===================================================================
       Readme for ORiNOCO Wireless AP-4000 Access Point 

Release 3.2.1                                         May 2006
===================================================================
 

Welcome to Release 3.2.1 of the ORiNOCO Wireless AP-4000 Access 
Point system.  This readme describes the following for the ORiNOCO 
Wireless AP-4000 Access Point. 
-------------------------------------------------------------------

        1. Introduction
        2. Software Description
        3. Release History
        4. Installation Notes
        5. Know Issues
        6. Obtaining Technical Assistance

-------------------------------------------------------------------

1.   Introduction

      The ORiNOCO Wireless AP-4000 is part of a wireless Internet 
      access infrastructure. It functions as a wireless network 
      access point to the Internet or other data networks. As 
      clients move from one coverage cell to another, AP-4000 units 
      automatically perform client handovers within the same subnet.

      The AP-4000 system provides:
        - Easy installation and operation
        - Automatic client handover
        - Over-the-air encryption of data
        - High-speed links to the Internet

      Access Point management is provided through CLI (Command Line 
      Interface), Standard Web based Interface, and SNMP (Simple 
      Network Management Protocol). Any of these management 
      interfaces can be used to view and configure the Access 
      Point's parameter settings.

     
---------------------------------------------------------------------

2.   Software Description
 
     In order to ensure that we are able to provide you with the latest 
     available software, the latest version of the AP software may be 
     downloaded from our website by initially visiting http://support.proxim.com/

     The AP software is not included on the CD supplied.

2.1  About this software
 
     Access Point Software comprises

      * Access Point image (Download from the online support knowledgebase)
      * Access Point scantool
      * Access Point MIBs  (Also available for download from the online
        support knowledgebase)
                802.11 MIB:             mib-802.mib
                                        IANAifType-MIB.mib
                MIB-II:                 rfc1213.mib
                Bridge MIB:             rfc1493.mib
                EtherLike MIB:          rfc1643.mib
                                        SNMPv2-MIB.mib
                                        orinoco.mib
                IEEE 8021 MIB:          802.1X.mib              

     With this software you should have received one Quick Install Guide,
     which describes the hardware and initial software installation of the AP.

     Additionally, the ORiNOCO AP-4000 User Guide can be found in PDF form on
     the CD accompanying this release and online at the Proxim WEB site.

     This document describes in detail the installation, configuration, and
     management of the Access Point.

     Alternatively, you can access detailed information in the online help file
     by clicking on the "Help" button on the WEB  interface.
 
2.2  Files Installed
 
     The following software will be installed in the directory
     specified during setup:
 
     Scanning Tool:                     SCANTOOL.EXE  v2.4 

     Problem Report form:               REPORT.TXT
 
     License Description:               LICENSE.TXT
 
     Readme file (this file):           README.TXT

2.3  XTRAs Folder - CD Only
       In the XTRAs\Solarwinds folder we include a TFTP server 
       (OEM-TFTP-Server.EXE) that may be installed on 
       the user's PC for downloading and uploading files to and from 
       the AP-4000.It comes with help documentation included in the 
       application when it is executed.

       In the XTRA\Ekahau Site Survey folder we include Install_Survey.exe
       and EULA.txt.
        
       This software can be installed on the user's PC to assist in surveying
       Wi-Fi Networks.

       Acrobat Reader is available in XTRAS folder 

2.4  European Waste(Disposal) of your Electronic and Electric Equipment document.
       WEEE_flyer.pdf

------------------------------------------------------------------- 

3.0  Release History

3.1  Release 3.2.1 - May 2006

     - Following are the new features added in this release
     
     Transmit power control in 1db increments


     -  The following issues and/or RFCs have been fixed in this release

     #  Calling reboot twice would reset the AP to factory defaults (#1500)

     #  Adding an extensive range of IP adress in the 
        new DHCP Server IP Pool Table cause AP to reboot (#849)

     #  Malformed Traps were sent by the AP in some cases (#1407)

     #  after upgrading to v3.2, the AP disables SSID broadcast (#1506)

     #  Show the right cipher type in station statictics (#18972)

     #  When updating a config file, the previous IP Pool 
        tables (and other tables) remained (#1019)

     #  Customers in the ETSI domain could not select 
        the lower four channels after disabling ACS.
        With v3.2, the user could only uncheck ACS.  
        However, now with V3.2.1, the user can select one of the four 
        lower channels in the ETSI regulatory domain (#1539)


3.2  Release 3.2.0 - March 2006

     - Following are the new features added in this release
       
     Multiple BSSID with upto 4 beacons
       Ability to broadcast all the SSIDs configured in the AP. The clients can
       connect to the appropriate SSID that matches the client’s capabilities,
       access method and security policy requirements.


