Funkwerk WI2040n Instrukcja Użytkownika

Manualbintec WLAN and Industrial WLANReferenceCopyright© Version 9.0, 2010 Funkwerk Enterprise Communications GmbHFunkwerk Enterprise Communications G

18.6.1 Hosts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34818.6.2 Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Fig. 36: System Management -> Global Settings -> System Licenses -> NewActivating extra licencesYou activate extra licences by adding the rec

Deactivating a licenceProceed as follows to deactivate a licence:(1) Go to System Management -> Global Settings -> System Licenses.(2) Press the

The names of the interfaces connected to an Ethernet port are made up of the followingparts:(a) Abbreviation for interface type(b) Number of the Ether

(c) Number of the interface connected to the Ethernet port(d) Number of the virtual interfaceExample:  (first virtual interface based on the fi

Field DescriptionInterface Description Displays the name of the interface.Mode / Bridge GroupSelect whether you want to run the interface in 6"

Fig. 38: System Management -> Interface Mode / Bridge Groups -> Interfaces -> EditYou can realise bridging for devices behind access clients

Field Value• 8 (default value): Wildcard mode is not used.• "": With this setting, you must enter the MAC address ofa device that is

9.4.1 AccessIn the Administrative Access -> Access menu, a list of all IP-configurable interfaces isshown.Fig. 39: System Management -> Administ

9.4.1.1 AddPress the Add button to configure administrative access for additional interfaces.Fig. 40: System Management -> Administrative Access -&

Fig. 41: System Management -> Administrative Access -> SSHYou need an SSH client application, e.g. PuTTY, to be able to reach the SSH Daemon.If

20.4 SNMP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38320.4.1 SNMP Trap Options. . . . . . . . . . . . . . . . . . . . . . . . 38420.

Field ValueThe function is enabled by default.Compression Select whether data compression should be used.The function is activated by choosing 0#2

Field ValuePossible options:• ?9• =• 6!?9?9, = and 6!?9 are enabled by default.Fields in the SSH Key Status menuField ValueRSA Key

9.4.3 SNMPSNMP (Simple Network Management Protocol) is a network protocol used to monitor andcontrol network elements (e.g. routers, servers, switches

Field ValueSNMP Version Select the SNMP version your device is to use to listen for ex-ternal SNMP accesses.Possible values:• /: SNMP Version 1• /:

the RADIUS server, which then searches its database. If the user is found and can be au-thenticated, the RADIUS server sends corresponding confirmatio

Field ValueIf a RADIUS server is used for accounting, your device sendsan accounting message to the RADIUS server at the end ofeach connection.In the

Field ValuePossible values:• "1"" (default value): The RADIUS server isused for controlling access to a network.• "

Field ValueThe function is activated by choosing 0#2.The function is enabled by default.Group Description Define a new RADIUS group description or

Field Valueand response in milliseconds.After timeout, the request is repeated according to Retries orthe next configured RADIUS server is requested.P

Field ValueIf the function is active, you can enter the following options:• 62 7"/2 Enter the time period in secondsbetween the update in

Table of Contents Funkwerk Enterprise Communications GmbHx bintec WLAN and Industrial WLAN

Fig. 44: System Management -> Remote Authentication -> TACACS+ -> NewThe System Management -> Remote Authentication -> TACACS+ -> Ne

Field Descriptionnext-highest priority is used.The available values are  to , the default value is .Entry active Select whether this server is to b

Field DescriptionAt the end of the block time, the server is set to the status spe-cified in the Administrative Status field.The possible values are 

Fig. 45: System Management -> Remote Authentication -> OptionsThe System Management -> Remote Authentication -> Options menu consists of t

9.6 CertificatesAn asymmetric cryptosystem is used to encrypt data to be transported in a network, to gen-erate or check digital signatures and the au

Fig. 46: System Management -> Certificates -> Certificate List->The certificates and keys themselves cannot be changed, but a few external at

Field DescriptionCertificate RevocationList (CRL) CheckingOnly for Certificate is a CA certificate = 4.Define the extent to which certificate revoc

Registration authority certificates are used by some Certificate Authorities (CAs) to handlecertain tasks (signature and encryption) during SCEP commu

Field DescriptionscriptionMode Select the way in which you want to request the certificate.Possible settings:• ?2 (default value): Your device gen

Field Descriptiontrator can provide you with the necessary data.If no CA certificates are available, the device will first down-load the CA certificat

Chapter 1 IntroductionThe new generation access points are manufactured in an environmentally friendly wayand meet the RoHS directive. They support th

Field DescriptionCustom Select whether you want to enter the name components of thesubject name individually as specified by the CA or want toenter a

Field DescriptionEnter the country according to CA.The Advanced Settings menu consists of the following fields:Fields in the Advanced Settings Subject

Fig. 48: System Management -> Certificates -> Certificate List -> ImportThe System Management -> Certificates -> Certificate List ->

Field DescriptionEnter the password here.9.6.2 CRLsIn the System Management -> Certificates -> CRLs menu a list of all CRLs is shown.If a key is

Field DescriptionExternal Filename Enter the file path and name of the CRL to be imported, or useBrowse... to select it from the file browser.Local Ce

Fig. 50: System Management -> Certificates -> Certificate Servers -> NewThe System Management -> Certificates -> Certificate Servers -&

Chapter 10 Physical InterfacesIn this menu, you configure the physical interfaces that you have used when connectingyour gateway. The configuration in

The Physical Interfaces -> Ethernet Ports -> Port Configuration menu consists of thefollowing fields:Fields in menu Port ConfigurationField Desc

10.2 Serial PortThe serial interface can be operated as a console or as a data interface. In data interfacemode, the data for the serial interface can

If the 9" " option is selected for the Port Mode, an extra configuration sectionopens.Fig. 53: Physical Interfaces -> Serial Port -&

The devices are designed for use with WiLMA. WiLMA, the WLAN management solutionfrom Funkwerk, offers a software application in a client/server archit

Field Description•  (default value)• • E• Data BitsSelect how many data bits should be sent in sequence for trafficdata.Possible va

Field Description• 645+4: The hardware handshake used controls the dataflow over the RTS and CTS lines.• D<85D<: If the software handshake i

Field DescriptionThe function is enabled by default.Possible values:  .. '. Default value: .Inter-Byte GapEnter the time in ms since receiv

10.3.1 Relay ConfigurationIn this menu, you can configure the port mode.Fig. 54: Physical Interfaces -> Relay -> Relay ConfigurationThe Physical

Chapter 11 LANIn this menu, you configure the addresses in your LAN and can structure your local networkusing VLANs.11.1 IP ConfigurationIn this menu,

configuration, you will only be able to access your device over this IP address. Thedevice will no longer obtain an IP configuration dynamically over

Field DescriptionBased on Ethernet Inter-faceThis field is only displayed if you are editing a virtual routing in-terface.Select the Ethernet interfac

Field DescriptionVLAN ID Only if Interface Mode = 4$$ B3.8CThis option only applies for routing interfaces. Assign the inter-face to a VLAN by ent

Field DescriptionThe function is activated by choosing 0#2.The function is disabled by default.TCP-MSS Clamping Select whether your device is to a

Fig. 56: VLAN segmentingVLAN for Bridging and VLAN for RoutingIn the LAN -> VLAN menu, VLANs (virtual LANs) are configured with interfaces that ope

Chapter 2 About this guideThis document is valid for bintec devices with system software as of software version7.9.5.The guide, which you have in fron

