HP Vm200 User Manual

							Using Quick Setup
Global settings page
2-23
Username
Specify a new login name for the V-M200 manager account. By default, the username is set to 
admin.
New password
Confirm password
Specify a new password for the V-M200 manager account. By default, the password is set to 
admin. 
Passwords must be 6 to 16 printable ASCII characters in length, and contain at least 4 
different characters. Passwords are case sensitive. Space characters and double quotes ( “ ) 
cannot be used. 
Step 2: Specify wireless network settings
Buttons
Add New Wireless Community
Select this button to add a new wireless community to the table. After you add a new 
community, configure its settings using the fields under Wireless community settings. 
Select Add Community when you are done.
Delete
Select this button to delete the selected wireless community. (The one that is currently being 
edited.) If the community is configured to use a RADIUS server for WPA or 802.1X 
authentication, the RADIUS profile created when the community was added is also deleted if 
it is not being used by another wireless community.
Update Community
Select this button to update the community with your configuration settings. The settings are 
not saved until you select the Save button.
Cancel
Select this button to discard your settings.
Save
Select this button to save your settings.
Wireless community table
This table lists all wireless communities that are defined on the V-M200. The V-M200 supports 
up to four wireless communities. Each wireless community defines the settings for a distinct 
wireless network with its own configuration settings.  
						

							Using Quick Setup
Global settings page
2-24
To edit the settings for a community, select the community in the table, then configure the 
fields under Wireless community settings. Select Update Community when you are done.
Wireless community settings
The following sections present the settings for the selected wireless community.
Identify the wireless network
Use this section to define names for the wireless community.
Community name
Specify a name to identify the community on the V-M200. 
Network name (SSID)
Specify a name to uniquely identify the wireless network associated with this community. 
Each wireless user that wants to connect to this community must use the network name. The 
name is case-sensitive.
Secure the wireless network
Use this section to define security settings for the wireless network.
Security method
Choose the method that will be used to protect wireless transmissions. Refer to the sections 
that follow for configuration details. 
						

							Using Quick Setup
Global settings page
2-25
WPA, WPA2, WPA or WPA2
Wi-Fi Protected Access (WPA) is a security protocol that provides for both encryption of the 
wireless data stream (via TKIP or AES/CCMP) and authentication of wireless users (via 
802.1X/EAP).The following versions are supported: 
NoteWPA cannot be used when the radio operating mode supports 802.11n.
Key source
This option determines how the WPA encryption keys are generated.
PreShared Key: The V-M200 uses a statically defined key to encrypt traffic. To 
connect to this community, wireless users must configure their WPA software with 
this key.
Key: The V-M200 uses the key you specify in this field to generate the TKIP or 
AES/CCMP keys that are used to encrypt the wireless data stream. Since this is a 
static key, it is not as secure as the RADIUS option. Specify a key that is between 
8 and 63 alphanumeric characters in length. It is recommended that the preshared 
key be at least 20 characters long, and be a mix of letters and numbers. The 
double quote character (”) should not be used.
Ve rs io nDescription
WPAWPA with TKIP encryption.
WPA2WPA2 (802.11i) with CCMP encryption. If all your clients are WPA2, 
select this option for the maximum possible security.
WPA or WPA2Mixed mode supports both WPA (version 1) and WPA2 (version 2) at 
the same time. Some legacy WPA clients may not work if this mode is 
selected. This mode is slightly less secure than using the pure WPA2 
mode. 
						

							Using Quick Setup
Global settings page
2-26
RADIUS: The V-M200 retrieves the key from the RADIUS server and uses it to 
generate the TKIP or AES/CCMP keys that are used to encrypt the wireless data 
stream. The key is dynamically generated by the RADIUS server each time the user 
logs in. Communication with the RADIUS server occurs via 802.1X using the EAP 
protocol specified by the user’s WPA client software. 
When you select this option, a RADIUS profile is created with the same name as the 
wireless community. To customize the settings for this RADIUS profile, select 
Authentication > RADIUS profiles. See Using a third-party RADIUS server on 
page 7-2.
RADIUS server address: Specify the IP address of the RADIUS server.
Secret / Confirm secret: Specify the secret (password) that V-M200 will use 
when communicating with the RADIUS server. The shared secret is used to 
authenticate all packets exchanged with the server to prove that they originate 
from a valid/trusted source.
802.1X
802.1X provides for user authentication via a third-party RADIUS server. By default, user 
traffic is not encrypted. To enable encryption, you need to edit the wireless community 
(select Wireless > Communities) and enable WEP encryption for 802.1X.
RADIUS server address 
Specify the IP address of the RADIUS server.
Secret/Confirm secret
Specify the secret (password) that V-M200 will use when communicating with the 
RADIUS server. The shared secret is used to authenticate all packets exchanged with the 
server to prove that they originate from a valid/trusted source. 
						

