march 2, 2010 revision 0 wireless lan board service manual

321

Wireless LAN Board

Service Manual

March 2, 2010Revision 0

0-2

0-2

ApplicationThis manual has been issued by Canon Inc. for qualified persons to learn technical theory, installation, maintenance, and repair of products. This manual covers all localities where the products are sold. For this reason, there may be information in this manual that does not apply to your locality.

CorrectionsThis manual may contain technical inaccuracies or typographical errors due to improvements or changes in products. When changes occur in applica0-1le products or in the contents of this manual, Canon will release technical information as the need arises. In the event of major changes in the contents of this manual over a long or short period, Canon will issue a new edition of this manual.

The following paragraph does not apply to any countries where such provisions are inconsistent with local law.

TrademarksThe product names and company names used in this manual are the registered trademarks of the individual companies.

CopyrightThis manual is copyrighted with all rights reserved. Under the copyright laws, this manual may not be copied, reproduced or translated into another language, in whole or in part, without the written consent of Canon Inc.

(C) CANON INC. 2010

CautionUse of this manual should be strictly supervised to avoid disclosure of confidential information.

0-3

0-3

ContentsSpecifications

Product Specifications -------------------------------------------------------1-2Network Specifications ----------------------------------------------------------- 1-2Confirming the Wireless LAN Channes -------------------------------------- 1-2LED Indicators ---------------------------------------------------------------------- 1-2Specifications ----------------------------------------------------------------------- 1-3ERR Indicator ----------------------------------------------------------------------- 1-4

ERR2 Indicator ------------------------------------------------------------------------------ 1-4LNK Indicator ------------------------------------------------------------------------------- 1-4ERR1 Indicator ----------------------------------------------------------------------------- 1-4Reference ------------------------------------------------------------------------------------ 1-4

FunctionsBasic Function -----------------------------------------------------------------2-2

Setting Wireless LAN ------------------------------------------------------------- 2-21. Network Protocol Settings------------------------------------------------------------- 2-22. Setting the SSID ------------------------------------------------------------------------- 2-23. Security Settings------------------------------------------------------------------------- 2-24. Setting the Primary Network ---------------------------------------------------------- 2-35. Enabling the Settings ------------------------------------------------------------------- 2-36. Settings of the Wireless LAN can be checked after printing the Network user's data list ------------------------------------------------------------------------------- 2-47. Printing a Test Page -------------------------------------------------------------------- 2-4

History of Standards -------------------------------------------------------------- 2-5Authentication in a Corporate Environment --------------------------------- 2-5

Access Point -------------------------------------------------------------------------------- 2-5802.1x ----------------------------------------------------------------------------------------- 2-5EAP as an authentication protocol ---------------------------------------------------- 2-6

Extension Card Information ----------------------------------------------------- 2-7Security Settings ------------------------------------------------------------------- 2-7

WPA/WPA2+802.1X/EAP ---------------------------------------------------------------- 2-7802.1X/EAP+WEP ------------------------------------------------------------------------- 2-7

WPA/WPA2-PSK --------------------------------------------------------------------------- 2-7WEP (Static WEP) ------------------------------------------------------------------------- 2-8

MaintenanceReference matter in market service --------------------------------------3-2

Connection Procedure ------------------------------------------------------------ 3-2Setting for the environment without security setting ------------------------------- 3-2

Emergency Startup Mode -------------------------------------------------------- 3-2Control Panel of the Machine ----------------------------------------------------------- 3-2LED Indicators ------------------------------------------------------------------------------ 3-2SSID ------------------------------------------------------------------------------------------- 3-2Encryption and Authentication Method ----------------------------------------------- 3-2Adhoc Mode --------------------------------------------------------------------------------- 3-2

Initializing the Network Settings ------------------------------------------------ 3-2Erasing the Security Settings --------------------------------------------------- 3-3

Deleting the security setting ------------------------------------------------------------- 3-3Reference: ----------------------------------------------------------------------------------- 3-4Erasing the Security Settings using SW1 -------------------------------------------- 3-4

Enabling Setting -------------------------------------------------------------------- 3-5Updating the Firmware ----------------------------------------------------------- 3-6

IMPORTANT -------------------------------------------------------------------------------- 3-6Radio Wave Intensity ------------------------------------------------------------- 3-7

Troubleshooting Map ---------------------------------------------------------3-8Troubleshooting Map-------------------------------------------------------------- 3-8

Measure B ----------------------------------------------------------------------------------- 3-8Troubles At Using Wireless LAN ----------------------------------------------- 3-9

1. Connection with the wireless LAN is impossible ------------------------------- 3-92. Wireless LAN menu is not displayed on the UI of the host machine ------ 3-93. Wireless LAN menu is displayed on the UI of the host machine ----------- 3-9

Related Error Code --------------------------------------------------------- 3-11List of Error Messages ----------------------------------------------------------- 3-11Error Messages -------------------------------------------------------------------3-12

Displaying Error Messages -------------------------------------------------------------3-12

0-4

0-4

Explanation of SymbolsThe following symbols are used throughout this Service Manual.

Symbols Explanation

Using it for general attention, warning, a notice of the danger that does not specify.

Using the possibility of the electric shock for notice to be careful to.

Mention about written item in the copier BASIC series to understand mention contents.

T-0-1T-0-1

The following rules apply throughout this Service Manual:

1. Each chapter contains sections explaining the purpose of specific functions and the relationship between electrical and mechanical systems with reference to the timing of operation. In the diagrams, represents the path of mechanical drive; where a signal name accompanies the symbol, the arrow indicates the direction of the electric signal. The expression "turn on the power" means flipping on the power switch, closing the front door, and closing the delivery unit door, which results in supplying the machine with power.

2.In the digital circuits, '1' is used to indicate that the voltage level of a given signal is "High", while '0' is used to indicate "Low". (The voltage value, however, differs from circuit to circuit.) In addition, the asterisk (*) as in "DRMD*" indicates that the DRMD signal goes on when '0'.

In practically all cases, the internal mechanisms of a microprocessor cannot be checked in the field. Therefore, the operations of the microprocessors used in the machines are not discussed: they are explained in terms of from sensors to the input of the DC controller PCB and from the output of the DC controller PCB to the loads.

