the but ton or but ton in the Action column. P ress the but ton to display the statistical data f or the individual interf aces in de- tail. V alues in the list Statistics Field Description No .
21 .4 WLAN 21 .4.1 WLAN1 In the Monitor ing -> WLAN -> WLAN1 menu, the current values and activities of the fir st interf ace are shown. F ig. 1 7 4: Monitoring -> WLAN -> WLAN1 V alues in the list WLAN1 Field Description mbps Displays the possible data rates on this wireless module.
Y ou can choose the Ad vanced but ton to go to an overview of more details. F ig. 1 75: Monitor ing -> WLAN -> WLAN1 -> Adv anced menu V alues in the list Adv anced Field Description # Displays the serial number of the list entry . Description Displays the description of the displayed value.
Description Meaning be transmit ted F rame transmissions without A CK receiv ed Displays the number of sent frames which which an ackno w- ledgement frame was not receiv ed. Duplicat e received MS- DUs Displays the number of MSDUs received in duplicate .
Field Description MA C Addr ess Shows the MAC address of the associated client. IP Addr ess Shows the IP Addr ess of the client. Up Time Shows the time in hours , minut es and seconds for which the cli- ent is logged in. Tx P ackets Shows the total number of packets sent.
F ig. 1 77: Monitor ing -> WLAN -> VSS -> <Connected client> -> V alues in the VSS <Connected client> list Field Description Client MA C Addr ess Shows the MAC Addr ess of the associated client. IP Addr ess Shows the IP address of the client.
Field Description • 1 5 – 25 dB good • 2 – 1 5 dB borderline • 0 – 2 dB bad. Dat a Rate mbps Shows the current transmission rate of data receiv ed by this cli- ent in mbps. The follo wing clock rat es are possible: IEEE 802.1 1b: 1 1, 5.5, 2 and 1 mbit; IEEE 802.
Field Description WDS Description Shows the name of the WDS link. Remot e MAC Shows the MAC address of the WDS link par tner . Up Time Shows the time in hours , minut es and seconds for which the WDS link is active. Tx P ackets Shows the total number of packets sent.
F ig. 1 79: Monitor ing -> WLAN -> WDS -> V alues in the WDS list Field Description WDS Description Shows the name of the WDS link. Remot e MAC Shows the MAC address of the WDS link par tner . Up Time Shows the time in hours , minut es and seconds for which the WDS link is active.
Field Description f or Tx Pack ets and Rx Pack ets . 21 .4.4 Bridge Links In the Monitor ing -> WLAN -> Bridge Links menu, the current values and activities of the bridge links are shown.
If requir ed, the T est link can be used to star t a link test. The link test pro vides all the data necessar y f or checking the quality of the bridge link. The link test also helps you to align the antennas. This option is only displayed if the link state is 0#2 .
Field Description bridge link in question is active . Tx P ackets Shows the total number of packets sent. Rx P ackets Shows the total number of pack ets received. Signal dBm Shows the receiv ed signal strength in dBm. Noise dBm Shows the receiv ed noise strength in dBm.
Field Description ent link in question is active. Tx P ackets Shows the total number of packets sent. Rx P ackets Shows the total number of pack ets received. Signal dBm Shows the receiv ed signal strength in dBm. Noise dBm Shows the receiv ed noise strength in dBm.
Field Description AP MA C Addr ess Sho ws the MAC address of the client link par tner . Up Time Shows the time in hours , minut es and seconds for which the cli- ent link in question is active. Signal dBm Shows the receiv ed signal strength in dBm. Noise dBm Shows the receiv ed noise strength in dBm.
Field Description MA C Addr ess Shows the MAC addresses of the associated bridge. P or t Shows the por t on which the br idge is active. 21 .5.2 sta<x> In the Monitor ing -> Bridges -> sta<x> menu, the current values of the bridges to the con- figur ed WLAN clients are shown.
21 .6 Hotspot Gate w ay 21 .6.1 Hotspot Gate way In the Monitor ing -> Hotspot Gatew ay -> Hotspot Gatew ay men u, a list of all connected hosts is shown. F ig. 186: Monitoring -> Hotspot Gatew ay -> Hotspot Gatew ay V alues in the list Hotspot Gatew ay Field Description User Name Displays the user's name.
