Extreme Networks A3502 ALTITUDE 350-2 ACCESS POINT User Manual SummitWM QS

Extreme Networks ALTITUDE 350-2 ACCESS POINT SummitWM QS

Contents

QUICK START GUIDE

Extreme Networks, Inc.3585 Monroe StreetSanta Clara, California 95051(888) 257-3000http://www.extremenetworks.comFCS Review Draft IISummit WM-Series Switches, Altitude 350, and Summit WM-Series WLAN Switch Software Quick Start Guide Published: July 2005Part number: 100197-00 Rev 01
FCS Review Draft IISummit WM-Series Switches, Altitude 350, and Summit WM-Series WLAN Switch Software Quick Start Guide 2Alpine, Altitude, BlackDiamond, EPICenter, Ethernet Everywhere, Extreme Ethernet Everywhere, Extreme Networks, Extreme Turbodrive, Extreme Velocity, ExtremeWare, ExtremeWorks, GlobalPx Content Director, the Go Purple Extreme Solution Partners Logo, ServiceWatch, Summit, the Summit7i Logo, and the Color Purple, among others, are trademarks or registered trademarks of Extreme Networks, Inc. or its subsidiaries in the United States and other countries. Other names and marks may be the property of their respective owners.© 2005 Extreme Networks, Inc. All Rights Reserved.Specifications are subject to change without notice.The ExtremeWare XOS operating system is based, in part, on the Linux operating system. The machine-readable copy of the corresponding source code is available for the cost of distribution. Please direct requests to Extreme Networks for more information at the following address:Software Licensing Department3585 Monroe StreetSanta Clara CA 95051NetWare and Novell are registered trademarks of Novell, Inc. Merit is a registered trademark of Merit Network, Inc. Solaris and Java are trademarks of Sun Microsystems, Inc. F5, BIG/ip, and 3DNS are registered trademarks of F5 Networks, Inc. see/IT is a trademark of F5 Networks, Inc.sFlow® is a registered trademark of InMon Corporation. All other registered trademarks, trademarks and service marks are property of their respective owners.
FCS Review Draft IISummit WM-Series Switches, Altitude 350, and Summit WM-Series WLAN Switch Software Quick Start Guide 3Table of ContentsAbout this Guide.............................................................................................................................. 5Who should use this guide ...........................................................................................................5What is in this guide ...................................................................................................................5Formatting conventions................................................................................................................5Safety information.......................................................................................................................6Dangers................................................................................................................................6Warnings ..............................................................................................................................6General Safety Cautions.........................................................................................................7Chapter 1: Installing the Hardware ................................................................................................... 9Unpacking the Summit WM .........................................................................................................9Mounting the Summit WM .........................................................................................................10Summit WM Power Supply.........................................................................................................11Power Supply Ratings ..........................................................................................................11Power Cord Selection Criteria ...............................................................................................12Connecting the Summit WM Data Ports.......................................................................................13Management Port Connections .............................................................................................13Summit WM100/WM1000 .............................................................................................13Data Cable Connections .......................................................................................................14Summit WM100 ...........................................................................................................14Summit WM1000 .........................................................................................................14Install Ferrite Beads ..................................................................................................................14Unpacking and Mounting the Altitude AP ....................................................................................15Connecting and Powering the Altitude AP....................................................................................16Chapter 2: Configuring the Summit WM-Series WLAN Switch Software 1.0....................................... 19Configuration stages ..................................................................................................................19First-Time Setup of the Summit WM ...........................................................................................19Summit WM Configuration: Product Key......................................................................................22Summit WM Configuration: Data Port Setup ................................................................................22Summit WM Configuration: Static Routes....................................................................................23Altitude AP: Registering and Configuring .....................................................................................24WM-Access Domain: Overview ....................................................................................................25Topology for a WM-AD .........................................................................................................25Network Assignment and Authentication for a WM-AD ............................................................26RADIUS Policy and Filtering for a WM-AD .............................................................................27Privacy on a WM-AD ............................................................................................................28Summit WM-Series WLAN Switch Software 1.0 Ongoing Operations ..............................................28
