HP M111 - Manual

Contents vii A Regulatory information Notice for U.S.A. .................................................................................................... 4-2 Notice for Canada .................................................................................................. 4-3 Notice for the Eur...

Introduction About this guide 1-2 About this guide This guide explains how to install, configure, and operate the M111 Client Bridge. Products covered The manual applies to the M111 Client Bridge (J9389A WW, J9523A Japan). Important terms The following terms are used in this guide. Conventions This ...

Introduction About this guide 1-3 Caution Identifies a hazard that can cause the loss of data or configuration information, create a non- compliant condition, or hardware damage. Commands and program listings Monospaced text identifies commands and program listings as follows: Example Description us...

Introduction Introducing the M111 Client Bridge 1-4 Introducing the M111 Client Bridge The M111 connects legacy Ethernet or serial communications devices to a wireless local area network (WLAN) with simplicity and security. It enables the deployment of legacy client devices (such as electronic cash ...

Introduction Safety information 1-5 Safety information Warning Professional Installation Required Prior to installing or using an M111, consult with a professional installer trained in RF installation and knowledgeable in local regulations including building and wiring codes, safety, channel, power,...

Introduction HP ProCurve Networking support 1-6 HP ProCurve Networking support HP ProCurve Networking offers support 24 hours a day, seven days a week through a number of automated electronic services. See the Customer Support/Warranty booklet included with your product. The HP ProCurve Networking W...

Chapter 2: Getting started 2 Getting started Contents Deploying the M111 ..................................................................................................... 2-2 Scenario 1: Connecting wired devices to a wireless network ................................ 2-2 Overview ...................

Getting started Deploying the M111 2-2 Deploying the M111 This chapter provides step-by-step instructions that explain how to configure the M111 for the following frequently used deployments.  Scenario 1: Connecting wired devices to a wireless network on page 2-2  Scenario 2: Connecting a wired de...

Getting started Scenario 1: Connecting wired devices to a wireless network 2-3  The MSM AP is operating in autonomous mode in its factory-default configuration. (As such, it obtains an IP address of 5.25 from the DHCP server and creates a wireless network call HP ProCurve .) Install the MSM AP as d...

Getting started Scenario 1: Connecting wired devices to a wireless network 2-4 B. Connect to the M111 Connect the LAN port on the computer to the Ethernet port on the M111 using a standard Ethernet cable. (If your computer has an older 10BaseT-only Ethernet interface, then use a crossover cable inst...

Getting started Scenario 1: Connecting wired devices to a wireless network 2-5 7. At the password prompt it is recommended that you change the default password. Enter the new password and select Save . About passwords The default username and password is admin. New passwords must be 6 to 16 printabl...

Getting started Scenario 1: Connecting wired devices to a wireless network 2-6 6. Select Save . The IP address of the M111 will immediately change, causing you to lose your connection to the management tool. This is normal. To re-establish the connection, configure the computer with a static IP addr...

Getting started Scenario 1: Connecting wired devices to a wireless network 2-7 2. Under General , configure settings as follows:  Select Enabled .  Profile name: The Profile name is just a friendly name used for display purposes. You can use the default value.  WLAN name (SSID): This is the name ...

Getting started Scenario 2: Connecting a wired device using MAC address cloning 2-9 Configuration procedure The initial configuration steps for this scenario are the same as for Scenario 1. For each step see the instructions on the indicated page. A. Configure your computer See Configure your comput...

Getting started Scenario 2: Connecting a wired device using MAC address cloning 2-10 2. Select Ethernet MAC cloning , then configure the following options:  Select the Discovered MAC address option. This option causes the M111 to take the MAC address of the wired device that is connected to Port 1 ...

Getting started Scenario 3: Connecting a serial device to a wireless network 2-12 Configuration procedure The initial configuration steps for this scenario are the same as for Scenario 1. For each step see the instructions on the indicated page. A. Configure your computer See Configure your computer...

Working with the M111 Management tool 3-3 Management tool The management tool is a web-based interface to the M111 that provides easy access to all configuration and monitoring functions. The computer used to connect to the management tool must:  Have at least Microsoft Internet Explorer 7/8 or Fir...

