User Guide Software Version: 1.3.2 January 2013 Document Version 1.3.2.GA
FCC Statement Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Classs B digital device, pursuant to Part 15 of the FCC Rules. These limits are designedd to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interferencee to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one of the following measures: Reorient or relocate the receiving antenna. Increase the separation between the equipment and receiver. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. Consult the dealer or an experienced radio/tv technician for help. FCC Caution: Any changes or modifications not expressly approved by the party responsible for compliance could void the user s authority to operate this equipment. This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This devicee may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. For product available in the USA/Canada market, only channel 1~ 11 can be operated. Selection of other channels is not possible. This device and its antenna(s) must not be colocated or operated in conjunction with any other antenna or transmitter. IMPORTANT NOTE: FCC Radiation Exposure Statement: This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 20cm between the radiator & your body. Copyright Wavion Wireless Networks, an Alvarion Ltd Company, 2012 Copyright 2013 Alvarion Ltd. All rights reserved. The material contained herein is proprietary, privileged, and confidential and owned by Alvarion or its third party licensors. No disclosure thereof shall be made to third parties without the express written permission of Alvarion Ltd. Alvarion Ltd. reserves the right to alter the equipment specifications and descriptions in this publication without prior notice. No part of this publication shall be deemed to be part of any contract or warranty unless specifically incorporated by reference into such contract or warranty. Limitation of Liability: (a) Alvarion shall not be liable to the purchaser or to any third party, for any loss of profits, loss of use, interruption of business or for any indirect, special, incidental, punitive or consequential damages of any kind, whether arising under breach of contract, tort (including negligence), strict liability or otherwise and whether based on this agreement or otherwise, even if advised of the possibility of such damages. (b) To the extent permitted by applicable law, in no event shall the liability for damages hereunder of Alvarion or its employees or agents exceed the purchase price paid for the product by purchaser, nor shall the aggregatee liability for damages to all parties regarding any product exceed the purchase price paid for that product by that party (except in the case of a breach of a party s confidentiality obligations). WBSn2400 and WBSn2450 ii
Contents Contents 1 Introduction... 7 2 Installation... 9 2.1 2.2 PreInstallation Checklist... 9 Installation and Setup... 15 2.2.1 PreInstallation Connecting to the Data Port... 15 2.2.2 Installing the WBSn base station...... 17 2.2.3 Mounting... 18 2.2.4 Connecting and Sealing antennas... 18 2.3 2.4 2.5 Wind Loading Considerations... 19 Accessing the Alvarion Management Interface......... 19 Automatic Channel Selection screen............ 20 3 WBSn Set up and Management... 21 3.1 Status... 21 3.1.1 Checking System Setup... 21 3.1.2 VAPs... 22 3.1.3 Wireless Associations... 22 3.1.4 Radio Status Parameters... 23 3.2 Configuration... 24 3.2.1 System Setup... 24 3.2.2 IP Management... 24 3.2.3 Specifying the Time of the Base Station Unit... 25 3.2.4 Specifying the Location of the Base Station Unit... 26 3.2.5 Setting Management VLAN... 26 3.3 Wirelesss Interfacee... 27 3.3.1 Virtual AP (VAP)... 27 3.3.2 QoS (Quality of Service) Packet Priority... 28 WBSn2400 and WBSn2450 iii
Contents 3.4 Security... 29 3.4.1 Authentication... 29 3.4.1.1 EAP for GSM Subscriber Identity Module (EAPSIM)... 29 3.4.1.2 Unique Enhancements for Open Security Sessions...... 30 3.4.2 Encryption Methods... 30 3.4.3 Security, Authentication, Encryption Modes and Maximum Associations... 30 3.4.4 Radius Accounting...... 30 3.5 Restricting access to the wireless network... 32 3.5.1 MAC Access List... 32 3.5.2 Radio Configuration... 32 3.5.2.1 Manual RTS Control... 33 3.5.2.2 Long range... 33 3.6 3.7 3.8 Wirelesss System Mode... 34 Automatic Channel Selection... 35 Operating in Bridge Mode... 36 3.8.1 Configuringg Network IP Configuration... 37 3.8.2 Bridge configuration... 38 3.8.2.1 Tagging VLAN............... 38 3.8.2.2 WDS... 39 3.8.3 Mapping VLANs... 39 3.9 3.10 3.11 3.12 Router Mode... 39 Web Authentication... 43 Wirelesss Client Isolation... 46 Configuring the Ethernet Interface... 48 4 Administration... 49 4.1.1 Management... 49 4.1.1.1 SNMP Communities... 49 4.1.2 Users... 50 4.1.3 Firmware... 50 WBSn2400 and WBSn2450 iv
Contents 4.1.3.1 Switching to the Upgradedd Firmware Version... 52 4.1.3.2 Using the Rollback Procedure... 52 4.1.4 Diagnosticss... 53 4.1.5 Configuration files... 54 4.1.6 Log... 54 Appendix A. Troubleshooting... 55 A.1. A.2. System Components... 55 Basic Troubleshooting...... 55 A.2.1. LED Descriptions... 56 A.2.2. Reset capability... 56 A.3. Advanced Troubleshooting: Rescue Mode... 56 A.3.1. Upgrading Firmware from Rescue Mode...... 57 Appendix B. Appendix C. Frequently Asked Questions... 58 Hardware Specification... 61 C.1. C.2. Hardware Specification: WBSn2400............ 61 Hardware Specification: WBSn2450............ 62 Appendix D. POE Injector Unit Instructions... 63 D.1. D.2. A/C PoE Injector (MST variety),... 63 DC PoE Injector:... 63 D.2.1. WPI48DC1G DC PoE Injector... 63 D.2.1.1. Package content:... 63 D.2.1.2. Product features and specifications... 63 D.2.1.3. Mechanical:... 64 D.2.1.4. Operation Environment... 64 D.2.2. WPI3X48DC1G Triple Passive DC PoE Injector... 65 D.2.2.1. Product Features and Specifications... 65 D.2.2.2. Mechanical:... 65 D.2.2.3. Operational Environment... 65 WBSn2400 and WBSn2450 v
Contents D.2.2.4. Installing the WPI3X48DC1G DC POE... 65 Appendix E. Glossary... 67 WBSn2400 and WBSn2450 vi