FCS Review Draft IITable of ContentsSummit WM-Series Switches, Altitude 350, and Summit WM-Series WLAN Switch Software Quick Start Guide 4
FCS Review Draft IISummit WM-Series Switches, Altitude 350, and Summit WM-Series WLAN Switch Software Quick Start Guide 5About this GuideThis guide describes how to set up and perform the initial configuration of the Summit WM-Series WLAN Switch Software 1.0, the Summit WM, and the Altitude AP. See the Summit WM-Series WLAN Switch Software 1.0 User Guide for detailed instructions in managing these products. This guide describes how to set up and perform the initial configuration of the Summit WM-Series WLAN Switch Software 1.0, the Summit WM, and the Altitude AP. See the Summit WM-Series WLAN Switch Software 1.0 User Guide for detailed instructions in managing these products. Who should use this guideThis guide is intended for operators of the Summit WM-Series WLAN Switch Software 1.0. It assumes expertise in the concepts and configuration of wireless local area networks (WLANs).WARNING!Only authorized Extreme Networks service personnel are permitted to service the system. Procedures that should be performed only by Extreme Networks personnel are clearly identified in this guide.What is in this guideThis guide contains the following sections:●Chapter 1 describes how to unpack and set up the Summit WM and Altitude APs.●Chapter 2 describes the first-time setup of the Summit WM and the Altitude APs on your network. It provides a brief overview of how to set up WM-AD on the Summit WM to manage network access by wireless device users.Formatting conventionsThis section describes the text formatting conventions that are used in this manual.Bold text is used to identify components of the management interface, such as menu items and areas in pages, as well as the names of text and list boxes.Italics are used when referring to other documents.Monospace font is used in code examples and to indicate text that you type.
About this GuideFCS Review Draft IISummit WM-Series Switches, Altitude 350, and Summit WM-Series WLAN Switch Software Quick Start Guide 6NOTENotes identify information that is useful but not essential, such as tips or alternative methods for performing a task.WARNING!Warnings identify information that is essential. Ignoring a warning can adversely affect the operation of your equipment or software.Safety informationWARNING!Only authorized Extreme Networks service personnel are permitted to service the system. Procedures that should be performed only by Extreme Networks personnel are clearly identified in this guide. Changes or modifications made to the Summit WM-Series Switch or the Altitude APs which are not expressly approved by Extreme and, or the party responsible for compliance upon installation could void the user's authority to operate the equipment.Dangers●Replace power cords or power supply adapters immediately if it shows any signs of damage. ●Replace any damaged safety equipment such as covers, labels or protective cables.●Use only original accessories, antennas and, or components approved for use with this system. Failure to observe these instructions may damage the equipment or even violate required safety and EMC regulations. Warnings●Power cords and power adapters must be connected to earth grounded power source.●Maximum ambient room temperature shall not exceed 40ºC (104ºF) ●Ensure at least 2 inches clearance on all sides for effective ventilation. Do not obstruct the air intake vent on the front, or the side or rear ventilation grills of the Summit WM.●The Altitude 350-2 with internal and detachable antenna is intended for indoor use only. Device must not be connected to a LAN segment exposed to outdoor wiring. ●Ensure that all cables are installed in a manor to avoid strain. Use tie wraps or other strain relief devices. ●Replacing lithium battery: Battery is not user replaceable. If decided to replace battery replace only identical battery or equivalent as suggested by battery manufacture. Caution must be taken, there is a risk of explosion if a lithium battery is not correctly replaced.
Safety informationFCS Review Draft IISummit WM-Series Switches, Altitude 350, and Summit WM-Series WLAN Switch Software Quick Start Guide 7General Safety Cautions●Disconnect all power cords before working near power supplies unless otherwise instructed by a maintenance procedure. ●Do not attempt to lift objects that you think are too heavy for you.●When installing in rack, caution should be taken to load heavier devices in lowest portions of rack to avoid a top-heavy hazard.●High voltages capable of causing shock are used in this equipment. Check the nominal voltage set for the equipment as indicated within operating instructions and type plate. ●Be extremely careful when measuring high voltages and when servicing cards, panels, and boards while the system is powered on.●Only use tools and equipment that are in perfect condition. Do not use equipment with visible damage.●Protecting electrostatically sensitive devices (ESD): To protect electrostatically sensitive devices (ESD) always wear a wristband before carrying out any work on PC boards and modules. Transport PC boards only in electrostatic packaging. Always place PC boards on a grounded surface before working on them. ●Laying cables: Lay cables so as to prevent any risk of them being damaged or causing accidents, such as tripping.
