Essentia Wifless ESS PN25x (HW All) & ESS 2456x (HW 2.1x) Basic System Manual - OpenWifless ESS ProNODE Ver 1.45 - 20090120

WiFlEss

Wireless Outdoor ProNODE ESS 2456x and ESS PN25x

with OpenWiFlEss

ESS ProNODE Operating System

Basic System Manual

20 January 2009 Doc. Rev.: 2.1 – MA/AT/20090120 OpenWifless ESS ProNODE: SW Ver. 1.45 Wifless ESS 2456x: HW Rel. 2.1x Wifless ESS PN25x: HW Rel. 1.0x Alfa

Essentia T e l e c o m m u n i c a t i o n s & S e c u r i t y

WiFlEss www.essentia.eu

Page 2 of 152

Back Cover Page intentionally blank


Page 3 of 152

Legal Notes and Warnings Legal Rights

© Copyright 2006-2009 Essentia S.p.A. All rights reserved. The material contained herein is proprietary, privileged, and confidential and owned by Essentia or its third party licensors. Essentia S.p.A. reserves the right to change the equipment features, specifications and descriptions in this publication without prior notice. No part of this publication shall be deemed to be part of any contract or warranty unless specifically incorporated by reference into such contract or warranty.

Logo and Trade Names Essentia®, Advasu™, Nexit™, Wifless™, OpenWifless™ and/or other products and/or services referenced here in are either registered trademarks, trademarks or service marks of Essentia S.p.A. All other names are or may be the trademarks of their respective owners.

Statement of Conditions The information contained in this manual is subject to change without notice. Essentia S.p.A. shall not be liable for errors contained herein or for incidental or consequential damages in connection with the furnishing, performance, or use of this manual or equipment supplied with it.

Warranties and Disclaimers All Essentia S.p.A. (“Essentia”) products purchased from Essentia or through any of Essentia’s authorized resellers are subject to the following warranty and product liability terms and conditions.

Exclusive Warranty (a) Essentia warrants that the Product Hardware it supplies and the tangible media on which any software is installed, under normal use and conditions, will be free from significant defects in materials and workmanship for a period of twelve (12) months from the date of shipment of a given Product to Purchaser (the “Warranty Period”). During the Warranty Period, Essentia will, at its sole option and as Purchaser’s sole remedy, repair or replace any defective Product in accordance with Essentia’ standard R&R procedure. (b) With respect to the Product Firmware, Essentia warrants the correct functionality according to the attached documentation, for a period of three (3) months from invoice date (the “Warranty Period”). During the Warranty Period, Essentia may release to its Customers firmware updates, which include additional performance improvements and/or bug fixes, upon availability (the “Warranty”). Bug fixes, temporary patches and/or workarounds may be supplied as Firmware updates. Additional hardware or professional services, if required, to install or use Firmware updates must be purchased by the Customer. Essentia will be obligated to support solely the two (2) most recent Software Major Releases. ESSENTIA SHALL NOT BE LIABLE UNDER THIS WARRANTY IF ITS TESTING AND EXAMINATION DISCLOSE THAT THE ALLEGED DEFECT IN THE PRODUCT DOES NOT EXIST OR WAS CAUSED BY PURCHASER’S OR ANY THIRD PERSON'S MISUSE, NEGLIGENCE, IMPROPER INSTALLATION OR IMPROPER TESTING, UNAUTHORIZED ATTEMPTS TO REPAIR, OR ANY OTHER CAUSE BEYOND THE RANGE OF THE INTENDED USE, OR BY ACCIDENT, FIRE, LIGHTNING OR OTHER HAZARD.

Disclaimer (a) The Software is sold on an “AS IS” basis. Essentia, its affiliates or its licensors MAKE NO WARRANTIES, WHATSOEVER, WHETHER EXPRESS OR IMPLIED, WITH RESPECT TO THE SOFTWARE AND THE ACCOMPANYING DOCUMENTATION. ESSENTIA SPECIFICALLY DISCLAIMS ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT WITH RESPECT TO THE SOFTWARE. UNITS OF PRODUCT (INCLUDING ALL THE SOFTWARE) DELIVERED TO PURCHASER HEREUNDER ARE NOT FAULT TOLERANT AND ARE NOT DESIGNED, MANUFACTURED OR INTENDED FOR USE OR RESALE IN APPLICATIONS WHERE THE FAILURE, MALFUNCTION OR INACCURACY OF PRODUCTS CARRIES A RISK OF DEATH OR BODILY INJURY OR SEVERE PHYSICAL OR ENVIRONMENTAL DAMAGE (“HIGH RISK ACTIVITIES”). HIGH RISK ACTIVITIES MAY INCLUDE, BUT ARE NOT LIMITED TO, USE AS PART OF ON LINE CONTROL SYSTEMS IN HAZARDOUS ENVIRONMENTS REQUIRING FAIL SAFE PERFORMANCE, SUCH AS IN THE OPERATION OF NUCLEAR FACILITIES, AIRCRAFT NAVIGATION OR COMMUNICATION SYSTEMS, AIR TRAFFIC CONTROL, LIFE SUPPORT MACHINES, WEAPONS SYSTEMS OR OTHER APPLICATIONS REPRESENTING A SIMILAR DEGREE OF POTENTIAL HAZARD. ESSENTIA SPECIFICALLY DISCLAIMS ANY EXPRESS OR IMPLIED WARRANTY OF FITNESS FOR HIGH RISK ACTIVITIES.


Page 4 of 152

(b) PURCHASER’S SOLE REMEDY FOR BREACH OF THE EXPRESS WARRANTIES ABOVE SHALL BE REPLACEMENT OR REFUND OF THE PURCHASE PRICE AS SPECIFIED ABOVE, AT ESSENTIA’S OPTION. TO THE FULLEST EXTENT ALLOWED BY LAW, THE WARRANTIES AND REMEDIES SET FORTH IN THIS AGREEMENT ARE EXCLUSIVE AND IN LIEU OF ALL OTHER WARRANTIES OR CONDITIONS, EXPRESS OR IMPLIED, EITHER IN FACT OR BY OPERATION OF LAW, STATUTORY OR OTHERWISE, INCLUDING BUT NOT LIMITED TO WARRANTIES, TERMS OR CONDITIONS OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, SATISFACTORY QUALITY, CORRESPONDENCE WITH DESCRIPTION, NON INFRINGEMENT, AND ACCURACY OF INFORMATION GENERATED. ALL OF WHICH ARE EXPRESSLY DISCLAIMED. ESSENTIA’ WARRANTIES HEREIN RUN ONLY TO PURCHASER, AND ARE NOT EXTENDED TO ANY THIRD PARTIES. ESSENTIA NEITHER ASSUMES NOR AUTHORIZES ANY OTHER PERSON TO ASSUME FOR IT ANY OTHER LIABILITY IN CONNECTION WITH THE SALE, INSTALLATION, MAINTENANCE OR USE OF ITS PRODUCTS.

Limitation of Liability (a) ESSENTIA SHALL NOT BE LIABLE TO THE PURCHASER OR TO ANY THIRD PARTY, FOR ANY LOSS OF PROFITS, LOSS OF USE, INTERRUPTION OF BUSINESS OR FOR ANY INDIRECT, SPECIAL, INCIDENTAL, PUNITIVE OR CONSEQUENTIAL DAMAGES OF ANY KIND, WHETHER ARISING UNDER BREACH OF CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY OR OTHERWISE AND WHETHER BASED ON THIS AGREEMENT OR OTHERWISE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. (b) TO THE EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL THE LIABILITY FOR DAMAGES HEREUNDER OF ESSENTIA OR ITS EMPLOYEES OR AGENTS EXCEED THE PURCHASE PRICE PAID FOR THE PRODUCT BY PURCHASER, NOR SHALL THE AGGREGATE LIABILITY FOR DAMAGES TO ALL PARTIES REGARDING ANY PRODUCT EXCEED THE PURCHASE PRICE PAID FOR THAT PRODUCT BY THAT PARTY (EXCEPT IN THE CASE OF A BREACH OF A PARTY’S CONFIDENTIALITY OBLIGATIONS).

FCC Electronic Emission & Radio Frequency Interference Statement The Essentia Wifless ESS equipment has been tested and found to comply with the limits for a class B digital device, pursuant to part 15 of the FCC rules and to ETSI EN applicable rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a residential environment notwithstanding use in commercial, business and industrial environments. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instruction manual, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one of the following measures:

- Reorient or relocate the receiving antenna. - Increase the separation between the equipment and receiver. - Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. - Consult the dealer or an experienced RF technician for help.

FCC Caution: Any changes or modifications not expressly approved by the party responsible for compliance could void the user's authority to operate this equipment.

ETSI Conformity Statement This equipment is compliant with the EU Directive R&TTE 1999/05/CE and with the EU Decision 2005/513/CE, however it is, or it may be, subject to Local Country Usage Limitation and Restriction. Before the use consult your local Radio Regulatory Authority. ETSI Caution: Any changes or modifications, including antenna and RF cable type and model, could void the user's authority to operate this equipment. The Technical Construction File, for Authority Inspection, is available at the Essentia S.p.A. R&D Department at Via G.B. Vico, 29 - 42100 Reggio Emilia (RE), Italy.

FCC Radiation Hazard Warning This equipment complies with FCC radiation exposure limits set forth for an uncontrolled Indoor and Outdoor environment. This equipment should be Indoor installed and operated only with the Essentia’s approved Indoor Use Antennas and with minimum distance of 50 cm between the radiator (antenna) & your body. This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter. To comply with FCC radiation exposure requirement in section 1.1307, Outdoor environment, the antenna used for this transmitter must be fixed-mounted on outdoor permanent structures with a separation distance of at least


Page 5 of 152

2 meter from al persons for antennas with a gain up to 28 dBi and at least 3 meter for a 32+ dBi dish antenna, and must not be co-located or operating in conjunction with any other antenna or transmitter. The equipment transmits radio energy during normal operation. To avoid possible harmful exposure to this energy, do not stand or work for extended periods of time in front of its antenna. The long-term characteristics or the possible physiological effects of Radio Frequency Electromagnetic fields have not been yet fully investigated.

ETSI RF Exposure Warning - Limiting exposure to electromagnetic fields To comply with the European Directive 1999/519/CE and related updates, the system (the device with the antenna) must be configured in order to be compliant with the maximum E.I.R.P. (Equivalent Isotropic Radiated Power) allowed for the selected frequency band in respect of the approved Indoor or Outdoor application’s Limits & Rules. For Outdoor permanent installation, it is recommended to have a separation distance of at least 2.7 meter from all persons and shell not be co-located or operating in conjunction with any other transmitting antenna or transmitter. The equipment transmits radio energy during normal operation. To avoid possible harmful exposure to this energy, do not stand or work for extended periods of time in front of its antenna. The long-term characteristics or the possible physiological effects of Radio Frequency Electromagnetic fields have not been yet fully investigated.

R&TTE Compliance Statement This equipment complies with the appropriate essential requirements of the R&TTE EU Directive 1999/05/CE and it is compliant to the EU Decision 2005/513/CE.

Safety Considerations For the following safety considerations, “Instrument” means the Wifless ESS system’s components and their cables.

Caution - Electrical Shock Risk To avoid electrical shock, do not perform any servicing unless you are qualified to do so.

Power Line Voltage & Frequency Before connecting this instrument to the power line, make sure that the voltage and frequency of the power source matches the requirements of the provided power supply.

Outdoor Unit (ODU) and Antenna Installation and Grounding Ensure that the outdoor units, antennas and supporting structures are properly installed to eliminate any physical hazard to either people or property. Make sure that the installation of the outdoor unit, antenna and cables is performed in accordance with all relevant national and local building and safety codes. Even where grounding is not mandatory according to applicable regulation and national codes, it is highly recommended to ensure that the outdoor unit and the antenna mast (when using external antenna) are grounded and suitable lightning protection devices are used so as to provide protection against voltage surges and static charges. In any event, Essentia is not liable for any injury, damage or regulation violations associated with or caused by installation, grounding or lightning protection.

Important Notice This user manual is delivered subject to the following conditions and restrictions: This manual contains proprietary information belonging to Essentia S.p.A. Such information is supplied solely for the purpose of assisting properly authorized users of the respective Essentia products. No part of its contents may be used for any other purpose, disclosed to any person or firm or reproduced by any means, electronic and mechanical, without the express prior written permission of Essentia S.p.A. The text and graphics are for the purpose of illustration and reference only. The specifications on which they are based are subject to change without notice. The software described in this document is furnished under a license. The software may be used or copied only in accordance with the terms of that license. Information in this document is subject to change without notice. Corporate and individual names and data used in examples herein are fictitious unless otherwise stated. Essentia S.p.A. reserves the right to alter the equipment specifications and descriptions in this publication without prior notice. No part of this publication shall be deemed to be part of any contract or warranty unless specifically incorporated by reference into such contract or warranty. The information contained herein is merely descriptive in nature, and does not constitute an offer for the sale of the product described herein. Any changes or modifications of equipment, including opening of the equipment not expressly approved by Essentia S.p.A. will void equipment warranty and any repair thereafter shall be charged for. It could also void the user’s authority to operate the equipment. Some of the equipment provided by Essentia and specified in this manual, is manufactured and warranted by third parties. All such equipment must be installed and handled in full compliance with the instructions provided by such manufacturers as attached to this manual or provided thereafter by Essentia or the manufacturers. Non compliance with such instructions may result in serious damage and/or bodily harm and/or void the user’s authority to operate the equipment and/or revoke the warranty provided by such manufacturer.


Page 6 of 152

Table of Contents Legal Notes and Warnings .................................................................................................. 3

Legal Rights ..................................................................................................................................................... 3 Logo and Trade Names .................................................................................................................................... 3 Statement of Conditions ................................................................................................................................... 3 Warranties and Disclaimers .............................................................................................................................. 3 Exclusive Warranty ........................................................................................................................................... 3 Disclaimer ........................................................................................................................................................ 3 Limitation of Liability ......................................................................................................................................... 4 FCC Electronic Emission & Radio Frequency Interference Statement .............................................................. 4 ETSI Conformity Statement .............................................................................................................................. 4 FCC Radiation Hazard Warning ....................................................................................................................... 4 ETSI RF Exposure Warning - Limiting exposure to electromagnetic fields ........................................................ 5 R&TTE Compliance Statement ......................................................................................................................... 5 Safety Considerations ...................................................................................................................................... 5 Caution - Electrical Shock Risk ......................................................................................................................... 5 Power Line Voltage & Frequency ...................................................................................................................... 5 Outdoor Unit (ODU) and Antenna Installation and Grounding ........................................................................... 5 Important Notice ............................................................................................................................................... 5

Table of Contents ................................................................................................................ 6 Wifless™ ESS 2456x and ESS PN25x Package Contents ................................................ 10 Introduction to the Wifless™ ESS ProNODE Product Line ................................................ 11 Single, Dual and Quad Radio Wi-Fi/HiperLAN2 Outdoor Professional Equipment ........... 11

Overview of the Wifless™ ESS PN25x Series ......................................................................................... 12 Overview of the Wifless™ ESS 2456x Series .......................................................................................... 13

System Components and Technical Specifications ........................................................... 14 Essentia® Wifless™ ESS 2456x and ESS PN25x Hardware Features and Specifications .................... 14 Essentia® OpenWifless™ ESS ProNODE Operating System Main Features ......................................... 15

Main Wireless Features: ................................................................................................................................ 15 Main Networking Features (Wireless and Wireline): ...................................................................................... 15 Main Management Features: ......................................................................................................................... 16

Approved Antennas .......................................................................................................... 17 Approved RF Cables for Antenna Interconnection ............................................................ 18 Guidelines on Installation .................................................................................................. 19 Hardware Setup and Basic Knowledge ............................................................................ 20

Wifless ESS 2456x and ESS PN25x Ethernet, Serial and Aux Connectors ........................................... 20 Wifless EPOE01 Power-over-Ethernet Power Supply and Connectors ................................................. 21 Wifless ESS 2456x and ESS PN25x RF Antenna Connectors ............................................................... 22 Mounting the Wifless ESS ProNODE ODU ............................................................................................ 24

Pole-Mounting ................................................................................................................................................ 24 Wall-Mounting ................................................................................................................................................ 25 Electrical Grounding (Safety Grounding) ........................................................................................................ 25 Connecting the Antenna Cable to the ODU .................................................................................................... 26 Connecting the Indoor-to-Outdoor Cable to the ODU and IDU ...................................................................... 26

Overview of the Essentia Wifless™ Open Platform ........................................................... 28 The OpenWifless™ ESS ProNODE Operating System ..................................................... 28

Capabilities and Performances of the OpenWifless™ ESS ProNODE .................................................. 28 Supported Radius Protocols and Attributes by the OpenWifless™ ESS ProNODE ............................... 29

EAP3 Main Supported Protocols .................................................................................................................... 29 Authentication Authorization & Accounting Attributes ..................................................................................... 29 Essentia Private Attributes ............................................................................................................................. 30

Essentia-System-Time ............................................................................................................................................... 30 Essentia-Reply-Message ........................................................................................................................................... 30 Essentia-Max-Input-Octets, Essentia-Max-Output-Octets, Essentia-Max-Total-Octets ............................................. 30 Essentia-MAC-Allowed ............................................................................................................................................... 30

Essentia Packet Of Disconnect (Essentia POD) ............................................................................................ 31 Essentia Wifless ESS 2456x and ESS PN25x Setup & Commissioning ........................... 32

Prerequisites for Operation ..................................................................................................................... 32 Log into your Wifless ESS 2456x and ESS PN25x ................................................................................ 33

Login as Administrator .................................................................................................................................... 34 Login as Read-Only User ............................................................................................................................... 35 Login as Backup User .................................................................................................................................... 35

Setup of Physical Interfaces ................................................................................................................... 36


Page 7 of 152

Setup of General System Hardware parameters ............................................................................................ 36 Monitoring of System Temperature and PoE Power Lines ............................................................................. 37 Setup of Ethernet Physical Interfaces parameters ......................................................................................... 38 Setup of Wireless Physical Interfaces parameters ......................................................................................... 39

Setup of Ethernet Logical Interfaces ....................................................................................................... 41 Creation and Setup of Switch Logical Interfaces .................................................................................... 42 Creation and Setup of Wireless Logical Interfaces ................................................................................. 44 Creation and Setup of Trunking Logical Interfaces ................................................................................. 46 Provisioning the Fast-Ethernet Logical Interfaces .................................................................................. 48 Provisioning Switch Logical Interfaces ................................................................................................... 50 Provisioning Wireless Logical Interfaces ................................................................................................ 52

Access Point & Station/Client Mode (Point-to-Multipoint & Point-to-Point) ..................................................... 52 Repeater Mode (Simple Point-to-Multipoint Repeater Mode) ......................................................................... 53 Redundant / Resilient Point-to-Pont Link Mode (2+0 Aggregated Point-to-Point) .......................................... 54 PMP Mixed Mode (Mixed Point-to-Multipoint and Point-to-Point, PMP-PTP) ................................................. 54 WDS and OLSR Mesh Mode (WDS Simple Mesh and OLSR Advanced Mesh) ............................................ 55

Setting Wireless Logical Interface to AP Node Mode ............................................................................. 57 Setting Wireless Logical Interfaces to Station / Client Node Mode ......................................................... 60 Setting Wireless Logical Interfaces to WDS Node Mode ....................................................................... 62 Logical Interface Common Settings ........................................................................................................ 64

DHCP Server and Relay Settings .................................................................................................................. 64 IP Aliasing ...................................................................................................................................................... 65 PPPoE Settings .............................................................................................................................................. 66

PPPoE Server ............................................................................................................................................................ 66 PPPoE Relay .............................................................................................................................................................. 67

L2-L3-L4 Bandwidth Manager Settings .......................................................................................................... 67 Wireless Logical Interface Common Settings ......................................................................................... 69

Security Settings ............................................................................................................................................ 69 MAC Filtering Settings for the Access Point Interface .................................................................................... 70

Wireless Encryption Settings and IEEE 802.1x AAA .............................................................................. 71 Open System ................................................................................................................................................. 71 Static WEP Shared Key .................................................................................................................................. 71 IEEE 802.1x AAA with Dynamic WEP for Access Point ................................................................................. 72 IEEE 802.1X AAA with Dynamic WEP for Station .......................................................................................... 74 WPA/WPA2-PSK with AES or TKIP (WPA-Personal) ..................................................................................... 76 WPA / WPA2-EAP with AES or TKIP (WPA-Enterprise) for Access Point ....................................................... 77 WPA / WPA2-EAP with AES or TKIP (WPA-Enterprise) for Station ................................................................ 78

The Router Settings ................................................................................................................................ 79 Static Router ................................................................................................................................................... 79 Dynamic Routers ............................................................................................................................................ 79

Dynamic Routers Configuration using the WEB GUI ................................................................................................. 79 Dynamic Routers Configuration using Telnet ............................................................................................................. 81 OLSR Router RFC 3626 ............................................................................................................................................ 83

Policy Router .................................................................................................................................................. 84 Firewall Settings ...................................................................................................................................... 86 Class of Service (CoS) ............................................................................................................................ 88

Static CoS setting ........................................................................................................................................... 88 Dynamic CoS setting ...................................................................................................................................... 88

Advanced WISPr Radius Supported Attributes for Dynamic Bandwidth Management .............................................. 88 Quality of Service (QoS) ......................................................................................................................... 89

VLAN Priority QoS ......................................................................................................................................... 90 ToS/DSCP Priority QoS .................................................................................................................................. 91

ToS Prioritization (RFC 795 and RFC 1349) .............................................................................................................. 91 DSCP Prioritization ..................................................................................................................................................... 92

RTP Priority .................................................................................................................................................... 93 WMM-EDCA Priority QoS .............................................................................................................................. 94

The Management Settings, Status Monitoring and Performance Metering ............................................ 96 HTTP/HTTPS Management ........................................................................................................................... 96 SSH Management .......................................................................................................................................... 97 Telnet Management ........................................................................................................................................ 97 Serial RS232 CLI Management ...................................................................................................................... 98 SNMP Management ....................................................................................................................................... 98 Syslog Logging / System Events Monitoring .................................................................................................. 99 Netperf Performance Testing & Metering ..................................................................................................... 100 Iperf Performance Testing & Metering .......................................................................................................... 100 System Status & Resources Allocation Monitoring ....................................................................................... 101

Maintenance Settings ........................................................................................................................... 103


Page 8 of 152

General Settings .......................................................................................................................................... 103 Management Accounts and Password Settings ........................................................................................... 103

Administrator Profile ................................................................................................................................................. 104 Read-Only Operator Profile ...................................................................................................................................... 104 Backup Operator Profile ........................................................................................................................................... 104

Time and Date Settings ................................................................................................................................ 105 FW Upload Procedure (Upgrade / Downgrade) ........................................................................................... 106 Configuration Backup, Restore and Factory Default Settings ...................................................................... 108 Post Start-up Script Settings ........................................................................................................................ 110 Restart (Reboot) Command .......................................................................................................................... 111

Update/Store Configuration Settings ..................................................................................................... 112 Accessing the Command Line Interfaces .............................................................................................. 114

SSH Connection ........................................................................................................................................... 114 RS 232 Serial Port Local Connection ........................................................................................................... 114 TCP-IP Telnet Remote Connection .............................................................................................................. 114

Troubleshooting Tips & Special Wifless ESS Utilities ...................................................... 115 How to View/Get the Startup/Boot Sequence System Log .................................................................... 115 How to Know the Radio Links Status ..................................................................................................... 116 Reset to Factory Default and Restore the Backup Flash Configuration via MAC Address using the LanReset tool ......................................................................................................................................... 118

LanReset for Windows XP ........................................................................................................................... 118 Reset to Factory Default ........................................................................................................................................... 119 Restore to Backup Flash Configuration .................................................................................................................... 119

LanReset for Linux ....................................................................................................................................... 120 Reset to Factory Default ........................................................................................................................................... 120 Restore to Backup Flash Configuration .................................................................................................................... 120

Tx99 Special Tool .................................................................................................................................. 121 Main Useful CLI Commands ........................................................................................... 122

Save the Current and Backup Configurations ...................................................................................... 122 Reset of the Password of the Web Admin Account .............................................................................. 123

ResetWebPwd ............................................................................................................................................. 123 Get the System Inventory ..................................................................................................................... 123 Get the Operating System Version ....................................................................................................... 124 Ps Command ........................................................................................................................................ 124 Dmesg Command ................................................................................................................................. 125 Logread Command ............................................................................................................................... 126 Iwconfig and Ifconfing Commands ........................................................................................................ 127 Atop Command ..................................................................................................................................... 127 Watch Command .................................................................................................................................. 128

Appendix A ...................................................................................................................... 129 Ethernet/PoE IP67 Lock-in-type and RJ45 Connectors Wiring Diagram ...................................................... 129 Serial IP67 Lock-in-type and D-SUB 9-pin Connectors Wiring Diagram ...................................................... 131

Appendix B ..................................................................................................................... 133 Max RF Output Power as per Country Rules and Selected Antenna ........................................................... 133

Legal Notes for EU - ETSI Countries - Attention! ..................................................................................................... 133 Legal Notes for USA & Canada - FCC Countries - Attention! .................................................................................. 133 Note Legali Specifiche per l'Italia - Attenzione! ........................................................................................................ 133

European Union Specific Basic ETSI Rules ................................................................................................. 133 ETSI Max RF Tx Power Calculation Formula for your Antenna .................................................................... 134 Normative Tecniche Specifiche per il Mercato Italiano (ETSI Italia) ............................................................. 134 Formula ETSI per il Calcolo della Potenza Max Applicabile in Antenna ....................................................... 134

Appendix C ..................................................................................................................... 135 Contacting the Wifless Support Team .......................................................................................................... 135

Appendix D ..................................................................................................................... 136 Product and Company Certifications ............................................................................................................ 136

CE Declaration of Conformity for Wifless ESS 24561 Rev. A .................................................................................. 136 CE Declaration of Conformity for Wifless ESS 24562 Rev. B .................................................................................. 137 CE Declaration of Conformity for Wifless ESS 24564 Rev. A .................................................................................. 138 CE Declaration of Conformity for Wifless WFL R108F25X(B) Radio Module .......................................................... 139 ETSI R&TTE 99-05 Certification for Wifless WFL R108F25X(B) Radio Module ...................................................... 140 CE Declaration of Conformity for Wifless WFL R108F25HP Radio Module ............................................................ 141 ETSI R&TTE 99-05 Certification for Wifless WFL R108F25HP Radio Module ........................................................ 142 Company ISO 9001 : Vision 2000 Certificate ........................................................................................................... 143

Appendix E ..................................................................................................................... 144 Waste Equipment Disposal Instruction ......................................................................................................... 144

Disposal of Waste Equipment by Users in Private Households in the European Union .......................................... 144 Smaltimento di apparecchiature da rottamare da parte di privati nell'Unione Europea ........................................... 144


Page 9 of 152

Appendix F ...................................................................................................................... 145 Copyrights, Trademarks and Credits ............................................................................................................ 145

Copyrights ................................................................................................................................................................ 145 Trademarks .............................................................................................................................................................. 145

Appendix G ..................................................................................................................... 146 The Latin Sentences .................................................................................................................................... 146

ALEA IACTA EST ..................................................................................................................................................... 146 FABER FORTVNÆ ................................................................................................................................................... 146

User Notes ...................................................................................................................... 147

Page / end of page intentionally left blank


Page 10 of 152

Wifless™ ESS 2456x and ESS PN25x Package Contents

1 x Wifless™ ESS 2456x or ESS PN25x Outdoor Unit 1 x Wifless™ PoE Power Supply (model WFL EPOE01) 1 x European AC Power cable with Schuko plug 1 x Wifless™ ESS MK01 Mounting Kit 1 x Wifless™ ESS 2456x or ESS PN25x Legal & Technical Short Guide and Certificate 1 x Wifless™ ESS Family Documentation CD Rom

Important Note Using a power supply other than the Wifless™ PoE Power Supply (WFL EPOE01) included in your package may damage the equipment and will void the product warranty. If you intend to use a third party PoE Power Supply, make sure it is a PASSIVE PSE compliant with the IEEE 802.3af/at wiring standard and that is capable of supplying a minimum of 1A at 48VDC.


