38 TeslaIrvine, CA 92618Phone: (949) 679-8000EliteConnect™ Universal2.4GHz/5GHz Wireless Dual-Band Outdoor Access Point/BridgeThe easy way to make all

COMPLIANCESviiiSafety CompliancePower Cord SafetyPlease read the following safety information carefully before installing the wireless access point:WA

System Configuration6-24CLI Commands for RADIUS MAC Authentication – Use the mac-authentication server command from the global configuration mode to e

Advanced Configuration6-25CLI Commands for 802.1X Authentication – Use the 802.1X supported command from the global configuration mode to enable 802.1

System Configuration6-26Filter ControlThe wireless bridge can employ VLAN tagging support and network traffic frame filtering to control access to net

Advanced Configuration6-27traffic that has an unknown VLAN ID or no VLAN tag is dropped. When VLAN support is disabled, the wireless bridge does not t

System Configuration6-28Note: The specific configuration of RADIUS server software is beyond the scope of this guide. Refer to the documentation provi

Advanced Configuration6-29• Enable: Wireless bridge filters Ethernet protocol types based on the configuration of protocol types in the filter table.

System Configuration6-30you want to filter. To display the current settings, use the show filters command from the Exec mode.SNMPYou can use a network

Advanced Configuration6-31SNMP – Enables or disables SNMP management access and also enables the wireless bridge to send SNMP traps (notifications). S

System Configuration6-32Trap Destination Community Name – The community string sent with the notification operation. (Maximum length: 23 characters; D

Advanced Configuration6-33AdministrationChanging the PasswordManagement access to the web and CLI interface on the wireless bridge is controlled throu

COMPLIANCESixImportant! Before making connections, make sure you have the correct cord set. Check it (read the label on the cable) against the followi

System Configuration6-34CLI Commands for the User Name and Password – Use the username and password commands from the CLI configuration mode.Upgrading

Advanced Configuration6-35Before upgrading new software, verify that the wireless bridge is connected to the network and has been configured with a co

System Configuration6-36Firmware Upgrade Local – Downloads an operation code image file from the web management station to the wireless bridge using H

Advanced Configuration6-37Note: If you have upgraded system software, then you must reboot the wireless bridge to implement the new operation code.CLI

System Configuration6-38System Log The wireless bridge can be configured to send event and error messages to a System Log Server. The system clock can

Advanced Configuration6-39Logging Console – Enables the logging of error messages to the console.Logging Level – Sets the minimum severity level for e

System Configuration6-40CLI Commands for System Logging – To enable logging on the wireless bridge, use the logging on command from the global configu

Advanced Configuration6-41The wireless bridge acts as an SNTP client, periodically sending time synchronization requests to specific time servers. You

System Configuration6-42CLI Commands for SNTP – To enable SNTP support on the wireless bridge, from the global configuration mode specify SNTP server

Advanced Configuration6-43Wireless Distribution System (WDS)The IEEE 802.11 standard defines a WIreless Distribution System (WDS) for connections betw

COMPLIANCESxVeuillez lire à fond l'information de la sécurité suivante avant d'installer le wireless access point:AVERTISSEMENT: L’installat

System Configuration6-44Mode – The wireless bridge is set to operate as a Slave or Master unit:• Master Mode: In a point-to-multipoint network configu

Advanced Configuration6-45MAC Address – The physical layer address of the wireless bridge unit at the other end of the wireless link. (12 hexadecimal

System Configuration6-46Bridge Aging Time – Changes the aging time for entries in the dynamic address table:• Ethernet: The time after which a learned

Advanced Configuration6-47CLI Commands for Bridging – The following example shows how to set the MAC address aging time for the wireless bridge.Spanni

System Configuration6-48device (except for the root device) which incurs the lowest path cost when forwarding a packet from that device to the root de

Advanced Configuration6-49Enable – Enables/disables STP on the wireless bridge. (Default: Enabled)Forward Delay – The maximum time (in seconds) this d

System Configuration6-50Hello Time – Interval (in seconds) at which the root device transmits a configuration message. (Range: 1-10 seconds)• Default:

Advanced Configuration6-51assigned to ports with slower media. (Path cost takes precedence over port priority.) • Range: 1-65535• Default: Ethernet in

System Configuration6-52Por t Fast (Fast Forwarding) – You can enable this option if an interface is attached to a LAN segment that is at the end of a

Advanced Configuration6-53CLI Commands for STP – The following example configures spanning tree paramters for the bridge and wireless port 5. AP(confi

COMPLIANCESxiBitte unbedingt vor dem Einbauen des Access Point die folgenden Sicherheitsanweisungen durchlesen (Germany):WARNUNG: Die Installation und

System Configuration6-54RSSI The RSSI value displayed on the RSSI page represents a signal to noise ratio. A value of 30 would indicate that the power

Advanced Configuration6-55RSSI – The RSSI value for a selected port can be displayed and a representative voltage output can be enabled.• Output Activ

System Configuration6-56Radio InterfaceThe IEEE 802.11a and 802.11g interfaces include configuration options for radio signal characteristics and wire

Radio Interface6-57Radio Settings A (802.11a)The IEEE 802.11a interface operates within the 5 GHz band, at up to 54 Mbps in normal mode or up to 108 M

System Configuration6-58mode.SSID Broadcast – When enabled, the access point radio does not include its SSID in beacon messages. Nor does it respond t