1 Introduction WBSn base stations combine Alvarion s true twoway 802.11n Beamforming and interference immunity technologies together with 3x3:33 MIMO, and deliver best capacity and coverage in all environments. The spatially adaptive Beamforming signals travel in different propagation paths, and are coherently combined at the receiver s antenna. The Beamforming is combined with a unique High Gain Diversity Polarized (HGDP) antenna array for maximum performance, and increases coverage by up to 50%, enabling NLOS connectivity, indoor signal penetration, and significant interference suppression. WBSn2450 concurrently supports both 2. 4 and 5 GHz delivering aggregated capacity of 900Mbps. The 5 GHz is configurable for backhaul as well as access. Utilizing a decade of outdoor WiFi experience, Alvarion s Interference Immunity Suite includes: Beamforming, with its inherent ability to suppress interference The Dynamic Interference Handling (DIH) algorithm, that continuously optimizes receiver s parameters according to varying noise levels The Automatic Channel Selection (ACS) algorithm, that automatically online identifies, selects and utilizes the best operating channel selection The Alvarion (Wavion) Rate Adaptation (WARA) which enables optimal rate selection in outdoor environments with high interference Down view Tilted Antenna (DTA) and sector antenna abilities to reject noise out of their fieldsof WBSn base stations are carrier grade, ruggedized IP68 rated units, designed to provide the highest reliability, quality of service, security and manageability. WBSn base stations come with a complete set of FCAPS management tools. WBSn base stations comprising rich embedded networking capabilities, including Routing and a fully integrated Access Controller, for flexible service planning and reducedd costs. WBSn is designed to be environmentallyfriendly with low power consumption, fewer sites to power, aesthetic smart design, and green standard compliance. With fewer sites required per covered area, highest network reliability and enhanced service options, WBSn provides up to 50% savings of CAPEX and OPEX and the fastest ROI. 7
WBSn24000 Key Benefits: Exceptional coverage, range, throughput, network capacity, scalability, and reliability Excellent building penetration Uniform coverage and enhanced nonlineofand sight operation High interference resilience Enhanced mobility support Simple deployment and low infrastructure operating costs Full compatibility with standardd 802.11 b/g/n clients Small form factor and easy to deploy Low power consumption Robust outdoor design, IP68 rated Simple deployment and low infrastructure and operating costs WBSn2450 Key Benefits: Exceptional coverage and NLOS performances Best indoor signal penetration Concurrent support for 2.4 and 5 GHz Up to 900Mbps capacity Up to 512 concurrent users Unique interferencee immunity suite Full compatibility with standardd 802.11 a/b/g/n clients Small form factor and easy to deploy Low power consumption Robust outdoor design, IP68 rated Simple deployment and low infrastructure and operating costs 8
2 Installation This document is intended to help you set up and configure your WBSn2400 or your WBSn2450 base station. Unless specified otherwise, the use of the product name WBSn refers to all WBSn2400 and WBSn2450 base stations. 2.1 PreInstallation Checklist WBSn2400O WBSn2400O base station unit (Omni) PoE injector unit (AC or DC) 3 antennas Postclamp Two steel bands 2 screws, each with attached spring and flat washers Steel extraction key Iron security cable Waterproof sealing tape for IP68 (tape to cover the NType connectors and the lower part of the antennas for sealing) Plastic cap and cap cover WBSn2400S WBSn2400S unit (Sector) PoE injector unit (AC or DC) Postclamp Two steel bands 2 screws, each with attached spring and flat washers Steel extraction key Iron security cable Plastic cap and cap cover Check contents of package WBSn2450O WBSn2450SO WBSn2450OS WBSn2450O base station unit (Omni) PoE injector unit (AC or DC) 3 antennas Postclamp Two steel bands 2 screws, each with attached spring and flat washers Steel extraction key Iron security cable Waterproof sealing tape for IP68 (to be bound around the Ntype connector and antenna base) Plastic cap and cap cover 9
WBSn2450S WBSn2450S unit (Sector) PoE injector unit (AC or DC) Postclamp Two steel bands 2 screws, each with attached spring and flat washers Steel extraction key Iron security cable Plastic cap and cap cover Warning The WBSn2450 should only be installed using the antennas provided as part of the original package. Ensure that the USB port on the base station unit is properly sealed. Additional equipment and tools required for installation Ethernet cable (outdoor CAT5e 4pair data cable, with RJ45 connectors). Note: Maximum cable length 100 meters Ground cable, 10 AWG minimum Portable PC (for configurationn purposes) Lightning protection use the device recommended by Alvarion. See Lightning Protection. 2 6 diameter pole (on which to mount the unit) Extender (optional) Ensure a safe and secure environment Warning Follow these guidelines to ensure safe operation of the WBSn 2450 base station: Connect the PoE injector to the unit using only a straight Ethernet cable. Do not use crossed cables between the PoE injector and the unit! Do not touch or move the antennas while the unit is switched on. Make sure the antennas are connected when operating the radio or attempting to transmitt data, otherwise, the radio may be damaged. Do not hold the antenna close to or touching any exposed parts of the body, especially the face or eyes, while transmitting. The use of wireless devices on airplanes is governed by the Federal Aviation Administration (FAA). (US only) The use of wireless devices in hazardous locations is limited to the constraints posed by the safety directors of such environments. The use of wireless devices in hospitals is restricted to the limits set forth by each hospital. Do not operate a portable transmitter near unshielded blasting caps or in an explosive environment. The Alvarion WBSn2450 must be used only with Alvarionapproved components and antennas. Note: The Federal Communications Commission (FCC) with its action in ET Docket 968 has adopted a safety standard for human exposure to RF electromagnetic energy emitted by FCC certified equipment. Proper operation of the Alvarion WBSn according to the instructions found in this manual, results in user exposure that is substantially below the FCC recommended limits. 10