Working with the M111 Management tool 3-4 Customizing management tool settings To customize management tool settings, select Management > Management tool . Manager and Operator accounts Two types of administrative accounts are defined: manager and operator.  The manager account provides full man...

Working with the M111 Management tool 3-5 The following options can be used to prevent the management tool from being locked by an idle manager or operator:  Terminates the current manager session: When enabled, an active manager or operator session will be terminated by the login of another manage...

Working with the M111 Management tool 3-6 Security policies Security policies affect both manager and operator accounts. Select from one of the following options:  Follow FIPS 140-2 guidelines : When selected, implements the following requirements from the FIPS 140-2 guidelines:  Passwords must be...

Working with the M111 IP address configuration 3-7 Web server You can also configure the web server ports from which access to the management tool is permitted.  Secure web server port : Specify a port number for the M111 to use to provide secure HTTPS access to the management tool . Default is 443...

Working with the M111 IP address configuration 3-8 There are several solutions to this problem:  Pre-configure the DHCP server on the network to assign a specific IP address to the M111. To do this you need to specify the M111 MAC address and a reserved IP address on the DHCP server. The M111 MAC a...

Working with the M111 Radio configuration 3-9 5. When you save the IP address change, the connection to the management tool will be lost. To-reconnect, you need to re-launch the M111 management tool by browsing to: https:// new IP address assigned to the M111 . (For this to work, your computer must ...

Working with the M111 Radio configuration 3-10 To configure the radio Select Wireless > Radio . This opens the Radio configuration page: Configure parameter settings as follows: Wireless mode Select the transmission speed and frequency band. The permitted frequencies and channels are determined b...

Working with the M111 Radio configuration 3-11 Antenna selection Select the antenna on which the radio will transmit and receive. If a single antenna is used, it can be connected to either Main or Aux.  Diversity: In this mode both antennas are used to transmit and receive. The M111 supports both t...

Working with the M111 Radio configuration 3-12 If both options are enabled at the same time, whichever option is triggered first takes precedence. SNR is expressed in decibels (dB). The higher the number the stronger the signal. Note If 802.1X/ WPA/WPA2 is enabled, this can add an unpredictable dela...

Working with the M111 Using station profiles to establish a wireless link 3-13 Advanced wireless settings RTS threshold Use this parameter to control collisions on the wireless link that can reduce throughput. If the Status > Wireless page shows increasing values for Tx multiple retry frames or T...

Working with the M111 Using station profiles to establish a wireless link 3-15 To add or edit a station profile Select Wireless > Station profiles and do the following:  To add a new profile, select Add New Profile.  To edit a profile, select its name in the list. In either case, the Station pr...

Working with the M111 Using station profiles to establish a wireless link 3-16 When this option is enabled, this profile takes priority over profiles without active scanning. The M111 attempts to connect with active profiles first before trying other profiles in the list. Wireless security Wireless ...

Working with the M111 Viewing APs in the neighborhood 3-18 To facilitate matching, standard regular expressions can be used in the common name. For example: Use the backslash (\) as an escape character if you need to match a period (.) or other characters that have meaning in a regular expression. F...

Working with the M111 Configuring Quality of Service (QoS) 3-19 Field descriptions  MAC address: MAC address of the AP (Also called the BSSID).  SSID: SSID assigned to the AP.  Mode: Indicates the operating mode of the AP: A, B, or G.  Channel: Channel the AP is operating on.  Signal: Signal st...

Working with the M111 Configuring Quality of Service (QoS) 3-20 Outgoing wireless traffic on the wireless link is assigned to a queue based on the selected priority mechanism. Traffic delivery is based on strict priority (per the WMM standard). Therefore, if excessive traffic is present on queues 1 ...

Working with the M111 Configuring Quality of Service (QoS) 3-21 Very-high, high, normal, low priority This mechanism is unique to the M111. It enables you to assign a single priority level to all traffic on a station profile. If you enable one of these priority mechanisms, it takes precedence regard...