Radio Interface6-59Auto Channel Select – Enables the wireless bridge to automatically select an unoccupied radio channel. (Default: Enabled)Transmit P

System Configuration6-60Using higher DTIM values reduces the power used by stations in Power Save mode, but delays the transmission of broadcast/multi

Radio Interface6-61Maximum Associations – (Access point mode only) Sets the maximum number of clients that can be associated with the access point rad

System Configuration6-62AP(config)#interface wireless a 7-99Enter Wireless configuration commands, one per line.AP(if-wireless a)#description RD-AP#3

Radio Interface6-63Radio Settings G (802.11g)The IEEE 802.11g standard operates within the 2.4 GHz band at up to 54 Mbps. Also note that because the I

COMPLIANCESxiigegeben, wenn auch die an das Gerät angeschlossenen Geräte unter SELV-Bedingungen betrieben werden.•Stromkabel. Dies muss von dem Land,

System Configuration6-64with each other. For example, in the United States you can deploy up to three access points in the same area (e.g., channels 1

Radio Interface6-65stop sending the SSID in beacon messages. Select a radio channel or set selection to Auto using the channel command. Set any other

System Configuration6-66Security (Bridge Mode)Wired Equivalent Privacy (WEP) and Advanced Encryption Standard (AES) are implemented for security in br

Radio Interface6-67Setting up IEEE 802.11 Wired Equivalent Privacy (WEP) shared keys prevents unauthorized access to the wireless bridge network.Be su

System Configuration6-68Advanced Encryption Standard (AES) AES has been designated by the National Institute of Standards and Technology as the succes

Radio Interface6-69Configuring AES encryption keys on the wireless bridge provides far more robust security than using WEP. Also, a unique AES key can

System Configuration6-70command. To view the current security settings, use the show interface wireless a command.Note: The index and length values us

Radio Interface6-71CLI Commands for AES Security – From the 802.11a interface configuration mode, use the encryption command to enable AES encryption.

System Configuration6-72Security (Access Point Mode)A radio band set to access point mode is configured by default as an “open system,” which broadcas

Radio Interface6-73wireless clients. A summary of wireless security considerations is listed in the following table.Security MechanismClient Support I

xiiiTABLE OF CONTENTS1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1Package Checklist . . . . . . . . . . . . . . . . .

System Configuration6-74Note: Although a WEP static key is not needed for WEP over 802.1X, WPA over 802.1X, and WPA PSK modes, you must enable WEP enc

Radio Interface6-75authentication and data encryption. Also, be sure that the WEP shared keys are the same for each client in the wireless network.Aut

System Configuration6-76Shared Key Setup – Select 64 Bit, 128 Bit, or 152 Bit key length. Note that the same size of encryption key must be supported

Radio Interface6-77four settings without having to update the client keys.Note: Key index and type must match that configured on the clients.The confi

System Configuration6-78show interface wireless a or show interface wireless g command.Note: The index and length values used in the key command must

Radio Interface6-79CLI Commands for WEP over 802.1X Security – From the 802.11a or 802.11g interface configuration mode, use the authentication comman

System Configuration6-80Wi-Fi Protected Access (WPA)WPA employs a combination of several technologies to provide an enhanced security solution for 802

Radio Interface6-81when a RADIUS server has authenticated a user’s credentials will encryption keys be sent to the access point and client.Note: To im

System Configuration6-82uses TKIP unicast data encryption keys for WPA clients and WEP unicast keys for WEP clients. The global encryption key for mul

Radio Interface6-83The WPA configuration parameters are described below:Authentication Type Setup – When using WPA, set the access point to communicat

TABLE OF CONTENTSxivConnect External Antennas . . . . . . . . . . . . . . . . . . . . . . . . . . .4-5Connect Cables to the Unit . . . . . . . . . .

System Configuration6-84• TKIP: TKIP provides data encryption enhancements including per-packet key hashing (that is, changing the encryption key on e

Radio Interface6-85The configuration settings for WPA are summarized below:CLI Commands for WPA Pre-shared Key Security – From the 802.11a or 802.11g

System Configuration6-86authentication. To view the current 802.11g security settings, use the show interface wireless a or show interface wireless g

Status Information6-87Status InformationThe Status page includes information on the following items:AP StatusThe AP Status window displays basic syste

System Configuration6-88• System Up Time: Length of time the management agent has been up.• MAC Address: The physical layer address for this device.•

Status Information6-89• Radio Authentication Type: Shows the bridge is set as an open system.• 802.1X: Shows if IEEE 802.1X access control for wireles

System Configuration6-90Station StatusThe Station Status window shows wireless clients currently associated with the access point.The Station Status p

Status Information6-91• Associated: Shows if the station has been successfully associated with the access point. • Forwarding Allowed: Shows if the st

System Configuration6-92Event LogsThe Event Logs window shows the log messages generated by the wireless bridge and stored in memory.The Event Logs ta

Status Information6-93

TABLE OF CONTENTSxvEntering Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-3Keywords and Arguments . . . . . . . . . . .