Page 11 of 152

Introduction to the Wifless™ ESS ProNODE Product Line Single, Dual and Quad Radio Wi-Fi/HiperLAN2 Outdoor Professional Equipment Essentia® is glad to present the Wifless™ ESS ProNODE product line made by the Wifless™ ESS PN25x and ESS 2456x series of professional wireless equipment for carrier class WiFi/HiperLAN2 networks and applications in licensed and unlicensed bands. The whole ProNODE product line has been designed to meet the most common needs of modern network applications and Internet Service Providers for MANs and VoIP services. The Wifless™ ESS PN25x and ESS 2456x series employs a modular scalable architecture based on Intel® XScale™ network processors, Mini-PCI system bus and Mini-PCI radio modules. This architecture provides convenient access for upgrade of software (firmware and OS) and hardware (radio modules). In particular, users can upgrade their system to the WiMax TDD and the IEEE 802.11n MIMO standards at a reasonably low cost, as well as enhance it with Essentia Advasu™ Active Filter technologies to reach state-of-the-art System Gain and best performance in the 2.4-2.5 GHz frequency band. Sealed in a ruggedized metal IP 68 + IK 10 case, the Wifless ESS ProNODE product line features extended temperature range, high MTBF, short MTTR and low power consumption. All components have modern security features and are free from safety hazards or SAR-related risks. The Wifless™ ESS PN25x and ESS 2456x are fully compatible with standard L2 protocols such as RSTP and WDS, as well as with L3 IP advanced routing protocols like OSPF, BGP-4 and OLSR. The Essentia Wifless™ ESS 2456x series hosts the Essentia Wifless R108F25X(B) radio modules delivering up to 20 dBm of RF power, while the Wifless™ ESS PN25x series hosts the high-power Essentia Wifless R108F25HP radio modules, delivering up to 24 dBm of RF power, and boasts an even greater extended temperature range along with additional hardware features (please refer to the products’ datasheets for details). Each radio module operates in the frequency bands range 2.2 GHz to 2.5 GHz and range 4.8 GHz to 6.1 GHz. Both the Atheros® SuperG/AG™ (proprietary standard 108 Mbps) and the Atheros eXtended Range™ (XR) modes are supported.


Page 12 of 152

Overview of the Wifless™ ESS PN25x Series The Essentia® Wifless™ ESS PN25x is a Carrier Class high-power and high-end-performance Single (ESS PN251), Dual (ESS PN252) or Quad (ESS PN254) Dual Band Radio Outdoor Wireless AP / Bridge / Router / Mesh Node operating on both ISM Unlicensed and Licensed Bands in the 2.2-2.5 and 4.8-6.1 GHz with Antenna Diversity (except the ESS PN254 that does not have Antenna Diversity). Based on OpenWifless™ ESS ProNODE operating system, the device integrates multiple Advanced IP Dynamic Routers, a Policy Router, an Advanced Firewall with Broadcast & Multicast filtering and a QoS & CoS Manager with a full-featured L2-L3-L4 Bandwidth Manager. The Wifless™ ESS PN25x can operate in every possible configuration, from a simple stand-alone PTP L2 bridged link, up to a complex Multiple Virtual Access Point node with BGP-4 and OSPF dynamic routing and Radius AAA, or acting as a simple node in a WDS Mesh Network as well as in more complex OLSR Mesh Networks. PTP links aggregation capability and PMP sector redundancy complete the outstanding set of features provided by the system software. The Wifless™ ESS PN25x is a Full-Standard IEEE 802.11abgh versatile & interoperable high-power device with extensions for licensed bands. The Wifless™ ESS PN25x is tailor-made for actual WISP & Wi-Fi VoIP applications in high-density urban areas. Thanks to the Antenna Diversity, to the exclusive High-Performance Wireless Multicast and to the Compact Flash slot that can host a Solid-State-Disk, it is the best solution for the emergent Triple-Play and Video-on-Demand services over reliable low-cost MAN and WAN radio networks. The Antenna Diversity capability minimizes the multipath impairment and optimizes the radio link connection with the CPE. Inside the device, each independent radio-set (radio module) is connected to two antennas each, that allow the deployment of high-performance point-to-point links, as well as outstanding point-to-multipoint coverage. The Wifless™ ESS PN25x advanced technology can deliver the best performance even in environments affected by severe spectral pollution. The Wifless™ ESS PN25x complies with the IEEE 802.11 b/g and the IEEE 802.11 a/h Standard, operating in Time Division Duplex (TDD) mode, while has proprietary modes for the supported Licensed Bands. Orthogonal Frequency Division Multiplexing (OFDM) modulation and Forward Error Correction (FEC) coding are also used. The implemented state-of-the-art 64 FFTs OFDM technology provides strong insensitivity to multi-path fading, thus making the Wifless™ ESS PN25x suitable for use in near-line-of-sight environments or non-line-of-sight (NLOS) environments. The device can also operate in the Atheros® SuperG/AG™ Static & Dynamic Turbo mode, eXtended Range™ (XR) mode, as well as in the Wifless™ Proprietary modes. As a result, an extremely high capacity can be obtained at the greatest RF bandwidth, and the greatest receiver sensitivity can be obtained at the lowest bandwidth. This gives Service Providers the opportunity to reach previously inaccessible areas, thus broadening their subscriber population. The system features adaptive modulation for automatic selection of modulation schemes, including BPSK, QPSK, 16-QAM and 64-QAM, to maximize data rate and improve spectral efficiency, and also supports the legacy Baker DSSS & Walls CCK Standards of the early IEEE 802.11b. When used as a mesh node, the Wifless™ ESS PN25x can provide internetworking capabilities at Layer 1.5 with the WDS protocol, at Layer 2 with Ethernet-Switched STP, and at Layer 3 with OSPF, BGP-4, IS-IS and OSLR protocols. This feature enables to internetwork multiple wireless mesh networks from different vendors at any Layer level. The OSPF and the BGP-4 routing protocols make the system suitable for large-scale TCP-IP networks of Telco carriers, ISP and large enterprises. Wherever allowed by the Radio Regulations, the Wifless™ ESS PN25x can perform 40/44 MHz-wide RF channels, in the mode called SuperG/AG™ Turbo, capable of delivering a link throughput that is nearly twice as high as that of a 20 MHz channel. The eXtended Range™ operating mode and the Wifless™ Proprietary mode enable RF channels with small bandwidths down to 4 MHz. These features allow to double or even triple or quadruple link spans and coverage areas. The Wifless™ ESS PN25x can support sensitive applications through advanced IEEE 802.11i & IEEE 802.1x authentications and strong data encryption based on WPA2, TKIP or AES algorithms, with key lengths up to 256 bits. In compliance with the IEEE 802.1q-2005 standard the system delivers precise QoS and CoS as requested, and fully supports both simple VLAN and complex QinQ VLAN, ensuring high-quality services and maximum security. The device supports a large variety of predefined operating modes, allowed by the Local Country Radio Regulatory. However, the operable frequencies, as well as other RF parameters, can be refined according to the applicable radio regulations and specific deployment considerations. The Wifless™ ESS PN25x system can be managed via standard tools, such as HTTP browsers, SSH and Telnet Command Line Interface, as well as through MIB-based SNMP browsers for remote control and administration.


Page 13 of 152

Overview of the Wifless™ ESS 2456x Series The Essentia® Wifless™ ESS 2456x is a Carrier Class high-performance Single (ESS 24561), Dual (ESS 24562) or Quad (ESS 24564) Dual Band Radio Outdoor Wireless AP / Bridge / Router / Mesh Node operating on both ISM Unlicensed and Licensed Bands in the 2.2-2.5 and 4.8-6.1 GHz. Based on OpenWifless™ ESS ProNODE operating system, the device integrates multiple Advanced IP Dynamic Routers, a Policy Router, an Advanced Firewall with Broadcast & Multicast filtering and a QoS & CoS Manager with a full-featured L2-L3-L4 Bandwidth Manager. The Wifless™ ESS 2456x can operate in every possible configuration, from a simple stand-alone PTP L2 bridged link, up to a complex Multiple Virtual Access Point node with BGP-4 and OSPF dynamic routing and Radius AAA, or acting as a simple node in a WDS Mesh Network as well as in more complex OLSR Mesh Networks. PTP links aggregation capability and PMP sector redundancy complete the outstanding set of features provided by the system software. The Wifless™ ESS 2456x is a Full-Standard IEEE 802.11abgh versatile & interoperable device with extensions for licensed bands. The Wifless™ ESS 2456x is tailor-made for actual WISP & Wi-Fi VoIP applications in urban and rural areas. Thanks to the exclusive High-Performance Wireless Multicast it is the best solution for the emergent Triple-Play and Video-on-Demand services over reliable low-cost MAN and WAN radio networks. The Wifless™ ESS 2456x advanced technology can deliver the best performance even in environments affected by severe spectral pollution. The Wifless™ ESS 2456x complies with the IEEE 802.11 b/g and the IEEE 802.11 a/h Standard, operating in Time Division Duplex (TDD) mode, while has proprietary modes for the supported Licensed Bands. Orthogonal Frequency Division Multiplexing (OFDM) modulation and Forward Error Correction (FEC) coding are also used. The implemented state-of-the-art 64 FFTs OFDM technology provides strong insensitivity to multi-path fading, thus making the Wifless™ ESS 2456x suitable for use in near-line-of-sight environments or non-line-of-sight (NLOS) environments. The device can also operate in the Atheros® SuperG/AG™ Static & Dynamic Turbo mode, eXtended Range™ (XR) mode, as well as in the Wifless™ Proprietary modes. As a result, an extremely high capacity can be obtained at the greatest RF bandwidth, and the greatest receiver sensitivity can be obtained at the lowest bandwidth. This gives Service Providers the opportunity to reach previously inaccessible areas, thus broadening their subscriber population. The system features adaptive modulation for automatic selection of modulation schemes, including BPSK, QPSK, 16-QAM and 64-QAM, to maximize data rate and improve spectral efficiency, and also supports the legacy Baker DSSS & Walls CCK Standards of the early IEEE 802.11b. When used as a mesh node, the Wifless™ ESS 2456x can provide internetworking capabilities at Layer 1.5 with the WDS protocol, at Layer 2 with Ethernet-Switched STP, and at Layer 3 with OSPF, BGP-4, IS-IS and OSLR protocols. This feature enables to internetwork multiple wireless mesh networks from different vendors at any Layer level. The OSPF and the BGP-4 routing protocols make the system suitable for large-scale TCP-IP networks of Telco carriers, ISP and large enterprises. Wherever allowed by the Radio Regulations, the Wifless™ ESS 2456x can perform 40/44 MHz-wide RF channels, in the mode called SuperG/AG™ Turbo, capable of delivering a link throughput that is nearly twice as high as that of a 20 MHz channel. The eXtended Range™ operating mode and the Wifless™ Proprietary mode enable RF channels with small bandwidths down to 4 MHz. These features allow to double or even triple or quadruple link spans and coverage areas. The Wifless™ ESS 2456x can support sensitive applications through advanced IEEE 802.11i & IEEE 802.1x authentications and strong data encryption based on WPA2, TKIP or AES algorithms, with key lengths up to 256 bits. In compliance with the IEEE 802.1q-2005 standard the system delivers precise QoS and CoS as requested, and fully supports both simple VLAN and complex QinQ VLAN, ensuring high-quality services and maximum security. The device supports a large variety of predefined operating modes, allowed by the Local Country Radio Regulatory. However, the operable frequencies, as well as other RF parameters, can be refined according to the applicable radio regulations and specific deployment considerations. The Wifless™ ESS 2456x system can be managed via standard tools, such as HTTP browsers, SSH and Telnet Command Line Interface, as well as through MIB-based SNMP browsers for remote control and administration.


Page 14 of 152

System Components and Technical Specifications The Wifless ESS 2456x and the ESS PN25x equipment consists of a radio Outdoor Unit (ODU), containing from one to four independent radio modules, and a Wifless™ WFL EPO01 Power-over-Ethernet (PoE) power supply (Indoor Unit, or IDU) that can be paired for redundancy with an other one. The IDU interfaces with your Customer Premises Equipment (CPE) to supply and receive data through a standard RJ45 port in accordance with the IEEE 802.3u Fast-Ethernet 10/100BaseTX protocol. The IDU can be powered by standard 100 VAC to 240 VAC mains (from 50 to 60 Hz). The IDU connects to the ODU through an outdoor-category 5+ FTP cable to carry Ethernet data, supply 48 VDC power, and transfer control for system management. The ODU includes multiple system NPUs (specialized Network Processors) and radio modules; interfaces with external equipment through N(F)-type antenna connectors, and special circular lock-in type Ethernet(s), Serial(s) and AUX ports.

Figure 1 – Wifless EPOE01

IEEE 802.3at PASSIVE PoE Power Supply (IDU)

(Front view on top) Figure 2 - Wifless ESS 2456x and ESS PN25x Outdoor Unit (ODU)

(Ethernets/Serial/AUX connectors view on left and RF N-type connectors view on right)

The number of the connectors varies for each model

Essentia® Wifless™ ESS 2456x and ESS PN25x Hardware Features and Specifications Please refer to the products’ datasheets.


Page 15 of 152

Essentia® OpenWifless™ ESS ProNODE Operating System Main Features Main Wireless Features:

Worldwide Atheros Radio Regulatory Country Codes Multiple Logical Interface capability UP to 8 Virtual Access Point with Multiple ESSID with VLAN or IP Domain Isolation Interface Bonding capability (redundancy and throughput aggregation) NLOS / nLOS (Non Line of Sight / Near Line of Sight) Capability in IEEE 802.11a/h mode (OFDM

Modulation) IEEE 802.11 Standard Infrastructure and Ad-Hoc operational modes Flexible L2 Ethernet Switch and L3 IP Router operation modes:

o Bridged/Routed Access Point (Wi-Fi / HiperLAN2 standard modes) o Bridged/Routed Station or Client (PTP / PMP modes) o 2+0 Bridged/Routed Resilient PTP Link o Wireless Repeater

STP/RSTP, WDS Standard L2 Mesh Capability OSPF and OLSR Advanced L3 Mesh Capability High Efficiency 2.4 GHz IEEE 802.11g “Pure G” mode High Speed 108 Mbps in SuperG/AG “Dynamic and Static Turbo” mode

o Full parameters fine tunable High Range Atheros “eXtended Range” mode Extended Channel Atheros “XChan” mode ESSID Hidden Broadcast (Site survey and scanning prevention) with Advanced Proprietary AP ID Key P2P Zone Blocking Capability (Client Isolation) Denial or Access List IEEE 802.11abg “ANY” Station (Connection Prevention or Granted modes)

o Wireless MAC Access Control List (Atheros chip-set HW features) IEEE 802.11f IAPP Handover Capability IEEE 802.11d Country Regulatory Domain Roaming IEEE 802.11e QoS and CoS (Wireless MultiMedia Standard)

o Full Tunable Fine Parameters option Static IEEE 802.11 WEP encryption capability with keys of 64/128/152 bits and with non standard length

WEP keys (Proprietary implementation for additional security) Dynamic IEEE 802.11 WEP encryption capability with 802.1x protocol IEEE 802.11i compliant WPA/WPA2 based on TKIP/AES with PSK/EAP encryption capability with keys up

to 256 bits o WPA/WPA2 full parameters fine tunable

IEEE 802.1x Standard RADIUS compliant to EAP protocols with TKIP/AES encryption o EAP-MD5/TLS, EAP-PEAP, EAP-LEAP, EAP-SIM, EAP-TLS and EAP-TTLS and other supported

Main Networking Features (Wireless and Wireline): Flexible L2 Ethernet Switch:

o IEEE 802.1d Spanning Tree Protocol compliant o IEEE 802.1w Rapid Spanning Tree Protocol compliant

Advanced L3 TCP-IP Full Featured Router: o Static TCP-IP Router o Advanced TCP-IP Dynamic Router:

RIP1 RFC 1058 & RIP2 RFC 2453 OSPF v2 RFC 2328 BGP v4 RFC 1771 IS-IS RFC 1195 OLSR RFC 3626

o Advanced Policy Router Extended Firewall with NAT capabilities:

o Conditional Firewall with Priority Policy and Configurable NAT o Independent Traffic Flow Policy Filtering o Virtual Server (NAT inbound server)

L3-L4 IP Bandwidth Manager with Traffic Shaper and Multiple Queues capability IEEE 802.1Q-2005 VLAN capability and Interface Isolation with VLAN routing capability and QinQ IEEE 802.1Q-2005 QoS and CoS Standard capability (including IEEE 802.1p)


Page 16 of 152

VPN Transparent (Pass-Through) capability GRE Tunnel Protocol capability RFC 1701 IEEE 802.3ad Interface Bonding and Bandwidth Aggregation capability:

o 2+0 Radio Optimized + Fail Over mode o 1+1 Fail Over mode o 2+0 Round Robin mode o 2+0 XOR Even/Odd MAC Load Balancing mode

Extended DHCP Client/Server/Relay Capability for each Logical Interface PPPoE Server and Relay NTP Network Time Protocol v3 RFC 1305 SNTP Simple Network Time Protocol v4 RFC 2030

Main Management Features: Remote firmware update and upgrade via TFTP integrated client Remote device configuration backup and restore

o Unique XML Configuration File for easy off-line setup and replication onto multiple devices Complete remote system administration:

o via SSH / Telnet CLI (Command Line Interface) o via web base (HTTP/ HTTPS) GUI (Graphic User Interface) o via SNMP MNG tools o via local RS-232 serial port (optional)

SNMP Public and Private (Proprietary) MIBs for Full Remote Control and Monitoring o Integrated advanced SNMP V1, V2 and SNMP V3 Agents

Monitoring and Diagnostics integrated tools: o Netperf performance metering o Iperf performance metering o Syslog service o System Status Resource Metering & Monitoring

CPU, Memory, Flash Disk usage IRQ rate Physical Interfaces statistics

Main Supervisoring Supported tools: o NeaNMS Suite (Linux based) o OpenNMS (Linux OpenSource Project) o CastleRock SNMPc Enterprise and Workgroup (SNMPc) o Hewlet-Packard OpenView (HPOV)


Page 17 of 152

Approved Antennas1 The following table is the only one complete list of the approved antennas that can be used along with the Wifless ESS 2456x and ESS PN25x devices in accordance with the current EU ETSI rules.

Mnemonic Code EAN13 Code Description WFL COA 24-10 8033171940198 Wifless™ Pro-Outdoor 8 dBi Omni Collinear Antenna 2.4-2.5 GHz WFL PPA 24-13 8033171940501 Wifless™ Pro-Outdoor 13 dBi 90° Sectoral Patch Antenna 2.4-2.5 GHz WFL PPA 24-14 8033171940181 Wifless™ Pro-Outdoor 14 dBi 60° Sectoral Patch Antenna 2.4-2.5 GHz WFL PPA 24-17 8033171940174 Wifless™ Pro-Outdoor 16 dBi Patch Antenna 2.3-2.7 GHz WFL COA 56-10 8033171940150 Wifless™ Pro-Outdoor 9 dBi Omni Collinear Antenna 5.4-6.0 GHz WFL PPA 56-15 8033171940235 Wifless™ Pro-Outdoor 15 dBi 120° Sectoral Patch Antenna 5.1-6.1 GHz WFL PPA 56-15H 8033171940419 Wifless™ Pro-Outdoor 15 dBi 120° Sectoral, Horizontal Polarization, Patch

Antenna 5.1-6.1 GHz

WFL PPA 56-16 8033171940242 Wifless™ Pro-Outdoor 17 dBi 90° Sectoral Patch Antenna 4.9-6.1 GHz WFL PPA 56-16H 8033171940426 Wifless™ Pro-Outdoor 17 dBi 90° Sectoral, Horizontal Polarization, Patch

Antenna 4.9-6.1 GHz

WFL PPA 56-17 8033171940259 Wifless™ Pro-Outdoor 16 dBi 60° Sectoral Patch Antenna 5.1-6.1 GHz WFL PPA 56-17H 8033171940433 Wifless™ Pro-Outdoor 16 dBi 60° Sectoral, Horizontal Polarization, Patch

Antenna 5.1-6.1 GHz

WFL PPA 56-23 8033171940112 Wifless™ Pro-Outdoor 23 dBi Patch Antenna 5.1-6.0 GHz WFL PPA 56-28 8033171940105 Wifless™ Pro-Outdoor 28 dBi Patch Antenna 5.1-6.1 GHz WFL SDA 56-32 8033171940099 Wifless™ Pro-Outdoor 32 dBi Solid Dish 90 cm Antenna 5.15-5.85 GHz WFL SDA 56-34 8033171940679 Wifless™ Pro-Outdoor 34 dBi Solid Dish 120 cm Antenna 5.15-5.85 GHz WFL SDA 56-36 8033171940686 Wifless™ Pro-Outdoor 36 dBi Solid Dish 150 cm Antenna 5.15-5.85 GHz

For more details refer to the products’ datasheets. The use of antennas other than the above listed, or expressly certified by Essentia, will void the product’s EU certificates of compliances. Important Notes on Conformity In order to maintain the Essentia EU Declaration of Conformity valid and to act in accordance with the EU Directive R&TTE 1999/05/CE and with the EU Decision 2005/513/CE, you must:

Use genuine Essentia Wifless approved antennas only; Use genuine Essentia Wifless approved RF cable kits; Select the Radio Country Code in accordance with your Local Country Area Rules.

1 Not included in Wifless ESS 2456x and ESS PN25x standard package.


Page 18 of 152

Approved RF Cables for Antenna Interconnection The following table is the only one complete list of the approved cables that can be used along with the Wifless ESS 2456x and ESS PN25x devices in accordance with the current EU ETSI rules.

Mnemonic Code EAN13 Code Description WFL EKCRF01 8033171940020 Wifless RF Antenna Cable Kit, 1m low-loss cable with 2x N(M)

connectors for ProNODE devices Typical Insertion Loss in the 2.4-2.5 GHz Band: 0.5 dB Typical Insertion Loss in the 4.9-5.8 GHz Band: 1.3 dB

WFL EKCRF02 8033171940297 Wifless RF Antenna Cable Kit, 2m low-loss cable with 2x N(M) connectors for ProNODE devices

Typical Insertion Loss in the 2.4-2.5 GHz Band: 1.0 dB Typical Insertion Loss in the 4.9-5.8 GHz Band: 2.0 dB





For more details refer to the products’ datasheets. The use of cables other than the above listed, or expressly certified by Essentia, will void the product’s EU certificates of compliances. Important Notes on Conformity In order to maintain the Essentia EU Declaration of Conformity valid and to act in accordance with the EU Directive R&TTE 1999/05/CE and with the EU Decision 2005/513/CE, you must:



Page 19 of 152

Guidelines on Installation The installation of outdoor equipment should ONLY be performed by experienced installation professionals who are familiar with the local building and safety codes. Wherever applicable, make sure that operation is carried out by engineers in possession of a license released by the appropriate government regulatory authorities. Failure to do so may void the product warranty and may expose both end users and Service Providers to legal and financial liabilities. Essentia and its resellers or distributors are not liable for injury, damage or regulation violations associated with the installation of outdoor units or antennas. Select the optimal locations for your equipment using the following guidelines:

You can mount your ODU either on a pole or on a wall. Choose a location so that only qualified professionals can easily access your ODU for installation and tests.

Install the ODU as close to your antenna as possible. As a rule, the higher you place your antenna, the better the performance of your radio link. This may not apply

to NLOS propagation in urban areas: in such cases, try to move your antenna laterally to achieve the best performance.

Mark the position where your indoor-to-outdoor cables enter the building and install your IDU in the nearest position available. Make sure that your IDU can be conveniently connected to a power outlet and to your CPE.

We recommend the installation of high-quality gas-type protectors against electrical surges and lightning for each antenna installed. Check the local safety code of your country and of your building for proper protectors installation.

We recommend that you ground your ODU to the nearest building grounding connector. Check the local safety code of your country and your building for proper protectors installation.


Page 20 of 152

Hardware Setup and Basic Knowledge Before you take any action on your Wifless ESS ProNODE device, we recommend that you become familiar with the system and its applications. Under no circumstances the ODU case should be opened. Failure to do so will result in the immediate loss of your IP 68 Dust & Water Protection as well as in the loss of your Product Warranty. Wifless ESS 2456x and ESS PN25x Ethernet, Serial and Aux Connectors As shown in Figure 3, the ODU of Wifless ESS 2456x and of the ESS PN25x, has special IP 67 rated Ethernet/Serial/Aux connectors proof against dust and water. These jacks are commonly referred to as Circular Lock-In-type connectors or MIL-like connectors.