21 .7 QoS In the Monitor ing -> QoS menu, statistics are displayed for all interf aces for which QoS has been configur ed. 21 .7 .1 QoS In the Monitor ing -> QoS -> QoS menu, a list of all interf aces is shown f or which QoS has been configur ed.
Index 1 93 # # 91 , 390 , 397 #1, #2, #3 1 1 9 A A CCESS_ACCEPT 1 02 A CCESS_REJECT 1 02 A CCESS_REQUEST 1 02 A CCOUNTING_ST ART 1 02 A CCOUNTING_ST OP 1 02 A CL Mode 161 , 203 Action 1 68 , 1 68 , 1 76 , 1 76 , 207 , 309 , 353 , 371 , 390 , 395 Activ e IPSec T unnels 76 Activ e Radio P rof ile 190 Activ e Sessions (SIF , R TP , etc.
Client Mode 1 44 Code 31 8 Common Name 1 17 Compr ession 97 Conf iguration Encr yption 371 Conf iguration Interface 91 Conf igured Speed / Mode 125 Conf ir m Admin Pass word 81 Connect ed 1 68 , 17 6 .
Duplicat e received MSDUs 397 Dynamic RADIUS Authentication 290 E E-mail 1 1 7 EAP P reauthentif ication 159 , 20 1 ED Threshold 1 96 Enable Discov er y Ser ver 359 Enable IPSec 289 Enable update 335 .
IP Addr ess Mode 257 , 261 , 298 IP Addr ess Range 185 , 339 IP address to use for DNS/WINS ser ver assignment 325 IP Addr ess/Netmask 1 33 IP Assignment P ool 271 IP Assignment P ool (IPCP) 298 IP Co.
Memor y Usage 7 6 Message 389 Message Compr ession 382 Message Timeout 382 Messages 391 Metric 21 1 Metric Of fset f or Activ e Interf aces 227 Metric Of fset f or Inactive Interf aces 227 Min. queue size 252 Min. Time P er iod for Active Scan 152 Min.
P or t Number 129 P or tforw ardings 217 P ositive Cache 325 PPP oE Ether net Interf ace 255 PPP oE Interf aces for Multilink 255 PPP oE Mode 255 PPTP Addr ess Mode 262 PPTP Inactivity 31 4 PPTP Inter.
R TT Mode (Realtime T raf fic Mode) 250 Rx Bytes 395 Rx Error s 395 Rx P ackets 395 , 396 , 398 , 400 , 40 1 , 403 , 404 , 405 , 406 S Scan channels 1 52 Scan Interval 1 52 Scan Threshold 1 52 SCEP UR.
Sy stem Admin P asswor d 81 Sy stem Date 7 6 Sy stem Logic 371 Sy stem Name 79 T T AC ACS+ Secret 1 08 TCP Inactivity 31 4 TCP K eepalives 97 TCP P or t 1 09 TCP -MSS Clamping 135 T elnet 95 T emperat.
W W alled Garden 363 W alled Garden URL 363 W alled Net work / Netmask 363 WDS Description 163 , 40 1 , 403 W eight 250 WEP K ey 1 - 4 1 63 WEP K ey 1 -4 1 59 , 166 , 20 1 Wildcar d 336 Wildcar d MAC .
An important point after buying a device Funkwerk WI2040n (or even before the purchase) is to read its user manual. We should do this for several simple reasons:
If you have not bought Funkwerk WI2040n yet, this is a good time to familiarize yourself with the basic data on the product. First of all view first pages of the manual, you can find above. You should find there the most important technical data Funkwerk WI2040n - thus you can check whether the hardware meets your expectations. When delving into next pages of the user manual, Funkwerk WI2040n you will learn all the available features of the product, as well as information on its operation. The information that you get Funkwerk WI2040n will certainly help you make a decision on the purchase.
If you already are a holder of Funkwerk WI2040n, but have not read the manual yet, you should do it for the reasons described above. You will learn then if you properly used the available features, and whether you have not made any mistakes, which can shorten the lifetime Funkwerk WI2040n.
However, one of the most important roles played by the user manual is to help in solving problems with Funkwerk WI2040n. Almost always you will find there Troubleshooting, which are the most frequently occurring failures and malfunctions of the device Funkwerk WI2040n along with tips on how to solve them. Even if you fail to solve the problem, the manual will show you a further procedure – contact to the customer service center or the nearest service center