About this GuideFCS Review Draft IISummit WM-Series Switches, Altitude 350, and Summit WM-Series WLAN Switch Software Quick Start Guide 8
FCS Review Draft IISummit WM-Series Switches, Altitude 350, and Summit WM-Series WLAN Switch Software Quick Start Guide 91Installing the HardwareUnpacking the Summit WMLift the Summit WM, in its protective foam casing, straight up out of the carton. Lay it on a flat surface. Slide off the foam packing.The carton contains the following:●One Summit WM●Mounting brackets: one pair●Two power cords for use in US only.●Two ferrite beads Stewart #28A5776-0A2 required for for use on power cord sets(See installation instructions). ●One ferrite bead Stewart #28A2024-0A0 required for for use on management port.(See installation instructions). ●Screws: eight 6-32 X 3/8 countersunk machine screws●One crossover ethernet cable (for installation)●Summit WM-Series WLAN Switch Software 1.0 User Guide (CD)
Installing the HardwareFCS Review Draft IISummit WM-Series Switches, Altitude 350, and Summit WM-Series WLAN Switch Software Quick Start Guide 10Mounting the Summit WMRack-MountThe Summit WM has three sets of four holes on each side, in three positions: front, center and rear. Attach the mounting brackets to the Summit WM in appropriate position for the type of rack to be used. Attach the brackets to the rack.Table MountEnsure at least 2 inches clearance on all sides for effective ventilation.WARNING!Do not obstruct the air intake vent on the front, or the side or rear ventilation grills of the Summit WM.CAUTIONWhen installing the unit in a rack, load the heaviest devices in lowest portions of rack to avoid a top-heavy hazard.Rear mount Center mount Front mount
Summit WM Power SupplyFCS Review Draft IISummit WM-Series Switches, Altitude 350, and Summit WM-Series WLAN Switch Software Quick Start Guide 11Summit WM Power SupplyAt the rear of the Summit WM, connect the power supply:CAUTIONBoth cords must be connected. If only one power cord is connected, the power supply sounds a warning and its main LED turns from green to red.To power off the Summit WM, hold the on/off switch in the “off” position for at least 5 seconds.WARNING!This unit may have more than one power supply cord. Disconnect all power supply cords before servicing, to avoid electrical shock. SEE MANUAL BEFORE USE.Read the specifications for the spare power supply you purchased from Extreme Networks to ensure that all conditions are met. In the case of unit failure of one of the power supply modules in the Redundant Power Supply version, the module can be replaced without interruption of power to the Summit WM. However, this procedure must be carried out with caution. See the Summit WM-Series WLAN Switch Software 1.0 User Guide - Power Supply Appendix for instructions. Wear gloves to avoid contact with the module, which will be extremely hot.NOTETo decrease equipment down time due to electrical power availability each power cord should be connected to separate circuits.Power Supply Ratings●Voltage Ranging 90-254VAC●Nominal Voltage Range 100-240VAC●Line Frequency Range: 47-63 Hz●Max Input Current: 6A @ 90VAC 3A @ 200VACThe Summit WM100/WM1000 is shipped with a two (2) power cord set for the use in the United States. If Summit WM is used in countries other then US proper power cord sets must be provided that are certified for use in country of use.Power supply Power On/Off switchData ports (4 or 2)Management ports
Installing the HardwareFCS Review Draft IISummit WM-Series Switches, Altitude 350, and Summit WM-Series WLAN Switch Software Quick Start Guide 12Power Cord Selection Criteria●Two (2) North America Power Supply Cord Provided●PS Cords used outside the US require country specific certifications as required by country standards●PS Input Socket: IEC 60320 C13●Wire Size: 0.75mm2 (18AWG) copper stranded●3.05m(10ft) max lengthNOTEFerrite beads provided must be installed to comply with EMI compliance requirements. Failure to install ferrite beads may result in system errors due to radio frequency interference.1Install two (2) ferrite beads provided (Stewart #28A5776-0A2) per diagram on power cord sets used to connect Summit WM100 and Summit WM1000 to power source.●Cord must pass through ferrite 1 ½ times.●Ferrite bead must be places 2-4” from IEC 60320 C13 power connector that plugs into rear of Summit WM100/WM1000.●Use ferrite beads provided 2Connect power cord end with ferrite installed to main and redundant power supplies on the Summit WM100/WM1000.NOTETo decrease equipment down time due to electrical power failure, each power cord should be connected to different circuits.3Connect wall plug to electrical supply outlet.LEDs on on rear of power supply will light green indicating power is present. CAUTIONBoth cords must be connected. If only one power cord is connected, the power supply sounds a warning and its main LED turns from green to red.ferrite_brdFerrite bead for power cordStewart Ferrite Bead#28A5776-0A2