11.2.1 VLANsIn this menu, you can display all the VLANs already configured, edit your settings and cre-ate new VLANs. By default, the ?$"

Field DescriptionFor each entry, also select whether the frames to be transmittedfrom this port are to be transmitted "$$ (i.e. with VLAN in-f

Field DescriptionDrop non-members If this option is enabled, all tagged frames that are tagged with aVLAN ID to which the selected port does not belon

Chapter 12 Wireless LANIn the case of wireless LAN (WLAN = Wireless Local Area Network), this relates to the cre-ation of a network using wireless tec

An amendment to the Telecommunications Act (TKG) allowed the 5.8 GHz band (5755MHz - 5875 MHz) to be used for so-called BFWA applications (Broadband F

Fig. 61: Wireless LAN -> WLAN -> Radio Settings -> Advanced Settings for OperationMode  "Funkwerk Enterprise Communications Gm

Fig. 62: Wireless LAN WLAN Radio Settings for Operation Mode =  +2"The Wireless LAN -> WLAN -> Radio Settings Settings -> menu

Field Descriptionture mode, all clients communicate with each other via accesspoints only. There is no direct communication between the in-dividual cl

Field Description7 "" and Operation Band = &   >=For >=FPossible values:• 7<" (default value)•

Field Description• For Operation Band =  >=F 75<" and  >=F<" and  >=F <"Only the " optio

Chapter DescriptionLocal ServicesMaintenanceExternal ReportingMonitoringGlossaryThe glossary contains a reference to the most important tech-nical ter

Field DescriptionPossible values:•  (default value): Two traffic flows are used.• : One traffic flow is used.Max. Link Distance Only for Operation M

Field Description• #: Your device operates only in accordance with802.11b and forces all clients to adapt to it.•  ; B#5$C: Your devic

Field Descriptionautomatically.• @32A: Depending on the setting for Operation Band,Bandwidth, Number of spatial streams and WirelessMode, different

Field DescriptionEnter the time in milliseconds between the sending of twobeacons.This value is transmitted in Beacon and Probe ResponseFrames.Possibl

Field DescriptionPossible values are  to .The default value is E.Long Retry Limit Enter the maximum number of attempts to send a data packetof len

Field DescriptionScan channels Choose the channels which the WLAN client automaticallyscans for available wireless networks.Possible values:• 22 (def

Field Description6$. The default value is . The value  disables the scanin the background. The value  enables the scan of all avail-able freq

Field DescriptionPossible values are  to .The default value is E.Long Retry Limit Enter the maximum number of attempts to send a data packetof len

In contrast to a LAN set up over Ethernet, a wireless LAN does not have any cables for set-ting up a permanent connection between the server and clien

office, Home office). Therefore, all the wireless LAN subscribers must know the PSK, be-cause it is used to generate the session key.WPA2WPA2 is the e

Typographical element Use bold, e.g. WindowsStart menuIndicates keys, key combinations and Windows terms.bold, e.g. Licence Key Indic

12.1.2.1 Virtual Service Sets ->New/Choose the icon to edit existing entries. Choose the New button to configure other wire-less networks.Fig. 64:

Field DescriptionThe function is enabled by default.ARP Processing Select whether the ARP processing function should be enabled.The ARP data traffic i

Field Description• 7"/ (default value): Neither encryption nor authentica-tion• 0 &: WEP 40 Bit• 0 &: WEP 104 Bit• : W

Field Description• 0: AES is used.• 0  47: AES or TKIP is used.WPA2 Cipher Only for Security Mode =  and 0"! and for WP

Field DescriptionAllowed Addresses Use Add to make entries and enter the MAC addresses (MACAddress) of the clients to be permitted.12.1.3 WDS LinksIf

Fig. 65: Wireless LAN -> WLAN -> WDS Links-> ->/NewThe Wireless LAN -> WLAN -> WDS Links-> ->/New menu consists of the followi

Field Descriptionand in Transmission Key , select the default key.• 0&: Data traffic on this WDS link is encrypted withWEP104. In WEP Key 1 -

Fields in the Remote Partner menuField DescriptionRemote MAC Address Enter the MAC address of the WDS partner.12.1.4 Client LinkIf you operate your de

Fields in the Client Link Basic Parameters menuField DescriptionNetwork Name (SSID) Enter the name of the wireless network (SSID).Enter an ASCII strin

Field Description•  (default value): Only WPA is used.•   : Only WPA2 is used.Preshared Key Only if Security Mode = Enter the WPA passwo

Chapter 3 InstallationNotePlease read the safety notices carefully before installing and starting up your device.These are supplied with the device.Re

Fig. 67: Wireless LAN -> WLAN -> Client Link->ScanAfter successful scanning, a selection of potential scan partners is displayed in the scanl

Field DescriptionSignal Displays the signal strength of the detected client link in dBm.Connected Displays the status of the link on your client.Actio

CautionNever connect two bridges that have set up a connection to each other with radio tothe same LAN segment. This leads to unavoidable overloading

Fig. 70: Wireless backboneFig. 71: Wireless bridge with connection of wireless clientsTo be able to set up a wireless link to bintec bridges, an unint

gitudinal axis. At least 60 % of the 1st Fresnel zone must remain free of obstacles. The ra-dius (or the small semi-axis) depends on the frequency use

Distance from transmit an-tenna (km)Radius of 1st Fresnel zone(m)Radius at 60 % of1st Fresnel zone (m)4,500 7,4 5,74,750 5,4 4,2Example: Radius of 1st

Fig. 73: Antenna connectionA label containing details of the two antennas is located on the back of the device. Theprimary antenna is designated Ant 1

Field DescriptionIf the option is not activated, you can enter a suitable name inthe input field.The ,  " option is enabled by default.Re

Fig. 75: Wireless LAN -> WLAN -> Bridge Links -> Automatic Bridge Link ConfigurationAfter successful scanning, a selection of potential bridg

Field DescriptionRemote Link Description Displays the name of the bridge link configured on the remotebridge.Remote Device Name Displays the name of t

Fig. 2: Connection options bintec W1002nFunkwerk Enterprise Communications GmbH3 Installationbintec WLAN and Industrial WLAN 7

Field DescriptionRegion Select the country in which the access point is to be run.Possible values are all the countries configured on the device'

Chapter 13 Wireless LAN ControllerBy using the wireless LAN controller, you can set up and manage a WLAN infrastructurewith up to 24 access points (AP

The wireless LAN controller uses the following settings:RegionSelect the country in which the wireless controller is to be operated.Note: The range of

Click on to edit an existing entry.You can also delete entries with the aid of .With Add, you can create new entries. You can create up to eight wirel

Depending on whether you wish to use WPA or WPA 2 or both, select for Security Mode = or 0"!  .WPA CipherDepending on which encr

13.1.4 Start automatic installationYou will see a list of all detected access points.If you wish to change the settings of a detected AP, click on in

Displays the transmission power in dBm. You can select another transmission power.By pressing OK you apply the settings in the Access Point Settings w

13.2.1 GeneralFig. 77: Wireless LAN Controller -> Controller Configuration -> GeneralThe Wireless LAN Controller -> Controller Configuration

Field Descriptionand slaves.Note: Make sure that option 138 is active when using an extern-al DHCP server.Possible values:• 9=+ / "1 #

13.3.1 Slave Access PointsFig. 78: Wireless LAN Controller -> Slave AP configuration -> Slave Access PointsIn the Wireless LAN Controller ->

Legal NoticeAim and purposeThis document is part of the user manual for the installation and configuration of funkwerk devices. Forthe latest informat