System Configuration6-94

7-1Chapter 7Command Line InterfaceUsing the Command Line InterfaceAccessing the CLIWhen accessing the management interface for the wireless bridge via

Command Line Interface7-2gateway if you are managing the wireless bridge from a different IP subnet. For example:After you configure the wireless brid

Entering Commands7-3Entering CommandsThis section describes how to enter CLI commands.Keywords and ArgumentsA CLI command is a series of keywords and

Command Line Interface7-4Getting Help on CommandsYou can display a brief description of the help system by entering the help command. You can also dis

Entering Commands7-5The command “show interface ?” will display the following information:Partial Keyword LookupIf you terminate a partial keyword wit

Command Line Interface7-6Understanding Command ModesThe command set is divided into Exec and Configuration classes. Exec commands generally display in

Entering Commands7-7Configuration CommandsConfiguration commands are used to modify wireless bridge settings. These commands modify the running config

Command Line Interface7-8Command Line ProcessingCommands are not case sensitive. You can abbreviate commands and parameters as long as they contain en

Command Groups7-9Command GroupsThe system commands can be broken down into the functional groups shown below.Command GroupDescription PageGeneral Bas

TABLE OF CONTENTSxviSystem Clock Commands . . . . . . . . . . . . . . . . . . . . . . . . . . .7-28sntp-server ip . . . . . . . . . . . . . . . . . .

Command Line Interface7-10The access mode shown in the following tables is indicated by these abbreviations: GC (Global Configuration), IC-E (Ethernet

General Commands7-11Command Mode ExecExample Related Commands end (page 7-11)endThis command returns to the previous configuration mode.Default Settin

Command Line Interface7-12Example This example shows how to return to the Exec mode from the Interface Configuration mode, and then quit the CLI sessi

General Commands7-13– Network or host unreachable - The gateway found no corresponding entry in the route table. • Press <Esc> to stop pinging.E

Command Line Interface7-14show historyThis command shows the contents of the command history buffer.Default Setting NoneCommand Mode ExecCommand Usage

System Management Commands7-15ExampleThe console port settings are fixed at the values shown below.System Management CommandsThese commands are used t

Command Line Interface7-16countryThis command configures the wireless bridge’s country code, which identifies the country of operation and sets the au

System Management Commands7-17Default Setting US - for units sold in the United States99 (no country set) - for units sold in other countriesCommand M

Command Line Interface7-18Example promptThis command customizes the CLI prompt. Use the no form to restore the default prompt.Syntax prompt stringno p

System Management Commands7-19system nameThis command specifies or modifies the system name for this device. Use the no form to restore the default sy

TABLE OF CONTENTSxviiWDS Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-61wds channel . . . . . . . . . . . . . . . .

Command Line Interface7-20ExamplepasswordAfter initially logging onto the system, you should set the password. Remember to record it in a safe place.

System Management Commands7-21Default Setting 80Command Mode Global ConfigurationExampleRelated Commandsip http server (page 7-21)ip http serverThis c

Command Line Interface7-22show systemThis command displays basic system configuration settings.Default SettingNoneCommand Mode ExecExampleAP#show syst

System Logging Commands7-23show versionThis command displays the software version for the system.Default SettingNoneCommand Mode ExecExample System Lo

Command Line Interface7-24logging onThis command controls logging of error messages; i.e., sending debug or error messages to memory. The no form disa

System Logging Commands7-25Default Setting NoneCommand Mode Global ConfigurationExample logging consoleThis command initiates logging of error message

Command Line Interface7-26Default Setting ErrorCommand Mode Global ConfigurationCommand Usage Messages sent include the selected level down to the Eme

System Logging Commands7-27Default Setting 16Command Mode Global ConfigurationCommand Usage The command specifies the facility type tag sent in syslog

Command Line Interface7-28ExampleSystem Clock CommandsThese commands are used to configure SNTP and system clock settings on the wireless bridge.AP#sh

System Clock Commands7-29sntp-server ipThis command sets the IP address of the servers to which SNTP time requests are issued. Use the this command wi

CopyrightInformation furnished by SMC Networks, Inc. (SMC) is believed to be accurate and reliable. However, no responsibility is assumed by SMC for i

TABLE OF CONTENTSxviiidns server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7-92ip address . . . . . . . . . . . . . . .

Command Line Interface7-30sntp-server enableThis command enables SNTP client requests for time synchronization with NTP or SNTP time servers specified

System Clock Commands7-31sntp-server date-timeThis command sets the system clock.Default Setting 00:14:00, January 1, 1970Command Mode Global Configur

Command Line Interface7-32Command Usage The command sets the system clock back one hour during the specified period.Example This sets daylight savings

System Clock Commands7-33degrees longitude. To display a time corresponding to your local time, you must indicate the number of hours and minutes your

Command Line Interface7-34SNMP CommandsControls access to this wireless bridge from management stations using the Simple Network Management Protocol (

SNMP Commands7-35Default Setting • public - Read-only access. Authorized management stations are only able to retrieve MIB objects.• private - Read/wr

Command Line Interface7-36Example Related Commandssnmp-server location (page 7-38)snmp-server enable serverThis command enables SNMP management access

SNMP Commands7-37snmp-server host This command specifies the recipient of an SNMP notification. Use the no form to remove the specified host.Syntaxsnm

Command Line Interface7-38Example Related Commandssnmp-server enable server (page 7-36)snmp-server locationThis command sets the system location strin

Flash/File Commands7-39show snmpThis command displays the SNMP configuration settings.Command Mode ExecExampleFlash/File CommandsThese commands are us

TABLE OF CONTENTSxixA Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . A-1B Specifications . . . . . . . . . . . . . . . . . . . .

