background image

 

1 of 25 

 

Anyfi Networks 

Carrier Wi-Fi System

 

 

 

GATEWAY

 

REFERENCE GUIDE

 

 
Overview 
Installation 
Basic Configuration 
Wi-Fi Client Isolation 
Wi-Fi Security Settings 
IEEE 802.1X and EAP 
RADIUS for AAA 
GRE for Payload 
System Monitoring 

 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

 

Västergatan 31 B 

21121 Malmö 

Sweden 

[email protected]

Summary of Contents for Carrier Wi-Fi System

Page 1: ...TEWAY REFERENCE GUIDE Overview Installation Basic Configuration Wi Fi Client Isolation Wi Fi Security Settings IEEE 802 1X and EAP RADIUS for AAA GRE for Payload System Monitoring V stergatan 31 B 211...

Page 2: ...OTICES Anyfi Networks proprietary Anyfi is a registered trademark of Anyfi Networks AB All other trademarks are the property of their respective owners RELEASE DATE 14th of April 2014 DOCUMENT REVISIO...

Page 3: ...Tunnel Termination Point 2 Service 2 Chapter 2 Installation 3 Installing as a Virtual Appliance 3 Installing as a Vyatta Package 3 Upgrading to a Newer Version 5 Chapter 3 Configuration 6 Basic Netwo...

Page 4: ...ERENCE GUIDE R1C UDP IP Port Range 12 Load Balancing and Failover 13 Chapter 4 Integration 14 RADIUS for AAA 14 Authentication 14 Authorization 15 Accounting 17 GRE for User Payload 18 SNMP for System...

Page 5: ...ts are encouraged to study the materials available at www anyfinetworks com resources Document Conventions This guide contains advisory paragraphs and uses the below typographic conventions Advisory P...

Page 6: ...command line italics An argument or variable where you supply a value Also concepts and principles when mentioned inline key A key on your keyboard such as Enter Combinations of keys are joined by pl...

Page 7: ...ta center or mobile core safe in the knowledge that the radio access problem can be separately addressed later The Gateway implements an IEEE 802 11 stack complete with WPA and WPA2 security CCMP AES...

Page 8: ...utes one or two Basic Service Sets BSSes to an Extended Service Set ESS A single Gateway can contribute millions all the virtual access points allocated on connected SDWN radios Service The IEEE 802 1...

Page 9: ...d in Open Virtual Appliance OVA format essentially a bundle of virtual machines in one file Each OVA file comes with a Getting Started Guide containing step by step instructions on how to import the e...

Page 10: ...rks PGP key vyatta vyatta wget http packages anyfinetworks com vyatta pubkey gpg O sudo apt key add Update the software package database vyatta vyatta sudo apt get update Once the repository has been...

Page 11: ...vyatta vyatta sudo apt get install y anyfi gateway vyatta anyfi gateway Restart the Gateway vyatta vyatta restart anyfi gateway Stopping anyfi gateway anyfi gateway Starting anyfi gateway anyfi gatew...

Page 12: ...can instead be tunneled out over GRE Enter configuration mode vyatta vyatta configure edit Configure basic IP networking vyatta vyatta set interfaces ethernet eth1 address x x x x xx edit vyatta vyatt...

Page 13: ...edit service anyfi gateway open gw vyatta vyatta top edit Review changes vyatta vyatta show service anyfi gateway gateway open gw bridge br0 controller x x x x ssid Open Wi Fi edit Commit save and exi...

Page 14: ...tta show service anyfi gateway gateway 1x gw authentication eap radius secret secret radius server x x x x bridge br0 controller x x x x ssid Secure Wi Fi wpa2 edit Commit save and exit configuration...

Page 15: ...and or TKIP block ciphers It is also possible to configure the group rekey interval and whether or not to renegotiate the group key after every disassociation strict rekeying Enter configuration mode...

Page 16: ...ice anyfi gateway 1x gw authentication vyatta vyatta set eap radius secret secret edit service anyfi gateway 1x gw authentication vyatta vyatta top edit Commit save and exit configuration mode vyatta...

Page 17: ...tta edit service anyfi gateway 1x gw accounting edit service anyfi gateway 1x gw accounting vyatta vyatta set radius server x x x x edit service anyfi gateway 1x gw accounting vyatta vyatta set radius...

Page 18: ...e Software Defined Networking SDN sense of the word not in the typical corporate WLAN sense For example the Controller is not involved in IEEE 802 1X authentication and does not have access to end use...

Page 19: ...he service UUID vyatta gw 1 set service anyfi gateway 1x gw uuid uuid edit Commit save and exit configuration mode anyfi gw 1 commit anyfi gw 1 save anyfi gw 1 exit Disconnect from the first Gateway v...

Page 20: ...rnal systems Authentication The following RADIUS message types are supported on the authentication interface Access Request Access Challenge Access Accept Access Reject The following table lists the R...

Page 21: ...cess Accept Access Reject Disconnect Request Disconnect ACK Disconnect NAK CoA Request CoA ACK CoA NAK The following table lists the RADIUS attributes supported on the authorization interface as well...

Page 22: ...s Accept CoA Request WISPr Bandwidth Max Up Access Accept CoA Request WISPr Bandwidth Max Down Access Accept CoA Request Cisco AV Pair url redirect Access Accept CoA Request The following table lists...

Page 23: ...ge types that may contain them Table 4 Supported RADIUS authentication attributes Attribute Message types Message Authenticator all NAS IP Address Accounting Request NAS Port Type Accounting Request U...

Page 24: ...bridge br0 edit interfaces tunnel tun0 vyatta vyatta set remote ip x x x x edit interfaces tunnel tun0 vyatta vyatta top edit Commit save and exit configuration mode vyatta vyatta commit vyatta vyatta...

Page 25: ...rget x x x x community name edit service snmp vyatta vyatta set location location edit service snmp vyatta vyatta set contact contact edit service snmp vyatta vyatta top edit Commit save and exit conf...

Reviews: