AP-51XX v1.1.2.

0-005R Release Notes

Contents
1. 2. 3. 4. 5. 6. Introduction Default Configuration Changes Download Information Resetting the AP-51XX Password AP-51XX MAC Addresses Known Issues and Recommendations

Introduction AP-5131 Indoor AP & AP-5181 Outdoor AP

Designed to address the wireless and wired connectivity needs of the small office or retail outlet, the AP-5131 provides a single-box solution which integrates all services required to extend secure broadband access to mobile users. With the ability to connect local users to a remote private network via a secured IPSec link, the AP-5131 is ideal for deployment in branch offices or at telecommuter sites for enterprise-class WLAN performance and secure connectivity of wired clients. The AP-5131 integrates a Router and DHCP Server for local LAN connectivity; a configurable stateful inspection firewall for LAN isolation; a VPN endpoint for secure backhaul connectivity; a QoS Engine for superior performance of realtime video and voice applications; and a AAA server with Hotspot Gateway for security and public access management. With v1.1 or newer, the AP-5131 offers a self-assembling, selfhealing Mesh Networking architecture designed to extend the reach of the wireless network via wireless communication between Access Points. The AP-5181, a hardware variant of the AP-5131 designed specifically for outdoor use or in harsh environments requiring an extended operational temperature range, supports the same software feature set as the AP-5131 and operates with the same firmware, version 1.1.1.0-020R or more recent. The AP-5181 hardware does not support any AP-51XX firmware version prior to version 1.1.1.0-020R. Version 1.1.2.0-005R is the fifth officially supported firmware version for the AP-5131. New Features in version 1.1.2.0 include: 1. Motorola-branded User Interfaces 2. Support for new Intel Processor (see note below*) *Note: Firmware version 1.1.2.0 introduces support for a new variant of the AP51XXs Intel IXP425 CPU that will be utilized in manufacturing starting in July 2007. Intel has implemented a change to the IXP425 that requires a change in software. The new version of CPU will not affect any of the features or performance of the AP-51XX. It is important to note that while existing hardware will continue to be capable of running current versions of firmware as well as future versions, hardware built with the new processor will only be able to support version 1.1.2.0 or later. Please refer to the table below.

AP-51XX Hardware/Software Compatibility Matrix

v1.0.0.0 v1.0.1.0 v1.1.0.0 Supported Not Supported Not Supported v1.1.1.0 Supported Supported Not Supported v1.1.2.0 Supported Supported Supported

AP-5131 AP-5181 AP-5131 & AP-5181 with new processor (July 2007)

Default Configuration Changes

v1.0.0.0 v1.0.1.0 DHCP client Auto-update enabled Static IP: 192.168.0.1 Static Mask: 255.255.255.0 DHCP Server enabled n/a v1.1.0.0 Static IP: 10.1.1.1 Static Mask: 255.0.0.0 DHCP Client Auto-update enabled Default Gateway* Ethernet Port Enabled Static IP: 192.168.1.1 Static Mask: 255.255.255.0 DHCP Server Enabled HTTP, HTTPS, Telnet, SSH, SNMP: enabled v1.1.1.0 v1.1.2.0 Static IP: 10.1.1.1 Static Mask: 255.0.0.0 DHCP Client Auto-update enabled Default Gateway Ethernet Port Enabled Disabled

WAN LAN 1 (aka LAN)

LAN 2

Access via WAN Port

HTTPS, SSH, SNMP: enabled

HTTP, HTTPS, Telnet, SSH, SNMP: enabled

*DNS and Domain Name parameters take effect on the Default Gateway Interface.

Download Information
Note: Upgrading from 1.0 to 1.1.1 is a two step process which requires the same upgrade procedure to be repeated twice. The first upgrade will result in a bootloader change and the second upgrade will result in a firmware change. For subsequent upgrades a single download will suffice. Using Auto Update, the AP will automatically update itself twice when upgrading to v1.1.2.0 Note: Upgrading from 1.0/1.1/1.1.1 to 1.1.2 retains the existing settings. It is recommended, however, that users export their 1.0/1.1/1.1.1 configuration for backup purposes prior to upgrading. Note: When downgrading from v1.1.2 to v1.0, all configuration settings are lost and the AP will return to factory defaults.

To conduct a firmware update on the AP-51XX from 1.0 to 1.1.2: 1. Select System Configuration Firmware Update from the AP-51XX menu tree of the GUI. 2. Specify the name of the target firmware file within the Filename field. 3. If the target firmware file resides within a directory, specify a complete path for the file within the Filepath(optional) field. 4. Enter an IP address for the FTP or TFTP server used for the update. 5. Use the drop-down menu to specify the FTP or TFTP server's location. Select the appropriate button, FTP or TFTP, for the servers location. The server can reside on the WAN or on the LAN. 6. Select either the FTP or TFTP button to define whether the firmware file resides on a FTP or TFTP server. 7. Set the following FTP parameters if applicable: Username - Specify a username for the FTP server login. Password - Specify a password for FTP server login.

8. Click Apply. 9. Click the Perform Update button to initiate the update. Upon confirming the firmware update, the AP reboots and completes the update. This step may take several minutes. 10. After the AP reboots, return to the Firmware Update screen. 11. Repeat Step #9. 12. After the AP reboots, clear the browser cache and return to the Firmware Update screen. Check the Status field to verify whether the firmware update was successful.

