# AP-2000 Help Contents |
[ Home ] [ORiNOCO website]

## Troubleshooting Troubleshooting Concepts Symptoms and Solutions Connectivity Issues AP-2000 Unit Will Not Boot - No LED Activity Serial Link Does Not Work Ethernet Link Does Not Work Basic Software Setup and Configuration Problems Lost AP-2000, Telnet, or SNMP Password Client Computer Cannot Connect AP-2000 Has Incorrect IP Address HTTP (browser) or Telnet Interface Does Not Work HTML Help Files Do Not Appear Telnet CLI Does Not Work TFTP Server Does Not Work Client Connection Problems Client Software Finds No Connection Client PC Card Does Not Work Intermittent Loss of Connection Client Does Not Receive an IP Address - Cannot Connect to Internet VLAN Operation Issues Active Ethernet The AP-2000 Unit Does Not Work There Is No Data Link “Overload” Indications Recovery Procedures Reset to Factory Default Procedure Forced Reload Procedure Initialize the AP-2000 using the Bootloader CLI Setting IP Address using Serial Port and Normal CLI System Alarms (Traps) Security Alarms Wireless Interface Card Alarms Operational Alarms FLASH Memory Alarms TFTP Alarms Image Alarms Standard MIB-II (RFC 1213) Alarms Bridge MIB (RFC 1493) Alarms Related Applications RADIUS Authentication Server TFTP Server LED Indicators
| This section helps you locate problems related to the AP-2000 device setup. For details about RADIUS, TFTP, Serial communications program (such as HyperTerminal), Telnet applications or web browsers, please refer to their respective documentation.
## Troubleshooting Concepts The following list identifies important troubleshooting concepts and topics. The most common initialization and installation problems relate to IP Addressing. For example, you must have valid IP Addresses for both the AP-2000 device and the TFTP server before you can transfer files over Ethernet. IP Address management is fundamental. Refer to Recording Your Configuration Settings Factory default units are set for “Dynamic” (DHCP) IP Address assignment. The default IP Address for the AP-2000 is 10.0.0.1. If you connect the AP-2000 unit to a network with an active DHCP server, then use ScanTool to locate the IP Address of your unit. If a DHCP server is not active on your subnet, then the ScanTool can be used to configure your AP-2000. The Trivial File Transfer Protocol (TFTP) provides a means to download and upload files. These files include the AP-2000 Image (executable program) and configuration files. If the AP-2000 password is lost or forgotten, you will need to reset to default values. The Reset to Factory Default Procedure resets configuration, but does not change the current AP Image. If all else fails… Use the Forced Reload Procedure to erase the current AP-2000 Image and then download a new image. Once the new image is loaded, use the Reset to Factory Default Procedure to set the unit to factory default values and reconfigure the unit. AP-2000 supports a Command Line Interface (CLI). If you are having trouble locating your AP-2000 on the network, connect to the unit directly using the serial interface and refer to Using the Command Line Interface for CLI command syntax and parameter names. ## Symptoms and Solutions ### Connectivity Issues Connectivity issues include any issues that prevent you from powering up or connecting to the AP-2000 device. #### AP-2000 Unit Will Not Boot - No LED Activity Make sure your power source is operating. Make sure all cables are connected to the AP-2000 unit correctly. With Active Ethernet, make sure you are using a Category 5, foiled, twisted pair cable to power the AP-2000 unit. #### Serial Link Does Not Work Make sure you are using the proper serial port cable. Double-check the physical network connections. Make sure your PC terminal program (such as HyperTerminal) is active and configured to the following values: Com Port: (COM1, COM2, etc. depending on your computer); Baud rate: 9600; Data bits: 8; Stop bits: 1; Flow Control: None; Parity: None; Line Feeds with Carriage Returns (In HyperTerminal select: File -> Properties -> Settings -> ASCII Setup -> Send Line Ends with Line Feeds.) #### Ethernet Link Does Not Work Double-check the physical network connections. Use a known-good unit to make sure the network connection is present. Once you have the AP-2000 IP Address, you can use the “Ping” command over Ethernet to test the IP Address. If the AP-2000 responds to the Ping, then the Ethernet Interface is working properly. Perform network infrastructure troubleshooting (check switches, routers, etc.). ### Basic Software Setup and Configuration Problems #### Lost AP-2000, Telnet, or SNMP Password Perform the Reset to Factory Default Procedure in this guide. This procedure resets system and network parameters, but does not affect the AP-2000 Image. The default AP-2000 password is “public”, and the default Telnet password is also “public”. Document your password(s) in the form provided in Recording Your Configuration Settings. #### Client Computer Cannot Connect Each wireless PC Card in the AP-2000 unit should have a unique Network Name. This Network Name must match the active Network Name on client machines. For example the ORiNOCO client software allows you to store Network Names in configuration profiles, then you can select a profile to fit your location. Network Names should be allocated and maintained by the Network Administrator. Refer to the documentation that came with your client card for additional troubleshooting suggestions. #### AP-2000 Has Incorrect IP Address Default IP Address Assignment mode is dynamic (DHCP). If you do not have a DHCP server on your network, the default IP Address is 10.0.0.1. If the DHCP server in your network is not available for some reason while the AP-2000 unit reboots, the device will retain