Bluesocket BlueSecure 1840 Manual de usuario
1
BlueSecureTM Access Point 1840
Installation Guide
Bluesocket, Inc
10 North Avenue
Burlington, MA 01803 USA
+1 781-328-0888
www.bluesocket.com
Document Version 1.0
BlueSecure™ Access Point 1840 Installation Guide
2
Copyright Notice
Copyright © 2009 Bluesocket, Inc.
All rights reserved. No part of this document may be reproduced in any form or by
any means, electronic or manual, including photocopying without the written
permission of Bluesocket, Inc. The products described in this document may be
protected by one or more U.S. patents, foreign patents, or pending patents. This
document is provided “as is” without warranty of any kind, either express or
implied, including, but not limited to, the implied warranties of merchantability,
fitness for a particular purpose, or non-infringement. This publication could include
technical inaccuracies or typographical errors. Changes are periodically added to
the information herein; these changes will be incorporated in new editions of the
document. Bluesocket inc. may make improvements or changes in the products or
the programs described in this document at any time.
Trademarks
Bluesocket, The Bluesocket Logo, Secure Mobility, BlueView, and BlueSecure are
trademarks or registered trademarks of Bluesocket, Inc. Bluetooth is a trademark
owned by Bluetooth SIG, Inc., U.S.A. and is licensed to Bluesocket, Inc. All other
trademarks, trade names and company names referenced herein are used for
identification purposes only and are the property of their respective owners.
BlueSecure™ Access Point 1840 Installation Guide
3
Table of Contents
I. Overview............................................................................................................................ 4
II. Familiarizing Yourself with the BSAP-1840 Hardware................................................. 5
III. Provisioning Your Bluesocket WLAN for BSAPs............................................................ 8
IV. Selecting a BSAP Installation Location........................................................................ 11
V. Wall Mounting the BSAP-1840...................................................................................... 12
VI. Connecting and Powering the BSAP............................................................................ 15
VII. Using the BSAP Command Line Interface (CLI)........................................................ 17
VIII. General Specifications.................................................................................................... 23
IX. Appendix A: Console Cable Pin-out ............................................................................. 24
BlueSecure™ Access Point 1840 Installation Guide
4
I. Overview
The BlueSecure Access Point 1840 is an 802.11n-based “thin” access point that works in
conjunction with BlueSecure Controllers (BSCs) for enterprise wireless LAN (WLAN)
deployments. The BlueSecure Access Point 1840 features dual radios supporting 802.11a/n and
802.11b/g/n with six external antenna connectors.
BSAPs are simple to configure and require only minimal provisioning to make them operational
on a WLAN secured and managed by a BlueSecure Controller
BSAPs can be directly attached to any existing Layer-2 or Layer-3 Ethernet switch and
communicate with the BSC across any subnet boundary. Once the BSAP has discovered and
established Layer-2 or Layer-3 communication with its home (i.e., host) BlueSecure Controller,
advanced configuration and provisioning may be applied either to individual BSAPs or globally
across the entire WLAN usin the BSC’s web-based Administrator Console.
Figure 1: BSAPs Automatically Discover BSCs across L2/L3 Networks
Once the BlueSecure Access Point has downloaded its configuration from the BlueSecure
Controller, the BSAP initializes its radios and begins servicing clients.
This guide provides complete installation procedures for your BSAP including:
• Familiarizing yourself with the BSAP hardware
• Provisioning your Bluesocket WLAN for BSAPs
• Selecting a BSAP installation location
• Connecting and powering the BSAP
• Using the BSAP command line interface (CLI)
BlueSecure™ Access Point 1840 Installation Guide
5
II. Familiarizing Yourself with the BSAP-1840 Hardware
Make sure that you receive the following items in the package:
1 - BSAP-1840
1 - Wall-mounting Hardware (Wall/table bracket/stand, 4 screws, 4 wall anchors)
8 - Adhesive rubber feet
1 - Ceiling mounting Hardware
Please spend a few minutes familiarizing yourself with the BSAP-1840 enclosure.
Antennas Connectors
The BSAP-1840 has 6 external reverse SMA connectors (diagram above only shows 3) for
wireless communications. There are three connectors for each band which are clearly marked
as 2.4Ghz or 5Ghz on the chassis.