The descriptions in this Service Manual are subject to change without notice for product improvement or other purposes, and major changes will be communicated in the form of Service Information bulletins.All service persons are expected to have a good understanding of the contents of this Service Manual and all relevant Service Information bulletins and be able to identify and isolate faults in the machine.

1

1 Specifications

SpecificationsProduct compositionSpecifications

■■

1

11-2

1-2

Specifications > Product Specifications > LED Indicators

Specifications > Product Specifications > LED Indicators

Product Specifications

Network SpecificationsFor ordinary use, the wireless LAN board communicates with only access points.The wireless LAN board communicates with only one access point (Infrastructure mode).Adhoc Mode communication not via access points is available in the case of issue occurrence.One wireless LAN board can be used for one host machine. More than one wireless LAN board cannot be used in one host machine.IP address is set for the LAN connector of the host machine and the wireless LAN board respectively.Communication to the access point that conforms to 5GHz band IEEE802.11a is unavailable.

Important

The Wireless LAN Board-B1 to be sold in other areas than USA cannot be used in the area where the USA regulation 'FCC (Federal Communications Commission)' is applied.

Confirming the Wireless LAN ChannesThe wireless channels you can use with the Wireless LAN Board are fixed for the country/region it is used in. When using the Wireless LAN Board in the U.S.A., channels 1 to 11 can be used, and the region is displayed as 'US'. In the UK and other countries/regions, channels 1 to 13 can be used, and the region is displayed as 'JP, AT'. This section describes the procedure for confirming the region.1. Press [WLAN Card Information] on the Extension Card Settings screen.Settings/Registration > Preferences > External Interface > Extension Card SettingsWireless LAN > WLAN Card Information > Region Code2. Confirm the code displayed under [Region Code].

LED IndicatorsIf problems occur when communicating with the Wireless LAN Board, check the LED indicators on the side of the machine.

Name DescriptionLED1 ERR1 Indicator (Yellow) Flashes when a problem occurs with security settings

or an error occurs during authentication.LED2 ERR2 Indicator (Orange) Flashes when a problem occurs with the Wireless

LAN Board hardware.LED3 LNK Indicator (Green) Lights when the Wireless LAN Board is correctly

connected to the network.

F-1-1F-1-1

T-1-1T-1-1

1

11-3

1-3

Specifications > Product Specifications > Specifications

Specifications > Product Specifications > Specifications

SpecificationsStandard IEEE802.11g/IEEE802.11bTransmission Method DS-SS method/OFDM methodFrequency Range 2.412-2.472MHz (TELEC, 13ch)

2.412-2.462MHz (FCC, 11ch) 2.412-2.472MHz (ESTI, 13ch) (The outgoing level depends on the regulation of each country)

Data Transmission Speed IEEE802.11g:6/9/12/18/24/36/48/54MbpsIEEE802.11b:1/2/5.5/11Mbps

Communication Modes Infrastructure Mode/Adhoc Mode (only for emergency startup)Security 128(104)/64(40) bit WEP

IEEE 802.1X/EAP(TLS/TTLS/PEAP) PSK WPA(TKIP) WPA(AES) (Wi-Fi Protected Access (WPA) Version 2.0 (April 29,2003, Wi-Fi Alliance)conformity) (Wi-Fi Protected Access (WPA) Version 3.1 (August, 2004, Wi-Fi Alliance)conformity)

No. of Indicators Three (LNK, ERR1, ERR2)T-1-2T-1-2

1

11-4

1-4

Specifications > Product Specifications > ERR Indicator > Reference

Specifications > Product Specifications > ERR Indicator > Reference

ERR IndicatorERR2 Indicator

Status Cause RemedyFlashes once An error in ROM was detected. Reading at start-up.

At executing Extension Card Settings.Executing initialization of the setting.Executing Erasing the Security Settings.In the case that reading or writing of the operation parameter storage area of nonvolatile storage fails in executing saving the wireless LAN settings.

Flashes twice An error in RAM was detected.Flashes three times An error in other hardware was

detected. In the case that the wireless LAN module is not recognized with the wireless LAN card F/W.

Flashes four times Erasing the Security Settings mode is enabled.

The security settings are being erased using [Erasing the Security Settings].Please wait a while. When erasing the security settings is completed, the ERR2 lamp is turned off.

Flashes five times Emergency Startup Mode is enabled.

Update the firmware and start the program with the appropriate firmware.

Turned off Erasing the Security Settings mode is normally completed.

Turned off At normal operation

LNK Indicator Status Cause Remedy

Not lit Hardware error. Additional Functions > System Settings > Extension Card Settings > WLAN Card InformationConfirm the latest error message displayed in Latest Error Information.Connected confirmation of hardware.

Flashes Incorrect wireless LAN settings.

Refer to "Error Messages," on User's Guide, and Chapter 2, "Using the Wireless LAN Board in a Network," to confirm whether the wireless LAN settings are correct.

ERR1 Indicator Status Cause Remedy

Flashes once Unsupported EAP type received. Set the EAP type of the access point to the EAP type set in "802.1X/EAP Settings," on User's Guide.

Flashes twice Invalid certificate. Refer to "802.1X/EAP Settings," on User's Guide, and "WPA/WPA2-PSK Settings," on User's Guide to set a valid certificate.

■

■

■

T-1-3T-1-3

T-1-4T-1-4

Status Cause RemedyFlashes three times

Time not set. Set the time. (See the Reference Guide.)

Flashes four times

Received invalid authentication packet.

Refer to "Error Messages," on User's Guide, and Chapter 2, "Using the Wireless LAN Board in a Network," to confirm whether the wireless LAN settings are correct.

Flashes five times

Authentication rejected by authentication server.

Not lit Normal movement

Reference The following are the normal LED displays in the case that the connection with access points is not stable.Operations when the power supply of the host machine is turned on:

Conditions Normal operationsThere is no access point. Turn on the power supply of the host machine > Green

LED flashes five times > Light is turned off > Green LED flashes five times > Light is turned off

■T-1-5T-1-5

T-1-6T-1-6

2

2 Functions

FunctionsBasic Function■

2

22-2

2-2

Functions > Basic Function > Setting Wireless LAN > 3. Security Settings

Functions > Basic Function > Setting Wireless LAN > 3. Security Settings

Basic Function

Setting Wireless LANMake the setting of the Wireless LAN on the control panel of the host machine.