Working with the M111 Configuring Quality of Service (QoS) 3-22 IP QoS This option lets you assign traffic to the queues based on the criteria in one or more IP QoS profiles. Each profile lets you target traffic on specific ports or using specific protocols. For more information, see Creating IP QoS...

Working with the M111 Connecting serial devices 3-23 Settings Profile name Specify a unique name to identify the profile. Protocol Specify an IP protocol to use to classify traffic by specifying its Internet Assigned Numbers Authority (IANA) protocol number. Protocol numbers are pre-defined for a nu...

Working with the M111 Connecting serial devices 3-24 For complete instructions on how to configure this scenario, see Scenario 3: Connecting a serial device to a wireless network on page 2-11 . The M111 can also connect to a TCP host via Port 1. For example, in this scenario the host computer is on ...

Working with the M111 Connecting serial devices 3-25 2. Select Network > TCP serial. The TCP to serial configuration page opens. 3. Enable the TCP to serial configuration option and configure parameters as follows: TCP connection Mode  Client: The M111 acts as a TCP client and initiates a connec...

Working with the M111 Connecting serial devices 3-26 Data bits Number of data bits. Parity bit Sets the parity. Stop bits Number of stop bits. Baud rate Baud rate in bps. Software flow control  None: The M111 does not provide flow control. Instead, flow control is performed end- to-end by the remot...

Working with the M111 DNS configuration 3-27  Listening: When Mode is set to Server , indicates that the M111 is waiting for the remote TCP client to establish the connection.  Connecting: When Mode is set to Client , indicates that the M111 is attempting to establish a connection with the remote ...

Working with the M111 DNS configuration 3-28  If the M111 is configured as a DHCP client, the following options are displayed: DNS servers Dynamically assigned DNS servers Lists the servers that were assigned by the DHCP server. Override dynamically assigned DNS servers Enable this option to replac...

Working with the M111 Handling unsupported traffic 3-29  When enabled, the M111 switches servers if the current server replies with a DNS server failure message.  When disabled, the M111 switches servers if the current does not reply to a DNS request. DNS switch over This setting controls how the ...

Working with the M111 Cloning the address of a wired device 3-30 IP forwarding Ethernet devices that do not send any IP packets at startup will have no entry in the M111 wireless-to-MAC translation table. As a result, the M111 will not be able to route incoming IPV4 wireless traffic to these devices...

Working with the M111 Cloning the address of a wired device 3-31 Enabling Ethernet MAC cloning Configure Ethernet MAC cloning as follows: 1. Select Wireless > Bridging . The Wireless bridging page opens. 2. Under Ethernet MAC cloning , enable one of the following options:  Discovered MAC address...

Working with the M111 Cloning the address of a wired device 3-32 Setting up management traffic interception The management traffic interception feature (on the Wireless > Bridging page) lets you establish administrator logins to the M111 management tool when MAC cloning is active and lets you int...

Working with the M111 Using filters to restrict wireless traffic 3-33 3. Select Save . SNMP notifications (UDP port 162) This enables support for the SNMP notifications, allowing the M111 SNMP agent to send notifications using UDP port 162. Remote log (UDP port 514) This enables support for the Remo...

Working with the M111 Assigning a management address 3-34 Assigning a management address A Management address is a secondary, static IP address that provides a fixed address where the M111 management tool can be reached via either Port 1 or the Wireless port. Note The management address must be on a...

Working with the M111 SNMP 3-35 SNMP The M111 provides a robust SNMP implementation supporting both industry-standard and custom MIBs. For information on supported MIBs, see the M111 SNMP MIB Reference Guide . Select Management > SNMP to open the SNMP agent configuration page. By default, the SNM...

Working with the M111 SNMP 3-36 Attributes  System name : Specify a name to identify the M111. Default is the M111 serial number.  Location : Specify a descriptive name for the location where the M111 is installed.  Contact : Specify an email address for a contact person for the M111.  Port: Spe...

Working with the M111 Managing certificates 3-37 Access level Type of access assigned to the user:  Read-only: The user has read and notify access to all MIB objects.  Read-write: The user has read, write, and notify access to all MIB objects. Notification receivers This table lists all defined SN...

