===================================================================
Readme for ORiNOCO Wireless AP-4000 Access Point
Release 3.2.1 May 2006
===================================================================
Welcome to Release 3.2.1 of the ORiNOCO Wireless AP-4000 Access
Point system. This readme describes the following for the ORiNOCO
Wireless AP-4000 Access Point.
-------------------------------------------------------------------
1. Introduction
2. Software Description
3. Release History
4. Installation Notes
5. Know Issues
6. Obtaining Technical Assistance
-------------------------------------------------------------------
1. Introduction
The ORiNOCO Wireless AP-4000 is part of a wireless Internet
access infrastructure. It functions as a wireless network
access point to the Internet or other data networks. As
clients move from one coverage cell to another, AP-4000 units
automatically perform client handovers within the same subnet.
The AP-4000 system provides:
- Easy installation and operation
- Automatic client handover
- Over-the-air encryption of data
- High-speed links to the Internet
Access Point management is provided through CLI (Command Line
Interface), Standard Web based Interface, and SNMP (Simple
Network Management Protocol). Any of these management
interfaces can be used to view and configure the Access
Point's parameter settings.
---------------------------------------------------------------------
2. Software Description
In order to ensure that we are able to provide you with the latest
available software, the latest version of the AP software may be
downloaded from our website by initially visiting http://support.proxim.com/
The AP software is not included on the CD supplied.
2.1 About this software
Access Point Software comprises
* Access Point image (Download from the online support knowledgebase)
* Access Point scantool
* Access Point MIBs (Also available for download from the online
support knowledgebase)
802.11 MIB: mib-802.mib
IANAifType-MIB.mib
MIB-II: rfc1213.mib
Bridge MIB: rfc1493.mib
EtherLike MIB: rfc1643.mib
SNMPv2-MIB.mib
orinoco.mib
IEEE 8021 MIB: 802.1X.mib
With this software you should have received one Quick Install Guide,
which describes the hardware and initial software installation of the AP.
Additionally, the ORiNOCO AP-4000 User Guide can be found in PDF form on
the CD accompanying this release and online at the Proxim WEB site.
This document describes in detail the installation, configuration, and
management of the Access Point.
Alternatively, you can access detailed information in the online help file
by clicking on the "Help" button on the WEB interface.
2.2 Files Installed
The following software will be installed in the directory
specified during setup:
Scanning Tool: SCANTOOL.EXE v2.4
Problem Report form: REPORT.TXT
License Description: LICENSE.TXT
Readme file (this file): README.TXT
2.3 XTRAs Folder - CD Only
In the XTRAs\Solarwinds folder we include a TFTP server
(OEM-TFTP-Server.EXE) that may be installed on
the user's PC for downloading and uploading files to and from
the AP-4000.It comes with help documentation included in the
application when it is executed.
In the XTRA\Ekahau Site Survey folder we include Install_Survey.exe
and EULA.txt.
This software can be installed on the user's PC to assist in surveying
Wi-Fi Networks.
Acrobat Reader is available in XTRAS folder
2.4 European Waste(Disposal) of your Electronic and Electric Equipment document.
WEEE_flyer.pdf
-------------------------------------------------------------------
3.0 Release History
3.1 Release 3.2.1 - May 2006
- Following are the new features added in this release
Transmit power control in 1db increments
- The following issues and/or RFCs have been fixed in this release
# Calling reboot twice would reset the AP to factory defaults (#1500)
# Adding an extensive range of IP adress in the
new DHCP Server IP Pool Table cause AP to reboot (#849)
# Malformed Traps were sent by the AP in some cases (#1407)
# after upgrading to v3.2, the AP disables SSID broadcast (#1506)
# Show the right cipher type in station statictics (#18972)
# When updating a config file, the previous IP Pool
tables (and other tables) remained (#1019)
# Customers in the ETSI domain could not select
the lower four channels after disabling ACS.
With v3.2, the user could only uncheck ACS.
However, now with V3.2.1, the user can select one of the four
lower channels in the ETSI regulatory domain (#1539)
3.2 Release 3.2.0 - March 2006
- Following are the new features added in this release
Multiple BSSID with upto 4 beacons
Ability to broadcast all the SSIDs configured in the AP. The clients can
connect to the appropriate SSID that matches the client’s capabilities,
access method and security policy requirements.
