Rajant BC Commander v11.5.0 User Guide
Rajant BC Commander v11.5.0 User Guide
BC|Commander
v11 User Guide
Corporate Headquarters
Rajant Corporation
400 East King Street
Malvern, PA 19355
Tel: (484) 595-0233
Fax: (484) 595-0244
http://www.rajant.com
Copyright Statement
Rajant, the Rajant logo, BreadCrumb, Instamesh, BC|Commander, and Bring Your Network with You!
are registered trademarks of Rajant Corp. in the United States and certain other countries.
2
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
3
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
Table of Contents
Copyright Statement.....................................................................................................................2
GNU General Public License Statement......................................................................................3
Preface........................................................................................................................................16
1 Introduction to BC|Commander...........................................................................................17
1.1 New for Version 11.5.0.....................................................................................................17
1.1.1 New Features and Enhancements...........................................................................17
1.1.2 Fixes.........................................................................................................................19
1.2 Version 10 Features Not Yet Implemented in Version 11................................................19
1.3 Upgrading from Version 10 to Version 11........................................................................19
1.4 Support Plus.....................................................................................................................20
2 Installing BC|Commander.....................................................................................................21
2.1 System Requirements......................................................................................................21
2.2 BreadCrumb Firmware Requirements.............................................................................21
2.3 Installing BC|Commander................................................................................................21
2.3.1 Upgrading BC|Commander......................................................................................21
2.3.2 Installing on 32-bit Microsoft Windows.....................................................................21
2.3.3 Installing on 64-bit Microsoft Windows.....................................................................21
2.3.4 Installing on Linux — Self-Extracting Shell Script....................................................22
2.3.5 Installing on Linux — tar file.....................................................................................22
2.3.6 Installing on Ubuntu Linux - .deb file........................................................................22
2.3.7 Installing on Fedora Linux - .rpm file........................................................................22
3 Launching BC|Commander..................................................................................................23
3.1 BreadCrumb User Accounts.............................................................................................23
3.2 Default Login Credentials.................................................................................................23
3.3 Changing Passwords.......................................................................................................24
3.4 Command Line Options....................................................................................................24
4 BC|Commander Application Layout....................................................................................26
4.1 Menu Bar..........................................................................................................................26
4.1.1 File Menu..................................................................................................................26
4.1.2 View Menu................................................................................................................27
4.1.3 Mesh Menu...............................................................................................................27
4.1.4 BreadCrumb Menu...................................................................................................28
4.1.5 Help Menu................................................................................................................28
4.2 Multiple Display Tabs........................................................................................................29
4.3 Filters................................................................................................................................29
4.3.1 Filter Types...............................................................................................................29
4.3.2 Filter Attributes..........................................................................................................29
4.3.3 Filter Input Field........................................................................................................29
4
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
5
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
6
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
7
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
8
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
9
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
10
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
11
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
12
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
13
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
Index of Figures
Figure 1: Default Login Credentials Window..............................................................................24
Figure 2: BC|Commander v11 Default Layout...........................................................................26
Figure 3: BreadCrumb Filter.......................................................................................................29
Figure 4: BCAPI Explorer...........................................................................................................32
Figure 5: Create a Saved Layout................................................................................................33
Figure 6: Apply a Saved Layout..................................................................................................34
Figure 7: Saved Layout Preferences..........................................................................................35
Figure 8: BreadCrumb Table.......................................................................................................36
Figure 9: BreadCrumb Table - Add Column................................................................................37
Figure 10: BreadCrumb Table - Add Custom Column................................................................38
Figure 11: Topology View Bullseye Layout.................................................................................39
Figure 12: BreadCrumbs Icons...................................................................................................40
Figure 13: Link Display...............................................................................................................42
Figure 14: Save Offline Tileset....................................................................................................44
Figure 15: Create an Offline Tileset Dialog Box.........................................................................46
Figure 16: BreadCrumb Configuration Window..........................................................................48
Figure 17: BreadCrumb Configuration Export............................................................................49
Figure 18: Image Upload Window..............................................................................................83
Figure 19: USB Flash Manager..................................................................................................84
Figure 20: InstaMesh Trace Dialog Box.....................................................................................86
Figure 21: InstaMesh Trace Output............................................................................................87
Figure 22: Mesh Analysis: Inconsistent Settings........................................................................91
Figure 23: Mesh Analysis: Inconsistent Settings w/ Selected Cell.............................................92
Figure 24: Consistent Settings Table..........................................................................................93
Figure 25: Link Statistics Summary Table..................................................................................94
Figure 26: Link Statistics Detail Table.........................................................................................94
Figure 27: Noise Summary Table...............................................................................................95
Figure 28: Noise Detail Table......................................................................................................95
Figure 29: Frequency Overlap Analysis......................................................................................96
Figure 30: Frequency Overlap - Selected..................................................................................97
Index of Tables
Table 1: BreadCrumb User Accounts.........................................................................................23
Table 2: Color Codes for BreadCrumb Status............................................................................40
Table 3: BreadCrumb Icons and Their Meanings.......................................................................41
Table 4: 2.4 GHz Radio Channels and Frequencies................................................................102
14
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
15
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
Preface
Purpose and Scope
This manual provides information and guidance to all personnel who are involved with and use Rajant
Corporation's BC|Commander® to administer wireless mesh networks using Rajant Corporation's
BreadCrumb® Wireless Network devices ("BreadCrumbs®").
Who This Manual is For
Administrators of BreadCrumb wireless mesh networks should have a working knowledge of TCP/IP
networking, such as DHCP, NAT, and DNS. While the network lay person may be able to perform some
administrative tasks, it is recommended that network configuration be performed by experienced
network administrators.
Certain advanced features require additional in-depth knowledge, such as 802.11i security, VLANs, and
traffic prioritization.
Feedback Welcome
The user of this manual is encouraged to submit comments and recommended changes to improve this
manual and all Rajant products. Please send your feedback to [email protected]. Please be sure to
include the version number of the manual or product you are using as well as the relevant page numbers
if appropriate.
16
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
1 Introduction to BC|Commander
BC|Commander is Rajant's standard management and monitoring application for wireless mesh
networks built with Rajant BreadCrumb wireless devices. BC|Commander provides a graphical user
interface to help visualize the entire mesh and to monitor and configure individual BreadCrumbs. There
are several advanced features that are helpful for managing and monitoring large or complex networks.
1.1 New for Version 11.5.0
Rajant recommends to its customers that they upgrade their networks to this release after testing it for
their individual application and networking needs.
● Flood limiting can be configured to disallow bursting such that a minimum inter-packet spacing
is enforced, allowing administrators to enforce stricter multicast policies.
● A new AP option has been added to disable broadcast probe responses. This can improve the RF
environment considerably in dense networks.
● A new BCAPI Explorer view has been added for viewing raw BCAPI data. This can be helpful
for viewing information that BC|Commander does not otherwise display and for developing
alternative BCAPI client applications.
● Ethernet link state changes (plug/unplug) are now tracked and reported in BC|Commander. This
can assist administrators in finding faulty hardware connected to the mesh.
● A new "FIPS-Compatible Mode" has been added that enforces all FIPS 140-2 rules. Note: this
implementation is not validated by NIST, but is identical to the implementation currently under
NIST review.
● Added XSalsa-20 cipher for packet and MAC address encryption, providing considerable
performance benefits over AES-based ciphers (actual performance will vary with traffic and RF
characteristics). For more information on this cipher, see https://en.wikipedia.org/wiki/Salsa20.
● A new Channel Overlap report has been added to the Mesh Analysis function, providing a
graphical display of spectrum consumption to assist with channel management.
● A new "Filter on Selection" feature has been added to temporarily remove all non-selected
BreadCrumbs from the current tab, providing a quick means to create a task-focused view.
● Customized window layouts may now be saved and applied to assist with administrative
17
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
workflows.
● Custom columns may now be added to the Table View using the same syntax as Filters for a fully
customized display.
● Documentation for Filter and Custom Column syntax (BCAPI Query Language or "BQL") has
been greatly enhanced, including a new Appendix in the BC|Commander User Guide.
● Documentation of IP ports and protocol information required for firewall configuration has been
added to the BC|Commander User Guide.
● Documentation for Mesh Analysis is now covered in depth in a new Analysis chapter of the
BC|Commander User Guide.
● The "APT Only" Ethernet mode has been renamed to "Mesh Only" and the "Bridge" Ethernet
mode has been renamed to "Bridge+Mesh" to clarify their use.
● BreadCrumbs with APT peers that disagree on whether they should be in Mesh-Only mode now
issue a warning to alert of a potentially unsecure misconfiguration.
● Administrators can now force BreadCrumbs to reboot even if they are performing a task (such as
taking a Mesh Snapshot) via a new reboot dialog option, reducing the need to visit remote nodes.
● BC|Commander can now receive unsolicited discovery responses, allowing it to more quickly
display BreadCrumbs that have just been turned on or plugged into a mesh.
● BreadCrumbs now issue a warning when enabling TKIP attack countermeasures, helping
administrators troubleshoot wireless client connectivity issues. For information on
countermeasures, see https://en.wikipedia.org/wiki/Temporal_Key_Integrity_Protocol#Security
● Manufacturer information is now displayed for wireless client devices in the Topology View and
Clients list. This can help to determine the type of client device. Information is derived from the
IEEE OUI database.
● When viewing a loaded snapshot, the name of the snapshot file is now displayed, eliminating
confusion when reviewing multiple snapshots.
● Radio configurations with WEP on 40 MHz-wide channels are now disallowed, matching
specifications.
● More BC|Commander installers are now available: 64-bit Windows, and Linux .deb and .rpm.
● Mesh analysis now shows the index of repeated fields in consistency report, facilitating
administrative analysis.
● Mesh analysis reports now include time and date, eliminating confusion when reviewing
18
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
snapshots.
● General/Radio/Ethernet detail panes are now individually collapsible, allowing more tailored
views that dedicate screen real estate to the information you require.
● Additional InstaMesh garbage collection thresholds are now configurable, enabling fine control
over InstaMesh memory and CPU consumption. These should only be modified when
recommended by Rajant.
1.1.2 Fixes
● Two separate issues that could cause a BreadCrumb to stop processing traffic and responding to
BC|Commander have been resolved. (Causes were a specific type of ICMPv6 packet and an
extremely unusual APT usage scenario)
● An issue that could cause Mesh Snapshots to freeze has been resolved.
● An issue that could cause immediate failover to a secondary RADIUS server on boot has been
corrected.
● Two-antenna radios operate at proper performance level when enabling only the second antenna.
19
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
20
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
2 Installing BC|Commander
Rajant periodically releases updated BC|Commander software. This updated software must be obtained
from Rajant.
2.1 System Requirements
BC|Commander runs on Windows XP and later, and on most Linux operating systems. Both require a
Java Runtime Environment (JRE), version 1.7 or higher. The latest version can be obtained and
downloaded from http://www.java.com. The BC|Commander installers for Windows, available from the
Rajant download website include OpenJDK in the install. This will not replace an existing system JRE,
but will provide BC|Commander with the tools it requires to run properly. There are also installers
available that do not include Java.
2.2 BreadCrumb Firmware Requirements
BC|Commander version 11 can only discover and administer BreadCrumbs running version 11
firmware. BreadCrumbs running version 10 firmware will need to be upgraded before they can be
administered by the new BC|Commander.
21
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
22
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
3 Launching BC|Commander
During installation on Microsoft Windows, a "Rajant BCCommander" folder is added to your start
menu. This folder contains a shortcut for launching BC|Commander. Depending upon the options you
selected during installation, you may also have a BC|Commander shortcut on your desktop or in your
quick links bar.
Click on the BC|Commander shortcut on the start menu or quick link bar or double-click on the
BC|Commander shortcut on the desktop in order to launch BC|Commander.
No shortcuts are automatically created on Linux, although you may opt to create your own. To launch
BC|Commander, type bcc11 at a console.
3.1 BreadCrumb User Accounts
BC|Commander does not require a user to log in to use the application. However, an administrator must
first log in to individual BreadCrumbs in order to monitor and manage them. BC|Commander provides
three different login options, each with different privileges (See Table 1).
view
breadcrumb-view Read-only access to configuration and status.
(Viewer)
23
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
[(-u|--user) <user>]
Use with --pass to automatically log in to BreadCrumbs as the specified user
(view|admin|co).
24
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
[(-p|--pass) <pass>]
Use with --user to automatically log in to BreadCrumbs using the specified
password. NOTE: the password may be visible in your computer's process list
if
specified on the command line.
[(-l|--level) <logLevel>]
Controls the level of detail in application logs
(off|trace|debug|info|warn|error|all). (default: info)
[-c|--console]
Enables logging to console.
[--no-topo]
Disables the Topology View, e.g. to reduce system requirements or work around
graphics card issues.
[(-r|--reset) <reset>]
Resets BC|Commander settings. Options are:
l, layout reset all application layout options
p, prefs reset all application preferences
c, cache clear application caches
a, all reset all of the above
[-h|--help]
Displays this message.