Command Line Interface7-40bootfileThis command specifies the image used to start up the system.Syntaxbootfile <filename>filename - Name of the i

Flash/File Commands7-41copy This command copies a boot file, code image, or configuration file between the wireless bridge’s flash memory and a FTP/TF

Command Line Interface7-42•The destination file name should not contain slashes (\ or /), the leading letter of the file name should not be a period (

Flash/File Commands7-43Default Setting NoneCommand Mode ExecCaution: Beware of deleting application images from flash memory. At least one application

Command Line Interface7-44Command Usage File information is shown below:Example The following example shows how to display all file information:Column

RADIUS Client7-45RADIUS ClientRemote Authentication Dial-in User Service (RADIUS) is a logon authentication protocol that uses software running on a c

Command Line Interface7-46Command Mode Global ConfigurationExample radius-server portThis command sets the RADIUS server network port. Syntaxradius-se

RADIUS Client7-47radius-server keyThis command sets the RADIUS encryption key. Syntax radius-server [secondary] key <key_string>• secondary - Se

Command Line Interface7-48Example radius-server timeoutThis command sets the interval between transmitting authentication requests to the RADIUS serve

Authentication7-49Example AuthenticationThe access point supports IEEE 802.1x access control for wireless clients. This control feature prevents unaut

TABLE OF CONTENTSxx

Command Line Interface7-50Client MAC addresses can also be used for authentication on the access point. For local MAC authentication, first define the

Authentication7-51802.1xThis command configures 802.1x as optionally supported or as required for wireless clients. Use the no form to disable 802.1x

Command Line Interface7-52• When 802.1x is supported, the access point supports 802.1x authentication only for clients initiating the 802.1x authentic

Authentication7-53Command Usage• The access point uses EAPOL (Extensible Authentication Protocol Over LANs) packets to pass dynamic unicast session an

Command Line Interface7-54Example802.1x session-timeoutThis command sets the time period after which a connected client must be re-authenticated. Use

Authentication7-55802.1x supplicantThis command sets the user name and password used for authentication of the access point when operating as a 802.1x

Command Line Interface7-56Command ModeGlobal ConfigurationCommand Usage• Ethernet and WDS user names and passwords must be set before enabling the 802

Authentication7-57ExampleRelated Commandsaddress filter entry (page 7-57)show authentication (page 7-60)address filter entryThis command enters a MAC

Command Line Interface7-58ExampleRelated Commandsaddress filter default (page 7-56)show authentication (page 7-60)address filter deleteThis command de

Authentication7-59mac-authentication serverThis command sets address filtering to be performed with local or remote options. Use the no form to disabl

1-1Chapter 1IntroductionThe SMC EliteConnect Universal 2.4GHz/5GHz Wireless Dual-Band Outdoor Access Point/Bridge system consists of two models that p

Command Line Interface7-60mac-authentication session-timeoutThis command sets the interval at which associated clients will be re-authenticated with t

WDS Commands7-61ExampleWDS CommandsThe commands described in this section are used to configure the WIreless Distribution System (WDS) forwarding tabl

Command Line Interface7-62wds channelThis command selects the radio band to be used for WDS forwarding (bridging).Syntaxwds channel <a | g | none&g

WDS Commands7-63Command ModeGlobal ConfigurationCommand Usage• You can only configure one MAC address per wireless port ID.• The Ethernet MAC address

Command Line Interface7-64show wdsThis command displays the current entries in the WDS forwarding table.Syntaxshow wdsCommand ModeExecExampleAP#show w

Bridge Commands7-65Bridge CommandsThe commands described in this section are used to set the MAC address table aging time and spanning tree parameters

Command Line Interface7-66bridge timeoutThis command sets the aging time for both the Ethernet port and the wireless interface.Syntaxbridge timeout &l

Bridge Commands7-67Default Setting Spanning tree is enabled.Command Mode Global ConfigurationCommand Usage The Spanning Tree Protocol (STP) can be use

Command Line Interface7-68Default Setting 15 secondsCommand Mode Global ConfigurationCommand Usage This command sets the maximum time (in seconds) the

Bridge Commands7-69Command Mode Global ConfigurationCommand Usage This command sets the time interval (in seconds) at which the root device transmits

Introduction1-2In addition, both wireless bridge models offer full network management capabilities through an easy-to-use web interface, a command-lin

Command Line Interface7-70Command Usage This command sets the maximum time (in seconds) a device can wait without receiving a configuration message be

Bridge Commands7-71Command Usage Bridge priority is used in selecting the root device, root port, and designated port. The device with the highest pri

Command Line Interface7-72Command Usage • This command is used by the Spanning Tree Protocol to determine the best path between devices. Therefore, lo

Bridge Commands7-73• Where more than one port is assigned the highest priority, the port with lowest numeric identifier will be enabled.Example Relate

Command Line Interface7-74• Since end-nodes cannot cause forwarding loops, they can be passed through the spanning tree state changes more quickly tha

Bridge Commands7-75show bridgeThis command displays aging time and spanning tree settings for the Ethernet and wireless interfaces.Syntaxshow bridgeC

Command Line Interface7-76Filtering CommandsThe commands described in this section are used to control access to the management interface from the wir

Filtering Commands7-77Command UsageThis command can disable wireless-to-wireless communications between clients via the access point. However, it does