Connecting the Summit WM Data PortsFCS Review Draft IISummit WM-Series Switches, Altitude 350, and Summit WM-Series WLAN Switch Software Quick Start Guide 13WARNING!Disconnect all power supply cords from power sources before servicing, to avoid electrical shock. SEE MANUAL BEFORE USE.Read the specifications for the spare power supply you purchased from Extreme Networks to ensure that all conditions are met. In the case of unit failure of one of the power supply modules in the Redundant Power Supply version, the module can be replaced without interruption of power to the Summit WM. However, this procedure must be carried out with caution. See the Summit WM-Series WLAN Switch Software 1.0 User Guide - Power Supply Appendix for instructions. Wear gloves to avoid contact with the module, which will be extremely hot.Connecting the Summit WM Data PortsManagement Port ConnectionsNOTEFerrite beads provided must be installed to comply with EMI compliance requirements. Failure to install ferrite beads may result in system errors.Summit WM100/WM10001Install one (1) ferrite beads provided (Stewart #28A2024-0A0) per diagram on RJ-45 management port cable. If DB-9 console cable is used place of RJ-45 cable no ferrite is required.●Cord must pass through ferrite 1 ½ times.●Ferrite bead must be places 2-4” from RJ-45 connector that plugs into management port on Summit WM100/WM1000.●Use ferrite beads provided 2Connect power cord end with ferrite installed to main and redundant power supplies on the Summit WM100/WM1000.3Connect enterprise network to Summit WM100/1000 by connecting management port cable with ferrite attached to Summit WM100/WM1000 management port. Ferrite bead forRJ45 data cord
Installing the HardwareFCS Review Draft IISummit WM-Series Switches, Altitude 350, and Summit WM-Series WLAN Switch Software Quick Start Guide 14Data Cable ConnectionsSummit WM100Connect 4 RJ-45 enterprise network data cables to the 4-port 10/100 BaseT ports on Summit WM100. (cables not supplied):NOTEIt is not necessary to install ferrite beads on Ethernet cable attached to Summit WM100 data ports.Summit WM1000Connect 2 MT-RJ fiber cables to the 2-port MT-RJ ports on Summit WM1000.Install Ferrite BeadsInstall the ferrite beads provided on all Summit WM cables: white beads on the ethernet cables and black beads on the power supply cord. Install the ferrite beads no further than 4 inches (10 cm) away from the RJ45 ethernet connector or power receptacle at the back of the Summit WM. Place the cable through the ferrite bead, wrap it back around the outside of the bead and once again through the bead (1½ turns around the bead), as shown in the example below: Snap the two halves of the bead firmly together without pinching the wire insulation.Ferrite bead forRJ45 data cord Ferrite bead for power cord
Unpacking and Mounting the Altitude APFCS Review Draft IISummit WM-Series Switches, Altitude 350, and Summit WM-Series WLAN Switch Software Quick Start Guide 15Unpacking and Mounting the Altitude APThe Altitude AP has two models:●AltitudeTM 350-2 Integrated Antenna: internal dual (multimode) diversity antennas●AltitudeTM 350-2 Detachable Antenna: dual external antennas, RP-SMA connectorsAlso in the carton are the following:●one wall mounting bracket●3 screws and 3 wall plugs for the wall mounting bracket●one plastic rivet (to secure the Altitude AP to bracket)Mount the Altitude AP as follows.1Mount the wall bracket, using 3 screws, near the LAN ethernet cable plug on from the wall.2Press the back of the Altitude AP onto the bracket, aligning it with the open notches in the bracket. Then slide it downwards until the security spring clip holds it in place.CAUTIONThere should be at least 9 inches (20 cm) separation between the Altitude 350-2 and, or antenna and users.To remove the Altitude AP, release the spring clip by inserting an Allen key (or other similar tool) into the small hole at the bottom of the bracket. Then slide the case up the bracket and lift off the Altitude AP.AP_frontAP_back_bracket