[--snapshot <snapshot>]
Loads the specified snapshot file immediately upon launch.
[--render <render>]
Sets the graphics rendering pipeline. Must be one of: JAVA, XRENDER, or
OPENGL.
[--profile <profile>]
Selects an alternate application profile directory (for settings, logs,
etc.).
(default: default)
25
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
26
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
27
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
28
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
29
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
30
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
picking the top of the panel's frame and dragging it. Individual tabs in the panel can be shown or hidden
by checking or unchecking the tab name in the View menu. When all tabs in the System Information
Panel are closed or hidden, the whole panel will be hidden.
4.6.1 Alerts
The Alerts tab displays a table showing any current warnings or errors reported by BreadCrumbs. The
tab can be shown or hidden by checking or unchecking Alerts in the View menu. You can also hide, or
close the tab by clicking the on the tab itself.
4.6.2 Tasks
Tasks are processes that are initiated by the user via BC|Commander. These include uploading and
installing firmware, zeroizing, and rebooting. The Tasks tab displays a table showing any current or
completed tasks on all BreadCrumbs on the Mesh, including tasks initiated by other BC|Commander
sessions. The tab can be shown or hidden by checking or unchecking Tasks in the View menu. You can
also hide, or close the tab by clicking the on the tab itself.
4.6.3 Trace
The Trace tab displays the results of an IMTrace action. The label on the Trace tab will display the
source and destination of the IMTrace using the format (source → destination). Multiple Trace tabs
may be present. Unlike the Alerts or Tasks tabs, Trace tabs cannot be hidden or shown. The tab is
automatically displayed when you initiate an IMTrace action. The information in a Trace tab is not
updated automatically. Pressing the "Trace Again" button will manually update the results by
performing another IMTrace. If the tab is closed, the trace information contained in the tab is discarded.
4.6.4 Analysis
Multiple Analysis tabs display mesh-wide analysis of configuration and operational information.
Several tabs are displayed when you select the "Mesh | Analyze" option from the main menu. Analysis
information is not updated automatically. To refresh the information, select "Mesh | Analyze" from the
main menu again. If an Analysis tab is closed, the information contained in the tab is discarded.
● Link Statistics – Provides Signal to Noise Ratio (SNR) and Cost information for all
BreadCrumbs in the mesh.
● Inconsistent Settings – Consolidates configuration settings for all BreadCrumbs in the mesh,
allowing you to easily detect inconsistencies.
● Noise Analysis – Displays noise information for all frequencies in use by BreadCrumbs in the
mesh.
● Frequency Overlap - ( ) Visualizes frequency overlap and spectrum spacing.
For more information see Chapter 11 BC|Commander Analysis
4.7 Details Panel
By default, the Details Panel is located on the right side of the current tab. It contains tabs which
display data about a single selected BreadCrumb, including general details, as well as peer and client
information. The panel can be resized by picking the left side of the panel's frame and dragging it.
Individual tabs in the panel can be shown or hidden by checking or unchecking the tab name in the View
menu. When all tabs in the Details Panel are closed or hidden, the whole panel will be hidden.
4.7.1 Details
The Details tab shows a high-level summary of the selected BreadCrumb's current status, plus additional
31
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
information for each of its radios and Ethernet interfaces. The tab can be shown or hidden by checking
or unchecking Details in the View menu. You can also hide, or close the tab by clicking the on the tab
itself.
4.7.2 Peers
The Peers tab shows a list of currently connected peers plus information regarding those connections
such as SNR, MAC address, and data rate. The tab can be shown or hidden by checking or unchecking
Peers in the View menu. You can also hide, or close the tab by clicking the on the tab itself.
4.7.3 Clients
The Clients tab shows a list of currently connected clients, plus information regarding those connections
such as SNR, MAC address, and data rate. The tab can be shown or hidden by checking or unchecking
Clients in the View menu. You can also hide, or close the tab by clicking the on the tab itself.
( ) The Peers and Clients signal strength column has been updated. In addition to
SNR (signal to noise ratio), signal strength is a useful statistic for validating an installation. Signal is
measured in dBm and values closer to zero indicate a stronger signal. For example, -25 dBm is a
stronger signal than -35 dBm.
4.7.4 BCAPI Explorer
The BCAPI Explorer tab offers a collapsible display of all available state, configuration and hardware
attributes of the selected BreadCrumb. This provides a much deeper and more detailed look at a
BreadCrumb's configuration (both saved and active) as well as its packet statistics, admin sessions, radio
information, tasks and alerts. The tab can be shown or hidden by checking or unchecking BCAPI
Explorer in the View menu. You can also hide, or close the tab by clicking the on the tab itself.
32
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
33
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
34
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
Saved Layouts are implemented as templates which are manually applied to a tab during the "Apply
Layout" action. Once the layout has been applied to the tab, changes to the tab do not affect the Saved
Layout. Conversely changes to a Saved Layout will not be automatically propagated to any existing tab.
In addition to user-defined Saved Layouts, a "Default" layout is available which will return BCC to it's
default arrangement. Unlike the user-defined Saved Layouts, the "Default" template cannot be
modified.
Save Layouts are stored as part of the user profile, if you delete your profile all Saved Layouts will be
discarded.
35
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
5 BreadCrumb Table
The BreadCrumb Table shows all BreadCrumbs that BC|Commander is aware of, except those removed
from the display or otherwise filtered. Each BreadCrumb corresponds to a single row in the table, which
will be filled in with data if BC|Commander has received a status update from the BreadCrumb.
Right-clicking on a BreadCrumb (or one of several selected BreadCrumbs) will present the BreadCrumb
menu.
Multiple BreadCrumbs may be selected by holding down the shift key during selection (to select a
contiguous set of rows) or by holding down the ctrl key during selection (to toggle selection for
individual BreadCrumbs).
5.1 Managing Table Columns
Columns can be added to or removed from the table by right-clicking on the table header, expanding the
Add Column menu item and checking or unchecking the desired column. Columns will be added to the
right of the currently selected column. Columns can also be removed by right-clicking the table header
of the column to remove and selecting Remove Column. Multiple columns may be added or removed by
selecting "View | BreadCrumb Table Columns" from the main menu and selecting the column to add or
36
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
Columns may be rearranged by dragging the heading of a column to move to a new position.
Any column may be sorted by single-clicking on its heading. Additional clicks on the heading will
toggle between ascending and descending sort. The sort order will be maintained as BreadCrumb status
updates continue to be received.
5.2 Creating Custom Columns
Custom BreadCrumb Table columns can be created by right-clicking any BreadCrumb Table column
title and selecting "Add Custom Column". In the Create Custom Column settings dialog, enter a name
37
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
for the column and a valid BCAPI Query Language ("BQL") expression based on BreadCrumb
attributes. BreadCrumb attributes include the internal state of the BreadCrumb plus configuration values
and properties of the BreadCrumb hardware. There are also many simple predefined short-hand filters
available in BQL for commonly filtered attributes.
The BQL expression in the Create Custom Column dialog shown below is a simple expression based on
an attribute of the BreadCrumb "state" object.
The available objects and attributes are a subset of those defined in the Protocol Buffer Definitions
section of the BCAPI developer documentation. For information on writing BQL expressions see
Appendix BCAPI Query Language
To edit a custom column, right-click on the column and select Edit Custom Column.
To remove a custom column, right-click on the column's title and select Remove Column.
38
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
6 Topology View
6.1 General Topology View Use
The BC|Commander topology view is a graphical display of the equipment and the connectivity of a
BreadCrumb wireless mesh network. The topology view supports several display options, including a
map view. The topology view is useful for real time monitoring of the connections between equipment
in the BreadCrumb network. Configuration of BreadCrumbs is also supported from the topology view.
39
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
40
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
Icon Meaning
APT Master.
Displayed while the user drags a BreadCrumb out of the MAP view and
back into the Gallery to clear the manual GPS coordinates.
TRoIP Client
Warning
Error
41
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
Multiple links between BreadCrumbs can be shown as a single line by selecting Only Show Single Link
Per Peer from the topology view's right-click menu.
6.2 Topology View Context Menu
Right-click in a blank area of the Topology view (not on a BreadCrumb, client, or link) to bring up the
Topology view context menu. This menu includes the same items as Topology Layouts in the main View
menu, along with some additional commands.
● Default Layout – This layout disperses the BreadCrumbs over the available screen area.
BreadCrumbs repel each other to ensure there is no overlap.
● Circle Layout – BreadCrumbs are arranged in a circle.
● Bullseye Layout – Allows a user to see the number of network hops between BreadCrumbs. By
dragging a BreadCrumb into the center drop zone, BC|Commander will determine the minimum
number of hops to every other BreadCrumb on the network and arrange them from closest to
furthest. All BreadCrumbs in the first ring are 1 hop away, BreadCrumbs in the second ring are
2 hops away, and so on... BreadCrumbs outside the shaded rings are not connected to the center
BreadCrumb (either directly or indirectly).
The actual paths taken by traffic may differ from the paths shown in this view due to RF
Note and network conditions.
● Spring Layout – This layout disperses the BreadCrumbs over the available screen area.
BreadCrumbs will attract their peers but repel other BreadCrumbs that are not direct peers.
● Grid Layout – BreadCrumbs are arranged in a grid.
● Map Layout – BreadCrumbs are arranged based on latitude/longitude and displayed over a Map.
BreadCrumbs which do not have coordinates are arranged in a Gallery at the bottom of the
screen. Users can assign lat/lon by dragging BreadCrumbs from the Gallery onto the Map.
BreadCrumbs which have manually assigned coordinates can be dragged to different locations to
update their lat/lon positions, or can be dragged into the Gallery to clear their coordinates.
● Refresh – Refresh the current layout.
● Map Providers: MapQuest Street – Displays the online street view.
42
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
● Map Providers: MapQuest Aerial – Displays the online aerial (photographic) view.
● Map Providers: Save Offline Tileset – Opens the Save Offline Tileset dialog.
● Map Providers: Load Offline Tileset – Opens a file browser.
● Map Providers: Convert Image to Tileset – Converts a 2d map image into a tileset.
● Only Show Single Link Per Peer – When checked, show a single line between peers instead of a
line for each linked interface.
● Only Show Links for Selected BreadCrumb(s) – When checked, only show the links from the
selected BreadCrumbs to their peers. All other links are hidden.
● Show/Hide all Clients – Toggle the visibility of all wireless clients of the mesh.
● Zoom to Fit – Centers the view on the current layout and zooms to fit the available screen area.
6.3 Mouse and Keyboard View Controls
Right Click:
● Over BreadCrumb – Show BreadCrumb context menu. This will also select the BreadCrumb.
● Over Client – Show Client context menu.
● Over Nothing – Show TopoView context menu.
Single Left Click:
● Over BreadCrumb – Selects BreadCrumb.
● Over Link – Selects Peer Link and shows link information window.
● Over Client – Selects Client.
● Over Nothing – Clears Selection and link information window.
CTRL+Left Click:
● Multi-Selects either BreadCrumbs or Links.
● Removes an individual BreadCrumb from a selection of multiple BreadCrumbs.
Left Press and Drag:
● Over BreadCrumb – Moves BreadCrumb. This will also select the BreadCrumb.
● Over Nothing – Pans screen.
● Over Link Info Window – Click in the gray title bar area to move the window.
CTRL+Left Press and Drag:
● Move all selected BreadCrumbs as a set.
DoubleClick:
● On BreadCrumb – Opens the BreadCrumb Configuration Window.
● On Background – Zoom in.
43
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
The path field determines the path to the offline tileset. Zoom level is controlled by the minimum and
44
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
maximum zoom fields. These are expressed in terms of integer zoom levels, where 0 represents the
lowest zoom (entire world), and 18 generally represents the maximum zoom (street level).
BC|Commander will download all of the map tiles that overlap the visible area at all indicated zoom
levels. This will allow you to zoom in and out over the region while offline, but requires extra storage
space and time to download the tiles. As you modify the desired zoom levels, an estimate of how many
tiles will be downloaded and how much space they will consume is provided.
Be conservative in selecting desired zoom levels for offline maps. Selecting all
Warning available zoom levels for large regions can result in downloading more tiles than you
have space available to store.
When ready, click OK, and a progress dialog appears as the download completes. Once all tiles have
been downloaded, click Done.
This file can be loaded into the map view at any time by selectiong Map Providers -> Load Offline
Tileset from the right-click menu.
When viewing offline tiles, areas outside of the region downloaded will not be
Note available. In this case, it will fill in these areas using tiles from lower zoom levels,
which when enlarged will appear pixelated.
45
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
Once the Create an Offline Tileset dialog box is open, follow the steps below:
1. Click the Select Image... button.
2. Browse to the location of the source image and open the file.
3. For the positioning algorithm to work, GPS coordinates for two reference points on the map must
be entered. To improve the accuracy of the positioning algorithm, choose two points close to
diagonally opposite corners of the network map in order to maximize their vertical and
horizontal separation.
