D-Link UNIFIED WIRED & WIRELESS ACCESS SYSTEM... User Manual Download

Page: 1 / 266

User Manual

Product Model:

DWS-3000 Series

DWL-3500AP/8500AP/8600AP

Unified Wired & Wireless Access System

Release 3.0

December 2010

Summary of Contents for UNIFIED WIRED & WIRELESS ACCESS SYSTEM...

Page 2: ...are interferenze radio nel cui caso possibile che l utente debba assumere provvedimenti adeguati VCCI Warning BSMI Warning MIC Warning CCC Warning FCC Warning This equipment has been tested and found...

Page 3: ...ch 21 D Link Access Point 22 WLAN Visualization 22 D Link Unified Access System Topology 23 Single Unified Switch Deployment 24 Peer Unified Switch Deployment 24 Understanding the User Interfaces 25 U...

Page 4: ...Link Unified Access System 51 System Deployment Overview 51 Connecting the Switch to the Network 52 Null User Authentication 53 Enabling the WLAN Features on the Switch 53 Preparing the Access Points...

Page 5: ...Tunnels 95 Configuring AP Security 97 Configuring Valid Access Point Settings 101 Section 7 Managing and Maintaining D Link Access Points 105 Resetting the Access Points 105 Managing Radio Frequency S...

Page 6: ...g Advanced Settings 153 Creating Configuring and Managing AP Profiles 153 Creating Copying and Deleting AP Profiles 154 Applying an AP Profile 156 Configuring Global Settings 157 Enabling SNMP Traps 1...

Page 7: ...ttings 204 Default D Link Access Point Profile Settings 204 Default Captive Portal Settings 206 Appendix B Configuring the External RADIUS Server 207 Configuring RADIUS Settings for Access Points 207...

Page 8: ...MM Standards Support 227 Coordinating Traffic Flow 227 QoS Queues and DSCP on Packets 228 EDCF Control of Data Frames and AIFS 229 Random Backoff and Contention Windows 229 Packet Bursting for Better...

Page 9: ...DWS 3024L 41 Figure 15 LED Indicators on DWS 3024 41 Figure 16 LED Indicators on DWS 3026 41 Figure 17 Rear panel view of DWS 3024 DWS 3024L 43 Figure 18 Rear panel view of DWS 3026 43 Figure 19 Prep...

Page 10: ...Valid AP 102 Figure 48 Configuring a Valid AP 103 Figure 49 Access Point Reset 105 Figure 50 RF Channel Plan and Power Configuration 107 Figure 51 Channel Plan History 108 Figure 52 Manual Channel Pla...

Page 11: ...Page 173 Figure 83 CP Web Page Customization Welcome Page 175 Figure 84 CP Web Page Customization Logout Page 175 Figure 85 CP Web Page Customization Logout Success Page 176 Figure 86 Captive Portal L...

Page 12: ...Figure 104 Legend 199 Figure 105 Sentry Mode Detailed View 199 Figure 106 Channel Colors 200 Figure 107 Tool Tip for Radio Managed AP Information 200 Figure 108 Wireless Component Attributes 201 Figur...

Page 13: ...rk Configuration 89 Table 15 Wireless Network Summary 92 Table 16 Static WEP 98 Table 17 Static WPA 100 Table 18 Valid Access Point Summary 102 Table 19 Valid AP Configuration 103 Table 20 RF Channel...

Page 14: ...Status 146 Table 49 Associated Client SSID Status 147 Table 50 Associated Client VAP Status 147 Table 51 Associated Client Association Summary Statistics 147 Table 52 Associated Client Summary Statist...

Page 15: ...ail 187 Table 79 Client Interface Association Connection Statistics 188 Table 80 Interface Client Status 189 Table 81 CP Client Status 189 Table 82 SNMP Trap Configuration 190 Table 83 WLAN Visualizat...

Page 16: ...D Link Unified Access System Software User Manual 02 15 2011 Page 16 34CS3000 SWUM104 D10...

Page 17: ...Settings on page 77 Section 7 Managing and Maintaining D Link Access Points Section 8 Monitoring Status and Statistics on page 119 Section 9 Configuring Advanced Settings Section 10 Configuring the C...

Page 18: ...ood or liquids on your system components and never operate the product in a wet environment If the system gets wet see the appropriate section in your troubleshooting guide or contact your trained ser...

Page 19: ...ower strip To help protect your system from sudden transient increases and decreases in electrical power use a surge suppressor line conditioner or uninterruptible power supply UPS Position system cab...

Page 20: ...from electrostatic discharge ESD 1 When unpacking a static sensitive component from its shipping carton do not remove the component from the antistatic packing material until you are ready to install...

Page 21: ...rious information about APs and their associated wireless clients The peer Unified Switches can be directly connected to each other separated by layer 2 bridges or located in different IP subnets Wire...

Page 22: ...cribes the D Link Access Point in Managed Mode For information about configuring the D Link Access Point in Standalone Mode see the Unified Access Point AP Administrator s Guide The D Link Unified Acc...

Page 23: ...cess points to reduce interference or increase coverage on your WLAN D LINK UNIFIED ACCESS SYSTEM TOPOLOGY The WLAN network topology you use depends on the size and requirements of your network Small...

Page 24: ...o interruption in network access The client keeps the same IP address and does not need to re authenticate when it moves into the broadcast area of a different AP Configuration changes to the APs are...

Page 25: ...or managing and monitoring the WLAN by using one of the following three methods Web based Command Line Interface CLI Simple Network Management Protocol SNMP Each of the standards based management meth...

Page 26: ...interface Each Web page contains three main areas interface configuration graphic the navigation tree and the configuration status or options Figure 4 Web Interface Layout Interface Configuration Grap...

Page 27: ...of a combination of folders subfolders and configuration and status HTML pages Click the folder to view the options in that folder Each folder contains either subfolders or HTML pages or a combination...

Page 28: ...s the data on the panel WLAN Tabs Many of the pages in the WLAN folder contain tabs to simplify navigation and to group functions for a common feature Click the tab to access a specific page Tools Men...

Page 29: ...NMP is enabled by default The System Description Web page which is the page the displays after a successful login and the show sysinfo command display the information you need to configure an SNMP man...