Figure 3 – Wifless ESS 2456x and ESS PN25x (ODU) Circular Lock-In-type connectors

Figure 3 displays the location of the two Fast-Ethernet ports and of the Serial and Aux ports of your ODU. Both the Fast-Ethernet ports can be used to power the ODU via Power-over.-Ethernet (PoE) supplies (Read important note below!). Ethernet 0 (ETH0 Port): This is the main Ethernet port of the ODU; normally used for connecting the PoE power supply to the ODU. Ethernet 1 (ETH1 Port): This secondary Ethernet port can be used also to connect a secondary PoE power supply to implement a 2+0 Load Sharing Redundant Power Supply solution. RS 232 + RS 422/485 (SERIAL port): This Serial connector hosts up to two serial ports used to provide a Standard System Console RS 232 port and an Industrial Grade RS 422/485 selectable port (available only in the Wifless ESS PN25x devices). The RS 232 port is mainly used by the Wifless Support Team for troubleshooting purposes and is disabled by default. The RS 422/485 port is provided mainly for remote user’s system control, like IP-Cam PZT, and is disabled by default. Auxiliary (AUX port): This connector is used to provide access to special device interfaces, like DSP and TDM PDH interfaces, available on special Wifless ESS ProNODE models (refer to the products’ datasheets for details). Important Notes Connecting the RS 232 Serial Port of your PC to either Ethernet port of your ODU may cause damage to your PC. Never connect your PC RS 232 port to any Wifless ESS device Ethernet port! In accordance with the IEEE 802.3af/at wiring standard, both the Ethernet ports of your Wifless ESS 2456x ODU can supply up to 72 VDC, when powered (48 VDC when supplied by the standard WFL EPOE01)!

Ethernet 0 Connector (ETH0 port)

Ethernet 1 Connector (ETH1 port)

RS 232 & RS 422/485 Connector (SERIAL Port)

Auxiliary Connector (AUX port)


Page 21 of 152

Wifless EPOE01 Power-over-Ethernet Power Supply and Connectors As shown in Figure 4, the IDU PoE Power Supply unit, that is an IEEE 802.3at PASSIVE compliant device, has built-in standard connectors. The two Data-In and Power & Data-Out ports comply with the Ethernet RJ-45 Standard, whereas the Main Line power connector complies with the IEC 320-C14 Standard commonly used.

Figure 4 – Wifless EPOE01 PoE power supply (IDU)

(Front view on top)

Here is a description of each port of the PoE IDU: AC IN Port: This IEC 320-C14 port is used for connecting the unit to the AC main power line. POWER & DATA OUT Port: This RJ-45 Fast-Ethernet port is PoE IEEE 802.3at PASSIVE compliant and it is used for connecting the IDU to the ODU. Electrical power and Ethernet data are supplied to the ODU through this port. Make sure your indoor-to-outdoor cable meets the requirements specified below in this document. DATA IN Port: This standard Fast-Ethernet port (with PoE isolation) is used to connect the Wifless ESS ProNODE system either to a LAN or to a PC through an Ethernet cross-over cable or a straight-through cable. Important Notes Connecting your IDU to the RS 232 Port of your ODU may damage the ODU and will void the product warranty. Use an AC power cord approved by your country safety code with grounded tips and connect to a power outlet properly grounded. Do not open the PoE power supply! Risk of electric hazard! If you intend to use a PoE power supply other than the one originally provided, make sure that your alternative PoE is a PASSIVE compliant with the IEEE 802.3af/at cabling standard and that can deliver 1A at 48 VDC. Failure to do so may damage the equipment and will void the product warranty.

Green Main Power LED Red Link Active LED

110/240 VAC Main Line IEC 320-C14 connector

Ethernet only Port to local standard LAN or PC

Ethernet + PoE Power Port Only for ODU connection


Page 22 of 152

Wifless ESS 2456x and ESS PN25x RF Antenna Connectors As shown in Figure 5, in the case of a four antenna ports device, the ODU is equipped with high-quality IP 68 rated N(F)-type RF connectors proof against dust and water. The number of the RF connectors is related to the number of the independent radio modules and to the antenna diversity capability of the device (i.e.: the Wifless ESS 24561 has only one RF connector while the Wifless ESS PN254 has four RF connectors). These RF connectors enable operations up to 6 GHz and are commonly referred to as N-type female panel connectors.

Figure 5 - Wifless ESS 2456x and ESS PN25x (ODU) RF N-type connectors

Each RF N(F) connector (port) is connected to a radio module compliant with standards IEEE 802.11 b/g and IEEE 802.11 a/h. Each radio module (up to four modules can be hosted in a Wifless ESS 2456x and ESS PN25x) is independent from each other and can have one (normal) or two antenna (antenna diversity) each. The RF connectors are referenced as ports labeled from Antenna 0 (ANT0) to Antenna 3 (ANT3) and are assigned to each device radio module(s) as follows:

• For the Wifless ESS 24561 (No Antenna Diversity feature is available): o ANT0 connector is assigned to the first radio module, called Device Wireless 0, and attached to its

MAIN RF connector.


MAIN RF connector. o ANT1 connector is assigned to the second radio module, called Device Wireless 1, and attached to its

MAIN RF connector.



MAIN RF connector. o ANT2 connector is assigned to the third radio module, called Device Wireless 2, and attached to its

MAIN RF connector. o ANT3 connector is assigned to the fourth radio module, called Device Wireless 3, and attached to its

MAIN RF connector.

ANT3 RF Connector ANT0 RF Connector


Page 23 of 152

• For the Wifless ESS PN251 (With Antenna Diversity feature available): o ANT0 connector is assigned to the first radio module, called Device Wireless 0, and attached to its

MAIN RF connector. o ANT1 connector is assigned to the same first radio module, called Device Wireless 0, and attached to

its AUX RF connector.

• For the Wifless ESS PN252 (With Antenna Diversity feature available): o ANT0 connector is assigned to the first radio module, called Device Wireless 0, and attached to its


its AUX RF connector. o ANT2 connector is assigned to the first radio module, called Device Wireless 1, and attached to its


its AUX RF connector.

• For the Wifless ESS PN254 (No Antenna Diversity feature is available): o ANT0 connector is assigned to the first radio module, called Device Wireless 0, and attached to its


MAIN RF connector. o ANT2 connector is assigned to the third radio module, called Device Wireless 2, and attached to its

MAIN RF connector. o ANT3 connector is assigned to the fourth radio module, called Device Wireless 3, and attached to its

MAIN RF connector. Important Notes Do not apply any electrical signal (DC, AC, or RF) exceeding the power of -30 dBm to the RF connectors of your ODU. This will damage the system and will void the product warranty. The installation of GAS or L/4 RF Lightning Arrestors and Surge Protectors next to either RF connector is strongly recommended. Check the local safety codes of your country and building.


Page 24 of 152

Mounting the Wifless ESS ProNODE ODU Ensure that all antennas and supporting structures are properly installed to eliminate any physical hazard to either people or property. Make sure that the installation of the outdoor unit, antenna and cables is performed in accordance with all relevant national and local building and safety codes. Even where grounding is not mandatory according to applicable regulation and national codes, it is highly recommended to ensure that the outdoor unit and the antenna mast (when using external antenna) are grounded and suitable lightning protection devices are used so as to provide protection against voltage surges and static charges. In any event, Essentia will not be liable for any injury, damage or regulation violations associated with or caused by installation, grounding or lightning protection. Important Note The following examples of installation show how to use the mounting kit Wifless MK01 supplied within the package of your Wifless ESS 2456x and ESS PN25x. You can mount your ODU either on a pole or on a wall. If the mounting kit is not adequate for the diameter of the pole or the surface of the wall, evaluate to use one of the others Wifless Mounting Kit available and make sure that your ODU is securely attached in accordance with the local safety codes of your country and building.

Pole-Mounting The Wifless MK01 standard mounting kit, provided along your Wifless ESS ProNODE, is suited for poles with up to 60 mm in diameter and it is a quick-mount type that allows to be attached to the device before the pole mounting for an easier device installation by a single people. Mount first the claps’ bars through the ODU holes as shown in Figure 7, then fix your ODU to a pole as shown in Figure 6 and Figure 7 in details.

Figure 6 - Pole Mount Installation Example (Front and rear views)


Page 25 of 152

Figure 7 - Pole Mounting Detail of the Wifless MK01 (Correct clamping views)

Wall-Mounting To correctly fix your ODU to a wall, is kindly suggested to use the mounting kit Wifless MK05 using proper nogs for the targeted wall (not parts of the standard provided mounting kit).

Electrical Grounding (Safety Grounding) The chassis ground terminal (marked ) is located on the right rear corner of the ODU case as displayed in Figure 8.

Figure 8 - Chassis ground terminal – Grounding Tip

Ground your ODU according to the following instructions:

1) Use a ground cable compliant with all the safety codes of your country and building. 2) Fix one end of your ground cable to the chassis ground terminal. Screw the ground bolt tight on the chassis. 3) Fix the other end of your ground cable to a ground point or ground connection in accordance with all the safety

codes of your country. 4) Ensure conformity with all the safety codes of your country and building.


Page 26 of 152

Connecting the Antenna Cable to the ODU External antennas connect to your ODU through the N(F) RF connectors shown in Figure 9.

Figure 9 - RF Connectors of the Wifless ESS 2456x and ESS PN25x

To connect an antenna to your ODU, follow the instructions listed below:

1) Use a coaxial RF cable of the right type and length in accordance with the specifications of the antenna and the frequency band being used. We recommend that you use Wifless-approved cable kits to preserve the ETSI and FCC Approvals as well as your product warranty. The use of poor quality cables may damage the equipment and void the product warranty.

2) Fasten one end of your cable onto the RF connector being used in your ODU. 3) Fasten the other end of your cable onto the RF connector of the antenna. 4) Protect all the connectors being used against rain and moisture with a high-quality sealing tape for outdoor use.

Connecting the Indoor-to-Outdoor Cable to the ODU and IDU To connect your IDU to your ODU, use a high-quality FTP CAT 5 cable approved for outdoor use. Your cable must not exceed 90 meters in length and must comply with the EIA/TIA PoE LAN Ethernet Cabling Standard. Wifless-approved indoor-to-outdoor cables are strongly recommended. If you need to make an indoor-to-outdoor cable of your own, follow the instructions listed below:

1) Wire one end of your cable into an ETH IP 67 Lock-in-type connector according to the instructions in “Ethernet/PoE IP67 Lock-in-type and RJ45 Connectors Wiring Diagram”.

2) Fasten the ETH IP 67 Lock-in-type connector of your cable onto the ETH0 connector of your ODU. Because ETH0 is the only Ethernet port which was enabled by the Factory Default Configuration (ETH1 port is disabled – Loopback – by default).

3) Route the cable to the location selected for your IDU in accordance with the EIA/TIA-PoE LAN Ethernet Cabling Rules and in accordance with all the local safety codes of your country and building.

4) Cut your cable to the appropriate length and wire the end into an RJ45 FTP CAT 5 connector as described in “Ethernet/PoE IP67 Lock-in-type and RJ45 Connectors Wiring Diagram”. Use a protective cover.

You can now proceed to install your IDU (PoE injector).


Page 27 of 152

Installing the Wifless PoE Power Supply IDU You can either place your Wifless EPOE01 IDU on a flat surface - i.e. a desktop or a shelf – or wall-mount the unit. The IDU supplied with the equipment is for indoor use only. The IDU has no on-off switch. Once you have connected the IDU to the ODU and plugged the AC cord into a power socket, your IDU will start powering the system performing a Power-On Self-Test (POST). Use AC power cords approved by your country and grounded power outlets in accordance with your local safety codes. If you need to customize your AC power cord, see Table 1 below:

Electric: Color: Symbol: Phase Brown ~

Neutral Blue 0 Ground Yellow/Green or

Table 1 - AC Power Cord Standard Color Codes

To start up your Wifless ESS ProNODE system, follow the instructions listed below:

1) Plug the RJ45 connector of your indoor-to-outdoor cable into the POWER & DATA OUT port of your IDU. 2) Plug the proper end of your power cord into the IEC 320-C14 jack of your IDU and the other end into an AC

socket supplying 100-240 VAC at 50-60 Hz. 3) Verify that the green POWER LED on the right-hand side on the IDU front panel remains constantly

illuminated (no blinking). This means that AC power is being supplied to your IDU. 4) Verify that the red LINK ACTIVE LED on the left-hand side of the IDU front panel remains constantly

illuminated (no blinking). This means that DC power is being supplied correctly to the system through the POWER & DATA OUT port of your IDU. If the red LED is blinking, power off your IDU immediately and check the indoor-to-outdoor cable carefully. It might have been wired incorrectly, or the ODU attached to your IDU might be faulty: once you have performed your tests, repeat the start-up procedure from the beginning. If the problem persists, contact your local reseller or the Wifless Support Team as explained in Appendix C “Contacting the Wifless Support Team”.

5) Configure the basic system parameters as described in the next section. 6) Connect your IDU to your LAN or to a PC. To do so, you need to plug one end of an Ethernet cable into the

DATA OUT RJ45 10/100BaseTX port of your IDU, and plug the other end either into a LAN port of your main network device (i.e.: switch, router or firewall) or into the NIC port of your PC. The Wifless ESS ProNODE equipment features auto MDI/MDI X capability that detects the type of Ethernet port being connected to the DATA OUT port and configures the latter accordingly. However, we recommend that you use an Ethernet CAT 5 UTP cable of the proper type: use a straight-through cable when connecting your IDU either to a hub, a switch, or a router; use a cross-over cable when connecting your IDU to the NIC (Network Interface Card) of a PC.

To reboot your Wifless ESS ProNODE device, disconnect either the AC power cord or the indoor-to-outdoor cable from your IDU and wait at least 5 seconds before you plug the cable in again. Important Note Always use grounded power outlets and power cords with grounded tips approved by your country regulations. Do not connect any PC or LAN device to your IDU through the POWER & DATA OUT port: the DC power supplied through this port may damage the external device connected. The indoor cable connecting the IDU to the first LAN device and the indoor-to-outdoor cable connecting the IDU to the ODU must not exceed the aggregate length of 100 meters to be compliant with the EIA/TIA.


Page 28 of 152

Overview of the Essentia Wifless™ Open Platform Wifless™ stands for Wireless & Wireline Flexibility by Essentia. This is the brand name for all the Essentia Carrier Class products based on the True Open Platform Philosophy described in this section. Wifless™ is a completely Open Carrier Class Integrated Platform ranging from Wireless to Wireline technologies. The Wifless™ products are Open Systems based on Standard low-cost hardware and software oriented towards TCP-IP services, SIP-based VoIP, Video Streaming and VoD technologies. The Wifless ESS ProNODE product line has been designed to implement a fully-standard hardware platform for all modern Wireless embedded operating systems universally accepted. Users are encouraged to fine-tune the system to suit their specific technical requirements and fully develop their proprietary solutions. The OpenWifless™ ESS ProNODE Operating System All the devices belonging to the Wifless™ ESS ProNODE product line use the same operating system OpenWifless™ ESS ProNODE: a high-performance embedded operating system based on Linux kernel 2.6. OpenWifless™ ESS ProNODE has been specially designed for the Essentia ESS 42X-X2/X4 Intel IXP 425 platform to bring out optimum performance in conjunction with all the peripheral modules employed by the Wifless ESS 2456x and ESS PN25x wireless series. As a result, OpenWifless™ users can obtain the best consistency of performance across the whole range of Wifless™ ESS 2456x and ESS PN25x products being deployed. In addition, the utilization of the same release of OpenWifless™ ESS ProNODE across the whole systems ensures homogeneous provisioning along with the most user-friendly upgrades and maintenance procedures. By default, the Wifless ESS ProNODE devices are powered by the OpenWifless™ ESS ProNODE operating system. However, users can easily switch to other embedded Linux-based operating systems such as TimeSys and MontaVista, or choose to install completely different OS platforms like WindRiver VxWorks and Microsoft Windows CE/Mobile. The Wifless Open Platform has been specially designed to support this large variety of operating systems so that users can conveniently upgrade their system anytime. Capabilities and Performances of the OpenWifless™ ESS ProNODE Because OpenWifless™ ESS ProNODE has been implemented onto a Linux 2.6 kernel, its main capabilities are the same as those of Linux 2.6 standard distributions. However, in order to improve the overall system performance and reliability, the Essentia® OpenWifless™ Development Team, together with other independent licensed parties, have enhanced the OS with dedicated HALs and drivers, and added new kernel portions. For this reason, OpenWifless™ is not an Open-Source project. Capabilities and performance are only limited by the hardware resources available in the system, along with its custom configuration and adjustment. OpenWifless™ ESS ProNODE OS is a completely open system which features a re-writeable JFFS2 file system. Therefore, skilled Linux users are allowed to access the file system, the system kernel and its applications in order to develop and run new applications of their own within OpenWifless™ ESS ProNODE OS, in the same way which is allowed by standard Linux distributions. For this reason, OpenWifless™ ESS ProNODE OS is an Open Platform.


Page 29 of 152

Supported Radius Protocols and Attributes by the OpenWifless™ ESS ProNODE The OpenWifless™ ESS ProNODE, when configured to work as Radius controlled Network Access Server (NAS), supports the most useful standard Radius commands and attributes, to smoothly manage the AAA and the billing, and implements proprietary/draft-proposed advanced WISPr attributes to provide Class of Service dynamic configuration to the connected wireless CPE. To ensure the right interoperability among the majority of the Radius Clients with standard Radius Server implementing AAA operations on a wireless network, as per the best practices suggested by the Wi-Fi Alliance (http://www. wi-fi.org), the following Radius attributes and parameters are implemented (or will be implemented in future OpenWifless ESS ProNODE operating system release):

EAP3 Main Supported Protocols EAP-TLS EAP-TTLS/MSCHAPv2 PEAP/EAP-MSCHAPv2 PEAP/EAP-MD5 PEAP/EAP-GTC EAP-SIM EAP-LEAP

Authentication Authorization & Accounting Attributes Acct-Session-Id: unique session identifier Called-Station-Id: access point MAC address Calling-Station-Id: user station MAC address Client-IP-Address: Radius client IP address Framed-IP-Address: user station IP address (if known at the association request) NAS-IP-Address: network access server IP address NAS-Identifier: network access server unique identifier NAS-Port-Type: access port type Service-Type: service type User-Name: username to be authenticated (in the form user@realm) User-Password: password Acct-Interim-Interval: each time interval in which an accounting record should be generated (see after) Class: service class Idle-Timeout: inactivity time interval before the user is disconnected Reply-Message: optional reply message Session-Timeout: total session time, after which the user should be disconnected WISPr-Bandwidth-Max-Down: max download bandwidth allowed WISPr-Bandwidth-Max-Up: max upload bandwidth allowed WISPr-Bandwidth-Min-Down: min download bandwidth WISPr-Bandwidth-Min-Up: min upload bandwidth WISPr-Session-Terminate-End-Of-Day: true if the session must be terminated at midnight in any case WISPr-Session-Terminate-Time: show the exact time at which the user should be disconnected WISPr-Redirection-URL: probably unused (transparent to NAS) WISPr-Logoff-URL: probably unused (transparent to NAS) WISPr-Billing-Class-Of-Service: service class for billing (transparent to NAS) WISPr-Location-Name: location name of access point (transparent to NAS) WISPr-Location-ID: unique identifier of the access point location (transparent to NAS)


Page 30 of 152

Essentia Private Attributes Essentia-System-Time: private network system time (usually set in accordance with the local real time clock) Essentia-Reply-Message: generic accounting client specific message Essentia-Max-Input-Octets: client max down-loadable traffic in kB Essentia-Max-Output-Octets: client max up-loadable traffic in kB Essentia-Max-Total-Octets: client max total (up + down) traffic in kB Essentia-MAC-Allowed: client allowed IEEE MAC address

Essentia-System-Time

It is the current Radius server UTC time in UNIX timestamp format. It is sent by the Radius server to the NAS in the Access-Accept reply. When the NAS receives this attribute it synchronizes its real time clock to this time value. If the authenticated CPE/client is an Essentia Wifless ESS device, it also receives this attribute from the NAS during the authentication and its real time clock is synchronized in accordance with it.

Essentia-Reply-Message It can be included in the Access-Accept message by the Radius server for generic purpose applications. The NAS temporary records this client specific char-string message for each authenticated and active clients. The NAS takes care to send the proper char-string message to the Radius server along with the relative client accounting messages.

Essentia-Max-Input-Octets, Essentia-Max-Output-Octets, Essentia-Max-Total-Octets These attributes, mainly used for pre-paid accounts, specify in kB the maximum allowed amounts of data sent, received, or total sum of both, by the client. It is sent by the Radius server in the Access-Accept response. The client traffic amounts are accounted by the NAS every interim update interval and forwarded to the Radius server that should take care to update these attributes promptly. When at least one of these attributes is specified, the NAS will disconnect the client as it exceeds the maximum allowed values of one of the attributes. If the authenticating client credit is over (it means that at least one of the specified attributes reached the Zero value), during the client authentication the Radius sends to the NAS a Zero valued attribute to avoid the client to be connected.

Essentia-MAC-Allowed It is the IEEE MAC address of the user client device allowed to connect to the AP NAS. The IEEE 802 MAC address must be written in the canonical hexadecimal two-digit format (XX-XX-XX-XX-XX-XX).


Page 31 of 152

Essentia Packet Of Disconnect (Essentia POD) The Radius server (or a specific application), can send an Essentia POD packet to the NAS to enforce an immediate client disconnection (Administrative Disconnection). When the NAS receives this POD packet, it sends the Accounting-Terminate packet to the Radius server and disconnects the client. This function is implemented in accordance with the RFC 3576 but adding Essentia advanced private security features for a better network reliability. The Essentia exclusive private security features-set includes:

The Essentia POD musts uniquely identify the client under disconnection The Essentia POD musts uniquely identify the NAS managing the client under disconnection The NAS will accept Essentia POD packets only coming from its own configured Radius server

To identify a NAS, the following attributes are used: NAS-IP-Address, NAS-Identifier and Called-Station-Id. If an attribute is specified, it musts match the appropriate parameter of the targeted NAS. If more than one NAS matches the combination of the sent parameters, the system will drop the POD and will return a Disconnect-NAK message to the sender Radius to notify that it is not possible to uniquely resolve the NAS identification. To identify a client, the following attributes are used: User-Name, Acct-Session-Id, Calling-Station-Id and Framed-IP-Address. If an attribute is specified, it must match the appropriate parameter in the targeted client User Session. If more than one connected client matches the combination of the sent parameters, the system will drop the POD and will return a Disconnect-NAK message to the sender Radius to notify that it is not possible to uniquely resolve the client identification. The Radius musts also send to the targeted NAS the Event-Timestamp attribute as specified in the RFC 3576. After a successful Essentia POD processing, the NAS takes care to update the Radius server with a Disconnect-ACK message and an Accounting-Terminate message.


Page 32 of 152

Essentia Wifless ESS 2456x and ESS PN25x Setup & Commissioning Once you have installed the equipment as described in the previous chapter, you must set a few basic parameters for the system to operate correctly. Your Wifless ESS 2456x and ESS PN25x is fitted with one, or two, or four independent radio physical interfaces (radio modules) and with two independent Fast-Ethernet physical interfaces (except the Wifless ESS 24561 that has only one Fast-Ethernet interface). For each of these up to six physical hardware interfaces, OpenWifless™ OS will set up one or multiple logical interfaces that can be either managed separately or “bridged” together as switch groups. The Wifless ESS 2456x and ESS PN25x can fully manage the data traffic in and out of these logical interfaces. The only restrictions are due to the standard protocols and hardware being used. Each logical interface port can be configured to act as a simple L2 port or as a more advanced L3 TCP-IP routed port. A default configuration of the system basic parameters is burnt in at the factory (Factory Default Configuration), so you do not need to set any default parameters by entering CLI commands through the local RS 232 System Console port of your ODU. In fact, the RS 232 port is disabled by default and reserved for the Wifless Support Team for troubleshooting purposes. All the system key parameters can be set remotely via SSH CLI or via the user-friendly HTTP/HTTPS GUI. The use of a standard web browser enables the user to upload pre-set configuration files off-line edited or restore previously backed-up configurations. To set up the basic parameters of the system efficiently, you need to use a PC with either Windows, Macintosh, or Linux, an Ethernet NIC card with TCP-IP stack, and you need to have a browser such as Internet Explorer 6.x, Netscape Navigator 7.x, or above. Prerequisites for Operation The Essentia Wifless ESS ProNODE devices are capable of delivering state-of-the-art performances in every possible scenario, however, in order to make the most out of the equipment, we recommended that it only be installed and operated by professionals who are proficient in Ethernet LANs, TCP-IP and IEEE 802.11 protocols, RF hardware installation and RF signal propagation and radio planning. However, this Basic System Manual is intended for all the individuals who will be dealing with the setup of the system in simple topology networks. If you need more advanced support in deploying your Wifless ESS ProNODEs in complex topology networks, we recommend that you contact your local reseller or the Wifless Support Team as described in Appendix C “Contacting the Wifless Support Team”.


Page 33 of 152

Log into your Wifless ESS 2456x and ESS PN25x We recommend that you use a PC with Windows XP and Internet Explorer 6.0 (or a higher version) installed. Follow the instructions listed below:

1) Connect the Ethernet port of your PC to the DATA IN port of the PoE IDU and verify that the Ethernet physical connection is active on your PC. From Windows, either run ipconfig on the Command Prompt Interface or check Network Resources > LAN Connection > Status.

2) Remember to disable Internet Access via proxy server. From Windows, go to Control Panel > Internet Options > Connections > LAN Settings and uncheck the enable box.

3) Set a local static IP address within subnet 192.168.2.0/24 for your PC. We recommend static IP address 192.168.2.1 and Mask 255.255.255.0.

4) Start your preferred web browser program and browse URL http://192.168.2.100 (default IP address of any Wifless ESS ProNODE device). You will get a screen like in Figure 10:

Figure 10 – Default IP Address

Note: 192.168.2.100 is the burnt-in default IP address of the ETH0 port of the Wifless ESS ProNODE device. If you assign a different IP address to your Wifless ESS 2456x and ESS PN25x, make sure that it belongs to the same subnet class of your PC.

5) You will be prompted for your User ID and password as in Figure 11 for example with the Wifless ESS 24562:

Figure 11 – Wifless ESS 24562 Login Page

http://192.168.2.100/�


Page 34 of 152

Login as Administrator Type admin in the User box and type default in the Password box. Press the Enter key or click on the Login button.

If you have changed your password or your user name, type in your latest valid password and user name. If you have lost your Administrative Account password, please follow instructions as explained in “Reset of the Password of the

Web Admin Account”.

A successful login will result in the OpenWifless ESS ProNODE Homepage being displayed as in Figure 12:

Figure 12 – Wifless ESS 24562 Home page

Only two physical interfaces are defined by default, namely the two Fast-Ethernet ports ETH0 (Ethernet 0) and ETH1 (Ethernet 1) of the ODU.