Working with the M111 Managing certificates 3-38 802.1X certificates 802.1X certificates are managed on the Security > 802.1X certificates page. The M111 supports two 802.1X certificates:  TLS client certificate: Installation of this certificate is mandatory if 802.1X with an EAP method of TLS i...

Working with the M111 Managing certificates 3-39 802.1X — Manage TLS client certificates The Certificate field shows the contents of the CN field in the certificate. This is the domain name of the certificate. Select View to see the contents of the certificate. 802.1X — Trusted CA certificates The M...

Working with the M111 Managing certificates 3-40 Trusted CA certificate store This list displays all CA certificates installed on the M111. The M111 uses the CA certificates to validate the certificates supplied by administrators accessing the M111 management tool. Multiple CA certificates can be in...

Working with the M111 Managing certificates 3-41 Certificate and private key store This list displays all certificates installed on the M111. The M111 uses these certificates and private keys to authenticate itself to peers. The following information is displayed for each certificate in the list:  ...

Working with the M111 Managing certificates 3-42 1. Specify the name of the certificate file or select Browse to choose one from a list. Certificates must be in PKCS #7 format. 2. Specify the PKCS #12 password . 3. Select Install to install the certificate. Default installed private key/public key c...

Working with the M111 Managing certificates 3-43 Changing the certificate assigned to a service Select the service name to open the Certificate details page. For example, if you select Web management tool , you will see: Under Authentication to the peer , select a new Local certificate and then sele...

Working with the M111 Configuration file management 3-44 Configuration file management The configuration file contains all the settings that customize the operation of the M111. You can save and restore the configuration file manually or automatically by selecting Maintenance > Config file manage...

Working with the M111 Configuration file management 3-45  Manager and operator username/password: This information is not saved in the backup configuration file. This means that if you restore a configuration file, the current username and password on the AP are not overwritten.  All other configu...

Working with the M111 Software updates 3-46 5. For Time of day, specify the hour and minute on which to perform the backup or restoration. Use the format hh mm, where:  hh ranges from 00 to 23  mm ranges from 00 to 59 6. For URL, specify the path that leads to the local or remote directory in whic...

Working with the M111 Software updates 3-47 Caution  Before updating be sure to check for update issues in the Release Notes.  Even though configuration settings are preserved during software updates, it is recommended that you backup your configuration settings before updating. See Manual configu...

Regulatory information A-2 Notice for U.S.A. Manufacturer's FCC Declaration of Conformity Statement For questions regarding this declaration, contact the Product Regulations Manager at the above address or phone number. This device complies with Part 15 of the FCC rules. Operation is subject to the ...

Regulatory information A-3 Notice for Canada This device complies with the limits for a Class B digital device and conforms to Industry Canada standard ICES-003. Products that contain a radio transmitter comply with Industry Canada standard RSS210 and are labeled with an IC approval number. Cet appa...

Regulatory information A-4 2.4 GHz Operation  This device may be operated indoors or outdoors in all EU and EFTA countries using the 2.4 GHz band (Channels 1 - 13), except where noted below.  In France , this device may use the entire 2400 - 2483.5 MHz band (Channels 1 through 13) for indoor appli...

Regulatory information A-5 Disposal of Waste Equipment by Users in Private Household in the European Union This symbol on the product or on its packaging indicates that this product must not be disposed of with your other household waste. Instead, it is your responsibility to dispose of your waste e...

Regulatory information A-6 Notice for Japan Notice for Taiwan DGT LPD (Low Power Device) Statement Notice for Korea (warning for wireless equipment)

Appendix B: Resetting to factory defaults B Resetting to factory defaults Contents How it works................................................................................................................. 5-2 Using the Reset button....................................................................

Resetting to factory defaults How it works B-2 How it works Caution Resetting the M111 to factory defaults deletes all configuration settings, resets the manager username and password to “admin”, and enables the DHCP client. If no DHCP server assigns an address to the M111, its address defaults to 1...

Technology for better business outcomes To learn more, visit www.hp.com/go/procurve/ © Copyright 2010 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty...