• Keine Ergebnisse gefunden

Managing and Troubleshooting WLANs

N/A
N/A
Protected

Academic year: 2021

Aktie "Managing and Troubleshooting WLANs"

Copied!
33
0
0

Wird geladen.... (Jetzt Volltext ansehen)

Volltext

(1)

Managing and Troubleshooting WLANs

In this exercise you will learn to set up an cisco Aironet Access point for 802.11 g standard.

You also will get some hints for troubleshoting WLANs.

To the exercise

WLAN Management and Troubleshooting Introduction

INTRODUCTION

In this exercise you have to setup a WLAN Access Point from the scratch to run a WLAN.

We use the Cisco AP1200 Access Point which offers also 54 MBit speed. All you need is the Microsoft Internet Explorer Version 6 and higher. You can connect to our exercise computer using the Remote Desktop Connection from Microsoft. Please allow to download and install Activ-X components in your browser to receive the remote desktop plug-in when you open the connection to the exercise.

PC vhb12

(2)

192.168.20.159

WLAN 802.11g Interface

Ethernet Interface 2 192.168.20.101

To the Internet Ethernet Interface 1

VHB24 is your exercise computer to which you are connected via the Windows Remote Console Interface.

The WLAN interface of the exercise computer is used to test the correct setup of the Access Point (Cisco AP1200).

The exercise computer also has two Ethernet interface which are connected on one side to the Internet and on the other side to the Ethernet interface of the Access Point. This

second Ethernet interface can be used to setup the Cisco AP1200 from the scratch. The setup is done over a web interface of the Access Point.

This exercise computer (vhb24) is also used for other exercises. The exercises 5 (Security Setup) and 6 (QoS) are also done on vhb24.

Manage the Access Point Reset the Access Point

Basic Setup

Setup the Ethernet Interface Setup the Radio Interface

Check the local WLAN connection

RESET THE ACCESS POINT

This exercise will guide you through an installation and setup process for a 802.11g (54 MBits) WLAN. We use the Cisco AP 1200 Access Point and an Cisco WLAN card in the exercise host.

First the Access Point must be reset to a known state. You have to use a command procedure which deletes all configuration information on the Access Point. The command procedure must be started using a link which is already on the Desktop.

vhbWLAN24 192.168.20.0

PC vhb24 WLAN

Cisco AP1200 192.168. 20.40

(3)

Click the Shortcut Initialize AP1200 on the Desktop of the exercise system (vhb24)

Click Init AP1200 and wait 1 minute until the Access Point has finished the reload.

Continue with the exercise after the text from above is displayed in the browsers window .

Start the Internet Explorer on the exercise system (vhb24) computer. It will automatically connect to the Cisco AP1200 Access Point which we will use for this exercise. If not enter the following URL: http://192.168.20.40

You have to enter the Username Cisco and the Password Cisco to get access rights for the setup pages.

(4)

On the following picture, you can find a navigation bar on the left side, where you can select different folders and subfolders.

.

BASIC SETUP

Open the EXPRESS SETUP folder. Check that the IP-Addresses are resolved by a DHCP server

.

Open the EXPRESS SECURITY folder.

(5)

Move down the web page and check that no SSID with vhbwlan24 is defined. If it is defined click on the Delete button to delete it. Otherwise you would get an error message when you continue to setup this SSID again.

or

Delete any SSID from the SSID Table.

(6)

Enter vhbwlan24 as the SSID (Service Set Identifier).

Leave the Broadcast SSID in Beacon checkbox empty. We do not want to propagate the name of our SSID in each Beacon frame, because we do not want to invite

intruders.

Select Static WEP Key.

Enter the WEP key. Use drag and drop in order to make no mistyping.

WEP Key: 00491009418332000130900000 Click on Apply.

The SSID table should now look like in the picture above.

(7)

SETUP THE ETHERNET INTERFACE

In this exercise it is not needed to setup the Ethernet Interface, because the Access Point uses default settings which work well in our environment. But we want to show you either, how you could setup the Ethernet interface on the Access Point.

Open the NETWORK INTERFACES folder and select Fast Ethernet.

Open the Settings folder and check the settings. The Ethernet interface should be enabled, the status should be up. Duplex and the speed should be set to automatic.

Click on Apply if you made changes or Cancel if everything was satisfactory.

SETUP THE RADIO INTERFACE

It is necessary, that you setup the Radio interface to fit in our environment.

Open the NETWORK INTERFACES folder and select Radio-802.11G.

Open the Settings folder

The following settings must be done to bring the Access Point to work.

The Radio must be enabled.

(8)

The role of the AP is Access Point Root (Fallback to Radio Island). This AP is connected to an Ethernet networks and operates in an Extended Service Set.

Role in Radio Network

Select the role of the access point on your network. Choose one of the three access point (root) settings if the access point is connected to the wired LAN.

Access Point Root (Fallback to Radio Island)

This default setting enables wireless clients to continue to associate even when there is no connection to the wired LAN.

Access Point Root (Fallback to Radio Shutdown

When the wired connection is lost, the radio shuts down. This fallback forces the clients to associate to another access point if one is available.

Access Point Root (Fallback to Repeater)

When the wired connection is lost, the radio becomes a repeater. The repeater parent should be configured to allow data to be wirelessly transferred to another access point.

Repeater Non-Root

Choose this setting if the access point is not connected to the wired LAN. Client data is transferred to the access point selected as the repeater parent. The repeater parent may be configured as an access point or another repeater.

You should use the following default Data Rates. The Table from above can be used to disable some Data Rates in case they should not be used at all.

(9)

All the transmitter power should be set to 5 mW. This will reduce the maximum distance where our signals can be recognized and misused. Because all our WLAN equipment is in one room, we do not need much power. And we instantly give others a chance to use the same Radio channels in a distance.

Transmit Power

This setting determines the power level of the radio transmission. The default power setting is the highest transmit power allowed in your regulatory domain.

Note: Government regulations define the highest allowable power level for radio devices.

This setting must conform to established standards for the country in which you use the device.

To reduce interference, limit the range of your access point, or to conserve power, select a lower power setting.

For an 802.11g radio, Transmit Power is divided into CCK Transmit Power and OFDM Transmit power. CCK is the modulation used in 802.11g for the lower frequency rates, and OFDM is the modulation used in 802.11g for higher data rates (above 20 Mbps).

Note: The 100 mW (20dBM) value is not available for rates greater than 12 Mbps.

Power Translation Table (mW/dBm)

The power settings may be in mW or in dBm depending on the particular radio that is being configured. This table translates between mW and dBm.

Limit Client Power (mw)

Determine the maximum power level allowed on client devices that associate to the access point. When a client device associates to the access point, the access point sends the maximum power level setting to the client.

Note: The 100 mW value is not available for rates greater than 12 Mbps.

Select Radio Channel 11. This is the channel that we have reserved in our area for usage.

Because it is a ISO 802.11g WLAN, we need a Bandwidth of at least 20 MHz which means we will occupy the channels 9, 10, 11 and 12.

(10)

We operate the Access Point in Germany, so we should use the Radio channel assignment from ETSI for Germany.

World Mode Multi-Domain Operation (for 802.11b and 802.11g only)

World mode operation is disabled by default. If you uncheck Disable, the device adds channel carrier set information to its beacon. Client devices with world-mode enabled receive the carrier set information and adjust their settings automatically. If you select the dot11d option, you must enter an ISO country code. If you select the legacy option, you enable Cisco legacy world mode.

With world mode enabled, the access point advertises the local settings, such as allowed frequencies and transmitter power levels. Clients with this capability then passively detect and adopt the advertised world settings, and then actively scan for the best access point.

Country Code (required only for dot11d option)

A country code can be selected only if the dot11d option was chosen in the World Mode option above. Use the drop-down menu to select the appropriate country. After the country code, you must enter indoor or outdoor to indicate the placement of the access point.

We also use Short Preamble, Receiver and Transmitter Antenna Diversity, no external Antenna and also Aironet Extensions.

Ethernet Encapsulation Transform

Choose 802.1h or RFC1042 to set Ethernet encapsulation type. Data packets that are not 802.2 packets must be formatted to 802.2 with 802.1h or RFC1042. Cisco Aironet

equipment defaults to RFC1042 because it provides optimum interoperability.