							Using Quick Setup
Global settings page
2-27
WEP
This is the least secure method of protecting wireless transmissions. WEP provides 
encryption only, no user authentication.
NoteWEP cannot be used when the radio operating mode supports 802.11n.
Key
The number of characters you specify for the key determines the level of encryption. 
For 40-bit encryption, specify 5 ASCII characters or 10 hexadecimal digits.
For 128-bit encryption, specify 13 ASCII characters or 26 hexadecimal digits.
When encryption is enabled, wireless stations that do not support encryption cannot 
communicate with the V-M200. The definition for each encryption key must be the same 
on the V-M200 and all client stations.
Key format 
Select the format used to specify the encryption key: 
ASCII: ASCII keys are much weaker than carefully chosen HEX keys. You can 
include ASCII characters between 32 and 126, inclusive, in the key. However, note 
that not all client stations support non-alphanumeric characters such as spaces, 
punctuation, or special symbols in the key.
HEX: Your keys should only include the following characters: 0-9, a-f, A-F.
Prioritize wireless network traffic
The quality of service (QoS) feature provides a number of different mechanisms to prioritize 
wireless traffic sent to wireless client stations. 
This is useful when you have defined multiple wireless communities and want to ensure a 
specific level of service for each one.
For example, if you have two communities, one for employees and one for guests, you might 
want to make the employee traffic higher priority so that employee traffic is never delayed 
due to excessive guest traffic.
Priority mechanism
For a complete description of all options, see Quality of service (QoS) on page 4-15. 
						

							Using Quick Setup
Global settings page
2-28
Map wireless network to a VLAN
Use this option to bind the wireless community to a specific VLAN on the Ethernet port. All 
traffic sent by the wireless community will be assigned to the VLAN you specify when it exits 
the Ethernet port. The VLAN is not used for wireless traffic.
If you do not set a VLAN, traffic is sent untagged.
A VLAN can be assigned on a per-user basis by setting an attribute in the users RADIUS 
account (when using RADIUS-based authentication). RADIUS assigned VLANs take 
precedence over those assigned to the wireless community. For example, if the community 
has an Ethernet VLAN of 10, and a user receives a VLAN of 20 via RADIUS, all traffic for this 
user exits the Ethernet port on VLAN 20. Traffic for other users exits on VLAN 10.
See Working with VLANs on page 6-4 for information on using this feature.
VLAN
Select this checkbox to enable VLAN support. 
VLAN ID
Specify the VLAN ID to assign to this community.  
						

							Chapter 3: Managing the V-M200
3
Managing the V-M200
Contents
Management tool .......................................................................................................... 3-2
Customizing management tool settings .............................................................. 3-2
SNMP ............................................................................................................................. 3-4
Configuring the SNMP agent ................................................................................ 3-4
System time................................................................................................................... 3-4
Configuring the system time ................................................................................ 3-5
Country .......................................................................................................................... 3-6 
						

							Managing the V-M200
Management tool
3-2
Management tool
The V-M200 is configured and monitored via its Web-based management tool at address
https:// where  is the IP address assigned to 
the V-M200. Use Microsoft Internet explorer 7/8 or Firefox 3.x.
For information on launching the management tool for the first time, see the HP V-M200 
802.11n Access Point Quickstart.
Note A security certificate warning is displayed the first time you connect to the management tool. 
This is normal. Select whatever option is needed in your Web browser to continue to the 
management tool. The security warning will not appear again unless you change the IP 
address of the V-M200.
Customizing management tool settings
To customize management tool settings, select Management > Management tool.
About the manager and operator accounts
Two types of administrator accounts are available: manager and operator.
The manager account provides full management tool rights. 
The operator account provides read-only rights plus the ability to perform 
troubleshooting. 
						

							Managing the V-M200
Management tool
3-3
The management tool has an automatic inactivity logout timer that is set to five minutes. If 
a manager or operator is idle for five minutes, then they are automatically logged out. 
Only one administrator (manager or operator) can be logged in at any given time. The 
following options control what happens when an administrator attempts to log in while 
another administrator (or the same administrator in a different session) in already logged in. 
In every case, the rights of a manager supersede those of an operator.
Manager settings
Terminates the current manager session: When enabled, an active manager or 
operator session will be terminated by the login of another manager. This prevents the 
management tool from being locked by an idle session until the inactivity logout timeout 
expires.
Is blocked until the current manager logs out: When enabled, access to the 
management tool is blocked until an existing manager logs out or is automatically logged 
out due to an idle session.
An operator session is always terminated if a manager logs in. An active operator session 
cannot block a manager from logging in.
Operator settings
Terminates the current operator session: When enabled, an active operator’s session 
will be terminated by the login of another operator. This prevents the management tool 
from being locked by an idle session until the inactivity logout timeout expires.
Operator access to the management tool is blocked if a manager is logged in. An 
active manager session cannot be terminated by the login of an operator.
An operator session is always terminated if a manager logs in. An active operator 
session cannot block a manager from logging in.
Is blocked until the current operator logs out: When enabled, access to the 
management tool is blocked until an existing operator logs out or is automatically logged 
out due to an idle session.
Passwords
Passwords must be 6 to 16 printable ASCII characters in length, with at least 4 different 
characters. Passwords are case sensitive. Space characters and double quotes ( “ ) cannot be 
used. 
NoteIf you leave Username and Password fields blank and then select Save, no change is made 
to the current username and password.
CautionIf you forget the manager password, the only way to access the manager account is to reset 
the V-M200 to factory default settings. For information see Appendix B: Resetting to factory 
defaults on page B-1. 
						

							Managing the V-M200
SNMP
3-4
SNMP
The V-M200 provides a robust SNMP v1/v2 implementation supporting both industry-
standard MIB II objects as well as HP-specific MIBs.
Configuring the SNMP agent
Select Management > SNMP to open the SNMP agent configuration page. 
SNMP
Use this checkbox to enable/disable the SNMP agent. By default, the SNMP agent is enabled. 
If you disable the agent, the V-M200 will not respond to SNMP requests.
Read-only community name
This is the password that controls read-only access to SNMP information on the V-M200. A 
network management program must supply this name when attempting to get SNMP 
information from the V-M200. By default, the name is set to public. 
System time
Correct system time is important for proper operation of the V-M200, especially when using 
the logs to troubleshoot.