Zcom WS10G2 Скачать руководство пользователя страница 28

Страница: 28 / 78

Hyperion Series

Wireless LAN Controller

User Manual

58-150008-IQN_V1.0

Page 25

Figure 4-14 IPSec Tunnel Encryption and Authentication Configuration Page

These parameters in above page are described in details as following:

Parameter

Description

Encryption &. Authentication

IKE Configuration:



IKE Version:

IKE is

Internet Key Exchange protocol which is used to set up a

security association of IPsec tunnel. It has two versions for selection:

and

V2,

according to remote IPSec Gateway configuration



Authentication Mode:

Only the preset

PSK

supported.



PSK:

Enter the PSK key according to remote IPSec Gateway configuration.



Encryption Algorithm:

Select one from

AES128

AES192

and

AES256

according to remote IPSec Gateway configuration.



Authentication Algorithm:

Select one from

SHA256

SHA384

and

SHA512

according to remote IPSec Gateway configuration.



Local Peer ID:

Enter local peer IP address to identify the local peer of IPSec

tunnel.



Remote Peer ID:

Enter the IP address of IPSec Gateway to identify the

destination peer of the IPSec tunnel.



DH Group:

Select one from

Modep2048

Modep3072,

Modep4096,

ECP256

and

CURVECP25519

according to remote IPSec Gateway

configuration.

IPSec Configuration:



Security Protocol:

Only

ESP

supported.



Encapsulation Mode:

Only

Tunnel Mode

supported.

Note:

Here the parameters configuration must be consistent with the remote

IPSec Gateway; otherwise, the IPSec tunnel cannot be established
successfully.

Содержание WS10G2

Страница 1: ...Revision 3 2 1 ...

Страница 2: ...n and Configuration 6 3 3 Entrance of Web Mode Provision 7 3 4 System Basic 8 3 4 1 Information Overview 8 3 4 2 Quick Setting 8 Chapter 4 Network Configuration 13 4 1 Port Classification 13 4 2 AP Access Port 14 4 3 Management Port 15 4 4 VLAN Creation 16 4 5 Port VLAN 18 4 6 VLAN Interface 19 4 7 L2GRE Tunnel 20 4 8 IPSec VPN 22 4 9 DHCP Settings 26 4 10 NAT 28 4 11 Static Route 29 4 12 Dynamic ...

Страница 3: ...er 8 Authentication 60 8 1 OTP SMS Gateway 60 8 2 Portal Server 60 8 3 Radius Server 62 8 4 LDAP Server 64 8 5 MAC Access Control 66 8 6 Access Time Control 67 Chapter 9 Statistics 70 9 1 Thin AP List 70 9 2 Station List 70 9 3 DPI 71 9 4 IoT List 72 9 5 Realtime Log 72 Chapter 10 Technical Specifications 73 Chapter 11 Appendix 74 11 1 Warranty 74 11 1 1 General Warranty 74 11 1 2 Warranty Conditi...

Страница 4: ...nagement function originally resided in each access point to WLC while the AP only remains its fundamental wireless access and security capabilities Hence the WLC focuses on AP s configuration user authentication traffic forwarding radio resource management access control QoS and load balancing while the thin AP focuses on the underlying functions defined by IEEE802 11 specifications For a complic...

Страница 5: ...i Fi capabilities are referred to as UEs AP Access Point Base station equipment for STAs to access the wired network or other STAs from the wireless network are referred to as APs TAP Thin Access Point The Access Point managed by the WLC WLC Wireless LAN Controller Edge gateway equipment between Wi Fi APs and the core network are referred to as WLCs The WLC is used for access control security mana...

Страница 6: ...s Data Cable Power Cable Yes Yes Yes Plastic Stand For Stack up Yes Yes Yes 10G SPF Optical Transceiver Module LC LC Multi Mode Optical Fiber Note If any of the items mentioned above is not included in the packaging or are damaged in any way contact your reseller immediately 2 2 PHYSICAL PORTS The following physical ports and LED indicators are available on the WS5 7 10G2 Front Panels WS5G2 WS7G2 ...