802.1h - This setting provides optimum performance for Cisco Aironet wireless products.

RFC1042 - Use this setting to ensure interoperability with non-Cisco Aironet wireless equipment. RFC1042 does not provide the interoperability advantages of 802.1h but is used by other manufacturers of wireless equipment.

(11)

The other settings can be left to its defaults. Beacon Period of 100 means, that all 100 milliseconds. the Access Point transmits a Beacon Message.

Open the ASSOCIATION folder to check whether the vhb24 client computer is able to connect to the WLAN.

CHECK THE LOCAL WLAN CONNECTION

The Cisco Aironet Desktop Utility (ACU) is installed on the exercise computer. You should know this program from exercise 1. Use the ACU to check the WLAN connection.

Select the Profile: Default

Right click on the Aironet Desktop Utility Icon in the Task bar and select Show Connection Status.

(12)

The following Window shows, that you are connected now to the WLAN vhbwlan24. The necessary setup of the client is already done. You can determine the client settings in the next chapter.

If the Connection Status is Not Associated, there is something wrong. Also the Link Quality should be excellent. Go to the next step to fix this problem.

Troubleshoot the client Using the ACU utility

Viewing current status Managing local profiles Diagnostics

USING THE ACU UTILITY

You can use the ACU for troubleshooting WLAN connections, because it delivers a lot of information about the current WLAN connection and setup. It also allows the management of profiles. In profiles you can store specific setup configurations that you need to access a WLAN.

(13)

Click on the Aironet Desktop Utility on the Desktop to start the program.

The following table shows the possible colors that the ACU Icon in the Tray bar could have.

Each color indicated a different state of the WLAN connection.

A white icon indicates that the client adapter's radio is disabled

A dark gray icon indicates that the client adapter is not associated to an access point (in infrastructure mode) or another client (in ad hoc mode).

A light gray icon indicates that the client adapter is associated to an access point (in infrastructure mode) or another client (in ad hoc mode) but the user is not EAP authenticated.

A green icon indicates that the client adapter is associated to an access point (in infrastructure mode) or another client (in ad hoc mode), the user is authenticated if the client adapter is configured for EAP authentication, and the signal strength is excellent or good.

A yellow icon indicates that the client adapter is associated to an access point (in infrastructure mode) or another client (in ad hoc mode), the user is authenticated if the client adapter is configured for EAP authentication, and the signal strength is fair.

A red icon indicates that the client adapter is associated to an access point (in infrastructure mode) or another client (in ad hoc mode), the user is authenticated if the client adapter is configured for EAP authentication, and the signal strength is poor.

VIEWING CURRENT STATUS

After the ACU has started, the Current Status folder is displayed. In the moment, the Radio link to the SSID vhbwaln24 is not working.

(14)

Click on Advanced. The following.

The Advanced Status gives you much more details about the WLAN connection. You should be able to understand the information displayed in the Advanced Status window.

You should understand the displayed information. See the following explanations to understand the information in the Advanced Status window.

The statistics on the Advanced Status window are described below.

Network Name (SSID)

The name of the network to which your client adapter is currently associated.

(15)

Server Based Authentication

The method by which authentication to a back-end server is being performed to establish secure connectivity.

Value: None, LEAP, EAP-TLS, PEAP (EAP-GTC), or PEAP (EAP-MSCHAPV2).

Data Encryption

The data encryption type that was negotiated with the access point (in infrastructure mode) or another client (in ad hoc mode) upon association.

Value: None, WEP, CKIP, or TKIP.

Authentication Type

Specifies whether the client adapter must share the same WEP keys as the access point in order to authenticate or can authenticate to the access point regardless of its WEP settings.

Value: Open or Shared

Note: An incorrect WEP key setting prevents connectivity to the network regardless of the 802.11 authentication type selected.

Message Integrity Check

Indicates whether your client adapter is using message integrity check (MIC) to protect packets sent to and received from the access point. MIC prevents bit-flip attacks on encrypted packets. During a bit-flip attack, an intruder intercepts an encrypted message, alters it slightly, and retransmits it, and the receiver accepts the retransmitted message as legitimate.