Page 30: ...n 2 4 GHz IEEE 802 11n 5 GHz IEEE 802 11n Dynamic Turbo 5Ghz Dynamic Turbo 2 4 Ghz IEEE 802 11h TPC and DFS Security Standard Support WEP 64 128 WEP 152 TKIP AES CCMP Inhibit SSID broadcast WPA Person...

Page 31: ...Download Each AP supports up to 16 virtual access points VAPs per radio for DWL 8600 You can configure a unique SSID and security policy on each VAP The following list shows some of the D Link Access...

Page 32: ...MAC ACLs SpectralLink Priority Support WLAN Encryption and Security WEP TKIP AES CCMP Rogue AP detection Ad Hoc Client Detection Inhibit Ignore SSID broadcast Weak IV avoidance MAC Authentication Por...

Page 33: ...nitial configuration you can manage the Unified Switch by using a Web based user interface UI command line interface CLI or SNMP The following list describes the minimum requirements you need to insta...

Page 34: ...on the size requirements and existing topology of your network If you are adding a wireless network to an existing network your requirements are different than the requirements of someone who does not...

Page 35: ...k data center In this deployment the switches do not connect directly to APs or end user nodes Note When tunneled clients are used in conjunction with peer switches one of the peer switches must be co...

Page 36: ...in DHCP option 43 Use the D Link Wireless Device Discovery Protocol The AP to switch discovery method you use depends on your network topology For example if the Unified Switch and AP are in the same...

Page 37: ...Unified Access System mobile stations can maintain their IP connections while roaming from one access point to another even when these access points are attached to different IP subnets This feature...

Page 38: ...port on the L3 tunnel subnet You must also either configure DHCP relay on the switch or configure the switch to be a DHCP server APs peer switches and other routers cannot be connected to the L3 tunne...

Page 39: ...rts Installing the Optional Modules Connecting to the External Redundant Power System Connecting the Switch Connecting the Switch to the Network Connecting the Switch and AP Directly Connecting the Sw...

Page 40: ...ront Panel View of the DWS 3024L as Shipped Figure 12 Front Panel View of the DWS 3024 as Shipped Figure 13 Front Panel View of the DWS 3026 as Shipped LED Indicators The Switch supports LED indicator...

Page 41: ...cription Power This LED lights green after powering the Switch on to indicate the ready state of the device The indicator is dark when the Switch is no longer receiving power i e powered off Console T...

Page 42: ...e lower row of ports The port LEDs show information about link activity and speed on the port or Power over Ethernet usage on the port depending on the LED mode you select For Link Act Speed Mode Soli...

Page 43: ...ALLATION This section describes how to install the Switch on a flat surface or in a standard equipment rack It also describes how to install the optional components for the Switch Package Contents Ope...

Page 44: ...c field generators such as motors vibration dust and direct exposure to sunlight When installing the Switch on a level surface attach the rubber feet to the bottom of the device The rubber feet cushio...

Page 45: ...ily blink This blinking of the LED indicators represents a reset of the system Power Failure As a precaution in the event of a power failure unplug the Switch When power is resumed plug the Switch bac...

Page 46: ...copper wire medium not optic fiber and therefore has a transmit length limit up to 1 meters Compliant with the IEEE802 3ak standard this module uses a 4 lane copper connector for data transfer in ful...

Page 47: ...tall the module slide it in to the available slot at the rear of the Switch until it reaches the back as shown in the following figure Gently but firmly push in on the module to secure it to the Switc...

Page 48: ...PS power connection to the Switch Please consult the documentation for information on power cabling and connectors and setup procedure Figure 27 RPS Connector CONNECTING THE SWITCH This section descri...

Page 49: ...nect 1000BASE T switch to the Switch via a twisted pair Category 5e UTP STP cable Connect a switch supporting a fiber optic uplink to the Switch s SFP ports via fiber optic cabling Change the Switch t...

Page 50: ...al for uplinking to the core network Connections to the Gigabit Ethernet ports are made using a fiber optic cable or Category 5e copper cable depending on the type of port A valid connection is indica...

Page 51: ...Access Points If the routing mode is disabled the Unified Switch function uses the IP address of the network interface If routing is enabled the switch uses a loopback or routing interface for the wir...

Page 52: ...f you want to enable DHCP on the switch or assign a different static IP address you must connect to the switch and change the default settings You can connect to the switch through Telnet or a Web bro...

Page 53: ...tion The null user authentication is allowed when the switch s administrator username is admin case insensitive and password is blank The administrator can also login to the switch Web UI and serial c...

Page 54: ...cates with the APs it manages by using Secure Sockets Layer SSL connections The first time you power on the Unified Switch it automatically generates a server certificate that will be used to set up t...

Page 55: ...ork requires IEEE 802 1X authentication you must configure the supplicant information in the AP before you connect to the network Also if you configure the D Link Unified Switch to require local AP au...

Page 56: ...DHCP client on the AP or to set a static IP address see D Link Access Point on page 63 in the Assigning the IP Address to Switches and Managed APs section Changing the AP Password For access to the A...

Page 57: ...pass phrase phrase The pass phrase can be up to 32 alphanumeric characters For example the following command sets the AP to Unified Switch authentication pass phrase to test1234 WLAN AP set managed a...

Page 58: ...their own IP address must be able to find other WLAN devices and must be compatible When the D Link Unified Switch discovers and validates D Link Access Points the switch takes over the management of...

Page 59: ...eless Device Discovery Protocol on page 64 Example 2 IP Address of AP Configured in the Switch Figure 33 shows two access points One AP is directly connected to the D Link Unified Switch and the other...

Page 60: ...list it sends a UDP discovery message to the second Unified Switch configured in the list five seconds after sending the message to the first Unified Switch When an IP address of a Unified Switch is...

Page 61: ...Unified Switch to which the AP should be talking to When the AP gets the re link message it modifies or sets the Unified Switch IP address breaks the TCP connection with the current switch and starts...

Page 62: ...ed Switch You configure static routes on the switch through the configuration pages under LAN L3 Features Router The following procedures show an example of how to enable routing and configure a IP ad...

Page 63: ...et mask in the appropriate fields choose Enable from the Routing Mode menu and click Submit D Link Access Point On the D Link Access Points the default IP address is 10 90 90 91 8 and DHCP is enabled...

Page 64: ...he AP DHCP client request Manually add the IP address of the AP to the switch Multiple peer switches might find the same access point The first association always takes precedence The AP does not chan...