Страница 7: ...ng and wireless clients data tunnel which could be a RJ45 port other than the Management Port Console Port The Console Port is for debug or troubleshooting by IT staff USB 2 0 Ports Two USB 2 0 ports which are reserved for further applications 2 3 LED INDICATORS The following table describes the LED indicators available on the front panel of the WS5 7 10G2 LED Indicator Color Behavior Description ...

Страница 8: ...ssing port for all Thin APs connecting to WLC while the northbound ports based on WLC internal VLAN Interfaces VIF connect to the Portal Radius for user authentication and Internet for user services Two types of tunnel are established from Thin AP to WLC and will take charge of all communications The CAPWAP tunnel an access stratum management tunnel focuses on provisioning AP and all statistics re...

Страница 9: ...accessed by using any standard Web browsing software like Internet Explorer or Chrome The Web interface simplifies system management and configuration even if the administrator is a junior engineer The CLI mode however is for the advanced customer and can be entered by SSH Telnet and the RS 232 console accessing More knowledge about network communication protocols and command instructions are requ...

Страница 10: ...standard Web browser software like Internet Explorer or Chrome using the HTTP HTTPS protocol To access the Web provisioning entering the default IP address 192 168 2 228 accessing in the management port or 192 168 3 228 accessing in the WLAN port in the address bar of the web browser and press the Enter key to get into the login page as shown below Figure 3 3 Web Interface Login Page Enter the Use...

Страница 11: ...yed immediately after a successful login Figure 3 4 System Information Overview Page In this system information overview page it provides the hardware information and firmware information of WLC and also reports the statistics information of Thin APs and user endpoints through charts and graphics 3 4 2 QUICK SETTING The Quick Setting is a shortcut way for junior customer to provision WLC in a simp...

Страница 12: ...5 Quick Setting for WLC These parameters in Quick Setting page are described in details as following Parameter Description Network Configuration WLAN Port IP Address WLAN port is the southbound port for WLC to connect Thin APs Thin AP establishes CAPWAP management tunnel to this WLAN port This IP address is actually the CAPWAP tunnel termination IP Default value is 192 168 3 228 WLAN Port Netmask ...

Страница 13: ...t End IP Addresses The built in DHCP server of WLC uses this IP address pool to allocate IP addresses to thin APs and user clients The start IP and end IP limit the range of available IP addresses DHCP Default Gateway IP Address This default gateway IP address can be allocated to thin APs or user clients through the built in DHCP server Authentication Configuration Authentication Server Select whe...

Страница 14: ... 2 4GHz Security There are three types of wireless security provided for 2 4GHz radio module to select o Open System When the wireless client associates with the 2 4GHz radio module only SSID are required for authentication and the authentication does not require encryption o WPA2 PSK When wireless client associates with the 2 4GHz radio module in thin AP it must be authenticated by WPA2 with the ...

Страница 15: ...s not require encryption o WPA2 PSK When wireless client associates with the 5GHz radio module in thin AP it must be authenticated by WPA2 with the preset PSK key encryption o WPA2 Radius When wireless client associates with the 5GHz radio module in thin AP it must be authenticated by WPA2 and the encryption key for authentication is issued by Radius server temporarily rather than the preset like ...

Страница 16: ...re 4 1 WLC Port Classification These parameters in Network Port Classification page is described in details as following Parameter Description GE1 This is the default management port for WLC also used as the heartbeat port for 1 1 backup GE2 6 There are five 1000Base T ports in the form of RJ45 They can be classified into two types according to the usage WLC This port is specially allocated to WLC...

Страница 17: ...C southbound interface for establishing the CAPWAP tunnel with thin AP Select Network AP Access Port in the menu to enter the configuration page as following Figure 4 2 AP Access Port Configuration These parameters in Network AP Access Port page is described in details as following Parameter Description VLAN ID Allocate a VLAN ID to the AP Access Port for AP management which is distinguished with ...

Страница 18: ...se parameters modified it is necessary to Save Configuration and then reboot system to make them to take effect 4 3 MANAGEMENT PORT The first 1000Base T RJ45 port that is the GE1 port must be the management port of the WLC Customers mainly use the management port to manage maintain and configure WLC The default IP address of the management port is 192 168 2 228 Select Network Management Port in th...

