Document Outline

• AP-5131 Product Reference Guide
• Contents
• AP-5131 Introduction
  • 1.1 New AP-5131 Features
    • 1.1.1 Mesh Networking
    • 1.1.2 Additional LAN Subnet
    • 1.1.3 On-board Radius Server Authentication
    • 1.1.4 Hotspot Support
    • 1.1.5 Routing Information Protocol (RIP)
    • 1.1.6 Manual Date and Time Settings
  • 1.2 Feature Overview
    • 1.2.1 Single or Dual Mode Radio Options
    • 1.2.2 Separate LAN and WAN Ports
    • 1.2.3 Multiple Mounting Options
    • 1.2.4 Antenna Support for 2.4 GHz and 5.2 GHz Radios
    • 1.2.5 Sixteen Configurable WLANs
    • 1.2.6 Support for 4 BSSIDs per Radio
    • 1.2.7 Quality of Service (QoS) Support
    • 1.2.8 Industry Leading Data Security
      • 1.2.8.1 Kerberos Authentication
      • 1.2.8.2 EAP Authentication
      • 1.2.8.3 WEP Encryption
      • 1.2.8.4 KeyGuard Encryption
      • 1.2.8.5 Wi-Fi Protected Access (WPA) Using TKIP Encryption
      • 1.2.8.6 WPA2-CCMP (802.11i) Encryption
      • 1.2.8.7 Firewall Security
      • 1.2.8.8 VPN Tunnels
      • 1.2.8.9 Content Filtering
    • 1.2.9 VLAN Support
    • 1.2.10 Multiple Management Accessibility Options
    • 1.2.11 Updatable Firmware
    • 1.2.12 Programmable SNMP v1/v2/v3 Trap Support
    • 1.2.13 Power-over-Ethernet Support
    • 1.2.14 MU-MU Transmission Disallow
    • 1.2.15 Voice Prioritization
    • 1.2.16 Support for CAM and PSP MUs
    • 1.2.17 Statistical Displays
    • 1.2.18 Transmit Power Control
    • 1.2.19 Advanced Event Logging Capability
    • 1.2.20 Configuration File Import/Export Functionality
    • 1.2.21 Default Configuration Restoration
    • 1.2.22 DHCP Support
    • 1.2.23 Multi-Function LEDs
  • 1.3 Theory of Operations
    • 1.3.1 Cellular Coverage
    • 1.3.2 MAC Layer Bridging
    • 1.3.3 Media Types
    • 1.3.4 Direct-Sequence Spread Spectrum
    • 1.3.5 MU Association Process
    • 1.3.6 Operating Modes
    • 1.3.7 Management Access Options
• Hardware Installation
  • 2.1 Precautions
  • 2.2 Package Contents
    • 2.2.1 Available Product Configurations
  • 2.3 Requirements
  • 2.4 Placement of the AP-5131
    • 2.4.1 Site Surveys
    • 2.4.2 Antenna Options
  • 2.5 Power Options
  • 2.6 Symbol Power Injector System
    • 2.6.1 Installing the Power Injector
      • 2.6.1.1 Preparing for Site Installation
      • 2.6.1.2 Cabling the Power Injector
      • 2.6.1.3 Power Injector LED Indicators
  • 2.7 Mounting the AP-5131
    • 2.7.1 Desk Mounted Installations
    • 2.7.2 Wall Mounted Installations
    • 2.7.3 Suspended Ceiling T-Bar Installations
    • 2.7.4 Above the Ceiling (Plenum) Installations
  • 2.8 LED Indicators
  • 2.9 Setting Up MUs
• Getting Started
  • 3.1 Installing the AP-5131
  • 3.2 Configuration Options
  • 3.3 Default Configuration Changes
  • 3.4 Initially Connecting to the Access Point
    • 3.4.1 Connecting to the Access Point using the WAN Port
    • 3.4.2 Connecting to the Access Point using the LAN Port
  • 3.5 Basic Device Configuration
    • 3.5.1 Configuring Device Settings
      • 3.5.1.1 Configuring WLAN Security Settings
    • 3.5.2 Testing Connectivity
    • 3.5.3 Where to Go from Here?