Installing the HardwareFCS Review Draft IISummit WM-Series Switches, Altitude 350, and Summit WM-Series WLAN Switch Software Quick Start Guide 163Using a screwdriver, insert the plastic rivet through the hole at the bottom of the bracket and into the Altitude AP case. This locks the case to the bracket. To remove the Altitude AP, use a screwdriver to take out the rivet.WARNING!For installations that use Receive diversity (the default) the antennas should be pointed in the same direction. For installations that do NOT use Receive diversity or for those that split the 802.11a and 802.11b/g radio onto different physical ports, then the antennas can be pointed in whatever direction is desired.Connecting and Powering the Altitude APWARNING!The Altitude 350-2 with internal and detachable antenna is intended for indoor use only. The device must not be connected to a LAN segment exposed to outdoor wiring. Ensure that all cables are installed to avoid strain. Replace the power supply adaptor immediately, if it shows any signs of damage.NOTEThe Altitude 350-2 access point will automatically discontinue transmission in case of either absence of information to transmit (no frames transmitted through Ethernet) or operational failure.Powering up the Altitude AP initiates its automatic discovery and registration process with the Summit WM, The parameters for this process should be set in the user interface (AP Registration) (see Chapter 4, Discovery and registration: Altitude AP registration settings” in the Summit WM-Series WLAN Switch Software 1.0 User Guide). Connect and power up the Altitude AP in one of three ways: CAUTIONThe Altitude 350-2 shall be powered by UL approved limited power source adapter or UL approved limited power source power over ethernet (PoE)Power Over Ethernet (PoE)If your network is already set up with PoE (802.3af compliant), attach the LAN ethernet cable to the RJ45 ethernet connector in the top of the Altitude AP.Power Over Ethernet: Adding PoE InjectorIf your network is not set up with PoE, you can provide power to the ethernet cable with a PoE injector. The PoE injector must be 802.3af compliant. The PoE injector is not provided with the Altitude AP.
Connecting and Powering the Altitude APFCS Review Draft IISummit WM-Series Switches, Altitude 350, and Summit WM-Series WLAN Switch Software Quick Start Guide 17Power by AC AdaptorAn AC adaptor is not provided with the Altitude AP. If you wish to use one, the specifications are: Input: 120-240 VAC, Output Voltage DC +6V, max amps 1.50, max watts 10.To use an adaptor, install the Altitude AP within six feet of a wall outlet, attach the adaptor to the Altitude AP and then plug the adaptor into the wall outlet.AP_top_bottomPower connector LAN ethernet port connectorOpening forAllen keyOpeningfor rivet
Installing the HardwareFCS Review Draft IISummit WM-Series Switches, Altitude 350, and Summit WM-Series WLAN Switch Software Quick Start Guide 18
FCS Review Draft IISummit WM-Series Switches, Altitude 350, and Summit WM-Series WLAN Switch Software Quick Start Guide 192Configuring the Summit WM-Series WLAN Switch Software 1.0Configuration stagesThere are six stages in setting up and configuring the Summit WM and Altitude APs:1First-Time Setup: Perform “First-Time Setup” of the Summit WM on the physical network by configuring the Management Port.2Product Key: Apply a Product Key file, for licensing purposes. If no Product Key is enabled, the Summit WM functions with all features enabled in demonstration mode.3Data Port Setup: Set up the Summit WM on the physical network by configuring the physical data ports.4Routing Setup: For any port defined as a “router port”, configure static routes and OSPF parameters (if appropriate on the network).5Altitude AP Initial Setup: Determine the Altitude AP registration mode, then connect and power on the APs (they now discover and register with the Controller). 6WM-AD Setup: Set up one or more WM-AD, using the WM-AD Configuration capability on the Summit WM. Select the Altitude APs on the WM-AD. Then configure authentication, accounting, filtering, multicast and privacy.First-Time Setup of the Summit WMBefore you can connect the Summit WM to the enterprise network, you must change the IP address of the Summit WM management port from its factory default to the IP address suitable for your enterprise network. Access the Summit WM by one of two methods:●Use a device supporting VT100 emulation, attached to the DB9 serial port (COM1 port) of the Summit WM via a cross-over (null modem) cable. Use the Command Line Interface (CLI) commands.●Use a laptop computer running a web browser. Connect the supplied cross-over ethernet cable between the laptop and management ethernet port of the Summit WM. Follow the steps below.1Statically assign an unused IP address in the 192.168.10.0/24 subnet for the ethernet port of the PC (such as, 192.168.10.205).2Run the web browser on the laptop.