Fig. 3: Connection options bintec WIx040n and bintec WIx065n.When setting up and connecting, carry out the steps in the following sequence (refer to t

13.3.1.1 EditChoose the icon to edit existing entries.You can also delete entries with the aid of . If you have deleted APs, these will be loc-ated ag

Field DescriptionCAPWAP Encryption Select whether communication between the master and slavesis to be encrypted.The function is activated by choosing

Click on the Start button under Channel Reallocation in order to reassign any assignedchannels, e.g. when a new access point has been added.13.3.2.1 E

Field DescriptionYou can select another wireless module profile from the list ifseveral wireless module profiles are set up.Channel Displays the chann

Field DescriptionPossible values:• ?; (default value): The maximum antenna power is used.•  (•  (•  (• & (•  (Assigned Wireless

13.3.3.1 Edit/NewChoose the icon to edit existing entries. Select the Newbutton in order to create newwireless module profiles.Fig. 83: Wireless LAN C

Field DescriptionPossible values:• < (default value) The wireless module profile is not active.•  ": Your device is used as an acc

Field Description•  (default value): Two traffic flows are used.• : One traffic flow is used.Fields in the Wireless Modules Performance Settings men

Field DescriptionPossible values:•  5: Your device operates according to either802.11a or 802.11n.• : Your device operates only accordi

Field DescriptionPossible values:• 22: All channels can be dialled when a channel is selected.• ": Depending on the region, operation band, w

used as a table-top device.Wall mountingTo attach the device to the wall, use the brackets on the back of the housing. Op-tional wall mounting with th

Field DescriptionShort Guard Interval Enable this function to reduce the guard interval (= timebetween transmission of two data symbols) from 800 ns t

13.3.4 Wireless Networks (VSS)Fig. 84: Wireless LAN Controller -> Slave AP Configuration -> Wireless Networks(VSS)In the Wireless LAN Controller

Fig. 85: Wireless LAN Controller -> Slave AP Configuration -> Wireless Networks(VSS) -> /NewThe Wireless LAN Controller -> Slave AP Config

Field DescriptionThe function is enabled by default.ARP Processing Select whether the ARP processing function should be enabled.The ARP data traffic i

Field Description• 7"/ (default value): Neither encryption nor authentica-tion• 0 &: WEP 40 Bit• 0 &: WEP 104 Bit• : W

Field Description• 0: AES is used.• 0  47: AES or TKIP is used.WPA2 Cipher Only for Security Mode =  and 0"! and for WP

Field DescriptionACL Mode Select whether only certain clients are to be permitted for thiswireless network.The function is activated by choosing 0#2

13.4.1 Active ClientsFig. 86: Wireless LAN Controller -> Monitoring -> Active ClientsIn the Wireless LAN Controller -> Monitoring -> Activ

13.4.2 Neighbor APsFig. 87: Wireless LAN Controller -> Monitoring -> Neighbor APsIn the Wireless LAN Controller -> Monitoring -> Neighbor

13.5.1 Firmware MaintenanceFig. 88: Wireless LAN Controller -> Maintenance -> Firmware MaintenanceIn the Wireless LAN Controller -> Maintenan

Fig. 5: Wall mounting of the bintec WIx040n (standard design, DIN rail or theft protectionoptional)3 Installation Funkwerk Enterprise Communications G

Field Descriptionthat are required.Possible values:• ,!" - " ": You can also start an updateof the system software.• /

Chapter 14 Routing14.1 RoutesDefault RouteWith a default route, all data is automatically forwarded to one connection if no other suit-able route is a

Fig. 89: Routing -> Routes -> IP Routes-> New with Extended Route = 8" "/"If the 0;" 6" option is sel

The Routing -> Routes -> IP Routes-> New menu consists of the following fields:Fields in the IP Routes Route Class menuField DescriptionExten

Field Description• in the WAN: You define a route without a transit network.• 7":• in the LAN: You define a gateway route.• in the WAN: You

Field DescriptionFirst select the port number range.Possible values:• - (default value): The route is valid for all port numbers.• $2: Enables t

Field DescriptionPossible values:• 7$ (default value): The type of service is ignored.• 9+: Relates to a Differentiated Services Code Point to R

Fig. 91: Routing -> Routes -> OptionsThe Routing -> Routes -> Options menu consists of the following fields:Fields in the Options Back Rou

Field DescriptionBack Route Verify Only for Mode = 0#2  ! " Select whether 6" 6" +1$ is to be enabled

Fig. 92: Routing -> NAT ->NAT InterfacesFor each NAT interface, you can select the options 84 "/, 2" 9- and4  "1

Fig. 6: Wall mounting of the bintec WIx065n (standard design and with theft protection)Use as a table-top deviceThe access point can also be used as a

Field DescriptionPortforwardings Shows the number of portforwarding rules configured in Rout-ing -> NAT -> Portforwarding.14.2.2 NAT Configurati

Field DescriptionType of trafficSelect the type of data traffic for which NAT is to be configured.Possible values:• $ B9 "" 8

Field Descriptionmethod = 22,  "" or !" "".Select one of the preconfigured services.Possibl

Field Description• -!"2• .4• <• ,• 69• 63• 7• 4+• 4.• ,9• 366• D879Source IP Address / Net-maskEnter the source IP a

Field DescriptionNew Destination IP Ad-dress/NetmaskOnly for Type of Traffic = $ B9 "" 84C.Enter the destination IP address a

14.3 RIPThe entries in the routing table can be defined statically or the routing table can be updatedconstantly by dynamic exchange of routing inform

14.3.1.1 EditFor each RIP interface, you can, in the menu, select the options  3 , 6/ 3  and 6" .Fig. 95: Routing

Field Description• 67 3 ?2" ": For sending RIP V2 messages overthe multicast address 224.0.0.9.• 67 3 4$$: RIP V1 messages are

14.3.2 RIP FilterIn this menu, you can specify exactly which routes are to be exported or imported.You can use the following strategies for this:• You

lect the position to which the filter is to be moved.14.3.2.1 NewChoose the New button to set up more RIP filters.Fig. 97: Routing -> RIP -> RIP

NoteIf the bintec WIx065n is installed outdoors, the lines laid outside the building are to becategorized as TNV1 electric circuits in accordance with

Field DescriptionMetric Offset for ActiveInterfacesSelect the value to be added to the route metric if the status ofthe interface is "up". D

Field Descriptionceiving RIP updates, is only for test purposes. If the setting ischanged, this can mean that your device sends and listens at aport t

Fields in the RIP Options Timer for RIP V2 (RFC 2453) menuField DescriptionUpdate Timer Only for RFC 2453 Variable Timer = 0#2An RIP update is sen

14.4 Load Balancing14.4.1 Load Balancing GroupsThe increasing amount of data traffic over the Internet means it is necessary to send dataover differen

following fields:Fields in the Load Balancing Groups Basic Parameters menuField DescriptionGroup Description Enter the desired description of the inte

In the Interface Selection for Load Balancing area, you add and configure interfaces thatmatch the current group context. You can also delete interfac

Address range for multicastFor, IPv4 the IP addresses 224.0.0.0 to 239.255.255.255 (224.0.0.0/4) are reserved formulticast in the class D network. An

passed.• IGMP: IGMP is used to gather information about the potential recipients in a subnet. Inthe case of a hop, incoming multicast data traffic can

Field DescriptionAll Multicast Groups Select whether all multicast groups, i.e. the complete multicastaddress range 224.0.0.0/4, are to be forwarded f