     -  The following issues and/or RFCs have been fixed in this
        release

     #  Issue of 802.11i Authentication (2005.11.22 NEC infrontia Corp.) (#1434)

     #  SNMPv3 does not work with v3.1.0 (#1420)

     #  EU ACS cannot be disabled with v3.1.0 (#1383)

     #  WPA-PSK errors out when 64 characters are used. (#1329)

     #  If Vlan is enabled then it is possible to set WEP txkey as key 1/2/3. 
        Only key 0 is used as the txkey (#977)

     #  Having one SSID broadcast reduces and eliminates the number of 
        allowed clients. (#1445)

     #  Can not create/add IP management IP address table using SNMP (#1345)

     #  Learn Table is not aged out (#1449)

     #  reboots at MS It show (#1424)

     #  Added the vlanid information regarding client in the Statistics tab (#1355)

     #  Disable "SuperMode" checkbox for 802.11g and bg interface. (#1367)

     #  There are many NULL data (PS=0) from the AP. (#1404)

     #  Wireless Station annouce message on incorrect VLAN (#1408)

     #  Fall backrate for BG mode of AP takes long causing EAP timeout issue. (#1446)

     #  Incorrect trap message coming out of the AP. (#1454)

     #  AP 802.1x rekey every 14h30 even with Re-Key set to zero. (#1455)

     #  Multicast rate returns to default when enabling or disabling ACS. (#1456)

     #  Client is assigned to wrong VLAN when SSID matches except for specific
        suffix. (#1459)


3.3  Release 3.1.0 - August 2005
   
     - Following are the new features added in this release

     Simple Network Time Protocol (SNTP)
       The AP will utilize SNTP to timestamp syslog messages.

     Enhanced Client Connect/Disconnect syslog messages
       When a client authenticates to an access point, the following information is
       provided via syslog: Timestamp, MAC Address, SSID, Auth Type, Cipher Type,Status.
     
       When a client de-authenticates from an AP, the following information is provided 
       via syslog: Timestamp, MAC Address, SSID , Cipher Type, Disconnect reason.

     Configuration Change Counter
       This feature allows tracking of configuration changes in the AP so that
       network management systems will be able to easily determine whether or not the
       AP configuration has changed without having to poll each management object. 
    
     Unique RADIUS Accounting Session ID
       This feature allows service providers to more accurately track usage.
    
   
     -  The following issues and/or RFCs have been fixed in this
        release

     #  AP does not pass IPv6 in VLAN mode 050414-000070. (#1167)

     #  802.1x allows WEP client to connect to the AP initially. (#1256)

     #  AP management via Ethernet hangs up. (#1156)

     #  If 24 or more clients are try to authenticate at the same time,
        failure occurs. (#1012)

     #  CLI: creating an ssh fingerprint via telnet causes the telnet session
        to close. (#17720)
     
     #  CLI: Command set speclinkstatus does not work. Should be removed when
        not supported (#1210)

     #  VLAN assignment by Radius - Accept message not handled by AP. (#1185)

     #  WPA - PSK - clients can not associate with AP. (#1093)

     #  AP loses management ability under high broadcast load. (#1069)

     #  Sony PDA and AP with PEAP connection issue. (#1295)

     #  Syslog function problem - detecting logout of clients. (#380)


3.4  Release 2.6.0 - January 2005

     -  Following are the new features added in this release

     Load Balancing 
       Create maximum threshold value for client connections per wireless
       interface to limit the number of users on AP.
     
     Make Defer Threshold Configurable
       This feature allows the administrator to configure the Distance between
       APs management object for Atheros based wireless interfaces.This enables
       the device to perform better in high noise environments by increasing
       the receive sensitivity and transmit defer threshold.

     Disable DFS in EU, EU2 and UK Variants

       DFS is currently enabled for the 5 GHz Lower (5.15 - 5.25 GHz) 
       and Middle (5.25 - 5.35 GHz) bands for the products programmed
       for the ETS regulatory domain.

       ACS is also enabled by default and can not be disabled (read-only parameter)
       via management interfaces.

       This feature disables DFS operation in the lower band which is not
       required by the ETSI regulatory domain bodies. DFS operation is still
       done on the middle band.