Configuring the Summit WM-Series WLAN Switch Software 1.0FCS Review Draft IISummit WM-Series Switches, Altitude 350, and Summit WM-Series WLAN Switch Software Quick Start Guide 203Point the browser to the URL https://192.168.10.1:5825. This launches the web-based GUI on the Summit WM.4Log in as User Name: admin, Password is blank. 5Navigate to the Summit WM Configuration screen, IP Addresses option. This screen first displays the factory defaults.
First-Time Setup of the Summit WMFCS Review Draft IISummit WM-Series Switches, Altitude 350, and Summit WM-Series WLAN Switch Software Quick Start Guide 216To modify Management Port Settings, click the Modify button. The System Port Configuration screen appears.7Key in the new IP address of the Summit WM’s management port, as appropriate to the enterprise network.8Key in the default gateway of the network, as well as the network name servers.9Click OK to return to the Summit WM Configuration screen.10 Click on the Save button, to save the port changes.The web connection between the laptop and the Summit WM is now lost, because their IP addresses are now on different networks. Before you can continue configuring the Summit WM, you must establish its presence on the enterprise network. To add the Summit WM to your enterprise network:1Disconnect the laptop from the Summit WM Management Port.2Connect the Summit WM Management Port to the enterprise ethernet LAN.3Reboot the Summit WM.Now you will be able to launch the Summit WM-Series WLAN Switch Software 1.0 GUI again.
Configuring the Summit WM-Series WLAN Switch Software 1.0FCS Review Draft IISummit WM-Series Switches, Altitude 350, and Summit WM-Series WLAN Switch Software Quick Start Guide 22Summit WM Configuration: Product KeyClick on the Summit WM tab, Software Maintenance option, SWM Product Keys tab. The Product Keys screen appears. Enter your Product Key information, as proof of purchase and to access advanced features. Summit WM Configuration: Data Port Setup1Navigate to the Summit WM Configuration screen, IP Addresses option. The lower portion of the screen displays the Interfaces, either the four ethernet ports for the SummitTM WM100, or the two ports for the SummitTM WM1000.2For each physical port, key in:3For the highlighted port, select its function and mode:NOTEConfigure at least one port as a “Router” Port, so that static routes and/or OSPF routing can be defined for the Summit WM. 4For the highlighted port, click the Mgmt checkbox on to allow Management Traffic on this port.5For the highlighted port, click the SLP checkbox on to allow SLP protocol on this port for Altitude AP discovery and registration.NOTEFor the implications of the SLP and Mgmt options, see Port-Level Filtering in the Summit WM-Series WLAN Switch Software 1.0 User Guide.6To save the port configuration, click Save. To cancel the entries without saving, click Cancel.Host Port: This port type is the factory default. Define as “Host Port” any port to which only Altitude APs are connected. Normal IP forwarding and dynamic routing are disabled.Third-Party AP: Define as “Third-Party AP” any port to which you will connect only third-party access points, for Summit WM to control. Do not connect Altitude APs to this type of port.Router: Define as “Router Port” a port that you wish to connect to an upstream next-hop router in the network. Dynamic routing protocol (such as OSPF) can be turned on for this port type. Altitude APs can be attached to a “Router” port. IP address IP Address of the physical ethernet portSubnet mask For the IP address, the appropriate subnet mask to separate the network portion from the host portion of the addressMTU Maximum Transmission Unit (maximum packet size for this port). Default setting is 1500. Function Select port type from the drop-down list: Host Port, 3rd Party AP, Router
Summit WM Configuration: Static RoutesFCS Review Draft IISummit WM-Series Switches, Altitude 350, and Summit WM-Series WLAN Switch Software Quick Start Guide 23Summit WM Configuration: Static RoutesIf you configure one data port as a “Router” port, you can define a default route to the enterprise network, with a static route or with OSPF protocol (Open Shortest Path First). This enables the Summit WM to forward wireless packets to the remainder of the network.1Navigate to the Summit WM Routing Protocols option. Then click the Static Routes tab. The Static Routes screen appears.2To add a new route, click in the Destination Address field, and key in the destination IP address that this static route applies to. To define a default static route for any unknown address not in the routing table, key in 0.0.0.03Key in the Subnet Mask for the IP address. For the default static route for any unknown address, key in 0.0.0.0.4Select an outbound destination for the packets, in one of two ways:Click on the Gateway radio button, and key in the IP address of the next hop between the Summit WM and the packet's ultimate destination, or Click on the Interface button, and select a port from the list.5The Override dynamic routes checkbox is on by default, giving priority to static routes defined here over OSPF learned routes. For dynamic routing, click the checkbox off.6Click on the Add button. The new route appears in the list. 7Click on Save to update the routing table on the Summit WM. To set up OSPF routing, see the Summit WM User Guide.