4. Enter the Latitude and Longitude of the two reference points.
5. Finally, locate both reference points on the map. Click the Locate button for Location 1, position
the pointer over Location 1 on the map image and left click. A green dot surrounded by a circle
will appear on the map.
6. Repeat previous step for Location 2.
7. Specify a filename for the output file, or click the Choose button to browse for a tileset to update
46
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
BC|Commander v11 mapping uses Mercator projection, which has a non-uniform Y axis
(latitudes are further apart at the poles). When importing non-Mercator maps, such as
Important maps using uniform grids, this could result in GPS positions being incorrect when
positioning BreadCrumbs. As a reference, the error is generally less than 10 m when the
reference points are up to 10 km apart at extreme latitudes.
47
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
7 Configuration Window
The configuration window is used for configuring BreadCrumbs as well as user preferences for the
application.
48
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
opened.
The Cancel button will exit the configuration window without applying any changes to the selected
BreadCrumb(s).
7.1.2 Import / Export
The BreadCrumb config window provides a way to import settings to, and export settings from a
selection of BreadCrumbs. Saved settings can be imported to multiple BreadCrumbs simultaneously,
saving time and reducing the number of equipment configuration errors. The Import and Export buttons
are located on the Configuration Window's title bar.
While encryption keys, passphrases, and shared secrets cannot be imported or exported,
the choice to enable security features CAN be. After loading a configuration file that
Warning enables security features, remember to manually enter the necessary encryption keys,
passphrases or shared secrets BEFORE rebooting the BreadCrumb(s).
49
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
The Import / Export panel will open up on left-hand side of the configuration window. Enter or browse
for the desired directory. For Import, select from the list of available configuration files. For Export,
enter a filename (required) and name and comment for a new file, or select from the list of available
configuration files, if you wish to overwrite a file.
Use the check-boxes in the configuration panels to select which individual settings or categories of
settings will be included in the import or export action. Click Finish when you are done, or Cancel to
return to the configuration window without importing or exporting.
You can only import a configuration file to a BreadCrumb that matches the model (e.g.
Note ME4) and hardware configuration (e.g. 2409) of the BreadCrumb from which the
configuration was saved.
50
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
field will immediately change to red. Once all 40 characters are entered correctly, the field will show
green.
7.2.2 General Validation
Any setting that is determined to be not valid will show either a warning ( ) or an error ( ) icon.
These icons will also show on any categories in the settings tree that contains that setting. A
configuration that contains an error will NOT be saved. The user must correct the offending value
before continuing or cancel the configuration. A configuration that contains a warning will still be
saved.
It is sometimes possible, during bulk configuration for example, for the Configuration
Window to open with existing warnings. You may correct these warnings if you wish,
Important but the config window will allow you to make changes to other settings and save the
config successfully without altering the warnings.
Clicking the blue "undo" style arrow ( ) next to any setting that has been changed will reset that
setting to its original value.
7.3 Configuring Preferences
To access the application preferences window, open the File menu and select Preferences, or use the
keyboard shortcut keys Alt-P.
7.4 Configuring BreadCrumbs
Configuring BreadCrumbs is an Admin level action, although some settings require Crypto Officer level
access to change. Make sure to supply at least Admin level login credentials to BC|Commander. To
access the BreadCrumb Configuration Window, select the BreadCrumb(s) you wish to configure in
either the BreadCrumb Table or the Topology View, then open the configuration window using one of
the following methods:
● From the BreadCrumb menu, select Configure.
● Use the keyboard shortcut keys Alt-C.
● Use the right mouse button to bring up the pop-up menu and select Configure.
51
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
52
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
8 Preferences
The user can change certain application preferences by making changes to the Application Preferences
Dialog. The Preferences window works just like the BreadCrumb Configuration Window.
8.1 General
8.1.1 General: Hide Single Tab
When the Hide Single Tab option is checked, and there is only one active tab, the tabs, including the
New Tab ( ) are not displayed, meaning the main view can be a little larger. This can be useful on a
laptop or PC with a small screen. BC|Commander must be restarted in order for a change to take effect.
8.1.2 File Editing: File Editor
The name of the editor to use when viewing logs. Leave empty to let BC|Commander attempt to
determine the default file editor for your environment.
8.1.3 File Editing: Run File Editor in Terminal
Set to true if your file editor should be launched in a terminal window.
8.1.4 File Editing: Terminal
The name of the terminal to launch the file editor in, if enabled (such as xterm or gnome-terminal).
53
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
54
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
55
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
8.7 Animation
8.7.1 Animation: Topology View Frame Rate (frames/sec)
The frame rate of the Topology View. Higher frame rates provide a smoother user experience, but use
more CPU.
8.7.2 Animation: Topology View Non-Focused Frame Rate (frames/sec)
The frame rate when the Topology View is visible but does not have focus.
8.8 Link Display
8.8.1 Link Display: Wired Link Color
The color of wired links which do NOT connect to an APT Master.
8.8.2 Link Display: Wired Link to APT Master
The color of wired links which connect to an APT Master.
8.8.3 Link Display: Unknown Link Color
The color of links which do not fall inside a defined range.
8.8.4 Link Display: Unselected Links
Transparency mask for non-selected links. Lower values make the links more transparent.
8.8.5 Link Display: Normal Links
Transparency mask for links when no BreadCrumbs or links are selected. Lower values make the links
more transparent.
8.8.6 Link Display: Selected Links
Transparency mask for links when BreadCrumbs or links are selected. Lower values make the links
more transparent.
8.8.7 Link Display: Links Coloring Scheme
Currently the only color scheme choice is Frequency Range.
8.8.8 Link Display: Colors for Frequency Ranges
The colors for Frequency Ranges table allows you to create and manage the colors of wireless links
displayed in the Topology view.
8.8.9 Colors for Frequency Ranges: Remove All
The Remove All button removes all of the entries from the colors table.
8.8.10 Colors for Frequency Ranges: Add
The Add button creates a new row in the colors table. The Start and End values of the frequency range
are shown in MHz. The color is an RGB hex value.
8.8.11 Colors for Frequency Ranges: Remove
The Remove button removes the currently selected range from the colors table.
8.9 Analysis: Link Statistics
8.9.1 Link Statistics: Good Cost Limit
The upper limit of a good cost. Cost values over this amount are candidates for improvement.
56
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
57
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
9 BreadCrumb Configuration
9.1 General
The General category includes several user definable settings which allow an administrator to organize a
BreadCrumb network for a specific application. These include a BreadCrumb Name, a Notes field, and
a list of one or more Groups. Other General Settings include LED Mode and GPS Location settings.
9.1.1 General: BreadCrumb Name
The BreadCrumb Name is an easily identifiable or readable name that you can give to your
BreadCrumb. The BreadCrumb Name is displayed on the BreadCrumb graphic in the Topology View
and can be displayed in the Table View. This field may remain blank.
9.1.2 General: Notes
The Notes field can be used for additional notes for the BreadCrumb. This field may remain blank.
9.1.3 Status LED: LED Mode
The LED Mode controls the default display state of a BreadCrumb's Status LED. There are four default
display states to choose from:
● On: Status LED displays errors, warnings, and link status.
● Off: Status LED remains off and does not display errors, warnings, or link status.
● Alerts Only: Status LED remains off unless there is an error or warning, in which case it
alternates between displaying the link status and the error or warning code.
● Off (switchable): Status LED remains off and does not display errors, warnings, or link status.
The status LED on LX, LX3 and ME3 may exhibit a short blink after a warm reset
condition that occurs due to system error or is initiated by the user (e.g., performing a
reboot command through BC|Commander, performing the Zeroize Keys and Restore
Warning Factory Defaults procedure). The LEDs on the JR cannot be turned off. The LED must
be physically masked (such as adding tape to the LED lens) to guarantee that no light is
emitted at any time.
Except for 'Off', each default display state has a corresponding alternate state. The BreadCrumb's LED
Configuration Switch can toggle back and forth between the default state and its alternate state. See the
BreadCrumb user guide for more information about the LED Configuration Switch.
The alternate display state for 'On' is 'Off'. The alternate display state for 'Alerts Only' is 'On'. The
alternate display state for 'Off (switchable)' is 'On'.
The 'Off' mode does NOT have an alternate state. The BreadCrumb's LED Configuration Switch will
NOT turn the LED on. This is to prevent accidental illumination during nighttime operations.
9.1.4 Location: Latitude / Longitude
The Latitude and Longitude fields are reserved for the position coordinates of a BreadCrumb. The data
must be entered as DDDMM.MMMMN where DDD indicates whole degrees, MM.MMMM indicates
minutes and N indicates direction. Example: "07530.4963W" indicates 75 degrees, 30.4963 minutes
West longitude.
58
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
Assigning one or more groups to a BreadCrumb does not apply any other settings to the
Important BreadCrumb. Only the values of the Groups list are changed.
59
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
The computed IP address (v10) for a BreadCrumb can change if an interface is disabled
or replaced by Rajant while servicing a repair or becomes non-functional. By default
Important the seed for the BreadCrumb computed IP address is the MAC address of the WLAN0
interface. If WLAN0 is disabled, then the MAC address for WLAN1 becomes the seed
for generating the BreadCrumb Computed IP address.
60
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
9.3 VLANs
BreadCrumb Firmware supports configurable Virtual LANs (VLANs) and Quality of Service (QoS)
control. The VLANs table allows you to create and manage the VLANs on a BreadCrumb.
To manage VLANs on the individual ports of the BreadCrumb, including the Local Port,
Important go to each port in the configuration tree and find its VLANs settings.
A VLAN is identified by a VLAN number, or tag, and is given a priority. A packet, or frame, that
belongs to a VLAN will have a special header that includes the VLAN's tag and priority.
9.3.1 VLANs: Remove All
The Remove All button removes all of the entries from the VLANs table.
9.3.2 VLANs: Add
The Add button creates a new VLAN in the VLANs table. A newly created VLAN is automatically
assigned the next available VLAN Number and a Priority of 0 (Best Effort). Any field in the VLANs
table can be changed at any time.
9.3.3 VLANs: Remove
The Remove button removes the currently selected VLAN from the VLANs table.
9.3.4 VLANs: VLAN Number
The VLAN number ranges from 0 to 4,095. Frames with a VLAN number of 0 are treated the same as
non-VLAN frames. VLAN numbers 1 and 4,095 are often reserved for management.
9.3.5 VLANs: Name
The VLAN Name is an easily identifiable or readable name that you can give to the VLAN. This field
may remain blank. It is displayed wherever VLANs are listed.
9.3.6 VLANs: Priority
The VLAN priority ranges from 0 to 7. The order of priorities, in ascending order, is: 1, 2, 0, 3, 4, 5, 6,
and 7. Non-VLAN frames are treated as priority 0. For a more detailed description of VLANs, see
http://en.wikipedia.org/wiki/VLAN.
9.4 Port Forwarding
Port Forwarding is used to pass data through a BreadCrumb Gateway port to allow connections into the
mesh via the gateway interface of a BreadCrumb in gateway mode.
9.4.1 Port Forwarding: Remove All
The Remove All button removes all of the rules from the Port Forwarding table.
9.4.2 Port Forwarding: Add
The Add button creates a new, blank rule in the Port Forwarding table. Any field in the Port Forwarding
Table can be changed at any time.
A new rule will not be validated until all values in the rule are valid, or until the rule is
Note removed.
61
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
The RRADS must have a wired connection to this BreadCrumb. While in capture
Note mode, the BreadCrumb will not participate in the Mesh.
62
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
Packets from the Native VLAN are always accepted by the local port. The Native VLAN of the local port
MUST match the VLAN, if any, being used to administer the BreadCrumb.
The local port will always accept untagged packets (packets that do not have a VLAN header). If you
assign a Native VLAN to the local port, the local port will only accept packets tagged with the Native
VLAN, as well as any untagged packets.
In the simplest case, the client (running BC|Commander for example) has no VLAN set and is connected
directly to a port on a BreadCrumb. That port must have the same Native VLAN as the BreadCrumb's
Local Port and must also be set to accept untagged frames. Packets sent from the local port into the
mesh will be tagged with the Native VLAN.
9.7 Ports: wlanX
There is a numbered "wlan" category (wlan0, wlan1, etc...) for each radio card in the BreadCrumb. The
category name in the settings tree will display the frequency of the radio card associated with the wlanX
(2.4 GHz, 900 MHz, etc...). Along with the wireless settings in this category, each radio will have four
(4) AP sub-categories (AP 0, AP 1, etc...) that contain ESSID and security settings.
9.7.1 Mesh: Enable Meshing
When Enable Meshing is checked, the radio card supports Mesh connections to other BreadCrumbs.
9.7.2 Mesh: InstaMesh Minimum Cost Difference (%)
A change in the cost of an InstaMesh connection triggers an update of the routing table and a reporting
event. InstaMesh Minimum Cost Difference is the minimum percentage change of the link cost which
must occur to trigger the update to the routing table and the reporting event.
Since updates to the routing table increase the load on the BreadCrumb and reporting events are loads on
the network bandwidth, this parameter can be used to set a higher Difference threshold which will
reduce the frequency of these events, and make more bandwidth available for other network
applications. Increasing the Minimum Cost Difference also increases how long it takes the forwarding
table to adjust to changes in cost.
9.7.3 Mesh: Enable Broadcast Receiver Address
This setting (formerly Use Broadcast Receive Address) allows a radio to send multicast Ethernet traffic
and MAC address discovery traffic using a single wireless packet sent to all peers. This setting is only
used when the BreadCrumb has at least as many peers as the Broadcast Receive Address Threshold (a
setting found in the InstaMesh configuration). Packets are sent without retries and at a static configured
802.11 data rate, the radio's multicast rate.
If it is not set, the broadcast receive address is never used and all multicast Ethernet traffic and MAC
address discovery is flooded to each mesh peer individually with wireless unicast packets that are sent
reliably.
Three scenarios are possible.
63
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
● If Enable Broadcast Receiver Address is not checked, multicast and MAC discovery Ethernet
packets will not be sent to the wireless broadcast receive address. They will be sent to each
wireless peer individually in a process known as flooding.
● If Enable Broadcast Receiver Address is checked and the number of peers is at least the number
set in InstaMesh: Broadcast Receive Address Threshold and each of their peers has at least this
number of peers, multicast and MAC discovery Ethernet packets will be sent from this radio to
the wireless broadcast receive address. All peers can receive this single packet.
● If Enable Broadcast Receiver Address is checked, but the number of peers is less than the
number set in InstaMesh: Broadcast Receive Address Threshold, multicast and MAC discovery
Ethernet packets will be sent as individually to each wireless peer in a process known as
flooding.
Flooding provides a more reliable method of transmitting multicast traffic. Flood packets are unicast
packets at the wireless level and are acknowledged. The sender will resend the data multiple times at
different data rates until the maximum retry is reached.
Using the broadcast receive address reduces the processor load on the BreadCrumb and reduces the
amount of wireless traffic required to send multicast and broadcast Ethernet traffic. If broadcast receive
address is not used, a multicast packet must be sent to each wireless peer one at a time. Each of these
transmissions must be acknowledged by the peer and may be retried. Conversely, if the broadcast
receive address is used, only one packet must be sent per radio. This packet is sent once per radio at the
Multicast Rate and is not acknowledged or retried.
For maximum performance in high distance and/or low density applications that use little multicast
traffic, turn off the Broadcast Receiver Address.
For maximum performance of applications that use multicast traffic, turn on the Broadcast Receiver
Address and increase the Multicast Rate to twice the required minimum actual throughput. If your
multicast application requires 3 Mbps, set the Multicast Rate to at least 6 Mbps. Make sure that the
InstaMesh setting Broadcast Receive Address Threshold is set to less than or equal to the number
BreadCrumbs in your mesh.
For maximum performance in dense networks, turn on the Broadcast Receiver Address. You may want
to increase the Multicast Rate to reduce the increased wireless bandwidth used by slow rate packets.
64
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
65
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
options.
9.7.8 Radio: Transmit Power
This sets the transmit power of the radio card. Settings are reported in dBm, and represent the transmit
power at the antenna port of the BreadCrumb, not including any antenna gain or cable loss. The
transmit power choices are dependent on the Regulatory Compliance Mode, the Regulatory Domain and
the Channel Number.
9.7.9 Radio: Multicast Rate
This is the Multicast Packet Data Rate. The default Multicast Rate is 1 Mbps. This is the lowest rate, but
it is the most dependable and will travel the farthest. This rate is only used on packets with a broadcast
receive address. (See Mesh: Enable Broadcast Receive Address)
9.7.10 Radio: Enable Compression
This enables hardware compression for the radio's wireless links. The support is negotiated with each
peer; both sides must have this feature enabled for the compression to work.
9.7.11 Radio: Antenna Selection
For radio cards with more than one antenna port, this setting identifies which antenna is used for 802.11
reception.
9.7.12 Settings: Maximum Peers
Maximum number of peers this radio will connect to simultaneously. If additional peers are available,
stale peers may be disconnected before the Radio Timeout is exceeded.
9.7.13 Settings: Range (meters)
This affects the timeouts that the radio uses in waiting for acknowledgments of packets. Generally this
setting is made a bit longer than the maximum distance expected to travel. Setting the range higher than
needed will reduce the performance when interference is present.
9.7.14 Settings: Radio Beacon Interval (ms)
This is the time in (ms) between 802.11 beacons. Increasing the beacon interval in very dense networks
may improve wireless communications. Setting the beacon interval > 400 ms may result in clients being
unable to associate.
9.7.15 Settings: Radio Timeout (sec)
This parameter sets the maximum allowable time in seconds following the receipt of a packet (including
an 802.11 transmission acknowledgment) from a BreadCrumb peer or wireless client or until a
connection times out.
9.7.16 Settings: Noise Level Warning Threshold
A warning will be issued if the noise floor of the radio exceeds this value. The warning will
automatically be cleared if the noise floor falls back below the threshold.
9.7.17 Settings: Noise Level Error Threshold
An error will be issued if the noise floor of the radio exceeds this value. The error will automatically be
cleared if the noise floor falls back below the threshold. If the noise floor exceeds both the Noise Level
Warning Threshold and the Noise Level Error Threshold, only the error will be issued.
9.7.18 Settings: Enable Packet Capture
Controls whether this radio will be used for wireless packet capture when Enable Remote Capture is set
66
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
to true.
9.8 Ports: AP X
There are four (4) AP (Access Point) sub-categories (AP 0, AP 1, etc...) for each wlanX port (radio card)
in the BreadCrumb. Each contains ESSID and security settings.
9.8.1 Access Point: Enable Access Point
When Enable Access Point is checked, the radio card supports connections to wireless clients. This
feature is disabled by default on v11 BreadCrumbs.
9.8.2 Access Point: ESSID
The 802.11 radios used in BreadCrumb products support the use of multiple ESSIDs. The BreadCrumb
can be configured with different security settings for each ESSID. This capability offers several
advantages.
● By supporting multiple access control schemes, legacy clients that do not implement the latest
access control methods, such as 802.11i, can connect through another method such as WEP or
WPA personal.
● An administrator can restrict wireless client access to VLANs in order to prioritize and/or isolate
traffic.
The ESSID is case sensitive, and special whitespace characters (such as tab, or line return) should not be
used. The length of the ESSID must be at least one character.
9.8.3 Access Point: Enable ESSID Broadcast
This setting determines whether or not beacons containing this ESSID are sent out. If Enable ESSID
Broadcast is left unchecked, wireless clients will need to be configured with the ESSID to connect
because they will not be able to discover it through scanning.
9.8.4 Access Point: Ignore Broadcast Probe Requests
This setting determines whether the AP should respond to Probe Requests that do not specify the SSID.
This field is ignored if Enable SSID Broadcast is not set.
9.8.5 Security: Security Mode
BreadCrumbs support eight (8) available security options: Open Network (no security), WEP, WPA
Personal, WPA Enterprise, WPA2 Personal, WPA2 Enterprise, WPA2 Personal Mixed or WPA2
Enterprise Mixed.
67
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
68
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
69
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
● Gateway: In Gateway mode, the IP address of the Ethernet port is different from the BreadCrumb
IP address. Outbound NAT is configured so that any Mesh traffic destined for the wired Ethernet
subnet appears to originate from the Ethernet port, and inbound traffic from the wired Ethernet
subnet must be sent through a forwarded port.
● Ingress Gateway: In Ingress Gateway mode, as in Gateway mode, the Ethernet port is configured
to exist on a different network than the BreadCrumb's other interfaces. NAT, however, is
configured in the direction opposite to that of Gateway Mode. Inbound traffic from the wired
Ethernet subnet appears on the MESH side to originate from the BreadCrumb, and outbound
traffic from the Mesh must be sent through a forwarded port.
● Mesh Only: (formerly APT Only) In Mesh Only mode, the Ethernet port will only make Mesh
(APT) connections to other other BreadCrumbs' Ethernet ports and will not allow raw Ethernet
traffic to enter the Mesh network, even if the BreadCrumb is the master of the APT connection.
BreadCrumbs connected directly to each other via Ethernet function as single node, effectively
treating this connection as an extremely fast wireless connection. This is accomplished using
Rajant's unique APT (Automatic Protocol Tunneling) technology.
● Disabled: When disabled, a BreadCrumb Ethernet does not operate. Data cannot be sent or
received with this port.
9.9.2 Ethernet: Alternate Gateway
When the wired interface is in gateway mode, it will have a separate IP address from the local interface
of the BreadCrumb. It will also set the local interface to respond to 10.0.0.1. Only one BreadCrumb in
a Mesh should have a given IP address. To prevent additional BreadCrumbs from using the gateway
address, set the Alternate Gateway to true.
Alternate gateway also changes the gateway and DNS server given out to be its own local address. This
can provide some load balancing so that clients that get their DHCP information from this BreadCrumb
will use it as their gateway.
9.9.3 Ethernet: Port Speed
The parameter sets the data rate of the BreadCrumb Ethernet port. For BreadCrumbs with 10/100
70
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
71
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
settings.
9.10 Security
The Security category includes Mesh security settings and subcategories for BC|Commander login
credentials, Access Control with white and black lists, and BCAPI security settings.
72
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
While ACLs provide some control over the devices that may connect to a mesh, it
Important should not be depended upon as a security solution as MAC addresses are easily forged.
73
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
9.12 BCAPI
The user credentials allow BC|Commander to log in to BreadCrumbs that have been discovered. In
order to change the passphrase for any of these accounts on a BreadCrumb, BC|Commander must be
logged in as "Crypto Officer" on that BreadCrumb. See section 3.1 BreadCrumb User Accounts for
more information about these login credentials.
9.12.1 User Credentials: Passphrase for "View" role
The view role grants read-only access to configuration and status. The view passphrase must be 8-63
characters in length. You must enter the passphrase twice to confirm.
9.12.2 User Credentials: Passphrase for "Admin" role
The admin role grants read access to configuration and status, write access to non-security-related
configuration. Permitted to execute non-security related commands such as “reboot” and “upgrade
firmware. The admin passphrase must be 8-63 characters in length. You must enter the passphrase twice
to confirm.
9.12.3 User Credentials: Passphrase for "Crypto Officer" role
The Crypto Officer, or co, role grants read/write access to all configuration, read access to status.
Permitted to execute all commands, set encryption keys, and set passwords. The crypto officer
passphrase must be 8-63 characters in length. You must enter the passphrase twice to confirm.
9.12.4 SSL/TLS Settings: Security Profile
This setting controls the SSL/TLS parameters of the BCAPI connection used by BC|Commander and
other BCAPI clients. There are six security profiles available:
● Suite B
● FIPS
● Android 4.x+
● Android 2.x+
● Compatibility
● Custom
9.12.5 SSL/TLS Settings: Certificate and Security Bits
See the gnutls manual for cryptographic key sizes. Section 6.11:
http://www.gnutls.org/manual/gnutls.html#Selecting-cryptographic-key-sizes. This is only enabled
when the BCAPI: Security Profile is set to Custom.
9.12.6 SSL/TLS Settings: Handshake Priority String
See the gnutls manual for handshake priority strings. Section 6.10:
http://www.gnutls.org/manual/gnutls.html#Priority-Strings. This is only enabled when the BCAPI:
Security Profile is set to Custom.
9.13 InstaMesh
InstaMesh® is a proprietary wireless networking protocol developed by Rajant Corporation. InstaMesh
is the communication protocol for the transfer of data between BreadCrumbs.
The InstaMesh category contains settings for configuring InstaMesh parameters. Changes to these
settings take effect immediately upon saving the configuration and do NOT require the BreadCrumb to
74
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
reboot.
75
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
76
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
To prevent clients from connecting to enabled access points on the v11 BreadCrumbs
Note while in v10 Compatibility Mode, configure the ACL: ACL Mode to "Whitelist" and
leave the ACL: Whitelist empty.
77
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
multicast packets are dropped when the rate of arrival is faster than indicated by the packets per second
configured.
9.13.23 Flood: Flood Limits
A list of flood limits to be applied to specific MAC addresses. A flood limit is applied to multicast
traffic destined for the mesh. Limits are given in packets per unit of time. Time is expressed in seconds
and microseconds. If allowBurst is set, the source MAC may send up to the number of packets noted in
the time limit. If allowBurst is not set, an inter-packet interval is calculated and packets are dropped that
exceed this rate.
9.13.24 Wireless: Connection Timeout (sec)
The period during which at least one packet must be received on a given interface in order to keep the
interface active. When an interface goes from active to inactive, it is removed from all routes and is no
longer displayed in BC|Commander. As soon as any data is received, the route becomes active again.
9.13.25 Wireless: Keepalive Interval (sec)
The interval between which keepalive packets are transmitted on idle interfaces in order to keep the
interface active.