       This feature also allows the administrator to disable ACS and configure
       channels in the Lower band (36, 40, 44, and 48).   

       This feature will allow WDS configuration for ETSI APs.

     MIC Attack Reporting
       Implemented Syslog and HTTP Alarms for the Mic Attack and Mic Report Attack
       packets.
     
     80211.d Regulatory Domain Defects
       Additional country codes to the existing software variants.Fixes were also done
       on the User Guide to make sure the user guide and software image are consistent.

     Save antenna diversity settings to config file
       Allows configuration of which antenna to use on the AP. This configuration is 
       supported by SNMP and CLI management interfaces.

     Internet Browser configuration support 
       AP browser UI support is for the last two versions of IE (v6 and v5.01)
       and the last two versions of Netscape (v7.1 and v7.2).
       
     Backward compatibility
       Products running firmware version 2.3 or later shall be upgradeable to 
       the 2.6.0 software image while maintaining the existing configuration.
    
    

     -  The following issues and/or RFCs have been fixed in this
        release

     #  QOS client with SWTKIP has no connectivity. The client reports
        decryption errors. (#17717)

     #  Syslog and HTTP Alarms to be implemented for the Mic Attack and Mic Report
        Attack packets.(#17715)

     #  Country List for 802.11d on an AP with Europe (ETSI) does not match 
        documentation. (#17643 )

     #  Country List for 802.11d on an AP with USA(FCC) does not match 
        documentation. (#17642)

     #  MAC addresses in MAC authentication needs to be all lower case. (#963)
     
     #  AP does not indicate the number of Reject counters with Microsoft Windows
        IAS. (#481)
     
     #  User Guide: Updated WDS/WEP procedure (#821)
     
     #  User Guide: Updated input requirements for SSID/Network Name (#833)

     #  User Guide: Updated WPA-PSK configuration instructions (#865)

     #  User Guide: Updated Radius accounting and MAC authentication procedure (#879)

     #  User Guide: Updated description of LED functionality (#877)

     #  User Guide: Added Warranty Statement to manuals (#905)

     #  User Guide: Updated WDS link description (#908)

     #  User Guide: Updated RBMA feature description (#909)

     #  User Guide: Updated outdated WEP Plus reference (#947)

     #  User Guide: Updated procedure for enabling 802.11d and setting country code (#974)

     #  User Guide: Added bookmarks in PDF files (#997)

     #  User Guide: Updated Tx Power Specifications (#17813)

     #  User Guide: Updated TCP/UDP Port Number value (#1011)



3.5  Release 2.5.2 - October 2004

     -  Following are the new features added in this release

     WME(Wireless Multimedia) 
        Spectralink VOIP support for 802.11g
        
        This feature support the WMM subset of IEEE 802.11e draft amendment based
        upon the Wi-Fi Alliance WMM specification
 
     Radius based authentication for management Access
        Device Management Access control using RADIUS
        User Modes Supported – Super User, Limited User
        Support for Telnet/SSH, HTTP/HTTPS
        Authentication Mechanism based on Username-Password
        Local authentication mode 

     Support of SSH2 protocol for secure remote login for management access

     Improved Rogue AP Detection Support
        Promiscuous mode monitoring of Clients
        Multi-band (2.4 GHz & 5 GHz) Scanning
        Continuous scanning on dedicated Interface(s)

     Radius Attributes Support (Enhancements)
        Attributes identified based on customer requirements & RFC/Competitor
        Analysis Attributes include: State, Calling Station Id, Called Station Id,
        Session Timeout, Acct-Delay-Time, Acct-Input-Octets, Acct-Output-Octets,
        Acct-Session-Time, Acct-Input-Packets, Acct-Output-Packets,
        Acct-Terminate-Cause, Class, Vendor Specific Attributes for VLAN.
 
     CLI Batch file for Configuration
        Upload and Execution of CLI Batch file via HTTP/TFTP
        Enhanced Auto-Configuration feature

     VLAN Enhancements
        Security Policy Configuration per VLAN 
          Includes mixed mode of security
        Authentication Server Configuration per VLAN 
        RADIUS Server based VLAN assignment of users

     Ability to remotely Shutdown the Wireless Interface(s)
    
     802.11d support
        Allow clients to adopt to regulatory domain of AP
        Add Country Specific Regulatory Information

     Ability to disable Reset option
        Option to disable Hardware Reset (Reset to Factory defaults)
     
     Super A/G mode 
        Higher data rate for 11g
     
     Turbo A/G Mode
        Turbo mode can  be enabled on 802.11a, 802.11g, and 802.11b/g operational
        modes and enhances the throughput by performing channel bonding.