Страница 19: ...to divide which subnet the WLC is belonged to Click the Apply button to accept the changes Click the Cancel button to discard the changes 4 4 VLAN CREATION If the Wi Fi system is deployed in a VLAN configured network it is needed to create VLANs in the WLC for user data forwarding and WLC itself communication Figure 4 4 shows the types of VLAN in WLC where data plane VLANs are used for physical po...

Страница 20: ...dwidth during transmission Portal Server Bind the Portal server to the new VLAN so user clients in this VLAN will use this Portal server for authentication Physical Ports Note Only those ports which have been classified to WLC type in Port Classification can be listed out here for VLAN binding GE2 The egress of this GbE port can be configured as TAGGED Outgoing packet with the VLAN tag UNTAGGED Ou...

Страница 21: ...ration page as following Figure 4 6 Physical Ports Page These parameters in Network Port VLAN page is described in details as following Parameter Description Enable ForcedRate This is a switch to disable the speed auto negotiation function for all physical ports GE2 GE5 The GbE physical port as the ingress is configured as PVLAN The PVLAN ID for this GbE physical port is used to match the incoming...

Страница 22: ...yer 3 virtual interface which is used by WLC upper control plane applications to communicate with the outside world Since the WLC has an underlying data plane for packet forwarding or upward transmission the VIF interface actually becomes the communication layer between the control plane and the data plane in the WLC The packets sent to WLC control plane from external applications such as the pack...

Страница 23: ...ctivate this VLAN Interface VIF8 This VLAN Interface is default used as WLAN port i e the WLC southbound port for thin AP accessing also called as TAP port The default IP address is 192 168 3 228 Click the Edit button to enter into VLAN Interface edit page Click the Apply button to accept the changes Click the Cancel button to discard the changes 4 7 L2GRE TUNNEL In some virtual network operator V...

Страница 24: ...s in Network L2GRE page is described in details as following Parameter Description GRE Port Specify the physical port of WLC as the local peer of L2GRE tunnel Note this must be the port which has been classified to non WLC type due to this port is under controlled by Linux Kernel Local Peer IP Allocate an IP address for local peer of L2GRE tunnel in WLC Local Peer Netmask Allocate a netmask for th...

Страница 25: ...w button Total number of L2GRE tunnels for WLC is limited to 4 Each L2GRE tunnel configuration in this table can be modified by selection and then click the Edit button under the table Click the Add New button to append a L2GRE configuration to the table Click the Edit button to modify a L2GRE configuration in table Click the Delete button to remove a L2GRE configuration from the table 4 8 IPSEC V...

Страница 26: ...ure 4 12 IPSec Tunnel Network Configuration Page These parameters in above page are described in details as following Parameter Description Network Settings Enable IPSec VPN If customer needs to use IPSec tunnel from WLC to core network and Internet for user traffic security this switch must be opened here to enable IPSec VPN function in WLC Local Peer Port Select the WLC physical port to be bound...

Страница 27: ...o enter the next page Figure 4 13 IPSec Tunnel Protected Data Flows Configuration Page These parameters in above page are described in details as following Parameter Description Protected Data Flows The protected data flow stands for the local private network and destination private network in VPN They will be encapsulated in the IPSec tunnel as the inner IP header for protection Local Peer Privat...

Страница 28: ...iguration Encryption Algorithm Select one from AES128 AES192 and AES256 according to remote IPSec Gateway configuration Authentication Algorithm Select one from SHA256 SHA384 and SHA512 according to remote IPSec Gateway configuration Local Peer ID Enter local peer IP address to identify the local peer of IPSec tunnel Remote Peer ID Enter the IP address of IPSec Gateway to identify the destination ...

Страница 29: ...way configuration Further after complete this page configuration click Next button to enter the last page Figure 4 15 IPSec Tunnel Configuration Finish Page 4 9 DHCP SETTINGS The Hyperion series WLC has a built in DHCP server for allocating IP addresses to thin APs and wireless user clients In this section the DHCP server is bound to interfaces such as the TAP port AP Access Port or WLAN port to a...

Страница 30: ...ere to establish the CAPWAP management tunnel Usually one WLC is enough Interface Binding current DHCP server configuration to the port TAP The thin AP port which is the WLAN port for thin AP accessing to WLC therefore the DHCP server bound to this port is used for allocating IP addresses to thin AP VIF1 8 Totally 8 VLAN Interfaces in WLC as the virtual ports for user services therefore the DHCP s...

