## Configure System Parameters

The Intel® PRO/Wireless 2011B LAN Access Point provides configuration options to control operation, including security access and interface control. Some parameters do not require modification.

### Web Interface

1. Under Configuration on the left side of the screen, click System.
2. Configure the direct-sequence channel settings for the specific region by typing a number in the Channel field.
3. Configure the access point system settings as required.
4. After changing the settings, click Save Settings at the bottom of the screen.

### Management Console

1. Select Set System Configuration from the Main Menu.
2. Configure the direct-sequence channel settings for the specific region by typing a number in the Channel field.
3. Configure the access point system settings as required.
4. Select OK or Save to save changes.
5. Select Save ALL APs-[F2] to save the System Configuration information to all access points with the same Network Name (SSID). This option saves the configuration changes for the current access point, and sends two messages to all other access points on the Known APs table to update their configuration and reset after the configuration has been modified. You can perform this option only among the same hardware platforms and same firmware versions.

### Parameter Descriptions

Channel | Use to manually set the access point to a specific channel. Because permitted channels can differ based on geographic location, refer to the direct-sequence channel settings for the channels used in your region.
Auto Channel Select | Typically run once during initial installation. Power up the access point and select Auto Channel Select. The access point scans all channels and selects a non-overlapping channel with the fewest access points. The access point saves the changes in NVM (the power LED flashes during this process) and turns off Auto Channel Select. The access point LEDs flash as if powering up and return to a STATUS-flashing state when complete. Non-overlapping channels have 25-Mhz separation beginning at the first allowed channel for the country (for the US and most of Europe, channels 1, 6 and 11 are be used). The channel selection process groups all wirelessly detected access points into non-overlapping bands and then compares the quantities of access points with received signal strengths above the average signal strength. Ties are broken based on the access point MAC address.
Ethernet Timeout | Disables radio interface if no activity is detected on the Ethernet line after the number of seconds indicated (30 - 255). The access point disassociates clients and prevents further associations until it detects Ethernet activity. The default value 0 disables this feature. The 1 value detects if the 10Base-T line goes down. If the value is set to 2 and the WLAP has connected to the root access point, the WLAP sends a WLAP Alive BPDU on the Ethernet line every WLAP Hello Time seconds to allow WLAPs on the Ethernet line to detect its existence. If the value is set to 3 , the WLAP tracks the WLAP Alive BPDU. If the BPDU is missing for WLAP Hello Time seconds, the WLAP state changes to WLAP Lost on Ethernet. Once the WLAP Alive BPDU is detected, the WLAP resets and starts over. When the Ethernet connection is broken the access point clears the client computer table and disables the RF interface until the Ethernet connection returns.
Telnet Logins | Specifies if the access point accepts or rejects Telnet Logins. The default value is Enabled. To change this feature in the Web interface, select Security Setup from the Configuration menu.
Encryption Admin (console only) | Indicates which interface can change the encryption keys and the encryption key index. Without admin privileges you cannot change this parameter, or view the encryption keys. Any: allows anyone with admin privileges to change encryption keys using a Web browser, Telnet, or the serial port. Serial: limits changing encryption keys to access through the serial port.
Agent Ad Interval | Specifies the interval, in seconds, between the mobility agent advertisement transmission.
Mobile IP | If enabled, this feature allows clients to roam across routers.
Mobile-Home MD5 key | Secret key used for Mobile-Home registration and authentication.
MU-MU Disallowed | If enabled, clients associated with the same access point are not allowed to communicate with each other.
Web Server (console only) | Enables the use of a Web browser to manage the access point instead of HyperTerminal* or Telnet applications. An access point reset is required for this feature to take effect.
System Password Admin | Allows you to change the passwords for the access point. This screen can be accessed only when the access point is in Telnet mode. Serial mode provides read-only privileges and does not allow anyone to view this screen. To change this feature in the Web interface, select Security Setup from the Configuration menu.
Access Control | Specifies enabling or disabling the access control feature. If enabled, the Access Control List (ACL) specifies the MAC addresses of clients that can associate with this access point. The default is Disabled. To change this feature in the Web interface, select Security Setup from the Configuration menu.
Type Filtering | Specifies the filter type for packets received — Forward/Discard or Disabled. The default value is Disabled. To change this feature in the Web interface, select Filtering Setup from the Configuration menu.
WNMP Functions | Specifies if the access point can perform WNMP functions. The default value is Enabled.
AP-AP State Xchg | Enables or Disables the access point-to-access point communication exchange.
Inactivity Timeout | If no activity is detected within a specified amount of time (default 5 minutes) the user is automatically logged out of a telnet session to the access point.

### Enable/Disable a Specific Interface

To enable or disable interfaces on the access point, modify the following parameters:

Ethernet Interface | Enables or disables wired Ethernet. The default value is On.
RF Interface | Enables or disables radio. The default value is On.
Default Interface | Specifies the default interface (Ethernet or WLAP) that the access point forwards a frame to if the access point cannot find the address in its forwarding database. The default interface is Ethernet.

## System Password Administration

Use this screen to configure the passwords for the access point. The user password allows the user to use a Telnet session or serial port to connect to the access point and have read-only privileges. While using the serial port in an Admin mode session, the session does not time-out. To change this feature in the Web interface select Security Setup from the Configuration menu.

| CAUTION: Entering the Admin mode with both the Telnet and Serial Port menus active enables Admin mode on both interfaces. This can give an unauthorized user admin-level access if that user Telnets into the access point while the admin security level is enabled.

1. To access and change the System Passwords, select System Password Admin-[F4] from the System Configuration menu to display the Change System Passwords screen.
2. Change the passwords using the following parameters:

Admin Password | Allows the user to view and change the parameters on each screen. Select any alphanumeric, case-sensitive entry up to 13 characters. The characters selected are displayed as asterisks. Changing this password changes the Read/Write Community password, which is set on the SNMP Configuration screen. The default password is Intel .
User Password (console only) | Allows the user to monitor or view the screens. Select any alphanumeric, case-sensitive entry up to 13 characters. The characters selected are displayed as asterisks. The default password is Intel .

3. Select Save to register settings.

Copyright © 2002 Intel Corporation. Legal Information