Administrators may wish to increase the keepalive interval in dense mesh networks
where each BreadCrumb may have many peers. This may be desired in order to reduce
Important the total number of keepalive packets sent per second. Administrators must take care to
ensure that the associated Keepalive setting on other BreadCrumbs is consistent with
any large Keepalive Interval setting in order to prevent excessive connection timeouts.
78
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
byte. The MAC address with a greater value in the first byte that is different between the two addresses
is considered the greater MAC address.
In version 11, the default value of the APT Priority is 100. This allows you to configure a BreadCrumb
below the priority of the default.
9.13.30 Protocol Tunneling: Remote Protocol Tunneling Connection
Attempt Interval
The BreadCrumb will attempt each interval to connect to any Remote Protocol Tunneling hosts that
have not yet been connected to. "0" means no retries; the BreadCrumb will only try to connect to the
host once.
9.13.31 Protocol Tunneling: Remote Protocol Tunneling Host Names or
Addresses
A series of IPv4 addresses, IPv6 addresses or host names that are resolvable by a Dynamic Name
Service (DNS) server. The BreadCrumb will attempt to connect to each name simultaneously to form
Remote Protocol Tunneling connections. These connections use the APT timeout and keepalive
intervals. They are reliable and include retries. They can pass through routers / gateways and traverse
the Internet. Failed connection attempts or DNS resolution attempts are retried every RPT Connection
Attempt Interval.
9.13.32 Remote Protocol Tunneling Host Names or Addresses: Remove
All
The Remove All button removes all of the Groups from the Call Groups Slots table.
9.13.33 Remote Protocol Tunneling Host Names or Addresses: Add
The Add button creates a new Group in the Call Groups Slots table. A newly created Group is
automatically assigned the next available Group Number. Any field in the Call Groups Slots table can
be changed at any time.
9.13.34 Remote Protocol Tunneling Host Names or Addresses: Remove
The Remove button removes the currently selected Group from the Call Groups Slots table.
9.14 TRoIP
Tactical Radio over IP (TRoIP) is a BreadCrumb-headset combination for push-to-talk call groups. The
settings listed below allow the user to control the configuration and sound settings for each call group
member. Changes to these settings take effect immediately upon saving the configuration and do NOT
require the BreadCrumb to reboot.
9.14.1 TRoIP: Instance Count
The number of TRoIP sessions this BreadCrumb is capable of joining. Set to Left for a single session in
the left ear only, or Both for dual sessions (one in each ear).
9.14.2 TRoIP: Enable Local Audio Mixing
When checked, instead of going through a Mixmaster, all of the incoming audio streams of the
BreadCrumb's call group are mixed locally and played through the earpiece. All other BreadCrumbs in
the call group must also check Enable Local Audio Mixing.
9.14.3 TRoIP: Mixmaster Election Bias
Used to favor or handicap a BreadCrumb in Mixmaster elections. Positive numbers favor, negative
numbers handicap.
79
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
80
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
81
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
82
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
10 Administrative Tasks
10.1 General Administration
10.1.1 Manually Adding BreadCrumbs
BC|Commander automatically discovers BreadCrumbs in a network, but also provides a manual
discovery process. This method is useful for configuring a BC|Commander session to administer
BreadCrumbs through a routed network that does not forward multicast discovery requests. Perform the
following steps to manually add a BreadCrumb to the network.
1. Open the Preferences dialog from the File menu and select Manual Discovery in the preferences
tree.
2. The Add button creates a new entry in the Manual BreadCrumb Discovery List. Enter the IP
address of the target BreadCrumb and check the Enable box.
The following steps are required to perform the OTA firmware update:
● Select a BreadCrumb from either the Table View or the Topology View. Select multiple
BreadCrumbs to apply a firmware update to more than one BreadCrumb.
● Select Upgrade Firmware from the BreadCrumb Menu. A window will appear.
83
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
The following steps are required to prepare a blank USB drive for the BreadCrumb USB firmware
update process.
● Insert an empty USB drive into an available USB port.
A blank drive is recommended for this process. Having other information on the drive may or
84
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
may not cause a problem. For clarity, it is assumed that the USB drive is blank.
● From the File menu, select USB Flash Manager to open the USB Flash Manager window.
● Select choose, and browse to the path of the USB drive.
● Select Add File and browse to the path of the firmware file. This process can be repeated to
transfer multiple firmware files to the same USB drive.
● Files that have been transferred to the USB drive will be listed in the USB Flash Manager
window.
● Select the active checkbox for the firmware version that will be used for the USB firmware
update.
● Click the OK button to exit the USB Flash Manager.
● Safely eject the USB drive.
85
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
In the InstaMesh Trace dialog box you can designate the following:
● Starting BreadCrumb: Where the trace will start. This dropdown list will contain all known
BreadCrumbs with the current BreadCrumb selected (in alphabetic order)
● Destination MAC/IP: Where the user is tracing to. If only one BreadCrumb was selected, the
dropdown list will be empty. If a second BreadCrumb is selected, its IP address will be
displayed. This field is editable and the user can provide an alternate IP address or a MAC. The
field will provide syntax validation when the user changes the value.
● Swap: If the user selected two BreadCrumbs, they can change the direction of the trace by
pressing the Swap button. This will swap the start and destination BreadCrumbs.
● Ping target before trace: Will cause the trace to issue a ping to the target. This will aid in route
discovery. The ping is only issued on the first hop.
● Start: Begins the trace.
● Cancel: Dismiss the dialog. No trace is performed.
10.3.2.1 Trace Result
Once a destination is chosen (or typed in), pressing Start will begin the trace. A trace tab will open at
the bottom of the screen. The tab will be named using the start and destination.
86
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
The trace output will be displayed as results are returned. The lower right corner of the trace window
contains two buttons.
● Trace Again: Will perform the same trace again.
● Cancel Trace: Will stop tracing after current hop completes.
10.3.2.2 Multiple Trace Tabs
You can execute and display multiple InstaMesh traces. Each unique trace will be shown in its own tab
at the bottom of the screen. Uniqueness is defined by the Name/Serial of the starting BreadCrumb and
the destination address. If you execute a trace for which there is an existing tab, the existing tab will be
reused. Duplicate trace tabs are NOT supported.
10.3.2.3 Trace Output
While the trace is running, output will be displayed in a text area in the trace tab. The text area should
automatically scroll when necessary to display the most recent results. If an existing tab is reused, the
tab should receive focus before results are displayed.
Unlike other tabs in the docking framework, when a trace tab is closed it cannot be reopened. When a
trace tab is closed, all information about the trace is discarded. Trace output can be copied to the
clipboard by highlighting the desired text and pressing CTRL-C.
87
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
The output of the trace has changed from BC|Commander v10 to reduce duplicate information and
enhance readability.
The first three lines of the trace output contain the following:
● Line 1: Start and destination provided by the user.
● Line 2: The Target IP computed by the first trace.
● Line 3: The Target MAC computed by the first trace.
Each Trace line contains:
● Hop Count
● Hop start BreadCrumb Name or Serial
● Hop destination MAC
● Hop destination BreadCrumb Serial and Name
● Connection information
10.3.2.4 Visual Trace
The Topology View will automatically display traced routes for the currently visible Trace tab. By
dragging a Trace tab to an alternate location, it is possible to display multiple traces at the same time.
The color button at the bottom of the Trace tab will allow you to color code each trace for easier
identification.
88
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
89
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
The generated file contains the entire memory space utilized by BC|Commander and
Important may be quite large.
Do NOT turn off power or reboot a BreadCrumb that is being zeroized. An interruption
Warning to power during the zeroization process may result in the BreadCrumb being unable to
boot properly.
90
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
11 BC|Commander Analysis
As more BreadCrumbs are added to a mesh, maintaining an optimal configuration and detecting
incompatibilities and inefficiencies becomes more difficult. BC|Commander provides several analysis
tools to help detect problems with your configuration and mesh installation. The analysis tools generate
summary and detail data that can be viewed in BC|Commander and exported to PDF reports. The
exported PDFs also contain a snapshot of the analyzed data as an attachment. Unlike other portions of
BCC, analysis data is static and represents a "single point in time" view of the mesh. Updates received
by BCC after the analysis has started will not be captured in the resulting data.
To run or re-run all analysis tools, select Mesh | Analyze from the main menu. ( )
Each analysis panel provides a "Refresh" button in the lower right hand corner. Pressing "Refresh" will
re-run the displayed analysis using the current state of the mesh.
11.1 Configuration Settings
Configuration Settings analyzes all settings on all known BreadCrumbs. Settings which are the same
on all BreadCrumbs are added to the "Consistent Settings" table. Configuration values that differ are
added to the "Inconsistent Settings" table.
11.1.1 Inconsistent Settings Table
This table is comprised of three columns.
Setting Name – The fully qualified BCAPI name for the configuration setting
Value – The current value or <empty> if there is no value
BreadCrumbs – The count of BreadCrumbs where the setting has the specified value
91
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
The table will contain one row for each unique name and value combination. To enhance readability the
setting name is only displayed once.
Selecting a cell in the "BreadCrumbs" column will expand the row and display all BreadCrumbs which
share the value in the "Value" column. Double clicking on the cell will allow you highlight and copy the
cell contents. Because of the ordered nature of the data, this table is not sortable.
In the following screenshot, 10 BreadCrumbs have a wireless interface set to channel 11, while 7
BreadCrumbs have an interface on channel 6, an so on.
92
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
93
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
94
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
95
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
Configuring radios to operate on different channels is not enough to ensure that they do not interfere
with one another. Depending upon a radio's bandwidth settings it may actually interfere with several
adjacent channels as well. This tool helps to ensure that BreadCrumbs are configured with sufficient
channel separation to ensure minimal self-interference.
The portion of the wireless spectrum used by a BreadCrumb's wireless interface is based on the
configured channel and bandwidth setting. To detect potential problems, "Frequency Overlap" analysis
computes the frequency range used by each wireless interface for all discovered BreadCrumbs and
compares the ranges. Each interface which overlaps another interface is listed in the resulting table.
Each row of the table represents a unique BreadCrumb/interface combination. The chart or charts on the
right display frequency ranges where overlap exists, allowing you to visualize the overlap and spectrum
spacing.
Selecting a row (or rows) in the Overlap table will highlight the corresponding area in the appropriate
chart. Alternatively, clicking within a colored chart region will select all interfaces which are using the
selected frequency range. Clicking where frequency ranges overlap will select all interfaces where 2 or
more frequency ranges overlap. Selecting an empty space will remove all selections.
96
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
*Note: If one frequency range completely encapsulates another range, it is not possible to select the
encapsulated range by clicking on the chart.
A user defined amount of guard-band is displayed around the frequency ranges and is used in the
analysis to determine overlap. For instance if a 5 MHz guard band is defined, a minimum of 5 MHz
must separate two adjacent 20 Mhz wide channels for those interfaces to be considered as
non-overlapping (2.5 MHz is added to the upper and lower ends of each frequency range). The guard
band amount is configurable for a 20 MHz wide channel. For all other channel widths, the amount is
scaled proportionally. Therefore a 40 MHz wide channel will automatically be assigned a 10 MHz
guard band, while a 10 MHz wide channel will have 2.5 MHz of guard band. The guard-band area will
be displayed in a lighter shade of the color used to identify the frequency range.
The colors used to display frequency ranges are configurable and match the colors used to display peer
links in the Toplogy View. See Preferences | Toplogy View | Link Display | Colors for Frequency Ranges
to adjust.
97
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
98
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
BreadCrumbs altogether.
The security options for Station Links, approximately listed weakest to strongest, are:
● Open Network (no security)
● WEP (both 40-bit and 104-bit)
● WPA Personal (PSK and passphrase)
● WPA Enterprise
● WPA2 Personal Mixed (PSK and passphrase)
● WPA2 Enterprise Mixed
● WPA2 Personal (PSK and passphrase)
● WPA2 Enterprise
'Mixed' modes allow both WPA and WPA2 services to be provided simultaneously. These may be
desired when operating a network with older wireless devices that cannot be updated to WPA2 mixed
with newer devices capable of the stronger encryption.
Enterprise modes are provided by configuring BreadCrumbs to use an external Radius Server (not
provided by Rajant) for authentication. Up to three Radius Servers and three accounting servers may be
specified and assigned failover priority. The following EAP methods are supported:
● EAP-TLS
● EAP-PEAP/MSCHAPv2 (both PEAPv0 and PEAPv1)
● EAP-PEAP/TLS (both PEAPv0 and PEAPv1)
● EAP-PEAP/GTC (both PEAPv0 and PEAPv1)
● EAP-PEAP/MD5-Challenge (both PEAPv0 and PEAPv1)
● EAP-TTLS/EAP-MD5-Challenge
● EAP-TTLS/EAP-GTC
● EAP-TTLS/EAP-MSCHAPv2
● EAP-TTLS/MSCHAPv2
● EAP-TTLS/EAP-TLS
● EAP-TLS
● EAP-PEAP/MSCHAPv2 (both PEAPv0 and PEAPv1)
● EAP-PEAP/TLS (both PEAPv0 and PEAPv1)
● EAP-PEAP/GTC (both PEAPv0 and PEAPv1)
● EAP-PEAP/MD5-Challenge (both PEAPv0 and PEAPv1)
● EAP-TTLS/EAP-MD5-Challenge
● EAP-TTLS/EAP-GTC
99
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
● EAP-TTLS/EAP-MSCHAPv2
● EAP-TTLS/MSCHAPv2
● EAP-TTLS/EAP-TLS
12.5 Examples
The following examples illustrate some potential security problems created by bad configurations and
offer some solutions.