Three information panes are displayed in the Homepage window: Wireless Information: Information about radio links/sectors is reported in this panel. It is initially empty, as no Wireless Interfaces

have been defined yet. Scanning Information: Information about all visible radio links by Station Interfaces on the Wifless ESS ProNODE device. Ethernet Information: Information about Ethernet links is reported in this panel. By default, it displays the IP and MAC addresses

of the workstation being used to access the Wifless ESS ProNODE device and of the other devices that have had a connection to during the last minutes (during the last refresh interval of the ARP MAC table).

In the top right-hand corner of the homepage are the following information: Model Name & Hardware Revision: Wifless ProNODE device Product Name and HW Revision Firmware Version: OpenWifless ESS ProNODE OS version PID - Serial Number: Extended format Wifless ProNODE device Product ID with Serial Number. Ethernet MACs: Essentia ETH0 and ETH1 MAC addresses Wireless MACs: Essentia Wireless Cards MAC addresses

In the top left-hand corner of the homepage are the following information: Hostname: Wifless ProNODE device Hostname. Default is Wifless_ESS_modelname.wifless.com Date&Time: Date and time in hh:mm:ss Uptime: Device uptime from last reboot


Page 35 of 152

Login as Read-Only Supervisor Type readonly in the User box and type default in the Password box. Press the Enter key or click on the Login button.

If you have changed your password or your user name, type in your latest valid password and user name.

In Read-Only mode, you are not allowed to modify any parameters as displayed in Figure 13 referring to the Ethernet interface “eth0”:

Figure 13 – Read-Only Access

In this Read-Only User mode, you are not allowed to modify any parameters.

Login as Backup Operator Type backup in the User box and type default in the Password box. Press the Enter key or click on the Login button.

If you have changed your password or your user name, type in your latest valid password and user name A successful login will result in the OpenWifless Homepage being displayed as in Figure 14:

Figure 14 – Backup Access

In this Backup User mode, you are only allowed to save the current configuration of your system. See section “Configuration Backup, Restore and Factory Default Settings” for more details.


Page 36 of 152

Setup of Physical Interfaces As previously described, the Wifless ESS 2456x and ESS PN25x come with up to six independent physical interfaces, each of which can be matched to multiple logical interfaces. For a physical interface to be correctly operated, it must be initialized and mapped at least on a logical interface. You will manage the physical interface by accessing the logical interface previously associated. Both the Fast-Ethernet physical interfaces of the ODU are pre-defined and initialized by default. These physical interfaces, labeled as Ethernet 0 and Ethernet 1, are respectively associated with logical interfaces eth0 and eth1 in order to provide user-friendly access on initial setup. By default, eth0 has IP address 192.168.2.100/24 on setup, whereas eth1 is set to loopback state for security reasons and is not accessible. On first-time start-up, none of Wireless Physical Interface is defined so as not to create any unwanted interference to other wireless equipment, in accordance with the FCC and ETSI regulations to minimize RF pollution. Important Note Accidental deletion or misconfiguration of the ETH0 Logical Interface may lead the system to an inaccessible state (i.e.: ETH0 configured in loop-back mode) if ETH1 is not accessible either. Make sure that at least one Logical Interface has been assigned a static IP address which is always accessible by the PC provisioning your Wifless ESS ProNODE device.

Setup of General System Hardware parameters To set General System Hardware parameters, follow the instructions listed below:

Figure 15 – General System Hardware settings

1) In the OpenWifless main window, open Devices menu on the left hand-side menu. 2) In the left hand-side pane, click on System menu 3) Set PCI Latency Time, the maximum time allowed for a PCI device to be as a PCI BUS master (in PCI

clocks). 4) Click button Apply. 5) In order to make your changes permanent, you must follow the instruction as in paragraph “Update/Store

Configuration Setting”. Important Note Do not change any of the System Hardware parameters unless expressly suggested by The Wifless Support team or by an official Essentia Wifless Application Note! Settings of inappropriate System Hardware parameters may lead the system to an unusable state!


Page 37 of 152

Monitoring of System Temperature and PoE Power Lines In the Wifless ESS PN25x devices is possible to monitor the status of the System on-board temperature and of the PoE Power Lines following the instructions listed below:

Figure 16 – Monitoring the System Temperature & the PoE Power Lines

1) In the OpenWifless main window, open Devices menu on the left hand-side menu. 2) In the left hand-side pane, click on System menu. 3) Then Click the Hardware Tab. 4) You will get a status page displayed as in Figure 16.

In the page are displayed the following information: Board Temperature: It is referred to the on-board thermometer placed in the center of the device. The reported temperature is

normally about 20 °C greater than the external temperature. Board Power Line #0: Provides information (Active or Inactive) about the operational status of the Ethernet 0 connected (if any)

PoE Power Supply. Board Power Line #1: Provides information (Active or Inactive) about the operational status of the Ethernet 1 connected (if any)

PoE Power Supply. Board Reset Line: Provides information about the HW-Reset Line status: Must be Inactive (or not displayed).

Note These details are not available in the Wifless ESS 2456x because they do not have the thermometer nor the PoE power line sensors. An Inactive Board Power Line is not an error! It may simply be that there is not any PoE power supply connected to that PoE port. The Board Reset Line must be always displayed as Inactive or it is not displayed at all, because when it is Active, it means that the system is rebooting!


Page 38 of 152

Setup of Ethernet Physical Interfaces parameters To initialize an ethernet physical interface, you must choose a unique Description name for the interface and the Link Speed and Duplex setting as in Figure 17:

Figure 17 – Ethernet Physical Interface Initialization

To initialize an Ethernet Physical interface, follow the instructions listed below:

1) In the OpenWifless main window, open Devices menu on the left hand-side menu. 2) In the left hand-side pane, click on the Ethernet Interface you want to initialize. 3) In the right hand-side pane, click on tab Ethernet Interface. 4) In the Descritpion box, type a unique Description name for your physical interface. 5) From the Link Speed & Duplex drop-down list of the interface you intend to initialize, choose the value from

those available. 6) Click button Apply. 7) In order to make your changes permanent, you must follow the instruction as in paragraph “Update/Store

Configuration Setting”.


Page 39 of 152

Setup of Wireless Physical Interfaces parameters Due to Atheros HAL restrictions and country-specific Radio Regulations, it is mandatory to define some common parameters for both the Wireless Physical Interfaces. All the correspondent Wireless Logical Interfaces will share these parameters. To initialize a Wireless Physical interface, follow the instructions listed below:

1) In the OpenWifless main window, open Devices menu on the left hand-side menu. 2) In the left hand-side pane, click on the Wireless Interface you want to initialize as in Figure 18:

Figure 18 – Wireless Physical Interface Initialization

3) In the Environment Parameters Section you find the following parameters: Description: Type a unique Description name for your physical interface. Country Code: Set this value in accordance with your Local Country Radio Authority Rules. Antenna Diversity: choose the value Use AUX connector if you are using WFL ESS 24562 HW 2.0 A (or lower), otherwise

select the value Use MAIN connector. IMPORTANT: Using a wrong AUX/MAIN connector option the device will not work properly (at least 20 dB less of receiving sensitivity) Max Distance (m): Set the Maximum Distance value (in meters) for your Wireless Interface to optimize ACK timeouts and

interface throughput of your network (PTP link or PMP sector managed by this radio). IMPORTANT: Make sure this value is greater than the distance from the furthest wireless parent device you want to connect, or the system will not be able to create a proper association. In the case the Maximum Distance value is wrongly set shorter than the real distance, strong degradation in the overall wireless network may be experienced 802.11 Reg. Class Required: If this IEEE 802.11 option is enabled, the Radio Slot Time is set in accordance with the

Maximum Distance parameter. It is suggested to leave it disabled for better average performance and for a smoother interoperability. IMPORTANT: Be careful to enable this option if Wifless CPE with an operating system older than 1.10 are connected to the sector. In the case you will forget this setting, some Wifless CPE may not be able to operate correctly and/or performing as expected. Outdoor mode: Enable this option for outdoor optimized applications.

4) In the Operational Parameters Section you find the following parameters:

Operational Mode: Select your Operational Mode from the drop-down list as shown in the figure. The available modes are: 802.11a/h 54 Mbps: IEEE 802.11a/h Mode setting 802.11b 11 Mbps only: IEEE 802.11b Mode setting 802.11g 54 Mbps only: IEEE 802.11g “Pure G” Mode setting 802.11b/g 11/54 Mbps: IEEE 802.11b/g Mode setting 802.11a Dynamic Turbo: Force the IEEE 802.11a Mode to operate in the Dynamic Turbo Aggregated Mode 40 MHz RF

Channel (also referred as 108 Mbps Turbo).


Page 40 of 152

802.11g Dynamic Turbo mode: Force the IEEE 802.11g Mode to operate in the Dynamic Turbo Aggregated Mode 40 MHz RF Channel (also referred as 108 Mbps Turbo).

802.11a Static Turbo mode: Force the IEEE 802.11a Mode to operate in the Static Turbo Aggregated Mode 40 MHz RF Channel (also referred as 108 Mbps Turbo)Type a unique Description name for your physical interface.

Rate Control Algorithm: Set the Auto-Rate Selection Algorithm between the following: Atheros, for Atheros own Auto-Rate Control Algorithm ONOE Credit Based, for indoor 802.11b environment AMRR Adaptive, for Adaptive Multi Rate Retry Algorithm SampleRate, for Sample Rate Algorithm Minstrel EWMA Based, for Minstrel Rate Algortthm

Channel Bandwitdh: you can lower the Channel Bandwitdh to increase sensitivity or to optimize the RF spectrum allocation/usage, as well as to minimize the interference effects. You can choose to use the RF Channel Bandwidth as per the selected Coutry Code Starndard Profile, or to divide it by two or by four:

Default, typical 20 MHz for normal sized channels Half, typical 10 MHz Quarter, typical 5 MHz

Extended Channel Mode: Enable this option to activate the Atheros eXtended Channel mode. ACK Fast Rate: In 802.11a/h mode the rate of ACK, RTS/CTS and all self generated packet is 36Mbps (default value is

6Mbps) 5) In the AP Specific Parameters Section you find the following parameters:

Channel: Set the transmission Channel in accordance with your application and your country rules. All the radio equipment to be connected with this Wireless AP must share the same channel The most advanced Wireless Adapters (PC Card) will automatically scan for a suitable Wireless AP and automatically

match the broadcasted wireless setting The RF channels are listed by ETSI/FCC Channels Standard Numbering and by Center Frequency in MHz “(DFS)” labeled RF channels have ETSI DFS enabled

Beacon Time (ms): Set Beacon Time value. Default is 100 ms. NOTE: In the case you create a Station on this wireless interface, the channel is ignored.

6) In the Automatic Noise Immunity Parameters Section you find the following parameters:

OFDM Weak Signal Detection: Default is on. CCK Weak Signal Threshold: Default is off. Noise Immunity Level: Default is auto. Spur Immunity Level: Default is auto. First Step Level: Default is auto.

7) Click button Apply. 8) In order to make your changes permanent, you must follow the instruction as in paragraph “Update/Store



Page 41 of 152

Setup of Ethernet Logical Interfaces Either Fast-Ethernet physical interfaces can be associated with logical interfaces of the following types:

Standard Clear Fast-Ethernet Logical Interfaces (only one allowed per physical port) Standard IEEE 802.1Q-2005 VLAN Logical Interfaces RFC 1701 GRE Tunnel Logical Interfaces.

To create an Ethernet logical interface, follow the instructions listed below:

1) In the OpenWifless main window, click on Interfaces from the left hand-side menu obtaining a screen as in Figure 19.

Figure 19 – Ethernet Logical Interface Creation

1) In the right hand-side pane, click on tab Ethernet. 2) From the Type drop-down list of the interface you intend to create, choose a logical interface type from those

available (see above in this section). 3) In the ID box, type a unique identifier for your logical interface. 4) Click button Create it.

A successful creation of an Ethernet logical interface will result in a screen as in Figure 20:

Figure 20 – Successful Creation of an Ethernet Logical Interface

To delete the logical interface you have just created, click Delete it.

5) In order to make your changes permanent, you must follow the instruction as in paragraph “Update/Store Configuration Setting”.


Page 42 of 152

Creation and Setup of Switch Logical Interfaces As previously mentioned in this chapter, your Wifless ESS ProNODE device can L2-switch or L3-route data traffic through its logical interfaces. In order to perform this operation, you must either create at least one L2-Switch Logical Interface to “bridge” together the desired Ethernet Logical Interfaces and Wireless Logical Interfaces, or define at least one L3 Route (Static or Dynamic) between the desired Ethernet Logical Interfaces and Wireless Logical Interfaces. To create a Switch Logical Interface, click on Interfaces from the left hand-side menu of the OpenWifless main page, then click on tab Switch on the right hand-side panel. In the Switch section, do the following:

1) Type a number (index) for your Switch Logical Interface into the ID box. 2) From the Interfaces box, select at least two of the Logical Interfaces you intend to bridge by pressing the

CTRL key.

Figure 21 – Switch Logical Interface Creation

3) Click button Create it. Your new Switch Logical Interface will be displayed in the lower pane as in Figure 22:

Figure 22 – Switch Logical Interface Created

4) In order to make your changes permanent, you must follow the instruction as in paragraph “Update/Store Configuration Setting”.


Page 43 of 152

5) To configure another Switch Logical Interface, select it and see paragraph “Provisioning Switch Logical Interfaces”. Note: As shown in Figure 23, no MAC address is assigned to your newly created Switch Logical Interface. The logical switch will

acquire its MAC address on the next system reboot. The acquired MAC address is the MAC address of the interface with the “lowest” MAC value.

Figure 23 – No MAC address is assigned until next system reboot

Important Note Accidental deletion or misconfiguration of the Logical Interface used to access the device for the management may lead the system to an inaccessible state. Make sure that at least one Logical Interface has been assigned a static IP address which is always accessible by the PC provisioning your Wifless ESS ProNODE device. In order to help you preventing this potential cause of loss of device management, the operating system automatically takes care, during the creation of a new Switch Logical Interface containing others interfaces, to assign the 192.168.2.100 IP address


Page 44 of 152

Creation and Setup of Wireless Logical Interfaces Each Wireless Physical Interface can be associated with a Wireless Logical Interface of any of the following types:

Access Point Logical Interfaces Station Logical Interfaces WDS Node Logical Interfaces

To create a Wireless Logical Interface, click on Interfaces from the left hand-side menu of the OpenWifless main page, then click on tab Wireless on the right hand-side panel obtaining a screen as in Figure 24:

Figure 24 – Wireless Logical Interface Creation in Wifless ESS ProNODE device

Follow the instructions listed below for either Wireless Interfaces you need to create: 1) From the Type drop-down selection of the Wireless 0 and/or Wireless 1 Card, choose a value among Access

Point, Station, WDS Node and Ad-Hoc. 2) Type a unique number ID (max 2 digits) for your Wireless Logical Interface into the ID box. 3) Click on button Create it. Your newly created Wireless Logical Interface will be displayed in the same section

as its physical interface associate as shown in Figure 25:

Figure 25 – Access Point Interface Creation in Wifless ESS ProNODE device

4) You can choose any of the following types for your Wireless Logical Interface from the Type drop-down selection menu:

Standard Clear Wireless Logical Interfaces (only one per physical interface) Standard IEEE 802.1Q-2005 VLAN Logical Interfaces RFC 1701 GRE Tunnel Logical Interfaces.


Page 45 of 152

5) Type an identifier for your Wireless Logical Interface into the ID box and click on Create it to save your changes obtaining a screen as in Figure 26:

Figure 26 – Wireless VLAN/GRE Logical Interface Created

Note: The ID parameter must be a number of a maximum of 4 digits.

The information about your newly created Wireless Logical Interface will be displayed in the same pane as its associated Wireless Physical Interface as shown in the figure above.

6) If you need to delete a Wireless Logical Interface, click on Delete it in the relevant section. 7) In order to make your changes permanent, you must follow the instruction as in paragraph “Update/Store



Page 46 of 152

Creation and Setup of Trunk Logical Interfaces A Trunk Interface is a Logical Interface which is used to manage multiple Logical Interfaces as one. In this mode, multiple Logical Interface can be combined to achieve Protection/Failover or Bandwidth Aggregation functionalities, thus improving the system performance. After configuring your Logical Interfaces, do the following:

1) Create a Switch Logical Interface with all the Logical Interfaces you need as described in “Creation and Setup of Switch Logical Interfaces”.

2) Type an index number for your Trunk Logical Interface into the Trunk ID box and click on Create it to make it. You will get a screen like in Figure 27.

Figure 27 – Creation of Trunk Logical Interface

Note: The ID parameter must be a number of a maximum of 2 digits.

3) Your newly created Trunk Logical Interface will be displayed in the same section as the relevant logical interfaces as shown in the figure above.

4) In the Interfaces selection window of your newly created Trunk Interface, select all the Interfaces you need to trunk by pressing the CTRL key, as in the example of Figure 28 and then click on Apply.

Figure 28 – Trunk Logical Interface Confirmation

To configure and activate a Trunk Logical Interface, do the following: 5) From the Interfaces list on the left hand-side of your screen, select your Trunk Logical Interface. 6) From the menu bar in the main window, click on tab General to get a view like in Figure 29:


Page 47 of 152

Figure 29 – Trunk Interface General Page

7) In the Description field enter the name for your trunk 8) Select your Trunk Mode from the drop-down list as shown in the figure above. The available modes are:

Radio optimized + failover (also known as FDD Equivalent Optimized with Automatic TDD Fall-back Protection) Round-robin + failover (also known as 2+0 Static Bandwidth Aggregation with Automatic Single Channel Protection) Failover (also known as 1+1 Redundant with Hot Stand-by) XOR + failover (2+0 XOR Even/Odd MAC Load Balancing Optimized with Automatic Single Channel Protection)

9) Click on Apply to save your changes, or click on Reset to restore previous values. 10) If your configuration is finished, then jump to step 13). 11) Click on tab Bandwidth to get a view like in Figure 30. Please refer to “Logical Interface Common Settings”.

Figure 30 – Trunk Interface Bandwidth Management

12) Click on tab Activity to get a view like in Figure 31. Blue printed values mean that they are changed from the last refresh. The Activity page refreshes about every 2 seconds.

Figure 31 – Trunk Interface Activity Page

13) Confirm and activate your new configuration as described in “Update/Store Configuration Setting”. Important Notes Please note that the Radio Optimized+Failover trunk mode is a proprietary protocol which is not included in the IEEE 802.3ad Standard. Therefore, the relevant protocol implemented by OpenWifless may not be compatible with other protocols of the same type implemented by non-Wifless vendors. Take care to enable the “Trunk & Link PTP” option in the Radio Interface Menu to optimize the Trunking performance.


Page 48 of 152

Provisioning the Fast-Ethernet Logical Interfaces As previously mentioned, two Fast-Ethernet Physical Interfaces are defined as Ethernet 0 and Ethernet 1 and are respectively associated to Logical Interfaces eth0 and eth1. Logical Interface eth0 has default IP address 192.168.2.100/24. Logical Interface eth1 is initially in loopback state and inaccessible. ETH0 is the main network interface of your ODU, which is also powered through this port. ETH1 is a secondary Ethernet port used for connecting other equipment in a daisy-chain style, or to implement a 2+0 Load-sharing Redundant Power Supply solution. You can view the MAC address of Logical Interfaces eth0 and eth1 in the OpenWifless window by clicking on the relative interface in the left hand-side selection Interfaces. The current information about the logical interface selected is displayed above the menu bar in the main window, as shown in Figure 32:

Figure 32 – Ethernet Interface General Page

In this view, you can modify the parameters of either logical interface in this way:

1) Click on tab General and type your new values into each of the following boxes: Description: Insert the name of the Fast-Ethernet Logical Interface. IP address Assignment: Choose IP address assignment from the following options:

Static: Assign a static IP address within IP address range of your network. DHCP: Enables Dynamic IP Client Capability. Loopback: No IP address assigned to Ethernet Logical Interface.

IP Address: Assign a static IP address that is within the IP address range of your network IP Subnet Mask: Insert subnet mask. All devices in the network must share the same subnet mask. Gateway IP address: Type IP address of network default gateway. Metric: Enter Gateway metric. MTU: Enter MTU length to suit your needs: Default value is 1500 Bytes, Max value is 2290 Bytes. Masquerade: Tick option to Masquerade the Logical Interface.

If the selected Ethernet interface is a member of a switch interface, some tabs are hidden, as the following picture shows and only few parameters of General Menu are available:

Figure 33 – Ethernet Interface General Page when Ethernet interface is member of a switch interface


Page 49 of 152

2) Click on Apply to save changes or click Reset to restore previous values. 3) Click on tab Activity to get a view like in Figure 34. Blue printed values mean that they are changed from the

last refresh. The Activity page refreshes about every 2 seconds.

….

Figure 34 – Ethernet Interface Activity Page

4) Configure the Common Logical Interface Settings if you have not yet done so. These are the parameters shared by logical interfaces Fast-Ethernet, Wireless, and Bridge. For more information, see “Logical Interface Common Settings”.

5) Save and activate your changes as described in paragraph “Update/Store Configuration Setting”.


Page 50 of 152

Provisioning Switch Logical Interfaces In the previous sections of this manual, you learnt how to create Switch Logical Interfaces. To configure and activate a Switch Logical Interface, do the following:

1) From the Interfaces list on the left hand-side of your screen, select the Switch Logical Interface you need to set.

2) From the menu bar in the right hand-side pane, click on tab General to get a view like in Figure 35:

Figure 35 – Bridge Interface General Menu

3) Enter the following parameters for your interface: Description: Enter the name of the Bridge Logical Interface. IP address Assignment: The default IP address Assignment mode is Static mode. The Assignment modes can be defined are:

Static: Assign a static IP address that is within the IP address range of your network. DHCP: Enable the Dynamic IP Client Capability of the Wifless ESS ProNODE device. Loopback: No IP address assigned to the Ethernet Logical Interface.

IP Address: Assign a static IP address that is within the IP address range of your network IP Netmask: Enter the subnet mask. All devices in the network must share the same subnet mask. Gateway IP Address: Enter the IP address of the default gateway of your network. Metric: Enter the Gateway metric. MTU: Enter MTU length to suit your needs: Default value is 1500 Bytes, Max value is 2290 Bytes. Masquerade: Enable if you want to Masquerade the Logical Interface.

4) Click on Apply to save your changes, or click on Reset to restore previous values. 5) If your configuration is finished, jump to step 12) 6) Click on tab Switch to get a view like in Figure 36:

Figure 36 – Bridge Interface Switch Menu

7) Set a value for MAC addresses Aging Time. Recommended values range between 300 sec. (default value) and


Page 51 of 152

1200 sec. 8) In the section Spanning Tree Settings, from the drop-down menu Protocol, select STP or RSTP Protocol

option is needed enabled on this logical switch and choose your values for the following parameters of the protocol:

Switch Priority: Default value is 32768. Switch Forward Delay: Default value is 15 sec. Switch Hello Time: Choose a value between 2 sec (default time) and forward delay time. Switch Max Age: Default value is 20 sec. Transmit Hold Count: Default value is 6 sec.

9) Enable the STP/RSTP managed interfaces by checking the relative Activate box and set the Priority of each interfaces of the switch depending on your needs.

10) In section VLAN Isolation Settings, set the following parameters for each of the logical interfaces involved in your Switch Logical Interface:

VLAN ID: Default value is 0. Take care to note that VLAN 0 means “no VLAN” and that the “Default VLAN” is VLAN 1. VLAN Port: Default value is (none).

11) Click Apply to save your changes, or Reset to restore previous values. 12) Set Common Logical Interface Settings for Fast-Ethernet, Wireless and Switch logical interfaces if you have

not yet done so. For more information, see “Logical Interface Common Settings”. 13) Confirm and activate your new configuration as described in “Update/Store Configuration Setting”. 14) The MAC address acquired by your Switch Logical Interface will be displayed as in Figure 37 and it’s the

lowest value of all the MAC addresses of the interfaces forming the switch interface.

Figure 37 – MAC address of Bridge Logical Interface


Page 52 of 152

Provisioning Wireless Logical Interfaces This section describes some of the operational modes most commonly used which are supported by your Wifless ESS 2456x and ESS PN25x. You can configure different wireless interfaces depending on the type of your Wifless ESS ProNODE device. As previously mentioned, none Wireless Interface is initially defined in the system. These interfaces must be set according to your specific network topology. Access Point & Station/Client Mode (Point-to-Multipoint & Point-to-Point) You can configure your Wifless ESS ProNODE device to operate as an Access Point compliant with the IEEE 802.11 standards, serving simple Wireless clients like CPE, PCs, PDAs, Wi-Fi VoIP phones, or more advanced Wireless stations like Wifless ESS 251 and Wifless ESS 151 for state-of-the-art broadband access service. This AP-Client mode, as shown in Figure 38, is the easiest way for you to create PTP links and PMP coverage areas. Because the Wifless ESS 24562 and the Wifless ESS 24564 features two or four independent radio interfaces, it can perform as a Dual Band Access Point operating at 2.4 GHz in the IEEE 802.11 b/g mode and at 5.x GHz in the IEEE 802.11 a/h mode. As previously described, each physical radio interface can be associated with multiple logical interfaces via OpenWifless, which also enables you to set up and manage these logical interfaces one by one. The Advanced Multiple Virtual Access Point with VLAN or IP Domain Isolation, also supported by OpenWifless ESS ProNODE OS, makes the Wifless ESS 2456x and ESS PN25x ideal components for state-of-the-art multiple ESSID network systems.

Figure 38 - Simple Access Point Scenario

with a Wifless ESS ProNODE device

The Wifless ESS ProNODE device can operate, as shown in Figure 38, as Point-to-Point bridge in compliance with the IEEE 802.11 standard, performing L2 Ethernet Bridge or L3 IP Routing operations between two given network devices. All the security features and encryption techniques most commonly used in PTP traffic trunking are supported, as well as VPN tunneling and VLAN/GRE Tunnel Isolation. Thanks to its two independent radios, the Wifless ESS 24562 can also perform as a true PTP Back-to-Back Repeating Node to improve system performance.


Page 53 of 152

Figure 39 - Simple Point-to-Point Bridge/Router Scenario

with Wifless ESS ProNODE devices

Repeater Mode (Simple Point-to-Multipoint Repeater Mode) The Wifless ESS ProNODE device can perform as a Repeater Node in accordance with the IEEE 802.11 standard. Incoming traffic is stored and forwarded to and from the same radio module in a TDD single radio fashion. In this mode, for each hop the traffic throughput decreases by a factor of about two and the delay increases by a factor of two, as reported in the IEEE 802.11 standard. The Wifless ESS 24562 can also be used as a Daisy-chained Access Point Node, thanks to the independent radio modules. One module operates in AP Mode as standard Access Point while the other operates in Repeater Mode (Advanced Repeater with AP Functionality shown in Figure 40).