Page 65: ...u have not added the MAC address of the AP to the local or RADIUS Valid AP database the AP appears in the Monitoring Access Point Authentication Failed Access Points list and the failure type is liste...

Page 66: ...check box for L3 IP Discovery is selected and add the range of peer switch or D Link Access Point IP addresses in the From and To fields next to IP Address Range If the IP addresses are non contiguous...

Page 67: ...ple shows how to add an address to the L3 Discovery list by using the CLI 1 From a Telnet SSH or serial connection log on to the D Link Unified Switch and enter the Wireless Configuration mode switch...

Page 68: ...The default IP address of the AP is 10 90 90 91 with a default subnet mask of 255 0 0 0 1 Log on to the D Link Access Point For information about how to log on to the AP see Logging on to the AP on p...

Page 69: ...nager right click the applicable scope and select Configure Options 2 From the Available Options list scroll to Option 43 and select the 043 Vendor Specific Info check box 3 Enter the Option 43 data i...

Page 70: ...ption 43 configured AUTHENTICATING AND VALIDATING ACCESS POINTS For a D Link Unified Switch to manage an AP you must add the MAC address of the AP to the local or external RADIUS database When the swi...

Page 71: ...on 2 Connect to the access point CLI and configure a pass phrase as described in Preparing the Access Points on page 55 3 Enter the pass phrase in the Valid AP database To enter a pass phrase in the l...

Page 72: ...date and enter the physical location of the AP in the second field then click Add After you add the AP additional fields appear so you can provide configuration information about the AP including a pa...

Page 73: ...eters for an AP by using the CLI see the D Link CLI Command Reference Using the RADIUS Database for AP Validation To use a RADIUS server to validate the AP you must configure settings on both the Unif...

Page 74: ...er as the validation method switch prompt Config wireless ap validation radius 3 Exit to Global Config Mode and configure the RADIUS settings In the following command example the RADIUS server IP addr...

Page 75: ...s Points page or the Rogue RF Scan Access page from the by clicking Monitoring Access Point folder 2 Select the check box associated with the AP and click Manage 3 The Valid Access Point Configuration...

Page 76: ...using the CLI use the show wireless ap failure status command in Privileged EXEC mode To view the list of APs detected through the RF scan use the show wireless ap rfscan status command To add a fail...

Page 77: ...nfigure on the D Link Unified Switch Access Point Profiles You manage the configuration of D Link Access Points through the use of configuration profiles A profile is like a configuration template tha...

Page 78: ...ed based on the Network ID All the default networks are configured with open authentication and assigned to the default VLAN 1 The default VLAN is used if RADIUS based authentication is not configured...

Page 79: ...lso configure a global list containing the MAC addresses of wireless clients to allow or deny access to APs The list only applies to profiles that use local MAC Authentication which is an SSID setting...

Page 80: ...The MAC list label updates depending on the default action you select Table 10 MAC Authentication Field Description Default Action The default action is the action that is taken for unknown MAC addres...

Page 81: ...es in the 2 4 GHz frequency and IEEE 802 11a operates in the 5 GHz frequency of the radio spectrum You configure the default radio settings from the Administration Basic Setup Radio tab which Link Fig...

Page 82: ...rmance increases when the AP communicates with Super A and Super G enabled clients However with Super A and Super G enabled the access point transmissions consume more bandwidth To enable Super A or S...

Page 83: ...el is controlled by the scan duration The default scan duration is 10 milliseconds RF Scan Sentry Channels The radio can scan channels in the radio frequency used by the 802 11b g band the 802 11a ban...

Page 84: ...h beacon Beacon Period Beacon frames are transmitted by an access point at regular intervals to announce the existence of the wireless network The default behavior is to send a beacon frame once every...

Page 85: ...nitial Power The automatic power algorithm will not reduce the power below the number you set in the initial power field By default the power level is 100 Therefore even if you enable the automatic po...

Page 86: ...hernet VLANs To a wireless client each VAP appears to be a single physical access point However since the VAPs use the same channel there is no risk of RF interference among the networks that are on a...

Page 87: ...e screen If you want the switch to retain the new values across a power cycle you must perform a save The Next button appears on this page when it is opened through the Administration Basic Setup page...

Page 88: ...eric key that identifies a wireless local area network You can configure up to 64 different networks on the D Link Unified Switch Each network can have a unique SSID or you can configure multiple netw...

Page 89: ...raffic with the VLAN ID you configure in this field By default all networks use VLAN 1 which is also untagged by default Note The VLAN ID you configure in this field can be overwritten by the VLAN ID...

Page 90: ...dius server Backup RADIUS Server Secret The RADIUS secret of the backup radius server RADIUS Accounting Select the RADIUS Accounting check box to enable accounting for wireless clients on the specifie...

Page 91: ...ign them to one or more VAPs Client QoS also allows you to configure per client conditioning of various micro flows through DiffServ ACLs are a collection of permit and deny conditions called rules th...

Page 92: ...SSID the AP tags the client s traffic with the VLAN ID you configure in this field By default all networks use VLAN 1 which is also untagged by default Note The VLAN ID you configure in this field can...

Page 93: ...the switch puts the management VLAN ID if any on the tunneled packets Note If the wireless network topology changes for example a DWS 3000 switch reboots while the L3 tunneling feature is in use you...

Page 94: ...onfiguring Additional VAPs When a wireless client searches for available wireless networks each VAP you enable on the VAP tab appears as a separate network to the wireless client Figure 41 shows an ex...

Page 95: ...ors configure VAPs with identical settings on each radio so that wireless clients can connect to the same network whether their wireless adapters are 802 11a or 802 11b g compatible By default both ra...

Page 96: ...WLAN networks since those networks are primarily for data traffic The VoIP network is for voice traffic L3 Roaming uses IP tunneling so clients appear to be on the same subnet even though the APs are...

Page 97: ...t None as your security mode no further options are configurable on the AP This mode means that any data transferred between the D Link Access Point and the associated wireless clients is not encrypte...

Page 98: ...ore fields to configure The AP uses the global RADIUS server IP address and secret or the RADIUS server settings you specify for the VAP The AP acts as the RADIUS client and must be configured as a cl...

Page 99: ...2 bit WEP keys between the access point and its client stations Using WPA WPA2 Personal or Enterprise WPA and WPA2 are Wi Fi Alliance IEEE 802 11i standards which include AES CCMP and TKIP mechanisms...

