Extreme Networks OAP36B HiPath Wireless Outdoor Access Point User Manual II

Extreme Networks, Inc. HiPath Wireless Outdoor Access Point II

UserManual.wiki >

Extreme Networks >

OAP36B User Manual >

User Manual II

hwc_fastfailover.fmAvailability and session availabilityViewing the Wireless AP availability display9034530-04, September 2010HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 429 7.5 Viewing the Wireless AP availability displayFor more information, see Section 11.3, “Viewing the Wireless AP availability display”, on page 455.7.6 Viewing SLP activityIn normal operations, the primary HiPath Wireless Controller registers as an SLP service called ac_manager. The controller service directs the Wireless APs to the appropriate HiPath Wireless Controller. During an outage, if the remaining HiPath Wireless Controller is the secondary controller, it registers as the SLP service ru_manager. To view SLP activity:1. From the main menu, click Wireless AP Configuration. The Wireless APs screen is displayed.2. In the left pane, click AP Registration. The Wireless AP Registration screen is displayed.3. To confirm SLP registration, click View SLP Registration. A pop-up screen displays the results of the diagnostic slpdump tool, to confirm SLP registration.

Availability and session availabilityhwc_fastfailover.fmViewing SLP activity 9034530-04, September 2010430 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide

hwc_mobility.fmConfiguring MobilityMobility overview9034530-04, September 2010HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 431 8 Configuring MobilityThis chapter describes the mobility concept, including:•Mobility overview•Mobility domain topologies•Configuring mobility domain8.1 Mobility overviewThe HiPath Wireless Controller, Access Points and Convergence Software system allows up to 12 HiPath Wireless Controllers on a network to discover each other and exchange information about a client session. This technique enables a wireless device user to roam seamlessly between different Wireless APs on different HiPath Wireless Controllers. The solution introduces the concept of a mobility manager; one HiPath Wireless Controller on the network is designated as the mobility manager and all others are designated as mobility agents.The wireless device keeps the IP address, and the service assignments it received from its home HiPath Wireless Controller—the HiPath Wireless Controller that it first connected to. The WLAN Service on each HiPath Wireless Controller must have the same SSID and RF privacy parameter settings.You have two options for choosing the mobility manager:•Rely on SLP with DHCP Option 78•Define at the agent the IP address of the mobility manager. By explicitly defining the IP address, the agent and the mobility manager are able to find each other directly without using the SLP discovery mechanisms. Direct IP definition is recommended to provide tighter control of the registration steps for multi-domain installations.The HiPath Wireless Controller designated as the mobility manager:•Is explicitly identified as the manager for a specific mobility domain. Agents will connect to this manager to establish a mobility domain.•Defines at the agent the IP address of the mobility manager, which allows for the bypass of SLP. Agents directly find and attempt to register with the mobility manager.•Uses SLP, if this method is preferred, to register itself with the SLP Directory Agent as SiemensNet.•Defines the registration behavior for a multi-controller mobility domain set:

Configuring Mobilityhwc_mobility.fmMobility overview 9034530-04, September 2010432 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide • Open mode – A new agent is automatically able to register itself with the mobility manager and immediately becomes part of the mobility domain• Secure mode – The mobility manager does not allow a new agent to automatically register. Instead, the connection with the new agent is placed in pending state until the administrator approves the new device.•Listens for connection attempts from mobility agents.•Establishes connections and sends a message to the mobility agent specifying the heartbeat interval, and the mobility manager's IP address if it receives a connection attempt from the agent.•Sends regular heartbeat messages containing wireless device session changes and agent changes to the mobility agents and waits for a returned update messageThe HiPath Wireless Controller designated as a mobility agent does the following:•Uses SLP or a statically configured IP address to locate the mobility manager•Defines at the agent the IP address of the mobility manager, which allows for the bypass of SLP. Agents directly find and attempt to register with the mobility manager.•Attempts to establish a TCP/IP connection with the mobility manager•Sends updates, in response to the heartbeat message, on the wireless device users and the data tunnels to the mobility manager. If a controller configured as the mobility manager is lost, the following occurs:•Agent to agent connections remain active.•Mobility agents continue to operate based on the mobility information last coordinated before the manager link was lost. The mobility location list remains relatively unaffected by the controller failure. Only entries associated with the failed controller are cleared from the registration list, and users that have roamed from the manager controller to other agents are terminated and required to re-register as local users with the agent where they are currently located.•The data link between active controllers remains active after the loss of a mobility manager•Mobility agents continue to use the last set of mobility location lists to service known users•Existing users remain in the mobility scenario, and if the users are known to the mobility domain, they continue to be able to roam between connected controllers•New users become local at attaching controller

hwc_mobility.fmConfiguring MobilityMobility domain topologies9034530-04, September 2010HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 433 •Roaming to another controller resets sessionThe mobility network that includes all the HiPath Wireless Controllers and the Wireless APs is called the Mobility Domain.Note: The mobility feature is not backward compatible. This means that all the HiPath Wireless Controllers in the mobility domain must be running the most recent HiPath Wireless Convergence Software release.8.2 Mobility domain topologiesYou can configure a mobility domain in the following scenarios:•Mobility domain without any availability•Mobility domain with availability•Mobility domain with session availabilityNote: If you are configuring mobility, you must synchronize time on all the HiPath Wireless Controllers that are part of the mobility domain. For more information, see Section 3.4.11, “Configuring network time”, on page 92.

Configuring Mobilityhwc_mobility.fmMobility domain topologies 9034530-04, September 2010434 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide Figure 27 Mobility Domain with fast failover and session availability features•The user’s home session is with HWC1.•When the user roams from Wireless AP 1 to Wireless AP 2, he establishes his home session with HWC2.•When the user roams, the Wireless AP 1 receives a notification that the user has roamed away following which it marks the user session as “inactive”. Consequently, no statistics are sent to the HWC1 for that user.•In response to the heart beat message from the mobility manager (HWC3), the HWC2 sends updates that the user has a new home on HWC2. Upon receiving the updates, the mobility manager updates its own tables.Note: The mobility manager’s heart beat time is configurable. If you are configuring a mobility domain with session availability, you should configure the heart beat time as one second to enable the mobility manager to update its tables quickly. •If a failover takes place, and the user is still associated with Wireless AP1:•The Wireless AP 1 fails over, and establishes an active session with HWC2.• HWC1 and HWC2 are configured for session availability.• HWC1, HWC2, HWC3, Wireless AP1, Wireless AP2 and Wireless AP3 form a Mobility Domain• HWC3 is the Mobility Manager whereas HWC1 and HWC2 are Mobility Agents

hwc_mobility.fmConfiguring MobilityConfiguring mobility domain9034530-04, September 2010HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 435 •In response to the heart beat message from the mobility manager (HWC3), the HWC2 sends updates to the mobility manager on the failover Wireless AP and its user.•If a failover takes place, and the user has roamed to Wireless AP 2: •As part of roaming, the user’s home session moves from HWC1 to HWC2. •Wireless AP 1 establishes active session with HWC 2. Wireless AP 2 is not impacted by the failover.8.3 Configuring mobility domainIf you are configuring a mobility domain with availability or session availability, you must synchronize time on all the HiPath Wireless Controllers that are part of your mobility domain. For more information, see Section 3.4.11, “Configuring network time”, on page 92.To designate a mobility manager:1. From the main menu, click Wireless Controller Configuration. The Wireless Controller Configuration screen is displayed.2. In the left pane, click Mobility Manager. The Mobility Manager Settings screen is displayed.3. To enable mobility for this controller, select the Enable Mobility checkbox. The controller mobility options are displayed.

Configuring Mobilityhwc_mobility.fmConfiguring mobility domain 9034530-04, September 2010436 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 4. Select the This Wireless Controller is a Mobility Manager option. The mobility manager options are displayed.5. In the Port drop-down list, select the interface on the HiPath Wireless Controller to be used for the mobility manager process. Ensure that the selected interface’s IP address is routable on the network.6. In the Heartbeat box, type the time interval (in seconds) at which the mobility manager sends a Heartbeat message to a mobility agent. Note: If the mobility domain is configured for fast failover and session availability, you should configure the mobility manager’s heart beat time as one second.7. In the SLP Registration drop-down list, select whether to enable or disable SLP registration.8. In the Permission list, select the agent IP addresses you want to approve that are in pending state, by selecting the agent and clicking Approve. New agents are only added to the domain if they are approved.You can also add or delete controllers that you want to be part of the mobility domain. To add a controller, type the agent IP address in the box, and then click Add. To delete a controller, click the controller in the list, and then click Delete.9. Select the Security Mode option:• Allow all mobility agents to connect – All mobility agents can connect to the mobility manager.• Allow only approved mobility agents to connect – Only approved mobility agents can connect to the mobility manager.10. To save your changes, click Save.Note: If you set up one HiPath Wireless Controller on the network as a mobility manager, all other HiPath Wireless Controllers must be set up as mobility agents.To designate a mobility agent:1. From the main menu, click Wireless Controller Configuration. The Wireless Controller Configuration screen is displayed.2. In the left pane, click Mobility Manager. The Mobility Manager Settings screen is displayed.3. To enable mobility for this controller, select the Enable Mobility checkbox. The controller mobility options are displayed.

Configuring Mobilityhwc_mobility.fmConfiguring mobility domain 9034530-04, September 2010438 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide

hwc_3rdpartyaps.fm9034530-04, September 2010HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 439 Working with third-party APsDefine authentication by Captive Portal for the third-party AP WLAN Service:9 Working with third-party APs You can set up the HiPath Wireless Controller to handle wireless device traffic from third-party APs, while still providing policy and network access control. This process requires the following steps:•Define a physical topology to operate in 3rd Party mode.•Define a WLAN Service of type Third Party AP.•Define a policy•Define a VNS9.1 Define authentication by Captive Portal for the third-party AP WLAN Service:802.1x Authentication is not supported directly by the HiPath Wireless Controller. However, this type of authentication can be supported by the actual third-party AP. All other options for authentication are supported at the controller.1. On the WLAN configuration window for the third-party WLAN Service, click the Auth & Acct tab. 2. In the Authentication Mode drop-down list, click Internal or External, then click the Configure button. 3. Define the Captive Portal configuration as described in Section 6.9.3.7, “Configuring Captive Portal for internal or external authentication”, on page 358.9.2 Define the third-party APs list1. In the WLAN Services panel, select the third-party WLAN Service.2. In the IP Address field, type the IP address of a third-party AP.3. In the Wired MAC Address field, type the MAC address of the AP.4. Click the Add button to add the AP to the list.5. Repeat for all third-party APs to be assigned to this WLAN Service.

Working with third-party APshwc_3rdpartyaps.fmDefine filtering rules for the third-party APs: 9034530-04, September 2010440 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 9.3 Define filtering rules for the third-party APs:1. Because the third-party APs are mapped to a physical port, you must define the Exception filters on the physical topology, using the Exception Filters tab. For more information, see Section 6.8.3, “Exception filtering”, on page 327.2. Define filtering rules that allow access to other services and protocols on the network such as HTTP, FTP, telnet, SNMP.3. On the Multicast Filters tab, select Enable Multicast Support and configure the multicast groups whose traffic is allowed to be forwarded to and from the VNS using this topology. For more information, see Section 6.8.4, “Multicast filtering”, on page 330.In addition, modify the following functions on the third-party AP:•Disable the AP's DHCP server, so that the IP address assignment for any wireless device on the AP is from the DHCP server at the HiPath Wireless Controller with VNS information.•Disable the third-party AP's layer-3 IP routing capability and set the access point to work as a layer-2 bridge.The following are the differences between third-party APs and Wireless APs on the HiPath Wireless Controller, Access Points and Convergence Software system:•A third-party AP exchanges data with the HiPath Wireless Controller's data port using standard IP over Ethernet protocol. The third-party access points do not support the tunnelling protocol for encapsulation.•For third-party APs, the VNS is mapped to the physical data port and this is the default gateway for mobile units supported by the third-party access points. •A HiPath Wireless Controller cannot directly control or manage the configuration of a third-party access point.•Third-party APs are required to broadcast an SSID unique to their segment. This SSID cannot be used by any other VNS.•Roaming from third-party APs to Wireless APs and vice versa is not supported.

hwc_mitigator.fm9034530-04, September 2010HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 441 Working with the MitigatorMitigator overview10 Working with the MitigatorThis chapter describes Mitigator concepts, including:•Mitigator overview•Enabling the Analysis and data collector engines•Running Mitigator scans•Analysis engine overview•Working with Mitigator scan results•Working with friendly APs•Maintaining the Mitigator list of APs•Viewing the Scanner Status report10.1 Mitigator overviewThe Mitigator is a mechanism that assists in the detection of rogue APs. Mitigator functionality on the Wireless AP does the following:•Runs a radio frequency (RF) scanning task. •Alternating between scan functions, providing its regular service to the wireless devices on the network.Note: If a Wireless AP is part of a WDS link you cannot configure it to act as a scanner in Mitigator. Mitigator functionality on the HiPath Wireless Controller does the following:•Runs a data collector application that receives and manages the RF scan messages sent by the Wireless AP. RF data collector data includes lists of all connected Wireless APs, third-party APs, and the RF scan information that has been collected from the Wireless APs selected to perform the scan. •Runs an Analysis Engine that processes the scan data from the data collector through algorithms that make decisions about whether any of the detected APs or clients are rogue APs or are running in an unsecure environment (for example, ad-hoc mode).Note: In a network with more than one HiPath Wireless Controller, it is not necessary for the data collector to be running on the same controller as the Analysis Engine. One controller can be a dedicated Analysis Engine while the

Working with the Mitigatorhwc_mitigator.fmEnabling the Analysis and data collector engines 9034530-04, September 2010442 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide other controllers run data collector functionality. No more than one Analysis Engine can be running at a time. You must ensure that the controllers are all routable.10.2 Enabling the Analysis and data collector enginesBefore using the Mitigator, you must enable and define the Analysis and data collector engines.To enable the Analysis engine:1. From the main menu, click Wireless Controller Configuration. The Wireless Controller Configuration screen is displayed. 2. In the left pane, click Mitigator. The Mitigator Configuration screen is displayed.3. To enable the Mitigator Analysis Engine, select the Enable Mitigator Analysis Engine checkbox.4. To identify the remote RF Data Collector Engine that the Analysis Engine will poll for data, type the IP address of the HiPath Wireless Controller on which the remote Data Collector resides in the IP Address box. Note: Currently, the HiPath Wireless Controller C20N/C20 does not support the Remote Collection Engines functionality of the HiPath Wireless Controller, Access Points and Convergence Software solution.

hwc_mitigator.fmWorking with the MitigatorEnabling the Analysis and data collector engines9034530-04, September 2010HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 443 5. Set the following for the data collection engine: •In the Poll interval box, type (in seconds) the interval that the Analysis Engine will poll the RF Data Collector to maintain connection status. The default is 30 seconds. •In the Poll retry count box, type the number of times the Analysis Engine will attempt to poll the RF Data Collector to maintain connection status, before it stops sending requests. The default is 2 attempts.6. Click Add. The IP address of the Data Collection Engine, with its Poll Interval and Poll Retry parameters, is displayed in the list.Note: For each remote RF Data Collection Engine defined here, you must do the following:• Enable it by selecting the Enable Mitigator Analysis Engine checkbox on the remote HiPath Wireless Controller.• Ensure that the controllers are routable by whatever means you use (for example, static routes or OSPF).7. To add a new collection engine, click Add Collection Engine. 8. Repeat steps 4 to 7.9. To save your changes, click Apply.