Command Line Interface7-78filter ethernet-type enableThis command checks the Ethernet type on all incoming and outgoing Ethernet packets against the p

Filtering Commands7-79filter ethernet-type protocolThis command sets a filter for a specific Ethernet type. Use the no form to disable filtering for a

Package Checklist1-3 • Outdoor pole-mounting bracket kit• Outdoor wall-mounting bracket kit• This User Guide Inform your dealer if there are

Command Line Interface7-80show filtersThis command shows the filter options and protocol entries in the filter table. Command ModeExecExamplePPPoE Com

PPPoE Commands7-81ip pppoeThis command enables Point-to-Point Protocol over Ethernet (PPPoE) on the Ethernet interface. Use the no form to disable PP

Command Line Interface7-82Command Usage The access point uses a PPPoE connection, or tunnel, only for management traffic between the access point and

PPPoE Commands7-83Example Related Commandspppoe local ip (page 7-86)pppoe remote ip (page 7-86)pppoe ipcp dnsThis command requests allocation of IP ad

Command Line Interface7-84pppoe lcp echo-intervalThis command sets the Link Control Protocol (LCP) echo interval for the PPPoE tunnel.Syntaxpppoe lcp

PPPoE Commands7-85pppoe lcp echo-failureThis command sets the Link Control Protocol (LCP) echo timeout for the PPPoE tunnel.Syntaxpppoe lcp echo-failu

Command Line Interface7-86pppoe local ipThis command sets the local IP address for the PPPoE tunnel.Syntaxpppoe local ip <ip-address>ip-address

PPPoE Commands7-87Default Setting NoneCommand Mode Interface Configuration (Ethernet)Command Usage If the pppoe ip allocation mode is set to static, t

Command Line Interface7-88Command Usage You must enter a user name with this command, and a password with the pppoe password command.Example Related C

PPPoE Commands7-89pppoe service-nameThis command sets the service name for the PPPoE tunnel.Syntaxpppoe service-name <string>string - Service na

Introduction1-4Hardware DescriptionEthernet PortRSSI Connector with Protective CapGrounding Point ScrewIntegrated AntennaBottom ViewTop View (SMC2888W

Command Line Interface7-90Example show pppoeThis command shows information about the PPPoE configuration.Command Mode Privileged ExecExample AP#(if-et

Ethernet Interface Commands7-91Ethernet Interface CommandsThe commands described in this section configure connection parameters for the Ethernet inte

Command Line Interface7-92Example To specify the 10/100Base-TX network interface, enter the following command:dns serverThis command specifies the add

Ethernet Interface Commands7-93Related Commands show interface ethernet (page 7-96)ip address This command sets the IP address for the (10/100Base-TX)

Command Line Interface7-94• You must assign an IP address to this device to gain management access over the network or to connect the wireless bridge

Ethernet Interface Commands7-95Command Usage • You must assign an IP address to this device to gain management access over the network or to connect t

Command Line Interface7-96Command Mode Interface Configuration (Ethernet)Command Usage This command allows you to disable the Ethernet port due to abn

Wireless Interface Commands7-97Example Wireless Interface CommandsThe commands described in this section configure connection parameters for the wire

Command Line Interface7-98dtim-period Configures the rate at which stations in sleep mode must wake up to receive broadcast/multicast transmissionsIC

Wireless Interface Commands7-99interface wirelessThis command enters wireless interface configuration mode.Syntaxinterface wireless a• a - 802.11a rad

Hardware Description1-5Integrated High-Gain AntennaThe SMC2888W-S wireless bridge includes an integrated high-gain (17 dBi) flat-panel antenna for 5 G

Command Line Interface7-100Default Setting NoneCommand Mode Interface Configuration (Wireless)ExamplessidThis command configures the service set ident

Wireless Interface Commands7-101closed-systemThis command closes access to clients without a pre-configured SSID. Use the no form to disable this feat

Command Line Interface7-102Command Mode Interface Configuration (Wireless)Command Usage The maximum transmission distance is affected by the data rate

Wireless Interface Commands7-103ExampleturboThis command sets the wireless bridge to an enhanced mode (not regulated in IEEE 802.11a) that provides a

Command Line Interface7-104beacon-interval This command configures the rate at which beacon signals are transmitted from the wireless bridge. Syntaxbe

Wireless Interface Commands7-105Default Setting 2Command Mode Interface Configuration (Wireless)Command Usage • The Delivery Traffic Indication Map (D

Command Line Interface7-106Default Setting 2346Command Mode Interface Configuration (Wireless)Command Usage • If the packet size is smaller than the p

Wireless Interface Commands7-107Default Setting 2347Command Mode Interface Configuration (Wireless)Command Usage • If the threshold is set to 0, the w

Command Line Interface7-108Default Setting fullCommand Mode Interface Configuration (Wireless)Command Usage • The “min” keyword indicates minimum powe

Wireless Interface Commands7-109Example authenticationThis command defines the 802.11 authentication type allowed by the access point. Syntaxauthentic

Introduction1-6Power Injector ModuleThe wireless bridge receives power through its network cable connection using power-over-Ethernet technology. A po

Command Line Interface7-110encryption This command defines whether WEP or AES encryption is used to provide privacy for wireless communications. Use

Wireless Interface Commands7-111• AES has been designated by the National Institute of Standards and Technology as the successor to the Data Encryptio