Figure 40 - Advanced Repeater with Access Point Functionality Scenario



Page 54 of 152

Redundant / Resilient Point-to-Pont Link Mode (2+0 Aggregated Point-to-Point) The Wifless ESS ProNODE device supports a number of Aggregation & Fail-Over protocols defined in the IEEE 802.3ad standard. The operating mode which is most commonly used is the 2+0 Round Robin, or 2+0 Radio Optimized, Links Aggregation; these operating modes enables you to deliver L2 Ethernet services and L3 TCP-IP Aggregated Bridging services between any two given Wifless ESS 24562 or Wifless ESS 24564 systems. Both the two/four independent radios and the two independent Ethernet ports can work in aggregation with failover mode, so the Wifless ESS ProNODE device performs throughput aggregation and link fault resilience as shown in the Figure 41. You can enjoy this feature by using either the OpenWifless ESS ProNODE integrated L2 Advanced Switch, the integrated router, or an external L2 Ethernet switch supporting the IEEE 802.3ad protocol, or an external TCP-IP router supporting the OSPF protocol. If external equipment is used for the purpose of links aggregation, both the Ethernet ports and the Wireless ports of your Wifless ESS ProNODE device must be configured to match the settings of the external L2/L3 equipment.

Figure 41 – High Availability & High Bandwidth PTP Link


PMP Mixed Mode (Mixed Point-to-Multipoint and Point-to-Point, PMP-PTP) The Wifless ESS ProNODE device can operate as Full Standard Access Point for Public Service (for WISP) as well as Proprietary Access Point to deliver PMP connectivity to a limited number of registered clients in a PTP-style topology. Whilst one radio module operates in AP mode, the other can perform as Feeding PTP Bridge in PTP mode as shown in Figure 42. In both the configurations, full standard or proprietary Access Point, the Wifless ESS ProNODE device can provide high reliability services by the integrated AP Fail-Over functionality that allow 1+1 or N+1 radio sector protection as shown in Figure 43.

Figure 42 - Advanced Point-to-Multipoint with AP Functionality Scenario



Page 55 of 152

Figure 43 - Advanced Access Point With Fail-Over Functionality with Wifless ESS 24564 or ESS PN254 and Wifless ESS 151 CPE

WDS and OLSR Mesh Mode (WDS Simple Mesh and OLSR Advanced Mesh) The Wifless ESS 24564 can be extensively used in Mesh Networks as it is capable of supporting all the meshing protocols which are most commonly used, such as RSTP, WDS, and OLSR. Although the Wireless Distribution System (WDS) standard protocol is fairly simple, it is not very efficient. However, the four independent radios of the Wifless ESS 24564 ensure excellent Mesh Performance even when this protocol is used. The default performance of the Wifless ESS 24562 can be improved by coupling the device with another identical to implement a state-of-the-art four-radio Mesh Node as per the Wifless ESS 24564 device. To do so, simply connect the ETH0 of the second Wifless ESS 24562 to the ETH1 port of the first Wifless ESS 24562 in a daisy-chain style. For either physical radio interface, OpenWifless enables you to define and configure multiple logical interfaces as WDS nodes to implement a Multiple WDS Node Network; more complex and large OLSR based mesh networks can also be designed, as shown in Figure 44 and Figure 45.

Figure 44 – Simple 2 Channel Star-Mesh Network with AP Functionality Scenario

with Wifless ESS 24562 or ESS PN252 devices


Page 56 of 152

Figure 45 – Advanced 4 Channel Full-Mesh Network with AP Functionality Scenario

with Wifless ESS 24564 or ESS PN254 devices


Page 57 of 152

Setting Wireless Logical Interface to AP Node Mode As previously described, the AP mode enables your Wifless ESS ProNODE device to operate as a standard Access Point to serve CPE and mobile clients. This sections helps you manage your Wireless AP Logical Interfaces. To set and enable new parameters of an existing Wireless AP Logical Interface, log in to OpenWifless and do the following:

1) From the Interfaces list on the left hand-side of your screen, select your Wireless Logical Interface. 2) In the Wireless AP view on the right hand-side of your screen, click on tab General to get the view as in

Figure 46:

Figure 46 – Wireless Access Point Interface General Menu

The IP address of a Wireless AP logical interface is set to Loopback on its creation, as you can see in the screen dump.

3) Complete the following fields: Description: Enter the name of the Wireless Logical Interface. IP address Assignment: The Assignment modes can be defined are:


IP Address: Assign a static IP address that is within the IP address range of your network IP Subnet Mask: Enter the subnet mask. All devices in the network must share the same subnet mask. Gateway IP address: Enter the IP address of the default gateway of your network. Metric: Enter the Gateway metric. MTU: Enter MTU length to suit your needs: Default value is 1500 Bytes, Max value is 2290 Bytes. Masquerade: Enable if you want to Masquerade the Logical Interface.

4) Click on button Apply to save your changes, or click on button Reset to restore previous values. 5) Click on tab Radio to get the view as in Figure 47:


Page 58 of 152

Figure 47 – Wireless Access Point Interface Radio Menu

6) Set the ESSID (also referred as Service Set Identifier (SSID)) to the SSID_Value_Name designated for that specific wireless local area network (WLAN Domain). The ESSID defaults to the Wireless Logical Interface Name.

7) Check the Hide SSID option if you wish to disable SSID broadcasting. 8) Set the transmission RF Tx Power in accordance with your application, your country rules, and the

antenna in use as specified in Appendix B, “Max RF Output Power as per Country Rules and Selected Antenna”.

9) Enable RTS/CTS option to reduce frame collisions introduced by the hidden terminal problem and exposed node problem, and set the RTS threshold value in accordance with your wireless network needs. The best values ranges from 250 to 500 bytes. The value 4096 means disabled. Default is 250.

10) Set the Tx Rate to the value desired in accordance with the Band Mode selected. Check the Auto option to allow the radio module to dynamically adjust its transmission speed to the best possible in accordance with the radio link path length and the weather conditions. By setting the radio speed manually, you force the radio module to transmit at the specified rate only.

11) Enable FRAG option if needed and set the FRAG threshold value in accordance with your wireless network needs. The value 4096 means disabled. Default is off.

12) Set the transmission Multicast Rate to the value desired. Default is 6Mbps. 13) Set Max. Hardware Retry to the value desired. It means how many times the chip resend the packet

when did not receive the ACK. 14) Check the Inter-Radio Bridge option to enable communication between Radio Bridge Logical Interfaces:

it is MANDATORY to enable this option when using Radio Bridge Logical Interface communications. 15) Set the Client Isolation option to Isolated or to None Isolated. 16) Enable Trunk & PtP Link option for better Point-to-Point performances. 17) Set the following Atheros Parameters to maximize Wireless Performances:

Fast Frame mode: Allows for more information to be transmitted per frame. Burst mode: Enables device to send multiple frames in a burst with no pauses in between. Extended Range: Enables Extended Range capability. Compression: Enables Atheros Compression mode; Link-level Hardware Compression utilizes the wireless connection more

efficiently to further maximize bandwidth. In the Atheros Parameters title bar is displayed the current active features.

18) Check the WMM (IEEE 802.11e) option to enable the WMM QoS standard IEEE 802.11e protocol. For details about the WMM protocol configuration, refer to the paragraph “WMM-EDCA Priority QoS”.

19) The WMM Aggressive Mode (disabled by default) is useful for better average QoS performance. 20) Click Apply to save changes, or click Reset to restore previous values.


Page 59 of 152

21) Click on tab Activity to get the view as like in Figure 48. Blue printed values mean that they are changed from the last refresh. The Activity page refreshes about every 2 seconds.

Figure 48 – Wireless Access Point Interface Activity Page

22) Confirm and activate your new configuration as described in “Update/Store Configuration Setting”.

Important Note When the Logical Interface is part of a Trunk, take care to enable the “Trunk & Link PTP” option in the Radio Interface Menu to optimize the trunk performance.


Page 60 of 152

Setting Wireless Logical Interfaces to Station / Client Node Mode As previously mentioned, your Wifless ESS ProNODE can operate as station in a PMP/PTP link to communicate with another Wifless ESS ProNODE configured as Access Point. To set a Wireless Logical Interface as a Station, select it from the Interfaces drop-down list on the left-hand side of the OpenWifless screen and follow the instructions below:

1) In the main window, click on tab General to get a view as in Figure 49:

Figure 49 – Wireless Station Interface General Menu

The IP Address Assignment defaults to Loopback mode. 2) Type in the following parameters for your Wireless Logical Interface:

Description: Enter the name of the Wireless Logical Interface. IP Address Assignment : Choose among the following options:


IP Address: Assign a static IP address that is within the IP address range of your network IP Subnet Mask: Enter the subnet mask. All devices in the network must share the same subnet mask. Gateway IP address: Enter the IP address of the default gateway of your network. Gateway Metric: Enter the Gateway metric. MTU: Enter MTU length to suit your needs: Default value is 1500 Bytes, Max value is 2290 Bytes. Masquerade: Enable if you want to Masquerade the Logical Interface.

3) Click Apply to save your settings, or click Reset to restore previous values. 4) Click on tab Radio to get the view as in Figure 50:

Figure 50 – Wireless Station Interface Radio Menu

5) Set the ESSID (also referred as Service Set Identifier (SSID)) to the SSID_Value_Name designated for that specific wireless local area network (WLAN Domain). The ESSID defaults to the Wireless Logical Interface Name.


Page 61 of 152

6) Set the BSSID to the AP MAC Address when Hide SSID option in the AP side is enabled. The MAC must be set separating each two hexadecimal digits with “:”.If the AP MACs is 00:17:63:05:03:a1, you must write 00:17:63:05:03:a1.

7) Set the transmission RF Tx Power in accordance with your application, your country rules, and the antenna in use as specified in Appendix B, “Max RF Output Power as per Country Rules and Selected Antenna”.

8) Enable RTS/CTS option to reduce frame collisions introduced by the hidden terminal problem and exposed node problem, and set the RTS threshold value in accordance with your wireless network needs. The best values ranges from 250 to 500 bytes. The value 4096 means disabled. Default is 250.

9) Set the Tx Rate to the value desired in accordance with the Band Mode selected. The Auto option allows the radio module to dynamically adjust its transmission speed to the best possible in accordance with the radio link path length and the weather conditions. By setting the radio speed manually, you force the radio module to transmit at the specified rate only.

10) Enable FRAG option if needed and set the FRAG threshold value in accordance with your wireless network needs. The value 4096 means disabled. Default is off.

11) Set the transmission Multicast Rate to the value desired. Default is 6Mbps. 12) Set Max. Hardware Retry to the value desired. It means how many times the chip resend the packet

when did not receive the ACK. 13) Check the Inter-Radio Bridge option to enable communication between Radio Bridge Logical Interfaces:

it is MANDATORY to enable this option when using Radio Bridge Logical Interface communications. 14) Check the Background Scanning to enable the Radio Interface to perform a regular scan for other Access

Points. 15) Enable Trunk & PtP Link option for better Point-to-Point performances. 16) Set the following Atheros Parameters to maximize Wireless Performances:

Fast Frame mode: Allows for more information to be transmitted per frame. Burst mode: Enables device to send multiple frames in a burst with no pauses in between. Extended Range: Enables Extended Range capability. Compression: Enables Atheros Compression mode; Link-level Hardware Compression utilizes the wireless connection

more efficiently to further maximize bandwidth. In the Atheros Parameters title bar is displayed the current active features.

17) Check the WMM (IEEE 802.11e) option to enable the WMM QoS standard IEEE 802.11e protocol. For details about the WMM protocol configuration, refer to the paragraph “WMM-EDCA Priority QoS”.

18) Click Apply to save your settings, or click Reset to restore previous values. 19) Refer to paragraph “Logical Interface Common Settings” to see the settings common to all Logical

Interfaces. 20) Refer to paragraph “Wireless Logical Interface Common Settings” to see the settings common to all

Wireless Logical Interfaces. 21) To confirm new Wireless Logical Interface Security parameters, see paragraph “Update/Store

Configuration Setting”. After rebooting the machine, the MAC address of the Wireless Interface will be displayed in the RADIO tab as in Figure 51:

Figure 51 – MAC address of Wireless Logical Interface

Important Note When the Logical Interface is part of a Trunk, take care to enable the “Trunk & Link PTP” option in the Radio Interface Menu to optimize the trunk performance.


Page 62 of 152

Setting Wireless Logical Interfaces to WDS Node Mode In order to be able to configure a Wireless Logical Interface as WDS Peer interface, is needed to create a WDS Logical Interface, as shown in Figure 52:

Figure 52 – Wireless WDS Node Logical Interface Screen

Each WDS Logical Interface manages only one WDS Peer. To create a WDS Node connected to multiple WDS Peers, it is needed to create multiple WDS Logical Interfaces on the same Wireless Physical Interface, one for each WDS Peer. Refer to section “Setting Wireless Logical Interface to AP Node Mode” to correctly configure the AP interface. After configuring your Access Point Wireless Interface, do the following:

1) From the Interfaces list on the left hand-side of the OpenWifless page, select the Wireless Logical Interface you intend to configure as WDS node.

2) In the main window, click on tab General. You will get a screen like in Figure 53:

Figure 53 - Setting WDS General Page

3) In the TCP-IP Section, set all TCP-IP parameters. 4) Click on Apply to save your settings. or click on Reset to restore previous values. 5) Click on tab Radio. You will get a view like in Figure 54:


Page 63 of 152

Figure 54 – MAC Address Filter for logical interface ATH0 in WDS mode

6) Refer to paragraph “Creation and Setup of Wireless Logical Interfaces” to see the settings common to all Wireless Logical Interfaces.

7) Fill WDS peer Address field with the MAC addresse of your WDS Peer2. 8) See paragraph “Logical Interface Common Settings” to check the settings common to all Logical Interfaces. 9) See paragraph “Wireless Logical Interface Common Settings” to check the settings common to all Wireless

Logical Interfaces. 10) Click Apply to save your settings, or click Reset to restore previous values. 11) To confirm your new Wireless Logical Interface Security parameters, see instructions in paragraph

“Update/Store Configuration Setting”.

2 You can record 1 (one) MAC address for each WDS Peer Node.


Page 64 of 152

Logical Interface Common Settings As previously mentioned, you must define some settings that will be common to all user-defined logical interfaces, due to Atheros HAL limitations. All your Fast-Ethernet interfaces, Radio Interfaces, and Bridge Interfaces will share these settings.

DHCP Server and Relay Settings All logical interfaces feature an integrated DHCP (Dynamic Host Configuration Protocol) Server and Relay agent, regardless of their type. This capability makes it easier to set up a simple Hotspot, especially in small networks; the use is less extensive in large corporate networks and carrier-class networks. DHCP dynamically assigns an IP address to each client that requests one. The clients obtain additional parameters which are common to other devices in the same network, such as the Default Router/Gateway and the Default DNS/WINS. The protocol simplifies network management as each client automatically gets its IP address on connecting to the network, instead of being assigned an IP address by an operator. To enable the DHCP Server, or the DHCP Relay agent, for a logical interface, follow the instructions listed below:

1) From the Interfaces list on the left hand-side of the OpenWifless page, select your logical interface. 2) From the menu in the main window, click on tab DHCP. The screen will display a DHCP general settings

page as in Figure 55.

Figure 55 – DHCP Settings Web Page

3) In the DHCP Setup section, select your DHCP Mode from the following modes available: None: DHCP server and relay disabled. Server: Enables the integrated DHCP Server. Relay: Enables the relay of the DHCP requests to an external DHCP Server.

4) Fill the following fields with your parameters: Relay Interface: Select the interface to which all DHCP client requests will be relayed by default. IP Pool Starting Address: This is the 1st IP address that the DHCP server will assign to a new client. Pool Size: Quantity of IP addresses available for new clients. DHCP Server Address: Network IP address of external DHCP server (available in DHCP relay mode only). Lease Time: Duration (in seconds) for which an IP address is leased to a new client.

5) In the DHCP Options section, fill the following fields with your parameters: Gateway IP Address: Gateway IP address of DHCP server assigned to new client. DNS Server IP Address: IP address of DNS (main or first) for your network. May not lie within your sub-network class of

addresses.


Page 65 of 152

NIS Domain Name Time Server IP Address WINS Server IP Address NBD Server Address NetBIOS Node Type: Choose from b-node, p-node, m-node or h-node. NetBIOS Scope Name:

6) In the Static DHCP Table section your can specify, for each client served by the logical interface, the following static values:

Delete: Deletion of a MAC-IP assignment. MAC Address: MAC address of client served. IP Address: IP address statically assigned to client served.

7) Click Apply to save your new settings, or click Reset to restore previous settings. Clicking Apply you also delete the MAC-IP assignment selected for deletion.

IP Aliasing You can implement IP aliasing on a logical interface in the following way:

1) From the Interfaces list on the left hand-side of the OpenWifless page, select your logical interface. 2) In the main window, click on tab IP Alias. You will view a screen like in Figure 56.

Figure 56 – Setting IP Alias for a logical Interface

3) Fill the following fields for each IP Alias you need to have: Enable: Tick this option to enable IP Aliasing IP Address: IP Alias for selected logical interface IP Subnet Mask: Mask for relative IP address Gateway IP Address: Gateway for the relative IP address. Metric: IP Gateway metric.

4) Click Apply to save your new settings, or click Reset to restore previous settings.


Page 66 of 152

PPPoE Server and Relay Settings All logical interfaces feature an integrated PPPoE (Point to Point Protocol over Ethernet) Server and Relay agent. To configure the PPPoE Settings, follow the instructions listed below:

1) From the Interfaces list on the left hand-side of the OpenWifless page, select your logical interface. 2) In the main window, click tab PPPoE. You will get a screen like in Figure 57:

Figure 57 – PPPoE Web Page

3) Check the Enable option to enable the PPPoE feature. 4) In the Type section, select your PPPoE Mode from the following modes available:

Server: Enables the integrated PPPoE server. Relay: Enables the integrated PPPoE relay.

5) Click Apply to save your new settings and you will get different screen depending on Type previous selection.

PPPoE Server To configure the PPPoE Server Settings, follow the instructions below:

1) Define your PPPoE Server settings for your logical interface as shown in the following Figure 58:

Figure 58 – PPPoE Server settings

2) In the PPPoE Server Setup section, fill the following fields with your parameters: MTU: MTU (Maximum Transfer Unit) value for the PPPoE logical interface MRU: MRU (Maximum Received Unit) value for the PPPoE logical interface Local IP Address: IP Address for PPPoE logical interface. Local Address Increment: Useful when more PPPoE tunnels are used. Primary and Secondary DNS Server LCP Echo Interval: Link Control Protocol Echo Interval value LCP Failure Count: Link Control Protocol Failure Count value Proxy Arp Compression


Page 67 of 152

Authentication Type: Select your PPPoE Authentication Type from the following modes available: a. PAP b. CHAP c. MSCHAPv2

Account Management: Select your Account Management Type from the following modes available: a. Local b. RADIUS

Remote IP Pool: IP Address for remote clients s Start and End IP form. Local Accounts: Accounts for PPPoE clients when Local Account Management mode is used.

3) Click Apply to save your new settings and you will get different screen depending on Type previous selection.

PPPoE Relay To configure the PPPoE Relay Settings, follow the instructions below:

1) Define your PPPoE Relay settings for your logical interface as shown in the following Figure 59:

Figure 59 – PPPoE Relay settings

2) In the PPPoE Relay Setup section, fill the following fields with your parameters:

Enable PPPoE Relay Setup: Enable PPPoE Relay over all PPPoE logical interfaces Mode: Server/client or Transparent mode available

3) On the right side the list of all PPPoE logical interfaces is shown. 4) Click Apply to save your new settings and you will get different screen depending on Type previous selection

L2-L3-L4 Bandwidth Manager Settings You can set a L2-L3-L4 Bandwidth Manager on the EGRESS for each logical interface on which multiple independent queues are implemented for traffic shaping. Each queue is a Dual-Bucket queue capable of handling both the MIR and CIR shaping parameters regarding the traffic to and from a pool of IP addresses; selected TCP-IP services can also be filtered by these queues. To set a Bandwidth Manager, follow the instructions listed below:

1) From the Interfaces list on the left hand-side of the OpenWifless page, select your logical interface. 2) In the main window, click tab Bandwidth. You will get a screen like in Figure 60.

Figure 60 – Default Bandwidth Management Page

3) Define your Bandwidth settings for your logical interface in the following fields:


Page 68 of 152

Queue: tick this option to enable one common queue for traffic through logical interface to/from pool of addresses specified. Maximum: Max speed/bandwidth allowed in the queue (MIR, Maximum Information Rate in bps). Guaranteed: Guaranteed speed/bandwidth allowed in queue (CIR, Committed Information Rate in bps).

4) The Maximum and Guranteed bandwidth parameters are expressed in bit per second (bps), so be careful to avoid to set very low value to the interface used for the device management, otherwise you may not be able to manage it anymore. To specify these paramenter you can use the K (kilo) and M (mega) multipliers.

5) Click Apply to confirm each new settings, or click Reset to restore previous settings. 6) Now that your queue has been defined and enabled, you can define your own TO and FROM Bandwidth

Management L3 and L4 Rules based on IP addresses, network masks and ports of sources and destinations, as shown in the example in Figure 61, where a queue is limted to 10Mbps with the listed IP L3 and L4 rules.

Figure 61 – Setting L3 Bandwidth Management on a Logical Interface

7) More than one queue can be configured to correctly handle somplex L3-L4 bandwidth management rules. 8) In the case it is preferred to define a Bandwidth Management L2 Rules, valid for any protocols on that

interface, it is possible to do that defining the special rule on a unique queue as shown in Figure 62 or as shown in Figure 63, where the only one possible queue on the logical interface is limited to 5Mbps of maximum rate.

Figure 62 – Setting L2 Bandwidth Management on a Logical Interface

Figure 63 – Alternative Setting of L2 Bandwidth Management on a Logical Interface


Page 69 of 152

Wireless Logical Interface Common Settings Due to the Atheros HAL technical restrictions mentioned earlier, you must define some settings that will be common to all Wireless Logical Interfaces.

Security Settings The following security protocols and features are supported by the Wifless ESS ProNODE device:

• WEP (Wired Equivalent Security Protocol). This protocol is fully supported mainly for legacy reasons, and can be used for implementing simple networks. However, we recommend that you choose a more up-to-date encryption protocol for extra security. Length keys of 64 bits, 128 bits, and 152 bits are supported, as well as non-standard length keys between 64 and 152 bits.

• WPA/WPA2 (Wi-Fi Protected Access / Wi-Fi Protected Access 2). This protocol is a modernized version of WEP, required by the Wi-Fi alliance for compatibility reasons. WPA identifies and authorizes users based on a secret encryption key that automatically changes at regular intervals. TKIP (Temporal Key Integrity Protocol) and AES (Advanced Encryption Standard) will change the temporary key every time a given number of packets are transmitted over the network. WPA PSK (Pre-Shared Key) ensures that a fresh security key is obtained on connecting to the network, as per the IEEE 802.11 standards. With WPA/WPA2, you will only be prompted for a security code once in the configuration menu. This ensures much greater security than WEP, as the latter requires you to change your security key manually.

• WPA with AES/TKIP & 802.1x Dynamic WEP. This protocol is fully supported and recommended with 128-bit keys as your first strong line of defense against intrusion. The IEEE 802.1x RADIUS-server-based authentication process validates client devices and user accounts as users attempt to connect to the network.

• EAP (Extensible Authentication Protocol). This protocol is also supported and has been tested as compatible with Microsoft Windows XP.

The strongest 256-bit AES encryption is supported without any degradation of the system performance, thus enabling you to reach the maximum wireless aggregated throughput available.


Page 70 of 152

MAC Filtering Settings for the Access Point Interface The Access Point Wireless Logical Interface of the Wifless ESS ProNODE device features a simple MAC Address Filter. The MAC Address Filter operates on an “allow-all/deny-all” policy, meaning that all the MAC addresses specified will be either granted or denied admittance to the network through the Access Point Wireless Logical Interface. Only an Access Point interface can have a MAC Address Filter. To set a MAC filter on a Wireless Logical Interface acting as an Access Point, do the following:

1) From the Interfaces list on the left hand-side list on the OpenWifless page, select your Wireless Logical Access Point Interface.

2) In the main window, click on tab MAC Address Filter. You will get a screen like in Figure 64.

Figure 64 – Setting MAC Filter on a Wireless Logical Interface.

3) From the MAC Address Policy drop-down list, select Enable to enable all MAC addresses specified in the table, or select Disable to disable them.. By default, the MAC Address Policy is set to None.

4) Fill the table with the MAC addresses to be filtered. 5) For each row of the table, specify the following values in the table:

Delete: Deletion of a MAC filtering rule. MAC Address: MAC address of filtering rule.

6) Click Apply to save your settings, or click Reset to restore previous settings. Clicking Apply you also delete the MAC filtering rule selected for deletion.

7) To confirm the new Wireless Logical Interface Security parameters, see paragraph “Update/Store Configuration Setting”.


Page 71 of 152

Wireless Encryption Settings and IEEE 802.1x AAA Open System When this mode is enabled, no data encryption is enabled on your Wireless Logical interface. This is the default mode for Wireless Encryption Settings. To view or modify the settings of a Wireless Logical Interface, do the following:

1) From the Interfaces list on the left hand-side list on the OpenWifless page, select your Wireless Logical Interface.

2) In the main window, click on tab Security. You will get a screen like in Figure 65.

Figure 65 – Setting Open Network Authentication on Wireless Logical Interface

In the IAPP Interface field, you must select the interface used for Inter Access Point Protocol communication with other Access Points in the network.

Note: Set the IAPP Interface carefully, or the Handover IEEE 802.11f protocol will not work properly.

Static WEP Shared Key This section shows how to set a Static WEP Shared Key on a Wireless Logical Interface.

Figure 66 – Setting Shared Network Authentication on Wireless Logical Interface


Page 72 of 152

To do so, follow the instructions listed below: 1) In the General section shown in Figure 66, select Shared3 from the Network Authentication drop-down list. 2) Move to section WEP Encryption Parameters. You can store up to four WEP encryption keys. To set a key,

select your WEP key number from 1 to 4, choose your format from ASCII or HEX 3) Select from Key length drop-down list your key4 length in bits and fill the box with the key as displayed in

Figure 66. 4) Click Apply to save your new settings, or click Reset to restore previous settings. 5) To confirm the new Wireless Logical Interface Security parameters, see paragraph “Update/Store


In the IAPP interface field you must select the interface used for Inter Access Point Protocol communication with the other Access Point in the network.

Note: Set the IAPP Interface carefully, or the Handover IEEE 802.11f protocol will not work properly.