Page 100: ...RADIUS server settings on the Unified Switch see Configuring AAA and RADIUS Settings on page 79 WPA Versions Select the types of client stations you want to support WPA If all client stations on the...

Page 101: ...t by using WPA2 can use this feature It is not supported by the original WPA Pre Authentication Limit Enter the number of pre authentications that can be in progress simultaneously on an AP The limit...

Page 102: ...ete All to clear the Valid AP database Click Refresh to update the screen with the most current information If you use the local database for AP validation the switch maintains the database of access...

Page 103: ...itch Instead you log on to the AP itself and manage it by using the Administrator Web User Interface UI or CLI WS Managed The AP is part of the D Link Unified Access System and you manage it by using...

Page 104: ...data and media traffic is competing for bandwidth If you select auto the AP scans the RF area for occupied channels and selects a channel from the available non interfering or clear channels The AP s...

Page 105: ...one or more APs click AP Management Reset Figure 49 Access Point Reset Select the APs you want to reset and click Reset or click Reset All to reset all of the APs managed by the switch Click Refresh...

Page 106: ...The channel has been statically assigned to the AP from the AP Management Advanced page The AP uses a profile that has the Automatic Channel field disabled Radio Configuration setting Additionally ra...

Page 107: ...e plan is applied once every 24 hours at the specified time Manual With the manual channel plan mode you control and initiate the calculation and assignment of the channel plan You must manually run t...

Page 108: ...server The power level in the AP profile is the default level for the AP and the power will not be adjusted below the value in the AP profile The settings in the local database and RADIUS server alwa...

Page 109: ...Status This field shows whether the switch is using the automatic channel adjustment algorithm on the D Link Access Point radios Last Iteration The number in this field indicates the last iteration o...

Page 110: ...nel To apply the new channels click Apply If no APs appear after the algorithm is complete the algorithm does not recommend any channel changes Use the buttons at the bottom of the page to perform the...

Page 111: ...ith the current and new power levels To accept the proposed change click Apply You must manually apply the power adjustment for the proposed assignments to be applied Apply In Progress The switch is a...

Page 112: ...located You may enter up to 96 characters File Name For image1 11a b g radios or image2 DWL 8600 11n radios Enter the name of the upgrade file You may enter up to 32 characters and the file extension...

Page 113: ...by its MAC address and location if specified To upgrade one or more APs select the AP MAC address from the list To upgrade all APs select All from the top of the list The Group Size field limits the n...

Page 114: ...Advanced page you can also manually change the RF channel and power for each radio on an AP Figure 56 Advanced AP Management Each AP managed by the D Link Unified Switch is listed by its MAC address a...

Page 115: ...e Channel Click the Channel link to access the Managed AP Channel Power Adjust page From that page you can set a new channel for Radio 1 or Radio 2 The available channels depend on the radio mode and...

Page 116: ...ng Once once you Telnet to the AP you get an AP interface login prompt The user name is admin Enter the password you set in the previous field The default password is admin if you did not specify a ne...

Page 117: ...es based on the country code setting the radio automatically uses the 802 11h protocol for selecting the channel if radar is detected on the statically assigned channel Interference can occur when mul...

Page 118: ...D Link Unified Access System Software User Manual 02 15 2011 Page 118 Document 34CS3000 SWUM104 D10...

Page 119: ...ion Monitoring Associated Client QoS Information Viewing Client Authentication Failure Status Monitoring and Managing Ad Hoc Clients For information about the commands you use to view WLAN status and...

Page 120: ...perationally disabled due to configuration dependencies If the operational status is disabled the reason will be displayed in the following status field The WLAN Switch is composed of multiple compone...

Page 121: ...s points that failed to authenticate with the Unified Switch Total Clients Total number of clients in the database This total includes clients with an Associated Authenticated or Disassociated status...

Page 122: ...eer switch or AP with IP address in the L3 IP Discovery list and was unable to authenticate or validate the device Click Refresh to update the screen with the most current information If the device is...

Page 123: ...the fields available on the Peer Switch Status page Click Refresh to update the screen with the most current information Table 28 Peer Switch Status Field Description IP Address IP address of the peer...

Page 124: ...ll be presented with the Valid Access Point Configuration page You can then configure the AP and click Submit to save the AP in the local Valid AP database If you use a RADIUS server for AP validation...

Page 125: ...Unified Switch lost contact with the AP a failed entry will remain in the managed AP database unless you remove it Note A managed AP will temporarily show a failed status during a reset Rogue The AP...

Page 126: ...of the AP to view detailed status for a radio interface Use the radio button to navigate between the two radio interfaces Neighbor APs Shows the neighbor APs that the specified AP has discovered thro...

Page 127: ...failed status during a reset Configuration Status This status indicates if the AP is configured successfully with the assigned profile The status is one of the following Not Configured The profile has...

Page 128: ...iled entry will remain in the managed AP database unless you remove it Note A managed AP will temporarily show a failed status during a reset Discovery Reason This status value indicates how the manag...

Page 129: ...Download Status This indicates the current status of a code download request for this AP The possible values include the following Not Started A code download has not been requested for the AP Reques...

Page 130: ...AP reported to the switch for channel assignment The list is based on country code hardware capabilities and any configured channel limitations Channel If radio is operational the current operating ch...

Page 131: ...mber of neighbors both APs and clients that can be seen by this radio in its RF area Table 34 Managed AP Neighbor Status Field Description MACAddress Location Menu Shows the MAC address and location o...

Page 132: ...d location of the AP to which the values on the page apply To view details about a different AP select its MAC address from the menu Radio ex 1 802 11g Indicates a radio interface and its configured m...

Page 133: ...Shows per VAP information about the number of packets transmitted and received and the number of wireless client failures for a specific AP Table 36 Managed Access Point VAP Status Field Description M...

Page 134: ...ired and wireless interface of a particular access point managed by the switch Table 37 Managed Access Point WLAN Summary Statistics Field Description MAC Address The Ethernet address of the Unified S...

Page 135: ...P on the wired network Ethernet Packets Transmitted Total packets transmitted by the AP on the wired network Ethernet Bytes Transmitted Total bytes transmitted by the AP on the wired network Multicast...

Page 136: ...or Count Count of FCS errors detected in a received MPDU frame Frames Transmitted Count of each successfully transmitted MSDU WEP Undecryptable Count Count of encrypted frames received and the key con...