1. Network Protocol Settings

1-1.Settings/Registration > Preferences > External Interface > Extension Card Settings > Wireless LAN > TCP/IP Settings (IPv4)

1-2. Settings/Registration > Preferences > External Interface > Extension Card Settings > Wireless LAN > TCP/IP Settings (IPv4) > Subnet Mask(ex: 255.255.255.0)

2. Setting the SSIDSettings/Registration > Preferences > Extension Card Settings > SSID Settings > Access Point (ex:tsunami)

■●

●

■

F-2-1F-2-1

3. Security SettingsSettings/Registration > Preferences > Extension Card Settings > Wireless LAN > Security Settings > Security > Off

■F-2-2F-2-2

F-2-3F-2-3

2

22-3

2-3

Functions > Basic Function > Setting Wireless LAN > 5. Enabling the Settings

Functions > Basic Function > Setting Wireless LAN > 5. Enabling the Settings

4. Setting the Primary NetworkSettings/Registration > Preferences > External Interface > Extension Card Settings > Primary Network Setting > Wireless LAN

5. Enabling the SettingsSettings/Registration > Preferences > External Interface > Wireless LAN > Save Parameter >

■

■

F-2-4F-2-4

F-2-5F-2-5

SaveTurning off/on the main power of the host machine enables the setting change.

When a setting item is not right, it become an error and cannot store setting.The confirmation items are different by a condition.The details refer to chart below.

Security Confirmation of the consistency Error messageOff There is no confirmation of the operational

parameterNone

WEP WEP Key is set by the index which You appointed in "Select WEP Key".WEP Key 1(HEX 10 or 26 digit) (WEP Key2, WEP Key3, WEP Key 4)

Set the WEP key.

WPA/WPA2 + PSK Either of "WPA or WPA2 PSK(ASCII)" or "WPA or WPA2 PSK (256bit)" is set.

Set the pre-shared key

WPA/WPA2 + 802.1X/EAP802.1X/EAP + WEP

[The confirmation item where is common to all setting of EAP Type]- Root CA Certificate is set.- User Name is set.

Root CA cert. error.Set the user name.

[EAP Type is confirmation item at the age of the TLS (WLAN Card Certificate)]- WLAN Card Private Key is set.

WLAN card cert. error.Set the private key.

[When there is not WLAN Card Private Key in PKCS#12 including the certificate]- WLAN Card Certificate is set.

WLAN card cert. error.

F-2-6F-2-6

T-2-1T-2-1

2

22-4

2-4

Functions > Basic Function > Setting Wireless LAN > 7. Printing a Test Page

Functions > Basic Function > Setting Wireless LAN > 7. Printing a Test Page

6. Settings of the Wireless LAN can be checked after printing

the Network user's data listSettings/Registration > Preferences > External Interface > Output Extension Card Report > Yes

7. Printing a Test PageIn the case of printing a test page for the printer driver, install a printer driver on the PC and add a port in printer Property.Use the IP address that has been set for the Wireless LAN.

■

■F-2-7F-2-7

2

22-5

2-5

Functions > Basic Function > Authentication in a Corporate Environment > 802.1x

Functions > Basic Function > Authentication in a Corporate Environment > 802.1x

History of StandardsThe first standard of encryption and authentication, 802.11, was created in 1999.WEP had been used for encryption; its decryption was possible and its share in the wireless LAN market had not been expanded due to security concerns.WPA (Wi-Fi Protected Access) is an organization, not a standard.In 2002, WPA used a system that TKIP was used for encryption instead of WEP with the aim of revitalization of the market.However, it has been suggested that TKIP might also be decrypted.IEEE created WPA2 in 2004. WPA2 uses AES for encryption.802.11i includes WPA and WPA2.

Time of release 1997 2002 2004Creator of standard IEEE Wi-Fi IEEEName of standard 802.11 WPA WPA2Authentication Open system shared

keyAuthentication for person

PSK PSK

Authentication for company

EAP(802.1X) EAP(802.1X)

Encryption RC4 TKIP(RC4) AES

In the case of making a setting for security in an individual network environment, WPA2-PSK is recommended.As for PSK (pre-shared key), a PSK common to the access point and client needs to be set; it should not be used in such an institution as a company where usage by several users are supposed.Eight to sixty-three characters can be set as a character string of PSK.To prevent brute force attack, 20 characters or more of PSK are set.

The decryption method of WEP has been established and a third party may sniff an ID password.WPA is difficult to decrypt; however, its encryption mechanism is RC4 and may possibly be decrypted. Its use should be restrained.

T-2-2T-2-2

Authentication in a Corporate EnvironmentThe following table shows the system conditions of access points available for Wireless LAN-B1.

Access Point Standard IEEE802.11b, IEEE802.11gFrequency Band 2.4 GHz band (ISM (Industrial

Scientific Medical) band)Encryption and Authentication Method

WEP (Wired Equivalent Privacy) Supports 64-bit and 128-bit WEP.*1WPA (Wi-Fi Protected Access)/WPA2-PSK (Pre-Shared Key)

Complies with WPA and 802.11i (WPA2) standards.

802.1X/EAP (Extensible Authentication Protocol) + WEP

Supports 802.1X authentication and Dynamic WEP. Requires a RADIUS server.

WPA/WPA2+802.1X/EAP Complies with WPA and 802.11i (WPA2) standards, and supports 802.1X authentication. Requires a RADIUS server. Includes WPA/WPA2 Enterprise.

*1The WEP key used with the Wireless LAN Board is a 40-bit or 104-bit key.

Corporate environments need to satisfy the following conditions;The passwords for administrator and user are separately set.Each user can implement authentication and impose access restrictions.Centralized management of access points is provided.

To satisfy these requirements, it is necessary to use authentication server and authentication protocol.The following are available operations.

802.1x Communication with authentication server Wireless LAN-B1 requires user authentication of an authentication server via access point.Until being authenticated, Wireless LAN-B1 cannot start communication.RADIUS (Remote Authentication Dial-in User Service) is used as an authentication server.The whole system is called 802.1x.802.1x is used for authentication of wired LAN.

■

•••

■

T-2-3T-2-3

2

22-6

2-6

Functions > Basic Function > Authentication in a Corporate Environment > EAP as an authentication protocol

Functions > Basic Function > Authentication in a Corporate Environment > EAP as an authentication protocol

EAP as an authentication protocol Wireless LAN-B1 uses authentication protocol when requiring user authentication of an authentication server via access point.EAP (Extensible Authentication Protocol) is available as an authentication protocol. EAP has no authentication function, however authentication protocols are selectable.For the use of EAP, not only Wireless LAN-B1 but also access points and authentication servers should be available for EAP.

In Wireless LAN B1, the following three types of authentication protocols are available.

Authentication method WEP key OS supported by client PCs

Setting for Wireless LAN

Setting of authentication

serverEAP-TLS Electronic

certificate(A Verisign certificate can be used)

Automatic generation available

Windows XP, 2000 SP4

Certificate required

Electronic certificate required

EAP-TTLS ID and password

A server proposed by Funk Software in the U.S. required

Not required

EAP-PEAP ID and password

Windows XP, 2000 SP4

Not required

Reference: Cisco LEAP (Lightweight Extensible Authentication Protocol) and EAP-FAST (Extensible Authentication Protocol-Flexible Authentication via Secure Tunneling) cannot be used.

■

T-2-4T-2-4

2

22-7

2-7

Functions > Basic Function > Security Settings > WPA/WPA2-PSK

Functions > Basic Function > Security Settings > WPA/WPA2-PSK

Extension Card InformationOutput 'Extension Card Information' before changing the setting of the extension card.If an issue occurred after changing the setting, it is possible to resume the setting as it had been.Follow the procedure described below to output the extension card Information.

Execute the following items to output the extension card Information:Settings/Registration > Preferences > External Interface > Output Extension Card Report > Yes

F-2-8F-2-8

Security SettingsThis section describes the procedure for selecting the encryption and authentication method using the control panel of the machine.The encryption and authentication method can also be set to 'Off'. However, this will make it easy for third parties to intercept transmitted data. For security purposes, it is recommended you set one of the following encryption and authentication methods when using wireless LAN communications.

WPA/WPA2+802.1X/EAP Security can be further improved by combining WPA with 802.1X authentication using a RADIUS server. WPA and WPA2 are encryption technologies that address the weaknesses of Static WEP for increased security. As the WEP key used in Static WEP is fixed, there is the possibility that it can be decoded. However with WPA, the TKIP (Temporal Key Integrity Protocol) or AES-CCMP (Advanced Encryption Standard-Counter Mode with Cipher Block Chaining Message Authentication Code Protocol) provide a function for automatically updating the encryption key.To select WPA/WPA2+802.1X/EAP, it is necessary to use the Remote UI to install a root CA certificate. In addition, if you set EAP-TLS as the EAP type, a wireless LAN card certificate and wireless LAN card private key must be installed.

802.1X/EAP+WEP Performs 802.1X authentication using a RADIUS server. Dynamic WEP regularly updates the WEP key automatically to make it even harder to decode the WEP key.To select 802.1X/EAP+WEP, it is necessary to use the Remote UI to install a root CA certificate.In addition, if you set EAP-TLS as the EAP type, a wireless LAN card certificate and wireless LAN card private key must be installed as required.

WPA/WPA2-PSK Uses PSK for authentication, and by adopting TKIP or AES-CCMP for the encryption, fixes the vulnerability of Static WEP by automatically updating the encryption key. As WPA-PSK does not require an authentication server, it is particularly suited for use in small-scale network environments such as SOHO.

■

■

■

2

22-8

2-8

Functions > Basic Function > Security Settings > WEP (Static WEP)

Functions > Basic Function > Security Settings > WEP (Static WEP)

WEP (Static WEP) As WEP enables you to encrypt the data sent and received via the access point, even if a third party intercepts data, it is hard for them to decode it. As an encryption key is set for both the computer and the access point, unauthorized access by a third party that does not know the encryption key can be prevented. However, as the WEP encryption key is fixed, there is the possibility that it will be decoded.

■

3

3 Maintenance

MaintenanceReference matter in market serviceRelated Service ModeRelated Error code

■

■■

3

33-2

3-2

Maintenance > Reference matter in market service > Initializing the Network Settings

Maintenance > Reference matter in market service > Initializing the Network Settings

Reference matter in market service

Connection ProcedureThe wireless LAN board starts communication with access points by following the procedure described below.Reference:The setting procedure for the environment without security settings is shown for the purpose of understandings of the overview of the setting.In the case that the security settings have been made for the access point and the client PC, communication is unavailable until the security setting for the Wireless LAN Board is set similar to that for the access point in this procedure.

Setting for the environment without security settingTurn on the main power of the host machine to activate the wireless LAN board.

VSet the IP address of Wireless LAN.

VEnter the character string that has been set as SSID (Service Set-IDentifier) for the access point in

'Display/Enter SSID', or set the destination in 'Access Point'.V

Security SettingsV

Save the setting in 'Save Parameter'V

Set 'Wireless LAN' in 'Primary Network Settings'

Emergency Startup ModeThe product normally communicates with the Infrastructure Mode. However, if the firmware update is not completed successfully, due to a reason such as the power turning off during the update, it starts in its emergency startup mode.The Wireless LAN Board displays the following characteristics when in the emergency startup mode.

Control Panel of the Machine A [!] is displayed to the left of the displayed wireless LAN settings.

LED Indicators

■

■

■

T-3-1T-3-1

The ERR2 indicator flashes five times.

SSID Fixed to 'Wireless LAN_<last 6 digits of MAC address>'.

Encryption and Authentication Method Fixed to WEP.

Adhoc Mode When the product switches to Adhoc Mode communication, it communicates without passing through an access point. Do not use the Adhoc Mode when a computer and the machine can be connected using a LAN cable.If necessary, specify the channel by pressing [!Wireless LAN Settings] > [!Basic Settings] > [!Channel] on the control panel of the machine. After specifying the channel, make sure to follow the procedure in "Enabling the Settings," to save the settings. If you do not save the settings, the specified channel is not enabled.

Initializing the Network SettingsThis section describes the procedure for initializing the network settings of the Wireless LAN Board to restore them to their defaults. If you perform this procedure, the current wireless LAN connection will be lost.

ReferenceThe settings will be initialized after the machine is restarted.