Value: None, MMH, or Michael None - MIC is disabled.

MMH - MIC is enabled and is being used with CKIP.

Michael - MIC is enabled and is being used with WPA and TKIP.

Associated AP Name

The name of the access point to which your client adapter is associated. It is shown only if the client adapter is in infrastructure mode, the access point was configured with a name, and Aironet extensions are enabled.

Associated AP IP Address

The IP address of the access point to which your client adapter is associated. It is shown only if the client adapter is in infrastructure mode, the access point was configured with an IP address, and Aironet extensions are enabled.

Associated AP MAC Address

The MAC address of the access point to which your client adapter is associated. It is shown only if the client adapter is in infrastructure mode.

Power Save Mode

The client adapter's current power consumption setting.

Value: CAM (Constantly Awake Mode), Max PSP (Max Power Saving), or Fast PSP (Power Save Mode).

Current Power Level

The power level at which your client adapter is currently transmitting. The maximum level is dependent upon the radio band used and your country's

(16)

regulatory agency.

Value: 10, 20, 30, 50, 63, or 100 mW (802.11b/g band) 10, 13, 20, 30, 50, 3, or 100 mw (802.11b/g)

Available Power Levels

The power levels at which your client adapter is capable of transmitting. The maximum level is dependent upon the radio band used and your country's regulatory agency.

Value: 10, 13, 20, 25, or 40 mw (802.11a) 10, 20, 30, 50, 63, or 100 mw (802.11b/g)

Current Signal Strength

The signal strength for all received packets. The higher the value is, the stronger the signal.

Range: 0 to 100% or 0 to -100 dBm

Current Signal Quality

The signal quality for all received packets. The higher the value is, the clearer the signal.

Range: 0 to 100%

Current Noise Level

The level of background radio frequency energy in the current radio band. The lower the value is, the less background noise present.

Range: 0 to -100 dBm

Note: This setting appears only if you selected signal strength to be displayed in dBm.

Up Time

The amount of time (in hours:minutes:seconds) since the client adapter has been receiving power. If the adapter has been running for more than 24 hours, the time is displayed in days:hours:minutes:seconds.

802.11b Preamble

Indicates whether your client adapter is using only long radio headers or short and long radio headers.

Value: Short & Long or Long Only

Note: This field contains a value only when the client adapter is operated in 2.4- GHz, 11-Mbps or 2.4-GHz, 54 Mbps mode.

Current Link Speed

Rate at which your client adapter is currently transmitting data packets.

Value: 1, 2, 5.5, 6, 9, 11, 12, 18, 24, 36, 48, or 54 Mbps

Channel

The channel that your client adapter is currently using for communications. This field displays "Scanning" while the client adapter searches for a channel.

Value: Dependent on radio band and regulatory domain

Frequency

The radio frequency that your client adapter is currently using for

(17)

communications. This field displays "Scanning" while the client adapter searches for a frequency.

Value: Dependent on radio band and regulatory domain

Channel Set

The regulatory domain for which your client adapter is currently configured. This value is not user selectable.

Value: America, EMEA, Japan, or Rest of World

Close the Advanced Status window and go to the next step.

MANAGEING LOCAL PROFILES

Open the Profile Management folder in the ACU utility.

In the Profile Management you can setup the necessary parameters to join a WLAN.

There is one profile defined with the name "Default".

Select Default and click on Modify.

Open the Security folder.

In the Security Folder, you can define the security settings for the WLAN connection. We will have a closer look to the settings in the security exercise.

Let's have a focus on the WEP encryption. Remember that WEP is enabled on the Access Point. So it must also be enabled on the client. Also the WEP key must be set on the client.

Now check this!

(18)

In the Security Folder you can define the i.e. the WEP Key. We use a Pre-Shared Key.

Click on Configure to open the following window.

Select WEP Key Size of 128 Bit.

Select Hexadecimal as the Key Entry format.

Enter the WEP key. Use drag and drop in order to make no mistyping.

WEP Key: 00491009418332000130900000 Click on OK to close this windows.

Click OK in the Profile Management folder to close that window also.

Open the Advanced folder.