Страница 31: ...ase time is 3600 seconds Click the Add button to append a new entry to the list Click the Apply button to accept the changes Click the Cancel button to discard the changes Click the Delete button to remove the selected entry Click the Edit button to modify the selected entry 4 10 NAT NAT stands for Network Address Translation and it is a layer 3 functions that takes effect when the packets travers...

Страница 32: ...he selected entry Click the Edit button to modify the selected entry 4 11 STATIC ROUTE When a data packet is sent to a specific target IP address in a different subnet from the originator since the route is unknown the customer can specify a known next hop for the data packet and reach the destination hop by hop Binding the known next hop to a specific target IP address is configuring the static r...

Страница 33: ...he routing algorithm is based on routing protocols including RIPv1 and OSPF Need to bind dynamic routing to the VLAN interface VIF through which the user service traffic passes and routes to the destination Select Network Dynamic Route in the menu to enter the configuration page as following Figure 4 18 Dynamic Rote Configuration Page These parameters in Network Dynamic Route page is described in ...

Страница 34: ...tion DHCP Server page is described in details as following Parameter Description WLC AC IPv6 Address For AP Access Here providing an IPv6 address actually represents the CAPWAP tunnel termination IPv6 addresses in WLC which will be delivered in DHCPv6 option 43 during the thin AP DHCPv6 procedure to tell Thin APs where to establish their CAPWAP management tunnels to WLC DHCPv6 State This is a swit...

Страница 35: ...The IPv6 Router Advertisement messages include unsolicited and solicited The IPv6 routers send unsolicited Router Advertisement RA messages pseudo periodically that is the interval between unsolicited advertisements is randomized to reduce synchronization issues when there are multiple advertising routers on a link While the solicited Router Advertisement messages is the response to the Router Sol...

Страница 36: ...s to enable DHCPv6 for other information RA Reachable Time 0 360000 ms This is the Neighbor Discover Reachable time in milliseconds within which the WLC assumes a neighbor is reachable after receiving a reachability confirmation RA Retransmit Time 0 360000 ms This is the Neighbor Discover Retransmit time in milliseconds after which the WLC can retransmit the Neighbor Solicitation messages MTU 0 12...

Страница 37: ...1 0 Page 34 Click the Apply button to accept the changes Click the Cancel button to discard the changes Click the Delete button to remove the selected IPv6 router advertisement entry from list Click the Edit button to modify the selected IPv6 router advertisement entry ...

Страница 38: ...ch can be combined to implement the provisioning of the thin AP 6 1 AP GROUPING We know that the thin AP is configured by downloading profiles from the WLC through the CAPWAP tunnel However if a profile is used for only one thin AP too many profiles are required to meet these requirements thus occupying too much space in the WLC At the same time the management and maintenance of profiles becomes a...

Страница 39: ...figured VAP profiles will be listed in the left window for selection Select a VAP profile in left window and then click the button to bind it to the VAP in each radio module Module 1 is the 2 4GHz module while Module 2 is the 5GHz module for a dual band thin AP AP Group Profiles Binding List Click the Add button to create a AP group with binding profiles and append it into the list Existing groups...

Страница 40: ...ation file called the common profile There is already a preset common profile with default parameter settings in WLC it can be modified to match the actual application of the customer Customers can also create new common profiles for different AP groups Select Thin AP Configuration Common Profile in the menu to enter the configuration page as following Figure 6 3 AP Common Profile Page Entrance Pa...

Страница 41: ...es Wireless LAN Controller User Manual 58 150008 IQN_V1 0 Page 38 Figure 6 4 Create and Edit AP Common Profile Page These parameters in Thin AP Configuration Common Profile page is described in details as following ...

Страница 42: ...rotocol Select the protocol to match the packet for applying QoS rules o All QoS rule will be applied to all packets o TCP QoS rule will be applied to TCP packet o UDP QoS rule will be applied to UDP packet o ICMP QoS rule will be applied to ICMP packet Ports Entering the specific communication ports separated by commas to match the packet and QoS rule will be applied to the matched packet QoS Rul...