     DHCP Relay Agent
        The AP can forward DHCP requests from clients to configured DHCP servers on
        the same or different network segment.
  
     Broadcast SSID
        We support the ability of broadcasting a single SSID when multiple SSIDs are
        configured on a wireless interface; the administrator must enable this
        feature on the desired SSID to broadcast the SSID in the beacon.
        Closed system is also supported per SSID when multiple SSIDs are configured.  

     Mixed Security Modes using Security Profiles
        Security is now configured using Security Profiles which can be applied to
        the wireless interface’s SSIDs.
                
        Mixed security modes can be used with VLAN disabled, but VLAN must be
        enabled when you want to support multiple SSIDs.

        The Security Profiles can be configured with combinations of supported
        security modes
     
     WPA2 including Pre-authentication and PMK Caching
        WPA2 is compliant with the IEEE 802.11i which includes mutual authentication
        and CCMP/AES data confidentiality protocol.
        
        Pre-authentication and PMK caching allows for an AP to pre-authenticate a
        client which in turn will allow for faster roaming between APs.

    
     -  The following issues and/or RFCs have been fixed in this
        release 
        
     #  Change the CLI vlanmgmtid for untagged (-1) to show untagged in the show
        vlanmgmtid (#730)

     #  The item "Authorization lifetime" is not in "EAP/802.1x Auth" menu.  But if
        Authorization lifetime is changed in "RADIUS Auth" menu, it is effective.
        (#719)

     #  CLI command for timeout of MAC addresses in the IP LAN table. (#674)

     #  Place the enabled VoIP – spectra link option on the HTTP GUI. (#755)

     #  CLI:  Add management objects for enabling/disabling the trap groups.
        (#12114)

     #  CLI - add command/parameter name for version - show sysversion (#10527)
  
     #  Request to modify DHCP client functionality to keep renewing the lease.
        (#11735)

     #  Trap requested for manual reboot (#10762)

     #  AP allows configuration of VLAN ID 0 (#16414)
 

3.6  Release 2.4.12 - September 2004
   
     -  No new feature additions in this release

     Singapore variant list updated. Earlier build use to support Singapore .11a
     lower band, upper band and ISM band channels. The certification from
     singapore prohibits us from supporting lower band channels for Singapore
     variants. This image software handles the Singapore variant differently. 

     -  The following issues and/or RFCs have been fixed in this
        release 
 
     #   APs with Atheros radios drop connections when more than 5 
        spectralink calls connect simultaneously; however, the AP 
        will support up to 5 calls connected simultaneously.
        (#16427)

     #  There is a problem retrieving the config file via TFTP.  The
        workaround is to select retrieving the config file via HTTP. 
        (#16531)
 

3.7  Release 2.4.11 - May 2004

     -  Following are the new features added in this release

        Spectralink Support for Atheros Radio

        Deny Non-Encrypted Data Support for Atheros Radio

     -  The following issues and/or RFCs have been fixed in this
        release

     #  WEP mode on wireless VLAN is fixed.  (#768)

     #  When the AP is input over than 255 characters(ASCII) in IP Address 
        of "RADIUS" - "RADIUS Acct", the error message will not occur and 
        locked AP. (#735)

     #  If VLAN Management is enabled, it is no longer possible to link the 
        AP with different SSIDs. (#732)

     #  VLAN with WPA-PSK is fixed.  (#786/712)

     #  Web: Change Orinoco MIB name to Enterprise MIB (#12004)

     #  Userguide wording was updated with the following text:
        "Encryption Keys must be configured for WEP clients if 
        mixed mode is   selected." (#792)

     #  The SYSLOG HTTP window now includes all syslog host table
        entries. The heart beat status is a drop down menu, the 
        heart beat interval text box is enabled or disabled depending 
        on the heart beat status. (#11663)

     #  Added ":"'s to mac address verbage to the sentence in "Static
        MAC" tab of the web interface. (#15269)

     #  Last Known Good Config File Functionality is now working
        (#15547)

     #  FP2 - CLI should not permit telsessiontout to be configured
        less than 60 (#15735)

     #  Added an extra column for additional space and fixed some of
        the column sizes for trap messages in the Status tab. (#15924)

     #  Add SVP - spectra link VoIP into the Atheros 11bg upgrade kit 
        and 11a upgrade kit. (#666)

     #  Setup Wizard now sets AP in 11a-WPA mode. (#511)

3.8  Release 2.4.10 - Jan 2004

     Initial Release



-------------------------------------------------------------------

4.   Installation Notes
     
                                              
4.1  If you download the installation from the web:
       The software, MIB, and documentation are currently found under 
       Answer ID 1250. Please select the appropriate file, image,software, 
       or documentation and proceed to either view from the web or download
       to a specific location. The WinZip Self-Extractor will request a
       temporary location to unzip files. You may use the default location
       or choose a customized location. 