• System Configuration
  • 4.1 Configuring System Settings
  • 4.2 Configuring Data Access
  • 4.3 Managing Certificate Authority (CA) Certificates
    • 4.3.1 Importing a CA Certificate
    • 4.3.2 Creating Self Certificates for Accessing the VPN
    • 4.3.3 Creating a Certificate for Onboard Radius Authentication
  • 4.4 Configuring SNMP Settings
    • 4.4.1 Configuring SNMP Access Control
    • 4.4.2 Enabling SNMP Traps
    • 4.4.3 Configuring Specific SNMP Traps
    • 4.4.4 Configuring SNMP RF Trap Thresholds
  • 4.5 Configuring Network Time Protocol (NTP)
  • 4.6 Logging Configuration
  • 4.7 Importing/Exporting Configurations
  • 4.8 Updating Device Firmware
    • 4.8.1 Upgrade/Downgrade Considerations
• Network Management
  • 5.1 Configuring the LAN Interface
    • 5.1.1 Configuring VLAN Support
    • 5.1.2 Configuring LAN1 and LAN2 Settings
      • 5.1.2.1 Configuring Advanced DHCP Server Settings
      • 5.1.2.2 Setting the Type Filter Configuration
  • 5.2 Configuring WAN Settings
    • 5.2.1 Configuring Network Address Translation (NAT) Settings
      • 5.2.1.1 Configuring Port Forwarding
  • 5.3 Enabling Wireless LANs (WLANs)
    • 5.3.1 Creating/Editing Individual WLANs
      • 5.3.1.1 Configuring WLAN Security Policies
      • 5.3.1.2 Configuring a WLAN Access Control List (ACL)
      • 5.3.1.3 Setting the WLAN Quality of Service (QoS) Policy
      • 5.3.1.4 Configuring WLAN Hotspot Support
    • 5.3.2 Setting the WLAN’s Radio Configuration
      • 5.3.2.1 Configuring the 802.11a or 802.11b/g Radio
    • 5.3.3 Configuring Bandwidth Management Settings
  • 5.4 Configuring Router Settings
    • 5.4.1 Setting the RIP Configuration
• Configuring Access Point Security
  • 6.1 Configuring Security Options
  • 6.2 Setting Passwords
    • 6.2.1 Resetting the AP-5131 Password
  • 6.3 Enabling Authentication and Encryption Schemes
  • 6.4 Configuring Kerberos Authentication
  • 6.5 Configuring 802.1x EAP Authentication
  • 6.6 Configuring WEP Encryption
  • 6.7 Configuring KeyGuard Encryption
  • 6.8 Configuring WPA Using TKIP
  • 6.9 Configuring WPA2-CCMP (802.11i)
  • 6.10 Configuring Firewall Settings
    • 6.10.1 Configuring LAN to WAN Access
      • 6.10.1.1 Available Protocols
    • 6.10.2 Configuring Advanced Subnet Access
  • 6.11 Configuring VPN Tunnels
    • 6.11.1 Configuring Manual Key Settings
    • 6.11.2 Configuring Auto Key Settings
    • 6.11.3 Configuring IKE Key Settings
    • 6.11.4 Viewing VPN Status
  • 6.12 Configuring Content Filtering Settings
  • 6.13 Configuring Rogue AP Detection
    • 6.13.1 Moving Rogue APs to the Allowed AP List
      • 6.13.1.1 Displaying Rogue AP Details
    • 6.13.2 Using MUs to Detect Rogue Devices
  • 6.14 Configuring User Authentication
    • 6.14.1 Configuring the Radius Server
    • 6.14.2 Configuring LDAP Authentication
    • 6.14.3 Configuring a Proxy Radius Server
    • 6.14.4 Managing the Local User Database
      • 6.14.4.1 Mapping Users to Groups
    • 6.14.5 Defining the User Access Policy
• Monitoring Statistics
  • 7.1 Viewing WAN Statistics
  • 7.2 Viewing LAN Statistics
    • 7.2.1 Viewing a LAN’s STP Statistics
  • 7.3 Viewing Wireless Statistics
    • 7.3.1 Viewing WLAN Statistics
  • 7.4 Viewing Radio Statistics Summary
    • 7.4.1 Viewing Radio Statistics
      • 7.4.1.1 Retry Histogram
  • 7.5 Viewing MU Statistics Summary
    • 7.5.1 Viewing MU Details
    • 7.5.2 Pinging Individual MUs
    • 7.5.3 MU Authentication Statistics
  • 7.6 Viewing the Mesh Statistics Summary
  • 7.7 Viewing Known Access Point Statistics
• Command Line Interface Reference
  • 8.1 Connecting to the CLI
    • 8.1.1 Accessing the CLI through the Serial Port
    • 8.1.2 Accessing the CLI via Telnet
    • 8.4.8 Firmware Update Commands
• Configuring Mesh Networking
  • 9.1 Mesh Networking Overview
    • 9.1.1 The AP-5131 Client Bridge Association Process
    • 9.1.2 Spanning Tree Protocol (STP)
    • 9.1.3 Defining the Mesh Topology
    • 9.1.4 Mesh Networking and the AP-5131’s Two Subnets
    • 9.1.5 Normal Operation
    • 9.1.6 Impact of Importing/Exporting Configurations to a Mesh Network
  • 9.2 Configuring Mesh Networking Support
    • 9.2.1 Setting the LAN Configuration for Mesh Networking Support
    • 9.2.2 Configuring a WLAN for Mesh Networking Support
    • 9.2.3 Configuring the AP-5131 Radio for Mesh Networking Support
  • 9.3 Usage Scenario - Trion Enterprises
    • 9.3.1 Trion’s Initial Deployment
    • 9.3.2 Adding 2 Client Bridges to Expand the Coverage Area
    • 9.3.3 Adding 2 More Client Bridges to the Trion Network
• Technical Specifications
  • A.1 Physical Characteristics
  • A.2 Electrical Characteristics
  • A.3 Radio Characteristics
  • A.4 Antenna Specifications
    • A.4.1 2.4 GHz Antenna Matrix
    • A.4.2 5.2 GHz Antenna Matrix
    • A.4.3 Additional Antenna Components
    • A.4.4 Antenna Accessory Connectors, Cable Type and Length
  • A.5 Country Codes
• AP-5131 Usage Scenarios
  • B.1 Configuring Automatic Updates using a DHCP or Linux BootP Server Configuration
    • B.1.1 Windows - DHCP Server Configuration
      • B.1.1.1 Embedded Options - Using Option 43
      • B.1.1.2 Global Options - Using Extended/Standard Options
      • B.1.1.3 DHCP Priorities
    • B.1.2 Linux - BootP Server Configuration
      • B.1.2.1 BootP Options
      • B.1.2.2 BootP Priorities
  • B.2 Configuring an IPSEC Tunnel and VPN FAQs
    • B.2.1 Configuring a VPN Tunnel Between Two AP-5131s
    • B.2.2 Configuring a Cisco VPN Device
    • B.2.3 Frequently Asked VPN Questions
  • B.3 Replacing an AP-4131 with an AP-5131
• Customer Support
• Index