(19)

In the Advanced folder you can setup special parameters. I.e. it is possible to choose frequency band (5 GHz or 2.4 GHz) and to set the power limit for transmission.

Choose a Transmit Power Level of 10 mW.

For the Power Save Mode, we used CAM. That means that the Radio interface is constantly active and never goes down into a power save mode.

Choose Network Type of Infrastructure, because we use an Access Point in our WLAN.

Select Short and Long 802.11b Preamble.

Select 802.11 Authentication Mode: Open.

Click on OK to close that window and go back to the Profile Manger window.

Open the Current Status folder. Now you should be connected to the Access Point.

(20)

The Current Status folder shows the current connection parameters. It tells us, that we are Associated to the WLAN and that WEP encryption is used.

Click on Advanced to get more information.

The Advanced Status tells more details about the current WLAN connection. You should be able to understand the details there!

(21)

Please open the Command Prompt and try a Ping to 192.168.20.1 to check the connection.

DIAGNOSTICS

Open the Diagnostics folder.

You must understand the information above. Please see the following explanations.

The Diagnostics tab displays basic transmit and receive statistics for your client adapter. The statistics are calculated on a relative or cumulative basis as specified by the Data Display parameter and are continually updated at the rate specified by the Refresh Interval parameter.

Multicast packets transmitted and received-- The number of multicast packets that were received and transmitted.

(22)

Broadcast packets transmitted and received-- The number of broadcast packets that were received and transmitted.

Unicast packets transmitted and received -- The number of unicast packets that were received and transmitted successfully.

Total bytes transmitted and received -- The number of bytes of data that were received and transmitted successfully

Click on Advanced Statistics.

In Advanced Statistics you find a lot of information that you can use for trouble shooting. The following text is a detailed description

After you have understood all the statistic information herein, click OK to close that window.

Transmit Statistics

Frames Transmitted OK-- The number of frames that were transmitted successfully.

(23)

Frames Retried -- The number of frames that were retried.

Frame Dropped -- The number of frames that were dropped due to errors or collisions.

No ACK Frames -- The number of transmitted frames that did not have their corresponding Ack frame received successfully.

ACK Frames - The number of transmitted frames that had their corresponding Ack frame received successfully.

RTS Frames -- The number of request-to-send (RTS) transmissions that were attempted.

CTS Frames -- The number of clear-to-send (CTS) frames that were received in response to a successfully transmitted RTS frame.

No CTS Frames -- The number of request-to-send frames that were unsuccessful.

Retried RTS Frames -- The number of request-to-send frames that were retransmitted.

Retried Data Frames -- The number of normal data frames that were retransmitted.

Receive Statistics

Beacons Received -- The number of beacon frames received that were received successfully.

Frames Received OK -- The number of all frames that were received successfully.

Frames Received with Errors -- The number of frames that were received with an invalid checksum.

CRC Errors -- The number of cyclic redundancy check (CRC) errors detected in the data portion of the frame.

(24)

Encryption Errors -- The number of frames that were received with encryption errors.

Duplicate Frames -- The number of duplicate frames that were received.

AP Mismatches -- The number of times the client adapter tried to associate to an access point but was unable to because the access point was not the adapter's specified access point.

Data Rate Mismatches -- The number of times the client adapter tried to associate to an access point but was unable to because the adapter's data rate was not supported by the access point.

Authentication Time-Out -- The number of times the client adapter tried to

authenticate to an access point but was unable to because the access point did not respond fast enough (timed out).

Authentication Rejects -- The number of times the client adapter tried to authenticate to an access point but was rejected.

Association Time-out -- The number of times the client adapter tried to associate to an access point but was unable to because the access point did not respond fast enough (timed out).

Association Rejects -- The number of times the client adapter tried to associate to an access point but was rejected.

Standard MIC OK -- The number of frames that were received with the correct message integrity check (MIC) value.

Standard MIC Errors -- The number of frames that were discarded due to an incorrect message integrity check (MIC) value.

CKIP MIC Okay -- The number of frames that were received with the correct message integrity check (MIC) value when CKIP was being used.

(25)

Note: This field is displayed only if MIC is enabled on the access point.

CKIP MIC Errors -- The number of frames that were discarded due to an incorrect message integrity check (MIC) value when CKIP was being used.