the last IP Address it had. Reboot the AP-2000 device once your DHCP server is on-line again or use the ScanTool to find the current IP Address of the AP-2000 unit in question. To find the current IP Address using DHCP, check the IP Client Table in the DHCP Server to find the current AP-2000 IP Address, match to the AP-2000 MAC Address in the table to the one on your unit. Or use ScanTool to locate the current AP-2000 IP Address. Once you have the current IP Address, use the HTTP or CLI Interface to either set the unit to DHCP mode or assign a static IP Address. If you use static IP Address assignments, and cannot access the unit over Ethernet, use the Initializing the IP Address using Normal CLI procedure. Once the IP Address is set, you can use the Ethernet Interface to complete configuration. Perform the Reset to Factory Default Procedure in this guide. This will reset the unit to “DHCP” mode. If there is a DHCP Server on the same subnet, the DHCP Server will assign an IP Address to the AP-2000. #### HTTP (browser) or Telnet Interface Does Not Work Make sure you are using a compatible browser: Microsoft Internet Explorer 5.0 or better (preferred), or Netscape 6 or higher. Make sure you have the proper IP Address. Enter your AP-2000 IP Address in the browser address bar, similar to this example: http://192.168.1.100 When the AP-2000 Login window appears, leave the User Name field empty and enter public in the Password field. Use the CLI over the serial port to check the SNMP Table, which can be restricting access to Telnet and HTTP. #### HTML Help Files Do Not Appear Verify that the HTML Help files are installed in the default directory: C:\Program Files\ORiNOCO\AP\Help\<language> If the Help files are not located in this folder, contact your network administrator to find out where the Help files are located on your server. Perform the following steps to verify or enter the pathname for the Help files: Click the Help button in the Web Interface. Select the Help Link tab located at the top of the screen. Enter the pathname where the Help files are located in the Help Link box. Click OK when finished. #### Telnet CLI Does Not Work Make sure you have the proper IP Address. Enter your AP-2000 IP Address in the Telnet connection dialog, from a DOS prompt, type: C:\> telnet <AP-2000 IP Address> Use the CLI over the serial port to check the SNMP Table, which can be restricting access to Telnet and HTTP. #### TFTP Server Does Not Work Make sure the TFTP Server has been started. Verify the IP Address of the TFTP Server. The server may be local or remote, so long as it has a valid IP Address. Configure the TFTP Server to “point” to the folder containing the file to be downloaded (or to the folder in which the file is to be uploaded). Verify that you have the proper AP-2000 Image file name and directory path. ### Client Connection Problems #### Client Software Finds No Connection Make sure you have configured your client software with the proper Network Name(s). #### Client PC Card Does Not Work Make sure you are using the latest PC Card driver software. Download and install the latest ORiNOCO client software. #### Intermittent Loss of Connection Make sure you are within range of an active AP-2000 device. You can check the signal strength using the signal strength gauge on your ORiNOCO client software. #### Client Does Not Receive an IP Address - Cannot Connect to Internet If the AP-2000 device is configured as a DHCP server, open the Web-browser Interface and select the Configure button and then the Network tab to make sure the proper DHCP settings are being used. If you are not using the DHCP feature on the AP-2000 unit, then make sure that your local DHCP server is operating on the same subnet as your AP-2000 device. From the client computer, use the “ping” network command to test the connection with the AP-2000 unit. If the AP-2000 device responds, but you still cannot connect to the Internet, there may be a physical network configuration problem (contact your network support staff). For units with Active Ethernet, make sure you are not using a crossover type Ethernet cable between the AP-2000 unit and the hub. ### VLAN Operation Issues #### Verifying Proper Operation of the VLAN Feature The correct VLAN configuration can be verified by “pinging” both wired and wireless hosts from both sides of the AP-2000 device and the network switch. Traffic can be “sniffed” on both the wired (Ethernet) and wireless (WDS) backbones (if configured). Bridge frames generated by wireless clients and viewed on one of the backbones should contain IEEE 802.1Q compliant VLAN headers or tags. The VLAN ID in the headers should correspond to one of the VLAN User IDs configured for the AP-2000 device. #### VLAN Workgroups The correct VLAN assignment can be verified by pinging the AP-2000 to ensure connectivity, by pinging the switch to ensure VLAN properties, and by pinging hosts past the switch to confirm the switch is functional. Ultimately, traffic can be “sniffed” on the Ethernet or WDS interfaces (if configured) using third-party packages. Most problems can be avoided by ensuring that 802.1Q compliant VLAN tags containing the proper VLAN ID have been inserted in the bridged frames. The VLAN ID in the header should correspond to the user’s assigned network name. ##### What if network traffic is being directed to a nonexistent host? All sessions are disconnected, traffic is lost, and a manual override is necessary Workaround: you can configure the switch to mimic the nonexistent host ##### I have just configured the Management ID and now I can't manage the AP? Check to ensure your password is correct. If your password is incorrect or all inbound packets do NOT have the correct tag, then a manual override is necessary.