Working with the Mitigatorhwc_mitigator.fmRunning Mitigator scans 9034530-04, September 2010444 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 10.3 Running Mitigator scansThe Mitigator feature allows you to view the following:•Scan Groups•Friendly APs•AP MaintenanceNote: A scan will not run on an inactive AP, even though it is displayed as part of the Scan Group. If it becomes active, it will be sent a scan request during the next periodic scan.To run the Mitigator scan task mechanism:1. From the main menu, click Mitigator. The Mitigator screen is displayed.2. Click the Scan Groups tab.3. In the Scan Group Name box, type a unique name for this scan group.

hwc_mitigator.fmWorking with the MitigatorRunning Mitigator scans9034530-04, September 2010HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 445 4. In the Wireless APs list, select the checkbox corresponding to the Wireless APs you want included in the new scan group, which will perform the scan function.Note: A Wireless AP can participate in only one Scan Group at a time. Siemens recommends that the Scan Groups represent geographical groupings of Wireless APs.5. In the Radio drop-down list, click one of the following:•Both – Radio 1 and Radio 2 both perform the scan function.• radio 1 – Only Radio 1 performs the scan function.• radio 2 – Only Radio 2 performs the scan function.6. In the Channel List drop-down list, click one of the following:•All – Scanning is performed on all channels.• Current – Scanning is performed on only the current channel.7. In the Scan Type drop-down list, click one of the following:•Active – The Wireless AP sends out ProbeRequests and waits for ProbeResponse messages from any access points.• Passive – The Wireless AP listens for 802.11 beacons.8. In the Channel Dwell Time box, type the time (in milliseconds) for the scanner to wait for a response from either 802.11 beacons in passive scanning, or ProbeResponse in active scanning.9. In the Scan Time Interval box, type the time (in minutes) to define the frequency at which a Wireless AP within the Scan Group will initiate a scan of the RF space. The range is from one minute to 120 minutes.10. To initiate a scan using the periodic scanning parameters defined above, click Start Scan.11. To initiate an immediate scan that will run only once, click Run Now.Note: If necessary, you can stop a scan by clicking Stop Scan. A scan must be stopped before modifying any parameters of the Scan Group, or before adding or removing a Wireless AP from a Scan Group.The Scan Activity box displays the current state of the scan engine.12. To view a pop-up report displaying the timeline of scan activity and scan results, click Show Details.13. To save your changes, click Save.

Working with the Mitigatorhwc_mitigator.fmAnalysis engine overview 9034530-04, September 2010446 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 10.4 Analysis engine overviewThe Analysis engine relies on a database of known devices on the Controller, Access Points and Convergence Software system. The Analysis engine compares the data from the RF Data Collector with the database of known devices.This database includes the following:• Wireless APs – Registered with any HiPath Wireless Controller with its RF Data Collector enabled and associated with the Analysis Engine on this HiPath Wireless Controller.• Third-party APs – Defined and assigned to a VNS.• Friendly APs – A list created in the Mitigator user interface as potential rogue access points are designated by the administrator as Friendly.• Wireless devices – Registered with any HiPath Wireless Controller that has its RF Data Collector enabled and has been associated with the Analysis Engine on this HiPath Wireless Controller.The Analysis Engine looks for access points with one or more of the following conditions:• Unknown MAC address and unknown SSID (critical alarm)• Unknown MAC, with a valid SSID - a known SSID is being broadcast by the unknown access point (critical alarm)• Known MAC, with an unknown SSID - a rogue may be spoofing a MAC address (critical alarm)• Inactive Wireless AP with valid SSID (critical alarm)• Inactive Wireless AP with unknown SSID (critical alarm)• Known Wireless AP with an unknown SSID (major alarm)• In ad-hoc mode (major alarm)Note: In the current release, there is no capability to initiate a DoS attack on the detected rogue access point. Containment of a detected rogue requires an inspection of the geographical location of its Scan Group area, where its RF activity has been found.

hwc_mitigator.fmWorking with the MitigatorWorking with Mitigator scan results9034530-04, September 2010HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 447 10.5 Working with Mitigator scan resultsWhen viewing the Mitigator scan results, you can delete individual or all of the access points from the scan results. You can also add access points from the scan results to the Friendly AP list.To view Mitigator scan results:1. From the main menu, click Mitigator. The Mitigator screen is displayed.2. Click the Rogue Detection tab. 3. To modify the page’s refresh rate, type a time (in seconds) in the Refresh every __ seconds box. 4. Click Apply. The new refresh rate is applied.5. To view the Rogue Summary report, click Rogue Summary. The Rogue Summary report is displayed in a pop-up window.

Working with the Mitigatorhwc_mitigator.fmWorking with Mitigator scan results 9034530-04, September 2010448 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 6. To clear all detected rogue devices from the list, click Clear Detected Rogues.Note: To avoid the Mitigator's database becoming too large, Siemens recommends that you either delete Rogue APs or add them to the Friendly APs list, rather than leaving them in the Rogue list.To add an AP from the Mitigator scan results to the list of friendly APs:1. From the main menu, click Mitigator. The Mitigator screen is displayed.2. Click the Rogue Detection tab. 3. To add a Wireless AP to the Friendly APs list, click Add to Friendly List. The AP is removed from this list and is displayed in the Friendly AP Definitions section of the Friendly AP’s tab.To delete an AP from the Mitigator scan results:1. From the main menu, click Mitigator. The Mitigator screen is displayed.2. Click the Rogue Detection tab. 3. To delete a specific AP from the Mitigator scan results, click the corresponding Delete button. The AP is removed from the list.4. To clear all rogue access points from the Mitigator scan results, click Clear Detected Rogues. All APs are removed from the list.

hwc_mitigator.fmWorking with the MitigatorWorking with friendly APs9034530-04, September 2010HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 449 10.6 Working with friendly APsTo view the friendly APs: 1. From the main menu, click Mitigator. The Mitigator screen is displayed.2. Click the Friendly APs tab. To add friendly APs manually:1. From the main menu, click Mitigator. The Mitigator screen is displayed.2. Click the Friendly APs tab. 3. To add friendly access points manually to the Friendly AP Definitions list, type the following:• MAC Address – Specifies the MAC address for the friendly AP• SSID – Specifies the SSID for the friendly AP• Channel – Specifies the current operating channel for the friendly AP• Description – Specifies a brief description for the friendly AP4. Click Add. The new access point is displayed in the list above.To delete a friendly AP:1. From the main menu, click Mitigator. The Mitigator screen is displayed.2. Click the Friendly APs tab.3. In the Friendly AP Definitions list, click the access point you want to delete.

Working with the Mitigatorhwc_mitigator.fmMaintaining the Mitigator list of APs 9034530-04, September 2010450 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 4. Click Delete. The selected access point is removed from the Friendly AP Definitions list.5. To save your changes, click Save.To modify a friendly AP:1. From the main menu, click Mitigator. The Mitigator screen is displayed.2. Click the Friendly APs tab. 3. In the Friendly AP Definitions list, click the access point you want to modify.4. Modify the access point by making the appropriate changes.5. To save your changes, click Save.10.7 Maintaining the Mitigator list of APsTo maintain the Wireless APs:1. From the main menu, click Mitigator. The Mitigator screen is displayed.2. Click the AP Maintenance tab. Inactive APs and known third-party APs are displayed.3. Select the applicable APs.

hwc_mitigator.fmWorking with the MitigatorViewing the Scanner Status report9034530-04, September 2010HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 451 4. To delete the selected APs, click Delete marked APs.Note: The selected APs are deleted from the Mitigator database, not from the HiPath Wireless Controller database. You can delete the APs from the HiPath Wireless Controller database after you delete them from the Wireless AP Configuration Access Approval screen of the corresponding RF Data Collector Engine. You can also delete the selected third-party APs if they are removed from the corresponding VNS in the RF Collector Engine, or if that VNS has been deleted from the VNS list.10.8 Viewing the Scanner Status reportWhen the Mitigator is enabled, you can view a report on the connection status of the RF Data Collector Engines with the Analysis Engine. To view the Mitigator scanner engine status display:1. From the main menu, click Mitigator. The Mitigator screen is displayed.2. Click the Reports: Scanner Status. The Scanner Status report is displayed.The boxes display the IP address of the Data Collector engine. The status of the Data Collector engine is indicated by one of the following colors:•Green – The Analysis Engine has connection with the Data Collector on that HiPath Wireless Controller.• Yellow – The Analysis Engine has connected to the communication system of the other controller, but has not synchronized with the Data Collector. Ensure that the Data Collector is running on the remote controller.•Red – The Analysis Engine is aware of the Data Collector and attempting connection.

Working with the Mitigatorhwc_mitigator.fmViewing the Scanner Status report 9034530-04, September 2010452 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide If no box is displayed, the Analysis Engine is not attempting to connect with that Data Collector Engine.Note: If the box is displayed red and remains red, ensure your IP address is correctly set up to point to an active controller. If the box remains yellow, ensure the Data Collector is running on the remote controller.

hwc_reports.fm9034530-04, September 2010HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 453 Working with reports and displaysAvailable reports and displays11 Working with reports and displaysThis chapter describes the various reports and displays available in the HiPath Wireless Controller, Access Points and Convergence Software system.11.1 Available reports and displaysThe following displays are available in the HiPath Wireless Controller, Access Points and Convergence Software system:•Active Wireless APs•Active Clients by Wireless AP•Active Clients by VNS•All Active Clients•Active Wireless Load Groups•Policy Filter Statistics•Topology Filter Statistics•Topology Statistics•RADIUS Statistics•Wireless Controller Port Statistics•Wireless AP Availability•Wired Ethernet Statistics by Wireless AP•Wireless Statistics by Wireless AP•Admission Control Statistics by Wireless AP •Client Location in Mobility Zone•Mobility Tunnel Matrix•WDS VNS Wireless AP Statistics•External Connections Statistics•Remoteable VNS Information•System Information•Manufacturing Information

Working with reports and displayshwc_reports.fmViewing reports and displays 9034530-04, September 2010454 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide Note: The Client Location in Mobility Zone and Mobility Tunnel Matrix displays only appear if you have enabled the mobility manager function for the controller. Otherwise, the Agent Mobility Tunnel Matrix display is listed.11.2 Viewing reports and displaysTo view reports and displays:1. From the main menu, click Reports & Displays. The HiPath Reports & Displays screen is displayed. Note: The Client Location in Mobility Zone and Mobility Tunnel Matrix displays only appear if you have enabled the mobility manager function for the controller.2. In the List of Displays, click the display you want to view.

hwc_reports.fmWorking with reports and displaysViewing the Wireless AP availability display9034530-04, September 2010HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 455 Note: Statistics are expressed in respect to the AP. Therefore, Packets Sent indicates the packets the AP has sent to a client and Packets Rec’d indicates the packets the AP has received from a client.11.3 Viewing the Wireless AP availability displayIn session availability, the Wireless Availability report displays the state of both the tunnels — active tunnel and backup tunnel — on both the primary and secondary HiPath Wireless Controllers.The report uses the Color Legend to indicate the tunnel state:•Green – Wireless AP has established an active tunnel.•Blue – Wireless AP has established a backup tunnel.•Red – Wireless AP is not connected.In the report, each Wireless AP is represented by a box. •The label, Foreign or Local, indicates whether the Wireless AP is local or foreign on the HiPath Wireless Controller. •The color in the upper pane of the box represents the state of the tunnel that is established to the current HiPath Wireless Controller. Note: The current HiPath Wireless Controller is the one on which the Wireless AP Availability report is viewed.•The color in the lower pane of the box represents the state of the tunnel that is established with the other HiPath Wireless Controller. For the ease of understanding, take the example of the following scenario:

Working with reports and displayshwc_reports.fmViewing statistics for Wireless APs 9034530-04, September 2010456 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide •HWC1 and HWC2 are paired in session availability•A Wireless AP has established an active tunnel to HWC1. •The same Wireless AP has established a backup tunnel to HWC2. If you open the Wireless AP Availability report on HWC2, the report will appear as follows:In the above example, the circled Wireless AP has established a backup tunnel to the foreign (secondary) HiPath Wireless Controller, and an active tunnel to the local (Primary) HiPath Wireless Controller.11.4 Viewing statistics for Wireless APsSeveral displays are snapshots of activity at that point in time on a selected Wireless AP:•Wired Ethernet Statistics by Wireless AP•Wireless Statistics by Wireless AP•Active Clients by Wireless AP•WDS VNS Wireless AP Statistics•Admission Control Statistics by Wireless APThe statistics displayed are those defined in the 802.11 MIB, in the IEEE 802.11 standard.The following Wireless AP displays allow you to search for clients, either by user name, MAC address, or IP address that are associated to the Wireless APs. •Active Clients by Wireless AP•Active Clients by VNS•Admission Control Statistics by Wireless AP•All Active Clients

hwc_reports.fmWorking with reports and displaysViewing statistics for Wireless APs9034530-04, September 2010HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 457 You can also use the Select All and Deselect All buttons for selecting the Wireless AP on those displays.To view wired Ethernet statistics by Wireless AP:1. From the main menu, click Reports & Displays. The HiPath Reports & Displays screen is displayed. 2. Click the Wired Ethernet Statistics by Wireless AP display option. The Wired Ethernet Statistics by Wireless APs display opens in a new browser window.3. In the Wired Ethernet Statistics by Wireless APs display, click a registered Wireless AP to display its information.To view Wireless Statistics by Wireless AP:1. From the main menu, click Reports & Displays. The HiPath Reports & Displays screen is displayed. 2. Click the Wireless Statistics by Wireless AP display option. The Wireless Statistics by Wireless APs display opens in a new browser window.

Working with reports and displayshwc_reports.fmViewing statistics for Wireless APs 9034530-04, September 2010458 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 3. In the Wireless Statistics by Wireless APs display, click a registered Wireless AP to display its information. 4. Click the appropriate tab to display information for each Radio on the Wireless AP.5. To view information on the associated clients, click View Clients. The Associated Clients display opens in a new browser window.To view Active Clients by Wireless AP statistics:1. From the main menu, click Reports & Displays. The HiPath Reports & Displays screen is displayed. 2. Click the Active Clients by Wireless APs display option. The Active Clients by Wireless APs display opens in a new browser window.

Working with reports and displayshwc_reports.fmViewing statistics for Wireless APs 9034530-04, September 2010460 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide Note: The Rx RSSI value on the WDS VNS Wireless AP Statistics display represents the received signal strength (in dBm). To view Admission Control Statistics by Wireless AP:1. From the main menu, click Reports & Displays. The HiPath Reports & Displays screen is displayed. 2. Click the Admission Control Statistics by Wireless AP display option. The Admission Control Statistics by Wireless AP display opens in a new browser window.

hwc_reports.fmWorking with reports and displaysViewing load balance group statistics9034530-04, September 2010HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 461 3. In the Admission Control Statistics by Wireless AP display, click a registered Wireless AP to display its information:4. The Admission Control Statistics by Wireless AP lists the TSPEC statistics associated with this Wireless AP:•AC – Access class where TSPEC is applied, •Direction – Uplink, Downlink or Bidirectional,•MDR – Mean Data Rate•NMS – Nominal Packet Size•SBA – Surplus Bandwidth (ratio)The following statistics are of measured traffic:•Rate – Rate in 30 second intervals (uplink and downlink)• Violation – Number of bits in excess in the last 30 seconds (uplink and downlink)11.5 Viewing load balance group statisticsThe Active Wireless Load Groups report lists all load groups, and for the selected load group, all active AP radios. To view the Active Wireless Load Groups report:1. From the main menu, click Reports & Displays. The HiPath Reports & Displays screen is displayed. 2. Click the Active Wireless Load Groups report. The Active Wireless Load Groups report opens in a new browser window.