Note: This field is displayed only if MIC is enabled on the access point.

Click on Troubleshooting.

Click on Run Test .

When the test has finished, you can see all steps which were necessary to enter in the WLAN.

You can see, that there was no authentication has been bypassed, because there was no authentication method setup. We will learn how to authenticate a client in the Security exercise. You can use this

(26)

Click on View Report to see further information

When you have finished, close the ACU utility.

Troubleshoot the Access Point Association list

Radio Interface status Carrier test

Event log

THE ASSOCIATION LIST

Also the Access Point gives you some information which is helpful for trouble shooting. YOu need to be logged on to the Access Point using the Internet Explorer.

The URL is: http://192.168.20.40 , Username:Cisco, Password: Cisco

Open the ASSOCIATION folder! There is a list of all associated clients in the current WLAN. You should find the client vhb24 also in that list.

Click on the MAC-Address link in the list to get further information about the associated client.

(27)

You should understand the information above. Please see the following explanations.

Here is a detailed description from the Access Point's Help file.

Station Information and Status

MAC Address - A unique identifier assigned by the manufacturer.

Name - The name assigned to the bridge.

IP Address - The bridge's IP address.

Class - The type of station.

Device - The type and model number of the bridge.

Software Version - The version of the software that is installed on the bridge.

State - The operational state of the station. The possible states are Associated or Association Processing.

Parent - Which bridge is the parent to this bridge.

SSID - The unique identifier that client devices use to associate with the access point.

VLAN - Which VLAN this client device belongs to.

Hops to Infrastructure - The number of bridges between this station and the network infrastructure.

Last Activity - How many seconds since the bridge was last active.

Current Rate - The current data transmission rate.

Encryption - The encryption that has been used.

(28)

Supported Rates - What transmission rates are supported in both the access point and the station.

Communication Over Interface - The network port over which the access point is communicating.

Signal Strength - The current radio signal quality.

Connected For - How many seconds the client device has been connected with the access point.

Signal Quality - The percentage of signal quality that is good. If this percentage is low, the station may be on the fringe of the coverage area and should be moved closer to the access point.

Activity Timeout - The total time that can elapse after the last data receipt before the bridge presumes the client device has been turned off.

Receive/Transmit Statistics

Total Packets Input - The number of good packets coming to the station.

Total Packets Output - The number of good packets sent from the station.

Total Bytes Input - The number of good bytes coming to the station.

Total Bytes Output - The number of good bytes sent from the station.

Duplicates Received - The number of duplicated packets that have been received.

Maximum Data Retries - The maximum number of times the data packet had to be retried.

Decrypt Errors - The total number of encryption errors sent from the station.

Maximum RTS Retries - The maximum number of times the RTS packet had to be retried.

MIC Failed - The number of times message integrity check (MIC) has failed.

MIC Missing - The number of message integrity checks (MICs) that are missing.

Open the PING/LINK TEST folder.

(29)

Start the Ping Test. A new windows is opened and shows the result of the execution of a ping command to the current client. Close that window now.

Start the Link Test. Scroll down to see the Results of this test. It shows the signal quality of the client.

RADIO INTERFACE STATUS

The statistics for the Radio Interface are also helpful for troubleshooting. The statistics beneath gives you an impression of the quality of the local WLAN. Have a close look to the Error statistics!

Open the NETWORK INTERFACES folder and select Radio-802.11G.

It is important that you understand the information displayed in this window. See the following explanations.

(30)

Receiver Statistics

Host Bytes Received - The bytes received from the radio that were passed up to the main access point processor.

Unicast Packets Received - The number of packets received in point-to-point communication.

Unicast Packets To Host - The number of point-to-point packets passed to the main access point processor.

Broadcast Packets Received - The total number of broadcast packets received by the interface.

Beacon Packets Received - The number of 802.11 beacon packets that were received.

Broadcast Packets To Host - The number of received broadcast packets that were passed up to the main access point processor.

Multicast Packets Received - The number of packets received that were sent as a transmission to a set of nodes.

Multicasts Received By Host - The number of received multicast packets that were passed up to the main access point processor.