BlueSecure™ Access Point 1840 Installation Guide
6
LED Indicators
The following LED indicators are located on the top of the BSAP-1840 housing.
Table 1: Status and Radio LED Definitions
Status 2.4Ghz LED 5Ghz LED Description
Yellow Solid Off Off Initial power-up
Green Solid Off Off Initializing software and acquiring an IP
address
Green Blink Off Off Discovering Bluesocket controller
Green Solid Green
Solid/Blink Green
Solid/Blink Radios Activated and passing traffic
Orange Solid Off Off Software Upgrade
Table 2: Network LED Definitions
Network LED Description
Off No Link Detected
Amber - ON 10/100 Link Detect with No Activity
Amber - Blinking 10/100 Link Detect with with Activity
Green - ON 1000 Link Detect with No Activity
Green - Blinking 1000 Link Detect with with Activity
The BSAP does not have a power switch. It’s powered on when connected to an optional
external AC power adapter (BSAP-PWR-000-00-1), and the power adapter is connected to a
power source. The BSAP power adapter automatically adjusts to any voltage between 100-240
volts at 50 or 60 Hz. No voltage range settings are required.
The BSAP may also receive Power over Ethernet (PoE) from a model BSC-600/1200 Controller,
switch or other network device that supplies power over the network cable based on the IEEE
802.3af standard.
BlueSecure™ Access Point 1840 Installation Guide
7
Ethernet/PoE Connector
The BSAP-1840 has one auto-sensing 10BASE-T/100BASE-TX/1000BaseT RJ-45 connector that
can be attached directly to 10BASE-T/100BASE-TX/1000BaseT switches to provide a full-duplex
link. These segments must conform to the IEEE 802.3 or 802.3u specifications.
This connector uses an MDI (i.e., internal straight-through) pin configuration. You can use
straight-through twisted-pair cable to connect this port to most network interconnection devices
such as a switch or router that provide MDI-X ports.This connector will sense the correct wiring
polarity, so no crossover cable is required.
The BSAP appears as an Ethernet node and performs a bridging function by moving packets
from the wired LAN to remote workstations on the wireless infrastructure.
The Ethernet/PoE RJ-45 connector also supports Power over Ethernet (PoE) based on the IEEE
802.3af standard.
802.3af specifies Power over Ethernet for “mid-span”, where a PoE injector are located in the
path between the network and the AP, as well as “PSE”, where the power is supplied by the
network switch the AP is attached to. Mid-span devices typically provide power on the unused
pairs (4+5 & 7+8) and only provide 100Mbps maximum throughput. To realize the full benefit
of 802.11n, the BSAP-1840 should be connected to a Gigabit Ethernet PoE switch or injector,
such as Bluesocket model BSAP-POE-001-00-0.
Reset Button
Use this button to reset the BSAP or restore its factory default configuration. If you hold down
the button for less than 5 seconds, the BSAP will perform a hardware reset. If you hold down
the button for 5 seconds or more, any configuration changes you may have made are removed,
and the factory default configuration is restored to the BSAP.
Serial Console Port
Use this port to connect a console device to the BSAP-1840 via special Cisco-type serial cable.
See Appendix A for additional details. The console device can be a laptop running a program
like Tera-Term or Hyper-terminal. The default settings are 9600, 8-bit, no-parity.
Kensington Security Slot
The BSAP includes a Kensington security slot on the side panel. You can prevent unauthorized
removal of the BSAP by wrapping a Kensington security cable (not provided) around an
unmovable object, inserting the lock into the slot, and turning the key.
BlueSecure™ Access Point 1840 Installation Guide
8
III. Provisioning Your Bluesocket WLAN for BSAPs
There are prerequisites that must be met before deploying BSAPs in a live network
environment. These prerequisites ensure that the BSAPs are able to discover and connect to a
BlueSecure Controller. Implementing these prerequisites also relieves you from needing to
manually configure each BSAP-1840.
The deployment prerequisites for BSAPs are:
• BSAP IP Address - Each BSAP requires a unique IP address.
• Host BlueSecure Controller IP Address - Each BSAP also needs the IP address of
the host BSC to which it will connect and from which it will obtain its software image
and configuration.