Страница 43: ...re When the traffic in a thin AP reaches this threshold any new client attempting to associate with this thin AP will be rejected AP Traffic Difference If the balance mode Traffic is selected set the maximum throughput difference allowed between two thin APs here When the traffic throughput difference reaches this threshold any new client attempting to associate with the AP who has heavier traffic...

Страница 44: ...l the rejection time window is shifted off Bluetooth Management Settings This function is for the specific AP to support Apple iBeacon which is the Apple s implementation of Bluetooth low energy BLE wireless technology used to create a different way of providing location based information and services to iPhones and other iOS devices Enable Bluetooth This switch opens the iBeacon Bluetooth functio...

Страница 45: ...e new wireless profiles for different AP groups Click the Edit button to modify an existing profile in the list Click the Select All button to select all profiles in the list Click the Add New button to append a new profile to the list Click the Copy button to copy an existing profile in the list Click the Delete button to remove a profile Click the Del All button to remove all profiles from the l...

Страница 46: ... derived from 802 11n The latest 802 11 specification supports multiple HT modes including HT20 HT40 HT80 and even HT160 which are integer multiples of the 20MHz bandwidth The larger the suffix number of HT the higher the data rate of the air interface MIMO Multiple input multiple output technology which uses independent Tx and Rx paths in the air to achieve spatial stream multiplexing The maximum...

Страница 47: ...ever each virtual AP may have some parameter settings independent of each other therefore a specific virtual AP configuration file called a VAP Profile must be configured for different virtual APs Select Thin AP Configuration VAP Profile in the menu to enter the configuration page as following Figure 6 7 VAP Profile Entrance Page Click the Cancel button to discard the changes Click the Add New but...

Страница 48: ...r data traffic bypasses WLC and is forwarded directly from the thin AP to the Internet Service VLAN Assign a service VLAN ID for the virtual AP according to its SSID requirement Note that the VLAN must be an available VLAN created in Network VLAN Creation Wireless Security There are three types of wireless security provided for virtual AP to select Open System When the wireless client associates t...

Страница 49: ...h switch to make the user clients associated to it get free from Web authentication The selection is Yes or No Access Limit Schedule The Access Limit Schedule is used to prohibit the user clients from accessing Wi Fi system within the specific time period This is the hyperlink directing to Authentication Access Time Control for customers to configure the time plan table Click the Save button to ac...

Страница 50: ...f user client to which you want to apply the bandwidth control Uplink Bandwidth The data transmitting bandwidth of the user client corresponding to this MAC address Downlink Bandwidth The data receiving bandwidth of the user client corresponding to this MAC address Bandwidth Control Policy List Click Add button to append this new policy to the list Click the Edit button to modify the policy in the...

Страница 51: ...PGRADE In the Wi Fi system with WLC the thin AP can upgrade its firmware through WLC centrally instead of upgrading one at a time It can be done by entering Thin AP Configuration AP Firmware Upgrade Select Thin AP Configuration AP FW Upgrade in the menu to enter the configuration page as following Figure 6 11 AP Firmware Upgrade Page Click Browse button to select the new version of thin AP firmwar...

Страница 52: ...ffect thin APs in all group by overlaying the thin AP its own auto Tx power policy configured in wireless profile as long as the Tx Power Mode in the wireless profile is enabled by the Auto option Auto Power This switch is opened to enable the function of auto Tx power for all thin APs Auto Power Adjust Period The automatic adjustment of transmit power is a dynamic process varied with environment ...

Страница 53: ...ted to the thin AP o Traffic The load balancing policy is based on the user traffic pressure in the thin AP Enable Manually Grouping A thin AP usually scans neighbor APs to be automatically grouped If manual grouping is selected the thin APs which are using the same configuration profile should be grouped in the same group AP grouping is a good method for accelerating the load balance process Max ...

Страница 54: ... be rejected Users Number Difference Between Modules If Users Number is selected in Enable Spectrum Navigation here to set the users number difference threshold between two radio modules When the difference number touches this threshold any new client attempting to associate with the radio module who has more users will be rejected Reject Time Window If a user client is rejected by the radio modul...

Страница 55: ...ld it triggers the channel switching The triggering level can be set by High Medium and Low Enable Manually Grouping Thin AP usually scans neighbor APs to be automatically grouped If manual grouping is selected the thin APs which are using the same configuration profile should be grouped in the same group AP grouping is a good method for accelerating the load balance process Fast Roaming Settings ...