Working with reports and displayshwc_reports.fmViewing load balance group statistics 9034530-04, September 2010462 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide The statistics reported for each load balance group are:•Radios — Number of radio members•Clients — Total number of clients for all radio members• Average Load — Average load for the groupThe reported average load may not be correct in a failover situation. If some APs in the load balance group fail over the foreign controller, those APs will report to the foreign controller. The member APs will continue to use the member count for the whole group, but the member count displayed on the controller will be for only those APs that are reporting. Since the member count reported on the controller is not the complete set, the average will not be consistent with what the APs are using for the state determination.The statistics reported for each member of the load balance group are:•AP — AP name•Radio — Radio number•Load — Load value (number of clients currently associated with the AP)•State — Load state• Probes Declined• Auth/Assoc Requests Declined• Rebalance Event — Clients removed because of an over-loaded state

Working with reports and displayshwc_reports.fmViewing the System Information and Manufacturing Information displays 9034530-04, September 2010464 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 11.6 Viewing the System Information and Manufacturing Information displaysSystem Information – Displays system information including memory usage and CPU and board temperatures.Manufacturing Information – Displays manufacturing information including the card serial number and CPU type and frequency.To view system information:1. From the main menu, click Reports & Displays. The HiPath Reports & Displays screen is displayed. 2. Click the System Information display option. The System Information display opens in a new browser window.To view manufacturing information:1. From the main menu, click Reports & Displays. The HiPath Reports & Displays screen is displayed. 2. Click the Manufacturing Information display option. The Manufacturing Information display opens in a new browser window.

hwc_reports.fmWorking with reports and displaysViewing displays for the mobility manager9034530-04, September 2010HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 465 Note: In the latest models of the HiPath Wireless Controller C2400, the IXP2800 Network Processor in the NPE Card has been replaced by the new IXP2805 Network Processor. Consequently, the Manufacturing Information in all such latest models displays CPU Type as 2805. 11.7 Viewing displays for the mobility managerWhen a HiPath Wireless Controller has been configured as a mobility manager, two additional displays appear as options on the HiPath Reports & Displays screen:• Client Location in Mobility Zone – Displays the active wireless clients and their status• Mobility Tunnel Matrix – Displays a cross-connection view of the state of inter-controller tunnels, as well as relative loading for user distribution across the mobility domainNote: The Client Location in Mobility Zone and Mobility Tunnel Matrix displays only appear if the mobility manager function has been enabled for the controller. Otherwise, the Agent Mobility Tunnel Matrix display is listed.

Working with reports and displayshwc_reports.fmViewing displays for the mobility manager 9034530-04, September 2010466 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide To view mobility manager displays:1. From the main menu, click Reports & Displays. The HiPath Reports & Displays screen is displayed.2. Click the appropriate mobility manager display:•Client Location in Mobility Zone•Mobility Tunnel Matrix The colored status indicates the following:•Green – The mobility manager is in communication with an agent and the data tunnel has been successfully established.•Yellow – The mobility manager is in communication with an agent but the data tunnel is not yet successfully established.•Red – The mobility manager is not in communication with an agent and there is no data tunnel.Client Location in Mobility ZoneYou can do the following:•Sort this display by home or foreign controller•Search for a client by MAC address, user name, or IP address, and typing the search criteria in the box•Define the refresh rates for this display•Export this information as an xml file

hwc_reports.fmWorking with reports and displaysViewing reports9034530-04, September 2010HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 467 Mobility Tunnel Matrix•Provides connectivity matrix of mobility state•Provides a view of:•Tunnel state•If a tunnel between controllers is reported down, it is highlighted in red•If only a control tunnel is present, it is highlighted in yellow•If data and control tunnels are fully established, it is highlighted in green•Tunnel Uptime•Number of clients roamed (Mobility loading)•Local controller loading•Mobility membership listA HiPath Wireless Controller is only removed from the mobility matrix if it is explicitly removed by the administrator from the Mobility permission list. If a particular link between controllers, or the controller is down, the corresponding matrix connections are identified in red color to identify the link.The Active Clients by VNS report for the controller on which the user is home (home controller) will display the known user characteristics (IP, statistics, etc.). On the foreign controller, the Clients by VNS report does not show users that have roamed from other controllers, since the users remain associated with the home controller's VNS.The Active Clients by AP report on each controller will show both the loading of local and foreign users (users roamed from other controllers) that are taking resources on the AP.Note: Although you can set the screen refresh period less than 30 seconds, the screen will not be refreshed quicker than 30 seconds. The screen will be refreshed according to the value you set only if you set the value above 30 seconds. 11.8 Viewing reportsThe following reports are available in the HiPath Wireless Controller, Access Points and Convergence Software system:•Forwarding Table (routes defined on the Routing Protocols screens)•OSPF Neighbor (if OSPF is enabled on the Routing Protocols screens)

Working with reports and displayshwc_reports.fmViewing reports 9034530-04, September 2010468 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide •OSPF Linkstate (if OSPF is enabled on the Routing Protocols screens)•AP Inventory (a consolidated summary of Wireless AP setup)To view reports:1. From the main menu, click Reports & Displays. The HiPath Reports & Displays screen is displayed. 2. In the Reports list, click the report you want to view.Note: The AP Inventory report opens in a new browser window. All other reports appear in the current browser window.The following is an example of a Forwarding Table report:Note: If you open only automatically refreshed reports, the Web management session timer will not be updated or reset. Your session will eventually time out.The following is an example of the Wireless AP Inventory report:

Working with reports and displayshwc_reports.fmViewing reports 9034530-04, September 2010470 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide Rb 802.11b protocol enabled. Possible values are on or off.Rg 802.11g protocol enabled. Possible values are on or off.Rn 802.11n protocol enabled. Possible values are on or off.DP DTIM period BP Beacon PeriodRT RTS ThresholdFT Fragmentation ThresholdReq Ch Channel served by the corresponding radio.Ch / Tx Channel TxAj Tx power level, in decibelsTxMn Minimum Tx power, in decibelsTxMx Maximum Tx power, in decibelsDom RF domainMnBR Minimum Basic Rate (For more information, see the Wireless AP radio configuration tabs.)MxBR Maximum Basic RateMxOR Maximum Operational RateRxDV Receive DiversityTxDV Tx DiversityPmb Preamble (long, short)PM Protection Mode PR Protection RatePT Protection TypeVNS Name: MAC Also called BSSID, this is the MAC address of a (virtual) wireless interface on which the Wireless AP serves a BSS/VNS. There could be 8 per radio.11n Channel Width 20MHz, 40MHz, or auto11n Guard Interval If 11n Channel Width is 40MHz, long or short11n Channel Bonding Enabled only if 11n Channel Width is 40MHz11n Protection Mode Protects high throughput transmissions on primary channels from non-11n APs and clients. Enabled or disabled.Failure Maintn. Maintain MU sessions on Wireless AP when the Wireless AP loses the connection to the HiPath Wireless Controller.Assn Assignment (address assignment method) IP Address Wireless AP's IP address if statically configured (same as the Static Values radio button on the AP Static Configuration screen).Netmask If the Wireless AP's IP address is configured statically, the net mask that is statically configured for the Wireless AP. Column Name DescriptionTable 38 AP Inventory report columns (Continuation)

hwc_reports.fmWorking with reports and displaysCall Detail Records (CDRs)9034530-04, September 2010HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 471 To export and save a report in XML:1. On the report screen, click Export. A Windows File Download dialog is displayed.2. Click Save. A Windows Save As dialog is displayed.Note: If your default XML viewer is Internet Explorer or Netscape, clicking Open will open the exported data to your display screen. You must right-click to go back to the export display. The XML data file will not be saved to your local drive.3. Browse to the location where you want to save the exported XML data file, and in the File name box enter an appropriate name for the file.4. Click Save. The XML data file is saved in the specified location.11.9 Call Detail Records (CDRs)You can configure the HiPath Wireless Controller to generate Call Detail Records (CDRs), which contain usage information about each wireless session per VNS. For more information on how to configure the HiPath Wireless Controller to generate CDRs, refer to Section 6.9.3.2, “Defining accounting methods for a WLAN Service”, on page 348.CDRs are located in a CDR directory on the HiPath Wireless Controller. To access the CDR file, you must first back up the file on the local drive, and then upload it to a remote server. After the CDR file is uploaded to a remote server, you can work with the file to view CDRs or import the records to a reporting tool. You can back up and upload the file on the remote server either via the HiPath Wireless Assistant (GUI) or CLI. Gateway If the Wireless AP's IP address is configured statically, the IP address of the gateway router that the Wireless AP will use.TLS 802.1x EAP-TLS authentication configurationPEAP 802.1x PEAP authentication configurationHWC Search List The list of IP addresses that the Wireless AP is configured to try to connect to in the event that the current connection to the HiPath Wireless Controller is lost.Column Name DescriptionTable 38 AP Inventory report columns (Continuation)

Working with reports and displayshwc_reports.fmCall Detail Records (CDRs) 9034530-04, September 2010472 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 11.9.1 CDR files naming conventionCDRs are written to a file on the HiPath Wireless Controller. The filename is based on the creation time of the CDR file with the following format: YYYYMMDDhhmmss.<ext>• YYYY — Four digit year•MM — Two digit month, padded with a leading zero if the month number is less than 10•DD — Two digit day of the month, padded with a leading zero if the day number is less than 10•hh — Two digit hour, padded with a leading zero if the hour number is less than 10•mm — Two digit minute, padded with a leading zero if the minute number is less than 10•ss — Two digit second, padded with a leading zero if the second number is less than 10•<ext> — File extension, either .work or .dat11.9.2 CDR file typesTwo types of CDR files exist in the CDR directory on the HiPath Wireless Controller C2400:•.work — The active file that is being updated by the accounting system. The file is closed and renamed with the .dat extension when it attains its maximum size (16 MB) or it has been open for the maximum allowed duration (12 hours). You can back up and copy the .work file from the HiPath Wireless Controller to a remote server.•.dat — The inactive file that contains the archived account records. You can back up and copy the .dat file from the HiPath Wireless Controller to a remote server.Note: The CDR directory on the HiPath Wireless Controller only has two files — a .work file and a .dat file. When the .work file attains its maximum size of 16 MB, or it has been open for 12 hours, it is saved as a .dat file. This new .dat file overwrites the existing .dat file. If you want to copy the existing .dat file, you must do so before it is overwritten by the new .dat file.

Working with reports and displayshwc_reports.fmCall Detail Records (CDRs) 9034530-04, September 2010474 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 11.9.4 Viewing CDRsThe following is a high-level overview of how to view CDRs:1. Back up the CDR files on the local drive of the HiPath Wireless Controller.2. Copy the CDR files from the HiPath Wireless Controller to the remote server.3. Unzip the file.4. Download the CDR files from the remote server to view CDRs.Note: You cannot access the CDR files directly from the CDR directory. Siemens-VNS-Name The VNS name on which the session took place.Siemens-SSID The SSID name on which the session took place.Acct-Session-Time The number of seconds the user has received the service.Acct-Output-Packets The number of packets that were sent to the port in the course of delivering this service to a framed user.Acct-Input-Packets The number of packets that have been received from the port over the course of this service being provided to a Framed User.Acct-Output-Octets The number of octets that were sent to the port in the course of delivering the service.Acct-Input-Octets The number of octets that were received from the port over the course of the service.Acct-Terminate-Cause Indicates how the session was terminated. The field displays one of the following values: •1 – User Request 4 – Idle Timeout•5 – Session Timeout•6 – Admin Reset•11 – NAS Reboot•16 – Callback•17 – User ErrorAuthenticated_time Indicates the time at which the client was authenticated. The time is in the following format: Date hh:mm:ss. For example, April 21 2008 14:50:24Disassociation_time Indicates the time at which the client was disassociated from the Wireless AP. The time is in the following format: Date hh:mm:ss. For example, April 21 2008 14:57:20.CDR Records DescriptionTable 39 CDR Records and their description (Continuation)

Working with reports and displayshwc_reports.fmCall Detail Records (CDRs) 9034530-04, September 2010476 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 5. To close the window, click Close. The backed up file is displayed in the Available Backups box.Note: The .work and .dat files are zipped into a single file.6. To upload a backup, in the Upload Backup section, do the following:•Protocol – Select the file transfer protocol you want to use to upload the backup file, SCP or FTP.•Server – Type the IP address of the server where the backup will be stored.• User ID – Type the user ID to log in to the server.• Password – The password to log in to the server.• Confirm – The password to confirm the password.• Directory – The directory in which you want to upload the CDR file.• Filename – Type the zipped CDR file name. Note: After you back up CDRs, the zipped CDR file name is selected by default in the Filename box.7. In the Upload Backup section, click Upload. The .zip file is uploaded on to the server.8. Unzip the file. The two CDR files — .work and .dat — are visible on the server.9. To view CDRs, download the files.

Working with reports and displayshwc_reports.fmCall Detail Records (CDRs) 9034530-04, September 2010478 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide

hwc_ongoing.fm9034530-04, September 2010HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 479 Performing system administrationPerforming Wireless AP client management12 Performing system administrationThis chapter describes system administration processes, including:•Performing Wireless AP client management•Defining HiPath Wireless Assistant administrators and login groups•Configuring Web session timeouts12.1 Performing Wireless AP client managementThere are times when for business, service, or security reasons you want to cut the connection with a particular wireless device. You can view all the associated wireless devices, by MAC address, on a selected Wireless AP and do the following:•Disassociate a selected wireless device from its Wireless AP. •Add a selected wireless device's MAC address to a blacklist of wireless clients that will not be allowed to associate with the Wireless AP.•Backup and restore the HiPath Wireless Controller database. For more information, see the HiPath Wireless Controller, Access Points and Convergence Software Maintenance Guide.12.1.1 Disassociating a clientIn addition to the following procedure below, you can also disassociate wireless users directly from the Active Clients by VNS screen. For more information, see Chapter 11, “Working with reports and displays”.To disassociate a wireless device client:1. From the main menu, click Wireless AP Configuration. The Wireless AP Configuration screen is displayed.2. In the left pane, click Client Management. The Disassociate tab is displayed.

Performing system administrationhwc_ongoing.fmPerforming Wireless AP client management 9034530-04, September 2010480 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 3. In the Select AP list, click the AP that is connected to the client that you want to disassociate.4. In the Select Client(s) list, select the checkbox next to the client you want to disassociate.Note: You can search for a client by MAC Address, IP Address or User ID, by selecting the search parameters from the drop-down lists and typing a search string in the Search box and clicking Search. You can also use the Select All or Clear All buttons to help you select multiple clients.5. Click Disassociate. The client's session terminates immediately. 12.1.2 Blacklisting a client The Blacklist tab displays the current list of MAC addresses that are not allowed to associate. A client is added to the blacklist by selecting it from a list of associated APs or by typing its MAC address.To blacklist a wireless device client:1. From the main menu, click Wireless AP Configuration. The Wireless AP Configuration screen is displayed.2. In the left pane, click Client Management. The Disassociate tab is displayed.

hwc_ongoing.fmPerforming system administrationPerforming Wireless AP client management9034530-04, September 2010HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 481 3. In the Select AP list, click the AP that is connected to the client that you want to blacklist.4. In the Select Client(s) list, select the checkbox next to the client you want to blacklist, if applicable.Note: You can search for a client by MAC Address, IP Address or User ID, by selecting the search parameters from the drop-down lists and typing a search string in the Search box and clicking Search. You can also use the Select All or Clear All buttons to help you select multiple clients.5. Click Add to Blacklist. The selected wireless client's MAC address is added to the blacklist.To blacklist a wireless device client using its MAC address:1. From the main menu, click Wireless AP Configuration. The Wireless AP Configuration screen is displayed.2. In the left pane, click Client Management. The Disassociate tab is displayed.3. Click the Blacklist tab.