1. Press [Wireless LAN Card Management] on the Extension Card Settings screen.Settings/Registration > Preferences > External Interface > Wireless LAN Card Management

■

■

■

F-3-1F-3-1

3

33-3

3-3

Maintenance > Reference matter in market service > Erasing the Security Settings > Deleting the security setting

Maintenance > Reference matter in market service > Erasing the Security Settings > Deleting the security setting

2. Press [Initialize Settings Values] > Initialize (WLANOff).F-3-2F-3-2

F-3-3F-3-3

Erasing the Security SettingsIn the case that the host machine is withdrawn from the user environment or used by another user, the setting for the former user needs to be deleted for the purpose of prevention of leakage of the user information.Perform the following procedure to resume the factory settings, and then carry out the host machine.

ReferenceThe settings will be initialized after the machine is restarted.

Deleting the security setting 1. Press [Wireless LAN Card Management] on the Extension Card Settings screen.Settings/Registration > Preferences > External Interface > Wireless LAN Card Management

■

F-3-4F-3-4

3

33-4

3-4

Maintenance > Reference matter in market service > Erasing the Security Settings > Erasing the Security Settings using SW1

Maintenance > Reference matter in market service > Erasing the Security Settings > Erasing the Security Settings using SW1

2. Press [Erase Security Settings] > select Erase (Wireless LAN Off).

Reference: When turning on the power supply of the host machine with SW1-1 on the WireLess LAN board on, Erase Security Settings mode is enabled.For normal use, turn off SW1-1.

1 2

ON

SW1

SW1DIP-SW1-1 Erase Security Settings (ON)/ Normal Operation (OFF)*DIP-SW1-2 Not in use.* Factory setting

■F-3-5F-3-5

F-3-6F-3-6

T-3-2T-3-2

Erasing the Security Settings using SW1 After checking that the power supply of the host machine is turned off, remove the wireless LAN card from the host machine and turn on DIP SW1 on the card.When turning on the power supply with the wireless LAN card installed on the host machine, the operation starts in Erase Security Settings mode.During erasing operation, LED2 (orange) flashes repeatedly by four times; When erasing is completed, it is turned off.After erasing is completed, turn off the power supply of the host machine, remove the wireless LAN card from the host machine, turn off DIP SW1, and then install the card on the host machine.By turning on the power supply of the host machine, all operation parameters of the extension card and the settings of the host machine to save on this card are resumed to their factory settings.

ImportantBefore removing Wireless LAN Board from the host machine, set Standard Network in Primary Network Settings. If removing the PCB and restarting the host machine with Wireless LAN set, the item related to Standard Network settings is not displayed on the touch panel. If removing wrongly the PCB before setting change, install the PCB again and start the host machine. Set Standard Network in Primary Network Settings.

Settings/Registration > Preferences > External Interface > Extension Card Settings > Primary Network Setting > Standard Network

■

3

33-5

3-5

Maintenance > Reference matter in market service > Enabling Setting

Maintenance > Reference matter in market service > Enabling Setting

Enabling SettingTo enable the setting, execute the following item;Settings/Registration > Preferences > External Interface > Wireless LAN > Save Parameter > SaveTurning off/on the main power of the host machine enables the setting change.

F-3-7F-3-7

F-3-8F-3-8

When executing 'Save', the consistency of the following setting items is checked and the setting having been changed is saved in the Wireless LAN.If there is any inconsistency, the error message is displayed.Make the appropriate setting by referring to the Error code in Chapter 4.

Encryption and Authentication Method

Content Checked Reference

802.1X/EAP+WEP Checks whether a root CA certificate and user name are set. If [TLS (WLAN Card Certificate)] is selected in [EAP Type], checks whether a wireless LAN card certificate and private key are set.

802.1X/EAP SettingsWPA/WPA2+802.1X/EAP

WPA/WPA2-PSK Checks whether PSK is set in either [PSKASCII(8-63characters)] or [PSK Hex (64 digits)].

WPA/WPA2-PSK Settings

WEP Checks whether a WEP key is set in the index selected by pressing [Select WEP Key].

WEPSettings

T-3-3T-3-3

3

33-6

3-6

Maintenance > Reference matter in market service > Updating the Firmware > IMPORTANT

Maintenance > Reference matter in market service > Updating the Firmware > IMPORTANT

Updating the FirmwareThis section describes the procedure for updating the firmware of the Wireless LAN using the Remote UI. The following files can be downloaded using the firmware updating function:

IMPORTANT Make sure to perform the following procedure before updating the firmware.

Set [Primary Network] to 'Standard Network'.Press (Additional Functions) > [System Settings] > [Extension Card Settings] > [Primary Network] > select [Standard Network]. (The settings are enabled after the machine is restarted.)

Connect the machine to your computer using a LAN cable.Read the README file included with the firmware.

If the firmware update is not completed successfully, due to a reason such as the power turning off during the update, the Wireless LAN may start in the Adhoc mode. For information on the Adhoc mode, see "Emergency Startup Mode," on User's Guide.

Confirm that the machine is not operating before performing the firmware update. Also make sure to not perform printing while the firmware is being updated, as this may cause the firmware to not be updated correctly.

■•

•

••

•

•

1. Click [Settings/Registration] > select [Preferences] > select External Interface > click [Extension Card Settings].

2. Click [Wireless LAN] > [Update Data].

3. Click [Browse] > select the update file > click [OK]. You can also enter the path to the file directly.

4. When a confirmation message is displayed, click [OK]. A confirmation message is displayed three times.After the message indicating the firmware update is complete is displayed, restart the machine.

F-3-9F-3-9

F-3-10F-3-10

3

33-7

3-7

Maintenance > Reference matter in market service > Radio Wave Intensity

Maintenance > Reference matter in market service > Radio Wave Intensity

Radio Wave IntensityCheck the radio wave intensity of access points on the SSID setting screen of the touch panel of the host machine.

The figures displayed are 9 (maximum) < > 0 (minimum).Settings/Registration > Preferences > External Interface > SSID Settings > Access Point

5

ReferenceAdjust the antenna position of Wireless LAN and install it in a place with a good radio waves condition. The radio wave 2.4GHz bandwidth is easy to be absorbed in such materials as human body that contains large amount of moisture.Install the antenna at a place where the radio wave intensity does not drastically fluctuate according to the presence/absence of a human in front of the touch panel of the host machine. The radio wave intensity can be checked also on the RUI.

F-3-11F-3-11

3

33-8

3-8

Maintenance > Troubleshooting Map > Troubleshooting Map > Measure B

Maintenance > Troubleshooting Map > Troubleshooting Map > Measure B

Troubleshooting Map

Troubleshooting MapCannot communicate with Wireless LAN Board. Yes

No

Error Message is displayedeither on RUI or LUI.