Resetting the AP-51XX Password

The AP-51XX Command Line Interface (CLI) enables users who forget their password to reset it to the factory default (motorola). To reset the AP-51XX password: Connect one end of the null modem serial cable to the AP-51XXs console connector. (Use cable p/n 25-96992-01R for AP-5131 and p/n 25-97593-01R for the AP-5181). Attach the other end of the null modem serial cable to the serial port of a PC running HyperTerminal or a similar emulation program. 1. Set the HyperTerminal program to use 19200 baud, 8 data bits, 1 stop bit, no parity, no flow control and auto-detect for terminal emulation. 2. Press <ESC> or <Enter> to access the AP-51XX CLI. A serial connection has now been established and the user should be able to view the serial connection window. 3. Reset the AP-51XX. An AP-51XX can be reset by removing and re-inserting the LAN cable or removing and re-inserting the power cable. As the AP-51XX is re-booting, a Press esc key to run boot firmware message displays. 4. Quickly press <ESC>. If the <ESC> key is pressed within three seconds a boot> prompt displays. 5. Type the following at the boot prompt: passwd default 6. Reset the AP-51XX by typing the following at the boot prompt: reset system. When the AP-51XX re-boots again, the password will return to its default value of motorola. You can now access the AP-51XX. Note: On versions prior to v1.1.2.0, the default password is symbol.

AP-51XX MAC Addresses

The AP-51XX has one MAC address for each LAN, which are displayed in LAN Stats and WAN Stats, under the Status and Statistics page in the Web User Interface. Each radio on an AP-51XX supports four Basic Service Sets (BSS). Each BSS, has a corresponding MAC address. The MAC address, which is displayed in the Web Interface, under the Radio Settings screen, corresponds to that of BSS #1. The MAC addresses for the other three BSSs (BSS #2, #3, #4) are derived by adding 1, 2, 3, respectively, to the radio MAC address (same as BSS #1). For example: If the radio MAC address displayed under the Radio Settings screen (Network Configuration Wireless Radio Configuration Radio<n>) is 00:A0:F8:72:20:DC, then the BSSs for that radio will have the following MAC addresses: BSSID BSSID #1 BSSID #2 BSSID #3 MAC Address 00:A0:F8:72:20:DC 00:A0:F8:72:20:DD 00:A0:F8:72:20:DE Hexadecimal addition Same as Radio MAC address Radio MAC address +1 Radio MAC address +2

BSSID #4

00:A0:F8:72:20:DF

Radio MAC address +3

Known Issues and Recommendations

Recommendation: AP-5131 access points participating in a mesh topology should use the same firmware version. Since AP-5181 support starts from version 1.1.1 onwards, it is recommended to upgrade AP-5131s to the same version before using them in a mixed mesh topology. 1) Java GUI does not load in web browser. If the Java Web User Interface does not load in the browser it may be that a previous version of the html page is being stored in the browsers cache. To solve this problem, clear the browser cache and set the browser to always download web pages. 2) Wireless client disassociation after configuration change. (CRID: 10751) After applying certain changes to the configuration, wireless clients may temporarily become disconnected as each radio resets. 3) Mesh Network Connectivity while making changes to a Base or Client Bridge node. Mesh connectivity may temporarily be unavailable when making configuration changes to Base or Client Bridge APs. 4) WNMP Ping failure with Symbol LA-503X Clients (CRID: 6544) The Symbol LA-5030 and LA-5033 client adapters do not support the WNMP Protocol and therefore do not respond to WNMP Pings sent by the AP-51XX. 5) Loss of GUI applet connectivity after NTP enable (CRID: 6219) With default configuration, after the first time NTP is enabled the Applet may loose connectivity to the AP. 6) Slow import of large configuration files It can take up to six minutes to import configuration files that contain long MAC ACLs. Sending a configuration from one AP to another may also take a long time if the configuration is complex. 7) LAN and WAN IP Address conflict The SNMP and CLI interfaces currently allow the LAN and WAN interfaces to have IP addresses on the same subnet. This configuration is not allowed via the GUI and is not supported. 9) A manual reboot is required after upgrading via the Boot CLI. (CRID: 29337)

When executing a firmware upgrade from v1.0 to v1.1.X via the Boot Command Line Interface, ensure that a reboot is manually executed in between each upgrade. 10) VPN Configuration Import (CRID: 29576) The AP-51XX will not import a VPN configuration if the tunnel name parameter contains a space in the text. 11) Rogue AP Detection Command (CRID: 29889) The Add all to allowed list command in the Rogue AP Detection screen may result in the Active Allowed AP List not being updated correctly. 12) Ethertype Filter settings (CRID: 30383) When upgrading from v1.0 to v1.1, the Ethertype Filter settings may not carry over. 13) Ethernet Port Timeout setting (CRID: 30719) When upgrading from v1.0 to v1.1, the Ethernet Port Timeout setting may not carry over. 14) Broadcast Key Rotation for Mesh Security. Enabling Broadcast Key rotation on Security Policies applied to Mesh networks may degrade performance and not provide any benefit as all traffic on the Mesh is encapsulated in unicast messages. 15) Importing Admin User Password Importing the Admin User password will only take effect if the AP is set to factory defaults (i.e. password is motorola). 16) AP-4131 vs. AP-51XX Default Basic Rates Setting The default Basic Rates setting for the AP-51XX is 1, 2, 5.5 and 11 Mbps. The AP4131s default Basic Rates setting was 1 & 2 Mbps only. Note that this difference may cause interoperability problems with certain older wireless devices. The default setting can be changed in the AP-51XX. 17) Management VLAN Configuration When changing the Management VLAN, the AP does not update the IP address. Workaround: disable client mode to static and back to client. 18) VPN Session between AP-51XX and WS-5100 v3.0 (CRID: 36407) There is a known compatibility issue between the AP-51XX and the WS-5100 when establishing a VPN tunnel using Automatic Key Settings. The suggested workaround is to use Manual Key Settings for tunnel configuration. 20) Carriage Return character in Login Message (CRID: 36405).

A carriage return is not supported when entering text via SNMP for Login Message.