12.5.1 Unintended Transmission Of Cleartext
Suppose a mesh is configured by restoring all BreadCrumbs to their default settings and then enabling
Access Points and applying a WPA2 passphrase to each. A client associated to one BreadCrumb sends
data to another client associated to a different BreadCrumb.
Problem: Although the link from each client to its respective BreadCrumb is secure, the data
transmitted between BreadCrumbs in the mesh is completely unencrypted and easily visible to
eavesdroppers.
Solution: Set the Network Key, enable per hop authentication and packet encryption on each
BreadCrumb. This will ensure that the data is protected end-to-end between clients.
12.5.2 Unintended Admission To Network
Suppose a mesh is configured with WPA2-Enterprise authentication and CCMP encryption, and all
BreadCrumbs have a Network Key set properly and packet encryption and per hop authentication are
enabled. One BreadCrumb in the network has a second ESSID for guests configured on one of its radios
with no security applied. No VLANs are configured.
Problem: There is no barrier between the open "guest" ESSID and the otherwise secure network
protected by WPA2-Enterprise and Mesh link security. Anyone may associate as a guest and
communicate directly with any device available through the mesh. The resources intended to be
protected are not protected at all.
Solution: Disable the guest ESSID, or assign each ESSID to a different VLAN in order to isolate their
traffic from one another.
12.5.3 Unintentional Weakening Of Security
Suppose a mesh is configured with WPA2-Enterprise authentication and TKIP encryption, and all
BreadCrumbs have a Network Key set properly and packet encryption and per hop authentication are
enabled. A wireless camera is to be added to the network, but it only supports WEP encryption. A
second ESSID is added with WEP enabled so that the camera may provide encrypted video over the
network.
Problem: The WEP encryption on the second ESSID has become a weak link in the security scheme.
An attacker can ignore the strong TKIP encryption on the first ESSID and instead concentrate on the
easy-to-crack WEP encryption on the second ESSID. Cracking the WEP encryption would provide the
attacker with the same access as a WPA2-Enterprise client.
Solution: Don't run such a mixed network. If necessary, use an Ethernet-enabled camera connected to
the Ethernet port of any available BreadCrumb rather than a wireless camera that only supports WEP.
The per-packet encryption and per-packet authentication configured for the mesh will protect the video
from eavesdropping and tampering.
100
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
101
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
Not all channels are allowed for use everywhere around the world. Check with the
Note corresponding wireless spectrum regulatory body to determine the subset of channels
authorized for use in your country.
Since the radios operate at different frequencies, you must be careful to use the correct
Caution type of antenna with each radio. As an example, a 2.4 GHz antenna will not work with
a 5 GHz radio and vice versa.
1 2412
2 2417
3 2422
4 2427
5 2432
6 2437
7 2442
8 2447
9 2452
10 2457
11 2462
The default channel for a BreadCrumb 2.4 GHz radio is 11 (2462 MHz).
102
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
149 5745 No
/ 157 5785 No
ISM Band 160 5800 Static Turbo
(5725 - 5875 MHz)
161 5805 No
165 5825 No
The default channel for a BreadCrumb 5 GHz radio is 153 (5765 MHz). Some 5 GHz channels support
Static Turbo mode. In this mode, the radio binds two standard 20 MHz channels to obtain a wider
bandwidth 40 MHz channel. The end result is improved throughput and/or communication range for the
radio. Users should refer to the applicable compliance regulations in the intended region of deployment
for use of these frequencies.
Most 5 GHz antennas only support a subset of the 802.11a 5 GHz frequency channels
Caution the Rajant radio is capable of operating at. Before changing the channel of a 5 GHz
radio, verify that the channel is supported by the connected antenna.
103
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
The default channel for a BreadCrumb 900 MHz radio is 5 (912 MHz). Half (10 MHz) and Quarter (5
MHz) bandwidth support is available on all 900MHz channels.
Channels 4 and 7, as well as Half (10 MHz) and Quarter (5 MHz) bandwidth may not be
Note supported on some BreadCrumbs with 900MHz radios.
104
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
174 4870
The default channel for a BreadCrumb 4.8 GHz radio is 164 (4820 MHz). If a second 4.8 GHz radio is
present, it's default channel is 184 (4920 MHz). If a third 4.8 GHz radio is present, it's default channel is
174 (4870 MHz)
105
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
The default channel for a BreadCrumb 4.9 GHz radio is 20 (4950.0 MHz).
106
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
107
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
108
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
109
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
110
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
APT Discovery -
BreadCrumb ethernet ARP (see
v10 Compatibility interface, raw ethernet FF:FF:FF:FF:FF:FF (raw Ethernet broadcast)
note below)
Mode
BreadCrumb ethernet
APT Discovery -
interface's IPv6 link-local FF01::1, port 2210 (UDP/IPv6 multicast) IPv6 UDP
v11 address, UDP port 2210
TRoIP Audio RTP BreadCrumb IPv4 IPv4 multicast address 225.0.0.1-225.0.2.255 port
IPv4 UDP
Traffic address, ephemeral port 24680
Note: APT Discovery in v10 Compatibility Mode may be truncated by some third-party equipment.
111
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
Syntax
Let's start with an example:
config.general.name == "fry"
This specifies a simple filter that tests whether the BreadCrumb's configured name is exactly equal to
"fry".
Objects/Structures/Fields
The value "config" in the previous example is one of several top-level data objects to which you have
access. The complete set of top level objects is shown in the following table.
The structures exposed by config, state, and model objects are hierarchical in nature. The value
"general" in the preceding example is a structure defined within the "config" object, while the value
112
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
Field Types
Logical Combinators
You can combine multiple filters using simple logical operators as shown here:
Here; &&, ||, and ! map to logical AND, OR, and NOT respectively, as is commonly the case in
mainstream programming languages such as C or Java. By default, ! has highest priority, followed by
&&, and then ||. Precedence can be overridden with parentheses, as shown.
In this example, all fields being tested are booleans, so no == operator is required. The following two
examples are equivalent.
state.system.running
state.system.running == true
113
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
Logical Comparators
The original example used == to test for exact equality. Other comparators are available:
Repeated Fields
In addition to Structures and Fields, the API supports the concept of lists, referred to as Repeated Fields.
A Repeated Field is simply a list of structures. The lists are homogeneous, meaning all items in a list
will be of the same structure type.
In the BCAPI, "state.wireless" is a repeated field of State.Wireless structures (as defined in State.proto).
By default, filters using repeated fields will be tested against every element present. The filter will match
as a whole if it matches any individual element. For example…
114
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
...is a valid filter. "state.wireless" is a repeated field since there can be several wireless interfaces
present on a single BreadCrumb. This expression will test whether the range is greater than 1000 for
each wireless interface in turn and succeeds if the test passes for at least one repeated field.
You can change the way matches over repeated fields are combined into a final result. The following is
equivalent to the above…
…but now we explicitly specify "any" behavior, which is otherwise the default. Alternatives include…
…which says that all wireless interfaces must have range greater than 1000, and…
...which says that no wireless interfaces can have range greater than 1000.
Nested Filters
There may be cases where you want more control over which elements of a repeated field are considered
by the filter. The following only tests the range for interfaces with high noise, completely ignoring the
rest:
In this example, we've included a nested filter at the level of state.wireless. This filter excludes any
wireless entries that don't match, before applying the outer filter on range. The final result will be true if
any of the high-noise wireless entries have a range greater than 1000.
Within a nested filter, fields must be specified starting at the scope where the filter is defined. In the
example above, this is why we specified "noise" rather than "state.wireless.noise"... because the nested
filter is defined at the level of state.wireless, and is thus restricted to only access fields at that level or
below.
115
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
The custom math object provides a group of operations that can be used on Repeated Fields. (including
lists, sets and arrays) and several standalone operations are also available.
Note: the Repeated Field operators contains, like and in were defined with Logical Comparators
Examples:
116
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
Built-In Filters
For convenience, a collection of common filters has been pre-defined and made available under
short-hand names. As a convention, pre-defined filters are named using a Noun.Verb format. The noun
defines what the filter pertains to, and the verb defines the action. These are as follows:
Note that some filters take arguments. For example, the following is valid:
117
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
Note that these built-in filters can be combined with user-defined filters, as in:
Definitions
All of the built-in filters are defined internally as regular filters… they do not use any special
functionality. The following shows how each is defined (parameters have been replaced by specific
example values):
● Peers.hasAny
math.count(math.unique(state.wireless.peer[:enabled].mac)) >= 1
● Peers.hasAtLeast(10)
math.count(math.unique(state.wireless.peer[:enabled].mac)) >= 10
● Groups.nameContains("leela")
state.configuration.active.general.groups.name contains "leela"
● Reboot.isNeeded
state.system.reboot
● Reboot.inPastHour
state.system.uptime < 3600.0
● Reboot.inPastDay
state.system.uptime < 86400.0
● Alerts.hasErrors
state.alertSystem.alerts.type contains "ERROR"
● Alerts.hasWarnings
state.alertSystem.alerts.type contains "WARNING"
● APT.isMaster
state.wired.aptState contains "MASTER"
● APT.isSlave
state.wired.aptState contains "SLAVE"
● Clients.hasAny
math.count(math.unique(state.wireless.ap.client.mac)) >= 1
● Clients.hasAtLeast(5)
math.count(math.unique(state.wireless.ap.client.mac)) >= 5
118
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
● Clients.count
math.count(math.unique(state.wireless.ap.client.mac))
● TRoIP.isActive
state.troip.active
● Network.idContains("deadbeef")
state.system.networkId contains "deadbeef"
● Network.nameContains("zoidberg")
config.instamesh.networkName contains "zoidberg"
● AP.essidContains("hermes")
state.wireless.ap.essid contains "hermes"
● AP.isActive
config.wireless.ap[:enable].essid.length > 0
Extended Examples
Regular expressions:
● model.name ~ "^LX[34]"
● config.wireless[any].ap[all].enable
BreadCrumbs with any wireless interface where all APs are enabled.
BreadCrumbs with any wireless interfaces lacking APs called "rajant" whose enabled APs are all
configured to use WPA.
Note here that the first nested filter starts with a colon. We left out the optional "any" specifier
because it's the default behavior.
119
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
Grammar
Primitive rules such as BOOL are trivially defined and not specified here.
120
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
122
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
(ii) make error corrections to or otherwise modify or adapt the Software or create derivative
works based upon the Software, or permit third parties to do the same;
(iii) reverse engineer or decompile, decrypt, disassemble or otherwise reduce the Software to
human-readable form, except to the extent otherwise expressly permitted under applicable law
notwithstanding this restriction or except to the extent that Rajant is legally required to permit
such specific activity pursuant to any applicable open source license;
(iv) publish any results of benchmark tests run on the Software;
(v) use or permit the Software to be used to perform services for third parties, whether on a
service bureau or time sharing basis or otherwise, without the express written authorization of
Rajant; or
(vi) disclose, provide, or otherwise make available trade secrets contained within the Software
and Documentation in any form to any third party without the prior written consent of Rajant.
Customer shall implement reasonable security measures to protect such trade secrets.
To the extent required by applicable law, and at Customer's written request, Rajant shall provide
Customer with the interface information needed to achieve interoperability between the Software and
another independently created program, on payment of Rajant’s applicable fee, if any. Customer shall
observe strict obligations of confidentiality with respect to such information and shall use such
information in compliance with any applicable terms and conditions upon which Rajant makes such
information available.
Software, Upgrades and Additional Copies. NOTWITHSTANDING ANY OTHER PROVISION OF
THE AGREEMENT: (1) CUSTOMER HAS NO LICENSE OR RIGHT TO MAKE OR USE ANY
ADDITIONAL COPIES OR UPGRADES UNLESS CUSTOMER, AT THE TIME OF MAKING OR
ACQUIRING SUCH COPY OR UPGRADE, ALREADY HOLDS A VALID LICENSE TO THE
ORIGINAL SOFTWARE AND HAS PAID THE APPLICABLE FEE TO AN APPROVED SOURCE
FOR THE UPGRADE OR ADDITIONAL COPIES; (2) USE OF UPGRADES IS LIMITED TO
RAJANT EQUIPMENT SUPPLIED BY AN APPROVED SOURCE FOR WHICH CUSTOMER IS
THE ORIGINAL END USER PURCHASER OR LESSEE OR OTHERWISE HOLDS A VALID
LICENSE TO USE THE SOFTWARE WHICH IS BEING UPGRADED; AND (3) THE MAKING
AND USE OF ADDITIONAL COPIES IS LIMITED TO NECESSARY BACKUP PURPOSES ONLY.