Page 137: ...o Database Entry The MAC address of the AP is not in the local Valid AP database or the external RADIUS server database so the AP has not been validated Authentication The authentication password conf...

Page 138: ...e scan is complete the AP sends information it collected during the RF scan to the switch that manages it For information about how to configure the scan mode see Configuring Wireless Radio Settings o...

Page 139: ...server For more information see Appendix B Configuring the External RADIUS Server on page 207 Figure 64 RF Scan To identify an AP as an acknowledge rogue select the check box next to the MAC address...

Page 140: ...ID Service Set ID of the network this is broadcast in detected beacon frame Physical Mode Indicates the 802 11 mode being used on the AP Channel Transmit channel of the AP Status Indicates the managed...

Page 141: ...radio is not configured to scan the band where the rogue is operating then it never sends de authentication message to that rogue The operational mode radios send de authentication frames only to rogu...

Page 142: ...ormation about associated clients Client QoS Shows Associated Client QoS status Detail Shows more detailed information about associated clients such as which VLAN the client is assigned to and how lon...

Page 143: ...us Click Disassociate to disassociate the client from the AP it is associated with Click Refresh to update the screen with the most current information Monitoring Associated Client QoS Information Cli...

Page 144: ...user interface Web CLI or SNMP MIB to configure similar AP Client QoS parameters as the WS in order to perform comparable AP software operation For RADIUS exchanges the AP acts as a Network Authentica...

Page 145: ...BSSID Indicates the Ethernet MAC address for the managed AP VAP where this client is associated Location Location of the AP to which this client is associated Status Indicates whether or not the clie...

Page 146: ...tion about the client s captive portal connection click Authenticated which links to the detailed client information accessible from the Captive Portal Client Connection Status page Table 48 Associate...

Page 147: ...e network on which the client is connected MAC Address The Ethernet address of client station Channel Indicates the operating channel for the client association Status Indicates whether or not the cli...

Page 148: ...ion Table 52 Associated Client Summary Statistics Field Description MAC Address The Ethernet address of client station Packets Received Packets received from the client station Bytes Received Total by...

Page 149: ...ecorded the entry You can configure the age out time for status entries on the Administration Advanced Configuration Global page You can also manually delete status entries Duplicates Received Total d...

Page 150: ...entication action Likewise if the Allow MAC button is not available no profiles have an Allow default action Note If you use RADIUS for MAC authentication in one or more AP profiles you must add the M...

Page 151: ...figuration Global page You can also manually delete status entries From the Monitoring Client Ad Hoc Clients page you can view and manage wireless clients that are connected to the WLAN through an ad...

Page 152: ...oc data gives you more time to take action against clients that establish ad hoc networks on the WLAN Note The MAC address is added to the local MAC authentication list for all profiles where the glob...

Page 153: ...e you can apply that profile to any AP that the Unified Switch manages For each AP profile you can configure the following features Global RADIUS settings MAC authentication list Radio settings Networ...

Page 154: ...ent If the network administrator adds another AP to Building 2 she assigns the Engineering profile to the AP during the AP validation process Creating Copying and Deleting AP Profiles From the Access...

Page 155: ...s the default AP settings which are listed in Appendix A D Link Unified Access System Default Settings When you copy a profile it has the AP settings configured in the original profile To modify any s...

Page 156: ...ed APs the profile must be re applied for the changes to take effect Apply Requested After you select a profile and click Apply the screen refreshes and shows that an apply has been requested Apply In...

Page 157: ...shows an age and when the age reaches the value you configure in the timeout field the entry is deleted Ad Hoc Client Status This value determines how long to keep an entry in the Ad Hoc Client Statu...

Page 158: ...mes by enabling the MTU discovery protocol and limiting the maximum segment size in TCP connection setup messages 1520 Maps the tunneled IP frame size to 1538 bytes untagged and 1542 bytes tagged Use...

Page 159: ...itch Client State Change Traps If you enable this field the SNMP agent sends a trap for one of the following reasons associated with the wireless client Client Association Detected Client Disassociati...

Page 160: ...pendix D Understanding Quality of Service Figure 76 QoS Configuration Configuring QoS on the D Link Unified Access System consists of setting parameters on existing queues for different types of wirel...

Page 161: ...he first random number generated will be a number between 0 and the number specified here If the first random backoff wait time expires before the data frame is sent a retry counter is incremented and...

Page 162: ...e sensitive is sent to this queue FTP data for example AIFS Inter Frame Space The Arbitration Inter Frame Spacing AIFS specifies a wait time in milliseconds for data frames Valid values for AIFS are 1...

Page 163: ...Station EDCA Parameter Only The TXOP Limit applies only to traffic flowing from the client station to the access point The Transmission Opportunity TXOP is an interval of time when a WME client stati...

Page 164: ...D Link Unified Access System Software User Manual 02 15 2011 Page 164 Document 34CS3000 SWUM104 D10...

Page 165: ...ure on the Unified Switch Configuring Global Captive Portal Settings Configuring the Captive Portal Monitoring and Configuring Captive Portal Users Associating Interfaces with the Captive Portal Viewi...

Page 166: ...le Captive Portal Select the check box to enable the CP feature on the switch Clear the check box to disable the captive portal feature CP Global Operational Status Shows whether the CP feature is ena...

Page 167: ...fter you add the configuration the CP Configuration page for that configuration displays and a new tab with the name of that configuration appears To delete an existing CP select the check box for the...

Page 168: ...configure up to nine additional portals After you create a captive portal from the CP Summary page you can change its settings Figure 80 Captive Portal Configuration Table 63 describes the fields on t...

Page 169: ...configured URL If the check box is clear the user sees the locale specific welcome page after a successful verification Redirect URL Specify the URL to which the newly authenticated client is redirec...

Page 170: ...e the session timeout is reached If the value is set to 0 then the timeout is not enforced The range is 0 to 86400 seconds The default value is 86400 seconds Max Up Rate bytes sec Enter the speed bps...

Page 171: ...st the authenticated user is removed from the connection status tables and for wireless clients they are disassociated If the client logout request feature is not enabled or the user does not specific...

Page 172: ...n on the user s browser window The range is 0 32 characters The default is cp_bkg jpg Branding Image Select the name of the image file to display on the top left corner of the page This image is used...