14.5.2.1 NewChoose the New button to configure IGMP on other interfaces.Fig. 101: Routing -> Multicast -> IGMP -> /NewThe Routing -> Multi

3.3 Support informationIf you have questions about your product or are looking for additional information, the Funk-werk Enterprise Communications Gmb

Field DescriptionPossible values are  to .The default value is .Robustness Select the multiplier for controlling the timer values. A highervalu

Fig. 102: IGMP ProxyThe Advanced Settings menu consists of the following fields:Fields in the menu Advanced SettingsField DescriptionIGMP Proxy Select

Fig. 103: Routing -> Multicast -> OptionsThe Routing -> Multicast -> Options menu consists of the following fields:Fields in the Options B

Field Descriptionternally and in reports.Maximum Sources Enter the maximum number of sources that are specified in ver-sion 3 reports and the maximum

Fig. 104: Routing -> QoS -> QoS Filter -> NewThe Routing-> QoS -> QoS Filter -> New menu consists of the following fields:Fields in

Field DescriptionThe default value is - .Connection State If Protocol = "!, you can define a filter that takes the status ofthe TCP connection

Field Descriptionused to signal the priority of IP packets (indicated in binaryformat; currently not implemented).• 9+ 92 32: Differentiated

Fig. 105: Routing -> QoS -> QoS Classification -> NewThe Routing -> QoS -> QoS Classification -> New menu consists of the following

Field DescriptionRouting -> QoS -> QoS Filter menu.Direction Select the direction of the data packets to be classified.Possible values:• 7

Packets in the high-priority class always take priority over data with class IDs 1... 254.It is possible to assign or guarantee each queue and thus ea

Chapter 4 Basic configurationYou can use the Dime Manager (IP address assignment) and the Funkwerk Configura-tion Interface (other configuration steps

Field DescriptionPriorisation algorithm Select the algorithm according to which the queues are to beprocessed. This activates and deactivates QoS on t

Field Description• 0"1" (default value)• 0"1"  3.8• 0• 0  3.8• 7 / 0"1"• 7 / 0

Field Descriptionreal time data is routed.Queues/Policies Configure the desired QoS queues.For each class created from the class plan, which is associ

Field DescriptionWeightOnly if Priorisation algorithm = $1" 6 6# or$1"  I$Choose the weight of the queue. Possibl

Field Descriptionon the interface.If Overbooking allowed is deactivated, the queue can neveroccupy bandwidth beyond the bandwidth limit that has been

Chapter 15 WANThis menu offers various options for configuring accesses or connections from your LAN tothe WAN. You can also optimise voice transmissi

Default RouteWith a default route, all data is automatically forwarded to one connection if no other suit-able route is available. Access to the Inter

15.1.1 PPPoEIn the WAN -> Internet + Dialup -> PPPoE menu, a list of all PPPoE interfaces is shown.PPP over Ethernet (PPPoE) is the use of the P

Field DescriptionDescription Enter a name to uniquely identify the PPPoE partner. The firstcharacter in this field must not be a number and no special

Field DescriptionThe function is activated with 0#2.The function is disabled by default.Only activate this option if you have Internet access with

configuration (see Configuring a PC on page 18).(c) Assigning a fixed IP addressYou can use the Dime Manager to assign a new IP address and the requir

Field DescriptionThe function is enabled by default.Local IP Address Only if IP Address Mode = ""Enter the static IP address of the conn

Field Descriptionencrypted.• 5+=: Primarily run CHAP, otherwise PAP.• ?+=/: Only run MS-CHAP version 1 (PPP MicrosoftChallenge Handshake Aut

15.1.2.1 NewChoose the New button to set up new PPTP interfaces.Fig. 108: WAN -> Internet + Dialup -> PPTP -> NewThe WAN -> Internet + Dia

Field DescriptionIf you want to use an external DSL modem, select the Ethernetport to which the modem is connected.When using the internal DSL modem,

Field Descriptionally assigned a temporarily valid IP address from the provider.• "": You enter a static IP address.Default Route Select

Field DescriptionMaximum Number of Di-alup RetriesEnter the number of unsuccessful attempts to setup a connec-tion before the interface is blocked.Pos

Field DescriptionPPTP Address Mode Displays the address mode. The value cannot be changed.Possible values:• "": The IP address of the Et

Fig. 109: WAN -> Internet + Dialup -> IP Pools -> AddThe WAN -> Internet + Dialup -> IP Pools -> Add menu consists of the following

15.2.1.1 NewClick o the New button to set up port forwarding for other interfaces.Fig. 110: WAN -> Real Time Jitter Control -> Controlled Interf

Field Descriptionthe selected interface.Funkwerk Enterprise Communications GmbH15 WANbintec WLAN and Industrial WLAN 267

4.2 System requirementsFor configuration, your PC must meet the following system requirements:• Microsoft Windows operating system Windows 2000 or hig

Chapter 16 VPNA connection that uses the Internet as a "transport medium" but is not publicly accessible isreferred to as a VPN (Virtual Pri

Fig. 111: VPN -> IPSec -> IPSec PeersPeer MonitoringThe menu for monitoring a peer is called by selecting the button for the peer in the peerlis

Fig. 112: VPN -> IPSec -> IPSec Peers -> NewThe VPN -> IPSec -> IPSec Peers -> New menu consists of the following fields:Fields in t

Field DescriptionThe maximum length of the entry is 255 characters.Peer Address Enter the official IP address of the peer or its resolvable hostname.T

Field DescriptionIP Assignment Pool Only if IP Address Assignment = 70 +$ ? /Select an IP pool configured in the VPN -> IP Pools menu

Field Descriptiondefault in Phase-2 Profiles: 8 B  92"2C.XAUTH Profile Select a profile created in VPN -> IPSec -> XAUTH pro

Field Description• ,!  9": Your device only responds to an ARP re-quest if the status of the connection to the IPSec peer is ,!(active) or

Fig. 114: VPN -> IPSec ->Phase-1 Profiles -> NewThe VPN -> IPSec -> Phase-1 Profiles-> New menu consists of the following fields:Fie

Field Description• (2 1: Blowfish is a very secure and fast algorithm.Twofish can be regarded as the successor to Blowfish.• +4: CAST is also a

Field DescriptionDH Group The Diffie-Hellman group defines the parameter set used as thebasis for the key calculation during phase 1. "MODP"

and netmasks. In cases of doubt, ask your system administrator.Basic configurationFor a basic configuration of your gateway, you need information that

Field Description• 6 $": Phase 1 key calculations are authenticatedusing the RSA algorithm.• 6 0-!": In RSA encryption the

Field DescriptionFor Authentication Method = 9 $", 6 $" or 6 0-!", the Use Subject Name from cer-tificate op

Field Descriptionthe mode supported by the remote terminal.• 9 : Your device sends and expects no heartbeat. Set thisoption if you use devices from

Field Descriptionis used.The function is activated with 0#2.The function is enabled by default.CA Certificates Only if Authentication Method = 9

16.1.3.1 NewChoose the New button to set up new profiles.Fig. 116: VPN -> IPSec ->Phase-2 Profiles -> NewThe VPN -> IPSec -> Phase-2 Pr

Field Descriptionfast key setup, low memory requirements, high level of secur-ity against attacks and general speed. Here, it is used with akey length

Field DescriptionThe field has the following options:•  BE ("C: During the Diffie-Hellman key calculation,modular exponentiation at 768 bits

Field DescriptionThe function is activated with 0#2.The function is disabled by default.Alive Check Select whether and how IPSec heartbeats are us

as a client:• As a server the gateway requires a proof of authorisation.• As a client the gateway provides proof of authorisation.In server mode multi

Field DescriptionDescription Enter a description for this XAuth profile.Role Select the role of the gateway for XAuth authentication.Possible values:•

Table of ContentsChapter 1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . 1Chapter 2 About this guide. . . . . . . . . . . . . . .