This section describes how to provision your Bluesocket WLAN when deploying BSAPs:
• On the same Layer-2 subnet as the BSC
• Across a routed network with Layer-3 connectivity to the BSC
Deploying BSAPs on the Same Layer-2 Subnet as the BSC
If the BSAPs are on the same subnet as the home BlueSecure Controller, you can run a DHCP
server on the BSC to manage IP address assignment to BSAPs. In this scenario, the BlueSecure
Controller must be the only DHCP server for the subnet.
Alternatively, you can configure the BlueSecure Controller to run a DHCP relay agent to relay
DHCP communications between the BSAPs and a DHCP server on your network.
Figure 2: Deploying BSAPs on the same Layer-2 subnet as the BSC
When you run a DHCP server or a DHCP relay agent on the BSC to assign IP addresses to
BSAPs on the managed side, the BSC will also pass its IP address to the BSAPs automatically
using vendor-specific option 43. The BSAP will then connect to the IP provided by the DHCP
vendor option as its host BSC.
BlueSecure™ Access Point 1840 Installation Guide
9
See the
BlueSecure Controller Setup and Administration Guide
for detailed DHCP server and
DHCP relay agent configuration procedures.
In this deployment scenario, simply connect and power on the BSAPs. They will automatically
discover and communicate with their home BSC.
Deploying BSAPs with Layer-3 Connectivity to the BSC
You can also deploy BSAPs on a routed network with Layer-3 connectivity to the BSC
Figure 3: Deploying BSAPs across a routed network
In this deployment scenario, you must ensure that each BSAP is able to communicate with the
BSC across the routed network by verifying that:
• There are no NAT devices between the BSAPs and the BSC
• Protocol 97, UDP Port 53, and TCP/UDP Port 33333 traffic is allowed between the BSAPs
and the BSC
Each BSAP will receive its IP address from your existing network DHCP server. An exception
case is if the BSAP is beyond a managed side router, running IP helper. Then the BSAP will
receive its IP address from the BSC, and be able to discover it without any additional
configuration.
The BSAP also needs the IP address of the home BSC to which it will connect and from which it
will obtain its software image and configuration. Again, this is not needed if the BSAP is on the
managed side getting a relayed IP address from the BSC. You can provide the home BSC IP
address to a BSAP using one of the following methods:
• DHCP Server Option 43
You can manually configure the DHCP server on your network to send BSC IP addresses
to BSAPs using DHCP vendor-specific option 43.
BlueSecure™ Access Point 1840 Installation Guide
10
In DHCP requests sent from the BSAP, the BSAP uses option 60 Vendor class identifier
with a value of BlueSecure.AP1500 to identify itself to the DHCP server (Note that all
BSAPs —1500,1540, 1800, and 1840 —identify as AP1500 for option 43).
Refer to the documentation supplied with your DHCP server when configuring vendor-
specific option 43
• DNS Server Configuration
BSAPs are factory configured with apdiscovery as the DNS hostname. You can configure
a DNS server on your network with an entry for apdiscovery with the home BSC
Controller IP address as the resolution.
To configure this, add a NAME record to the DNS server for apdiscovery (at the domain
server that the BAP will receive). Point this name to one or more BSC IP addresses
(managed, protected or VLAN depending on the network configuration).
So for example, if there are two BSCs (192.168.100.23 and 192.168.100.28), and the
domain is customer.com, add two NAME records to customer.com, for the name
apdiscovery.customer.com. One should resolve to 192.168.100.23 and one to
192.168.100.28. PTR (i.e., pointer) records are not needed for this portion of discovery.
Otros manuales para BlueSecure 1840
1
Tabla de contenidos
Otros manuales de Punto de acceso inalámbrico de Bluesocket
Bluesocket
Bluesocket BlueSecure 1800 Manual de usuario
Bluesocket
Bluesocket BlueSecure 1840 Manual de usuario
Bluesocket
Bluesocket BlueSecureBSAP-1500 Manual de usuario
Bluesocket
Bluesocket BlueSecure 1800v2 Manual de usuario
Bluesocket
Bluesocket BlueSecure 1500 Manual de usuario
Bluesocket
Bluesocket BlueSecure 1700 Manual de usuario
Bluesocket
Bluesocket BlueSecure Access Point 1540 Manual de usuario
Bluesocket
Bluesocket BlueSecure Access Point 1500 Manual de usuario