Performing system administrationhwc_ongoing.fmPerforming Wireless AP client management 9034530-04, September 2010482 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 4. To add a new MAC address to the blacklist, in the MAC Address box type the client’s MAC address. 5. Click Add. The client is displayed in the MAC Addresses list.Note: You can use the Select All or Clear All buttons to help you select multiple clients.6. To save your changes, click Save.To clear an address from the blacklist:1. From the main menu, click Wireless AP Configuration. The Wireless AP Configuration screen is displayed.2. In the left pane, click Client Management. The Disassociate tab is displayed.3. Click the Blacklist tab.4. To clear an address from the blacklist, select the corresponding checkbox in the MAC Addresses list. 5. Click Remove Selected. The selected client is removed from the list.Note: You can use the Select All or Clear All buttons to help you select multiple clients.6. To save your changes, click Save.

hwc_ongoing.fmPerforming system administrationDefining HiPath Wireless Assistant administrators and login groups9034530-04, September 2010HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 483 To import a list of MAC addresses for the blacklist:1. From the main menu, click Wireless AP Configuration. The Wireless AP Configuration screen is displayed.2. In the left pane, click Client Management. The Disassociate tab is displayed.3. Click the Blacklist tab.4. Click Browse and navigate to the file of MAC addresses you want to import and add to the blacklist.5. Click the file, and then click Import. The list of MAC addresses is imported.To export a list of MAC addresses for the blacklist:1. From the main menu, click Wireless AP Configuration. The Wireless AP Configuration screen is displayed.2. In the left pane, click Client Management. The Disassociate tab is displayed.3. Click the Blacklist tab.4. Click Export. The saved blacklist file is exported.5. To export the current blacklist, use the browser’s save option to save the file as a text (.txt) file. It is recommend that a descriptive file name is used.12.2 Defining HiPath Wireless Assistant administrators and login groupsYou can define the login user names and passwords for administrators that have access to the HiPath Wireless Assistant. You can also assign them to a login group — as full administrators, read-only administrators, or as GuestPortal managers. For each user added, you can define and modify a user ID and password. • Full administrators – Users assigned to this login group have full administrator access rights on the HiPath Wireless Controller. Full administrators can manage all aspects of the HiPath Wireless Controller, including GuestPortal user accounts.• Read-only administrators – Users assigned to this login group have read-only access rights on the HiPath Wireless Controller, including the GuestPortal user accounts.

$Performing system administrationhwc_ongoing.fmDefining HiPath Wireless Assistant administrators and login groups 9034530-04, September 2010484 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide • GuestPortal managers – Users assigned to this login group can only manage GuestPortal user accounts. Any user who logs on to the HiPath Wireless Controller and is assigned to this group can only access the GuestPortal Guest Administration page of the HiPath Wireless Assistant. Note: When adding or modifying a user, note the following password character constraints:• Allowed characters include A-Z a-z 0-9 ~!@#$%^&*()_+|-=\{}[];<>?,.• Characters not allowed include / ` ' " : and space is not valid.To add a HiPath Wireless Controller administrator to a login group:1. From the main menu, click Wireless Controller Configuration. The Wireless Controller Configuration screen is displayed.2. In the left pane, click Login Management. The Local Authentication tab is displayed.3. In the Group drop-down list, click one of the following:• Full Administrator – Users assigned to this login group have full administrator access rights on the HiPath Wireless Controller. Full administrators can manage GuestPortal user accounts.• Read-only Administrator – Users assigned to this login group have read-only access rights on the HiPath Wireless Controller.Read-only administrators have read access to the GuestPortal user accounts.$

Performing system administrationhwc_ongoing.fmConfiguring Web session timeouts 9034530-04, September 2010498 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 12.3 Configuring Web session timeoutsYou can configure the time period to allow Web sessions to remain inactive before timing out.To configure Web session timeouts:1. From the main menu, click Wireless Controller Configuration. The Wireless Controller Configuration screen is displayed.2. In the left pane, click Web Settings The Wireless Controller Web Management Settings screen is displayed. 3. In the Web Session Timeout box, type the time period to allow the Web session to remain inactive before it times out. This can be entered as hour:minutes, or as minutes. The range is 1 minute to 168 hours.4. In the GuestPortal Manager Web Session Timeout box, type the time period to allow the GuestPortal Web session to remain inactive before it times out. This can be entered as hour:minutes, or as minutes. The range is 1 minute to 168 hours.5. Select the Show WLAN names on the Wireless AP SSID list checkbox to allow the names of the WLAN services to appear in the SSID list for Wireless APs.6. To save your settings, click Save.Note: Screens that auto-refresh will time-out unless a manual action takes place prior to the end of the timeout period.

hwc_glossary.fm9034530-04, September 2010HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 499 GlossaryNetworking terms and abbreviations13 Glossary13.1 Networking terms and abbreviations Term ExplanationAAA Authentication, Authorization and Accounting. A system in IP-based networking to control what computer resources users have access to and to keep track of the activity of users over a network.Access Point (AP) A wireless LAN transceiver or ‘base station’ that can connect a wired LAN to one or many wireless devices. Ad-hoc mode An 802.11 networking framework in which devices or stations communicate directly with each other, without the use of an access point (AP). (Compare Infrastructure Mode)AES Advanced Encryption Standard (AES) is an algorithm for encryption that works at multiple network layers simultaneously. As a block cipher, AES encrypts data in fixed-size blocks of 128 bits. AES was created by the National Institute of Standards and Technology (NIST). AES is a privacy transform for IPSec and Internet Key Exchange (IKE). AES has a variable key length - the algorithm can specify a 128-bit key (the default), a 192-bit key, or a 256-bit key. For the WPA2/802.11i implementation of AES, a 128 bit key length is used. AES encryption includes 4 stages that make up one round. Each round is then iterated 10, 12 or 14 times depending upon the bit-key size. For the WPA2/802.11i implementation of AES, each round is iterated 10 times. AES-CCMP AES uses the Counter-Mode/CBC-MAC Protocol (CCMP). CCM is a new mode of operation for a block cipher that enables a single key to be used for both encryption and authentication. The two underlying modes employed in CCM include Counter mode (CTR) that achieves data encryption and Cipher Block Chaining Message Authentication Code (CBC-MAC) to provide data integrity.ARP Address Resolution Protocol. A protocol used to obtain the physical addresses (such as MAC addresses) of hardware units in a network environment. A host obtains such a physical address by broadcasting an ARP request, which contains the IP address of the target hardware unit. If the request finds a unit with that IP address, the unit replies with its physical hardware address.Association A connection between a wireless device and an Access Point.asynchronous Asynchronous transmission mode (ATM). A start/stop transmission in which each character is preceded by a start signal and followed by one or more stop signals. A variable time interval can exist between characters. ATM is the preferred technology for the transfer of images.BSS Basic Service Set. A wireless topology consisting of one Access Point connected to a wired network and a set of wireless devices. Also called an infrastructure network. See also IBSS.Captive Portal A browser-based authentication mechanism that forces unauthenticated users to a Web page. Sometimes called a ‘reverse firewall’.

Glossaryhwc_glossary.fmNetworking terms and abbreviations 9034530-04, September 2010500 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide CDR Call Data (Detail) RecordIn Internet telephony, a call detail record is a data record that contains information related to a telephone call, such as the origination and destination addresses of the call, the time the call started and ended, the duration of the call, the time of day the call was made and any toll charges that were added through the network or charges for operator services, among other details of the call. In essence, call accounting is a database application that processes call data from your switch (PBX, iPBX, or key system) via a CDR (call detail record) or SMDR (station message detail record) port. The call data record details your system's incoming and outgoing calls by thresholds, including time of call, duration of call, dialing extension, and number dialed. Call data is stored in a PC database CHAP Challenge-Handshake Authentication Protocol. One of the two main authentication protocols used to verify a user's name and password for PPP Internet connections. CHAP is more secure than PAP because it performs a three-way handshake during the initial link establishment between the home and remote machines. It can also repeat the authentication anytime after the link has been established. CLI Command Line Interface.Collision Two Ethernet packets attempting to use the medium simultaneously. Ethernet is a shared media, so there are rules for sending packets of data to avoid conflicts and protect data integrity. When two nodes at different locations attempt to send data at the same time, a collision will result. Segmenting the network with bridges or switches is one way of reducing collisions in an overcrowded network.Datagram A datagram is ”a self-contained, independent entity of data carrying sufficient information to be routed from the source to the destination computer without reliance on earlier exchanges between this source and destination computer and the transporting network.” (RFC1594). The term has been generally replaced by the term packet. Datagrams or packets are the message units that the Internet Protocol deals with and that the Internet transports. dBm An abbreviation for the power ratio in decibels (dB) of the measured power referenced to one milliwatt.Decapsulation See tunnelling.Device Server A specialized, network-based hardware device designed to perform a single or specialized set of server functions. Print servers, terminal servers, remote access servers and network time servers are examples of device servers.DHCP Dynamic Host Configuration Protocol. A protocol for assigning dynamic IP addresses to devices on a network. With dynamic addressing, a device can have a different IP address every time it connects to the network. In some systems, the device's IP address can even change while it is still connected. DHCP also supports a mix of static and dynamic IP addresses. DHCP consists of two components: a protocol for delivering host-specific configuration parameters from a DHCP server to a host and a mechanism for allocation of network addresses to hosts. (IETF RFC1531.)Option 78 specifies the location of one or more SLP Directory Agents. Option 79 specifies the list of scopes that a SLP Agent is configured to use.(RFC2610 - DHCP Options for Service Location Protocol)Term Explanation

hwc_glossary.fmGlossaryNetworking terms and abbreviations9034530-04, September 2010HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 501 Directory Agent (DA) A method of organizing and locating the resources (such as printers, disk drives, databases, e-mail directories, and schedulers) in a network. Using SLP, networking applications can discover the existence, location and configuration of networked devices. With Service Location Protocol, client applications are 'User Agents' and services are advertised by 'Service Agents'. The User Agent issues a multicast 'Service Request' (SrvRqst) on behalf of the client application, specifying the services required. The User Agent will receive a Service Reply (SrvRply) specifying the location of all services in the network which satisfy the request. For larger networks, a third entity, called a 'Directory Agent', receives registrations from all available Service Agents. A User Agent sends a unicast request for services to a Directory Agent (if there is one) rather than to a Service Agent.(SLP version 2, RFC2608, updating RFC2165)Diversity antenna and receiver The AP has two antennae. Receive diversity refers to the ability of the AP to provide better service to a device by receiving from the user on which ever of the two antennae is receiving the cleanest signal. Transmit diversity refers to the ability of the AP to use its two antenna to transmit on a specific antenna only, or on a alternate antennae. The antennae are called diversity antennae because of this capability of the pair.DNS Domain Name ServerDSSS Direct-Sequence Spread Spectrum. A transmission technology used in Local Area Wireless Network (LAWN) transmissions where a data signal at the sending station is combined with a higher data rate bit sequence, or chipping code, that divides the user data according to a spreading ratio. The chipping code is a redundant bit pattern for each bit that is transmitted, which increases the signal's resistance to interference. If one or more bits in the pattern are damaged during transmission, the original data can be recovered due to the redundancy of the transmission. (Compare FHSS)DTIM DTIM delivery traffic indication message (in 802.11 standard)Dynamic WEP The IEEE introduced the concept of user-based authentication using per-user encryption keys to solve the scalability issues that surrounded static WEP. This resulted in the 802.1x standard, which makes use of the IETF's Extensible Authentication Protocol (EAP), which was originally designed for user authentication in dial-up networks. The 802.1x standard supplemented the EAP protocol with a mechanism to send an encryption key to a Wireless AP. These encryption keys are used as dynamic WEP keys, allowing traffic to each individual user to be encrypted using a separate key.EAP-TLSEAP-TTLS EAP-TLS Extensible Authentication Protocol - Transport Layer Security. A general protocol for authentication that also supports multiple authentication methods, such as token cards, Kerberos, one-time passwords, certificates, public key authentication and smart cards. IEEE 802.1x specifies how EAP should be encapsulated in LAN frames.In wireless communications using EAP, a user requests connection to a WLAN through an access point, which then requests the identity of the user and transmits that identity to an authentication server such as RADIUS. The server asks the access point for proof of identity, which the access point gets from the user and then sends back to the server to complete the authentication. EAP-TLS provides for certificate-based and mutual authentication of the client and the network. It relies on client-side and server-side certificates to perform authentication and can be used to dynamically generate user-based and session-based WEP keys.EAP-TTLS (Tunneled Transport Layer Security) is an extension of EAP-TLS to provide certificate-based, mutual authentication of the client and network through an encrypted tunnel, as well as to generate dynamic, per-user, per-session WEP keys. Unlike EAP-TLS, EAP-TTLS requires only server-side certificates. (See also PEAP)Term Explanation

Glossaryhwc_glossary.fmNetworking terms and abbreviations 9034530-04, September 2010502 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide ELA (OPSEC) Event Logging API (Application Program Interface) for OPSEC, a module in Check Point used to enable third-party applications to log events into the Check Point VPN-1/FireWall-1 management system. Encapsulation See tunnelling.ESS Extended Service Set (ESS). Several Basic Service Sets (BSSs) can be joined together to form one logical WLAN segment, referred to as an extended service set (ESS). The SSID is used to identify the ESS. (See BSS and SSID.)FHSS Frequency-Hopping Spread Spectrum. A transmission technology used in Local Area Wireless Network (LAWN) transmissions where the data signal is modulated with a narrowband carrier signal that ‘hops’ in a random but predictable sequence from frequency to frequency as a function of time over a wide band of frequencies. This technique reduces interference. If synchronized properly, a single logical channel is maintained. (Compare DSSS)Fit, thin and fat APs A thin AP architecture uses two components: an access point that is essentially a stripped-down radio and a centralized management controller that handles the other WLAN system functions. Wired network switches are also required. A fit AP, a variation of the thin AP, handles the RF and encryption, while the central management controller, aware of the wireless users' identities and locations, handles secure roaming, quality of service, and user authentication. The central management controller also handles AP configuration and management. A fat (or thick) AP architecture concentrates all the WLAN intelligence in the access point. The AP handles the radio frequency (RF) communication, as well as authenticating users, encrypting communications, secure roaming, WLAN management, and in some cases, network routing. FQDN Fully Qualified Domain Name. A ‘friendly’ designation of a computer, of the general form computer.[subnetwork.].organization.domain. The FQDN names must be translated into an IP address in order for the resource to be found on a network, usually performed by a Domain Name Server.FTM Forwarding Table ManagerFTP File Transfer ProtocolGateway In the wireless world, an access point with additional software capabilities such as providing NAT and DHCP. Gateways may also provide VPN support, roaming, firewalls, various levels of security, etc. Gigabit Ethernet The high data rate of the Ethernet standard, supporting data rates of 1 gigabit (1,000 megabits) per second.GUI Graphical User InterfaceHeartbeat message A heartbeat message is a UDP data packet used to monitor a data connection, polling to see if the connection is still alive.In general terms, a heartbeat is a signal emitted at regular intervals by software to demonstrate that it is still alive. In networking, a heartbeat is the signal emitted by a Level 2 Ethernet transceiver at the end of every packet to show that the collision-detection circuit is still connected.Host (1) A computer (usually containing data) that is accessed by a user working on a remote terminal, connected by modems and telephone lines. (2) A computer that is connected to a TCP/IP network, including the Internet. Each host has a unique IP address.Term Explanation