- The following issues and/or RFCs have been fixed in this
release
# Issue of 802.11i Authentication (2005.11.22 NEC infrontia Corp.) (#1434)
# SNMPv3 does not work with v3.1.0 (#1420)
# EU ACS cannot be disabled with v3.1.0 (#1383)
# WPA-PSK errors out when 64 characters are used. (#1329)
# If Vlan is enabled then it is possible to set WEP txkey as key 1/2/3.
Only key 0 is used as the txkey (#977)
# Having one SSID broadcast reduces and eliminates the number of
allowed clients. (#1445)
# Can not create/add IP management IP address table using SNMP (#1345)
# Learn Table is not aged out (#1449)
# reboots at MS It show (#1424)
# Added the vlanid information regarding client in the Statistics tab (#1355)
# Disable "SuperMode" checkbox for 802.11g and bg interface. (#1367)
# There are many NULL data (PS=0) from the AP. (#1404)
# Wireless Station annouce message on incorrect VLAN (#1408)
# Fall backrate for BG mode of AP takes long causing EAP timeout issue. (#1446)
# Incorrect trap message coming out of the AP. (#1454)
# AP 802.1x rekey every 14h30 even with Re-Key set to zero. (#1455)
# Multicast rate returns to default when enabling or disabling ACS. (#1456)
# Client is assigned to wrong VLAN when SSID matches except for specific
suffix. (#1459)
3.3 Release 3.1.0 - August 2005
- Following are the new features added in this release
Simple Network Time Protocol (SNTP)
The AP will utilize SNTP to timestamp syslog messages.
Enhanced Client Connect/Disconnect syslog messages
When a client authenticates to an access point, the following information is
provided via syslog: Timestamp, MAC Address, SSID, Auth Type, Cipher Type,Status.
When a client de-authenticates from an AP, the following information is provided
via syslog: Timestamp, MAC Address, SSID , Cipher Type, Disconnect reason.
Configuration Change Counter
This feature allows tracking of configuration changes in the AP so that
network management systems will be able to easily determine whether or not the
AP configuration has changed without having to poll each management object.
Unique RADIUS Accounting Session ID
This feature allows service providers to more accurately track usage.
- The following issues and/or RFCs have been fixed in this
release
# AP does not pass IPv6 in VLAN mode 050414-000070. (#1167)
# 802.1x allows WEP client to connect to the AP initially. (#1256)
# AP management via Ethernet hangs up. (#1156)
# If 24 or more clients are try to authenticate at the same time,
failure occurs. (#1012)
# CLI: creating an ssh fingerprint via telnet causes the telnet session
to close. (#17720)
# CLI: Command set speclinkstatus does not work. Should be removed when
not supported (#1210)
# VLAN assignment by Radius - Accept message not handled by AP. (#1185)
# WPA - PSK - clients can not associate with AP. (#1093)
# AP loses management ability under high broadcast load. (#1069)
# Sony PDA and AP with PEAP connection issue. (#1295)
# Syslog function problem - detecting logout of clients. (#380)
3.4 Release 2.6.0 - January 2005
- Following are the new features added in this release
Load Balancing
Create maximum threshold value for client connections per wireless
interface to limit the number of users on AP.
Make Defer Threshold Configurable
This feature allows the administrator to configure the Distance between
APs management object for Atheros based wireless interfaces.This enables
the device to perform better in high noise environments by increasing
the receive sensitivity and transmit defer threshold.
Disable DFS in EU, EU2 and UK Variants
DFS is currently enabled for the 5 GHz Lower (5.15 - 5.25 GHz)
and Middle (5.25 - 5.35 GHz) bands for the products programmed
for the ETS regulatory domain.
ACS is also enabled by default and can not be disabled (read-only parameter)
via management interfaces.
This feature disables DFS operation in the lower band which is not
required by the ETSI regulatory domain bodies. DFS operation is still
done on the middle band.
This feature also allows the administrator to disable ACS and configure
channels in the Lower band (36, 40, 44, and 48).
This feature will allow WDS configuration for ETSI APs.
MIC Attack Reporting
Implemented Syslog and HTTP Alarms for the Mic Attack and Mic Report Attack
packets.