Mgmt Packets Received - The number of 802.11 management packets received by the radio firmware.

RTS Received - The number of 802.11 RTS packets that were received.

Duplicate Frames - The number of times a packet was received more than once.

CRC Errors - The number of packets whose data was invalid at reception.

WEP Errors - The number of packets that did not decrypt properly.

Buffer Full - The number of times the received buffer on the radio overflowed.

Host Buffer Full - The number of times a packet had to be discarded because the main access point was not processing the packet fast enough.

Header CRC Errors - The number of packets discarded because the 802.11 radio header was corrupted.

Invalid Header - The number of packets discarded because the 802.11 radio header was invalid.

Length Invalid - The number of packets discarded because the length field in the 802.11 radio header was invalid.

Incomplete Fragments - The number of packets discarded because all the fragments of a frame were not received.

Rx Concats - Used only for bridges.

Transmitter Statistics

Host Bytes Sent - The number of bytes of data sent to the radio from the main access point processor.

Unicast Packets Sent - The number of directed point-to-point packets that were sent.

Unicast Packets Sent By Host - The number of directed packets sent by the main access point processor.

(31)

Broadcast Packets Sent - The number of broadcast packets that were sent with a destination address of all ones.

Beacon Packets Sent - The number of 802.11 beacon packets that were sent.

Broadcast Packets By Host - The number of broadcasts sent from the main access point processor.

Multicast Packets Sent - The number of multicast packets that were sent.

Multicasts Sent By Host - The number of multicast packets that were sent by the host.

Mgmt Packets Sent - The number of 802.11 management packets sent by the radio firmware.

RTS Transmitted - The number of times an RTS packet was transmitted.

CTS Not Received - The number of times an RTS packet was sent but a CTS was not received in response.

Unicast Fragments Sent - The number of whole or partial fragmented packets sent.

Retries - The number of times a packet or RTS had to be retried.

Packets With One Retry - The number of times a packet had to be retried only once before it was successful.

Packets With More Than One Retry - The number of times a packet had to be retried more than once before it was successful.

Protocol Defers - The number of times sending a packet was deferred because a received 802.11 duration field detected another transmitting device.

Energy Detect Defers - The number of times we deferred sending a packet because the energy detect circuitry indicates that another radio was transmitting.

Jammer Detected - The number of times we detected an interference source which lasted longer than a legal 802.11 packet. The interference source was ignored and the transmission was repeated.

Packets Aged - The number of packets discarded because the search for a new access point as a repeater took too long.

CARRIER TEST

The Carrier Test helps to decide on which radio channel a WLAN should be settled.

Open the NETWORK INTERFACES folder and select Radio-802.11G .

(32)

Open the CARRIER BUSY TEST folder

Click on Start to perform the test.

The test shows the usage of the single radio channels around the Access Point.

It is good to choose the one with the least usage to settle a new WLAN.

In our case we chose channel 11 (2.462 MHz) for SSID vhbwlan24 and channel 7 (2.442 MHz) for SSID vhbwlan21. All other channels are used by WLANs around our virtual laboratory.

(33)

EVENT LOG

The Access Point also shows an Event log, where all the events in the WLAN are logged.

This is very helpful for troubleshooting! Later in the security exercise the Event log shows whether a client could be authenticated to the WLAN or not.

Open the EVENT LOG folder.

Referenzen

ÄHNLICHE DOKUMENTE

As the user’s interface to a federation of services, security features of a web browser mainly will impact trust in federated

However, the command language does not easily fit into a command. A type that is an instance of Monad needs to have a type variable. Our command language does not need a variable

public static void main(String args[]) throws Exception {.

public static void main(String[] argv) { Socket socket;..

public static void main(String[] argv) { Socket socket;.

 A typical transaction server consists of multiple processes accessing data in shared memory.. 

Freier Win32 Telnet/SSH Client mit umfangreichen Konfigurationsmöglichkeiten Website: http://www.chiark.greenend.org.uk/~sgtatham/putty/. Franz Kohnle Seite 1 von

– BSSID: MAC-Adresse des Access-Points oder Zufallszahl – SSID: Name eines Service Sets (bis zu 32 ASCII-Zeichen lang) – ESSID: Name eines