Страница 56: ...e as following Figure 7 1 TimeZone and Datetime Configuration Page These parameters in WLC Configuration TimeZone and Date page is described in details as following Parameter Description Device Name Assign a literal name for this WLC equipment in order to be mnemonic NTP Server Thin AP cannot maintain the date time on board when power off therefore it needs a common source for time service WLC can...

Страница 57: ...2 Graphic Statistics Platform Configuration Page These parameters in WLC Configuration Graphic Stat Platform page is described in details as following Parameter Description Enable Graphic Stat Platform This switch opens the Rest API function for remote graphic statistics platform Remote Data Base Post URL Data is put into database by POST method while the database is in remote platform therefore W...

Страница 58: ...are its hard disk spaces with NAS Select WLC Configuration Samba in the menu to enter the configuration page as following Figure 7 3 WLC Samba Configuration Page These parameters in WLC Configuration Samba page is described in details as following Parameter Description Enable Samba Open the Samba function in WLC that means that part of disk spaces in WLC can be shared with other devices Allow User...

Страница 59: ...aults by analyzing the incoming and outgoing data packets The captured packets can be exported to a specific file for Wireshark to review Select WLC Configuration Packet Capture in the menu to enter the configuration page as following Figure 7 5 RADIUS Server Page These parameters in WLC Configuration Packet Capture page is described in details as following Parameter Description Port Specify the p...

Страница 60: ...ention days are configured here Syslog Server IP Address Entering the IP address of the remote Log Server Port Entering the communication port the remote Log Server Log Server List WLC supports multiple log servers You can add the log server configured above to the server list by clicking the AddNew button Click the Apply button to accept the changes Click the AddNew button to append new log serve...

Страница 61: ...Password Restore the password which is set in factory Thin AP Password Setting This is a hyperlink which to the thin AP password setting page FTP Super Password Setting WLC has a built in FTP server for system maintenance purpose This is a hyperlink to the FTP server super password setting page Click the Apply button to accept the changes Click the Cancel button to discard the changes 7 8 WLC FW U...

Страница 62: ...Parameter Description Backup Current Configuration to A Bin File Save current configuration of WLC to a binary file Click the Backup button to start saving Sometimes it needs to click the Refresh button to refresh browser for security Backup Current Configuration to A XML File Save current configuration of WLC to a XML file Click the Backup button to start saving Sometimes it needs to click the Re...

Страница 63: ...page as following Figure 8 1 OTP SMS Gateway Configuration Page These parameters in Authentication OTP SMS Gateway page is described in details as following Parameter Description OTP SMS Gateway Select one short message service gateway to be the OTP gateway There are two SMS gateways for selection one is aliyun and another is every8D Note WLC must be registered as a legitimate subscriber of the SM...

Страница 64: ...name for this Portal Server in order to be mnemonic URL Enter the Uniform Resource Locator URL of Portal Server AC Name ACN CTY PRO OPE The full name of WLC in the format of Network Access Site ID NAS ID which is the Host Name Deployed City Province Operator This name in WLC Portal Server and Radius Server must be matched Portal Server List WLC supports multiple Portal servers Above portal server ...

Страница 65: ...adius Server in the menu to enter the configuration page as following Figure 8 3 Radius Server Configuration Page These parameters in Authentication Radius Server page are described in details as following Parameter Description Radius Mode Choose the Radius server for the Wi Fi system from the internal one or the external one Default NAS ID The full name of WLC in the format of Network Access Site...

Страница 66: ...threshold for the WLC to determine whether the user authentication is failure If the WLC does not receive a authentication result within this set time it is judged as an authentication failure Authentication Type Tell the Radius server what kind authentication is used for it Web Authentication the Radius server verifies the username and password provided by the Portal server for authentication PPP...

Страница 67: ...er Port Number 1 65535 The protocol port number of the secondary accounting server Secondary Accounting Secret This is the key for WLC to prove that it is a legitimate device of the secondary Accounting server The secret key is an ASCII string NAS IP This is a field that Radius server required its value is given by the Radius server Click the Apply button to accept the changes Click the Cancel but...