Page 173: ...his is the text that identifies the page and is used to greet the user The range is 1 128 Unicode characters and must provide a greeting The default is Welcome Colors Select the colors to use for the...

Page 174: ...characters The default is To start using this service enter your credentials and click the Connect button Denied Message Enter the text to display when the user does not provide valid authentication...

Page 175: ...l fields on the CP Web Page Customization Logout page Table 66 CP Web Page Customization Welcome Page Field Description Title Enter the title to display to greet the user after he or she successfully...

Page 176: ...Press the Logout button when done Button Label Enter the text to display on the button the user clicks to logout The range is 2 32 Unicode characters The default is Logout Confirmation Text Enter the...

Page 177: ...d users to the local database which can contain up to 128 user entries You can also delete users from the local database from the Local User Summary page To view and configure CP users in the local da...

Page 178: ...ser in the local database Figure 87 Local User Configuration Table 70 describes the fields you use to configure CP users in the local database Idle Timeout Shows the number of seconds the user can rem...

Page 179: ...attributes and vendor specific attributes VSA VSAs are denoted in the Attribute column and are comma delimited vendor id attribute id Session Timeout secs Enter the number of seconds a user is permitt...

Page 180: ...tance configurations String Optional None The default group is used if not defined here Session Timeout 27 Logout once session timeout is reached seconds If the attribute is 0 or not present then use...

Page 181: ...l Status The CP Global Status page contains a variety of information about the CP feature From the CP Global Status page you can access information about the CP activity and interfaces To view captive...

Page 182: ...s Enabled CP IP Address Shows the captive portal IP address Authenticated Users Shows the number of users currently authenticated to all captive portal instances on this switch For the WIDS Controller...

Page 183: ...d or disabled Disable Reason If the captive portal is disabled then this field indicates the reason The portal instance may be disabled for the following reasons None CP is enabled Administratively Di...

Page 184: ...contains status information for various capabilities Specifically this page indicates what services are provided through the CP to clients connected on this interface The list of services is determin...

Page 185: ...6 Interface and Capability Status Parameter Description Session Timeout Shows whether the interface supports client session timeout This attribute is supported on all interfaces Possible values are En...

Page 186: ...o update the screen with the most current information Click the MAC address of a client to view additional status information Viewing Client Detail The Client Detail page shows detailed information ab...

Page 187: ...o view information about the traffic a client has sent or received Table 78 Client Detail Field Description User Name Displays the user name or Guest ID of the connected client CP Configuration Identi...

Page 188: ...lient Interface Association Status Use the Interface Client Status page to view clients that are authenticated to a specific interface Figure 96 Interface Client Status Table 79 Client Interface Assoc...

Page 189: ...list Table 81 describes the fields on the Client CP Association Status page Table 80 Interface Client Status Field Description Client MAC Address Identifies the MAC address of the client Client IP Ad...

Page 190: ...with the most current information click Refresh Table 82 SNMP Trap Configuration Field Description Captive Portal Trap Mode Choose one of the following captive portal trap modes Select Enable to allo...

Page 191: ...realistic representation of your wireless network From each object on the WLAN Visualization graph you can access information about the object and links to configuration pages on the Web interface Thi...

Page 192: ...cation SETTING UP THE GRAPH COMPONENTS To start the WLAN Visualization tool click WLAN Visualization Launch This opens a new browser window and starts the Java applet The first time you launch the WLA...

Page 193: ...th you enter determines the scale of the background image in relation to the network components The scale of the background image affects the way the WLAN Visualization tool presents the radio frequen...

Page 194: ...raph setup The background you uploaded to the switch appears in the background of the graph You can create multiple graphs For example if your network spans multiple floors or buildings you might have...

Page 195: ...on the left until you drag them onto the graph From the View menu you can choose to view the components in a list view which shows all three types of components in the left panel or in a tabbed view w...

Page 196: ...listed in the panel click the component and drag it to the location in the graph that represents the physical location of the component in the building Once you move a switch or access point to the gr...

Page 197: ...you to create and configure a new graph including the name background image and scale factor for the graph Edit Graph Opens the window for an existing graph You can change the background image or gra...

Page 198: ...other and wireless clients will experience poor WLAN performance To reduce interference you can take one of the following steps Reduce the transmit power on the APs Physically place the APs further a...

Page 199: ...ransitional state The AP could be waiting to be authenticated or it has been validated and authenticated but not configured Green The AP profile configuration has been applied to the AP and it is oper...

Page 200: ...sing for transmission The available channels depend on the mode and country of operation Figure 106 Channel Colors To view the channel that a radio is using you can mouse over the managed AP to activa...

Page 201: ...n available from each component Table 84 Component Information Component Attributes Links Commands Switch IP Address Basic Setup RF Management Global Status Statistics Peer Switch IP Address Peer Swit...

Page 202: ...MAC Address Status Rogue Standalone Peer Managed or Acknowledged AP RF Channel Status Commands Manage Acknowledge Wireless Client MAC Address Radio 1 or 2 RF Channel Depends on channel plan Associated...

Page 203: ...ings for the D Link Unified Switch Table 85 Switch Defaults Feature Default System Information User Name admin Password None Network Information DHCP Client Disabled Network Configuration Protocol Non...

Page 204: ...Password admin Network Information DHCP Client Enabled Management IP Address 10 90 90 91 If not assigned by DHCP Subnet Mask 255 0 0 0 If not assigned by DHCP Management VLAN 1 Untagged VLAN 1 Note O...

Page 205: ...ection Auto Primary Channel Lower Rate Sets Supported Mbps IEEE 802 1a 54 48 36 24 18 12 9 6 IEEE 802 1g 54 48 36 24 18 12 11 9 6 5 5 2 1 IEEE 802 1b 11 5 5 2 1 Atheros Dynamic Turbo 5 GHz 108 96 72 4...

Page 206: ...al Settings Feature Default Global Configuration Operational Status Enabled Additional HTTP Port None Peer Switch Statistics Reporting Interval 120 seconds Authentication Session Timeout 600 seconds C...

Page 207: ...P configuration entry The edge device that connects to the AP performs the network authentication The edge device might not be the Unified Switch Table 89 RADIUS Attributes for the Access Point RADIUS...

Page 208: ...raddb clients conf file The entry contains the IP address of the client the shared secret and a nickname or DNS name for the device The following entry in the clients conf file is for a switch with th...