80211.d Regulatory Domain Defects
Additional country codes to the existing software variants.Fixes were also done
on the User Guide to make sure the user guide and software image are consistent.
Save antenna diversity settings to config file
Allows configuration of which antenna to use on the AP. This configuration is
supported by SNMP and CLI management interfaces.
Internet Browser configuration support
AP browser UI support is for the last two versions of IE (v6 and v5.01)
and the last two versions of Netscape (v7.1 and v7.2).
Backward compatibility
Products running firmware version 2.3 or later shall be upgradeable to
the 2.6.0 software image while maintaining the existing configuration.
- The following issues and/or RFCs have been fixed in this
release
# QOS client with SWTKIP has no connectivity. The client reports
decryption errors. (#17717)
# Syslog and HTTP Alarms to be implemented for the Mic Attack and Mic Report
Attack packets.(#17715)
# Country List for 802.11d on an AP with Europe (ETSI) does not match
documentation. (#17643 )
# Country List for 802.11d on an AP with USA(FCC) does not match
documentation. (#17642)
# MAC addresses in MAC authentication needs to be all lower case. (#963)
# AP does not indicate the number of Reject counters with Microsoft Windows
IAS. (#481)
# User Guide: Updated WDS/WEP procedure (#821)
# User Guide: Updated input requirements for SSID/Network Name (#833)
# User Guide: Updated WPA-PSK configuration instructions (#865)
# User Guide: Updated Radius accounting and MAC authentication procedure (#879)
# User Guide: Updated description of LED functionality (#877)
# User Guide: Added Warranty Statement to manuals (#905)
# User Guide: Updated WDS link description (#908)
# User Guide: Updated RBMA feature description (#909)
# User Guide: Updated outdated WEP Plus reference (#947)
# User Guide: Updated procedure for enabling 802.11d and setting country code (#974)
# User Guide: Added bookmarks in PDF files (#997)
# User Guide: Updated Tx Power Specifications (#17813)
# User Guide: Updated TCP/UDP Port Number value (#1011)
3.5 Release 2.5.2 - October 2004
- Following are the new features added in this release
WME(Wireless Multimedia)
Spectralink VOIP support for 802.11g
This feature support the WMM subset of IEEE 802.11e draft amendment based
upon the Wi-Fi Alliance WMM specification
Radius based authentication for management Access
Device Management Access control using RADIUS
User Modes Supported – Super User, Limited User
Support for Telnet/SSH, HTTP/HTTPS
Authentication Mechanism based on Username-Password
Local authentication mode
Support of SSH2 protocol for secure remote login for management access
Improved Rogue AP Detection Support
Promiscuous mode monitoring of Clients
Multi-band (2.4 GHz & 5 GHz) Scanning
Continuous scanning on dedicated Interface(s)
Radius Attributes Support (Enhancements)
Attributes identified based on customer requirements & RFC/Competitor
Analysis Attributes include: State, Calling Station Id, Called Station Id,
Session Timeout, Acct-Delay-Time, Acct-Input-Octets, Acct-Output-Octets,
Acct-Session-Time, Acct-Input-Packets, Acct-Output-Packets,
Acct-Terminate-Cause, Class, Vendor Specific Attributes for VLAN.
CLI Batch file for Configuration
Upload and Execution of CLI Batch file via HTTP/TFTP
Enhanced Auto-Configuration feature
VLAN Enhancements
Security Policy Configuration per VLAN
Includes mixed mode of security
Authentication Server Configuration per VLAN
RADIUS Server based VLAN assignment of users
Ability to remotely Shutdown the Wireless Interface(s)
802.11d support
Allow clients to adopt to regulatory domain of AP
Add Country Specific Regulatory Information
Ability to disable Reset option
Option to disable Hardware Reset (Reset to Factory defaults)
Super A/G mode
Higher data rate for 11g
Turbo A/G Mode
Turbo mode can be enabled on 802.11a, 802.11g, and 802.11b/g operational
modes and enhances the throughput by performing channel bonding.
DHCP Relay Agent
The AP can forward DHCP requests from clients to configured DHCP servers on
the same or different network segment.