Command Line Interface7-112key This command sets the keys used for WEP and AES encryption. Use the no form to delete a configured key.Syntaxkey {wep &

Wireless Interface Commands7-113• To enable AES encryption, use the encryption command to specify the key type, and use the key command to configure a

Command Line Interface7-114Command Mode Interface Configuration (Wireless)Command Usage • If you use WEP key encryption, the wireless bridge uses the

Wireless Interface Commands7-115Command Usage • WPA enables the access point to support different unicast encryption keys for each client. However, th

Command Line Interface7-116wpa-clients This command defines whether Wi-Fi Protected Access (WPA) is required or optionally supported for client statio

Wireless Interface Commands7-117Example Related Commandswpa-mode (page 7-117)wpa-mode This command specifies whether Wi-Fi Protected Access (WPA) is t

Command Line Interface7-118Example Related Commandswpa-clients (page 7-116)wpa-preshared-key (page 7-118)wpa-preshared-key This command defines a Wi-F

Wireless Interface Commands7-119Example Related Commandswpa-clients (page 7-116)wpa-mode (page 7-117)wpa-psk-type This command defines the Wi-Fi Prote

Hardware Description1-7The power injector module automatically adjusts to any AC voltage between 100-240 volts at 50 or 60 Hz. No voltage range settin

Command Line Interface7-120shutdown This command disables the wireless interface. Use the no form to restart the interface.Syntax shutdownno shutdownD

Wireless Interface Commands7-121Example show stationThis command shows the wireless clients associated with the access point.Command Mode ExecAP#show

Command Line Interface7-122Example IAPP CommandsThe command described in this section enables the protocol signaling required to ensure the successful

VLAN Commands7-123DefaultEnabledCommand ModeGlobal ConfigurationCommand UsageThe current 802.11 standard does not specify the signaling required betwe

Command Line Interface7-124Note: Before enabling VLANs on the wireless bridge, you must configure the connected LAN switch port to accept tagged VLAN

VLAN Commands7-125ExampleRelated Commandsnative-vlanid (page 7-125)native-vlanid This command configures the native VLAN ID for the wireless bridge. S

Command Line Interface7-126

A-1Appendix ATroubleshootingCheck the following items before you contact local Technical Support.1. If wireless bridge units do not associate with eac

TroubleshootingA-23. If the wireless bridge cannot be configured using Telnet, a web browser, or SNMP software:• Be sure to have configured the wirele

B-1Appendix BSpecificationsGeneral SpecificationsMaximum Channels (Outdoor)802.11a:US & Canada: 9 (normal mode), 3 (turbo mode)Japan: 4 (normal mo

iLIMITED WARRANTYLimited Warranty Statement: SMC Networks, Inc. (“SMC”) warrants its products to be free from defects in workmanship and materials, un

Introduction1-8System ConfigurationAt each location where a unit is installed, it must be connected to the local network using the power injector modu

SpecificationsB-2Modulation Types802.11a: BPSK, QPSK, 16-QAM, 64-QAM802.11g: CCK, BPSK, QPSK, OFDM802.11b: CCK, BPSK, QPSKNetwork ConfigurationBridge

General SpecificationsB-3Network ManagementWeb-browser, Telnet, SNMPTemperatureOperating: -33 to 55 °C (-27.4 to 131 °F)Storage: -40 to 80 °C (-40 to

SpecificationsB-4Antenna Specifications17 dBi Integrated PanelFrequency Range5.150 - 5.850 GHzGain17 dBiVSWR1.8 : 1 maxPolarizationLinear, vertical/ho

Antenna SpecificationsB-5 17 dBi Integrated Panel Antenna Link Budget (5.825 GHz, Cable Loss 1 dB, Fade Margin 5 dB)Modulation/Rates Transmit Power(d

SpecificationsB-6

C-1Appendix CCables and PinoutsTwisted-Pair Cable AssignmentsFor 10/100BASE-TX connections, a twisted-pair cable must have two pairs of wires. Each wi

Cables and PinoutsC-210/100BASE-TX Pin AssignmentsUse unshielded twisted-pair (UTP) or shielded twisted-pair (STP) cable for RJ-45 connections: 100-oh

Twisted-Pair Cable AssignmentsC-3Straight-Through WiringBecause the 10/100 Mbps Input port on the power injector uses an MDI pin configuration, you mu

Cables and PinoutsC-48-Pin DIN Connector PinoutThe Ethernet cable from the power injector connects to an 8-pin DIN connector on the wireless bridge. T

8-Pin DIN Connector PinoutC-58-Pin DIN to RJ-45 Cable WiringTo construct an extended Ethernet cable to connect from the power injector’s RJ-45 Output

Features and Benefits1-9Features and Benefits• SMC2888W-S Slave units support a 5 GHz high-gain 17 dBi antenna• SMC2888W-M Master units support 5 GHz

Cables and PinoutsC-6

Glossary-1Glossary10BASE-TIEEE 802.3 specification for 10 Mbps Ethernet over two pairs of Category 3 or better UTP cable.100BASE-TXIEEE 802.3u specifi

GlossaryGlossary-2Basic Service Set (BSS)A set of 802.11-compliant stations and an access point that operate as a fully-connected wireless network.Bea

GlossaryGlossary-3File Transfer Protocol (FTP)A TCP/IP protocol used for file transfer. Hypertext Transfer Protocol (HTTP)HTTP is a standard used to t