Configuring the Summit WM-Series WLAN Switch Software 1.0FCS Review Draft IISummit WM-Series Switches, Altitude 350, and Summit WM-Series WLAN Switch Software Quick Start Guide 24Altitude AP: Registering and ConfiguringBefore the Altitude APs are powered and begin their automatic process of “Discovery” and “Registration”, you should first define the parameters of this process. 1Navigate to the Altitude AP Configuration, AP Registration option. The Registration Mode screen appears.2To define the Security Mode, click on the appropriate radio button: Allow All (all APs can register), or Allow Approved. (each AP must be approved) 3To save these settings, click on the Save button.When the Altitude AP is powered on and connected to the LAN, it begins its “discovery” process to “learn” the IP address of the Summit WM. The Altitude AP then registers with the Summit WM:1The Altitude AP sends its serial number to the Summit WM.2The Summit WM sends a port IP address and a binding key to the Altitude AP, and adds the Altitude AP to its database.3The Altitude AP becomes “active”. It will be able to handle data traffic after it has been assigned to a WM-AD.NOTETo add a Altitude AP manually, click on the Add Altitude AP button in a Altitude AP Configuration screen. Modify the default settings in the Properties/Radio tabs.
WM-Access Domain: OverviewFCS Review Draft IISummit WM-Series Switches, Altitude 350, and Summit WM-Series WLAN Switch Software Quick Start Guide 25WM-Access Domain: OverviewThe final step in initial configuration is to set up WM-AD on the Summit WM. Setting up a WM-AD defines a virtual IP subnet for a group of wireless device users, where the Controller acts as a default gateway to wireless devices.Before you define a WM-AD, you should have determined aspects of network access including a user access plan, RADIUS attributes, location and identity of the Altitude APs, the routing mechanism, the network addresses for the WM-AD, authentication and filters for wireless device users on the WM-AD, privacy mechanisms between the Altitude APs and the wireless devices.In the Global Settings screen, you define the RADIUS servers to be used for authentication, accounting and MAC autentication. These settings apply to all WM-AD definitions.To add a new a WM-AD, click on the WM-AD Configuration tab. 1In the entry field above the Add subnet button, key in a unique name for the new WM-AD.2Click on Add subnet. The name appears in the list above.3Highlight the subnet name. The Topology screen appears.Topology for a WM-AD1Select the network Assignment by drop-down list: ●SSID (authentication by Captive Portal, or none)●AAA (authentication by 802.1x)2In the SSID box, key in the SSID that wireless devices will use to access the Altitude AP.3From the list of Altitude APs available, check the ones to be assigned to this WM-AD. 4In the Timeout area, key in the various time limits to inactivity in a session.