Glossaryhwc_glossary.fmNetworking terms and abbreviations 9034530-04, September 2010504 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide IPsecIPsec-ESPIPsec-AHInternet Protocol security (IPSec) Internet Protocol security Encapsulating Security Payload (IPsec-ESP). The encapsulating security payload (ESP) encapsulates its data, enabling it to protect data that follows in the datagram.Internet Protocol security Authentication Header (IPsec-AH). AH protects the parts of the IP datagram that can be predicted by the sender as it will be received by the receiver.IPsec is a set of protocols developed by the IETF to support secure exchange of packets at the IP layer. IPsec has been deployed widely to implement Virtual Private Networks (VPNs). IPsec supports two encryption modes: Transport and Tunnel. Transport mode encrypts only the data portion (payload) of each packet, but leaves the header untouched. The more secure Tunnel mode encrypts both the header and the payload. On the receiving side, an IPSec-compliant device decrypts each packet. For IPsec to work, the sending and receiving devices must share a public key. This is accomplished through a protocol known as Internet Security Association and Key Management Protocol/Oakley (ISAKMP/Oakley), which allows the receiver to obtain a public key and authenticate the sender using digital certificates. isochronous Isochronous data is data (such as voice or video) that requires a constant transmission rate, where data must be delivered within certain time constraints. For example, multimedia streams require an isochronous transport mechanism to ensure that data is delivered as fast as it is displayed and to ensure that the audio is synchronized with the video. Compare: asynchronous processes in which data streams can be broken by random intervals, and synchronous processes, in which data streams can be delivered only at specific intervals. ISP Internet Service Provider.IV IV (Initialization Vector), part of the standard WEP encryption mechanism that concatenates a shared secret key with a randomly generated 24-bit initialization vector. WPA with TKIP uses 48-bit IVs, an enhancement that significantly increases the difficulty in cracking the encryption. (See WPA and TKIP)LAN Local Area Network.License installationLSA Link State Advertisements received by the currently running OSPF process. The LSAs describe the local state of a router or network, including the state of the router's interfaces and adjacencies. See also OSPF.MAC Media Access Control layer. One of two sublayers that make up the Data Link Layer of the OSI model. The MAC layer is responsible for moving data packets to and from one Network Interface Card (NIC) to another across a shared channel.MAC address Media Access Control address. A hardware address that uniquely identifies each node of a network.MIB Management Information Base is a formal description of a set of network objects that can be managed using the Simple Network Management Protocol (SNMP). The format of the MIB is defined as part of the SNMP. A MIB is a collection of definitions defining the properties of a managed object within a device. Every managed device keeps a database of values for each of the definitions written in the MIB. Definition of the MIB conforms to RFC1155 (Structure of Management Information). MIC Message Integrity Check or Code (MIC), also called ‘Michael’, is part of WPA and TKIP. The MIC is an additional 8-byte code inserted before the standard 4-byte integrity check value (ICV) that is appended in by standard WEP to the 802.11 message. This greatly increases the difficulty in carrying out forgery attacks. Both integrity check mechanisms are calculated by the receiver and compared against the values sent by the sender in the frame. If the values match, there is assurance that the message has not been tampered with. (See WPA, TKIP and ICV).Term Explanation

Glossaryhwc_glossary.fmNetworking terms and abbreviations 9034530-04, September 2010506 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide OSI Layer 2 At the Data Link layer (OSI Layer 2), data packets are encoded and decoded into bits. The data link layer has two sublayers: •the Logical Link Control (LLC) layer controls frame synchronization, flow control and error checking•The Media Access Control (MAC) layer controls how a computer on the network gains access to the data and permission to transmit it. OSI Layer 3 The Network layer (OSI Layer 3) provides switching and routing technologies, creating logical paths, known as virtual circuits, for transmitting data from node to node. Routing and forwarding are functions of this layer, as well as addressing, internetworking, error handling, congestion control and packet sequencing.OSPF Open Shortest Path First, an interior gateway routing protocol developed for IP networks based on the shortest path first or link-state algorithm. Routers use link-state algorithms to send routing information to all nodes in an internetwork by calculating the shortest path to each node based on a topography of the Internet constructed by each node. Each router sends that portion of the routing table (keeps track of routes to particular network destinations) that describes the state of its own links, and it also sends the complete routing structure (topography). Using OSPF, a host that obtains a change to a routing table or detects a change in the network immediately multicasts the information to all other hosts in the network so that all will have the same routing table information. The host using OSPF sends only the part that has changed, and only when a change has taken place. (RFC2328)OUI Organizationally Unique Identifier (used in MAC addressing).Packet The unit of data that is routed between an origin and a destination on the Internet or any other packet-switched network. When any file is sent from one place to another on the Internet, the Transmission Control Protocol (TCP) layer of TCP/IP divides the file into packets. Each packet is separately numbered and includes the Internet address of the destination. The individual packets for a given file may travel different routes through the Internet. When they have all arrived, they are reassembled into the original file (by the TCP layer at the receiving end). PAP Password Authentication Protocol is the most basic form of authentication, in which a user's name and password are transmitted over a network and compared to a table of name-password pairs. Typically, the passwords stored in the table are encrypted. (See CHAP).PDU Protocol Data Unit. A data object exchanged by protocol machines (such as management stations, SMUX peers, and SNMP agents) and consisting of both protocol control information and user data. PDU is sometimes used as a synonym for “packet''. PEAP PEAP (Protected Extensible Authentication Protocol) is an IETF draft standard to authenticate wireless LAN clients without requiring them to have certificates. In PEAP authentication, first the user authenticates the authentication server, then the authentication server authenticates the user. If the first phase is successful, the user is then authenticated over the SSL tunnel created in phase one using EAP-Generic Token Card (EAP-GTC) or Microsoft Challenged Handshake Protocol Version 2 (MSCHAP V2). (See also EAP-TLS).PHP server Hypertext PreprocessorPKI Public Key InfrastructurePoE Power over Ethernet. The Power over Ethernet standard (802.3af) defines how power can be provided to network devices over existing Ethernet connection, eliminating the need for additional external power supplies.POST Power On Self Test, a diagnostic testing sequence performed by a computer to determine if its hardware elements are present and powered on. If so, the computer begins its boot sequence.Term Explanation

Glossaryhwc_glossary.fmNetworking terms and abbreviations 9034530-04, September 2010508 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide SLP Service Location Protocol. A method of organizing and locating the resources (such as printers, disk drives, databases, e-mail directories, and schedulers) in a network. Using SLP, networking applications can discover the existence, location and configuration of networked devices. With Service Location Protocol, client applications are 'User Agents' and services are advertised by 'Service Agents'. The User Agent issues a multicast 'Service Request' (SrvRqst) on behalf of the client application, specifying the services required. The User Agent will receive a Service Reply (SrvRply) specifying the location of all services in the network which satisfy the request. For larger networks, a third entity, called a 'Directory Agent', receives registrations from all available Service Agents. A User Agent sends a unicast request for services to a Directory Agent (if there is one) rather than to a Service Agent.(SLP version 2, RFC2608, updating RFC2165)SMI Structure of Management Information. A hierarchical tree structure for information that underlies Management Information Bases (MIBs), and is used by the SNMP protocol. Defined in RFC1155 and RFC1442 (SNMPv2).SMT (802.11) Station ManagemenT. The object class in the 802.11 MIB that provides the necessary support at the station to manage the processes in the station such that the station may work cooperatively as a part of an IEEE 802.11 network. The four branches of the 802.11 MIB are:•dot11smt - objects related to station management and local configuration•dot11mac - objects that report/configure on the status of various MAC parameters•dot11res - Objects that describe available resources•dot11phy - Objects that report on various physical items.SNMP Simple Network Management Protocol. A set of protocols for managing complex networks. SNMP works by sending messages, called protocol data units (PDUs), to different parts of a network. SNMP-compliant devices, called agents, store data about themselves in Management Information Bases (MIBs) and return this data to the SNMP requesters.SNMP includes a limited set of management commands and responses. The management system issues Get, GetNext and Set messages to retrieve single or multiple object variables or to establish the value of a single variable. The managed agent sends a Response message to complete the Get, GetNext or Set. SNMP trap An event notification sent by the SNMP managed agent to the management system to identify the occurrence of conditions (such as a threshold that exceeds a predetermined value).SSH Secure Shell, sometimes known as Secure Socket Shell, is a Unix-based command interface and protocol for securely getting access to a remote computer. SSH is a suite of three utilities - slogin, ssh, and scp - secure versions of the earlier UNIX utilities, rlogin, rsh, and rcp. With SSH commands, both ends of the client/server connection are authenticated using a digital certificate, and passwords are protected by being encrypted.SSID Service Set Identifier. A 32-character unique identifier attached to the header of packets sent over a Wireless LAN that acts as a password when a wireless device tries to connect to the Basic Service Set (BSS). Several BSSs can be joined together to form one logical WLAN segment, referred to as an extended service set (ESS). The SSID is used to identify the ESS. In 802.11 networks, each Access Point advertises its presence several times per second by broadcasting beacon frames that carry the ESS name (SSID). Stations discover APs by listening for beacons, or by sending probe frames to search for an AP with a desired SSID. When the station locates an appropriately-named Access Point, it sends an associate request frame containing the desired SSID. The AP replies with an associate response frame, also containing the SSID. Some APs can be configured to send a zero-length broadcast SSID in beacon frames instead of sending their actual SSID. The AP must return its actual SSID in the probe response.Term Explanation

Glossaryhwc_glossary.fmNetworking terms and abbreviations 9034530-04, September 2010510 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide ToS / DSCP ToS (Type of Service) / DSCP (Diffserv Codepoint). The ToS/DSCP box contained in the IP header of a frame is used by applications to indicate the priority and Quality of Service (QoS) for each frame. The level of service is determined by a set of service parameters which provide a three way trade-off between low-delay, high-reliability, and high-throughput. The use of service parameters may increase the cost of service. TSN Transition Security Network. A subset of Robust Security Network (RSN), which provides an enhanced security solution for legacy hardware. The Wi-Fi Alliance has adopted a solution called Wireless Protected Access (WPA), based on TSN. RSN and TSN both specify IEEE 802.1x authentication with Extensible Authentication Protocol (EAP).Tunnelling Tunnelling (or encapsulation) is a technology that enables one network to send its data via another network's connections. Tunnelling works by encapsulating packets of a network protocol within packets carried by the second network. The receiving device then decapsulates the packets and forwards them in their original format.UDP User Datagram Protocol. A connectionless protocol that, like TCP, runs on top of IP networks. Unlike TCP/IP, UDP/IP provides very few error recovery services, offering instead a direct way to send and receive packets over an IP network. It is used primarily for broadcasting messages over a network.U-NII Unlicensed National Information Infrastructure. Designated to provide short-range, high-speed wireless networking communication at low cost, U-NII consists of three frequency bands of 100 MHz each in the 5 GHz band: 5.15-5.25GHz (for indoor use only), 5.25-5.35 GHz and 5.725-5.825GHz. The three frequency bands were set aside by the FCC in 1997 initially to help schools connect to the Internet without the need for hard wiring. U-NII devices do not require licensing. URL Uniform Resource Locator. the unique global address of resources or files on the World Wide Web. The URL contains the name of the protocol to be used to access the file resource, the IP address or the domain name of the computer where the resource is located, and a pathname -- a hierarchical description that specifies the location of a file in that computer. VLAN Virtual Local Area Network. A network of computers that behave as if they are connected to the same wire when they may be physically located on different segments of a LAN. VLANs are configured through software rather than hardware, which makes them extremely flexible. When a computer is physically moved to another location, it can stay on the same VLAN without any hardware reconfiguration. The standard is defined in IEEE 802.1Q - Virtual LANs, which states that 'IEEE 802 Local Area Networks (LANs) of all types may be connected together with Media Access Control (MAC) Bridges, as specified in ISO/IEC 15802-3. This standard defines the operation of Virtual LAN (VLAN) Bridges that permit the definition, operation and administration of Virtual LAN topologies within a Bridged LAN infrastructure.”VNS Virtual Network Services (VNS). A Siemens specific technique that provides a means of mapping wireless networks to a wired topology.VoIP Voice Over Internet Protocol. An internet telephony technique. With VoIP, a voice transmission is cut into multiple packets, takes the most efficient path along the Internet and is reassembled when it reaches the destination.VPN Virtual Private Network. A private network that is constructed by using public wires to connect nodes. These systems use encryption and other security mechanisms to ensure that only authorized users can access the network and that the data cannot be intercepted.VSA Vendor Specific Attribute, an attribute for a RADIUS server defined by the manufacturer.(compared to the RADIUS attributes defined in the original RADIUS protocol RFC2865). A VSA attribute is defined in order that it can be returned from the RADIUS server in the Access Granted packet to the Radius Client.Term Explanation

Glossaryhwc_glossary.fmController, Access Points and Convergence Software terms and abbreviations 9034530-04, September 2010512 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 13.2 Controller, Access Points and Convergence Software terms and abbreviationsTerm ExplanationCTP CAPWAP Tunnelling Protocol (CTP). The Wireless AP uses a UDP (User Datagram Protocol) based tunnelling protocol called CAPWAP Tunnelling Protocol (CTP) to encapsulate the 802.11 packets and forward them to the HiPath Wireless Controller. The CTP protocol defines a mechanism for the control and provisioning of Wireless APs (CAPWAP) through centralized access controllers. In addition, it provides a mechanism providing the option to tunnel the mobile client data between the access point and the access controller. DRM (dynamic radio/RF management) Dynamic Radio Management (DRM) functionality of the HiPath Wireless Controller is used to help establish the optimum radio configuration for your Wireless APs. DRM is enabled by default. The HiPath Wireless Controller’s DRM:•Adjusts power levels to balance coverage if another Wireless AP, which is assigned to the same SSID and is on the same channel, is added to or leaves the network.•Allows wireless clients to be moved to another Wireless AP if the load is too high.•Scans automatically for a channel, using a channel selection algorithm.•Avoids other WLANs by reducing transmit power whenever other Wireless APs with the same channel, but different SSIDs are detected.The DRM feature is comprised of two functions:•Auto Channel Selection (ACS) – ACS provides an easy way to optimize channel arrangement based on the current situation in the field. ACS provides an optimal solution only if it is triggered on all Wireless APs in a deployment. Triggering ACS on a single Wireless AP or on a subset of Wireless APs provides a useful but suboptimal solution. Also, ACS only relies on the information observed at the time it is triggered. Once a Wireless AP has selected a channel, it will remain operating on that channel until the user changes the channel or triggers ACS. •Auto Tx Power Control (ATPC) – ATPC guarantees your LAN a stable RF environment by automatically adapting transmission power signals according to the coverage provided by the Wireless APs. ATPC can be either enabled or disabled.HiPath Wireless Controller The HiPath Wireless Controller is a rack-mountable network device designed to be integrated into an existing wired Local Area Network (LAN). It provides centralized control over all access points (both Wireless APs and third-party access points) and manages the network assignment of wireless device clients associating through access points. Langley Langley is a Controller, Access Points and Convergence Software term for the inter-process messaging infrastructure on the HiPath Wireless Controller.Mitigator The Mitigator is a mechanism that assists in the detection of rogue access points. The feature has three components: (1) a radio frequency (RF) scanning task that runs on the Wireless AP, (2) an application called the Data Collector on the HiPath Wireless Controller that receives and manages the RF scan messages sent by the Wireless AP, (3) an Analysis Engine on the HiPath Wireless Controller that processes the scan data.Mobility manager (and mobility agent) The technique in Controller, Access Points and Convergence Software by which multiple HiPath Wireless Controllers on a network can discover each other and exchange information about a client session. This enables a wireless device user to roam seamlessly between different Wireless APs on different HiPath Wireless Controllers, to provide mobility to the wireless device user.One HiPath Wireless Controller on the network must be designated as the mobility manager. All other HiPath Wireless Controllers are designated as mobility agents. Relying on SLP, the mobility manager registers with the Directory Agent and the mobility agents discover the location of the mobility manager.