Extension card is displayedon RUI or LUI.

Check the ERR2 lamp of Wireless LAN.

Turned on or not Flashing

Refer to the item of Error Message.

Error Message is not displayed in 'Latest Error Information' * on the remote UI.

Displayed in 'Extension Card Settings> Wireless LAN > WLAN Card Information'.

Check the LINK lamp (LED3) of Wireless LAN.

Turned on

The communication in the wireless LANenvironment is normal. Check the setting of network protocol of IP address, etc. again.If printing still cannot be executed, check the access point, authentication server, and computer '(LAN adapter) that you use.

There may be a fault in hardware.

Turned off Flashing

The setting of wireless LAN environment is incorrect. Check the ERR1 lamp and take necessary measures.

Refer to 'Cannot find access point' or 'Server cert. issuer error'.

The firmware may not be started. Update the firmware and start up with the appropriate firmware.

Take necessary measures by referring to Measure B.

F-3-12F-3-12

Measure B

ERR2 Indicator Status Cause RemedyFlashes once An error in ROM was

detected.Reading at start-up.At executing Extension Card Settings.Executing initialization of the setting.Executing Erasing the Security Settings.In the case that reading or writing of the operation parameter storage area of nonvolatile storage fails in executing saving the wireless LAN settings.

Flashes twice An error in RAM was detected.

Flashes three times

An error in other hardware was detected.

In the case that the wireless LAN module is not recognized with the wireless LAN card F/W.

Flashes four times

Erasing the Security Settings mode is enabled.


Flashes five times

Emergency Startup Mode is enabled.



Turned off

■●

T-3-4T-3-4

3

33-9

3-9

Maintenance > Troubleshooting Map > Troubles At Using Wireless LAN > 3. Wireless LAN menu is displayed on the UI of the host machine


Troubles At Using Wireless LANHereinafter 'Wireless LAN card' means Wireless LAN.The following three items are predicted as troubles that may occur at using the wireless LAN card.

Connection with the wireless LAN is impossible.Wireless LAN menu is not displayed on the UI of the host machine.An error message is displayed at menu manipulation.

1. Connection with the wireless LAN is impossible When there is a fault in wireless LAN card hardware, the setting of wireless LAN is incorrect, resulting in a failure of connection with a wireless LAN environment.Check if the item of wireless LAN is displayed on the UI of the host machine.

2. Wireless LAN menu is not displayed on the UI of the host

machine It is supposed that the wireless LAN card hardware has a fault. Check the status of LED2.a) LED2 is flashing.

An error of flashing frequency described in the following table occurs.

ERR2 Indicator Status Cause RemedyFlashes once An error in ROM was detected. Reading at start-up.

At executing Extension Card Settings.Executing initialization of the setting.Executing Erasing the Security Settings.In the case that reading or writing of the operation parameter storage area of nonvolatile storage fails in executing saving the wireless LAN settings.

Flashes twice An error in RAM was detected.Flashes three times An error in other hardware was

detected. In the case that the wireless LAN module is not recognized with the wireless LAN card F/W.

Flashes four times Erasing the Security Settings mode is enabled.


Flashes five times Emergency Startup Mode is enabled.


•••

■

■

●


Turned off At normal operation

b) LED2 is turned on.The firmware may not be started due to a cause related to the wireless LAN card hardware.

c) LED2 is turned off.The firmware may not be started due to a cause related to the wireless LAN card hardware.

3. Wireless LAN menu is displayed on the UI of the host

machine

It is supposed that connection with the wireless LAN environment fails.LED3 a) LED3 is turned on.The connection with a wireless LAN environment is normal.The setting of upper layer protocol of network is incorrect.

b) LED3 is turned off.It is supposed that the wireless LAN module hardware has a fault.

c) LED3 is flashing.The connection with a wireless LAN environment is incorrect.The settings of the wireless LAN card and external wireless LAN are incorrect.

LED1 a) LED1 is flashing.Either of the errors of flashing frequency described in the following table occurs.

ERR1 lamp Status Details MeasuresFlashes once An unsupported EAP was

received.Set the EAP type to set in '802.1X/EAP Settings' of the users guide as an EAP type of access point.

Flashes twice The certificate is invalid. The certificate is invalid. Make a setting of valid certificate by referring to '802.1X/EAP Settings' or 'WPA/WPA2-PSK Settings' in the users guide.

Flashes three times

The time is not set. Set the time of the host machine.

■

●

T-3-5T-3-5

3

33-10

3-10



Status Details MeasuresFlashes four times

An invalid authentication packet was received.

Check the error message in the following item; Additional Functions > System Settings > Extension Card Settings > Wireless LAN > WLAN Card Information > Latest Error Information.Check the setting of wireless LAN.

Flashes five times

The authentication server rejected authentication.

Turned off At normal operationT-3-6T-3-6

3

33-11

3-11

Maintenance > Related Error Code > List of Error Messages

Maintenance > Related Error Code > List of Error Messages

Related Error Code

List of Error MessagesWEP key digit no. incorrect.Cause The entered WEP key is not 10 or 26 hexadecimal digits.Remedy Confirm the WEP key length displayed in [WEP Key Length] on the WEPSettings

screen."40bit WEP Key" is displayed if a 10 digit WEP key is set, and "104bit WEP Key" is displayed if a 26 digit WEP key is set. If there is an error in the number of digits, set a 10 or 26 hexadecimal digit WEP key.

Set the WEP key.Cause1 WEP is selected on the Security screen, but a WEP key is not set.Remedy1 When using WEP as the encryption and authentication method, refer to

"WEPSettings," to set a WEP key using 10 or 26 hexadecimal digits. If you want to use an encryption and authentication method other than WEP, set the appropriate encryption and authentication method on the Security screen.

Cause2 A WEP key is not set in the selected index.Remedy2 Check whether the WEP key value is entered in the correct index.Set the pre-shared key.Cause WPA/WPA2-PSK is selected on the Security screen, but a PSK is not set.Remedy - Whether the encryption and authentication method settings are correct.