Proprietary Notices. Customer agrees to maintain and reproduce all copyright, proprietary, and other
notices on all copies, in any form, of the Software and Documentation in the same form and manner that
such copyright and other proprietary notices are included on the Software. Except as expressly
authorized in the Agreement, Customer shall not make any copies or duplicates of any Software without
the prior written permission of Rajant.
Term and Termination. The Agreement and the license granted herein shall remain effective until
terminated. Customer may terminate the Agreement and the license at any time by destroying all copies
of Software and any Documentation. Customer's rights under the Agreement will terminate immediately
without notice from RAJANT if Customer fails to comply with any provision of the Agreement. Upon
termination, Customer shall destroy or return to RAJANT all copies of Software and Documentation in
its possession or control. All confidentiality obligations of Customer, all restrictions and limitations
imposed on the Customer under the section titled "General Limitations" and all limitations of liability
and disclaimers and restrictions of warranty shall survive termination of this Agreement. In addition, the
provisions of the sections titled "U.S. Government End User Purchasers" and "General Terms Applicable
to the Limited Warranty Statement and End User License Agreement" shall survive termination of the
123
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
Agreement.
Customer Records. Customer grants to RAJANT and its independent accountants the right to examine
Customer's books, records, accounts, and network configuration(s) during Customer's normal business
hours to verify compliance with this Agreement. In the event such audit discloses non-compliance with
this Agreement, Customer shall promptly pay to RAJANT the appropriate license fees, plus the
reasonable cost of conducting the audit.
Export, Re-Export, Transfer and Use Controls. The Software, Documentation and technology or direct
products thereof (hereafter referred to as Software and Technology), supplied by RAJANT under the
Agreement are subject to export controls under the laws and regulations of the United States ("U.S.")
and any other applicable countries' laws and regulations. Customer shall comply with such laws and
regulations governing export, re-export, import, transfer and use of RAJANT Software and Technology
and will obtain all required U.S. and local authorizations, permits, or licenses. RAJANT and Customer
each agree to provide the other information, support documents, and assistance as may reasonably be
required by the other in connection with securing authorizations or licenses. Information regarding
compliance with export, re-export, transfer and use.
U.S. Government End User Purchasers. The Software and Documentation qualify as "commercial
items," as that term is defined at Federal Acquisition Regulation ("FAR") (48 C.F.R.) 2.101, consisting
of "commercial computer software" and "commercial computer software documentation" as such terms
are used in FAR 12.212. Consistent with FAR 12.212 and DoD FAR Supp. 227.7202-1 through
227.7202-4, and notwithstanding any other FAR or other contractual clause to the contrary in any
agreement into which the Agreement may be incorporated, Customer may provide to Government end
user or, if the Agreement is direct, Government end user will acquire, the Software and Documentation
with only those rights set forth in the Agreement. Use of either the Software or Documentation or both
constitutes agreement by the Government that the Software and Documentation are "commercial
computer software" and "commercial computer software documentation," and constitutes acceptance of
the rights and restrictions herein.
Identified Components; Additional Terms. The Software may contain or be delivered with one or more
components, which may include third-party components, identified by RAJANT in the Documentation,
readme.txt file, third-party click-accept or elsewhere (e.g. on www.rajant.com) (the "Identified
Component(s)") as being subject to different license agreement terms, disclaimers of warranties, limited
warranties or other terms and conditions (collectively, "Additional Terms") than those set forth herein.
You agree to the applicable Additional Terms for any such Identified Component(s).
Limited Warranty
Subject to the limitations and conditions set forth herein, RAJANT warrants that commencing from the
date of shipment to Customer (but in case of resale by an Approved Source other than RAJANT,
commencing not more than ninety (90) days after original shipment by RAJANT), and continuing for a
period of the longer of (a) ninety (90) days or (b) the warranty period (if any) expressly set forth as
applicable specifically to software in the warranty card accompanying the product of which the Software
is a part (the "Product") (if any): (a) the media on which the Software is furnished will be free of defects
in materials and workmanship under normal use; and (b) the Software substantially conforms to the
Documentation. The date of shipment of a Product by RAJANT is set forth on the packaging material in
which the Product is shipped. Except for the foregoing, the Software is provided "AS IS". This limited
warranty extends only to the Software purchased from an Approved Source by a Customer who is the
first registered end user. Customer's sole and exclusive remedy and the entire liability of RAJANT and
its suppliers under this limited warranty will be (i) replacement of defective media and/or (ii) at
124
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
RAJANT’s option, repair, replacement, or refund of the purchase price of the Software, in both cases
subject to the condition that any error or defect constituting a breach of this limited warranty is reported
to the Approved Source supplying the Software to Customer, within the warranty period. RAJANT or
the Approved Source supplying the Software to Customer may, at its option, require return of the
Software and/or Documentation as a condition to the remedy. In no event does RAJANT warrant that
the Software is error free or that Customer will be able to operate the Software without problems or
interruptions. In addition, due to the continual development of new techniques for intruding upon and
attacking networks, RAJANT does not warrant that the Software or any equipment, system or network
on which the Software is used will be free of vulnerability to intrusion or attack.
No representation or other affirmation of fact, including but not limited to statements regarding capacity,
suitability for use or performance of Software, whether made by Rajant employees or otherwise, shall be
deemed to be a warranty for any purpose or give rise to any liability of Rajant whatsoever unless
contained in this Agreement.
Restrictions. This warranty does not apply if the Software, Product or any other equipment upon which
the Software is authorized to be used (a) has been altered, except by RAJANT or its authorized
representative, (b) has not been installed, operated, repaired, or maintained in accordance with
instructions supplied by RAJANT, (c) has been subjected to abnormal physical or electrical stress,
abnormal environmental conditions, misuse, negligence, or accident; or (d) is licensed for beta,
evaluation, testing or demonstration purposes. The Software warranty also does not apply to (e) any
temporary Software modules; (f) any Software not posted on RAJANT’s Software Center; (g) any
Software that RAJANT expressly provides on an "AS IS" basis on RAJANT’s Software Center; (h) any
Software for which an Approved Source does not receive a license fee; and (i) Software supplied by any
third party which is not an Approved Source.
Hardware Limited Warranty
THE BREADCRUMB WIRELESS LAN UNITS (“BREADCRUMB”), EXCLUSIVE OF THE JR-2
BREADCRUMB, PROVIDED UNDER THIS AGREEMENT ARE PROVIDED WITH A 1-YEAR
WARRANTY FROM THE DATE THE BREADCRUMB IS SHIPPED BY RAJANT AGAINST
DEFECTS IN WORKMANSHIP OR MATERIAL UNDER ORDINARY USE. SUCH WARRANTY
APPLIES ONLY TO THE BREADCRUMB DEVICE AND DOES NOT EXTEND TO ANY OTHER
PRODUCTS, PRODUCTS OR SERVICES, INCLUDING BUT NOT LIMITED TO POWER
SUPPLIES, CABLES, ANTENNAS, AND MOUNTING BRACKETS, EVEN IF PACKAGED OR
SOLD WITH THE BREADCRUMB.
JR-2 BREADCRUMBS ARE WARRANTED ONLY AGAINST DEFECTIVE WORKMANSHIP FOR
90 DAYS WHEN DELIVERED NEW. RAJANT MAKES NO WARRANTY, AND DISCLAIMS ANY
WARRANTY, EXPRESS OR IMPLIED AT LAW, ON JR-2 BREADCRUMBS' FITNESS FOR A
PARTICULAR PURPOSE OR MERCHANTABILITY. MANUFACTURER'S RMA POLICIES AND
PROCEDURES APPLY.
RAJANT PRODUCTS CLASSIFIED AS ACCESSORY ON MANUFACTURER'S PRICE LIST ARE
WARRANTED AGAINST DEFECTS FOR A PERIOD OF 90 DAYS FROM DATE OF DELIVERY.
Unless otherwise listed on this Warranty Schedule, Rajant warrants to the purchaser that the Products
will perform in all material respects in accordance with their written specifications for a period of ninety
(90) days from the date the Products are shipped by Rajant. Reseller and purchaser’s sole and exclusive
right and remedy, and Rajant’s sole and exclusive obligation and liability, with respect to any breach of
the foregoing warranty shall be that, upon receipt by Rajant from Reseller or purchasers of written
notice of the breach in reasonable detail so as to permit Rajant to duplicate the failure to so perform,
125
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
which notice is received by Rajant within thirty (30) days after Reseller or purchaser discovers the
failure, Rajant shall – after duplicating the failure – exercise its commercially reasonable efforts to
deliver to Reseller or purchaser a replacement or repaired Product at Rajant’s discretion. Rajant
replacement parts used in such replacement may be new or equivalent to new. Rajant's obligations
hereunder are conditioned upon the return of the affected Product in accordance with Rajant's
then-current Return Material Authorization (RMA) procedures.
This warranty shall not apply to any Product that has been subjected to unusual physical, environmental
or electrical stress. The warranty shall not apply to any problems or non-performance directly resulting
from Reseller or purchaser’s hardware, software, network(s) and/or host system(s) or the combination,
operation or use of the Product with such hardware, software, network(s) and/or host system(s), or
which results from any alteration or modification to the Product or its components by anyone other than
Rajant. The warranty also does not cover any (a) Product for which the serial number has been removed
or made illegible; (b) freight costs to the repair center; (c) scratches or other cosmetic damage to Product
surfaces that do not affect the operation of the Product; and (d) normal and customary wear and tear.
The date of shipment of a Product by Rajant is set forth on the packaging material in which the Product
is shipped. This limited warranty extends only to the original user of the Product.
Replacement, Repair or Refund Procedure for Products Covered by Warranty
Rajant will use commercially reasonable efforts to ship a repaired or replacement part within fifteen (15)
working days after receipt of the RMA request. Actual delivery times may vary depending on Reseller’s
or purchaser’s location.
To Receive a Return Materials Authorization (RMA) Number
Please contact the party from whom you purchased the Product. If you purchased the Product directly
from Rajant, contact your Rajant Sales and Service Representative or email [email protected].
DISCLAIMER OF WARRANTY
EXCEPT AS SPECIFIED IN THIS WARRANTY SECTION, ALL EXPRESS OR IMPLIED
CONDITIONS, REPRESENTATIONS, AND WARRANTIES INCLUDING, WITHOUT
LIMITATION, ANY IMPLIED WARRANTY OR CONDITION OF MERCHANTABILITY, FITNESS
FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, SATISFACTORY QUALITY,
NON-INTERFERENCE, ACCURACY OF INFORMATIONAL CONTENT, OR ARISING FROM A
COURSE OF DEALING, LAW, USAGE, OR TRADE PRACTICE, ARE HEREBY EXCLUDED TO
THE EXTENT ALLOWED BY APPLICABLE LAW AND ARE EXPRESSLY DISCLAIMED BY
RAJANT, ITS SUPPLIERS AND LICENSORS. TO THE EXTENT THAT ANY OF THE SAME
CANNOT BE EXCLUDED, SUCH IMPLIED CONDITION, REPRESENTATION AND/OR
WARRANTY IS LIMITED IN DURATION TO THE EXPRESS WARRANTY PERIOD REFERRED
TO IN THE "LIMITED WARRANTY" SECTION ABOVE. BECAUSE SOME STATES OR
JURISDICTIONS DO NOT ALLOW LIMITATIONS ON HOW LONG AN IMPLIED WARRANTY
LASTS, THE ABOVE LIMITATION MAY NOT APPLY IN SUCH STATES. THIS WARRANTY
GIVES CUSTOMER SPECIFIC LEGAL RIGHTS, AND CUSTOMER MAY ALSO HAVE OTHER
RIGHTS WHICH VARY FROM JURISDICTION TO JURISDICTION. This disclaimer and exclusion
shall apply even if the express warranty set forth above fails of its essential purpose.
Disclaimer of Liabilities—Limitation of Liability. IF YOU ACQUIRED THE SOFTWARE IN THE
UNITED STATES, LATIN AMERICA, CANADA, JAPAN OR THE CARIBBEAN,
NOTWITHSTANDING ANYTHING ELSE IN THE AGREEMENT TO THE CONTRARY, ALL
LIABILITY OF RAJANT, ITS AFFILIATES, OFFICERS, DIRECTORS, EMPLOYEES, AGENTS,
126
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
127
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
IF YOU ACQUIRED THE SOFTWARE IN EUROPE, THE MIDDLE EAST, AFRICA, ASIA OR
OCEANIA, IN NO EVENT WILL RAJANT, ITS AFFILIATES, OFFICERS, DIRECTORS,
EMPLOYEES, AGENTS, SUPPLIERS AND LICENSORS, BE LIABLE FOR ANY LOST
REVENUE, LOST PROFIT, OR LOST OR DAMAGED DATA, BUSINESS INTERRUPTION, LOSS
OF CAPITAL, OR FOR SPECIAL, INDIRECT, CONSEQUENTIAL, INCIDENTAL, OR PUNITIVE
DAMAGES, HOWSOEVER ARISING, INCLUDING, WITHOUT LIMITATION, IN CONTRACT,
TORT (INCLUDING NEGLIGENCE) OR WHETHER ARISING OUT OF THE USE OF OR
INABILITY TO USE THE SOFTWARE, EVEN IF, IN EACH CASE, RAJANT, ITS AFFILIATES,
OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, SUPPLIERS AND LICENSORS, HAVE BEEN
ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. BECAUSE SOME STATES OR
JURISDICTIONS DO NOT ALLOW LIMITATION OR EXCLUSION OF CONSEQUENTIAL OR
INCIDENTAL DAMAGES, THE ABOVE LIMITATION MAY NOT FULLY APPLY TO YOU. THE
FOREGOING EXCLUSION SHALL NOT APPLY TO ANY LIABILITY ARISING OUT OF OR IN
CONNECTION WITH: (I) DEATH OR PERSONAL INJURY, (II) FRAUDULENT
MISREPRESENTATION, OR (III) RAJANT’s LIABILITY IN CONNECTION WITH ANY TERMS
THAT CANNOT BE EXCLUDED UNDER APPLICABLE LAW.