GlossaryGlossary-4Open SystemA security option which broadcasts a beacon signal including the access point’s configured SSID. Wireless clients can rea

GlossaryGlossary-5Simple Network Time Protocol (SNTP)SNTP allows a device to set its internal clock based on periodic updates from a Network Time Prot

GlossaryGlossary-6

Index-1AAdvanced Encryption Standard See AESAES 6-82configuring 6-68AES, configuring 6-66, 7-110authentication 6-16, 7-109configuring 6-16, 7-109MAC

IndexIndex-2filter 6-26, 7-56address 6-16, 7-56between wireless clients 6-28, 7-76local bridge 6-28, 7-76local or remote 6-16, 7-59management access 6

IndexIndex-3passwordconfiguring 6-33, 7-20management 6-33, 7-20PoE 4-8specifications B-2port prioritySTA 7-72Power over Ethernet See PoEpower supply,

Introduction1-10System DefaultsThe following table lists some of the wireless bridge’s basic system defaults. To reset the bridge defaults, use the CL

IndexIndex-4Temporal Key Integrity Protocol See TKIPtime zone 6-41, 7-32TKIP 6-81, 7-114transmit power, configuring 6-59, 7-107trap destination 6-31,

SMC2888W-SSMC2888W-M

System Defaults1-11SNMP Status EnabledLocation nullContact ContactCommunity (Read Only) PublicCommunity (Read/Write) PrivateTraps EnabledTrap Destinat

Introduction1-12Wireless Interface 802.11aStatus EnabledSSID SMCTurbo Mode DisabledRadio Channel Default to first channelAuto Channel Select EnabledTr

System Defaults1-13Wireless Interface 802.11b/gStatus EnabledSSID SMCRadio Channel Default to first channelAuto Channel Select EnabledTransmit Power F

Introduction1-14

2-1Chapter 2Network ConfigurationThe Dual-band Outdoor Access Point / Bridge system provides access point or bridging services through either the 5 GH

Network Configuration2-2The 802.11b and 802.11g frequency band, which operates at 2.4 GHz, can easily encounter interference from other 2.4 GHz device

Access Point Topologies2-3Infrastructure Wireless LANThe access point function of the wireless bridge provides access to a wired LAN for 802.11a/b/g w

LIMITED WARRANTYiiCustomers are responsible for all shipping charges from their facility to SMC. SMC is responsible for return shipping charges from S

Network Configuration2-4Infrastructure Wireless LAN for Roaming Wireless PCsThe Basic Service Set (BSS) defines the communications domain for each acc

Bridge Link Topologies2-5Bridge Link TopologiesThe IEEE 802.11 standard defines a WIreless Distribution System (WDS) for bridge connections between BS

Network Configuration2-6Note: The external antennas offer longer range options using the 5 GHz radio, which makes this interface more suitable for br

Bridge Link Topologies2-7Master withOmnidirectionalAntennaSlaveSlaveSlaveSlaveSlaveSlaveMaster withSector AntennaSlaveSlaveSlave

Network Configuration2-8

3-1Chapter 3Bridge Link PlanningThe SMC Dual-band Outdoor Access Point / Bridge supports fixed point-to-point or point-to-multipoint wireless links. A

Bridge Link Planning3-2This area is known as the first Fresnel Zone of the radio link. For a radio link not to be affected by obstacles along its path

Radio Path Planning3-3• Be sure there is enough clearance from buildings and that no building construction may eventually block the path.• Check the t

Bridge Link Planning3-4.Note that to avoid any obstruction along the path, the height of the object must be added to the minimum clearance required fo

Radio Path Planning3-5A wireless bridge link is deployed to connect building A to a building B, which is located three miles (4.8 km) away. Mid-way be

iiiCOMPLIANCESFederal Communication Commission Interference StatementThis equipment has been tested and found to comply with the limits for a Class B

Bridge Link Planning3-6• The wireless bridge antennas at both ends of the link must be positioned with the same polarization direction, either horizon

Radio Path Planning3-7Weather ConditionsWhen planning wireless bridge links, you must take into account any extreme weather conditions that are known

Bridge Link Planning3-8Ethernet CablingWhen a suitable antenna location has been determined, you must plan a cable route form the wireless bridge outd

4-1Chapter 4Hardware InstallationBefore mounting antennas to set up your wireless bridge links, be sure you have selected appropriate locations for ea

Hardware Installation4-25. Align antennas at both ends of the link.Testing Basic Link OperationSet up the units over a very short range (15 to 25 feet

Mount the Unit4-33. Use the included nuts to tightly secure the wireless bridge to the bracket. Be sure to take account of the antenna polarization di

Hardware Installation4-4Mounting on Larger Diameter PolesIn addition, there is a method for attaching the pole-mounting bracket to a pole that is 2 to

Connect External Antennas4-52. Position the bracket in the intended location and mark the position of the three mounting screw holes.3. Drill three ho

Hardware Installation4-62. Connect the antenna to the bridge’s N-type connector.3. Apply weatherproofing tape to the antenna connectors to help preven

Connect Cables to the Unit4-7Connect Cables to the Unit1. Attach the Ethernet cable to the Ethernet port on the wireless bridge. Note: The Ethernet c

COMPLIANCESivWireless 5 GHz Band Statements:As the SMC2888W access point/bridge can operate in the 5150-5250 MHz frequency band it is limited by the F