IEEE 802.1x AAA with Dynamic WEP for Access Point To enable this AAA and Encryption Methods on a Wireless Logical Interface, do the following:

1) From the Interface list on the left hand-side on the OpenWifless page, select your Wireless Logical Interface. 2) Click on tab Security. 3) In the General section, select 802.1X from the Network Authentication drop-down list. Your screen will

look like in Figure 67.

The Automatic Key check box is enabled by default and cannot be disabled.

Figure 67 – Setting IEEE 802.1X Network Authentication on Wireless Logical Interface

4) In the IAPP Interface field, you shall select the proper interface used for the Inter Access Point Protocol communication with other Access Points in the network. Note: Set the IAPP Interface correctly, or the Handover IEEE 802.11f protocol will not work properly.

5) From the Broadcast Key drop-down list, select either None or a value between 40-bit and 104-bit. 6) From the Unicast Key drop-down list, select either None or a value between 40-bit and 104-bit. 7) In the Rekeying box, type your value in seconds; default value is 300 seconds. 8) Move on to EAP Parameters section to set all the parameters regarding AAA radius relay functionalities.

Your screen will look like in Figure 68:

3 If you select Open, you can still set Data Encryption to WEP. This Open-WEP configuration means that no authentication is required for clients with WEB data encryption is enabled. 4 64-bit WEP supports passwords of 5 ASCII characters or 10 HEX digits; 128-bit WEP supports passwords of 13 ASCII characters or 26 HEX digits; 152-bit WEP supports passwords of 16 ASCII characters or 32 HEX digits.


Page 73 of 152

Figure 68 – Setting EAP Parameters on Wireless Logical Interface

9) Configure the following general EAP Parameters5: Re-authentication Interval: type your value in seconds for EAP reauthentication. Default value is 3600 seconds. NAS ID: type NAS Identifier of the Wifless ESS ProNODE device. Packet of Disconnect (POD): Tick this option to enable the Packet of Disconnect functionality. NAS IP Addres: IP Address of Network Authentication Server. Retry Primary Interval: type your value in seconds for EAP Retry Primary Interval. Default value is 0 seconds. Account Interim Interval: type your value in seconds for EAP Account Interim Interval. Default value is 300 seconds. POD Listen Port: Packet of Disconnect service listening UDP port.

10) Configure the following EAP parameters6 for Primary RADIUS Server and Secondary RADIUS Server(s): IP Address: The IP Address of your IEEE 802.1X-compliant RADIUS server UDP Port: UDP port for Authentication Service; the standard default is port 1812. Secret: Password for accessing RADIUS server (“secret key”).

11) If you do not need to save any accounting information, such as log and history of clients’ authentications, click on Apply to save your settings, or click Reset to restore previous settings. The configuration of dynamic WEP Encryption is now completed.

12) Accounting information such as log and history of clients’ authentications will be stored on Accounting Server(s) that can be the same as your RADIUS Authentication Server(s).

13) If you want to store the accounting information on your Authentication Server(s), just click on Apply to save your settings. The configuration of dynamic WEP Encryption is now completed and the accounting information will be stored on the RADIUS server(s) in txt format by default. If you click on Reset, no configuration will be saved and the previous settings will apply.

14) If you want to store the accounting information on a external RADIUS server7 (primary or backup), tick option Accounting server is on a different server and specify the following parameters8 in the relevant section:

IP Address: IP address of RADIUS Accounting Server. UDP Port: UDP port configured for accounting; the standard default is port 1813. Secret: Password for accessing RADIUS server (“secret key”).

15) Click Apply to save your changes, or click Reset to restore previous settings.

5 If you are unsure about any of these parameters, check with your Network Administrator. 6 If you are unsure about any of these parameters, check with your Network Administrator. 7 Must be compliant with IEEE 802.1x. 8 If you have defined your Accounting Server(s) the same as your Authentication Server(s) as per step 13, these parameters will be automatically replicated from your Authentication Server(s).


Page 74 of 152

16) To confirm the new Wireless Logical Interface Security parameters, see paragraph “Update/Store Configuration Setting”.

IEEE 802.1X AAA with Dynamic WEP for Station To enable this AAA and Encryption Methods on the Wireless Logical Interface, do the following:

1) From the Interface list on the left hand-side on the OpenWifless page, select your Wireless Logical Interface. 2) Click on tab Security. Your screen will look like in Figure 69. 3) In the General section, select 802.1X from the Network Authentication drop-down list. 4) In the WEP Encryption Parameters section, you will get the option Automatic Key enabled by default. The

Access Point will automatically provide the WEP Dynamic Keying.

The Automatic Key check box is enabled by default and cannot be disabled.

Figure 69 – Setting IEEE 802.1X Network Authentication on a Station Wireless Logical Interface

5) In the EAP Parameters section, select your Authentication EAP Method from the following modes available: PEAP TTLS TLS

6) In the case you select EAP TLS, you will get a screen like in Figure 70, where you will have also the capability to upload the required user certificate.

Figure 70 – Setting EAP TLS Parameters


Page 75 of 152

7) In the Phase 2 Method drop-down menu, select one of the following modes: MSCHAPV2 MD5 OTP GTC

8) In the Username and Password/Passphrase fields, set your account details. 9) Click Apply to save your changes, or click Reset to restore previous settings. 10) To confirm the new Wireless Logical Interface Security parameters, see paragraph “Update/Store

Configuration Setting”. Important Note If you use EAP authentication with Certificate, it is mandatory to set the time and date manually before to upload the certification file, regardless of the current time and date setup. The time and date manually entered must be within the Certificate’s validity period. After the successful upload of the Certificate, the system time and date can be configured again as preferred (manual or get from NTP/SNTP server).


Page 76 of 152

WPA/WPA2-PSK with AES or TKIP (WPA-Personal) To enable this Encryption Method on a Wireless Logical Interface, do the following.

1) From the Interface list on the left hand-side of the OpenWifless page, select your Wireless Logical Interface. 2) Click on tab Security. 3) From the Network Authentication drop-down list in the General section, select WPA or WPA2. In the

Station Mode also available the WPA/WPA2 functionality. 4) From the Data Encryption drop-down list, select TKIP or AES. 5) From the Key Management drop-down list, select PSK. Your screen will look like in the example shown in

Figure 71:

Figure 71 – Setting WPA-TKIP encryption on Wireless Logical Interface ath0

6) Complete section WPA General with the following parameters: GTK Rekeying Interval: Time elapsed before a new generation. GMK Rekeying Interval: Time elapsed before a new key generation. Strict Rekeying: IEEE 801.11i option disabled by default. Set it in accordance with your wireless network general settings.

7) In the WPA-PSK section, select a format for your password and insert an 8-63 ASCII passphrase or a 64 hex digit secret code of your choice.

8) Click Apply to save your settings, or click Reset to restore previous values. 9) To confirm the new Wireless Logical Interface Security parameters, see paragraph “Update/Store



Page 77 of 152

WPA / WPA2-EAP with AES or TKIP (WPA-Enterprise) for Access Point To enable this AAA and Encryption Methods on a Wireless Logical Interface, do the following.

1) From the Interface list on the left hand-side of the OpenWifless page, select your Wireless Logical Interface. 2) Click on tab Security. 3) From the Network Authentication drop-down list in the General section, select WPA or WPA2. 4) From the Data Encryption drop-down list, select TKIP or AES. 5) From the Key Management drop-down list, select EAP. Your screen will look like in the example shown in

Figure 72. 6) Complete the configuration of the sections WPA General and EAP Parameters as described in the

paragraphs “WPA/WPA2-PSK with AES or TKIP (WPA-Personal)” and “IEEE 802.1x AAA with Dynamic WEP”.

…

Figure 72 – Setting WPA-Enterprise Encryption on Wireless Logical Access Point Interface




Page 78 of 152

WPA / WPA2-EAP with AES or TKIP (WPA-Enterprise) for Station To enable this AAA and Encryption Methods on the Wireless Logical Interface, do the following.

1) From the Interface list on the left hand-side of the OpenWifless page, select your Wireless Logical Interface. 2) Click on tab Security. 3) From the Network Authentication drop-down list in the General section, select WPA, WPA2 or

WPA/WPA2. 4) From the Data Encryption drop-down list, select TKIP, AES or TKIP/AES. 5) From the Key Management drop-down list, select EAP or PSK/EAP. Your screen will look like in Figure 73. 6) Complete the configuration of the sections WPA General and EAP Parameters as described in the

paragraphs “WPA/WPA2-PSK with AES or TKIP (WPA-Personal)” and “IEEE 802.1x AAA with Dynamic WEP”.

Figure 73 – Setting WPA-Enterprise Encryption on Wireless Logical Station Interface


Configuration Setting”. Important Note If you use EAP autentication with Certificate, it is mandatory to set the time and date manually before to upload the certification file, regardless of the current time and date setup. The time and date manually entered must be within the Certificate’s validity period. After the successful upload of the Certificate, the system time and date can be configured again as preferred (manual or get from NTP/SNTP server).


Page 79 of 152

The Router Settings Static Router The Wifless ESS ProNODE device features a Routing Engine. You can set up static routing in the following way:

1) From the Advanced list on the left hand-side of the OpenWifless page, select Router. 2) Click on tab Static Router tab. A table will be displayed as in Figure 74. Each row corresponds to a static

route.

Figure 74 – Setting a Static Routing Table

3) To set a static route, tick box Enable and complete the following fields on the same row: IP Address: Destination IP address. IP Subnet Mask: Subnet mask in dotted decimal notation. Gateway: Next Hop IP address. Metric: Metric route value (cost).

4) Click button Apply to save your new settings, or click on Reset to restore previous values.

Dynamic Routers The Wifless ESS ProNODE device implements two famous routing engines that provide all the most advanced dynamic routing protocols available today:

RIP1 RFC 1058 & RIP2 RFC 2453 OSPF v2 RFC 2328 BGP v4 RFC 1771 IS-IS RFC 1195 OLSR RFC 3626

Quagga engine manages the RIP1&2, OSPF, GBP and IS-IS protocols, while an OLSR specific engine takes care of this protocol only.

Configuration using the WEB GUI To set Dynamic Routing on your Wifless ESS ProNODE device, select Router from the Advanced list on the left hand-side of the OpenWifless page and follow the instructions listed below.

1) Click on tab Dynamic Router. Your screen will look like in Figure 75:

Figure 75 – Dynamic Routing Settings Page


Page 80 of 152

2) First, activate the needed routing engine by checking the proper enable checkbox. 3) Then activate the wanted Routing Protocol(s) by ticking the relative checkbox as shown in Figure 76:

…

…


Page 81 of 152

Figure 76 – Enabling the Dynamic Routing Protocols

4) Click on Save to save the text configuration in the .xml file. 5) Click on Load to load the configuration .conf file to the screen. 6) Click on Apply to make your changes effective and reboot the system to have the routing protocols running.

Configuration using Telnet This section shows how to configure dynamic routers on your Wifless ESS ProNODE using Telnet.

1) To configure the RIP router, click on RIP Console button; a Telnet session on port 2602 will be opened automatically as shown in Figure 77.

Figure 77 – Console access

2) Enter your Password; default value is default. A successful login will result in the command prompt being displayed as in Figure 78.

Figure 78 – RIP command prompt

3) To configure the OSPF router, click on OSPF Console button; a Telnet session on port 2604 will be automatically opened as shown in Figure 77.

4) Enter your Password. Default value is default. A successful login will result in the command prompt being displayed as in Figure 79.


Page 82 of 152

Figure 79 – OSPF command prompt.

5) To configure the BGP-4 RFC 1071 router, click on BGP Console button; a Telnet session on port 2605 will be automatically opened as shown in Figure 77.

6) Enter your Telnet password. Default value is default. A successful login will result in the command prompt being displayed as in Figure 80.

Figure 80 – BGP command prompt

7) To configure the IS-IS RFC 1195 router, click on IS-IS Console button; a Telnet session on port 2608 will be automatically opened as shown in Figure 77.

8) Enter your Telnet password. Default value is default. A successful login will result in the command prompt being displayed as in Figure 81.

Figure 81 – IS-IS command prompt

For more information on RIP, OSPF, BGP and IS-IS refer to the official Quagga Manual included in the CD ROM supplied.


Page 83 of 152

OLSR Router Web GUI Your Wifless ESS ProNODE device includes a high-performance OLSR routing module provided by OLSR.ORG, complete with its web-based GUI provisioning tool. This section explains how to set your parameters on the built-in OLSR router.

1) In the OLSR Engine section shown in Figure 76, click on OLSR Configuration. You will get a screen like in Figure 82.

Figure 82 – OLSR Configuration Main Page

Figure 82 shows the web-based OLSR GUI provisioning tool, mapped on http server port 88. For more information, refer to the official OLSR Manual included in the CD ROM supplied.


Page 84 of 152

Policy Router To set Policy Router rules on your Wifless ESS ProNODE device, select Router from the Advanced list on the left hand-side of the OpenWifless page and follow the instructions listed below.

1) Click on tab Policy Router. Your screen will look like in Figure 83:

Figure 83 – Setting Policy Router rules on Wifless ESS ProNODE device

2) Enable Policy Router by ticking the relevant box. 3) From the Priority drop-down list, select Delete if you want to delete the rule or 0 to create the first rule. 4) From the Incoming packets matched by drop-down list, select Input Device for the source traffic and from

the Rule drop-down list field the interface to use or to drop packets coming from the interface selected as in the following figure.

Figure 84 – Setting Input Device Rule

5) From the Incoming packets matched by drop-down list, select Source IP or Destination IP for the source/destination traffic and their IP/mask parameters as in the following figure.

Figure 85 – Setting Source IP Rule


Page 85 of 152

6) In Any row select the Default Action from the available following options: Device: Destination Interface or drop action. Gateway IP: IP Address of DG for default rule System: no default rule

Figure 86 – Setting Default Rule

7) Click on Apply to make your changes effective. 8) If you need to remove the rule, please select Delete option from Priority field and click on Apply.


Page 86 of 152

Firewall Settings The Wifless ESS ProNODE device features an integrated firewall capable of managing data traffic through all your logical interfaces. This section explains how to set your rules for traffic management on the built-in firewall.

1) From the Advanced menu on the left hand-side of the OpenWifless page, select Firewall. 2) In the main window, click tab Default Rule. You will get a screen like in Figure 87.

Figure 87 – Setting Firewall Rules

3) In the Default Rule Setup panel, tick option Enable Firewall and specify your rules as follows: Packet Direction: select your route. Default Action: select required action for that route. Log: tick option to save log.

4) Click Apply to save your settings, or click Reset to restore previous settings. 5) If you want to add any firewall rules of your own, click on tab Rule Summary. You will get a screen like in

Figure 88.


Page 87 of 152

Figure 88 – Firewall Rule Summary

6) In the Rule Summary section, you need to define the following: Packet Direction: by default, your rule is applied to all network interfaces. Priority: Default value is 10.

7) Click Add Filter button, or Add SNAT or Add DNAT or Add SNAT+DNAT button, to make your wanted new rule available and to configure it. In the case you select an Add Filter rule, you will get a screen like in Figure 89.

Figure 89 – Editing Firewall Rule

8) In the General section, tick box Activate rule. 9) Complete sections Edit Source and Edit Destination specifying the following:

Interface: default value is any. Address Type: choose from Single Address, Subnet Address, and Any Address. Default value is Single Address. IP Address and Subnet Mask. Protocol: select your Filtered Protocol. Default value is any. Port Range: select Single Port or Port Range specifying port number or port range.

10) In section Packets Handler, tick Packet Information Logging to save log, and select either Forward or Block in Action Performed drop-down list.

11) Click Apply to save your settings, or click Reset to restore previous settings. 12) To confirm the new configuration, see paragraph “Update/Store Configuration Setting”.


Page 88 of 152

Class of Service (CoS) The OpenWifless ESS Operating System manages user definable Class of Services (CoS) by the use of the Bandwidth Manager alone or by the use of the Bandwidth Manager in combination with the QoS prioritization engine on the EGRESS of each logical interface defined in the system. Considering only the setting of the CoS by the use of the Bandwidth Manager alone, the Wifless ESS ProNODE device supports Static CoS setting, by the provisioning of the L2-L3-L4 Bandwidth Manager, for each of the defined intefaces, as well as supports Dynamic CoS setting for the connected wireless CPE by special Radius attributes forwarded to the Wifless ESS ProNODE device, operating as Network Access Point (NAS), by the Radius Server.

Static CoS setting For Static CoS setting, by the provisioning of the L2-L3-L4 Bandwidth Manager, refer to paragraph “L2-L3-L4 Bandwidth Manager Settings”.

Dynamic CoS setting For the Dynamic CoS setting to work, it is required, as mandatory pre-requisite, to have configured the desired Wifless ESS ProNODE wireless interface(s) delivering the service(s), to operate as an Access Point controlled by a Radius Server. Then it is necessary to configure the Radius Server to deliver the advanced WISPr attributes to the account used by the connected wireless CPE to access the network. Advanced WISPr Radius Supported Attributes for Dynamic Bandwidth Management The Wifless ESS ProNODE device is a state-of-the-art wireless NAS that implements the IEEE and Wi-Fi Alliance proposed draft for Radius controlled L2 Bandwidth Manager, as per the following list:

WISPr-Bandwidth-Max-Down: defines the max download bandwidth allowed; WISPr-Bandwidth-Max-Up: defines the max upload bandwidth allowed; WISPr-Bandwidth-Min-Down: reports the expected min download bandwidth; WISPr-Bandwidth-Min-Up: reports the min expected upload bandwidth.

As the Wifless ESS 2456x and ESS PN25x NAS receives the first two attributes jus after the authentication of a wireless CPE, a dynamically created rules in the BWM of the competent Access Point interfaces will limit the bandwidth as defined and will stay in place until the wireless CPE remain authenticated. The L2 Bandwidth Manager used by the Dynamic CoS acts as a special BWM limiting both the EGRESS and the INGRESS of the proper wireless logical Access Point interface.


Page 89 of 152

Quality of Service (QoS) The Wifless ESS ProNODE device features layer-2 traffic prioritization based on VLAN Priority, a layer-3 traffic prioritization based on either ToS/DSCP Priority (RFC 2474) in compliance with the IEEE 802.1Q-2005 standard (including the previous IEEE 802.1p) and a simple layer-4 traffic prioritization based on RTP filtering. Each interface has four hardware queues, so each packet received is placed in one of these accordingly to the Traffic Prioritization classifiers of the used protocol. The prioritization of the packets is done using different classifiers/filters:

• VLAN Priority • ToS/DSCP Priority • RTP prioritization

Each one of these classifiers/filters can be enabled or not. In the case you enable filters that may have conflicting rules, the first filter in the chain will be applied. We kindly suggest to enable only one classifier/filter per logical interface. The QoS for interface is completely controlled from the QoS tab of each logical interface page as shown in Figure 90.

1) In the QoS Settings section, tick box Enable to enable QoS engine co-processor and you will get a page with the VLAN and the ToS/DSCP mapping as shown in the following figure:

Figure 90 – QoS Default Rules Settings

2) From the Default Priority drop-down list select the default queue for the unclassified traffic: BK: Background BE: Best Effort VI: Video VO: Voice None

3) Click Apply to save your settings, or click Reset to restore previous settings. 4) To confirm the new configuration, see paragraph “Update/Store Configuration Setting”.


Page 90 of 152

VLAN Priority QoS VLAN prioritized traffic is mapped to an output queue based on the VLAN Priority classifier. To enable the VLAN Prioritization QoS engine, in the VLAN Priority section, select Enable from drop-down list. You will get a page like in Figure 91.

Figure 91 – VLAN Priority default queues mapping

While queue mapping is user-configurable, the VLAN prioritization predefined mapping is as shown in the Figure 91. To modify the predefined VLAN priority mapping you have to define the wanted TAG mapping, in the VLAN Priority section, as follows:

1) Maps each of the VLAN Priority # from 0 to 7 to the proper queue of four available. 2) Click Apply to save your settings, or click Reset to restore previous settings. 3) To confirm the new configuration, see paragraph “Update/Store Configuration Setting”.

Note on VLAN ID Standard Convention: Take care to note that VLAN 0 means “no VLAN but handle the priority” and that the “Default VLAN” is VLAN 1.


Page 91 of 152

ToS/DSCP Priority QoS ToS or DSCP classified traffic is prioritized on the proper output queue based on the classifier field value. To enable the ToS/DSCP Prioritization QoS engine, in the ToS/DSCP Mapping section, from the Mapping Type drop-down list, select the ToS or the DSCP option as you need. You will get a page like in Figure 92 or in Figure 93.

ToS Prioritization ToS IP Precedence prioritized traffic is s mapped to an output queue based on the 3 bit of the IP Precedence header, plus the 4 bits of the IP ToS and plus the bit of the MBZ in accordance with the RFC 795 and RFC 1349.

ToS QoS default mapping is like shown in the following Figure 92:

…

Figure 92 – ToS IP Precedence default queues mapping

To modify the predefined ToS mapping you have to define the wanted ToS Priority mapping, in the ToS/DSCP Mapping section, as follows:

1) Maps each of the ToS Priority # from 0 to 255 to the proper queue of four available. 2) Click Apply to save your settings, or click Reset to restore previous settings. 3) To confirm the new configuration, see paragraph “Update/Store Configuration Setting”.


Page 92 of 152

DSCP Prioritization DSCP prioritized traffic is s mapped to an output queue based on the 6 bits of the DSCP (Differentiated Services Code Point) field in accordance with RFC 2474 and IEEE 802.1Q-2005. DSCP QoS default mapping is like shown in the following Figure 93:

……

Figure 93 – DSCP default queues mapping

To modify the predefined DSCP mapping you have to define the wanted DSCP Value mapping, in the ToS/DSCP Mapping section, as follows: 1) Maps each of the DSCP Priority # from 0 to 63 to the proper queue of four available. 2) Click Apply to save your settings, or click Reset to restore previous settings. 3) To confirm the new configuration, see paragraph “Update/Store Configuration Setting”

For more information on QoS protocols, refer to the official RFC included in the CD ROM supplied.


Page 93 of 152

RTP Priority QoS Voice over IP is commonly transported using IP Real Time Protocol (RTP). When an application uses RTP, it chooses for destination ports consecutive numbers. In the case the UDP packets port is between the selected range, OpenWifless ESS ProNODE OS maps these packets to the selected queue with its own priority (default is VO queue with maximum/highest priority). The RTP Mapping option is implemented to provide an higher level of fine tuning of the VoIP applications that will be managed by the OpenWifless ESS ProNODE operating system. RTP QoS default mapping is like shown in the following Figure 94:

Figure 94 – RTP mapping settings

To modify the predefined RTP mapping you have to define the wanted queue mapping, in the RTP Mapping section, as follows:

1) In the RTP Mapping section, from the RTP Priority drop-down list select the queue to map RTP packets coming from the filtered port range:

BK: Background BE: Best Effort VI: Video VO: Voice None

2) Set RTP Start port filtered value. 3) Set RTP End port filtered value. 4) Click Apply to save your settings, or click Reset to restore previous settings. 5) To confirm the new configuration, see paragraph “Update/Store Configuration Setting”


Page 94 of 152

WMM-EDCA Priority QoS The radio modules equipping the Wifless ESS ProNODE device features layer-1-2 traffic prioritization based on WMM-EDCA (Wireless Multi Media + EDCA) Priority in compliance with the IEEE 802.11e standard. Check the WMM (IEEE 802.11e) option to enable the WMM-EDCA QoS Engine and be careful to enable the Aggressive Mode only if required by your network configuration or for interoperability issues (the default is to have the Aggressive Mode disabled).

Figure 95 – WMM Queues & Classifiers and EDCA parameters

Each radio interface has four hardware WMM queues, as shown in Figure 95. Each packet received is placed in the proper queue accordingly to the WMM Traffic Prioritization classifiers. You can fine tune the WMM-EDCA QoS engine setting the following parameters:

ECWmin: Minimum size of Exponential Contention Window. Maximum value is 15. ECWmax: Maximum size of Exponential Contention Window. Maximum value is 15. AIFS: Arbitration Inter Frame Space. TxOpLimit: Transmission Opportunity Limit. ACM: ACM policy. No Ack policy: WMM acknowledge policy.

The WMM parameters can be re-set to the defaults by clicking the button Default WMM Parameters. Apart the No Ack policy paramter, each of the other parameters should be correctly configured for the Access Point (AP), in the WMM speaking called Channel, and for the Clients (Stations), referred as BSS in the WMM speaking. Suggested known good-values for the WMM-EDCA Parameters for typical applications are reported in the following Table 2:

Application type

PTP Link

Application type PMP Links WMM

Parameters with up to 5

CPE with up to 10

CPE with up to 20

CPE with up to 40

CPE with up to 80

CPE CW-min 3 4 5 6 7 8 CW-max 10 10 10 10 10 10

Table 2 – Suggested CWs WMM Parameters

Note: ECWmin is related to CWmin with the formula CWmin = 2ECWmin - 1. ECWmax is related to CWmax with the formula CWmax = 2ECWmax - 1 For application with more than 20 CPE per sector or for more information on WMM-EDCA, refer also to:

the official Atheros Madwifi manual included in the Documentation CD ROM supplied; the official Wi-Fi Alliance WMM Power Save White Paper included in the Documentation CD ROM

supplied. If Aggressive Mode is enabled, be careful to consider that the WMM Parameters set in the AP configuration will be propagated to all the associated Clients/Stations, so it is necessary to correctly tune these parameters only at the AP configuration. However, the Client/Station has initial WMM Parameters settings, as shown in Figure 96, that are used during the initial connection period before to get the configured parameters from the associated AP.


Page 95 of 152

Figure 96 – Station/Client WMM Initial Setting


Page 96 of 152

The Management Settings, Status Monitoring and Performance Metering Your Wifless ESS ProNODE device features a single administrative profile, allowing for convenient remote management via any of the following tools:

http/https server SSH Telnet server Serial port CLI V1, V2 and V3 standard SNMP agents Syslog server

In addition, the Wifless ESS ProNODE device integrates a Netperf and an Iperf tools for troubleshooting purposes.

HTTP/HTTPS Management This section shows how to enable management operations via http or https.

1) From the Advanced menu on the left hand-side of the OpenWifless page, select Management. 2) In the main window, click tab WWW. You will get a screen like in Figure 97.

Figure 97 – Enabling remote management via WWW

3) In the WWW section, specify the following parameters:

Server Mode: select http (default value) or https. Server Port: default value is 80. Server Access: default value is any. Secure Client IP Address: Secure IP Address to access the system via HTTP/HTTPS.

4) Click Apply to save your settings, or click Reset to restore previous settings. 5) To confirm your new configuration, see paragraph “Update/Store Configuration Setting”.