Customer acknowledges and agrees that RAJANT has set its prices and entered into the Agreement in
reliance upon the disclaimers of warranty and the limitations of liability set forth herein, that the same
reflect an allocation of risk between the parties (including the risk that a contract remedy may fail of its
essential purpose and cause consequential loss), and that the same form an essential basis of the bargain
between the parties.
Controlling Law, Jurisdiction. Customer agrees that all sales occurred, and contracts entered into at
Malvern, Pennsylvania, notwithstanding the location of any affiliate or Customer’s location or principal
place of business. All contracts for the license of software and/or purchase of hardware are deemed to
have occurred at Malvern, Pennsylvania and the Agreement and warranties ("Warranties") are controlled
by and construed under the laws of the Commonwealth of Pennsylvania, United States of America,
notwithstanding any conflicts of law provisions; and the state and federal courts of Pennsylvania shall
have exclusive jurisdiction over any claim arising under the Agreement or Warranties.
The parties specifically disclaim the application of the UN Convention on Contracts for the International
Sale of Goods. Notwithstanding the foregoing, either party may seek interim injunctive relief in any
court of appropriate jurisdiction with respect to any alleged breach of such party's intellectual property
or proprietary rights. If any portion hereof is found to be void or unenforceable, the remaining
provisions of the Agreement and Warranties shall remain in full force and effect. Except as expressly
provided herein, the Agreement constitutes the entire agreement between the parties with respect to the
license of the Software and Documentation and supersedes any conflicting or additional terms contained
in any Purchase Order or elsewhere, all of which terms are excluded. The Agreement has been written
in the English language, and the parties agree that the English version will govern.
Product warranty terms and other information applicable to RAJANT products are available at the
following URL: www.rajant.com
RAJANT and the RAJANT Logo are trademarks of RAJANT Corporation and/or its affiliates in the
U.S. and other countries. Third party trademarks mentioned are the property of their respective owners.
The use of the word partner does not imply a partnership relationship between RAJANT and any other
company.
128
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
PREAMBLE
The licenses for most software are designed to take away your freedom to share and change it. By
contrast, the GNU General Public License is intended to guarantee your freedom to share and change
free software--to make sure the software is free for all its users. This General Public License applies to
most of the Free Software Foundation's software and to any other program whose authors commit to
using it. (Some other Free Software Foundation software is covered by the GNU Library General Public
License instead.) You can apply it to your programs, too.
When we speak of free software, we are referring to freedom, not price. Our General Public Licenses
are designed to make sure that you have the freedom to distribute copies of free software (and charge for
this service if you wish), that you receive source code or can get it if you want it, that you can change
the software or use pieces of it in new free programs; and that you know you can do these things.
To protect your rights, we need to make restrictions that forbid anyone to deny you these rights or to ask
you to surrender the rights. These restrictions translate to certain responsibilities for you if you distribute
copies of the software, or if you modify it.
For example, if you distribute copies of such a program, whether gratis or for a fee, you must give the
recipients all the rights that you have. You must make sure that they, too, receive or can get the source
code. And you must show them these terms so they know their rights.
We protect your rights with two steps: (1) copyright the software, and (2) offer you this license which
gives you legal permission to copy, distribute and/or modify the software.
Also, for each author's protection and ours, we want to make certain that everyone understands that there
is no warranty for this free software. If the software is modified by someone else and passed on, we
want its recipients to know that what they have is not the original, so that any problems introduced by
others will not reflect on the original authors' reputations.
Finally, any free program is threatened constantly by software patents. We wish to avoid the danger that
redistributors of a free program will individually obtain patent licenses, in effect making the program
proprietary. To prevent this, we have made it clear that any patent must be licensed for everyone's free
use or not licensed at all.
The precise terms and conditions for copying, distribution and modification follow.
129
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
Program or any derivative work under copyright law: that is to say, a work containing the Program or a
portion of it, either verbatim or with modifications and/or translated into another language. (Hereinafter,
translation is included without limitation in the term “modification”.) Each licensee is addressed as
“you”.
Activities other than copying, distribution and modification are not covered by this License; they are
outside its scope. The act of running the Program is not restricted, and the output from the Program is
covered only if its contents constitute a work based on the Program (independent of having been made
by running the Program). Whether that is true depends on what the Program does.
1. You may copy and distribute verbatim copies of the Program's source code as you receive it, in any
medium, provided that you conspicuously and appropriately publish on each copy an appropriate
copyright notice and disclaimer of warranty; keep intact all the notices that refer to this License and to
the absence of any warranty; and give any other recipients of the Program a copy of this License along
with the Program.
You may charge a fee for the physical act of transferring a copy, and you may at your option offer
warranty protection in exchange for a fee.
2. You may modify your copy or copies of the Program or any portion of it, thus forming a work based
on the Program, and copy and distribute such modifications or work under the terms of Section 1 above,
provided that you also meet all of these conditions:
a) You must cause the modified files to carry prominent notices stating that you changed the files and the
date of any change.
b) You must cause any work that you distribute or publish, that in whole or in part contains or is derived
from the Program or any part thereof, to be licensed as a whole at no charge to all third parties under the
terms of this License.
c) If the modified program normally reads commands interactively when run, you must cause it, when
started running for such interactive use in the most ordinary way, to print or display an announcement
including an appropriate copyright notice and a notice that there is no warranty (or else, saying that you
provide a warranty) and that users may redistribute the program under these conditions, and telling the
user how to view a copy of this License. (Exception: if the Program itself is interactive but does not
normally print such an announcement, your work based on the Program is not required to print an
announcement.)
These requirements apply to the modified work as a whole. If identifiable sections of that work are not
derived from the Program, and can be reasonably considered independent and separate works in
themselves, then this License, and its terms, do not apply to those sections when you distribute them as
separate works. But when you distribute the same sections as part of a whole which is a work based on
the Program, the distribution of the whole must be on the terms of this License, whose permissions for
other licensees extend to the entire whole, and thus to each and every part regardless of who wrote it.
Thus, it is not the intent of this section to claim rights or contest your rights to work written entirely by
you; rather, the intent is to exercise the right to control the distribution of derivative or collective works
based on the Program.
In addition, mere aggregation of another work not based on the Program with the Program (or with a
work based on the Program) on a volume of a storage or distribution medium does not bring the other
work under the scope of this License.
130
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
3. You may copy and distribute the Program (or a work based on it, under Section 2) in object code or
executable form under the terms of Sections 1 and 2 above provided that you also do one of the
following:
a) Accompany it with the complete corresponding machine-readable source code, which must be
distributed under the terms of Sections 1 and 2 above on a medium customarily used for software
interchange; or,
b) Accompany it with a written offer, valid for at least three years, to give any third party, for a charge
no more than your cost of physically performing source distribution, a complete machine-readable copy
of the corresponding source code, to be distributed under the terms of Sections 1 and 2 above on a
medium customarily used for software interchange; or,
c) Accompany it with the information you received as to the offer to distribute corresponding source
code. (This alternative is allowed only for noncommercial distribution and only if you received the
program in object code or executable form with such an offer, in accord with Subsection b above.)
The source code for a work means the preferred form of the work for making modifications to it. For an
executable work, complete source code means all the source code for all modules it contains, plus any
associated interface definition files, plus the scripts used to control compilation and installation of the
executable. However, as a special exception, the source code distributed need not include anything that
is normally distributed (in either source or binary form) with the major components (compiler, kernel,
and so on) of the operating system on which the executable runs, unless that component itself
accompanies the executable.
If distribution of executable or object code is made by offering access to copy from a designated place,
then offering equivalent access to copy the source code from the same place counts as distribution of the
source code, even though third parties are not compelled to copy the source along with the object code.
4. You may not copy, modify, sublicense, or distribute the Program except as expressly provided under
this License. Any attempt otherwise to copy, modify, sublicense or distribute the Program is void, and
will automatically terminate your rights under this License. However, parties who have received copies,
or rights, from you under this License will not have their licenses terminated so long as such parties
remain in full compliance.
5. You are not required to accept this License, since you have not signed it. However, nothing else
grants you permission to modify or distribute the Program or its derivative works. These actions are
prohibited by law if you do not accept this License. Therefore, by modifying or distributing the
Program (or any work based on the Program), you indicate your acceptance of this License to do so, and
all its terms and conditions for copying, distributing or modifying the Program or works based on it.
6. Each time you redistribute the Program (or any work based on the Program), the recipient
automatically receives a license from the original licensor to copy, distribute or modify the Program
subject to these terms and conditions. You may not impose any further restrictions on the recipients'
exercise of the rights granted herein. You are not responsible for enforcing compliance by third parties to
this License.
7. If, as a consequence of a court judgment or allegation of patent infringement or for any other reason
(not limited to patent issues), conditions are imposed on you (whether by court order, agreement or
otherwise) that contradict the conditions of this License, they do not excuse you from the conditions of
this License. If you cannot distribute so as to satisfy simultaneously your obligations under this License
and any other pertinent obligations, then as a consequence you may not distribute the Program at all.
131
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
For example, if a patent license would not permit royalty-free redistribution of the Program by all those
who receive copies directly or indirectly through you, then the only way you could satisfy both it and
this License would be to refrain entirely from distribution of the Program.
If any portion of this section is held invalid or unenforceable under any particular circumstance, the
balance of the section is intended to apply and the section as a whole is intended to apply in other
circumstances.
It is not the purpose of this section to induce you to infringe any patents or other property right claims or
to contest validity of any such claims; this section has the sole purpose of protecting the integrity of the
free software distribution system, which is implemented by public license practices. Many people have
made generous contributions to the wide range of software distributed through that system in reliance on
consistent application of that system; it is up to the author/donor to decide if he or she is willing to
distribute software through any other system and a licensee cannot impose that choice.
This section is intended to make thoroughly clear what is believed to be a consequence of the rest of this
License.
8. If the distribution and/or use of the Program is restricted in certain countries either by patents or by
copyrighted interfaces, the original copyright holder who places the Program under this License may
add an explicit geographical distribution limitation excluding those countries, so that distribution is
permitted only in or among countries not thus excluded. In such case, this License incorporates the
limitation as if written in the body of this License.
9. The Free Software Foundation may publish revised and/or new versions of the General Public License
from time to time. Such new versions will be similar in spirit to the present version, but may differ in
detail to address new problems or concerns.
Each version is given a distinguishing version number. If the Program specifies a version number of this
License which applies to it and "any later version", you have the option of following the terms and
conditions either of that version or of any later version published by the FreeSoftware Foundation. If the
Program does not specify a version number of this License, you may choose any version ever published
by the Free Software Foundation.
10. If you wish to incorporate parts of the Program into other free programs whose distribution
conditions are different, write to the author to ask for permission. For software which is copyrighted by
the Free Software Foundation, write to the Free Software Foundation; we sometimes make exceptions
for this. Our decision will be guided by the two goals of preserving the free status of all derivatives of
our free software and of promoting the sharing and reuse of software generally.
NO WARRANTY
11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY
FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN
OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES
PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER
EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS
TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE
PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING,
REPAIR OR CORRECTION.
12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
132
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR
REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR
DAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL
DAMAGES ARISING OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING
BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR
LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO
OPERATE WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS
BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
END OF TERMS AND CONDITIONS
133
Rajant Corporation BC|Commander® v11 User Guide
03-100115-011 Version 11.5.0
You should also get your employer (if you work as a programmer) or your school, if any, to sign a
"copyright disclaimer" for the program, if necessary. Here is a sample; alter the names:
Yoyodyne, Inc., hereby disclaims all copyright
interest in the program `Gnomovision'
(which makes passes at compilers) written
by James Hacker.
signature of Ty Coon, 1 April 1989
Ty Coon, President of Vice
This General Public License does not permit incorporating your program into proprietary programs. If
your program is a subroutine library, you may consider it more useful to permit linking proprietary
applications with the library. If this is what you want to do, use the GNU Lesser General Public License
instead of this License.
134