| The manual override process disconnects all users and resets all values to factory defaults.
### Active Ethernet #### The AP-2000 Unit Does Not Work Verify that you are using a standard UTP Cat. 5 cable, including all 8 wires (4 pairs). Try to move the same load into a different port on the same AE hub – if it works, there is probably a faulty port or bad RJ-45 port connection. If possible, try to connect the load device into a different AE hub. Try using a different Ethernet cable – if it works, there is probably a faulty connection over the long cable, or a bad RJ45 connection. Check power plug and hub. If Ethernet link goes down, check cable, cable type, switch, and hub. #### There Is No Data Link Verify that the indicator for the port is “on.” Verify that the AE is connected to the Ethernet network with a good connection. Verify that the Ethernet cable is Category 5 or better, and is less than 100 meters (approx. 3.25 ft.) in length from the Ethernet source to the AP-2000. Try to connect a different device over the same port – if it works and link is established, there is probably a faulty data link in the load. Try to re-connect the load into a different output port (remember to move the input port accordingly) – if it works, there is probably a faulty output or input port in the AE or a bad RJ-45 connection. #### “Overload” Indications Verify that you are not using any cross-over cable between the AE output port to the AP-2000 device. Verify that there is no short over any of the twisted pair cable or the RJ-45 connector. Move the device into a different output port – if it works, there is probably a faulty port or bad RJ-45 connection. ## Recovery Procedures The most common installation problems relate to IP Addressing. For example, without the TFTP server IP Address, you will not be able to download the AP Image to the AP-2000. IP Address management is fundamental. We suggest you create a chart to document and validate the IP addresses for your system. You can also use the form provided in Recording Your Configuration Settings. If the password is lost or forgotten, you will need to reset the AP-2000 to default values. The Reset to Factory Default Procedure resets configuration settings, but does not change the current AP Image. If the AP-2000 has a corrupted software image, follow the Forced Reload Procedure to erase the current AP Image and download a new image. ### Reset to Factory Default Procedure Use this procedure to reset the network configuration values, including the AP-2000 IP Address, IP Mask, and so on. The current AP Image is not deleted. This procedure may be required if the AP-2000 password is forgotten. Press and hold the RELOAD button for about 10 seconds. Result: The AP-2000 reboots, and the factory default network values are restored. If not using DHCP, use the ScanTool or normal CLI to set the AP-2000 IP Address, IP Mask, and so on. Please refer to Using the Command Line Interface for CLI information. ### Forced Reload Procedure Use this procedure to erase the current AP image and download a new AP Image. This procedure may be required when the current AP Image is missing or corrupted. Note that this does not delete the AP-2000’s configuration (in other words, the Forced Reload Procedure does not reset to device to factory defaults). In this procedure, use the Bootloader CLI over the serial port to set the IP Address and download a new AP Image. While the AP Image is running, press the RESET button. Result: The AP-2000 reboots and the indicators begin to flash.
| By completing Step 2, the firmware in the AP-2000 will be erased. A serial cable, a cross-over Ethernet cable, and a TFTP server will be required to reload firmware.