Hardware Installation4-8Note: The wireless bridge’s Ethernet port does not support Power over Ethernet (PoE) based on the IEEE 802.3af standard. Do n

Align Antennas4-95. Check the LED on top of the power injector to be sure that power is being supplied to the wireless bridge through the Ethernet con

Hardware Installation4-10strong central main lobe and smaller side lobes. The object of the alignment process is to set the antenna so that it is rece

Align Antennas4-112. Pan the antenna horizontally back and forth while checking the RSSI voltage. If using the pole-mounting bracket with the unit, yo

Hardware Installation4-12

5-1Chapter 5Initial ConfigurationThe wireless bridge offers a variety of management options, including a web-based interface, a command line interface

Initial Configuration5-2Initial Setup through the CLIThe wireless bridge provides access to the CLI through a Telnet connection. You can open a Telnet

Initial Setup through the CLI5-3At the Exec prompt, type “country ?” to display the list of country codes. Check the code for your country, then enter

Initial Configuration5-4After configuring the wireless bridge’s IP parameters, you can access the management interface from anywhere within the attach

Using the Web-based Management Setup Wizard5-5The home page displays the Main Menu.Launching the Setup Wizard – To perform initial configuration, clic

COMPLIANCESv• This device employs a radar detection feature required for European Community operation in the 5 GHz band. This feature is automatically

Initial Configuration5-62. Radio Channel – You must enable radio communications for the 802.11a and 802.11g radios and set the operating channel.• 802

Using the Web-based Management Setup Wizard5-7Turbo Mode – If you select Enable, the wireless bridge will operate in turbo mode with a data rate of up

Initial Configuration5-8Note: Available channel settings are limited by local regulations which determine which channels are available.3. IP Configur

Using the Web-based Management Setup Wizard5-94. WDS – To set up a wireless bridge link, you must configure the WDS forwarding table by specifying the

Initial Configuration5-105. Security (802.11g) – Set the Authentication Type to “Open System” to allow open access without authentication, or “Shared

Using the Web-based Management Setup Wizard5-11hexadecimal or ASCII string of the appropriate length. The key can be entered as alphanumeric character

Initial Configuration5-12

6-1Chapter 6System ConfigurationBefore continuing with advanced configuration, first complete the initial configuration steps described in Chapter 5 t

System Configuration6-2When the home page displays, click on Advanced Setup. The following page will display.The information in this chapter is organi

Advanced Configuration6-3Advanced ConfigurationThe Advanced Configuration pages include the following options.Menu Description PageSystem Configures b

COMPLIANCESviOperation Using 5 GHz Channels in the European CommunityThe user/installer must use the provided configuration utility to check the curre

System Configuration6-4System IdentificationThe system information parameters for the wireless bridge can be left at their default settings. However,

Advanced Configuration6-5System Name – An alias for the wireless bridge, enabling the device to be uniquely identified on the network. (Default: Dual

System Configuration6-6CLI Commands for System Identification – Enter the global configuration mode and use the system name command to specify a new s

Advanced Configuration6-7TCP / IP SettingsConfiguring the wireless bridge with an IP address expands your ability to manage the wireless bridge. A num

System Configuration6-8DHCP Client (Enable) – Select this option to obtain the IP settings for the wireless bridge from a DHCP (Dynamic Host Configura

Advanced Configuration6-9• Default Gateway: The default gateway is the IP address of the router for the wireless bridge, which is used if the requeste

System Configuration6-10RadiusRemote Authentication Dial-in User Service (RADIUS) is an authentication protocol that uses software running on a centra

Advanced Configuration6-11Primary Radius Server Setup – Configure the following settings to use RADIUS authentication on the access point.• IP Address

System Configuration6-12• Key: A shared text string used to encrypt messages between the access point and the RADIUS server. Be sure that the same tex

Advanced Configuration6-13to display the current settings for the primary and secondary RADIUS servers.PPPoE SettingsThe wireless bridge uses a Point-

COMPLIANCESviiDeclaration of Conformity in Languages of the European CommunityEnglish Hereby, SMC Networks, declares that this Radio LAN device is in

System Configuration6-14PPP over Ethernet – Enable PPPoE on the RJ-45 Ethernet interface to pass management traffic between the unit and a remote PPPo

Advanced Configuration6-15IP Allocation Mode – This field specifies how IP adresses for the PPPoE tunnel are configured on the RJ-45 interface. The al

System Configuration6-16AuthenticationWireless clients can be authenticated for network access by checking their MAC address against the local databas

Advanced Configuration6-17Ethernet Supplicant Setup – Allows the access point to act as an 802.1X supplicant so it can be authenticated through its Et

System Configuration6-18MAC Authentication – You can configure a list of the MAC addresses for wireless clients that are authorized to access the netw

Advanced Configuration6-19Note: Client station MAC authentication occurs prior to the IEEE 802.1X authentication procedure configured for the access p

System Configuration6-20• Supported: The access point supports 802.1X authentication only for clients initiating the 802.1X authentication process (i.

Advanced Configuration6-21Local MAC Authentication – Configures the local MAC authentication database. The MAC database provides a mechanism to take c

System Configuration6-22• Permission: Select Allow to permit access or Deny to block access. If Delete is selected, the specified MAC address entry is

Advanced Configuration6-23command. To display the current settings, use the show authentication command from the Exec mode.AP(config)#mac-authenticati