Page 209: ...mber mapping After you create the file save the dictionary in the etc raddb directory with a file name dictionary company for example dictionary D Link VENDOR D Link 6132 D Link Vendor Specific Extens...

Page 210: ...D Link Wireless AP Radio 1 Power Auto D Link Wireless AP Radio 2 Power Auto CONFIGURING RADIUS SETTINGS FOR WIRELESS CLIENTS You can configure D Link Access Points to use 802 1X authentication on the...

Page 211: ...on This setup enables users of Dynamic VLANs to move from one location to another without intervention and without having to make any changes to the switches If you use an external RADIUS server to ma...

Page 212: ...add an entry for each client in the etc raddb users file If the default action for MAC Authentication on the switch is set to Allow only clients that have an entry in the users file are allowed acces...

Page 213: ...e for L3 roaming is 192 168 60 0 24 The configuration examples in the rest of this appendix use the network information in this figure Figure 109 Example of a Network with L3 Tunnel Subnet The network...

Page 214: ...st traffic is enabled on the L3 tunnel interface All devices that use the L3 tunnel network are stored in the ARP cache because the wireless subnet is local to the switch which means the ARP cache can...

Page 215: ...click Routing IP Configuration to access the IP Configuration page 2 From the Routing Mode menu choose Enable and then click Submit 3 To create a loopback interface click Routing Loopback Configurati...

Page 216: ...e and enable routing switch prompt Interface 0 4 1 ip address 192 168 60 15 255 255 255 0 switch prompt Interface 0 4 1 routing 6 Add the port to which the call server is attached to VLAN 200 in this...

Page 217: ...WUM104 D10 Page 217 3 From the L3 Features IP Interface Configuration page assign an IP address and subnet mask to the interface and make sure routing is enabled 4 From the Monitoring L3 Status VLAN R...

Page 218: ...network to control wireless client access For this network the administrator uses WPA Enterprise for the security mode The administrator must also configure the security on each client that is allowed...

Page 219: ...k 3 Network ID 3 SSID L3 Tunnel Default VLAN 1 Hide SSID Disable Deny Broadcast Disable L3 Tunnel Mode Enable L3 Tunnel Status Configured L3 Tunnel Subnet IP 192 168 60 0 L3 Tunnel Subnet Mask 255 255...

Page 220: ...mple ping s 1542 M do 192 168 60 15 Example of Configuring L3 Roaming by Using the Web Interface The following steps shows the procedures to configure the L3 Tunnel Network by using the Web interface...

Page 221: ...rk Configuration page configure the following settings SSID L3 Tunnel L3 Tunnel check box Selected L3 Tunnel Subnet 192 168 60 0 L3 Tunnel Mask 255 255 255 0 Security WPA WPA2 The L3 Tunnel Subnet is...

Page 222: ...Click Submit to save the changes to the L3 Tunnel network configuration 4 Check the L3 Tunnel Status to make sure the L3 Tunnel Status is Configured 5 To apply the profile changes to the APs click Adm...

Page 223: ...network If you choose to use the Unified Switch as a DHCP server for wireless clients you must configure the DHCP server and the address pool for wireless clients Configuring the Relay Agent Use the f...

Page 224: ...des the IP addresses of WS1 WS2 and the Call Server switch prompt Config ip dhcp excluded address 192 168 2 201 192 168 2 255 3 Create an address pool switch prompt Config ip dhcp pool vlan200 4 Confi...

Page 225: ...Software User Manual D Link Unified Access System 02 15 2011 Document 34CS3000 SWUM104 D10 Page 225...

Page 226: ...D Link Unified Access System Software User Manual 02 15 2011 Page 226 Document 34CS3000 SWUM104 D10...

Page 227: ...ization QoS is a means of allocating bandwidth and network access based on transmission priorities for different types of wireless traffic within a single access point 802 11E AND WMM STANDARDS SUPPOR...

Page 228: ...alue in a packet s DSCP field the AP prioritizes the packet for transmission by assigning it to one of the queues This process occurs automatically regardless of whether you deliberately configure QoS...

Page 229: ...o 802 11 as infrastructure support and are not configurable The D Link Unified Access System supports the Enhanced Distribution Coordination Function EDCF as defined by the 802 11e standard EDCF which...

Page 230: ...ransmission over the wireless network Packet bursting enables the transmission of multiple packets without the extra overhead of header information The effect of this is to increase network speed and...

Page 231: ...and DSCP values Table 93 VLAN Priority Tags VLAN Priority Priority DSCP Value 0 Best Effort 0 1 Background 16 2 Background 8 3 Best Effort 24 4 Video 32 5 Video 40 6 Voice 48 7 Voice 56 START Is VLAN...

Page 232: ...D Link Unified Access System Software User Manual 02 15 2011 Page 232 Document 34CS3000 SWUM104 D10...

Page 233: ...he original purchaser for the defective Hardware will be refunded by D Link upon return to D Link of the defective Hardware All Hardware or part thereof that is replaced by D Link or for which the pur...

Page 234: ...an address in the United States otherwise we will ship the product to you freight collect Expedited shipping is available upon request and provided shipping charges are prepaid by the customer D Link...

Page 235: ...rks are the property of their respective owners Copyright Statement No part of this publication or documentation accompanying this product may be reproduced in any form or by any means or used to make...

Page 236: ...any repaired or replaced Hardware is delivered If a material defect is incapable of correction or if D Link determines in its sole discretion that it is not practical to repair or replace the defecti...

Page 237: ...orming What Is Not Covered This limited warranty provided by D Link does not cover Products that have been subjected to abuse accident alteration modification tampering negligence misuse faulty instal...

Page 238: ...oprietors Copyright Statement No part of this publication may be reproduced in any form or by any means or used to make any derivative such as translation transformation or adaptation without permissi...

Page 239: ...ners All references to speed are for comparison purposes only Product specifications size and shape are subject to change without notice and actual product appearance may differ from that depicted her...

Page 240: ...r FAQ section on the website before contacting the support line We have many FAQ s that we hope will provide you a speedy resolution for your problem For Customers within the United Kingdom Ireland D...

Page 241: ...fonisch anfordern Web http www dlink de E Mail support dlink de Telefon 49 1805 2787 0 12 Min aus dem Festnetz der Deutschen Telekom Telefonische technische Unterst tzung erhalten Sie Montags bis Frei...