To ensure optimal performance for WBSn, select the location for the equipment using the following guidelines: The antenna should be directed towards the area intended to be covered, with maximum possible lines of sight for client locations. Generally speaking, the higher the placement of the antenna, the better the link quality achievable, however, the higher the installation the greater interference that the base station is exposed to. Consider best installation spot that maximizes coverage and minimizes interference. Two meters is the minimal recommendedd separation for Sector base station units (back to back). If omnidirectional units are in use, the minimum separation is 10 meters. The location of the unit should enable easy access for installationn and testing. When installing in locations where other devices exist that operate in the same frequency range, ensure that recommended distances are adhered to. For more information, see here. The ideal height at which a base station should be installed is a minimum of 3 meters above the rooftops of the buildings within the coverage zone. The omnidirectional unit should be installed at the highest point the pole. This is to ensure that there is no interference caused by the close proximity of the antenna to other objects. Where this is not possible, the unit should be kept at least 1 meter from the pole, using a horizontal bar. Keeping the maximum distance possible from an RF radiating source is recommended. Preparing the installation site Only experienced installation professionals who are familiar with local building and safety codes and are licensed, wherever applicable, by the appropriate government regulatory authorities, should install outdoor units and antennas. Warnings Important! This device should be installed in an area with restricted access. Do not modify the construction of this product. Modifying the operating frequency or enhancing the transmit output power through the use of external amplifiers or other equipment is illegal. This device is for outdoor or indoor use on the conditionn that operation of this device causes no harmful interference to authorized radio stations. This device shall not influence aircraft security and/ /or interfere with legal communications. If this device is found to cause interference, the operator of this equipment shall cease operating this device immediately. How to prepare the site: Ascertain the existence of potential posts or poles to which a base station could be attached. Consider the axis of the post, its placement, and whether extenders are required. Follow the appropriate electrical and building codes to ensure safe and durable wiring. The total length of the Ethernet cable connecting the unit to the network device (PC, switch, router, and so on) should not exceed 100 meters. Theree is no limitation on the length of the cable connecting the PoE to the unit, as long as the combined length of the cables from the network device through the PoE and to the unit does not exceed 100 meters. 111
How to ground the WBSn Note: The Grounding screw is located on the side panel of the outdoor unit. To connect the grounding cable: 1. Connect one end of a grounding cable to the grounding terminal and tighten the grounding screw firmly. 2. Remove the nut and star washers from the grounding screw. 3. Attach one star washer to the groundingg screw. 4. Attach #10 AWG bare copper wires with an M6 terminal ring to the grounding screw. 5. Attach the second star washer and tighten the nut. 6. Connect the other end of the groundingg cable to a good ground (earth) connection, (for example, a grounding rod). Connecting Antennas (for WBSn2400O, WBSn2450O, WBSn2450SO, WBSn2450OS) Note: The antennas should only be connected once the installation procedure has been successfully completed and prior to powering the unit. How to connect the antennas: Warnings Screw each of the three antennas into the three Ntype connectors on the WBSn base station unit. Warning! Do not screw in the antenna when holding its top section or you may damage the antenna. In order for the unit to work properly, all three antennas must be connected. Only connect the unit to the power supply once all the antennas are connected. Use caution when connecting the antennas. Undue haste can damage the unit. 12
Lightning Protection The following procedure describes how to correctly ensure that your device is protected against lightning. For the best protection, two instances of the lightning protection device should be used. The recommended device is PN: RW99240006, manufactured by RADWIN 1. Position one of the lightning protection devices as close to the building entrance as possible and connect it to the grounding bar of the building. 2. Position the second lightning protection device as close to the base station as possible and connect it to the tower/pole ground plate using a short 10 AWG cable. 3. Ensure that the tower/pole has a lightningg rod connected to the earth with a downconductor. Note: Use only shielded CAT5e/6 cables for the POE connection. 4. Ensure that the cable shield is firmly connected (soldered) to the RJ45 plug shield. Nonshielded cables or nonshielded RJ45 plugs will not provide any groundingg points or protect from static discharge or lightning strike For more detailed explanation of lightning protection techniques please refer to the Alvarion Lightningg Protection White Paper. Note: Lightning damage is not covered under the Alvarion Warranty. When correctly installed, the recommendations on this page offer you the best protection from the harmful effects of lightning. However, 100% protection is neither implied nor possible. Lightningg Protection Connection Diagram 13