Access data Example value Your valuesPreshared Key #$ "MAC address of remote bridge %%%%&%'To use the bridge link auto

16.1.5 IP PoolsIn the IP Pools menu a list of all IP pools for your configured IPSec connections is dis-played.If have set IP Address Assignment 70 +

16.1.6 OptionsFig. 119: VPN -> IPSec -> OptionsThe VPN -> IPSec -> Options menu consists of the following fields:Fields in the Options Glo

Field DescriptionIPSec Debug Level Select the priority of the syslog messages of the IPSec subsys-tem to be recorded internally.Possible values:• 0

Field DescriptionThe function is disabled by default.Use Zero Cookies Select whether zeroed ISAKMP Cookies are to be sent.These are equivalent to the

Field DescriptionThe function is enabled by default.Deactivate this function if you do not wish to send the peer thecertificates of all levels (from y

Fig. 120: VPN -> L2TP -> Tunnel Profiles -> NewThe VPN -> L2TP -> Tunnel Profiles -> New menu consists of the following fields:Field

Field DescriptionRemote HostnameEnter the host name of the LNS or LAC.• LAC: Defines the value for Local Host Name of the LNS(contained in the SCCRQs

Field DescriptionUDP Destination Port Enter the destination port number to be used for all calls basedon this profile. The remote LNS that receives th

Field DescriptionThe available values are  to , the default value is .Data Packets SequenceNumbersSelect whether your device is to use sequence n

Fig. 121: VPN -> L2TP -> Users -> NewThe VPN -> L2TP -> Users -> New menu consists of the following fields:Fields in the Users Basic

Allocate an IP address to your PC as follows:(1) Select Internet Protocol (TCP/IP) and click on Properties.(2) Choose Use following IP address and ent

Field DescriptionPossible values:• .8 (default value): If you select this option, the L2TP partneris configured so that it accepts L2TP tunnels and r

Field DescriptionYour device dynamically assigns an IP address to the remoteterminal.• >" 7  : Only for Connection Type = .+ Yourdevi

Field DescriptionBlock after connectionfailure forEnter the wait time in seconds before the device should tryagain after an attempt to set up a connec

Field DescriptionThe function is activated with 0#2.The function is disabled by default.Prioritize TCP ACKPacketsSelect whether the TCP download i

Field Descriptiona connection already exists to the L2TP partner.DNS Negotiation Select whether your device receives IP addresses for PrimaryDNS Serve

Field DescriptiontionUDP destination port) as the local source port for the L2TPconnection.The function is activated with ;.The function is disabl

16.3.1.1 NewChoose the New button to set up new GRE tunnels.Fig. 123: VPN -> GRE -> GRE TunnelsThe VPN -> GRE -> GRE Tunnels menu consists

Field DescriptionRoute EntriesDefine other routing entries for this connection partner.Add a new entry with Add.• 6" 7  : IP address o

Chapter 17 FirewallThe Stateful Inspection Firewall (SIF) provided for bintec gateways is a powerful securityfeature.The SIF with dynamic packet filte

NATOne of the basic functions of NAT is the translation of the local IP addresses of your LANinto the global IP addresses you are assigned by your ISP

Fig. 7: Dime Manager initial screenThe Dime Manager detects the devices installed in the network.(2) In the list, double click the device you want to

17.1.1 Filter RulesThe default behavior with Action =  consists of two implicit filter rules: If an incom-ing packet can be assigned to an exist

17.1.1.1 NewChoose the New button to set up new parameters.Fig. 125: Firewall -> Policies -> Filter Rules -> NewThe Firewall -> Policies -

Field DescriptionThe value - means that neither the destination interface northe destination address is checked.Service Select one of the preconfigu

Field DescriptionIf QoS is not activated for this policy, bear in mind that the datacannot be prioritised on the sender side either.A policy for which

Fig. 126: Firewall -> Policies -> QoS -> NewThe Firewall -> Policies -> QoS -> New menu consists of the following fields:Fields in t

Field Descriptionfor the service specified under Services.  is entered by de-fault.• Fixed: Select whether the bandwidth defined in Bandwidthcan be e

Field DescriptionLogged Actions Select the firewall syslog level.The messages are output together with messages from othersubsystems.Possible values:•

17.2 Interfaces17.2.1 GroupsIn the Firewall -> Interfaces -> Groups menu, a list of all configured interface groups isshown.You can group togeth

17.3 Addresses17.3.1 Address ListIn the Firewall -> Addresses -> Address List menu, a list of all configured addresses isshown.17.3.1.1 NewChoos

Field Description•  6$: Enter an IP address range with a start andend address.Address / Subnet Only if Address Type =  5 #"E

The Device name parameter may contain only the letters "a"-"z", "A"-"Z", the digitss"0"-"9"

The Firewall -> Addresses -> Groups -> New menu consists of the following fields:Fields in the Groups Basic Parameters menuField DescriptionD

Field DescriptionDescription Enter an alias for the service you want to configure.Protocol Select the protocol on which the service is to be based. Th

Field Description• 01• 4 0;• " #2• 4 "!• 4 "! 6!2-• 7" 6H "• 7"

Fig. 132: Firewall -> Services ->Groups-> NewThe Firewall -> Services-> Groups -> New menu consists of the following fields:Fields i

Chapter 18 Local ServicesThis menu offers services for the following application areas:• Name resolution (DNS)• Locating of dynamic IP addresses using

For local applications, the IP address of your device or the general loopback address(127.0.0.1) can be entered as the global name server.Your device

18.1.1 Global SettingsFig. 133: Local Services -> DNS -> Global SettingsThe menu Local Services -> DNS -> Global Settings consists of the

Field DescriptionSecondary DNS server.WINS ServerPrimarySecondaryEnter the IP address of the first and, if necessary, alternativeglobal Windows Intern

Field DescriptionThe default value is &.Maximum TTL for Neg-ative Cache EntriesEnter the value set to which the TTL is to be set in the case o

18.1.2 Static HostsIn the Local Services -> DNS -> Static Hosts menu, a list of all configured static hosts isshown.18.1.2.1 NewChoose the New b

4.5 Modify system passwordAll bintec devices are delivered with the same username and password. As long as thepassword remains unchanged, they are the

Field DescriptionEntries with spaces are not allowed.Response In this entry, select the type of response to DNS requests.Possible values:• 8$"

Fig. 135: Local Services -> DNS -> Domain Forwarding -> NewThe Local Services -> DNS -> Domain Forwarding -> New menu consists of th

Field DescriptionIf a name is entered without a full stop, once you confirm withOK " <Default Domain>. " " is added.Forward to Se

Fig. 136: Local Services -> DNS -> CacheYou can select individual entries using the checkbox in the corresponding line, or selectthem all using

18.1.5 StatisticsFig. 137: Local Services -> DNS -> StatisticsIn the menu Local Services -> DNS -> Statistics, the following statistical v

Field DescriptionServer Failures Shows the number of requests that were not answered by anyname server (either positively or negatively).18.2 HTTPSYou

Field DescriptionHTTPS TCP Port Enter the port via which the HTTPS connection is to be estab-lished.Possible values are  to '.The default va