hwc_glossary.fmGlossaryController, Access Points and Convergence Software terms and abbreviations9034530-04, September 2010HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 513 Data Collector The Data Collector is an application on the HiPath Wireless Controller that receives and manages the Radio Frequency (RF) scan messages sent by the Wireless AP. This application is part of the Mitigator technique, working in conjunction with the scanner mechanism and the Analysis Engine to assist in detecting rogue access points.Virtual Network Services (VNS) The Virtual Network Services (VNS) technique is Siemens's means of mapping wireless networks to the topology of an existing wired network. When you set up Virtual Network Services (VNS) on the HiPath Wireless Controller, you are defining subnets for groups of wireless users. This VNS definition creates a virtual IP subnet where the HiPath Wireless Controller acts as a default gateway for wireless devices. This technique enables policies and authentication to be applied to the groups of wireless users on a VNS, as well as the collecting of accounting information. When a VNS is set up on the HiPath Wireless Controller, one or more Wireless APs (by radio) are associated with it. A range of IP addresses is set aside for the HiPath Wireless Controller's DHCP server to assign to wireless devices.Wireless AP The Wireless AP is a wireless LAN thin access point (IEEE 802.11) provided with unique software that allows it to communicate only with a HiPath Wireless Controller. (A thin access point handles the radio frequency (RF) communication but relies on a controller to handle WLAN elements such as authentication.) The Wireless AP also provides local processing such as encryption. The Wireless AP is a dual-band access point, with 802.11a/b/g/n radios.Term Explanation

Glossaryhwc_glossary.fmController, Access Points and Convergence Software terms and abbreviations 9034530-04, September 2010514 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide

hwc_appendixa.fm9034530-04, September 2010HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 515 HiPath Wireless Controller’s physical descriptionHiPath Wireless Controller C5110A HiPath Wireless Controller’s physical descriptionThis appendix describes the physical description and LEDs, SSD codes and their description of the following models of the HiPath Wireless Controller:•HiPath Wireless Controller C5110•HiPath Wireless Controller C4110•HiPath Wireless Controller C2400•HiPath Wireless Controller C20•HiPath Wireless Controller C20N•HiPath Wireless Controller CRBT8210/8110A.1 HiPath Wireless Controller C5110 A.1.1 Front panelFigure 29 depicts the front panel features of the HiPath Wireless Controller C5110. The following table describes the features by callout.Figure 29 HiPath Wireless Controller C5110 front panelCall out Feature Function1 Power-on button Controls the DC power supply output to the system.2 NMI button Not used in the current release.3 USB connectors (2) Connects USB 2.0-compliant devices to the system. For more information, see the Note following Figure 29.3 Video connector Not used in the current release.5 LCD buttons Controls the LCD display. Two navigation buttons allow you to scroll left and right through the display. The select button controls whether the LCD backlight is on or off.

HiPath Wireless Controller’s physical descriptionhwc_appendixa.fmHiPath Wireless Controller C5110 9034530-04, September 2010516 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide Note: The HiPath Wireless Controller C5110 is equipped with four USB connectors — two on each front and back panel. However, the controller is capable of supporting only one USB device at a time, regardless of what USB connector the device is connected to. If you connect a second USB device while the first is already connected, the system will return an error.6 LCD display Provides system ID, status information and system error messages. The LCD display lights during normal system operation. Both the systems management software and the identification buttons located on the front and back of the system can cause the LCD to flash blue to identify a particular system. The LCD display lights amber when the system needs attention due to a problem with power supplies, fans, system temperature or hard drives.When the controller is performing a software upgrade and configuration, the LCD panel will display the word “Upgrade.”Note: If the system is connected to AC power and an error has been detected, the LCD displays amber lights regardless of whether the system has been powered on.7 Slot for DVD drive Not used in the current release.8 System Identification buttonThe identification buttons on the front and back panels can be used to locate a particular system within a rack. When one of the buttons is pushed, the blue system status indicator on the front and back blinks until one of the buttons is pushed again.9 Hard drive One 3.5 inch SATA 250 GB drive.Call out Feature Function

hwc_appendixa.fmHiPath Wireless Controller’s physical descriptionHiPath Wireless Controller C51109034530-04, September 2010HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 517 A.1.2 Back panelFigure 30 depicts the back panel features of the HiPath Wireless Controller C5110.Figure 30 HiPath Wireless Controller C5110 back panel Callout Feature Function 1 Serial port connector Console Port – Used to get into Rescue mode.2 NIC2 connector Data port, 10 GbE SR-XFP single port NIC - esa13 Video connector Not used in the current release4 USB connectors (2) Connects USB 2.0-compliant devices to the system. 5 10 GbE SR-XFP single port NIC connectorData port - esa26 1 GbE RJ45 connector Management port - Admin7 1 GbE RJ45 connector Data port – esa08 Not used Not used in the current release.9 System status indicator connector Not used in the current release.10 System status indicator The blue-colored system status indicator blinks to indicate the location of a particular system within a rack. The indicator continues to blink until one of the system identification buttons is pushed again.11 System identification button The identification buttons on the front and back panels can be used to locate a particular system within a rack. When one of these buttons is pushed, the blue system status indicator on the front and back blinks until one of the buttons is pushed again.12 AC Power supply 1 (PS1) AC Power Supply 1 and 2 combine to make a redundant power supply.13 AC Power supply 2 (PS2)

HiPath Wireless Controller’s physical descriptionhwc_appendixa.fmHiPath Wireless Controller C4110 9034530-04, September 2010518 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide A.2 HiPath Wireless Controller C4110For information on HiPath Wireless Controller C4110 hardware, see the HiPath Wireless Controller C4110 Quick Reference at http://www.enterasys.com/support/manuals.A.3 HiPath Wireless Controller C2400 A.3.1 Front panelThe HiPath Wireless Controller C2400 is composed of the following three cards:•Media/Persistent Storage Card•Network Processor Card•Host HiPath Wireless Controller CardFigure 31 depicts the front panel features of the HiPath Wireless Controller C2400.Figure 31 HiPath Wireless Controller C2400 front panel The HiPath Wireless Controller C2400 has five LED lights and two switches on its front panel.Reset switch Console portManagementRJ45 portMedia/Persistent storage cardNetwork Processor cardHost Controller cardConsole adapterLED lightsData portsDiagnostic switch Compact Flash slot

hwc_appendixa.fmHiPath Wireless Controller’s physical descriptionHiPath Wireless Controller C24009034530-04, September 2010HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 519 Figure 32 HiPath Wireless Controller’s C2400 LED lights and switchesThe description of the LED states and switches is provided below:•Reset Switch – Reboots the system.•RUN LED – Indicates the CPU’s initialization has completed and the system is ready to provide application level services. •ACT LED – Indicates the system’s software is in active running state.•WARNING/ERROR LEDs – Indicate a problem in the running state of the system. •When any of the alarm LEDs is lit, the seven segment display provides the corresponding code point for the error indication. When the system is fully active and running, the console displays the letter A as seen in Figure 32.•LCT Switch – The LCT button is used during the manufacturing process and is inactive otherwise.•INT LED – Not used in the current release.A.3.2 LED states and Seven Segment Display (SSD) codesTable 41 lists LED states and SSD codes during firmware initialization. Table 42 lists LED states and SSD codes during application initialization. Table 43 lists LED states and SSD codes during warning conditions. Table 44 lists LED states and SSD codes during error conditions. Reset switchWARNING LEDERROR LEDINT LEDLCT switchRUN LEDACT LEDSeven Segment Display

HiPath Wireless Controller’s physical descriptionhwc_appendixa.fmHiPath Wireless Controller C2400 9034530-04, September 2010520 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide Note: Although the Active LED will be lit Green during the firmware initialization, this LED state is irrelevant to the SSD display or the condition. Ignore the LED state during the firmware initialization.Active LED Warning LED Error LED SSD Code ConditionGreen 0 The processor has started and the firmware has taken control.Green 3 The Host Controller Card has failed to download Bootloader from Flash.Green 4 The system is checking firmware consistency.Green 5 The system is formatting memory.Green 6 The system is initializing load device.Note: If the SSD code is stuck at 6 for more than a minute, it implies that the Network Processor Card is installed in wrong slot.Green 9 The system is loading subsystem.Green b The system is starting the operation system. The system is active.Table 41 LED states and SSD codes during firmware initializationActive LED Warning LED Error LED SSD Code ConditionGreen 0 Application initialization started.Green C System configuration in progress.Green 1 Preparing Forwarding Engine initialization.Green 2 Initializing Forwarding Engine.Green 3 Completing application initialization.Green A Application initialization complete. System active.Green H System halted. Administrator requested halting of system.Table 42 LED states and SSD codes during application initializationActive LED Warning LED Error LED SSD Code ConditionGreen Yellow 1 High temperature reached.Green Yellow 2 Fan unit failure. Rotation counter indicates zero speed for one of the lateral trays. May be the result of fan tray removal.Table 43 LED states and SSD codes during warning conditions

HiPath Wireless Controller’s physical descriptionhwc_appendixa.fmHiPath Wireless Controller C20 9034530-04, September 2010522 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide A.3.3 Back panelFigure 33 depicts the back panel features of the HiPath Wireless Controller C2400.Figure 33 HiPath Wireless Controller C2400 back panelA.4 HiPath Wireless Controller C20A.4.1 Front panelFigure 34 depicts the front panel features of the HiPath Wireless Controller C20Figure 34 HiPath Wireless Controller C20 front panelNote: The hot swap lever is not enabled in the current release. Pulling the hot swap lever will not affect the normal operation if the HiPath Wireless Controller C20 is already running. However, if you attempt to reboot the HiPath Wireless Controller C20 with the hot swap lever pulled out, the controller will fail to reboot. If you pull the hot swap lever while the HiPath Wireless Controller C20 is in operation, the Hot Swap LED will light up.Redundant power suppliesPower switchesLAN portsManagementLEDsUSB serverUSB control Power switchReset buttonHot Swap lever

hwc_appendixa.fmHiPath Wireless Controller’s physical descriptionHiPath Wireless Controller C209034530-04, September 2010HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 523 The HiPath Wireless Controller C20 has four lights on its front panel.Figure 35 HiPath Wireless Controller C20 LED lightsThe functional definitions of the HiPath Wireless Controller C20 LEDs are provided below:•ACTIVITY LED – Indicates the CPU activity, including the amount of traffic carried to and from the Wireless APs.•STATUS LED – Indicates the normal state of the HiPath Wireless Controller as seen by the system’s software. This LED covers all stages of the HiPath Wireless Controller, ranging from restarting to shutting-down. As long as the HiPath Wireless Controller is running normally, this LED will remain lit. Note: When the system configuration is in progress, the Activity and Status LEDs are set to Amber and blink on a two-second interval.•HDD Activity LED – Reports Hard Drive Device (HDD) activity. •Hot Swap LED – Indicates that the hot swap lever on the HiPath Wireless Controller is pulled out.Activity LEDStatus LEDHDD Activity LEDHot Swap LED

HiPath Wireless Controller’s physical descriptionhwc_appendixa.fmHiPath Wireless Controller C20 9034530-04, September 2010524 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide A.4.2 LED statesThe description of the HiPath Wireless Controller C20 LED status and activity states is provided below.•LED 3 – HDD Activity LED – Orange/Amber•HDD Activity LED is off when HDD is not in use•HDD Activity LED is on when HDD is in use•LED 4 – Hot Swap LED – Blue•Solid Blue when the hot swap button is pulled outA.4.3 Back panelFigure 36 depicts the back panel features of the HiPath Wireless Controller C20.Figure 36 HiPath Wireless Controller C20 back panelStatus LED Activity LED ConditionBlinking Amber Green Power up (BIOS, POST)Blinking Amber (2 second rate) Blinking Amber (2 second rate) System configuration in progressOff Green System booting (failed to boot)Off Green Start up manager: task startedSolid Green Blinking Green Start up manager: task completes startup – all components activeSolid Amber Blinking Green A component fails to start or needs restarting. (startup manager task retrying that component)Green Blinking Red Possible hardware failure (no more retries)Solid Red Off A component fails (no more retries)Blinking Red Off System about to reset by watchdogSolid Red Solid Red System shutdown / halt (requires a manual reboot)Table 45 HiPath Wireless Controller C20 LED states and their descriptionPower Supply

hwc_appendixa.fmHiPath Wireless Controller’s physical descriptionHiPath Wireless Controller C20N9034530-04, September 2010HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 525 A.5 HiPath Wireless Controller C20NFor information on HiPath Wireless Controller C20N hardware, see the HiPath Wireless Controller Module for Enterasys Matrix ® N-Series, Hardware Installation Guide, at http://www.enterasys.com/support/manuals.A.6 HiPath Wireless Controller CRBT8210/8110A.6.1 Front panelFigure 37 depicts the front panel features of the HiPath Wireless Controller CRBT8210/8110. Table 46 describes the control button functions and Table 47 describes the LED status.Figure 37 HiPath Wireless Controller CRBT8210/8110 front panel A. Hard drive activity LED D. Status/Power LED G. Power buttonB. NIC 2 activity LED E. Reset button H. NIC2 connector (10/100/1000 Mbit) CRBT8110NIC2 RJ-45 connector (10/100/1000 Base-T) CRBT8210C. NIC 1 activity LED F. Console port connector I. NIC1 connector (10/100/1000 Mbit)NIC1 RJ-45 connector (10/100/1000 Base-T) CRBT8210Button FunctionPower Toggles the system power on/off.Reset Performs a soft system reboot.Table 46 Control button functions

HiPath Wireless Controller’s physical descriptionhwc_appendixa.fmHiPath Wireless Controller CRBT8210/8110 9034530-04, September 2010526 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide A.6.2 Back panelFigure 38 depicts the back panel features of the HiPath Wireless Controller CRBT8110.Figure 38 HiPath Wireless Controller CRBT8110 back panelNote: The HiPath Wireless Controller CRBT8110 is equipped with two USB connectors on the back panel. However, the controller is capable of supporting only one USB device at a time, regardless of what USB connector the device is connected to. If you connect a second USB device while the first is already connected, the system will return an error.LED FunctionNIC1 activityNIC2 activity •A continuous amber light indicates a link between the system and the network to which it is connected.•A blinking amber light indicates network activity.Status/Power •A continuous blue light indicates that the system has power applied to it.•No light indicates that the system does not have power applied to it.Hard drive disk status •A continuous blue light indicates a hard drive disk fault.•A blinking blue light indicates hard drive activity.Table 47 LED indicator statusA. USB connectors C. Power supplyB. Video connector D. Power connector

hwc_appendixa.fmHiPath Wireless Controller’s physical descriptionHiPath Wireless Controller CRBT8210/81109034530-04, September 2010HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 527 Figure 39 depicts the back panel features of the HiPath Wireless Controller CRBT8210.Figure 39 HiPath Wireless Controller CRBT8210 back panelA. Power supply B. Power connector

HiPath Wireless Controller’s physical descriptionhwc_appendixa.fmHiPath Wireless Controller CRBT8210/8110 9034530-04, September 2010528 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide

hwc_appendixb.fm9034530-04, September 2010HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 529 Regulatory informationB Regulatory informationWarning: Warnings identify essential information. Ignoring a warning can lead to problems with the application.This appendix provides regulatory information for the HiPath Wireless Controller C20N/C20/C2400/C4110/C5110 and the HiPath Wireless AP models:•AP 2610/2620 (AP26XX series)•AP 3605/3610/3620 (AP36XX series)Note: Throughout this appendix, the term ‘Wireless AP’ refers to both AP models (AP26XX series and AP36XX series). Specific AP models are only identified in this appendix where it is necessary to do so. Note: For technical specifications and certification information for the HiPath Wireless Outdoor AP, models AP 2650/2660, see the HiPath Wireless Outdoor AP Installation Guide.Configuration of the Wireless AP frequencies and power output are controlled by the regional software license and proper selection of the country during initial installation and set-up. Customers are only allowed to select the proper country from their licensed regulatory domain related to that customer’s geographic location, thus allowing the proper set-up of access points in accordance with local laws and regulations. The Wireless AP must not be operated until properly configured with the correct country setting or it may be in violation of the local laws and regulations.Warning: Changes or modifications made to the HiPath Wireless Controller or the Wireless APs which are not expressly approved by Siemens could void the user's authority to operate the equipment.Only authorized Siemens service personnel are permitted to service the system. Procedures that should be performed only by Siemens personnel are clearly identified in this guide.Note: The HiPath Wireless Controllers and the Wireless APs are in compliance with the European Directive 2002/95/EC on the restriction of the use of certain hazardous substances (RoHS) in electrical and electronic equipment.