Antenna Sealing The following procedure describes how to correctly seal the antennas against moisture. Caution It is important to carefully read this procedure and perform all the steps, to ensure maximal moisture protection. Use high quality sealing material to ensure IP68 compliant protection against dust and water. How to seal the antennas: 1. After the antenna is connected, use the supplied isolation tape to cover the NType connectors and the lower part of the antennas. 2. Cut 18 cm of the attached splicing tape. 3. Stretch and wrap the tape in an even, half overlapping manner around the antenna and NType connector. Cover this with a layer of vinyl plastic tape. Safety instructions and information Please ensure that you read and understand the following safety information. Ensure that you carefully read and follow all instructions in this manual, and heed all warnings. Warnings It is illegal to modify the construction of this product. Modifying the operating frequency or enhancing the transmit output power through the use of external amplifiers or other equipment is specifically disallowed by the "Telecommunications Act. There is a risk of personal injury or death if the WBSn antennas are close to electric power lines. By nature of the outdoor installation, you may be exposed to hazardous environments and high voltage. Use extreme caution when installing the system. Servicing is required when the apparatus has been damaged in any way. All servicing should be referred to qualified service personnel only. The base station must be properly grounded. Do not open the unit risk of electric shock. Any change or modification not expressly described in this manual or approved by the manufacturer could void your authority to operate this equipment. WBSn should only be installed using the antennas that were provided as part of the original package. A minimum distance of 40cm should be kept from the WBSn antenna when the system is in operation. To maintain Overvoltage (Installation) Category II, installl a suitable surge suppressor device in the branch circuit to limit expected transients to Overvoltage Category II values. The limits are based on IEC60664 and are also located in Table 2H of UL60950 (for mains 110V, the transient rating is 1500V). 14
2.22 Installation and Setup The following section describes the installation and configuration procedures for the WBSn base station. 2.2.1 PreInstallation Connecting to the Data Port The following describes how to apply power and data to the WBSn. Prior to connecting power to the WBSn, ensure that you have read and performed all instructions in the preinstallation checklist. The Alvarion WBSn is equipped with two ports. Use the ETH port to connect the PoE cable. The USB port is for engineering purposes only. Ensure that the USB port is properly sealed with a plastic cap. Please also note the following: You must always install an external grounding wire. Make sure you have completed groundingg before you connect power to the WBSn unit. Warnings Note: This is not a midspan powered device. Do not attempt to daisychain PoE devices. National Electrical Codes (NEC) Article 800 requires the use of an Agency Listed (UL/CSA) Building Entrance Protector for all power and communications cables entering a building. Article 800 is intended to protect the building and occupants from fires caused by transient voltage and current surges. Importantt Note: The gland base is attached to the WBSn unit and should not under any circumstances be fully removed. 1. 2. Ensure thatt the power is turned offf for the designated circuits. Twist the nut using a steel extraction key, or an equivalent tool, to give yourself access to the inner sleeve. 15
3. Remove the rubber bushing (inner sleeve) from the body of the gland. 4. Feed the shielded Category 5 Ethernet cable (appropriate for outdoor use) through the released nut and the rubber bushing. Note: Use a shielded RJ45 8pin modular plug to terminate the cables at the required length. 5. Crimp the cable and assemble the appropriate connector. 6. Connect the cable to the outdoor unit. 7. Push the rubber bushing firmly back into place inside the body of the gland. 8. Close the nut and tighten firmly, using a steel extraction key, or an equivalent tool, to ensure perfect sealing and IP68 compliance. 9. Connect the other end of the Category 5 cable to the OUT port of the PoE injector. 10. Connect one end of the network source cable to the IN port on the PoE injector, and the other end to the network. Note: The DC PoE image may differ in appearance. For more information, refer to the documentation included with the DC PoE package. 11. Connect the other end of the Category 5 Ethernet cable to the ETH port on the Alvarion WBSn. Note: Use a shielded RJ45 8pin modular plug to terminate the cables at the required length. 12. Close and firmly tighten the plastic cap, to ensure perfect sealing and IP68 compliance. Connect the network cable to the IN port of the PoE injector. Note: The above procedure must be conducted after every disconnection of the Ethernet cable from either ETH port on the WBSn unit or from the OUT port of the PoE injector. 16
Note: The Alvarion PoE provides power over 1Gbps Ethernet, meaning that there are no spare wires. All wires are used for power and data concurrently. Important: If you have an A/C MST PoE Injector, please refer to Appendix D. POE port RJ45 Pin Descriptions Pin Signal Color Description 1 BI_DA+ OrangeWhite Bidirectional pair A +, POE GND 2 BI_DA Orange Bidirectional pair A, POE GND 3 BI_DB+ GreenWhite Bidirectional pair B +, POE +55V 4 BI_DC+ Blue Bidirectional pair C +, POE +55V 5 BI_DC BlueWhite Bidirectional pair C, POE +55V 6 BI_DB Green Bidirectional pair B, POE +55V 7 BI_DD+ BrownWhite Bidirectional pair D +, POE GND 8 BI_DD Brown Bidirectional pair D, POE GND 2.2 2.2 Installing the WBSn base station Prior to performing the procedures described in this section, ensure that you have read all the information, and followed all instructions and safety precautions in the PreInstallation Checklist. To install WBSn: 1. Slide the steel bands into the appropriate side slots of the post clamp. Mounting Kit Post Clamp (plus halfextender*) * Half extender not included in shipment Note: For a thinner post, the steel bands should be threaded through the inner slots, and for a wider post, throughh the outer slots. 2. Attach the postclamp to the post, and close and tighten the steel bands, with torque of 3..8 lb unit should point on the horizontal plane prior to continuing with the installation. Once you have determined the correct direction, connect the extender to the post clamp, and proceed to ft (5.1 Nm). 3. If you are installing WBSn on a horizontal post, select the direction in which the base station Step 5. Note: The extender must be specified as an extra item when ordering the WBSn unit. 17