18.3.1 DynDNS UpdateIn the Local Services -> DynDNS Client -> DynDNS Update menu, a list of all configuredDynDNS registrations is shown that are

Field DescriptionPassword Enter the password as registered with the DynDNS provider.Provider Select the DynDNS provider with which the above data is r

18.3.2.1 NewChoose the New button to set up new DynDNS providers.Fig. 140: Local Services -> DynDNS Client -> DynDNS Provider -> NewThe Local

(10) Click OK.(11) Save the configuration by clicking on the Save Configuration button above the menunavigation.4.7 Setting up a bridge linkIf you run

Field DescriptionThe default value is .Protocol Select one of the protocols implemented.Possible values:• 9-98 (default value)• "" 9

18.4.1 DHCP PoolTo activate your device as a DHCP server, you must first define IP address pools fromwhich the IP addresses are distributed to the req

Field DescriptionWhen a DHCP request is received over this Interface, one ofthe addresses from the address pool is assigned.IP Address Range Enter the

Field DescriptionDHCP Options Specify which additional data is forwarded to the DHCP client.Possible values for Option:• 4 / (default value):

Fig. 142: Local Services -> DHCP Server -> IP/MAC Binding -> NewThe Local Services -> DHCP Server ->DHCP Binding -> New menu consist

Fig. 143: Local Services -> DHCP Server -> DHCP Relay SettingsThe Local Services -> DHCP Server -> DHCP Relay Settings menu consists of th

18.5.1 ScheduleIn the Local Services -> Scheduling -> Time Schedule menu, a list of all scheduled tasksis shown.18.5.1.1 NewChoose the New butto

Field Description• 6#" / (default value): Your device is rebooted.• "/" " : The interface defined in the Sele

Field DescriptionSource = =44 /Enter the name of the HTTP server from which you wish todownload a configuration file.TFTP Server Only if Select

Field DescriptionPossible values for Condition Settings with Condition Type =9-  "1 "1: ... '.Start Time Enter the time from w

(6) In Preshared Key enter, for example, #$ ".(7) For Remote MAC address, enter the MAC address of the bridge to which your bridgeis to s

Fields in the Options Scheduling Options menuField DescriptionSchedule Interval Select whether the schedule interval is to be enabled for the in-terfa

Fig. 146: Local Services -> Surveillance -> Hosts -> NewThe Local Services -> Surveillance -> Hosts -> New menu consists of the foll

Field Descriptionuses as the source address of the packet sent to the host to bemonitored.Possible values:• "" (default value): The I

18.6.2.1 Edit/NewChoose the icon to edit existing entries. Choose the New button to set up monitoring forother interfaces.Fig. 147: Local Services -&g

Field DescriptionThe action is applied to the Interface(s) selected in Interface.Possible values:• 0#2 (default value): Activation of interface(s)•

18.6.3.1 NewClick on the New button to configure new limits.Fig. 148: Local Services -> Surveillance -> Temperature -> NewThe Local Services

Field DescriptionInterfaceSelect the interface via which the action is to be carried out.Possible values:• 62- (default value): The overstepping of

Fields in the Ping Generator Basic Parameters menuField DescriptionDestination IP Address Enter the IP address to which the ping is automatically sent

the 22 option to query all interfaces.The current discovery status is displayed for each individual interface under DiscoveryStatus. 8 means tha

Fig. 151: Local Services -> Funkwerk Discovery -> Device Discovery->The Local Services -> Funkwerk Discovery -> Device Discovery-> m

your device will be updated automatically. When installation of the new software is com-plete, you will be invited to restart the device.CautionOnce y

Field DescriptionAuthentication Password You must enter the administrator password for the access point,otherwise you cannot carry out the configurati

18.7.2 OptionsIn this menu, you can grant permission for your device to be discovered by other bintecdevices using the funkwerk Discovery protocol and

The bintec HotSpot Solution consists of a bintec gateway installed onsite (with its ownWLAN access point or additional connected WLAN device or wired

NoteActivation may require 2-3 business days.Access data for gateway configurationRADIUS Server IP 62.245.165.180RADIUS Server Password Set by Funkwer

Fig. 153: Local Services -> Hotspot Gateway -> Hotspot Gateway ->You can use the Enabled option to enable or disable the corresponding entry.

Fig. 154: Local Services -> Hotspot Gateway -> Hotspot Gateway ->The Local Services -> Hotspot Gateway -> Hotspot Gateway -> menu co

Field DescriptionDomain at the HotSpotServerEnter the domain name that you used when setting up the Hot-Spot server for this customer. The domain name

Fields in the menu Advanced SettingsField DescriptionTicket TypeSelect the ticket type.Possible values:• 31: Only the user name must be entered.

Fig. 155: Local Services -> Hotspot Gateway -> OptionsThe Local Services -> Hotspot Gateway -> Options menu consists of the following fiel

Chapter 19 MaintenanceThis menu provides you with numerous functions for maintaining your device. It firstlyprovides a menu for testing availability w

Chapter 5 ResetIf the configuration is incorrect or if your device cannot be accessed, you can reset thedevice to the ex works standard settings using

19.1.2 DNS TestFig. 157: Maintenance -> Diagnostics -> DNS TestThe DNS test is used to check whether the domain name of a particular host is cor

You use the traceroute test to display the route to a particular address (IP address or do-main name), if this can be reached. The Output field shows

stored in the working memory (RAM). The contents of the RAM are lost if the device isswitched off. So if you modify your configuration and want to kee

Fig. 159: Maintenance -> Software & Configuration -> OptionsThe Maintenance -> Software & Configuration -> Options menu consists o

Field Description• 7!" $": Under Filename select a config-uration file you want to import. Note: Click Go to load the fileunde

Field Descriptionfield.FilenameOnly for Action = 7!" $", 7!" 2$$, ,!" - " ". Enter t

Field Descriptiontion file.19.3 Reboot19.3.1 System RebootIn this menu, you can trigger an immediate reboot of your device. Once your system hasrestar

Chapter 20 External ReportingIn this system menu, you define what system protocol messages are saved on which com-puters, and whether the system admin

In the External Reporting -> Syslog -> Syslog Servers menu, a list of all configured sys-tem log servers is shown.20.1.1.1 NewChoose the New but

Field Description• $• 8"• 7" (default value)• 9#$ (lowest priority)Syslog messages are only sent to the host if they ha

NoteIf you delete the boot configuration using the Funkwerk Configuration Interface , allpasswords will also be reset and the current boot configurati

20.2 IP AccountingIn modern networks, information about the type and number of data packets sent and re-ceived over the network connections is often c

20.2.2 OptionsIn this menu, you configure general settings for IP Accounting.Fig. 163: External Reporting -> IP Accounting -> OptionsIn the Exte

Field Description%p Packets sent%o Octets sent%P Packets received%O Octets received%s Serial Number for accounting message%% %By default, the followin

Field DescriptionAlert Service Enable or disable the function.Sender E-Mail Address Enter the mail address to be entered in the sender field of the E-

Field DescriptionThe default value is  seconds.20.3.2 E-mail Alert RecipientIn the E-mail Alert Recipient menu, a list of syslog messages is displa

Field Descriptionentered therefore usually contains wildcards. To be informed ofall syslog messages of the selected level, just enter "*".Se

Every SNMP management system contains an MIB. SNMP can be used to configure, con-trol and administrate various network components from one system. Suc

Field DescriptionSNMP Trap Broadcast-ingSelect whether the transfer of SNMP traps is to be activated.Your device then sends SNMP traps to the LAN&apos