Regulatory informationhwc_appendixb.fmHiPath Wireless Controller C20N/C20/C2400/C4110/C5110 9034530-04, September 2010530 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide B.1 HiPath Wireless Controller C20N/C20/C2400/C4110/C5110Conformance standards and directivesSafety•UL 60950-1 (U.S)•CSA C22.2 No.60950-01-03 (Canada)•2006/95/EC Low Voltage Directive (LVD)•EN 60950-1 (Europe)•IEC 60950-1 with applicable National Differences•AS/NZS 60950.1 (Australia/New Zealand)EMC (Emissions / Immunity)•FCC Part 15, Subpart B, Class A (North America)•ICES-003, Class A (Canadian Emissions)•2004/108/EC EMC Directive•EN 55022: Class A (European Emissions)•ENEN 55024: includes EN 61000-4-2,3,4,5,6,11 (European Immunity)•EN 61000-3-2: (Harmonics)•EN 61000-3-3: (Flicker)•IEC/CISPR 22: Class A (International Emissions)•IEC/CISPR 24: includes IEC/EN 61000-4-2,3,4,5,6,11 (International Immunity) •Australia/New Zealand AS/NZS 3548 via EU standards (ACMA)RoHS•European Directive 2002/95/EC

hwc_appendixb.fmRegulatory informationHiPath Wireless Controller C20N/C20/C2400/C4110/C51109034530-04, September 2010HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 531 B.1.1 Rack mounting your systemRefer to the following guidelines when setting up your HiPath Wireless Controllers and Wireless APs.Elevated operating ambientIf installed in a closed or multi-unit rack assembly, the operating ambient temperature of the rack environment may be greater than room ambient. Therefore, consideration should be given to installing the equipment in an environment compatible with the maximum ambient temperature (Tma) specified by the manufacturer.Reduced air flowInstallation of the equipment in a rack should be such that the amount of air flow required for safe operation of the equipment is not compromised.Mechanical loadingMounting of the equipment in the rack should be such that a hazardous condition is not achieved due to uneven mechanical loading.Circuit overloadingConsideration should be given to the connection of the equipment to the supply circuit and the effect that overloading of the circuits might have on over current protection and supply wiring. Appropriate consideration of equipment nameplate ratings should be used when addressing this concern.Reliable earthingReliable earthing of rack-mounted equipment should be maintained. Particular attention should be given to supply connections other than direct connections to the branch circuit (e.g. use of power strips).

Regulatory informationhwc_appendixb.fmWireless APs 26XX and 36XX 9034530-04, September 2010532 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide B.2 Wireless APs 26XX and 36XXThis device is suitable for use in environmental air space in accordance with Section 300.22.C of the National Electrical Code, and Sections 2-128, 12-010(3) and 12-100 of the Canadian Electrical Code, Part 1, C22.1.B.2.1 Wi-Fi certificationThe AP26XX is Wi-Fi certified for operation in accordance with IEEE 802.11a/b/g. The AP2610/20 Wireless APs with internal and external antennas are designed and intended to be used indoors.The AP36XX is Wi-Fi certified for operation in accordance with IEEE 802.11a/b/g/n. The AP36XX Wireless APs with internal and external antennas are designed and intended to be used indoors.Note: Operation in the European Community and rest of the world may be dependant on securing local licenses, certifications, and regulatory approvals.B.2.2 AP2620 external antenna APApproved external antennasThe AP2620 external antenna APs can also be used with optional certified external antennas:•The external antennas on the AP2620 must be identical.•Any unused antenna ports must be terminated when an external antenna is used with the AP2620.Wireless AP model Wi-Fi certification IDAP2605 WFA7482AP2610 WFA7432AP2620 WFA7387AP2650 WFA7386AP2660 WFA7431AP3605 WFA9173AP3610 WFA6025AP3620 WFA5917Table 48 Wireless AP Wi-Fi certification ID

hwc_appendixb.fmRegulatory informationWireless APs 26XX and 36XX9034530-04, September 2010HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 533 Antenna diversityThere are some limitations for using different antennas and Tx/Rx diversity:•If Alternate antenna diversity is used for Tx or Rx, then the same antenna model must be used as left and right antennas. In addition, if cables are used to connect external antennas, the cables must be of the same length and similar attenuation. If these rules are not respected, antenna diversity will not function properly and there will be degradation in the link budget in both directions. •You can choose to install only one antenna provided that both Tx and Rx diversity are configured to use that antenna and only that antenna. You can choose to install one antenna for 11b/g band and one antenna for 11a band, provided that the antenna diversity is configured appropriately on both radios. Sensor supportChanging the antenna on sensors is not supported (at this stage) for the following reasons:•The sensor factors the antenna gain and pattern in its calculations and therefore it needs to know the antenna type and gain.•The sensor operating in mitigation mode becomes a transmitter and must obey the same CTLs as the normal AP software.•Neither the sensor nor the HiPath Wireless Manager HiGuard support configuring the antenna.B.2.3 AP3620 external antenna APApproved external antennasThe AP3620 external antenna APs can also be used with optional certified external antennas:•Any unused antenna ports must be terminated when an external antenna is used with the AP3620.

Regulatory informationhwc_appendixb.fmWireless APs 26XX and 36XX 9034530-04, September 2010534 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide B.2.4 United StatesB.2.4.1 FCC Declaration of Conformity StatementThis device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions:•This device may not cause harmful interference.•This device must accept any interference received, including interference that may cause undesired operation.This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a residential and business environment. This equipment generates, uses, and radiates radio frequency energy, and if not installed and used in accordance with instructions, may cause harmful interference. However, there is no guarantee that interference will not occur. If this equipment does cause harmful interference, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures:•Reorient or relocate the receiving antenna.•Increase the separation between the equipment or devices.•Connect the equipment to an outlet other than the receiver's.•Consult a dealer or an experienced radio/TV technician for suggestions.

Regulatory informationhwc_appendixb.fmWireless APs 26XX and 36XX 9034530-04, September 2010536 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide B.2.4.3 FCC RF Radiation Exposure StatementThe Wireless AP complies with FCC RF radiated exposure limits set forth for an uncontrolled environment. End users must follow the specific operating instructions for satisfying RF exposure compliance. This device has been tested and has demonstrated compliance when simultaneously operated in the 2.4 GHz and 5 GHz frequency ranges. This device must not be co-located or operated in conjunction with any other antenna or transmitter.Caution: The radiated output power of the Wireless AP is below the FCC radio frequency exposure limits as specified in “Guidelines for Human Exposure to Radio Frequency Electromagnetic Fields” (OET Bullet 65, Supplement C). This equipment should be installed and operated with a minimum distance of 25 cm between the radiator and your body or other co-located operating antennas. When using the WS-AO-5D23009 antenna, the minimum separation distance should be increased to 71cm. When using the WS-AIO-2S18018 antenna, the minimum separation distance should be increased to 34cm.B.2.4.4 External antennasThe AP2620/AP3620 external antenna APs can also be used with certified external antennas. However, to comply with the local laws and regulations, an approval may be required by the local regulatory authorities.For a list of approved external antennas, see Section B.2.8, “AP2620/AP3620 approved external antennas”.RF safety distanceThe antennas used for this transmitter must be installed to provide a separation distance of at least 25 cm from all persons and must not be co-located or operating in conjunction with another antenna or transmitter.When using the WS-AO-5D23009 antenna, the minimum separation distance should be increased to 71cm. When using the WS-AIO-2S18018 antenna, the minimum separation distance should be increased to 34cm.

Regulatory informationhwc_appendixb.fmWireless APs 26XX and 36XX 9034530-04, September 2010538 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide Other•IEEE 802.11a (5 GHz)•IEEE 802.11b/g (2.4 GHz)•IEEE 802.11n (AP36XX)•IEEE 802.3af (PoE)B.2.5.3 External antennasThe AP2620/AP3620 external antenna APs can also be used with certified external antennas. However, to comply with the local laws and regulations, an approval may be required by the local regulatory authorities.For a list of approved external antennas, see Section B.2.8, “AP2620/AP3620 approved external antennas”.RF safety distanceThe antennas used for this transmitter must be installed to provide a separation distance of at least 25 cm from all persons and must not be co-located or operating in conjunction with another antenna or transmitter.When using the WS-AO-5D23009 antenna, the minimum separation distance should be increased to 71cm. When using the WS-AIO-2S18018 antenna, the minimum separation distance should be increased to 34cm.

Regulatory informationhwc_appendixb.fmWireless APs 26XX and 36XX 9034530-04, September 2010540 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide B.2.6.1 Declaration of Conformity in Languages of the European CommunityEnglish Hereby, Siemens, declares that this Radio LAN device is in compliance with the essential requirements and other relevant provisions of Directive 1999/5/EC.Finnish Valmistaja Siemens vakuuttaa täten että Radio LAN device tyyppinen laite on direktiivin 1999/5/EY oleellisten vaatimusten ja sitä koskevien direktiivin muiden ehtojen mukainen.Dutch Hierbij verklaart Siemens dat het toestel Radio LAN device in overeenstemming is met de essentiële eisen en de andere relevante bepalingen van richtlijn 1999/5/EG. Bij deze verklaart Siemens dat deze Radio LAN device voldoet aan de essentiële eisen en aan de overige relevante bepalingen van Richtlijn 1999/5/EC.French Par la présente Siemens déclare que l'appareil Radio LAN device est conforme aux exigences essentielles et aux autres dispositions pertinentes de la directive 1999/5/CE. Par la présente, Siemens déclare que ce Radio LAN device est conforme aux exigences essentielles et aux autres dispositions de la directive 1999/5/CE qui lui sont applicables.Swedish Härmed intygar Siemens att denna Radio LAN device står I överensstämmelse med de väsentliga egenskapskrav och övriga relevanta bestämmelser som framgår av direktiv 1999/5/EG. Danish Undertegnede Siemens erklærer herved, at følgende udstyr Radio LAN device overholder de væsentlige krav og øvrige relevante krav i direktiv 1999/5/EF.German Hiermit erklärt Siemens die Übereinstimmung des "WLAN Wireless Controller bzw. Access Points" mit den grundlegenden Anforderungen und den anderen relevanten Festlegungen der Richtlinie 1999/5/EG.Greek ΜΕ ΤΗΝ ΠΑΡΟΥΣΑ Siemens ∆ΗΛΩΝΕΙ ΟΤΙ Radio LAN device ΣΥΜΜΟΡΦΩΝΕΤΑΙ ΠΡΟΣ ΤΙΣ ΟΥΣΙΩ∆ΕΙΣ ΑΠΑΙΤΗΣΕΙΣ ΚΑΙ ΤΙΣ ΛΟΙΠΕΣ ΣΧΕΤΙΚΕΣ ∆ΙΑΤΑΞΕΙΣ ΤΗΣ Ο∆ΗΓΙΑΣ 1999/5/ΕΚ.Icelandic Siemens lysir her med yfir að thessi bunadur, Radio LAN device, uppfyllir allar grunnkrofur, sem gerdar eru i R&TTE tilskipun ESB nr 1999/5/EC.Italian Con la presente Siemens dichiara che questo Radio LAN device è conforme ai requisiti essenziali ed alle altre disposizioni pertinenti stabilite dalla direttiva 1999/5/CE.Spanish Por medio de la presente Siemens declara que el Radio LAN device cumple con los requisitos esenciales y cualesquiera otras disposiciones aplicables o exigibles de la Directiva 1999/5/CE.Portuguese Siemens declara que este Radio LAN device está conforme com os requisitos essenciais e outras disposições da Directiva 1999/5/CE. Malti Hawnhekk, Siemens, jiddikjara li dan Radio LAN device jikkonforma mal-htigijiet essenzjali u ma provvedimenti ohrajn relevanti li hemm fid-Dirrettiva 1999/5/EC.

Regulatory informationhwc_appendixb.fmWireless APs 26XX and 36XX 9034530-04, September 2010542 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide B.2.6.2 European conformance standardsThis equipment meets the following conformance standards:Safety •2006/95/EC Low Voltage Directive (LVD)•IEC/EN 60950-1 + National DeviationsEMC (Emissions / Immunity)•2004/108/EC EMC Directive•EN 55011/CISPR 11, Class B, Group 1 ISM•EN 55022/CISPR 22, Class B•EN 55024/CISPR 24, includes IEC/EN 61000-4-2,3,4,5,6,11•EN 61000-3-2 and -3-3 (Harmonics and Flicker)•EN 60601-1-2 (EMC immunity for medical equipment)•EN 50385 (EMF)•ETSI/EN 301 489-1 & -17 Radio transceiver •R&TTE Directive 1999/5/EC•ETSI/EN 300 328 (2.4 GHz)•ETSI/EN 301 893 (5 GHz)Other•IEEE 802.11a (5 GHz)•IEEE 802.11b/g (2.4 GHz)•IEEE 802.11n (AP36XX)•IEEE 802.3af (PoE)RoHS•European Directive 2002/95/EC

Regulatory informationhwc_appendixb.fmWireless APs 26XX and 36XX 9034530-04, September 2010544 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide Caution: The Wireless AP is completely configured and managed by the HiPath Wireless Controller connected to the network. Please follow the instructions in this user guide to properly configure the Wireless AP.• The Wireless APs require the end user or installer to ensure that they have a valid license prior to operating the Wireless AP. The license contains the region and the region exposes the country codes which allow for proper configuration in conformance with European National spectrum usage laws• There is a default group of settings that each Wireless AP receives when it connects to the controller. There is the ability to change these settings. The user or installer is responsible to ensure that each Wireless AP is properly configured.• The software within the controller will automatically limit the allowable channels and output power determined by the selected country code. Selecting the incorrect country of operation or identifying the proper antenna used, may result in illegal operation and may cause harmful interference to other systems.• This device employs a radar detection feature required for European Community operation in the 5 GHz band. This feature is automatically enabled when the country of operation is correctly configured for any European Community country. The presence of nearby radar operation may result in temporary interruption of operation of this device. The radar detection feature will automatically restart operation on a channel free of radar.• The 5 GHz Turbo Mode feature is not enabled for use on the Wireless APs.• The 5150- 5350 MHz band, channels 36, 40, 44, 48, 52, 56, 60, or 64, are restricted to indoor use only.• The external antenna APs must only use antennas that are certified by Siemens.• The 2.4 GHz band, channels 1 - 13, may be used for indoor or outdoor use but there may be some channel restrictions.• In Greece and Italy, the end user must apply for a license from the national spectrum authority to operate outdoors.• In France, outdoor operation is not permitted in the 2.4 GHz band.