4. If you are installing the WBSn on a vertical post, attach the WBSn unit to the postclamp, with the screws and washers. Tighten the screws using a 13mm ratchet key with torque of 18.4 lb ft (25 Nm). Note: If you are installing either a Sector, SectorOmni, or OmniSector WBSn unit, see Mounting. Horizontally mounted WBSn attached with extender 5. Attach the WBSn base station unit (and connected extender) to the base station unit. 6. Tighten the bolts with torque of 18.4 lbft (25 Nm). As you tighten the screws, verify that the tilt and direction of the base station unit are correct for the coverage area required. Note: In an urban setting, with a highplaced installation, a slight downwards tilt (approximately 810 degrees) will help reduce noise and interference. 7. Thread the iron cable through the corner hole on the postclamp, and the middle hole on the WBSn unit, securing it with the Caribena provided. This will provide extra physical security for the unit.. 2.2.3 Mounting Sector, SectorOmni and OmniSector units support both pole and wall mounting, as shown in the following illustration. For best performancee for a Sector unit, the recommendation is to install using a horizontal mount, as it offers a wider range of directional adjustment. The following illustration shows sectoromni (or omnisector) units, however this issue also applies to Sector units. Max downwards tilt without extender Max downwards tilt with extender Wall mount 3º Pole mount 36º Wall mount 15º Pole mount 43º 2.2.4 Connecting and Sealing antennas If you are installing a WBSn unit with external antennas, you should connect and seal your antennas at this point, prior to connecting the WBSn unit to a power source. For information about these procedures, seee the sections Connecting Antennas and Sealing the Antennas. 18
2.3 Wind Loading Considerations The Alvarion WBSn weighs approximately eight kilograms, including all mounting hardware, with minor differences according to model. When the Alvarion WBSn is mounted on a pole, the sail area of the WBSn is approximately 0..11 m 2. The Alvarion WBSn can load a pole with a maximum load of 3400 Newton in wind conditions of 264 km/h (165 mph). You should evaluate the static and dynamic load bearing capabilities for each assembly and installation individually. 2.4 Accessing the Alvarion Management Interface The following procedure describes how to log in to the WBSn Entity Management System (EMS) interface, and from there enter the Setup Wizard, and further configuration information. Note: The WBSn interface requires that you have the latest version of Javaa Runtime Environment installed on your PC. 1. In an internet browser, enter the Management IP address of the WBSn unit in the URL navigation field. 2. Note: The default IP address of the unit is IP: http://192.168.1.1. Currently, Microsoft Internet Explorer, Chrome and Mozilla Firefox browsers are supported. 3. A login screen is displayed. Enter admin in the User Name field. Enter admin in the password field. Specify the language in which you wish to work. (Note: This field will be functional in a future release of WBSn.) 4. Click Connect. The Alvarion EMS screen is displayed. 5. Select the Setup Wizard option. 6. The Installation screen is displayed. Click the arrow in the bottom right corner of the screen to proceed to the Network Configurationn screen. 19
7. Complete the parameters, to set up your initial networking configuration. Note: Further configurationn parameters are available, and should be specified in order to complete your setup. For more information, see the section entitled Configuration. Parameter IP address Mask Gateway IP Method VAP Name Security mode Description and value The current IP addresss of the unit The current subnet mask used to establish the broadcast domain. The default mask of the unit is 255.255.255.0. The current IP addresss of the default gateway. Select Manual or DHCP The default VAP name string to be used as the SSID string Specify the required WiFi security protocol for the VAP 2.5 Automatic Channel Selection screen The Automatic Channel Selection utilizes an embedded algorithm to scan for the best channel with which your base station can work, ensuring minimal interference, optimal capacity, and maximum performance. Note: You can only scan for one band at a time. To scan for both the 2.4 and 5 GHz bands, you need to repeat the process. 1. Click Press to start ACS scan. The scan begins, and a progress indicator is displayed, showing the percentage of completion. 2. When the scan is complete (after approximately five minutes), the button label changes to ACS done. 3. Navigate to Status => Radio => ACS Results to see the results. Separate tabbed pages are displayed for both the 2.4 GHz band, as well as the 5 GHz band. 4. You are requested to exit the Setup Wizard, by clicking Exit. 20
3 WBSn Set up and Management The WBSn EMS interface is comprised of three separate sections, that each relate to the key areas that you will use. The Status section enables you to check how the system is working, and whether the unit is configured correctly. The Configuration section enables you to configure the unit s wireless and Ethernet specifications according to your requirements. The Administration section enables comprehensive maintenance of the unit from the user s point of view, including specifying logs to be created, and creating and adding new users to the system. 3.1 Status This section enables you to check how your system is working, and whether the WBSn unit and software/firmware are configured correctly. There are 4 sections: Devicee indicates Uptime (duration of time from last power up), Date (yyyy/mm/dd) and Time Zone (Default: GMT) Network indicates Network Mode (Default: Bridge) Wireless Parameters indicates table of current VAPs Interfaces displays the Wireless and Ethernet tables Device Parameter Description and values Indicates the time duration since last powerup displayedd in the Uptime field. Date field: current date Time Zone: selected time zone (GMT +/ value) Network Wireless Parameters Displays the current Network Mode (Default: Bridge). Displays the information table about current VAPs (Security Mode, Hidden SSID, Band, # of Associations). Note: Below this table, the Total Associationss parameter is displayed. Interfaces Wireless Table displays information regardingg wireless drivers (WiFi Driver, MAC Address, Radio Status, Frequency, Channel, Channel Width); Ethernet Table displays information regardingg Name, MAC Address, Link, Speed, Duplex, and Negotiation. 3.1.1 Checking System Setup Navigate to Status = > System for an overall view of the system settings. Parameter Time Software Versions Resource Utilization Country Code Description and values Indicates the unified time of the unit, according to the NTP server, and your specific time zone. Displays the current ( and previous or alternative, where applicable) firmware version. For more information, see the Firmware section. Indicates the resources utilized by the system Displays the current country code according to the regulatory domain of which your base station is set to operate. 21