- Whether PSK is set. Root CA certificate errorCause 802.1X/EAP+WEP or WPA/WPA2+802.1X/EAP is selected on the Security screen,

but a root CA certificate is not set.Remedy Confirm the following:

- Whether the encryption and authentication method is set correctly. Change the encryption and authentication method if necessary. - Whether the root CA certificate is installed. If it is not installed, refer to "Installing a Root CA Certificate," to install the root CA certificate.

Set the user name.Cause 802.1X/EAP+WEP or WPA/WPA2+802.1X/EAP is selected on the Security screen,

but a user name is not set.Remedy Confirm the following:

- Whether the encryption and authentication method is set correctly. Change the encryption and authentication method if necessary. - Whether the correct user name is set.

WLAN card certificate errorCause EAP-TLS is set as the EAP type, but a wireless LAN card certificate is not set.Remedy Confirm the following:

- Whether the EAP type settings are correct. If you need to set an EAP type other than EAP-TLS, select the appropriate EAP type on the EAP Type screen. - Whether the wireless LAN card certificate is installed. If it is not installed, refer to "Installing a Wireless LAN Card Certificate," to install a wireless LAN card certificate.

Set the private key.

Cause EAP-TLS is set as the EAP type, but a wireless LAN card private key is not set.Remedy Confirm the following:

- Whether the EAP type settings are correct.If you need to set an EAP type other than EAP-TLS, select the appropriate EAP type on the EAP Type screen. - Whether the wireless LAN card private key is installed. If it is not installed, refer to "Installing a Wireless LAN Card Private Key," to install a wireless LAN card private key.

Check file format.Cause1 The file format of the root CA certificate is incorrect.Remedy1 Confirm whether the installed root CA certificate is an X.509 certificate. If necessary,

refer to "Installing a Root CA Certificate," to install a root CA certificate.Cause2 The file format of the certificate revocation list is incorrect.Remedy2 Confirm whether the installed certificate revocation list is an X.509 version 2

certificate revocation list. If the certificate revocation list is not correct, erase the list by pressing [802.1X/EAP Settings] > [Erase CRL] > [Erase] on the Extension Card Settings screen. If necessary, refer to "Installing a Certificate Revocation List," to install a certificate revocation list.

Cause3 The file format of the wireless LAN card certificate is incorrect.Remedy3 Confirm whether installed wireless LAN card certificate is an X.509 certificate ora

PKCS#7 format certificate, which contains an X.509 certificate. If necessary, refer to "Installing a Wireless LAN Card Certificate," to install a wireless LAN card certificate.

Cause4 The file format of the private key is incorrect.Remedy4 Confirm whether the installed wireless LAN card private key is a PKCS#8 format

private key or PKCS#12 format private key, which contains an X.509 certificate and PKCS#8 format private key. If necessary, refer to "Installing a Wireless LAN Card Private Key," to install a wireless LAN card private key.

T-3-7T-3-7

3

33-12

3-12

Maintenance > Related Error Code > Error Messages > Displaying Error Messages


Error Messages

Displaying Error Messages 1. Press (Additional Functions) > [System Settings] > [Extension Card Settings].2. Press [WLAN Card Information].

3. Confirm the latest error message displayed in [Latest Error Information].

■

F-3-13F-3-13

F-3-14F-3-14

Cannot find access point.Cause1 The SSID set differs from the SSID of the access point.Remedy1 Set the same SSID as the SSID of the access point. Cause2 The external antenna is not attached.Remedy2 Make sure to attach the external antenna.Cause3 The power of the access point is not ON.Remedy3 Turn ON the power of the access point.Cause4 Radio waves cannot reach the access point because it is located too far away from

the machine.Remedy4 Move the access point closer to the machine.Cause5 The standard used by the access point is IEEE802.11a (5 GHz).Remedy5 Use an access point that supports IEEE802.11b or IEEE802.11g.Select WPA/WPA2+802.1X/EAPCause The encryption and authentication method of the access point corresponding to the

specified SSID differs from the encryption and authentication method set on the Security screen.

Remedy Confirm the following:- Whether the encryption and authentication settings are correct. If WPA/WPA2+802.1X/EAP is not set, set it. - Whether the same SSID as the SSID of the access point is set. - Whether the access point settings are correct.

Select WPA/WPA2+PSKCause The encryption and authentication method of the access point corresponding to the


Remedy Confirm the following:- Whether the encryption and authentication settings are correct. If WPA/WPA2-PSK is not set, set it. - Whether the same SSID as the SSID of the access point is set. - Whether the access point settings are correct.

Select 802.1X/EAP+WEPCause The encryption and authentication method of the access point corresponding to the


Remedy Confirm the following:- Whether the encryption and authentication settings are correct. If "Off" is not set on the Security screen, set it. - Whether the same SSID as the SSID of the access point is set. - Whether the access point settings are correct.

Set Encryption to auto.Cause Confirm the following:

- The PSK settings. If necessary, change the PSK to match the PSK of the access point. - Whether the access point settings are correct.

Cannot find server cert.Cause A server certificate was not sent from the authentication server.

3

33-13

3-13



Remedy Confirm the settings of the authentication server and the access point.Server cert. issuer error.Cause The root issuer in the authentication path of the server certificate sent from the

authentication server did not match the root issuer of the root CA certificate.Remedy Confirm the following:

- Whether the root CA certificate in the authentication path of the authentication server is installed. If the root CA certificate is not correct, refer to "Installing a Root CA Certificate," to install the correct certificate.- Whether the authentication server address set in the access point is correct.- Whether the authentication server settings are correct.

Cannot verify server cert.Cause The server certificate (authentication path) failed signature verification with the root

CA certificate.Remedy Confirm the settings of the authentication server and the access point.Server cert. valid date error.Cause The issuing date of the server certificate is set to a date in the future.Remedy Confirm the following:

- Whether the date and time settings of the machine are correct. - Whether the CA date and time settings of the authentication server are correct.

Server cert. expired.Cause The server certificate has expired.Remedy Confirm the following:

- Whether the date and time settings of the machine are correct. - Whether the settings of the authentication server are correct.

Server cert. revoked.Cause The server certificate matched a certificate number in the certificate revocation list.Remedy Confirm the settings of the authentication server and the access point.No auth. server reply.Cause No user authentication response was received from the authentication server.Remedy Confirm the following:

- Whether the authentication server and access point are operating correctly, and whether there is any problem in the communication between the authentication server and the access point.- Whether the settings of the authentication server and access point are correct.