Press and hold the RELOAD button for about 20 seconds until the POWER LED turns amber. Result: The AP-2000 deletes the current AP Image. The Bootloader CLI becomes active. The following procedure describes how to use the Bootloader CLI to assign an IP Address and download a new AP Image. ### Initialize the AP-2000 using the Bootloader CLI In some cases, specifically when a bad AP Image prevents successful booting, you may need to use the Bootloader CLI to download a new executable AP Image. If you need to force the AP-2000 to factory default state after loading a new AP image, use the Reset to Factory Default Procedure above. To download the AP Image, you will need an Ethernet connection to the computer on which the TFTP server resides. This can be any computer on the LAN, or connected to the AP-2000 with a “crossover” Ethernet cable. You must also connect the AP-2000 to a computer with a standard serial cable and use a terminal client, such as HyperTerminal. From the terminal, enter CLI Commands to set the IP Address and download an AP Image. #### Preparing to Download the AP Image Before starting, you need to know the AP-2000 IP Address, IP Mask, the TFTP Server IP Address, and the AP Image file name. Make sure the TFTP sever is running and configured to point to the folder containing the image to be downloaded. #### Download Procedure Connect the computer serial cable to the AP-2000 serial port. Start TFTP Server, and make sure the new AP Image file is in the TFTP directory. In this procedure, TFTP downloads an AP Image to the AP-2000. Open your terminal emulator, set the following connection properties, and then connect. Com Port: <COM1, COM2, etc., depending on your computer> Baud rate: 9600 Data Bits: 8 Stop bits: 1 Flow Control: None Parity: None Enable the “ASCII Setup” settings by selecting “Send line ends with line feeds”. Result: HyperTerminal sends a line return at the end of each line of code. Press the RESET button on the AP-2000. Result: The terminal display shows Power On Self Tests (POST) activity. After approximately 30 seconds, a message indicates: Sending Traps to SNMP manager periodically. After this message appears, press the ENTER key repeatedly until the following prompt appears. Enter only the following statements. Once the AP-2000 image is downloaded and you have a valid AP-2000 IP Address, configure the AP-2000 as described in Configuring the Access Point 2000ORiNOCO AP-2000 device. ### Setting IP Address using Serial Port and Normal CLI Use the following procedure to set an IP Address over the serial port using the normal CLI. The network administrator typically provides the AP-2000 IP Address. #### Hardware and Software Requirements Standard serial data (RS-232) cable with a female DB-9 connector at each end or a standard serial cable and the Mini-DIN8 to DB-9 adapter included in your kit. ASCII Terminal software, such as HyperTerminal. #### Attaching the Serial Port Cable Remove power from the AP-2000 and your computer. Connect the serial port cable to the back of the AP-2000 unit and to your computer. Restart the computer and power up the Access Point device. #### Initializing the IP Address using Normal CLI After installing the serial port cable, you may use the CLI to communicate with the AP-2000. You may use most generic terminal programs, such as HyperTerminal. Once the IP Address has been assigned, use the HTTP Interface or the CLI to complete configuration. Many web sites offer shareware or commercial terminal programs you can download. Use the following procedure to initialize the AP-2000 IP Address. Open your terminal emulator, and then set the following connection properties: Com Port: <COM1, COM2, etc., depending on your computer> Baud rate: 9600 Data Bits: 8 Stop bits: 1 Flow Control: None Parity: None Enable the “ASCII Setup” settings by selecting “Send line ends with line feeds”. Result: HyperTerminal sends a line return at the end of each line of code. Press the RESET button on the AP-2000 (located on the LED Indicator side of the unit). Result: The terminal display shows Power On Self Tests (POST) activity, and then displays a CLI prompt, similar to the example below. This process may take up to 90 seconds. Enter the password (default is "public"). Result: The terminal displays a welcome message and then the CLI Prompt: Enter show ip. Result: Network parameters appear: Result of “show ip” bootloader CLI command Change the IP Address and other network values using set and reboot CLI commands, similar to the example dialog below (use your own IP Address and IP Mask). Result: After each entry the CLI reminds you to reboot; however wait to reboot until all commands have been entered. After the AP-2000 reboots, verify the new IP Address by reconnecting, and then entering a show ip CLI statement (as in Step 5). Alternatively, you can use the ping network command from networked computers to test the new IP Address. When the proper IP Address is set, use CLI or the HTTP Interface over the LAN to complete configuration and manage operations. ## System Alarms (Traps) ### Security Alarms