Parameter Hardware Information Description and values Indicates description, part names and serial numbers of the existing hardware, plus the temperature of the unit. For further informationn about the hardware configuration, see Appendix C. 3.1.2 VAPs A WBSn base station supports multiple Virtual Accesss Points (VAPs) per unit, enabling various combinations comprising different VAPs to different carriers, a single carrier providing a variety of services, or different VAPs for different services. Such services include VLAN assignment, prioritization per VLAN and Backhaul vs. Access. Up to six VAPs can exist per WBSn, and the capabilities per VAP include the following: Security Layer2 network separate VLANs Layer3 network separate WANs AAA servers MAC Access Control Lists Max Associationss Web Portal Redirection (to be available in a future release) BW Management Profiles VLANs assignment method Trunk Determine by RADIUS Directly assigned Navigate to Status = > Wirelesss => VAP, in order to see whichh VAPs are available, the BSSID of each VAP and how many associations are assigned to each VAP. For more information, see To Define a VAP. 3.1.3 Wireless Associations The Wireless associations list is a list of clients that are connected to the base station. You can access this list by navigating to Status => Wireless => Associations, where the following list parameters are displayed. Parameter IP Addresss MAC SSID (VAP Name) RSSI dbm TX Rate RX Rate Description IP address of the associated station Physical address of the associated station VAP (SSID) to which the station is associated The RSSI (Received Signal Strength Indicator) power received by the WBSn base station from the associated station. The current PHY Rate (modulation) at which the base station transmits to the associated station The average PHY Rate (modulation) at which the associated station transmitss to the base station (the rate at which the base station receives). 222
Parameter Description State Indicates the association status of the station s connection. Valid values: Disconnected Association_Processing Associated Disconnecting Est. Range WMM Auth. Status Estimated range of client from WBSn A value of 'yes' in this field indicates that the associated station supports the WMMM protocol. For more information about WMM, see Defining a VAP. Radius authentication state. Valid values: On Off WDS Radio Indicates if the base station is connected in WDS mode. For more information, see WDS. Indicates to whichh radio the client is connected. Valid values: 2.4 GHz 5.0 GHz PS 11N TX [Bytes] RX [Bytes] Time since assoc. Time since last activity TX Packets RX Packets TX PER [%] # of streams support TX BF support indication Power Save statuss Indicates whether the associated station is working in 802.11n protocol, rather than in 11 b/g or 11 a. Amount of bytes transmitted towards the associated client Amount of bytes received from the associated client Time elapsed in seconds since association Time in seconds since data of any description was last received from the client Amount of packets transmitted to the associated client Amount of packets received from the associated client Packet Error rate on the Tx transmission path Number of streams supported by the client Indicates whether the client supports Beamforming from the WBSn. 3.1.4 Radio Status Parameters The parameter values are described in the table below. Both the 2.4 MHz and the 5 MHz band values are indicated in separate bandspecific tabs, as shown in the image above. 23
Parameter Noise Level Idle Time Tx Activity Valid Rx Activity Interference (Invalid Rx Activity) 3.2 3.2.1 Configuration System Setup Description The level of noise measured by the base station Percentage of time that the base station has been idle Length of time that the base station has spent transmitting Length of time that the base station has been occupied receiving valid data Length of time that the base station has been occupied receiving non valid dataa (i.e. interfering traffic) In the GUI, use the Configuration => System page to set up, configure and manage system parameters. This page displays basic static information on the system, including contact details, and IP addresses. Default values and details are provided, which should be modified, by specifying parameter values according to your network system and requirements. Changing the name of your WBSn base station 1. Navigate to Configuration => System => General tab. 2. Enter the new name of your base station in the Device Name field. 3. Click Apply. 3.2.2 IP Management To Configure a Management IP address 1. Navigate to Configuration => Network => IP Configuration, select the line you wish to update and click Edit. 2. In the popup window, modify the default IP address values provided, as described in the following table: 24