No username on auth. server.Cause A failed response for user authentication was returned from the authentication

server.Remedy Confirm the following:

- Whether the user name is correct. - Confirm that the account settings of the authentication server are correct.

NOTE Confirm the user name format supported by the authentication server, as depending on the server, the user name may have to be entered in the DOMAIN/USER format or user@domain format.

Select EAP-TTLS/PEAPCause The EAP type of the authentication server is set to EAP-TLS, but the EAP type of

the machine is set to EAP-TTLS/PEAP.

Remedy Confirm the following:- Whether the settings of the EAP type are correct. If necessary, select the appropriate EAP type on the EAP Type screen.- The settings of the authentication server and the access point.

Login restricted timeCause When performing user authentication with MS-CHAPv2, authentication failed

because the authentication server responded with notification that the logon is restricted at the current time.

Remedy Confirm the following:- Whether the account and policy settings of the authentication server are correct. If a logon restriction time is set for the user account on the authentication server side, change the settings as necessary.- Whether the user name is correct.

User name is disabled.Cause When performing user authentication with MS-CHAPv2, authentication failed

because the authentication server responded with notification that the user account is disabled.

Remedy Confirm the following:- Whether the account and policy settings of the authentication server are correct. If the account is disabled, enable it.- Whether the user name is correct.

MSCHAPv2 password expired.Cause When performing user authentication with MS-CHAPv2, authentication failed

because the authentication server responded with notification that the password has expired.

Remedy Confirm the following:- Whether the account and policy settings of the authentication server are correct. If the password is expired, set a password that has not expired.- Whether the user name is correct.

Dial-in error.Cause When performing user authentication with MS-CHAPv2, authentication failed

because the authentication server responded with notification that dialing in is not allowed.

Remedy Confirm the following:- Whether the account and policy settings of the authentication server are correct. If dialing in is not allowed, allow it.- Whether the user name is correct.

Username/802.1X password error.Cause When performing user authentication with MS-CHAPv2, authentication failed

because the authentication server responded with notification that the user name or password is incorrect.

Remedy Confirm the following:- Whether the account exists on the authentication server. If the account does not exist, create it.- Whether the user name and the 802.1X password are correct.

Cannot use GTC inner prot.Cause GTC was selected as the inner authentication protocol when the EAP type of the

authentication server is set to EAP-TTLS.

3

33-14

3-14



Remedy Confirm the following:- Whether the selected inner authentication protocol is correct. If necessary, change the inner authentication protocol to MS-CHAPv2 or PAP. - The EAP type settings on the authentication server side. If necessary, change the EAP type to PEAP.

Cannot use PAP inner prot.Cause PAP was selected as the inner authentication protocol when the EAP type of the

authentication server is set to PEAP.Remedy Confirm the following:

- Whether the selected inner authentication protocol is correct. If necessary, change the inner authentication protocol to MS-CHAPv2 or GTC. - The EAP type settings on the authentication server side. If necessary, change the EAP type to EAP-TTLS.

802.1X password expired.Cause When performing user authentication with MS-CHAPv2, the authentication server

responded with notification that the password has expired, but password change requests from the server are not allowed.

Remedy Confirm the following:- Whether the account and policy settings of the authentication server are correct.- Whether the password settings for MS-CHAPv2 are correct. If necessary, set to allow password change requests from the server.

MSCHAPv2 new password error.Cause When performing user authentication with MS-CHAPv2, the authentication server

responded with notification that the password has expired, and a password change was attempted because password change requests from the server are allowed, but the change was refused by the server.

Remedy Confirm the following:- Whether the user name is correct. - Confirm whether the password set in [MSCHAPv2 New Password] is valid.- Whether the account and policy settings of the authentication server are correct.

NOTE If you are using an Odyssey server for authentication, confirm whether 'DOMAIN\' is included in the user name.- Make sure that the password set conforms to the policies of the authentication server you are using.

WLAN card cert. date errorCause The issuing date of the wireless LAN card certificate is set to a date in the future.Remedy Confirm the following:

- Whether the date and time settings of the machine are correct. - Whether the expiration date of the wireless LAN card certificate is correct. If necessary, refer to "Installing a Wireless LAN Card Certificate," to install a wireless LAN card certificate.- Whether the CA date and time settings of the authentication server are correct.

WLAN card cert. expired.Cause The wireless LAN card certificate has expired.

Remedy Confirm the following:- Whether the date and time settings of the machine are correct. (See e-Manual > Security.)- Obtain a valid wireless LAN card certificate re-issued from a certificate authority, and refer to "Installing a Wireless LAN Card Certificate," to install the new wireless LAN card certificate.

WLAN card cert. revoked.Cause When performing authentication with EAP-TLS, authentication failed because

the authentication server responded with notification that the wireless LAN card certificate has been revoked.

Remedy Confirm whether the wireless LAN card certificate is correct. If necessary, refer to "Installing a Wireless LAN Card Certificate," to install a wireless LAN card certificate.

IMPORTANT If the wireless LAN card certificate has been revoked, obtain a valid wireless LAN card certificate re-issued from a certificate authority, and install the new wireless LAN card certificate.

WLAN card cert. incorrect.Cause When performing authentication with EAP-TLS, authentication failed because

the authentication server responded with notification that the wireless LAN card certificate is not trusted.

Remedy Confirm the following:- Whether the wireless LAN card certificate is correct. If necessary, refer to "Installing a Wireless LAN Card Certificate," to install a wireless LAN card certificate.- Whether the authentication server settings are correct. If the CA certificate of the root certificate authority in the authentication path of the wireless LAN card certificate on the authentication server is not registered as a trusted certificate authority, register it as a trusted certificate authority.

Set private key password.Cause A wireless LAN card private key is set for the wireless LAN card certificate, but a

password is not set.Remedy Confirm the following:

- Whether a password is set for the wireless LAN card private key. - Whether the correct wireless LAN card private key is installed. If necessary, refer to "Installing a Wireless LAN Card Private Key," to install the correct wireless LAN card private key.

WLAN card cert. auth error. Cause When performing authentication using a wireless LAN card certificate forEAP-TLS,

the authentication server responded with notification that authentication failed.Remedy Confirm the following:

- Whether the correct wireless LAN card certificate and private key are installed.- Whether the account exists on the authentication server.

T-3-8T-3-8

march 2, 2010 revision 0 wireless lan board service manual

Documents