Page 97 of 152

SSH Management This section shows how to set management operations via SSH. This mode is enabled by default.

1) From the Advanced menu on the left hand-side of the OpenWifless page, select Management. 2) In the main window, click tab SSH. You will get a screen like in Figure 98.

Figure 98 – Remote Management via SSH

3) In the SSH section, specify the following parameters:

Server Port: default value is 22. Server Access: any is by default. Secure Client IP Address: Secure IP Address to access the system via SSH


Telnet Management This section shows how to set management operations via Telnet. This mode is enabled by default.

1) From the Advanced menu on the left hand-side of the OpenWifless page, select Management. 2) In the main window, click tab Telnet. You will get a screen like in Figure 99.

Figure 99 – Enabling remote management via Telnet

3) In the Telnet section, specify the following parameters:

Server Port: default value is 23. Server Access: any is by default. Secure Client IP Address: Secure IP Address to access the system via Telnet.



Page 98 of 152

Serial RS232 CLI Management This section shows how to enable management operations via RS232 serial port. This port is enabled by default.

1) From the Advanced menu on the left hand-side of the OpenWifless page, select Management. 2) In the main window, click tab Serial. You will get a screen like in Figure 100.

The Enable check box is enabled by default and cannot be disabled. Serial access is protected by password, the same as SSH/Telnet console.

Figure 100 – Enabling remote management via serial port

SNMP Management The Wifless ESS ProNODE device integrates V1, V2c and V3 standard SNMP agents for simple and efficient management operations. This section shows how to enable these agents.

1) From the Advanced menu on the left hand-side of the OpenWifless page, select Management. 2) In the main window, click tab SNMP. You will get a screen like in Figure 101.

Figure 101 – Enabling SNMP agents for remote management

3) In the SNMP section, specify the following:

Server Port: default value is 161. Server Access: select which logical interfaces are to be managed via SNMP. Default value is none that means disabled.


Page 99 of 152

Secure Client IP Address/Mask: set IP address and subnet mask for secure SNMP access. 4) If you want to use SNMP V1 and V2c, complete section SNMP V1 and V2c Settings. Default values are

public for Get Community and private for Set Community. 5) If you want to use SNMP V3, compete all fields in section SNMP V3 Settings to match the account being

used for the SNMP V3 agent as following:

Username: Username for SNMP V3c Account. Password: Password for SNMP V3c Account. Access: You can choose between Read Only and Read-Write options.

6) In the SNMP Traps section, specify the following:

Trap Destination: Enter up to 2 (two) SNMP Server IP Addresses or a Full Qualified Domain Names. Send Network Interface Status: Tick on this option if you want to receive traps when interfaces change state.

7) In Radio Interface Traps section, specify which Traps and values you want to set. 8) Click on Apply to save your settings, or click Reset to restore previous settings. 9) To confirm your new configuration, see paragraph “Update/Store Configuration Setting”.

Syslog Logging / System Events Monitoring A Syslog server can be used for monitoring your Wifless ESS ProNODE device. To enable this option, do the following.

1) From the Advanced menu on the left hand-side of the OpenWifless page, select Management. 2) In the main window, click tab Syslog. You will get a screen like in Figure 102.

Figure 102 – Enabling Syslog Server monitoring

3) In the Syslog section, specify up to 4 (four) Syslog Server IP Addresses or Full Qualified Domain Names. 4) Click on Apply to save your settings, or click Reset to restore previous settings. 5) To confirm your new configuration, see paragraph “Update/Store Configuration Setting”.


Page 100 of 152

Netperf Performance Testing & Metering This section shows how to enable the built-in Netserver tool NetPerf. By default, this tool is disabled.

1) From the Advanced menu on the left hand-side of the OpenWifless page, select Management. 2) In the main window, click tab Netperf. You will get a screen like in Figure 103.

Figure 103 – Enabling and configuring NetPerf

3) In the Netperf section, tick option Enable. 4) In the Netperf Settings section, complete the following fields:

Remote Host IP Address. Test Type: choose stream type between TCP Stream Perform and UDP Stream Perform. Local Send Size: -m NetPerf parameter. Remote Send Size: -M NetPerf parameter. Test Time: -l Netperf parameter

5) Click Run Test to start a test and the results will be displayed on your screen. 6) Click on Apply to save your settings, or click Reset to restore previous settings. 7) To confirm your new configuration, see paragraph “Update/Store Configuration Setting”.

Iperf Performance Testing & Metering This section shows how to enable the built-in Netserver tool IPerf. By default, this tool is disabled.

1) From the Advanced menu on the left hand-side of the OpenWifless page, select Management. 2) In the main window, click tab Iperf. You will get a screen like in Figure 104.

Figure 104 – Enabling and configuring IPerf


Page 101 of 152

3) In the Iperf section, tick option Enable. 4) In the Iperf Settings section, complete the following fields:

Remote Host IP Address. Test Type: choose stream type between TCP Stream Perform and UDP Stream Perform. Send Size: -w Iperf parameter. Test Time: -t Iperf parameter.

5) Click Run Test to start a test; the results will be displayed on your screen. 6) Click on Apply to save your settings, or click Reset to restore previous settings. 7) To confirm your new configuration, see paragraph “Update/Store Configuration Setting”.

System Status & Resources Allocation Monitoring The Wifless ESS ProNODE device features a tool for monitoring system status and resources allocation. System parameters and usage of resources are metered every 5 minutes. You can set the tool to output a status report either over the last 24 hours, the last 7 days, or the last 4 weeks. The following are the system parameters and main resources monitored by the tool:

CPU Usage Memory Usage Flash Disc Usage Interrupts Rate/Load Physical Interfaces Statistics

You can view the reports and change the relevant settings by selecting Remote MGMT from the Advanced list and then Status from the main OpenWifless window. Some examples of the output reports are displayed in Figure 105 and Figure 106.

Figure 105 – Reports of CPU Usage after Reboot


Page 102 of 152

Figure 106 – Reports over 24 hours


Page 103 of 152

Maintenance Settings This section shows how to perform the maintenance of your Wifless ESS ProNODE device. From the menu list on the left hand-side of the OpenWifless page, click on Maintenance.

General Settings The parameters reported under the General tab of the Maintenance window are:

inventory-only fields used for device identification and administrative notes; two-key system parameters regarding DNS settings and the automatic logout inactivity timer.

In the Maintenance window, click tab General. You will get a screen like in Figure 107.

Figure 107 – General Setup

1) In the General Setup section you can specify the following parameters: System Name System Location System Contact Domain Name Primary Nameserver Secondary Nameserver Administrative Inactivity Timer

2) Click Apply to confirm your newly-entered parameters, or click Reset to restore previous values. 3) To confirm your new configuration, see paragraph “Update/Store Configuration Setting”.

Management Accounts and Password Settings There are three privilege access levels and three predefined Users for the Wifless ESS ProNODE device:

Administrator: top privilege level9, recommended for provisioning and administration via http, https or SSH servers.

Read-Only Operator: recommended for monitoring and alerts (usually performed by NMS tools). Back-Up Operator: recommended for automatic backups of configuration files (usually performed by

external machines). In order to perform password changes, you must enter a valid User ID and password; User IDs cannot be modified, while passwords can be changed and reset to default. Important Note: These password settings are immediately applied to the system as you click on the Apply button!

9 In this operation mode, a user could potentially damage the file system via SSH.


Page 104 of 152

To change a predefined password, log in as Administrator and click tab Password in the Maintenance OpenWifless window. You will get a screen like in Figure 108, and then follow the instructions as per each predefined User ID.

Figure 108 – Setting a new password

Administrator Profile By default, the administrator profile is as follows:

User Name: admin Password: default

To change the password of the Administrator Profile, complete all fields in the Administrator Password section and click on Change. Read-Only Profile By default, the Read-Only Operator Profile is disabled and you must define its password as follows:

User Name: user Password:

To set the password of the Read-Only Operator Profile, complete all fields in the READ-ONLY Operator Password section and click on Change. Backup Profile By default, the Backup Operator Profile is disabled and you must define its password as follows:

User Name: backup Password:

To set the password of the Backup Operator Profile, complete all fields in the BACKUP Operator Password section and click on Change. Important Note If you forget your Administrator password, the system can be reset to the Factory Defaults User ID and Password using the ResetWebPwd command as explained in the “Reset of the Password of the Web Admin Account” paragraph. The device will be unlocked either via Serial port under the supervision of the Wifless Support Team.


Page 105 of 152

Time and Date Settings The Wifless ESS ProNODE device has an internal real-time clock (RTC) equipped with a back-up battery which allows for correct time keeping even when the device cannot access a Network Time Server. The RTC allows both manual or automatic (via NTP/SNTP protocol) setup of time and date. In the Maintenance window of OpenWifless, click on tab Time and Date. You will get a screen like in Figure 109.

Figure 109 – Setting Time and Date

In section Current Time and Date, the current values are displayed in the YYYY-MM-DD format and default to the CEST (Central European Summer Time) time zone. To change the current settings, do the following:

1) In section Time and Date Setup, choose between Manual and Get from Time Server. 2) If you have chosen Manual, set New Time (hh:mm:ss) and New Date (yyyy-mm-dd). 3) If you have chosen Automatic, the system will automatically search a worldwide list of official public

servers for an available NTP/SNTP Server. However, if you prefer to define an NTP/SNTP server of your own or select a specific one, tick box Enable time server and specify the following:

Time Protocol: Currently supported NTP v3 (Network Time Protocol) and SNTP v4 (Simple Network Time Protocol) with automatic selection.

Time Server Address: IP Address(es) or Server Name(s) Full Qualified Domain Name(s).

4) Move on to section Time Zone Setup and select your Time Zone. 5) Enable Daylight Saving if required. 6) Set Start Date and End Date. 7) Click Apply to store your values, or click Reset to restore previous values. 8) To confirm your new configuration, see paragraph “Update/Store Configuration Setting”.

For your NTP/SNTP service to work correctly, you must set the following parameters first:

DNS (Domain Names Server) entries (see MAINTENANCE – GENERAL web page and tab); DG (Default Gateway) for the main logical interface used to reach the NTP/SNTP server(s)

specified.


Page 106 of 152

FW Upload Procedure (Upgrade / Downgrade) Preliminary important notes on firmware upgrade

The Firmware upgrade - also referred to as Operating System Software upgrade - is a critical procedure that could lead the system to an unusable state if not conducted correctly. Systems left in an unusable state must be returned to factory for complete firmware re-flashing. The firmware re-flashing is an out-of-warranty service.

Once started, the Firmware upgrade procedure cannot be stopped and must not be interrupted by accidental causes. It is important that all devices involved in the traffic data path are kept under UPS (Uninterruptible Power Supply).

Do not confuse the Firmware upgrade procedure with the Embedded OS replacement. The latter is an extremely complex operation which should be performed by the manufacturer only. Any other attempt to perform Embedded OS Replacement will result in the immediate void of the user’s product warranty. For Embedded OS Replacement, contact the Wifless Support Team.

Preliminary important notes on firmware downgrade

The Firmware downgrade, also referred to as Operating System Software downgrade, is a very critical procedure that often lead the system to an unusable state. Systems left in an unusable state must be returned to factory for a complete firmware re-flashing. The firmware re-flashing is an out-of-warranty service.

Never perform a Firmware downgrade without an express approval by your local qualified supplier or by the Wifless Support Team.

Once started, the Firmware downgrade procedure cannot be stopped and must not be interrupted by accidental causes. It is important that all devices involved in the traffic data path are kept under UPS (Uninterruptible Power Supply).

After a Firmware downgrade, the device must be reset to Factory Default and only XML configuration files which refer to the firmware version restored can be used for a restore procedure.

You can load a different firmware version onto your Wifless ESS ProNODE device as follows:

1) From the menu on the left hand-side of the OpenWifless page, select Maintenance. 2) From the menu bar on the Maintenance window, select FW Upload. Your screen will look like in Figure

110.

Figure 110 – Firmware Upload

3) Click on Browse to locate your image file for firmware binary upgrade. The file extension is “.BIN”. 4) Once you have selected your BIN file, click Upload. A page like in Figure 111 will be displayed on your

screen:


Page 107 of 152

Figure 111 – Confirmation prior to writing flash

5) Confirm your action by clicking on Write to flash, or click Cancel to abort the procedure. 6) The system will reboot automatically after the completion of the flash memory re-writing. It can take up to 5

minutes for the upgrade procedure to be completed. Do not to stop the procedure and do not power off the Wifless ESS ProNODE device or any other device connected to it10.

7) If the upgrade procedure has been successfully completed, you will get a screen like in Figure 112.

Figure 112 – Upgrade procedure being successfully completed

8) If your web browser has not automatically refreshed after 5 minutes, either refresh the browser page manually, or click on the HOME button of the latest cached page; the newly-uploaded firmware version will be displayed in the top right-hand corner of your screen, like shown in Figure 113.

Figure 113 – Newly-uploaded Firmware Version being displayed

10 If any errors are reported at this stage, try repeating the procedure from step 1. If some errors are still reported, contact the Wifless Support Team prior to powering off the system, if possible.


Page 108 of 152

Configuration Backup, Restore and Factory Default Settings The Wifless ESS ProNODE device allows for easy backup and restore of configuration files. This section shows how to perform these operations:

1) From the menu on the left hand-side of the OpenWifless page, select Maintenance. 2) From the menu bar on the main window, click on Configuration. Your screen will look like in Figure 114.

Figure 114 – Backup and Restore Configuration

From this window, you can either back up the current configuration file onto your computer, restore a configuration file onto the Wifless ESS ProNODE device, or restore all settings to Factory Defaults.

3) To restore all settings to Factory Defaults, click on Reset in section Back to Factory Defaults. To confirm the operation, see paragraph “Update/Store Configuration Setting”.

4) To back up your current system configuration, click on Backup in section Backup Configuration. A configuration file will be created on your computer and displayed as in Figure 115.

5) To restore a system configuration onto your Wifless ESS ProNODE device, browse your computer for the relevant configuration file11 and then click on Upload. The system will take a few seconds to load the configuration file. Confirm the operation as per paragraph “Update/Store Configuration Setting”.

Note: To restore the Backup Flash Configuration, please refer to the paragraph “Reset to Factory Default and Restore the Backup Flash Configuration via MAC Address using the LanReset”.

11 File type: XML.


Page 109 of 152

Figure 115 – Configuration File created on backup

Important Notes Configuration Files are not cross-platforms between major releases. Compatibility is reasonably achievable within two successive minor releases, though some parameters may not be correctly restored even across close software releases. If you experience any problems when attempting a system backup, copy the screen dump of your error pages on a clean MS Word document and submit the document to the Wifless Support Team. Your cooperation will help us fix the problem promptly.


Page 110 of 152

Post Start-up Script Settings You can edit a post start-up script that is executed in background after the start-up (full initialization) of your Wifless ESS ProNODE device. To edit the post start-up script, follow these instructions:

1) From the menu list on the left hand-side of the OpenWifless page, select Maintenance. 2) From the menu bar in the main window, click on tab Postup Script. A page like in Figure 116 will appear.

Figure 116 – Postup Script page

3) Write into the blank page the Linux commands, or other defined scripts, you want to be executed in background after system initialization.

4) Click Apply to store your values, or click Reset to restore previous values. 5) To confirm your new configuration, see paragraph “Update/Store Configuration Setting”.

Important Note Errors in the Post Start-up Script may prevent the Wifless ESS ProNODE device to properly operate and, in the worst case, may lead the system to an unusable state (i.e.: system does not reboot). Systems left in an unusable state must be returned to factory for a complete firmware re-flashing. The firmware re-flashing is an out-of-warranty service.


Page 111 of 152

Restart (Reboot) Command You can easily restart/reboot your Wifless ESS 2456x via the Web GUI. Follow the instructions listed below:

1) From the menu list on the left hand-side of the OpenWifless page, select Maintenance. 2) From the menu bar in the main window, click on tab Restart. A page like in Figure 117 will appear.

Figure 117 – System Restart

3) In the System restart section, click button Restart. The system may take up to 2 minutes to reboot. Important Note If your Wifless ESS ProNODE device fails to reboot within 5 minutes, try forcing a system reboot either by powering off and on your IDU, or by disconnecting and reconnecting your LAN cable. If the problem persists, copy the screen dump of your error pages on a clean MS Word document and submit the document to the Wifless Support Team. Your cooperation will help us fix the problem promptly.


Page 112 of 152

Update/Store Configuration Settings Prior to updating the configuration of your Wifless ESS ProNODE device, a prompt message like that shown in Figure 118 will be displayed in the top right-hand corner of your OpenWifless page; this reminds you that some changes have been made as to your system configuration and that you may want to confirm these changes before they become effective.

Figure 118 – Update Prompt

1) On clicking the Update Prompt, a page like in Figure 119 will appear on your OpenWifless window as a final prompt to confirm your new configuration:

Figure 119 – Updating Flash Configuration

2) On clicking on Update, your new configuration will be saved as Current Flash Configuration and the previous configuration will be moved to Backup Flash Configuration. The Version counter will be increased and a Reboot button will appear as shown in Figure 120; your changes will not be effective until you accept to reboot the system.

Figure 120 – Flash Configuration successfully updated

3) Click Reboot when a reboot of your system is acceptable – please note that all the services being currently delivered will be temporary disrupted. After rebooting the system, your modifications will eventually be effective.


Page 113 of 152

Note about Version number displayed The Current Flash Configuration Version being displayed is automatically determined by the system according to the number of modifications that have been made. Therefore, the OpenWifless page may display a gap between Current Flash Configuration Version and Backup Flash Configuration Version which is greater than 1, as shown in Figure 120. This gap does not affect the current configuration of your Wifless ESS ProNODE device or its functionalities; rather, it is simply related to its history from the time of manufacturing until the latest FW upgrade.


Page 114 of 152

Accessing the Command Line Interfaces The Wifless ESS ProNODE device supports the quite standard Linux kernel 2.6 Command Line Interfaces for the benefit of advanced users. For a detailed description of the available commands and usage, please refer to:

the Linux manuals and documentation (http://www.linux.org/docs/); the Madwifi manuals and documentation included in the Documentation CD ROM supplied.

For security reasons, some Command Line Interfaces are disabled by default as the input of some improper commands into the system may lead it to an unusable state.

SSH Connection • Enabled by default; • Connection settings as follows:

IP Address: same address of Wifless ESS ProNODE device; Port: 22 (default SSH port).

• Login account: Username: root Password: default

To change the password of “root” administrative account, use the Linux standard “passwd” command.

RS 232 Serial Port Local Connection • Enabled by default; • Connection settings are 9.600,8,N,1,N:

Speed (bps): 9.600 Data Bit: 8 Parity: No Stop Bit: 1 Flow Control: None



TCP-IP Telnet Remote Connection • Enabled by default; • Connection settings as follows:

IP Address: same address of Wifless ESS ProNODE device; Port: 23 (default Telnet port).



http://www.linux.org/docs/�


Page 115 of 152

Troubleshooting Tips & Special Wifless ESS Utilities How to View/Get the Startup/Boot Sequence System Log After you Login into the Wifless ESS ProNODE device, browse the URL http://x.x.x.x/startup, where “x.x.x.x” is the IP Address of the device. A page like in Figure 121 will appear:

…

Figure 121 – Startup WEB Page

In the Startup WEB page is shown the sequence of the operations done by the OS from the reboot. Note If the startup operation has been not successfully completed, you will get Error or Warning Messages.

http://x.x.x.x/startup�


Page 116 of 152

How to Know the Radio Links Status If the radio link is well established, after you Login into the Wifless ESS ProNODE device, a page like in Figure 122, for an Access Point device/interface, or as in Figure 123, for a Station device/interface, will appear:

Figure 122 – Access Point HomePage when radio link well established

Figure 123 – Station HomePage when radio link well established

In the Wireless Information Side are the following information: Interface: Description Name of the Radio Interface SSID: Defined SSID. BSSID/MAC: BSSID/MAC of the connected device. If Hide SSID option enabled in the Access Point, no SSID information

displayed. Channel: Channel defined in the Access Point SNR: Signal to Noise Ratio measured value of the radio link RSL/Noise: Received Signal Level and Noise measured values. Rate: Trasmission Rate Tx Power: Tx Power defined value. Between brackets if ATPC changes it. Security: Security Protocol used. Link Uptime: Time from last Radio Link establishment.

In the Scanning Information Side (ONLY in Station!!) are the following information:

Interface: Description Name of the Radio Interface SSID: Defined SSID BSSID: BSSID of the connected Access Point. If Hide SSID option enabled in the Access Point, no SSID information displayed. Channel: Channel defined in the Access Point Beaconn RSL: Beacon Signal to Noise Ratio measured value of the radio link Max. Rate: Maximum Trasmission Rate Information Elements: Information Elements about Radio Link Supported Features and Vendor Specific Parameters (these

information are broadcasted by the Beacons) Security: Security Protocol used. Interval: Beacon Time Interval (milliseconds)

In the Ethernet Information Side are the following information:

Interface: Description Name of the Ethenrnet/Switch Interface MAC: MAC Address of the Ethenrnet/Switch Interfaces connected with IP: IP Address of the Ethenrnet/Switch Interfaces connected with


Page 117 of 152

If something wrong, can happens that the wireless information side is empty or all the informations are written in red color as in Figure 124 and Figure 125:

Figure 124 – Station Association Problems

Figure 125 – Access Point Association Problems due to Security Mismatch


Page 118 of 152

Reset to Factory Default and Restore the Backup Flash Configuration via MAC Address using the LanReset tool The LanReset tool is useful to reset to Factory Default and to restore the Backup Flash Configuration of the Wifless ESS ProNODE device via the Ethernet MAC address. This utility, mainly needed when the device IP is forgot or when the device does not correctly boot and operate, uses special EAPOL Ethernet frames. To use it, you will only need to have the physical L2 Ethernet connection to the device and to know its Ethernet MAC address.

LanReset for Windows XP To use LanReset version for Windows XP, please follow the instructions below:

1) Take care to use a PC/Laptop with Microsoft Windows XP 32bit edition. LanReset for Windows works only on Windows XP 32 bit edition.

2) Enable in your PC/Laptop the Wireless Zero Configuration service: 3) In Start Run type “service.msc”: this command open the services window where it is possible to find the

Wireless Zero Configuration as in the following Figure 126.

Figure 126 – Services window

4) Select Wireless Zero Configuration and change the Startup Option from Manual to Automatic, like in Figure 127, then the service is enabled.


Page 119 of 152

Figure 127 – Wireless Zero Configuration Startup option

Reset to Factory Default

To reset to Factory Default settings please follow the instructions below: 1) Copy the file lanreset.exe in the directory you want and then issue the command

lanreset device_mac_address default default

taking care to type the MAC address without the “:” separators, as shown in Figure 128:

Figure 128 – Windows LanReset default command output

2) The Wifless ESS ProNODE device will restart to its factory Default settings. Do not worry if you get erros from Windows CLI, as reported in Figure 128, it is only a matter of Windows, the lanreset tool worked fine anyway. Wait for your Wifless ESS ProNODE device to reboot and access it at its Factory Default IP Address, 192.168.2.100.

Restore to Backup Flash Configuration To restore to the Backup Flash Configuration settings please follow the instructions below:

1) Copy the file lanreset.exe in the directory you want and then issue the command

lanreset device_mac_address default revert



Page 120 of 152

Figure 129 –Windows LanReset revert command output

2) The Wifless ESS ProNODE device will restart to its Backup Flash Configuration settings. Do not worry if you get erros from Windows CLI, as reported in Figure 128, it is only a matter of Windows, the lanreset tool worked fine anyway. Wait for your Wifless ESS ProNODE device to reboot and access it at its Backup Configuration IP Address.

LanReset for Linux To use LanReset version for Linux, copy the file lanreset in the directory you want.

Reset to Factory Default To reset to Factory Default settings please follow the instructions below:

1) Issue the following command from the directory where you copied Lanreset

.\lanreset device_mac_address default default


Figure 130 – Linux LanReset default command output.

2) The Wifless ESS ProNODE device will restart to its factory Default settings. Wait for your Wifless ESS ProNODE device to reboot and access it at its Factory Default IP Address, 192.168.2.100.

Restore to Backup Flash Configuration To restore to the Backup Flash Configuration settings please follow the instructions below:

1) Issue the following command from the directory where you copied Lanreset

lanreset device_mac_address default revert


Figure 131 – Linux LanReset revert command output.

2) The Wifless ESS ProNODE device will restart to its Backup Flash Configuration settings. Wait for your Wifless ESS ProNODE device to reboot and access it at its Backup Configuration IP Address.


Page 121 of 152

Tx99 Special Tool This tool is useful whenever is needed to have a radio interface continuosly transmit multicast packets at the maximum allowed throughput. Typical applications of tx99 tool are:

Measurement of the RF Tx Power To simplify the antennas alignment of long-haul links To test performace with heavy background radio traffic

To use tx99, please follow the instructions below:

1) Access the device CLI via SSH or Telnet (SSH is preferred for security). 2) Run tx99 with the proper parameters as shown in the usage dump screen in the following Figure 132:

Figure 132 –tx99 Command usage output

3) The usage of the tool is as follow:

• Interface: the name of the radio interface that you want to have sending the multicast traffic • Time: the duration of the transmission in seconds (set -1 for never ending transmission) • Random: this option force tx99 to transmit radio frames filled with random data instead of having the default 0s padding • MTU: size of the radio frame in bytes • Slave: option to have tx99 running in slave mode, receiving the radio frames sent by the master and displaying the received

rate and metering details 4) Carefully remember that tx99 always transmits traffic at the maximum allowed throughput, so it tends to use

all the radio and system resources available. So, it is kindly suggested to not run tx99 on network element(s) having valuable service traffic enabled.


Page 122 of 152

Main Useful CLI Commands Save the Current and Backup Configurations To save the Current and Backup Configurations (also referred as Config1 and Config2) in the Wifless ESS ProNODE device using CLI instead of the Web GUI procedure described in the “Configuration Backup, Restore and Factory Default Settings”, please follow the instructions below:

1) Access the device CLI via SSH or Telnet (SSH is preferred for security). 2) Issue the command saveconfig as shown in Figure 133.

Figure 133 – Saveconfig command

3) Issue the command saveconfig 1, as shown in Figure 133, to save the main configuration (usually the current) and/or issue the command saveconfig 2 to save the backup configuration.

The two files are saved in the directory /tmp with the names Config-hostname.domain_name-YYYYmmDDHHMM-1.xml and Config-hostname.domain_name-YYYYmmDDHHMM-2.xml as shown in the following Figure 134:

Figure 134 – Saved file names


Page 123 of 152

Reset of the Password of the Web Admin Account To reset to Factory Default value the Wifless ESS ProNODE device Password for Web Admin Account, we developed a tool named ResetWebPwd: this utility helps you to recover the Password of the Web Admin Account resetting it to its default value, that it means default.