Broadcast SSID
We support the ability of broadcasting a single SSID when multiple SSIDs are
configured on a wireless interface; the administrator must enable this
feature on the desired SSID to broadcast the SSID in the beacon.
Closed system is also supported per SSID when multiple SSIDs are configured.
Mixed Security Modes using Security Profiles
Security is now configured using Security Profiles which can be applied to
the wireless interface’s SSIDs.
Mixed security modes can be used with VLAN disabled, but VLAN must be
enabled when you want to support multiple SSIDs.
The Security Profiles can be configured with combinations of supported
security modes
WPA2 including Pre-authentication and PMK Caching
WPA2 is compliant with the IEEE 802.11i which includes mutual authentication
and CCMP/AES data confidentiality protocol.
Pre-authentication and PMK caching allows for an AP to pre-authenticate a
client which in turn will allow for faster roaming between APs.
- The following issues and/or RFCs have been fixed in this
release
# Change the CLI vlanmgmtid for untagged (-1) to show untagged in the show
vlanmgmtid (#730)
# The item "Authorization lifetime" is not in "EAP/802.1x Auth" menu. But if
Authorization lifetime is changed in "RADIUS Auth" menu, it is effective.
(#719)
# CLI command for timeout of MAC addresses in the IP LAN table. (#674)
# Place the enabled VoIP – spectra link option on the HTTP GUI. (#755)
# CLI: Add management objects for enabling/disabling the trap groups.
(#12114)
# CLI - add command/parameter name for version - show sysversion (#10527)
# Request to modify DHCP client functionality to keep renewing the lease.
(#11735)
# Trap requested for manual reboot (#10762)
# AP allows configuration of VLAN ID 0 (#16414)
3.6 Release 2.4.12 - September 2004
- No new feature additions in this release
Singapore variant list updated. Earlier build use to support Singapore .11a
lower band, upper band and ISM band channels. The certification from
singapore prohibits us from supporting lower band channels for Singapore
variants. This image software handles the Singapore variant differently.
- The following issues and/or RFCs have been fixed in this
release
# APs with Atheros radios drop connections when more than 5
spectralink calls connect simultaneously; however, the AP
will support up to 5 calls connected simultaneously.
(#16427)
# There is a problem retrieving the config file via TFTP. The
workaround is to select retrieving the config file via HTTP.
(#16531)
3.7 Release 2.4.11 - May 2004
- Following are the new features added in this release
Spectralink Support for Atheros Radio
Deny Non-Encrypted Data Support for Atheros Radio
- The following issues and/or RFCs have been fixed in this
release
# WEP mode on wireless VLAN is fixed. (#768)
# When the AP is input over than 255 characters(ASCII) in IP Address
of "RADIUS" - "RADIUS Acct", the error message will not occur and
locked AP. (#735)
# If VLAN Management is enabled, it is no longer possible to link the
AP with different SSIDs. (#732)
# VLAN with WPA-PSK is fixed. (#786/712)
# Web: Change Orinoco MIB name to Enterprise MIB (#12004)
# Userguide wording was updated with the following text:
"Encryption Keys must be configured for WEP clients if
mixed mode is selected." (#792)
# The SYSLOG HTTP window now includes all syslog host table
entries. The heart beat status is a drop down menu, the
heart beat interval text box is enabled or disabled depending
on the heart beat status. (#11663)
# Added ":"'s to mac address verbage to the sentence in "Static
MAC" tab of the web interface. (#15269)
# Last Known Good Config File Functionality is now working
(#15547)
# FP2 - CLI should not permit telsessiontout to be configured
less than 60 (#15735)
# Added an extra column for additional space and fixed some of
the column sizes for trap messages in the Status tab. (#15924)
# Add SVP - spectra link VoIP into the Atheros 11bg upgrade kit
and 11a upgrade kit. (#666)
# Setup Wizard now sets AP in 11a-WPA mode. (#511)
3.8 Release 2.4.10 - Jan 2004
Initial Release
-------------------------------------------------------------------
4. Installation Notes
4.1 If you download the installation from the web:
The software, MIB, and documentation are currently found under
Answer ID 1250. Please select the appropriate file, image,software,
or documentation and proceed to either view from the web or download
to a specific location. The WinZip Self-Extractor will request a
temporary location to unzip files. You may use the default location
or choose a customized location.