oriTrapAuthenticationFailure | A client has failed to authenticate using one of the following authentication methods: MAC Access Control Table, RADIUS MAC Authentication, or 802.1x Authentication (for 802.1x, EAP type is specified)
oriTrapUnauthorizedManagerDetected | An unauthorized manager has attempted to view and/or modify parameters
### ### Wireless Interface Card Alarms
oriTrapWLCNotPresent | Wireless Card (A and/or B) not present
oriTrapWLCFailure | Wireless Card (A and/or B) general failure
riTrapWLCRemoval | Wireless Card (A and/or B) removal
oriTrapWLCIncompatibleFirmware | Wireless Card (A and/or B) incompatible firmware detected
oriTrapWLCVoltageDiscrepancy | Wireless Card (A and/or B) voltage discrepancy detected
oriTrapWLCIncompatibleVendor | Wireless Card (A and/or B) incompatible vendor detected
oriTrapWLCFirmwareDownloadFailure | Wireless Card (A and/or B) firmware download failure detected
### ### Operational Alarms
oriTrapWatchDogTimerExpired | Watch Dog Timer has expired
oriTrapRADIUSServerNotResponding | RADIUS Server is not responding or error communicating with RADIUS Server
oriTrapModuleNotInitialized | Module has not been initialized
oriTrapDeviceRebooting | Device is rebooting
oriTrapTaskSuspended | Task suspension has been detected
oriTrapBootPFailed | BootP failure detected (no response from BootP Server)
oriTrapDHCPFailed | DHCP Client failure detected (no response from DHCP server)
### ### FLASH Memory Alarms
oriTrapFlashMemoryEmpty | Flash memory card detected empty
oriTrapFlashMemoryCorrupted | Flash memory data corrupted
### ### TFTP Alarms
oriTrapTFTPFailedOperation | FTP (upload or download) failure detected
oriTrapTFTPOperationInitiated | TFTP (upload or download) operation initiated
oriTrapTFTPOperationCompleted | TFTP (upload or download) operation completed
### ### Image Alarms
oriTrapZeroSizeImage | Zero size image has been downloaded to device
oriTrapInvalidImage | Invalid image has been downloaded to device
oriTrapImageTooLarge | Image downloaded to device is too big
oriTrapIncompatibleImage | Incompatible image has been downloaded to device
### ### Standard MIB-II (RFC 1213) Alarms
coldStart | Device has been cold started
warmStart | Device has been warm started
linkUp | Device Link is up (Ethernet interface is up)
linkDown | Device Link is down (Ethernet interface is down)
### ### Bridge MIB (RFC 1493) Alarms
newRoot | New root has been added to Bridge
topologyChange | Network Topology change has been detected
## ## Related Applications ### RADIUS Authentication Server If the RADIUS authentication server is selected for authentication during configuration, make sure RADIUS is configured and running. Otherwise, clients will not be able to log in. There are several reasons the authentication server services might be unavailable, here are two typical things to check: Make sure you have the proper RADIUS authentication server information setup configured in the AP-2000. Check the RADIUS Authentication Server’s Shared Secret and Destination Port number (default is 1812; for RADIUS Accounting, the default is 1813). Make sure the RADIUS authentication server RAS setup matches the AP-2000. ### TFTP Server The “Trivial File Transfer Protocol” (TFTP) server allows you to transfer files across a network. You can upload files from the AP-2000 for backup or copying, and you can download the files for configuration and AP Image upgrades. The TFTP software is located on the ORiNOCO AP-2000 Installation CD-ROM. If a TFTP server is not configured and running, you will not be able to download and upload images and configuration files to/from the AP-2000. Remember that the TFTP server does not have to be local, so long as you have a valid TFTP IP Address. TFTP does not have to be running for AP-2000 operations that do not transfer files. After the TFTP server is installed: Check to see that TFTP is configured to point to the directory containing the AP Image. Make sure you have the proper TFTP server IP Address, the proper AP Image file name, and that the TFTP server is connected. Make sure the TFTP server is configured to both send and receive, with no time-out. ## LED Indicators
POWER | ETHERNET | PC CARD A | PC CARD B | INIDICATION
Green | Green flash with data activity | Green flash with data activity | Green flash with data activity | Normal Operation
Amber | n/a (not applicable) | Amber | Amber | Rebooting
Amber | n/a | n/a | n/a | Missing or bad AP Image if amber after reboot
Red | Red | n/a | n/a | Power On Self Test (POST) running
n/a | n/a | Red | Red | PC Card incompatible on indicated interface
n/a | n/a | Red | Red | PC Card failure on indicated interface
Green | n/a | Amber | Amber | Indicated interface in Administrative State
n/a | n/a | Off | Off | PC Card not present