       The Help and User Guides folder includes a setup.exe file. Please run 
       setup.exe in order to use the help documentation.

4.2  If you are using the installation CD:
       Insert the ORiNOCO Installation CD in your CD-ROM drive and 
       the autorun facility will start the CD wizard which will 
       guide you through the installation process.

4.3  System Requirements
       - Windows 98, NT, 2000, or XP
       - At least 5 Mb of free disk space
       - A web browser, preferably MS IE 6 with Service Pack 1 or
         Netscape 6.1
              
      Note : 
      -----
      For SSL, IE 5.00 (128 bit) with Service Pack 2 (or) 
      IE 5.0 (56 bit) with patch Q240308 (or) IE 6.0 
      (128 bit) with Service Pack 1 and Patch Q323308
      is required.                     
        
      For 802.1x Authentication using TLS, XP Clients should 
      have Service Pack 1 installed on it. 
        
------------------------------------------------------------------- 

5.   Known Issues

     #  When "Super" mode is enabled, then 1x PEAP authentication fails (#19041)

     #  Blacklist CLI command is in User Guide but does not exist 
        in product's CLI. This should be removed from user guide, 
        and re-added when CLI command is properly implemented (#19036)

     #  WDS or Mesh mode - when exceeding a set # of pps (packets per second), 
        over-running the total available wireless throughput, the load may cause 
        the system to reboot.  This may be encountered in high bandwidth 
        environments running UDP. (#19010)

     #  Radius Accounting access-accept packets are modified during 
        transmission, breaking accounting by ignoring the request. (#1542)
      
     #  aplinklen shows up as "0" in CLI when software is upgraded
        to R3.1.x. This is only a display issue. The default value that is
        actually used is "200".

     #  Mixed Mode with WEP & WPA enabled does not work on a 
        D-Link client using WEP.  (#17465)

     #  Syslog requires disabling and re-enabling the Syslog 
        whenever adding or deleting an IP Address to the table
        (#16442)

     #  If Vlan is enabled then it is possible to set WEP txkey as 
        key 1/2/3. Only key 0 is used as the txkey. (#977)

     #  It is possible to configure and enable multiple radius 
        profiles (with different vlan id) for the same radius 
        server. The functionality involving that radius server 
        may not work correctly in such cases. (#17827)

     #  It is possible to configure two SSIDs, one with non-secure 
        security profile and other with security profile containing
        WPA/WPA-PSK/802.11i/802.11i-PSK, on the same interface. Some 
        WPA/WPA-PSK/802.11i/802.11i-PSK clients may face problems while 
        connecting in these scenarios. (#17826)

     #  Configuring security mode WPA/WPA-PSK/802.11i/802.11i-PSK for 
        the first security profile returns error. A workaround is to 
        use the configure a new security profile with these values and 
        assign it to the SSID. Another work around to do that for first 
        security profile is the following.
        - Go to SSID/VLAN/Security Page
        - Go to SecProfiles page and edit first security profile.
        - enable 802.1x security mode and hit OK
        - disable non-secure security mode and hit OK
        - enable WPA/WPA-PSK/802.11i/802.11i-PSK and hit OK
        - disable 802.1x and hit OK. (#17656)

  
-------------------------------------------------------------------  

6.   Obtaining Technical Assistance
       If you encounter problems when using this product or would like information 
       about our other ORiNOCO Wireless products, please contact the reseller from 
       whom you purchased the equipment for support.  If you would like reseller 
       contact information, please contact Proxim inside sales at 1-800-229-1630 
       or use the contact information on our website.

6.1  Troubleshooting
       For the most up-to-date, detailed troubleshooting information, refer to the
       ORiNOCO AP-4000 User Guide and Proxim Knowledge base.
      

6.2  Obtaining Documentation
       The user guide is available in English language and you 
       can access the most recent software and user documentation 
       on the World Wide Web at the following site: http://www.proxim.com

-------------------------------------------------------------------      
                             END OF FILE