Regulatory informationhwc_appendixb.fmWireless APs 26XX and 36XX 9034530-04, September 2010546 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide Note: * Belgium requires notifying the spectrum agency if deploying > 300 meter wireless links in outdoor public areas.B.2.7 Certifications of other countries The Wireless APs have been certified for use in various other countries. When the Wireless AP is connected to the Siemens HiPath Wireless Controller, the user is prompted to select a country code. Once the correct country code is selected, the controller automatically sets up the Wireless AP with the proper frequencies and power outputs for that country code.Note: It is the responsibility of the end user to select the proper country code for the country the device will be operated within or run the risk violating local laws and regulations.Approved external antennasThe external antenna Wireless APs can also be used with certified external antennas. However, to comply with the local laws and regulations, an approval may be required by the local regulatory authorities.For a list of approved external antennas, see Section B.2.8, “AP2620/AP3620 approved external antennas”.Other country specific compliance standards, approvals and declarations•IEC 60950-1 CB Scheme + National Deviations•AS/NZS 60950.1 (Safety)•AS/NZS 3548 (Emissions via EU standards – ACMA)•AS/NZS 4288 (Radio via EU standards)Spain Indoor only Indoor only Indoor or outdoor Indoor or outdoorSweden Indoor only Indoor only Indoor or outdoor Indoor or outdoorSwitzerland Indoor only Indoor only Indoor or outdoor Indoor or outdoorTurkey Indoor only Indoor only Indoor or outdoor Indoor or outdoorU.K Indoor only Indoor only Indoor or outdoor Indoor or outdoorCountry 5.15-5.25 (GHz) Channels: 36,40,44,485.25-5.35 (GHz)Channels: 52,56,60,645.47-5.725 (GHz)Channels: 100,104,108,112,116,132,136,1402.4-2.4835 (GHz)Channels: 1 to 13(Except Where Noted)Table 49 European spectrum usage rules (Continuation)

Regulatory informationhwc_appendixb.fmWireless APs 26XX and 36XX 9034530-04, September 2010548 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide RF safety distanceThe antennas used for this transmitter must be installed to provide a separation distance of at least 25 cm from all persons and must not be co-located or operating in conjunction with another antenna or transmitter.When using the WS-AO-5D23009 antenna, the minimum separation distance should be increased to 71cm. When using the WS-AIO-2S18018 antenna, the minimum separation distance should be increased to 34cm.B.2.9 Certified 3rd party antennasTable 52 lists the 3rd party antennas that are supported for AP2620, AP260-1, AP3620 and AP3620-1 models for ETSI and FCC. These antennas are supported only for existing customers prior to V7.11.Model Application Shape Gain (dBi) Frequency (MHz) Connector TypeWS-ANT02 indoor omni 4 2400-25005150-5900 RPSMAWS-AO-DS05360 outdoor omni 5 2400-2500 5150-5350 Reverse Polarity Type-NWS-AO-D16060 outdoor 60 degree sector directional, 2 inputs 16 5150-5875 Reverse Polarity Type-NWS-AO-5D23009 outdoor panel, 2 inputs 23 5150-5875 Reverse Polarity Type-NWS-AI-DT04360 indoor omni, 3 inputs 342400-25004900-5990 RPSMA, 3ea.WS-AI-DT05120 indoor 120 degree sector directional, 3 inputs 5 2300-27004900-6100 RPSMATable 51 List of FCC/IC/ETSI approved antennas — AP3620AP Regulatory Manufacturer Part Number Type Usage Frequency Gain Connector2620 FCC/IC Cushcraft SR2405135D Sector, 135 Deg Single Feed Indoor 2.4 5 N-F2620 FCC/IC Cushcraft S24493DS Omni, Dual Feed Indoor 2.4, 5 3 Reverse TNCx22620 FCC/IC Cushcraft SL24513P Omni, Single Feed Indoor 2.4, 5 3 SMA-F2620 FCC/IC Cushcraft S24497P 60 Deg Sector, Single Feed Indoor 2.4, 5 7 Reverse TNC2620 FCC/IC Hyperlink HG2458CU Omni, Single Feed Indoor 2.4, 5 3 N-FTable 52 Certified 3rd party antennas for use with AP2620, AP260-1, AP3620 and AP3620-1 models

Regulatory informationhwc_appendixb.fmWireless APs 26XX and 36XX 9034530-04, September 2010550 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide

optiPoint WL2 Configurationhwc_appendixc.fmoptiPoint WL2 wireless telephone configuration 9034530-04, September 2010552 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide To configure Quality of Service protocol settings:1. In the left pane, click Quality of Service. The Quality of Service: Protocol Settings screen is displayed.2. Configure the following Quality of Service settings:•In the DSCP Class for Voice drop-down list, click Expedited Forwarding to ensure maximum voice priority.•In the DSCP Class for Signalling drop-down list, click Assured Forwarding 3. Under normal conditions Assured Forwarding 3 ensures a more reliable delivery for Signaling than for Voice (more retries) at the expense of a potential higher delay.•In the VLAN Settings section, select None.

hwc_appendixc.fmoptiPoint WL2 ConfigurationHiPath Wireless Controller configuration9034530-04, September 2010HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 555 C.2 HiPath Wireless Controller configurationThe easiest way to configure a voice VNS is to use the VNS Creation Wizard. Refer to Section 6.4.2, “Creating a voice VNS using the VNS wizard”, on page 284.The following settings must be configured on the HiPath Wireless Controller.•A dedicated VNS must be used for WL2 phones. No other non-voice clients should be allowed in this VNS.•The VNS must be a non-RADIUS VNS.To configure a WL2 Voice Topology:1. In the Layer 3 area, from the DHCP drop-down list, select Local Server, then click Configure.2. Select the Enable DLS DHCP Option checkbox.3. In the DLS Address box, type the IP address or the DNS name of the DLS. In the accompanying box, type the DLS port number. The default is 18443.For more information about configuring a Topology, see Section 6.8, “Configuring a Topology”, on page 319.To configure a WL2 WLAN Service:1. Click the Privacy tab.2. Configure the following privacy settings:

optiPoint WL2 Configurationhwc_appendixc.fmHiPath Wireless Controller configuration 9034530-04, September 2010556 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide •The privacy settings on the HiPath Wireless Controller must match those on the optiPoint WL2 phone. •If the optiPoint WL2 phone is configured to use WPA-PSK, select the WPA-PSK option for the VNS.3. Click the QoS tab.4. Configure the following QoS policy settings:•For good voice quality and battery life, select WMM. •If the VNS is shared with legacy devices that require priority but do not support WMM, select Legacy.•If applicable, select 802.11e or Enable U-APSD. (The next release of the optiPoint WL2 may require .11e support). Note: The Turbo Voice and Use Global Admission Control for Voice (VO) options should be cleared. These options should not be used in the same VNS as the optiPoint WL2. These features are not currently supported on the optiPoint WL2.•The Priority Override option (configured on the Advanced dialog) should normally be cleared. If the phone and PBX are configured properly, the default DSCP classification should work well. If you are unsure, sniff the packets over the air and check that the voice packets are sent with priority 6 or 7 in both UL and DL directions. For more information about configuring a WLAN Service, see Section 6.9, “Configuring WLAN Services”, on page 331.To configure Wireless AP radio properties:1. From the main menu, click Wireless AP Configuration. The HiPath Wireless AP screen is displayed.2. Click the applicable radio tab, In the Radio Mode drop-down list, click g. Note: Enable 11b only if 11b devices are used on the same VNS as the optiPoint WL2 phone. 3. Click the Advanced button.4. Configure the following radio settings:

optiPoint WL2 Configurationhwc_appendixc.fmHiPath Wireless Controller configuration 9034530-04, September 2010558 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide •In the Total # of Tries for Voice VO drop-down list, click adaptive (multi-rate).•In the Total # of Tries for Turbo Voice TVO drop-down list, click adaptive (multi-rate).Note: At a minimum, use adaptive (multi-rate) for Total # of Tries for Best Effort BE and Total # of Tries for Voice VO since this will significantly improve voice quality.•In the Protection Mode drop-down list, click Auto. •In the Protection Rate drop-down list, click 11 Mbps. •In the Protection Type drop-down list, click CTS. The CTS protection mode allows for higher voice capacity.If legacy pre-11b devices are present in the coverage area or you are unsure if legacy pre-11b devices are present in the coverage area, click RTS CTS. RTS CTS mode provides more robust protection.

hwc_appendixd.fm9034530-04, September 2010HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 559 SpectraLink Wireless TelephonesNetwork TopologyD SpectraLink Wireless TelephonesThe HiPath Wireless LAN Solution, consisting of the HiPath Wireless Controller, Wireless APs, and the HiPath Wireless Convergence Software, seamlessly integrates with SpectraLink Wireless Telephones to serve mobile voice and data requirements. The standards-based architecture of HiPath Wireless LAN provides an exceptional infrastructure for voice quality and handset-reliability to the SpectraLink telephones.D.1 Network TopologyThe following image depicts a typical network topology for SpectraLink telephones.Figure 40 SpectraLink Network TopologyNote: The network topology depicted in Figure 40 is a dedicated network for SpectraLink Telephones. Other topologies are supported and can be used as required.

SpectraLink Wireless Telephoneshwc_appendixd.fmConfiguring HiPath Wireless Controller for SpectraLink telephones 9034530-04, September 2010560 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide Note: For a successful deployment, all network elements in the SpectraLink network should be provisioned to prioritize voice data.D.2 Configuring HiPath Wireless Controller for SpectraLink telephonesThis section describes how to configure the HiPath Wireless Controller and Wireless APs for use with SpectraLink Wireless telephones.You have to configure the following features in the HiPath Wireless Controller to set it up for SpectraLink telephones:•Radio properties•SSID•Filters•Multicast configuration•Security•Quality of Service (QoS)The configuration process for SpectraLink telephones applies identically to HiPath Wireless APs, HiPath Wireless Outdoor APs and HiPath Wireless 802.11n APs, unless specified otherwise.Note: You can also use the VNS wizard to configure the HiPath Wireless Controller for use with SpectraLink Wireless telephones. For more information, see Section 6.4.2, “Creating a voice VNS using the VNS wizard”, on page 284.D.2.1 Setting up SSID To set up the SSID:1. From the main menu, click Virtual Network Configuration. The Virtual Network Configuration screen is displayed.2. In the left pane, expand the New pane and click Add VNS (subnet).3. Type a name that will identify the new VNS in the VNS Name box.4. In the Default Policies area, select an existing Non-Authenticated and Authenticated policy, or create a new one by clicking the New button. The Policy configuration window is displayed.

hwc_appendixd.fmSpectraLink Wireless TelephonesConfiguring HiPath Wireless Controller for SpectraLink telephones9034530-04, September 2010HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 561 5. From the Topology area, select an existing topology from the Assigned Topology drop-down list. or create a new one by clicking the New button.Note: Siemens recommends that you choose Bridge Traffic Locally at HWC Topology Mode for SpectraLink network deployment.6. In the Layer 3 area, from the DHCP Option drop-down menu, you can select either the Local DHCP Server or Use DHCP Relay, depending upon your network topology. Click the Configure button.7. In the Gateway box, type the network gateway address.8. In the Mask box, type the appropriate values.9. In the Address Range boxes (from and to), type the IP address range.10. To save your changes, click Save.D.2.2 Configuring filtersTo configure the filters:1. From the main menu, click Virtual Network Configuration. The Virtual Network Configuration screen is displayed.2. In the left pane, expand the Policies pane and select the policy to configure.3. On the Policy Configuration screen, click the Filter Rules tab. The filtering rule for the Default filter is displayed in the centre pane.4. Click the Add button, then type the IP address of SVP server in IP/Subnet and port boxes.5. From the Protocol drop-down menu, select UDP. 6. Click OK. The new filtering rule for the SVP server is displayed in the centre pane.7. Click Up. The filtering rule for the SVP server moves up, before the filter rule for Default filter.8. Click Add again, then type the IP address of SpectraLink Gateway in IP/Subnet and port boxes, and then repeat steps 5 to 7.

hwc_appendixe.fm9034530-04, September 2010HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 567 Default GuestPortal source codeTicket pageE Default GuestPortal source codeE.1 Ticket pageE.1.1 Placeholders used in the default GuestPortal ticket pagePlaceholder tag Description!GuestName Guest Name!GuestComment Guest Comment!TimeOfDayStart Time-of-day start!TimeOfDayDuration Time-of-day session duration !SessionLifeTime Maximum session time!UserID User ID for the guest!Password Password for the guest!SSID SSID to connect to!AccountActivationTime Account available time!AccountLifeTime Account life timeTable 53 Default GuestPortal ticket page template placeholders

Default GuestPortal source codehwc_appendixe.fmTicket page 9034530-04, September 2010568 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide E.1.2 Default GuestPortal ticket page source codeNote: The GuestPortal account information placeholders used in the html code are preceded by the ! character. <HTML><HEAD> <title></title> <meta content="text/html;charset=utf-8" http-equiv="Content-Type"/></HEAD><body style="text-align:center"> <table cellspacing="0" cellpadding="0" border="0" align="center" width="790"> <tr> <td style="background-color:#6666b0;color:white;font-weight:bold;font-size:30;padding:5px" align="center" width="790">GuestPortal</td> </tr> </table> <table cellspacing="5" cellpadding="0" border="0" style="margin:0 auto"> <tr> <td align="right"><b>Guest Name:</b></td> <td align="left">!GuestName</td> </tr> <tr> <td align="right"><b>User ID:</b></td> <td align="left">!UserID</td> </tr> <tr> <td align="right"><b>Password:</b></td> <td align="left">!Password</td> </tr> <tr> <td align="right"><b>Account Start:</b></td>

hwc_appendixe.fmDefault GuestPortal source codeTicket page9034530-04, September 2010HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide 569 <td align="left">!AccountActivationTime</td> </tr> <tr> <td align="right"><b>Duration:</b></td> <td align="left">!AccountLifeTime</td> </tr> <tr> <td align="right"><b>Valid Daily Login Time:</b></td> <td align="left">!TimeOfDayStart -- !TimeOfDayDuration</td> </tr> <tr> <td align="right"><b>Comment:</b></td> <td align="left">!GuestComment</td> </tr> </table> <div style="width:790px;margin:0 auto;text-align:left"> <b>System Requirements:</b> <hr width=790 size=2 noshade> <div style="padding-left:30px"> <ul> <li>A laptop with WLAN capabilities (801.11a/b/g). This functionality can be either embedded into your device or via a PCMCIA card. <li>Web browser software. You can use any standard Internet browser (ie, Internet Explorer, Netscape, etc). </ul> </div> </div> <div style="width:790px;margin:10px auto;text-align:left"> <b>Instructions:</b> <hr width=790 size=2 noshade> <div style="padding-left:30px;"> <ul> <li>Enable your wireless device to connect to the '!SSID' SSID.

$Default GuestPortal source codehwc_appendixe.fmGuestPortal sample header page 9034530-04, September 2010570 HiPath Wireless Controller, Access Points and Convergence Software V7.31, User Guide <li>Once connected, launch your Internet browser and you will be redirected to the Guest Access webpage. <li>Enter the user ID and password supplied above. By logging into the network, you are accepting the terms and conditions below. <li>You're connected! </ul> </div> </div></div></body></HTML>E.2 GuestPortal sample header pageSample header page source code<HTML><HEAD><TITLE>your company name</TITLE><META http-equiv=Content-Type content="text/html; charset=windows-1252"><STYLE type=text/css>BODY {FONT-SIZE: 11px; COLOR: #000000; FONT-FAMILY: Verdana, Arial, Helvetica, sans-serif}TD {FONT-SIZE: 11px; COLOR: #000000; FONT-FAMILY: Verdana, Arial, Helvetica, sans-serif}H3 {FONT-SIZE: 14px; COLOR: #000066; FONT-FAMILY: Verdana, Arial, Helvetica, sans-serif$

Extreme Networks OAP36B HiPath Wireless Outdoor Access Point User Manual II

Extreme Networks, Inc. HiPath Wireless Outdoor Access Point II

Contents

User Manual II

Navigation menu

Namespaces

Views

Navigation