The Help and User Guides folder includes a setup.exe file. Please run
setup.exe in order to use the help documentation.
4.2 If you are using the installation CD:
Insert the ORiNOCO Installation CD in your CD-ROM drive and
the autorun facility will start the CD wizard which will
guide you through the installation process.
4.3 System Requirements
- Windows 98, NT, 2000, or XP
- At least 5 Mb of free disk space
- A web browser, preferably MS IE 6 with Service Pack 1 or
Netscape 6.1
Note :
-----
For SSL, IE 5.00 (128 bit) with Service Pack 2 (or)
IE 5.0 (56 bit) with patch Q240308 (or) IE 6.0
(128 bit) with Service Pack 1 and Patch Q323308
is required.
For 802.1x Authentication using TLS, XP Clients should
have Service Pack 1 installed on it.
-------------------------------------------------------------------
5. Known Issues
# When "Super" mode is enabled, then 1x PEAP authentication fails (#19041)
# Blacklist CLI command is in User Guide but does not exist
in product's CLI. This should be removed from user guide,
and re-added when CLI command is properly implemented (#19036)
# WDS or Mesh mode - when exceeding a set # of pps (packets per second),
over-running the total available wireless throughput, the load may cause
the system to reboot. This may be encountered in high bandwidth
environments running UDP. (#19010)
# Radius Accounting access-accept packets are modified during
transmission, breaking accounting by ignoring the request. (#1542)
# aplinklen shows up as "0" in CLI when software is upgraded
to R3.1.x. This is only a display issue. The default value that is
actually used is "200".
# Mixed Mode with WEP & WPA enabled does not work on a
D-Link client using WEP. (#17465)
# Syslog requires disabling and re-enabling the Syslog
whenever adding or deleting an IP Address to the table
(#16442)
# If Vlan is enabled then it is possible to set WEP txkey as
key 1/2/3. Only key 0 is used as the txkey. (#977)
# It is possible to configure and enable multiple radius
profiles (with different vlan id) for the same radius
server. The functionality involving that radius server
may not work correctly in such cases. (#17827)
# It is possible to configure two SSIDs, one with non-secure
security profile and other with security profile containing
WPA/WPA-PSK/802.11i/802.11i-PSK, on the same interface. Some
WPA/WPA-PSK/802.11i/802.11i-PSK clients may face problems while
connecting in these scenarios. (#17826)
# Configuring security mode WPA/WPA-PSK/802.11i/802.11i-PSK for
the first security profile returns error. A workaround is to
use the configure a new security profile with these values and
assign it to the SSID. Another work around to do that for first
security profile is the following.
- Go to SSID/VLAN/Security Page
- Go to SecProfiles page and edit first security profile.
- enable 802.1x security mode and hit OK
- disable non-secure security mode and hit OK
- enable WPA/WPA-PSK/802.11i/802.11i-PSK and hit OK
- disable 802.1x and hit OK. (#17656)
-------------------------------------------------------------------
6. Obtaining Technical Assistance
If you encounter problems when using this product or would like information
about our other ORiNOCO Wireless products, please contact the reseller from
whom you purchased the equipment for support. If you would like reseller
contact information, please contact Proxim inside sales at 1-800-229-1630
or use the contact information on our website.
6.1 Troubleshooting
For the most up-to-date, detailed troubleshooting information, refer to the
ORiNOCO AP-4000 User Guide and Proxim Knowledge base.
6.2 Obtaining Documentation
The user guide is available in English language and you
can access the most recent software and user documentation
on the World Wide Web at the following site: http://www.proxim.com
-------------------------------------------------------------------
END OF FILE
Download Driver Pack
After your driver has been downloaded, follow these simple steps to install it.
Expand the archive file (if the download file is in zip or rar format).
If the expanded file has an .exe extension, double click it and follow the installation instructions.
Otherwise, open Device Manager by right-clicking the Start menu and selecting Device Manager.
Find the device and model you want to update in the device list.
Double-click on it to open the Properties dialog box.
From the Properties dialog box, select the Driver tab.
Click the Update Driver button, then follow the instructions.
Very important: You must reboot your system to ensure that any driver updates have taken effect.
For more help, visit our Driver Support section for step-by-step videos on how to install drivers for every file type.