Page 242: ...port technique destin aux clients tablis en France Assistance technique D Link par t l phone 0820 0803 03 N INDIGO 0 12 TTC min Prix en France M tropolitaine au 3 mars 2005 Du lundi au samedi de 9h00...

Page 243: ...ocumentaci n t cnica en el sitio web de D Link D Link ofrece asistencia t cnica gratuita para clientes residentes en Espa a durante el periodo de garant a del producto Asistencia T cnica de D Link por...

Page 244: ...namenti e la documentazione sono disponibili sul sito D Link Supporto tecnico per i clienti residenti in Italia D Link Mediterraneo S r L Via N Bonnet 6 B 20154 Milano Supporto Tecnico dal luned al ve...

Page 245: ...y phone Tech Support for customers within the Netherlands D Link Technical Support over the Telephone 0900 501 2007 Monday to Friday 9 00 am to 10 00 pm D Link Technical Support over the Internet www...

Page 246: ...internetowym firmy D Link D Link zapewnia bezp atn pomoc techniczn klientom w Polsce w okresie gwarancyjnym produktu Klienci z Polski mog si kontaktowa z dzia em pomocy technicznej firmy D Link za po...

Page 247: ...ivatelsk ch p ru ek najdete na webov str nce firmy D Link D Link poskytuje sv m z kazn k m bezplatnou technickou podporu Z kazn ci mohou kontaktovat odd len technick podpory p es webov str nky mailem...

Page 248: ...blapj r l t lthet le Telefonon technikai seg ts get munkanapokon h tf t l cs t rt kig 9 00 16 00 r ig s p nteken 9 00 14 00 r ig k rhet a 1 461 3001 telefonsz mon vagy a support dlink hu emailc men Ma...

Page 249: ...dateringer og bruker dokumentasjon p D Links web sider D Link tilbyr sine kunder gratis teknisk support under produktets garantitid Kunder kan kontakte D Links teknisk support via v re hjemmesider ell...

Page 250: ...er dokumentation p D Link s hjemmeside D Link tilbyder gratis teknisk support til kunder i Danmark i hele produktets garantiperiode Danske kunder kan kontakte D Link s tekniske support via vores hjemm...

Page 251: ...1 Teknist tukea asiakkaille Suomessa D Link tarjoaa teknist tukea asiakkailleen Tuotteen takuun voimassaoloajan Tekninen tuki palvelee seuraavasti Arkisin klo 9 21 numerosta 0800 114 677 Internetin ka...

Page 252: ...tta mer information om mjukvaru uppdateringar och annan anv ndarinformation D Link tillhandah ller teknisk support till kunder i Sverige under hela garantitiden f r denna produkt Teknisk Support f r k...

Page 253: ...a es de software e documenta o de utilizador no site de D Link Portugal http www dlink pt A D Link fornece suporte t cnico gratuito para clientes no Portugal durante o per odo de vig ncia de garantia...

Page 254: ...em Software User Manual 02 15 2011 Page 254 Document 34CS3000 SWUM104 D10 software updates D Link D Link D Link 210 86 11 114 210 86 53 172 09 00 17 00 e mail support dlink gr D Link Internet http www...

Page 255: ...00 222 002 9 00 AM to 9 00 PM All days http www dlink co in support productsupport aspx Indonesia Malaysia Singapore and Thailand Tel 62 21 5731610 Indonesia Tel 1800 882 880 Malaysia Tel 65 66229355...

Page 256: ...886 Business support line 03 9212608 Pakistan Tel 92 21 4548158 or 92 21 4548310 Monday to Friday 10 00am to 6 00pm http support dlink me com E mail zkashif dlink me com South Africa and Sub Sahara Re...

Page 257: ...Software User Manual D Link Unified Access System 02 15 2011 Document 34CS3000 SWUM104 D10 Page 257 D Link D Link D Link D Link 7 495 744 00 99 http www dlink ru e mail support dlink ru...

Page 258: ...m a 21 00pm Colombia 01800 9525465 Lunes a Viernes 06 00am a 19 00pm Costa Rica 0800 0521478 Lunes a Viernes 05 00am a 18 00pm Ecuador 1800 035465 Lunes a Viernes 06 00am a 19 00pm El Salvador 800 633...

Page 259: ...k fornece suporte t cnico gratuito para clientes no Brasil durante o per odo de vig ncia da garantia deste produto Suporte T cnico para clientes no Brasil Hor rios de atendimento Segunda Sexta feira d...

Page 260: ...D Link Unified Access System Software User Manual 02 15 2011 Page 260 Document 34CS3000 SWUM104 D10...

Page 261: ...Software User Manual D Link Unified Access System 02 15 2011 Document 34CS3000 SWUM104 D10 Page 261...

Page 262: ...D Link Unified Access System Software User Manual 02 15 2011 Page 262 Document 34CS3000 SWUM104 D10 Technical Support Web Web URL http www dlink jp com...

Page 263: ...a TEL 40 0 21 320 23 05 FAX 40 0 21 320 23 07 URL www dlink eu Spain Avenida Diagonal 593 95 9th floor 08014 Barcelona Spain TEL 34 93 409 07 70 FAX 34 93 491 07 95 URL www dlink es Sweden Gustavslund...

Page 264: ...nal Use 2 How many employees work at installation site 1 employee 2 9 10 49 50 99 100 499 500 999 1000 or more 3 What network protocol s does your organization use XNS IPX TCP IP DECnet Others________...

Page 265: ...Software User Manual D Link Unified Access System 02 15 2011 Document 34CS3000 SWUM104 D10 Page 265...

Page 266: ...D Link Unified Access System Software User Manual 02 15 2011 Page 266 Document 34CS3000 SWUM104 D10...

Search results

Summary of Contents for UNIFIED WIRED & WIRELESS ACCESS SYSTEM...

Reviews:

Related manuals for UNIFIED WIRED & WIRELESS ACCESS SYSTEM...

Brands by name

Popular brands

D-Link UNIFIED WIRED & WIRELESS ACCESS SYSTEM..., User Manual

Search results

Summary of Contents for UNIFIED WIRED & WIRELESS ACCESS SYSTEM...

Reviews:

Related manuals for UNIFIED WIRED & WIRELESS ACCESS SYSTEM...

Brands by name

Popular brands