Configuring the Summit WM-Series WLAN Switch Software 1.0FCS Review Draft IISummit WM-Series Switches, Altitude 350, and Summit WM-Series WLAN Switch Software Quick Start Guide 265To allow Management traffic on this WM-AD, click the checkbox on. (See User Guide.)6If this WM-AD is to be used for third-party access points, click Use 3rd Party AP checkbox on. The screen changes to include fields for IP Address and MAC Address of the access point. To bypass the Summit WM's DHCP server, click Use DHCP Relay checkbox on. If not using DHCP Relay, fill in fields for DHCP on the Summit WM:7In the Network Address field, key in the network IP address for the WM-AD. In the Mask box, key in the subnet mask for the IP address.8The Address Ranges fields populate automatically (based on the IP address) with the range of IP addresses to be assigned to wireless devices. You can modify these, in the from or to box, or by defining Exclusions in the Exclusions window.9In the Default Lease box, key in the default time limit that an IP address would be assigned. In the Max Lease box, key in the maximum time. (Default values are provided.)10 Fill in: Domain Name, DNS Servers, WINS (if appropriate).11 To save this WM-AD configuration, click on the Save button.When the new Topology has been saved, the screen displays tabs for remaining configuration of the WM-AD: Authentication & Accounting, RAD Policy, Multicast, Filtering and Privacy.This guides provides an overview of the elements of a WM-AD only. For detailed instructions in setting up a WM-AD, see the Summit WM-Series WLAN Switch Software 1.0 User Guide. Network Assignment and Authentication for a WM-ADIf SSID was selected, there are two authentication options:●None: The wireless device user will never be authenticated, but network access is still controlled by the Non-Authenticated Filter.●Captive Portal: The wireless device connects to the network, but can only access specified network addresses defined in the Non-Authenticated Filter, including a webpage logon screen where the user must input an ID and password for authentication (Captive Portal). If AAA (802.1x) was selected, the wireless device user first logs onto the user's operating system. The Summit WM sends the authentication request to a RADIUS server. If access is allowed, the Controller assigns the device its IP address and allows network access controlled by filtering rules for the Filter ID value associated with the user.In the Authentication and Accounting screen, you select the RADIUS servers to be used for Authentication, Accounting and MAC Authentication, as desired. Then define the parameters for each type of authentication.
WM-Access Domain: OverviewFCS Review Draft IISummit WM-Series Switches, Altitude 350, and Summit WM-Series WLAN Switch Software Quick Start Guide 271Click on the Authentication tab. The Captive Portal version of the screen is shown below.2See the User Guide for details in assigning and configuring the servers for the three types of authentication.3For Captive Portal authentication, click on the Configure Captive Portal button to set up the Captive Portal parameters.4To save these settings, click on Save.RADIUS Policy and Filtering for a WM-ADIn the RADIUS Policy screen, in the Filter ID Values box, key in the names of user groups that this WM-AD will apply to. These names must match the Filter ID attribute names in the RADIUS server and will appear in the drop-down list in the Filtering screen. Four types of filters are applied by the Summit WM in the following order:1Exception filter, to provide the administrator optional additional flexibility in securing the system and blocking Denial of Service (DoS) attacks, on any type of WM-AD.2Non-Authenticated filter, with filtering rules that apply before authentication, to control network access and to direct users to a Captive Portal web page for login.3Group filters (by Filter ID) for designated user groups, to control access to certain areas of the network, with values that match the values defined for the RADIUS Filter ID attribute.4Default filter, to control access if there is no matching Filter ID for a user.Within each type of filter, define a sequence of filtering rules, in the order that you want them to take effect. You define each rule to either allow or deny traffic, either “In” (from a wireless device in to the network, or “Out” (from the network out to the wireless device).
Configuring the Summit WM-Series WLAN Switch Software 1.0FCS Review Draft IISummit WM-Series Switches, Altitude 350, and Summit WM-Series WLAN Switch Software Quick Start Guide 281Click on the Filtering tab. 2For assignment by SSID, select Non-Authenticated from Filter ID drop-down list.For assignment by AAA 802.1x, select a named Filter ID.3Define the filtering rules, and their order (see User Guide)A “Deny All” rule is already in place. Use this as the final rule in the Non-Authenticated filter. Privacy on a WM-ADPrivacy is a mechanism that protects data over wireless and wired networks, usually by encryption techniques. Summit WM-Series WLAN Switch Software 1.0 supports:●Wired Equivalent Privacy (WEP) which encrypts data sent between wireless nodes. ●Wi-Fi Protected Access (WPAv1 and WPAv2) privacy, in Enterprise Mode (which specifies 802.1x authentication and requires an authentication server) or in Pre-Shared Key (PSK) mode (which relies on a shared secret). Encryption is by Advanced Encryption Standard (AES) or by Temporal Key Integrity Protocol (TKIP). If WPAv2 is selected, both WPAv1 and WPAv2 are supported simultaneously, defaulting to the highest encryption method.For further detailed information, see the Summit WM-Series WLAN Switch Software 1.0 User Guide.Summit WM-Series WLAN Switch Software 1.0 Ongoing OperationsWhen the WM Access Domain Services required have been defined, the initial configuration of the Summit WM-Series WLAN Switch Software 1.0 system is complete. Ongoing operations include:●Summit WM System Maintenance●Altitude AP Maintenance●Client Disassociate●Logs and Traces●Reports and Displays

Navigation menu