Fig. 167: External Reporting -> SNMP -> SNMP Trap Hosts -> NewThe External Reporting -> SNMP -> SNMP Trap Hosts-> New menu consists

IP address. One packet is sent per time interval, which can be adjusted individually to val-ues from 1 - 60 seconds. Up to 100 physical and virtual in

Chapter 6 Technical data . . . . . . . . . . . . . . . . . . . . . . . . 286.1 Scope of supply . . . . . . . . . . . . . . . . . . . . . . . . . 286.2

Chapter 6 Technical dataThis chapter summarises all of the hardware properties of the devices W1002n, WI1040n,WI2040n, WI1065n and WI2065n.Cautionbint

Field Description• 8 (default value): Deactivates the sending of informationto the Activity Monitor.• 1- 2: Only information about the physical

Chapter 21 MonitoringThis menu contains information that enable you to locate problems in your network andmonitor activities, e.g. at your device&apos

Field DescriptionNo. Displays the serial number of the system message.Date Displays the date of the record.Time Displays the time of the record.Level

Field DescriptionRemote IP Address Displays the IP address of the remote IPSec Peers.Remote Networks Displays the currently negotiated subnets of the

Field DescriptionRemote ID Shows the ID of the peer.Negotiation Type Shows the exchange type.Authentication Method Shows the authentication method.MTU

Fig. 172: Monitoring -> IPSec -> IPSec StatisticsThe Monitoring -> IPSec -> IPSec Statistics menu consists of the following fields:Field i

Field Descriptionthe total number of phase-2 SAs (Total).Field in the IPSec Statistics Packet Statistics menuField DescriptionTotal Shows the number o

Fig. 173: Monitoring -> Interfaces -> StatisticsYou change the state of the interface by pressing the button or button in the Actioncolumn. Pres

21.4 WLAN21.4.1 WLAN1In the Monitoring -> WLAN -> WLAN1 menu, the current values and activities of the firstinterface are shown.Fig. 174: Monito

You can choose the Advanced button to go to an overview of more details.Fig. 175: Monitoring -> WLAN -> WLAN1 -> AdvancedmenuValues in the li

Cable sets/mains unit/other Software Documentation2-pole screw terminal bar forrelayMounting bracket for wallmounting1 screw pin setBlind stops for Et

Description Meaningbe transmittedFrame transmissionswithout ACK receivedDisplays the number of sent frames which which an acknow-ledgement frame was n

Field DescriptionMAC Address Shows the MAC address of the associated client.IP Address Shows the IP Address of the client.Up Time Shows the time in ho

Fig. 177: Monitoring -> WLAN -> VSS -><Connected client>->Values in the VSS <Connected client> listField DescriptionClient MAC

Field Description• 15 – 25 dB good• 2 – 15 dB borderline• 0 – 2 dB bad.Data Rate mbps Shows the current transmission rate of data received by this cli

Field DescriptionWDS Description Shows the name of the WDS link.Remote MAC Shows the MAC address of the WDS link partner.Up Time Shows the time in hou

Fig. 179: Monitoring -> WLAN -> WDS->Values in the WDS listField DescriptionWDS Description Shows the name of the WDS link.Remote MAC Shows t

Field Descriptionfor Tx Packets and Rx Packets.21.4.4 Bridge LinksIn the Monitoring -> WLAN -> Bridge Links menu, the current values and activit

If required, the Test link can be used to start a link test.The link test provides all the data necessary for checking the quality of the bridge link.

Field Descriptionbridge link in question is active.Tx Packets Shows the total number of packets sent.Rx Packets Shows the total number of packets rece

Field Descriptionent link in question is active.Tx Packets Shows the total number of packets sent.Rx Packets Shows the total number of packets receive

Cable sets/mains unit/other Software Documentationrelay1 screw pin setBlind stops for Ethernet inter-faces4 threaded caps for antennasbintec WI2065nEt

Field DescriptionAP MAC Address Shows the MAC address of the client link partner.Up Time Shows the time in hours, minutes and seconds for which the cl

Field DescriptionMAC Address Shows the MAC addresses of the associated bridge.Port Shows the port on which the bridge is active.21.5.2 sta<x>In

21.6 Hotspot Gateway21.6.1 Hotspot GatewayIn the Monitoring -> Hotspot Gateway -> Hotspot Gateway menu, a list of all connectedhosts is shown.Fi

21.7 QoSIn the Monitoring -> QoS menu, statistics are displayed for all interfaces for which QoShas been configured.21.7.1 QoSIn the Monitoring -&g

Index193## 91 , 390 , 397#1, #2, #3 119AACCESS_ACCEPT 102ACCESS_REJECT 102ACCESS_REQUEST 102ACCOUNTING_START 102ACCOUNTING_STOP 102ACL Mode 161 , 203A

Client Mode 144Code 318Common Name 117Compression 97Configuration Encryption 371Configuration Interface 91Configured Speed / Mode 125Confirm Admin Pas

Duplicate received MSDUs 397Dynamic RADIUS Authentication 290EE-mail 117EAP Preauthentification 159 , 201ED Threshold 196Enable Discovery Server 359En

IP Address Mode 257 , 261 , 298IP Address Range 185 , 339IP address to use for DNS/WINS serverassignment 325IP Address/Netmask 133IP Assignment Pool 2

Memory Usage 76Message 389Message Compression 382Message Timeout 382Messages 391Metric 211Metric Offset for Active Interfaces 227Metric Offset for Ina

Port Number 129Portforwardings 217Positive Cache 325PPPoE Ethernet Interface 255PPPoE Interfaces for Multilink 255PPPoE Mode 255PPTP Address Mode 262P

Property Value(W x L x H)Weight approx. 430 gLEDs 4 (1x Status, 1x WLAN, 2x Ethernet)Power consumption of the device 5-10 Watt, depending on extension

RTT Mode (Realtime Traffic Mode)250Rx Bytes 395Rx Errors 395Rx Packets 395 , 396 , 398 , 400 ,401 , 403 , 404 , 405 , 406SScan channels 152Scan Interv

System Admin Password 81System Date 76System Logic 371System Name 79TTACACS+ Secret 108TCP Inactivity 314TCP Keepalives 97TCP Port 109TCP-MSS Clamping

WWalled Garden 363Walled Garden URL 363Walled Network / Netmask 363WDS Description 163 , 401 , 403Weight 250WEP Key 1 - 4 163WEP Key 1-4 159 , 166 , 2

Property Value2,4 GHz 802.11n 40 MHz:MSC0 -87 dBm; MSC1 -84 dBm; MCS2 -82 dBm; MCS3-79 dBm; MCS4 -75 dBm; MSC5 -71 dBm; MCS6 -69dBm; MCS7 -67 dBm; MCS

Property ValueFrequency bands 2.4 GHz Indoor/Outdoor (2412-2472 MHz)5 GHz Indoor (5150-5350 MHz)5 GHz Outdoor (5470-5725 MHz)5 GHz BFWA (5755-5875 MHz

Property ValueDimensions and weights:Equipment dimensions without cable(W x L x H)220 mm x 185 mm x 42 mm without feetWeight approx. 1,200 g (3 WLAN m

Property ValueSerial interface V.24 9-pin Sub-D connectorRelay switching contact N/O 42 V AC 1 A / 30 V DC 2 A potential-free, software con-figurable,

Property ValueE1-mark (vehicle licencing)Buttons Reset and reset to ex work settings possible with two but-tons (1x config reset, 1x HW reset)Security