Страница 68: ...is separated by comma User Search Filter A user search filter provides a mechanism for defining the criteria for matching entries in an User Search Request Its syntax supports the and operators and provides limited substring matching using the operator Note it is recommended to use the default value the customer does not need to change it User Search Base The user search base defines the starting ...

Страница 69: ... CONTROL This is a black and white list based on the MAC address of the user client to allow or prohibit the user client to access the thin AP The user clients in the white list will be allowed to associate with the thin AP and the user clients in the blacklist will be refused to associate with the thin AP The black and white list is created in WLC and the thin AP downloads it to control the assoc...

Страница 70: ...rol list by click Add button MAC ACL Search With the radio button of Filter by MAC checked entering a MAC address to be searched in the access control list Access List List the MAC address of each user client and its access control attribute for display Click the Apply button to accept the changes Click the Cancel button to discard the changes Click the Add button to add a new Access Control entry...

Страница 71: ...akes effect for those user clients tagged with specific VLAN ID Name of Limit Time Table Assign a literal name for this Access Time Schedule table in order to be mnemonic VLAN ID If Access Limit Schedule Mode selects By VLAN specify the VLAN ID here User clients tagged with this VLAN ID will be denied association with the thin AP according to the Access Limit Schedule Start Date The date when the ...

Страница 72: ...button to discard the changes Click the Add button to add a new Access Limit Time entry to the table Click the Edit button to modify the selected Access Limit Time in table Click the Delete button to remove the selected Access Limit Time entry from the table Click the Del All button to remove all the Access Limit Time entries from the table ...

Страница 73: ...Figure 9 1 Thin AP List Click the Previous and Next buttons to turn page if this list is too big in size 9 2 STATION LIST Station is the user wireless client As long as the user client has associated to the thin AP whatever it is now online or offline it will be added to the station list for displaying illustrated as following Select Statistics Station List in the menu to display as following Figu...

Страница 74: ...ough the WLC It is very useful for analyzing user behavior This requires the Wi Fi system is operating in the Central Switching mode i e the user traffic is firstly concentrated to WLC and then centralized forwarded to internet Select Statistics DPI in the menu to display as following Figure 9 2 The Traffic Fluctuation Chart Figure 9 4 The Service Types Pie Chart Click the Clear button to initiali...

Страница 75: ...list is too big in size 9 5 REALTIME LOG The real time system log is the current log which shows what is happening in the WLC system Therefore the log information will scroll quickly in the Real time Log window This is a useful method for administrators to monitor the operation of the WLC Because it is real time it will take up too much system resources thereby reducing performance so don t use it...

Страница 76: ...pth 152 mm 197 mm 197 mm Form Factor 1U 1U 1U Weight 2 7 kg 2 7 kg 2 7 kg Ports RJ45 1G 4 6 6 SFP 10G 2 4 CPU QTY 1 1 1 Memory Size 8 GB 16 GB 32 GB Type DDR3 DDR4 DDR4 Storage Primary Size 64 GB 64 GB 64 GB Type SSD SSD SSD Software Specification WS5G2 WS7G2 WS10G2 AP Capacity 128 256 512 MAC Address Table 8K 16K 30K Max Number of VLANs 4K 4K 4K Environment Specification WS5G2 WS7G2 WS10G2 Temper...

Страница 77: ...ed as DOA Dead on Arrival after conclusive test within the first 30 days of its shipping date from Z COM After 30 days from the shipping date defective products covered within the warranty are considered as RMA Return Material Authorization 4 Z COM reserves the right to inspect all defective products which must be returned and paid shipping fee by purchasers 11 1 2 WARRANTY CONDITIONS Warranty ser...

Страница 78: ...authorities Correct disposal and recycling will help prevent potential negative consequences to the environment and human health For more detailed information about the disposal of your old equipment please contact your local authorities waste disposal service or the shop where you purchased the product 11 3 DECLARATION OF CONFORMITY Hereby Z COM Inc declares that the equipment listed above is in ...

Результаты поиска

Содержание WS10G2

Отзывы:

Похожие инструкции для WS10G2

Бренды по названию

Популярные бренды

Zcom WS10G2, Руководство пользователя

Результаты поиска

Содержание WS10G2

Отзывы:

Похожие инструкции для WS10G2

Бренды по названию

Популярные бренды