Parameter Description IP Addresss IP Method Change the default IP address Select either Manual or DHCP For Manual: Enter the required static IP, and valid static Network Mask, Gateway and DNS parameter values in the relevant parameters. For DHCP: Enter the DHCP Client Fallback IP Address and Network mask in the relevant parameters. Mask Gateway MTU Enter the required network mask Specify the gateway for the Management IP address Maximum Transmissionn Unit 3. Click Apply, at the bottom of the Alvarion EMS screen. Note: If you change your current IP address, the connectionn to the unit will be lost. You need to enter the newly specified IP addresss in the URL. 4. Navigate to Configuration => System => Management IP Address, and modify the default values provided. 5. Select the required VLAN to be used for management purposes, from the list of available VLANs. 6. Specify True or False for the Enable management from Wireless Access Interfaces parameter, in order to enable or block a specific wireless device from having management access. The default parameter is True.. 3.2.3 Specifying the Time of the Base Station Unit To specify the Base Station Unit time 1. Navigate to Configuration => System => Time to set a unified time of the unit, according to the NTP server, and your specific time zone. In the event that the NTP server is disabled, the time can also be set manually. 2. Specify the values of the fields, using the table below. Parameter Description NTP NTP Server Manual Time Setting Network Time protocol: how to set a unified time across a network Network Time Protocol server, provides for entiree network In the event that no NTP server is functioning, use this field to manually set the time of the base station unit 25
Parameter Time Zone Configuration Description Specify the appropriate time zone for your geographical location 3.2.4 Specifying the Location of the Base Station Unit To specify the Base Station Unit Location 1. Navigate to Configuration => System =>Location in order to specify the geophysical direction of the transmissionn from the Base Station. 2. Specify the values of the fields, using the table below. Note: Geophysical coordinates should be configured using the decimal system. Parameter Location Longitude Latitude Azimuth Description Specify the geographical location (country) of the base station. Specify the longitude of the base station location. Specify the latitude of the base station location. Specify the direction to which the base station is directed. 3.2.5 Setting Management VLAN The management VLAN enables administrators to manage the WBSn over a dedicated VLAN. The management VLAN can be selected from the enabled VLAN list. Note: The management VLAN can be linked to a secured SSID/VAP if the administrator so requires. In such a case, the VAP can have additional security properties assigned to it. Note: Only one VLAN can be defined as the Management VLAN in the WBSn system. Prior to specifying the management VLAN, you must have at least one VLAN defined. See Bridge Configuration for more information. WBSn also supports the assignment of dynamic VLANs to WiFi clients. This mode is supported per VAP (Virtual AP). In this mode, the VLANs are determined by a RADIUS server, at the time of association and authentication of clients to a specific VAP. 26
3.33 Wireless Interface 3.3.1 Virtual AP (VAP) In this section, you can define and setup a Virtual AP (VAP), as well as viewing the status of any VAPs that were previously defined. To define a VAP: 1. Navigate to Configuration => Wireless => VAP. 2. Specify the parameters according to the parameter value definitions in the below table. Name Parameter Description Name of the VAP to be used as the SSID (Service Set Identifier) Permitted length: 132 alphanumeric characters (all alphanumeric characters are allowed, with spaces, dashes, or underscores) Hidden WMM Classification Indicates whether these SSID parameters are broadcast to the public, or hidden, only accessible by authorized users that know the SSID Values: DSCP Auto W8021p (IEEE 802.1p) Packet prioritization over WiFi is based on four access categories defined by the WMM standard: Voice traffic Video traffic Best effort traffic Background traffic A packet sent after being classified as one of the Access categories. The classification on the Ethernet interface is performed based on DSCP or W8021p priorities, while the classification in the Wireless interfacee is performed based on WMM Access Categories. For information about classification configuration, please seee QoS Packet Priority. Dynamic VLAN WBSn supports the assignment of dynamic VLANs to WiFi clients. This mode is supported per VAP (Virtual AP). In this mode, the VLANs are determined by a RADIUS server, at the time of association and authentication of clients to a specific VAP. Values: Enabled Disabled 27
QinQ Parameter Description WBSn supports IEEE 802.1ad QinQ allowing two VLAN tags, external and internal, to be inserted into a single Ethernet frame. The internal VLAN tag is determinedd by RADIUS Server at the time of CPE authentication, and the external VLAN tag is determined upon the VAP to which the CPE is connected. This feature is supported and configured per VAP. Enabled Disabled Note: Can only be enabled when DynamicVLAN is enabled. ACL Group The ACL (Access Control List) controls who can access the VAP. A list is created according to specific parameters, and given a unique name, and will either define an Accept group (those users permitted VAP access), or a Reject group (those users denied VAP access). For more information, see MAC Addresss List. Limit Number of Stations Security Mode Enables you to limit the number of users per VAP. Note: There is not validation on aggregated VAPs. Choose between the following: None (Open) WEP (Shared key) WPA (PSK and RADIUS) WPA2 (PSK and RADIUS) For more informationn about authentication and encryption, please see the Security, Authentication, Encryption Modes and Maximum Associations table. Limit number of stations Controls the number of clients associated to the base station. If Enable Limit is selected, a numerical limit can be specified. If Enable Limit is not selected, any number of clients can associate to the base station. (Default) There is no default limitation on the number of associations supported. WBSn supports up to 256 associated clients per radio, utilizing the Open security mode. In other security modes the maximum number of associated clients is different. For more information, please refer to the Security, Authentication, Encryption Modes and Maximumm Associations table. WBSn supports the capability of limiting the number of maximum associations per VAP. The limit can be set to any value between 0 and 50, regardlesss of the security of the VAP. To view the status of a VAP: To view the status of any or all defined VAPs, navigate to Status => Wireless => VAP. 3.3.2 QoS (Quality of Service) Packet Priority Wireless Multimedia Extensions (WME), also known as WiFi MultiMedia (WMM), provide basic QoS features to IEEE 802.11a/b/g/n networks. WMM prioritizes traffic on the wireless interface using four Access Categories (AC): Voice Video Best Effort Background 28