ResetWebPwd To use ResetWebPwd, please follow the instructions below:

1) Access the device CLI via SSH or Telnet (SSH is preferred for security). 2) Change to /usr/lib/sysconfig/ directory. 3) Issue the command ./resetwebpwd.esc as shown in Figure 135:

Figure 135 – ResetWebPwd Directory

4) The Password is automatically changed and it will works on the next Web access. Get the System Inventory To get via CLI a useful device system inventory report, is possible to use the getinventory command. To use the getinventory command, please follow the instructions below:

1) Access the device CLI via SSH or Telnet (SSH is preferred for security). 2) Type getinventory and click enter: you will get a screen dump as the following in:

Figure 136 – GetInventory Command output


Page 124 of 152

Get the Operating System Version To know via CLI the firmware version installed and running on the Wifless ESS ProNODE device, there is the command named version. To use the version command, please follow the instructions below:

3) Access the device CLI via SSH or Telnet (SSH is preferred for security). 4) Type version and click enter: you will get a screen dump as the following in Figure 137:

Figure 137 – Version Command output

ps Command The Linux ps command is used to list all the processes active (currently running) in the system. To use ps command, please follow the instructions below:

1) Access the device CLI via SSH or Telnet (SSH is preferred for security). 2) Type ps and click enter, you will get a screen dup as shown in Figure 138:

Figure 138 – Ps Command output


Page 125 of 152

dmesg Command The Linux dmesg command prints-out the boot-up diagnostic messages, so it is very useful for troubleshooting hardware errors or start-up scripts errors. To use dmesg follow the instructions below:

1) Access the device CLI via SSH or Telnet (SSH is preferred for security). 2) Issue the command dmesg, you will receive the whole boot sequence dump, like the one shown in Figure 139:

…

Figure 139 – Dmesg Command output


Page 126 of 152

logread Command The Linux logread command prints-out the boot-up diagnostic messages in a more detailed way than the dmesg command, stamping also the date and time information for each logged event. Security related logs about WPA/WPA2 rekeying and Radius AAA logs are reported. To use logread follow the instructions below:

1) Access the device CLI via SSH or Telnet (SSH is preferred for security). 2) Issue the command logread, you will receive the whole boot sequence dump, like the one shown in Figure

140:

…

Figure 140 – Logread Command output


Page 127 of 152

iwconfig and ifconfing Commands The Linux iwconfig and ifconfig commands are used to set many common parameters of the most used devices. To properly use ifconfig standard Linux command, please refer to the Linux Hot-to guide (not included in the Documentation CD ROM). To properly use iwconfig standard Madwifi command, please refer to the official Atheros Madwifi manual included in the Documentation CD ROM supplied. To basically use the iwconfig command, please refer to its usage follow the instructions below:

1) Access the device CLI via SSH or Telnet (SSH is preferred for security). 2) Type iwconfig –h and click to get the usage help as shown in the following Figure 141:

Figure 141 – Iwconfig Command usage output

atop Command The Linux atop command is an interactive monitor to view the system load of a Linux system. It shows the load/occupation of the most critical hardware-resources (from a performance point of view) of the system (i.e.: CPU, memory, disk, network interfaces). It also shows which processes are responsible for the main system load/overload. To use atop command, please follow the instructions below:

1) Access the device CLI via SSH or Telnet (SSH is preferred for security). 2) Type atop and click enter receiving a screen like in the following Figure 142 and Figure 143:

Do not take care of the initilization warning message, it is just for information

Figure 142 – Atop initialization output


Page 128 of 152

Figure 143 – Atop Command typical output

Tip & Trick: Use the command “atop -1” to have the screen updates every second. watch Command The Linux watch command is useful to execute a program, or a script periodically. To use watch command, please follow the instructions below:

3) Access the device CLI via SSH or Telnet (SSH is preferred for security). 4) Type watch and click enter receiving a screen like in the following Figure 144:

Figure 144 – Watch Command usage output

5) To execute the program athstats –i wifi0 each 1 second type the command as in the following Figure 145:

Figure 145 – Watch Command typical usage


Page 129 of 152

Appendix A Ethernet/PoE IP67 Lock-in-type and RJ45 Connectors Wiring Diagram The Wifless ESS ProNODE device employs high quality ETH/LAN port circular lock-in-type connectors IP67 rated. The circular lock-in-type connectors pin-outs (wiring) are compliant with the EIA-TIA T568B standard for performance and cabling rules and with the IEEE 802.3af/at standard for PoE wiring. Figure 146 and the next show the pin-outs, respectively for the IP67 circular lock-in-type and for the RJ45 parent connectors.

Figure 146 - IP67 ETH/PoE Connector (Front view) Figure 147 - Standard RJ45 Shielded Connector (Front view)

Standard EIA-TIA T568B

Cable Color:

Standard RJ45 Connector EIA-TIA 568B Pin:

Wifless ESS IP67 ETH

Connector Pin:

IEEE 802.3af/.at Standard Use:

White-Orange 1 1 Pair 2 – Ethernet Tx or Rx Orange 2 2 Pair 2 – Ethernet Tx or Rx White-Green 3 3 Pair 3 – Ethernet Rx or Tx Blue 4 4 Pair 1 – PoE +VDC White- Blue 5 5 Pair 1 – PoE +VDC Green 6 6 Pair 3 – Ethernet Rx or Tx White-Browne 7 7 Pair 4 – PoE -VDC Browne 8 8 Pair 4 – PoE -VDC Shield / Nude wire 9 9 Protective Ground / Shield Shield / Nude wire 9 10 Protective Ground / Shield

Table 3 – Match between wires (colors) and pin numbers

10

12

3

5

7

9

4

6

8

9-10 GND Shield

10

12

3

5

7

9

4

6

8

9-10 GND Shield

8 7 6 5 4 3 2 1

8 7 6 5 4 3 2 1

1-2 Eth Tx

3-6 Eth Rx

9 GND Shield

4-5 (+)7-8 (-)

8 7 6 5 4 3 2 1

8 7 6 5 4 3 2 1

1-2 Eth Tx

3-6 Eth Rx

9 GND Shield

4-5 (+)7-8 (-)


Page 130 of 152

When assembling your indoor-to-outdoor cable, follow the EIA-TIA-568A/B wiring guidelines on cable pairing, twisting, total cable length, welding and crimping. Use professional crimping tools designed for the RJ45 standard. As per EIA/TIA-568A/B, your Channel Link must not exceed 110 m in length. See Figure 148 for a definition of Channel Link.

Figure 148 – EIA-TIA 568A/B Channel Link

Therefore, your ODU must not be placed further than 110 m apart from the first network device you intend to connect to your ODU. This first network device may be either your PC, a server, a LAN Ethernet switch, or a front-end IP router. The position of your IDU corresponds either to the Cross Connect or to the Outlet in Figure 148. Therefore, your IDU must not be placed further than 90 m apart from your ODU. This is the maximum length allowed for your indoor-to-outdoor FTP cable.


Page 131 of 152

Serial IP67 Lock-in-type and D-SUB 9-pin Connectors Wiring Diagram The Wifless ESS ProNODE device employs a high-quality SERIAL port, circular lock-in-type connectors IP67 rated, to provide connectivity to both the RS 232 and the RS 422/485 serial ports available. Figure 150 shows the pin-out of the circular IP67 circular lock-in-type connector and the Figure 149 shows the pin-out of a standard 9-pin serial port connector. Table 4 shows the complete pin-assignment of the IP67 SERIAL connectors to the Standard RS 232 and RS 422/485 signal lines.

Standard RS 232 EIA/TIA 562

Pin name:

Standard RS 422 & RS 485 EIA/TIA 422/485

Pin name:

Wifless ESS IP67 SERIAL

Connector Pin:

Notes:

- - 1 Not used TxD or Tx Transmit Data

2

RxD or Rx Received Data

3

GND Protective Ground

GND Reference Common Ground

5 Common GND to both RS 232 and RS 422/485 serial ports

RX- Negative Line Receive Data

4

RX+ Positive Line Receive Data

6

TX- Negative Line Transmit Data

7

TX+ Positive Line Transmit Data

8

Table 4 – SERIAL IP67 port pin-outs of the RS 232 and RS 422/485 ports

Figure 150 - IP67 SERIAL Connector - Front View Figure 151 - Standard D-SUB 9-pin Connector - Front View

Notes The RS 232 Standard allows for a max cable length of 15 m, however the RS 232 driver used in the ProNODE device could allow more depending by the parent device performance. The RS 422/485 Standard allows for a max cable length of 500 m, however the RS 422/485 driver used in the ProNODE device could allow more depending by the parent device performance.

14

12

3

6

10

5

9

12

9-10 GND Shield

4

8 7

111314

12

3

6

10

55

9

12

9-10 GND Shield

44

88 77

1113

1

5

6

9

1

5

6

9


Page 132 of 152

In accordance with EIA/TIA-232E and EIA/TIA-562 standards, a complete RS 232 serial port matching chart is displayed in Table 5.

Standard D-SUB 9-pin EIA/TIA 562

Pin name:

Standard D-SUB 9-pin EIA/TIA 562 Connector Pin:

Wifless ESS IP67 Special

Connector Pin:

Standard D-SUB 9-pin EIA/TIA 562

Pin Description: DCD 1 - Data Carrier Detect RxD o Rx 2 3 Received Data TxD o Tx 3 2 Transmit Data DTR 4 5 Data Terminal Ready GND 5 9 - 10 Protective Ground DSR 6 4 Data Set Ready RTS 7 7 Request To Send CTS 8 6 Clear To Send RI 9 - Ring Indicator

Table 5 – Match between pin-outs of the RS 232 Console Serial Port


Page 133 of 152

Appendix B Max RF Output Power as per Country Rules and Selected Antenna Attention! Read these notes carefully before you attempt to operate the equipment!

Legal Notes for EU - ETSI Countries - Attention! This equipment is compliant with the EU Directive R&TTE 1999-05-CE, however it is subject to Local Country Usage Limitation and Restriction. Prior to operation, consult your local Radio Regulatory Authority. The Technical Construction File is available for authority inspection at the Essentia S.p.A. R&D Department based in Via G.B. Vico, 29 - 42100 Reggio Emilia (RE), Italy. For additional details, feel free to contact us at [email protected]: we will be glad to assist you in getting in touch with our local Qualified Partners or with your Country Radio Regulatory Authority.

Legal Notes for USA & Canada - FCC Countries - Attention! This equipment is compliant with the FCC Rule Parts 15C & 15E, however its operation is subject to the condition that it may not cause harmful interference. The usage of this device may be subject to Local Country Usage Limitation and Restriction. Prior to operation, consult your local Radio Regulatory Authority. The Technical Construction File is available for authority inspection at the Essentia S.p.A. R&D Dep, based inVia G.B. Vico, 29 - 42100 Reggio Emilia (RE), Italy. For additional details, feel free to contact us at [email protected]: we will be glad to assist you in getting in touch with our local Qualified Partners or with your Country Radio Regulatory Authority. Attenzione! Leggere con attenzione questo documento prima dell’uso!

Note Legali Specifiche per l'Italia - Attenzione! Questo prodotto è conforme ai requisiti essenziali della Direttiva Europea 1999-05-CE, recepita con il D.L.vo 9/05/2001 n. 269 e sue successive modifiche ed integrazioni, incluso quanto previsto dalla Decisione UE 2005-513-CE, per tanto l’uso dello stesso è soggetto all’ottemperanza di quanto previsto dal D.Lgs. 1/08/2003 n. 259 e sue successive modifiche ed integrazioni. In particolare si avvisa che l’uso è soggetto a limitazioni di potenza e di frequenza impiegabili, come pure è soggetto all’ottenimento di Autorizzazione Generale se utilizzato al di fuori di propri fondi. Il TCF è a disposizione delle Autorità Competenti presso Essentia S.p.A., Direzione Tecnica, Via G.B. Vico, 29 - 42100 Reggio Emilia (RE). Per maggiori ragguagli e per una prima assistenza, non esitate a contattarci scrivendo a [email protected], saremo lieti di fornirvi i più ampi dettagli in merito alle normative vigenti e ad assistervi mettendovi in contatto con il ns. più vicino Rivenditore Qualificato o con l’Ispettorato Territoriale del Ministero delle Comunicazioni di vs. competenza. Why I need to read the notes above? Radio Regulations are in continue evolution worldwide due to the acts of local authorities, and so are the consequent technical restrictions. As a result, you need to be notified of any limitation imposed on the use of the product by your local authority. In order to meet these legal requirements, we strongly recommend that you consult your local supplier and your Radio Regulatory Authority about any limitations on RF parameters, such as output power and frequencies allocation or RF channel bandwidth availability. For general information on Radio Regulatory, refer to the official Atheros White Paper “Atheros Regulatory whitepaper.pdf” provided along with the Wifless Documentation CD Rom. Up-to-date Atheros WP releases can be freely downloaded at http://www.super-ag.com/papers.html. For further detailed information about technical limitations in the major countries, refer to:

ETSI for European Union areas of operation (http://www.etsi.org/) FCC for United States of America and Canada areas of operation (http://www.fcc.gov/) TELEC for Japan areas of operation (http://www.telec.or.jp/)

European Union Specific Basic ETSI Rules In accordance with the European Decision EU Dec 2005/513/CE, the following band-specific limitations to the

Equivalent isotropically radiated power (EIRP) apply12: In the band 2.4-2.4835 GHz, the max EIRP is of 100 mW = 20 dBm In the band 5.15-5.35 GHz, the max EIRP is of 200 mW = 23 dBm with DFS and ATPC In the band 5.47-5.725 GHz, the max EIRP is of 1 W = 30 dBm with DFS and ATPC

12 For a more detailed overview of EIRP restrictions, see the documentation in the CD-ROM supplied with the equipment.

mailto:[email protected]�



http://www.super-ag.com/papers.html�

http://www.etsi.org/�

http://www.fcc.gov/�

http://www.telec.or.jp/�


Page 134 of 152

ETSI Max RF Tx Power Calculation Formula for your Antenna Considering these max EIRP limitations, the max Tx power allowed can be computed with the following simple formula (in dBm in accordance with the equipment menu field): Max_Tx_Power_Allowed (in dBm) = Max_EU_Allowed_EIRP_in_that_band (in dBm) – Selected_Antenna_Gain (in dBi) + Selected_RF_Cable_Insertion_Loss. So, for example, if we set up an outdoor point-to-point link in the 5.6 GHz band, connecting the antenna WFL PPA 56-23 through the RF cable kit WFL EKCRF02, the formula will be: Max_Tx_Power_Allowed (in dBm) = 30 – 23 + 2 = 9 dBm Therefore, the maximum value for selection in the Tx Power field of your radio interface will be 9 dBm. Important Notes on Conformity In order to maintain the Essentia EU Declaration of Conformity valid and to act in accordance with the EU Directive R&TTE 1999/05/CE and with the EU Decision 2005/513/CE, you must:


Normative Tecniche Specifiche per il Mercato Italiano (ETSI Italia) In accordo con la Decisione Europea EU 2005/513/CE è necessario rispettare i limiti di potenza EIRP e di densità spettrale di potenza definiti, come indicato nel documento originale incluso nel CD Rom che accompagna l’apparato, e come sinteticamente qui di seguito riportiamo (solo i valori massimi di EIRP):

Nella banda 2.4-2.4835 GHz, la EIRP massima ammessa è di 100 mW = 20 dBm o In tale banda è ammesso sia un uso Indoor che Outdoor

Nella banda 5.15-5.35 GHz, la EIRP massima ammessa è di 200 mW = 23 dBm con DFS ed ATPC o In tale banda è ammesso solo un uso Indoor

Nella banda 5.47-5.725 GHz, la EIRP massima ammessa è di 1 W = 30 dBm con DFS ed ATPC o In tale banda è ammesso sia un uso Indoor che Outdoor

Formula ETSI per il Calcolo della Potenza Max Applicabile in Antenna In considerazione di questi limiti sull’EIRP massimo, la massima potenza RF impostabile sull’apparato può essere così semplicemente calcolata (espressa in dBm in accordo con l’unità metrica utilizzata nel menù di configurazione dell’apparato): Max_Tx_Power_Impostabile (in dBm) = Max_EIRP_ammesso_nella_banda_selezionata (in dBm) – Guadagno_ Antenna_Selezionata (in dBi) + Perdita_Introdotta_Cavo_RF_Selezionato. Per esempio, considerando di voler correttamente configurare un apparato preposto alla realizzazione di un punto-punto outdoor sulla banda dei 5.6 GHz, utilizzando un’antenna tipo WFL PPA 56-23 collegata con un cavo RF tipo WFL EKCRF02, la formula di calcolo sarà: Max_Tx_Power_Impostabile (in dBm) = 30 – 23 + 2 = 9 dBm Quindi, “9” sarà il massimo “numero” che si dovrà impostare nel campo “Tx Power” della relativa interfaccia radio. Note Tecniche Importanti Per garantirsi la validità della Dichiarazione di Conformità CE originale emessa da Essentia e per garantirsi che l’operatività dell’apparato nel suo complesso sia conforme alla Direttiva R&TTE 1999/05/CE ed alla Decisione 2005/513/CE è necessario:

Usare solo antenne Essentia Wifless originali ed approvate per l’apparato radio specifico impiegato Usare solo cavi RF Essentia Wifless originali ed approvate per l’apparato radio specifico impiegato Non dimenticarsi di impostare correttamente il parametro di Radio Country Code con il codice “380: ITALY

Reg: 55”


Page 135 of 152

Appendix C Contacting the Wifless Support Team Preliminary Note In order for you to enjoy prompt technical support in your own language, your first port of call should be your local supplier. Usually, your local supplier is also our local reseller, and your best bet for 1st level assistance as they are familiar with your application domain and its typical problems. In addition, our local representative can promptly issue an RMA for the product to be returned to our facility for repairs. Our local representative will be responsible for the shipment. What we need Make sure you can provide the Wifless Support Team with the following information:

i. Serial Number and Model/Item Code of your Wifless ESS equipment. ii. Screen dumps of status pages on a clean MS Word document. iii. A copy of your configuration file; see instructions in paragraph “Configuration Backup,

Restore and Factory Default Settings”. iv. A description of your application scenario and nearby network configuration.

Your cooperation will enable us to fix the problem quickly. If you seem to have any problems with your Wifless ESS equipment, escalate as follows:

1) Contact your Local Supplier, whom is usually our Qualified Local Reseller and System Integrator as well. They will provide 1st level support in your language and contact local qualified on-site engineers if you need a call-out. Your supplier is your best bet for quick problem resolution and replacement of faulty units.

2) Contact our Official Distributors for your country. If your Local Supplier has been unable to provide a satisfactory solution to your problem or request, our accredited distributors operating in your country will give you further assistance in your language. For a list of our Official Distributors in your country, just email us at [email protected] typing "Looking for Official Distributors in my country" into the Subject and inserting your full address in the body of text. Our support team will reply to you in English within one business day, according to Italy local time and business calendar. We can arrange for our distributor to contact you directly.

3) Contact Essentia Wifless Support. If neither your supplier nor your distributor has been able to assist you satisfactorily, or if you prefer to get in touch with us directly, just email us at [email protected] typing "Asking for direct support" into the subject and inserting your full address in the body of text. Provide a detailed description of your problem. The Wifless Support Team will take care of your email to determine the cause of your problem. If our support team detects any problem (HW or SW) affecting your equipment, a reply in English will be sent within five business day, according to Italy local time and business calendar. If your email does not describe an actual problem with your equipment - i.e. you just need help on system setup - the Wifless Support Team may not reply to your email, or will simply ask you to raise a ticket for it.




Page 136 of 152

Appendix D Product and Company Certifications

CE Declaration of Conformity for Wifless ESS 24561 Rev. A


Page 137 of 152

CE Declaration of Conformity for Wifless ESS 24562 Rev. B


Page 138 of 152

CE Declaration of Conformity for Wifless ESS 24564 Rev. A


Page 139 of 152

CE Declaration of Conformity for Wifless WFL R108F25X(B) Radio Module


Page 140 of 152

ETSI R&TTE 99-05 Certification for Wifless WFL R108F25X(B) Radio Module


Page 141 of 152

CE Declaration of Conformity for Wifless WFL R108F25HP Radio Module


Page 142 of 152

ETSI R&TTE 99-05 Certification for Wifless WFL R108F25HP Radio Module


Page 143 of 152

Company ISO 9001 : Vision 2000 Certificate


Page 144 of 152

Appendix E Waste Equipment Disposal Instruction

Disposal of Waste Equipment by Users in Private Households in the European Union The crossed trash can symbol on the product or on its packaging indicates that this product must not be disposed of with your other household waste. Instead, it is your responsibility to dispose of your waste equipment by handing it over to a designated collection point for the recycling of waste electrical and electronic equipment. The separate collection and recycling of your waste equipment at the time of disposal will help to conserve natural resources and ensure that it is recycled in a manner that protects human health and the environment. For more information about where you can drop off your waste equipment for recycling, please contact your local city office, your household waste disposal service or the shop where you purchased the product.

Smaltimento di apparecchiature da rottamare da parte di privati nell'Unione Europea Il simbolo del bidone dei rifiuti barrato che appare sul prodotto o sulla confezione indica che il prodotto non deve essere smaltito assieme agli altri rifiuti domestici. Gli utenti devono provvedere allo smaltimento delle apparecchiature da rottamare portandole al luogo di raccolta indicato per il riciclaggio delle apparecchiature elettriche ed elettroniche. La raccolta e il riciclaggio separati delle apparecchiature da rottamare in fase di smaltimento favoriscono la conservazione delle risorse naturali e garantiscono che tali apparecchiature vengano rottamate nel rispetto dell'ambiente e della tutela della salute. Per ulteriori informazioni sui punti di raccolta delle apparecchiature da rottamare, contattare il proprio comune di residenza, il servizio di smaltimento dei rifiuti locale o il negozio presso il quale è stato acquistato il prodotto.


Page 145 of 152

Appendix F Copyrights, Trademarks and Credits

Copyrights Linux kernel is © by Linus Torvalds and used under GNU GPL V2 license. OpenIXP Original Applications Embedded within the OpenWifless™ ESS Operating System are © of Essentia S.p.A. OpenWifless™ Original Applications and Protocols/Stacks are © of Essentia S.p.A. and/or of its controlled company OpenWifless K.f.t. – Gruppo Essentia. All other Linux’s Applications Embedded within the OpenWifless™ ESS Operating System are © by the respective owners and used under GNU GPL V2 license or Free BSD license. Intel IXP 400 Software, Drivers and Microcodes are © of Intel Corporation and used under Intel’s authorisation. Atheros AR 5005 and 5006 HAL and related Software are © of Atheros Corporation and used under Atheros’ authorisation and license. Source codes of the GNU GPL V2 and Free BSD licensed software modules embedded within the OpenWifless™ ESS Operating System are available on request from the OpenWifless Support Team. Software modules modified by Essentia are available directly from the official download area of the related development team. For any issue or for any details about the Open-Source modules embedded in the OpenWifless™ ESS Operating System, contact our Wifless Support Team writing to [email protected]. For any legal issue related to software Copyrights or use of licences, contact the Essentia Legal Department in any of the following way:

Email [email protected]; Fax +39 0522 948.333 to Attention of the “Legale Rappresentante”; Write to Essentia S.p.A., Via G.B. Vico 29, 42100 Reggio Emilia (RE), Italy, specifying “Attention of the

Legale Rappresentante”.

Trademarks Essentia®, Advasu™, Nexit™, Wifless™, OpenWifless™ and/or other products and/or services referenced herein are either registered trademarks, trademarks or service marks of Essentia S.p.A., Italy. Intel®, XScale™, IXP™ 400 and/or other similar products referenced herein are either registered trademarks, trademarks or service marks of Intel Corporation, USA. Atheros®, SuperG/AG™, eXtended Range™ and/or other similar products and/or services referenced herein are either registered trademarks, trademarks or service marks of Atheros Corporation, USA. All other names are or may be the trademarks of their respective owners.




Page 146 of 152

Appendix G The Latin Sentences Dear reader, hoping you will enjoy to know the meaning of the Latin sentences that come along with our trademarks Wifless™ and OpenWifless™, we provide you herein the “literal translation” and the “real meaning” we want to communicate.

ALEA IACTA EST ALEA IACTA EST (pronunciation [‘jakta ‘a:lɛa ɛst], but all in capital letters because lower case simply was not yet invented at that time!) is the Latin sentence that means “The die has been cast”. The ancient writer Suetonius reported that the Roman leader Julius Caesar (the correct name writing is GAIVS JVLIVS CÆSAR) said it on the night of January 12, 49 BC (yes, more than 2000 years ago!), as he led his army across the River Rubicon in northern Italy, violating the Law of that time. With this step, he entered the domestic country heading his army against the Roman Senate, becoming the “dictator” Julius Caesar and beginning his long civil war against Pompey and the Optimates. The phrase is still used today to mean that events have passed a point of no return. With the establishment of the Wifless™ brand and phylosophy, Essentia wants to strongly highlight that a new disruptive generation of advanced networking products arrived on the market challening the major vendor and changing the level of the competition. As has been for us developing our exceptional Wifless™ products, you should experience the same new fantastic feeling of innovation and extreme performace using our products. If so it will be, you should feel something so disruptive that it will make you in love with our products and, at that time, ALEA IACTA EST!

FABER FORTVNÆ QVIVSQVÆ FABER FORTVNÆ SVÆ EST is an other very famous Latin sentence that means “Every man is the maker of his own fortune”. The sentence is ascribed to the Roman “consol” Appius Claudius Caecus by the Roman senator Gaius Sallustius Crispus and dated aroud the 50 BC. Sallustius used this famous sentence in the first two letters he wrote to Julius Caesar “senator”. The meaning of the sentece is extremely clear and simply underline that the life of everybody is quite totally in himself capability and obstinacy. We use this sentence to underline the flexibility and the virtually ulimited operating capabilities of our OpenWifless™ operating systems that totally unleashed the power of your mind. With our OpenWifless™ operating systems you are really the FABER FORTVNÆ of your network!


Page 147 of 152

User Notes


Page 148 of 152

User Notes Page 2


Page 149 of 152

User Notes Page 3


Page 150 of 152

User Notes Page 4


Page 151 of 152

User Notes Page 5


Page 152 of 152

& ESS

Technologies Powered by Essentia

Documents

Essentia Wifless ESS PN25x (HW All) & ESS 2456x (HW 2.1x) Basic System Manual - OpenWifless ESS ProNODE Ver 1.45 - 20090120