Property ValueWLAN modulesProtection against theft Theft protection is available as an optionTemperature sensor Temperature monitoring and software-co

Chapter 9 System Management . . . . . . . . . . . . . . . . . . . . . 759.1 Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 759.2 G

Property ValueModulation Modulation IEEE 802.11 standards: a,h (5 GHz) b/g (2.4GHz)Modulation types: 11, 5.5, 2 and 1 Mbit/s (DSSS) 2.4GHz;54, 48, 36,

the connection to earth is under the cover.Fig. 11: Connection to earth bintec WIx040n6.3 LEDsThe LEDs show the radio status, radio activity, Ethernet

LED Status InformationETH 1/2 off No cable or no Ethernet linkon Cable plugged in and linkon (flickering) Cable plugged in and link with datatrafficDu

LED Status Informationon (static) Errorson (flashing) ReadyWLAN 1/2/3 (3x green) on (flashing slowly) Freeon (static) At least one client is registere

Fig. 14: LEDs of bintec WI1065n and bintec WI2065nIn operation mode, the LEDs display the following status information for your device:LED status disp

During the boot operation, only the red LED is on. The other LEDs then come on duringbooting (if the units are initialised).6.4 ConnectorsAll the conn

ANT2 = TX/RX2 (Connection of second option directional an-tenna)bintec WI1040n, and bintec WI2040n have two Ethernet connections and a serial inter-fa

3 HW Reset button performs restart4 Cfg Deletes the configuration5 SFP SFP slot for 100 Mbit/s fibre module (optional)6 Serial Serial interface RS2327

Fig. 19: Antenna configuration for bintec WIx065n devices6.6 Pin Assignments6.6.1 Ethernet interfaceYour device has two Ethernet interfaces. These are

W1002n.6.6.2 Serial interfaceYour device has a Serial interface for connection to a console. This supports Baud ratesfrom 1200 to 115200 Bps.The inter

10.3.1 Relay Configuration . . . . . . . . . . . . . . . . . . . . . . . . 131Chapter 11 LAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Pin assignment of the connector for the power supplyPin Configuration1 +2 -3 +6.7 Frequencies and channelsDifferent certification regulations apply ar

6.8 WEEE informationFunkwerk Enterprise Communications GmbH6 Technical databintec WLAN and Industrial WLAN 49

Chapter 7 Access and configurationThis chapter describes all the access and configuration options.7.1 Access OptionsThe various access options are pre

• The fixed IP address assigned via the Dime ManagerPress the Enter (Return) key .7.1.1.2 TelnetApart from configuration using a web browser, with a T

device:(1) Log in to one of the types already available on your device (e.g. via Telnet - for loginsee Logging in on page 55).(2) Enter  "

If you have made sure that all the keys needed are available on the device, you have tocheck whether an SSH client is installed on your PC. Most UNIX

the corresponding parameters (see below).Proceed as follows to access your device via the serial interface:(1) Click on Programs -> Accessories -&g

7.2 Logging inWith the help of certain access data, you can log in on your device and carry out differentactions. The extent of the actions available

7.2.2 Logging in for ConfigurationSet up a connection to the device. The access options are described in Access Options onpage 50.Funkwerk Configurati

The configuration options available to you depend on the type of connection to your device:Types of connections and configurationsType of connection P

13.3.1 Slave Access Points . . . . . . . . . . . . . . . . . . . . . . . 18713.3.2 Radio Modules . . . . . . . . . . . . . . . . . . . . . . . . . . 1

Fig. 24: Funkwerk Configuration Interface home page7.3.1.1 Calling up Funkwerk Configuration Interface(1) Check whether the device is connected and sw

7.3.1.2 Operating elementsFunkwerk Configuration Interface windowThe Funkwerk Configuration Interface window is divided into three areas:• The header•

Functionto carry out the configuration. German and English are avail-able.View: Select the desired view from the dropdown menu. Stand-ard and SNMP bro

Fig. 28: MenusThe Save Configuration button is found in the navigation bar.If you save a current configuration, you can save this as the boot configur

The navigation bar also contains the main configuration menus and their sub-menus.Click the main menu you require. The corresponding sub-menu then ope

Button Functionautomatic detection of all the access points available and con-nected by Ethernet in the network.In the System Management -> Certifi

Icon FunctionTriggers a WLAN bandscan.Displays the next page in a list.Displays the previous page in a list.You can select the following operating fun

The menus of the Funkwerk Configuration Interface contain the following basic struc-tures:Funkwerk Configuration Interface Menu architectureFunctionBa

FunctionDropdown menus e.g.Click the arrow to open the list. Select the required option usingthe mouse.Internal lists e.g.Click . A new list entry is

7.3.1.3 Funkwerk Configuration InterfaceMenusThe configuration options of your device are contained in the sub-menus, which are dis-played in the navi

14.6.3 QoS Interfaces/Policies . . . . . . . . . . . . . . . . . . . . . . 246Chapter 15 WAN. . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Menu FunctionYou can also manage licences that are necessary for the use ofcertain functions.Interface Mode / BridgeGroupsIn this menu, you define the

Wireless LAN ControllerMenu FunctionWizard The Wizard helps you to set up a WLAN infrastructure.Controller Configura-tionIn this menu, you make the ba

Menu FunctionIPSec In this menu, you configure VPN connections over IPSec.L2TP In this menu you configure the use of L2TP (Layer 2 TunnellingProtocol)

Menu FunctionDiagnostics In this menu you can test the accessibility of hosts, DNS serversor routing.Software & Configura-tionIn this menu, you ca

Menu FunctionWLAN This menu shows you the WLAN connections statistics.Bridges In this menu you can view the current values of the configuredbridges.Ho

The BOOTmonitor is started as follows.The devices passes through various functional states when starting:• Start Mode• BOOTmonitor mode• Normal modeAf

Chapter 8 AssistantsThe Assistants menu offers step-by-step instructions for the following basic configurationtasks:• First steps• Internet access• VP

Chapter 9 System ManagementThe System Management menu contains general system information and settings.You see a system status overview. Global system

Fig. 32: System Management -> StatusThe System Management -> Status menu consists of the following fields:Fields in the Status System Informatio

Field Valuesensor. This shows the current temperature and the maximumand minimum temperatures reached.Active Sessions (SIF,RTP, etc... )Displays the t

17.2 Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31517.2.1 Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 315

Field Value• Software version of the wireless cardBridge mode:• Operation Mode: Bridge or Off• The channel used on this wireless module• Number of con

Fig. 33: System Management -> Global Settings -> SystemThe System Management -> Global Settings -> System menu consists of the followingfi

Field ValueThe default value is . You can view the stored messages inMonitoring -> Internal Log.Maximum MessageLevel of Syslog EntriesSelect the

Fig. 34: System Management -> Global Settings -> PasswordsNoteAll bintec devices are delivered with the same username and password. As long asth

Field ValueSNMP Read Community Enter the password for the user name .SNMP Write Community Enter the password for the user name 2.Fields in the

Fig. 35: System Management -> Global Settings -> Date and TimeYou have the following options for determining the system time (local time):Manual

NoteIf a method for automatically deriving the time is defined on the device, the values ob-tained in this way automatically have higher priority. A m

Field DescriptionIP address.In addition, select the protocol for the time server request.Possible values:• 84 (default value): This server uses the

Field Description• 4 / 5 4+: This server uses the Time servicewith TCP port 37.• 8: This time server is not currently used for the time r

The following licence types exist:• Licences already available in the device's ex works state• Free extra licences• Extra licences at additional