Traffic is prioritized by these access categories, and the implementation defined by the WMM standard. Traffic is therefore suitable for applications that require QoS over WiFi, for example, Voice over IP (VoIP). Note: In order to allow QoS through the WBSn, both ends of the network (CPE on the wirelesss side and the switch/routerr on the Ethernet side) should support the same priority tagging. This permits the marking of a specific packet with a specific priority. WBSn supports DSCP, 802.1p and Auto priority tagging. When DSCP is selected, WBSn inspects the incoming IP packets and determines the WMM priority according to the DSCP priority bits. When W8021p ( IEEE 802.1p) is selected, WBSn inspects the incoming layer2 packets and determines the WMM priority according to the VLANpriority bits. When Auto mode is selected, WBSn checks whether a VLAN tag exists, and if it does, it determines the priority according to the VLAN priority. Otherwise, the priority is determined by the DSCP value. Downlink (data sent from the network to the user), a packet from the wireline network is received by the WBSn, and its priority detected. The packet will be prioritized over the air according to WMM AC prioritization. When the packet reaches the CPE, the CPE passes it to its LAN interface according to the packet definition. Uplink (data sent from the user to the network), the CPE will detect the priority (as defined at the CPE) and will pass the frame with the correct WMM AC characteristics, thus providing the priority classification on the wireless side. 3.4 Security WBSn security capabilities utilize various levels of authenticationn and encryption methodologies. 3.4.1 Authentication WBSn allows the following authentication types and combinations. Each VAP can have a different RADIUS server configured. This allows for the authentication of several networks over the same infrastructure of WBSn base stations. When RADIUS Authentication is used, the RADIUS server can determine which VLAN belongs to which user. Note: WBSn supportss multiple VLAN per VAP. The WPA/WPA2 authentication automatically presumes that the basic 802.11 authentication is Open. WPA/WPA2 defines advanced authentications, either PSK (PreShared Key) or RADIUS. The initial Encryption keys are determined during the last phase of the authentication. For the 802.1x with RADIUS Server authentication framework, the following EAP methods are supported: EAPTLS, PEAP, EAPTTLS, EAPSIM, EAPAKA. For more details regarding EAPSIM, see EAP for GSM Subscriber Identity Module (EAPSIM). MAC Authentication with RADIUS server for open sessions. To configure this option select "Open (802.1x + MAC Auth)". EAP Authentication for Open session. For more information, see Unique Enhancements for Open Security Sessions. 3.4.1.1 EAP for GSM Subscriber Identity Module (EAPSIM) EAPSIM is used for authentication and session key distribution using the Subscriber Identity Module (SIM) from the Global System for Mobile Communications (GSM), by communicating with the Authentication Centre (AuC), and thereby replacing the need for a preestablished password between the client and the AAAA server. GSM cellular networks use a subscriber identity module (SIM) card to authenticate users. EAPSIM uses a SIM authentication algorithm between the client and an Authentication, Authorization and Accounting (AAA) server, enabling mutual authentication between the client and the network. 29
In terms of WBSn, the VAP is configured according to the specifications of the WPA2RADIUS authentication, and the rest of the authentication is performed in a transparent manner, by WBSn. 3.4.1.2 Unique Enhancements for Open Security Sessions Generally, for WPA and WPA2 security mechanisms, RADIUS authentication (802.1x) is available only for encrypted sessions (WPA or WPA2). With this enhancement, 802. 1x authentication is also supported for the open session mode (by setting Open (802.1x Auth) ). When such authentication is in use a supplicant SW on the client device is required to handle EAP (Extended Authentication Protocol) over the open session. 3.4.2 Encryption Methods Legacy 802.11 clients can either connect using the Open authentication, or WEP. In WEP, the encryption key can be either 40bit or 104bit. In WPA, WBSn supports TKIP and AES encryptions. In WPA and WPA2, WBSn supports TKIP and AES encryptions. Note: The 802.11n standard only permits the use of AES keys when operating within a secured network. Therefore, it is strongly recommended that the VAPs will be either Open or WPA2 AES secured. Note: In case TKIP or WEP clients are expected to connect, they must connect using their 802.11g interface. Additionally, a WEPsecured VAP can only be configured for first VAP (i.e. VAP 1). 3.4.3 Security, Authentication, Encryption Modes and Maximum Associations The table below describes the number of maximum associationss according to the security mode in use. Security Mode Authenticationn Mode Encryption Mode Max Associations (per band) None Open system None 256 WEP (Only available for the first defined VAP) Shared key WEP/40 WEP/104 256 256 WPA PSK (Preshared key) TKIP 55 Radius TKIP + AES 110 WPA2 PSK (Preshared key) AES 110 Radius AES + TKIP None 802.1x None 256 None 802.1x +MAC None 256 3.4.4 Radius Accounting Accounting is required for billing and statistical purposes. With an internal Access Controller license installed, a WBSn provides peruser time and throughput RADIUS accounting messages, without the need for any additional external hardware. This feature is currently available for all wireless clients whether associated to secured (e.g. WPA2RADIUS) or nonsecured (i.e. Open) VAPs. In future versions Accounting will also be available for nonwireless clients connected through wireless CPEs, and for users authenticated using WebAuthentication portal. The Accounting Start and Interim messages include information about the connected wireless client, including its IP address, if known to the base station (base on DHCP messages exchanged with the client). 30