Authenticating and Validating Access Points | D-Link DWS 3000

D-Link Unified Access System User Manual

The following image shows the four IP addresses entered into the Data Entry field on the Windows DHCP server.

4.Click OK.

The following figure shows a scope with Option 43 configured.

Scope with Configured

Option 43 Information

Authenticating and Validating Access Points

For a D-Link WLAN Controller Switch to manage an AP, you must add the MAC address of the AP to the local or external RADIUS database. When the switch discovers an AP that is not

70 © 2001- 2006 D-Link Corporation/D-Link Systems, Inc. All Rights Reserved.

Image 70

D-Link DWS 3000 user manual Authenticating and Validating Access Points

Contents

Copyright 2006. All rights reserved Warnung FCC WarningCE Mark Warning Precaución Table of Contents Installing the D-Link Unified Access System Managing and Maintaining D-Link Access Points Configuring the External Radius Server Technical Support Page List of Tables Page List of Figures Sample Wlan Visualization WPA Personal Configuration Audience Symbol Description ExampleAbout This Document Organization Safety Instructions Safety Cautions Safety Instructions General Precautions for Rack-Mountable Products Battery Handling Reminder Protecting Against Electrostatic DischargePage Link Unified Access System Components Overview of the D-Link Unified Access SystemLink Wlan Controller Switch Link Access Point Wlan Visualization Link Unified Access System Topology Single WCS Deployment Peer Switch WCS Deployment Single WCS with Layer 2 Roaming Support Understanding the User Interfaces Peer WCS with Layer 3 Roaming Support Using the Web Interface Web Interface Layout Interface Configuration Graphic Navigation Menu Wlan Tabs Using the Command-Line InterfaceConfiguration and Monitoring Options Tools Menu Using Snmp Wireless System Features and Standards Support Tkip AES & Ccmp CLI Syslog Tftp Planning the D-Link Unified Access System Network System Requirements Link Unified Access System Components Wlan Topology Considerations Wiring Closet Topology Access Point-to-Switch Discovery Access Point Placement Network Planning to Support Layer 3 Roaming Inter-Subnet Roaming Installing the Hardware Hardware Overview LED Indicators Front Panel Components For Link/Act/Speed Mode PowerPoE Mode For PoE Mode 10GE Port LEDs Rear Panel DescriptionSide Panels Combo SFP Ports Package Contents InstallationInstallation Guidelines Installing the Switch without the Rack Installing the Switch in a Rack Installing the SFP ports Powering On the SwitchPower Failure Installing the Optional Module Inserting the Fiber-Optic Transceivers into the Switch Install the Module Front Panel of the DEM-410X Connecting the Switch Connecting to the External Redundant Power System Connecting the Switch to the Network Connecting the Switch and AP Directly Connecting the Switch and AP through the L2/L3 Network Connecting to the Core Network Installing the D-Link Unified Access System System Deployment OverviewPage Connecting the Switch to the Network Enabling the Wlan Features on the Switch Field Description IP Address Disable ReasonAP Authentication AP MAC Validation Preparing the Access Points Logging on to the AP Changing the AP Password Configuring 802.1x Authentication Information on the AP Configuring Vlan Information on the Access Point Configuring AP-to-Switch Authentication InformationAction Command Understanding the Discovery Methods Discovering Access Points and Peer SwitchesExample 1 L2 Discovery Example 2 IP Address of AP Configured in the Switch L2 Discovery Example Example 3 IP Address of Switch Configured in the AP Example 4 Dhcp Option Discovery and Peer Switches Assigning the IP Address to Switches and Managed APs Link Wlan Controller Switch with Routing Disabled Link Wlan Controller Switch with Routing Enabled Switch-prompt Interface 0/2#ip address 192.168.1.24 Enabling the AP and Peer Switch Discovery Link Access Point Link Wireless Device Discovery Protocol Configuring IP Addresses of Peers and APs in the Switch IP List L3/IP DiscoveryIP Address Range Setting the Switch IP Address in the D-Link Access Point WLAN-AP#get managed-ap Setting the Switch Information in the Dhcp Option Options Authenticating and Validating Access Points Configuring AP Authentication Using the Local Database for AP Validation Requiring AP Authentication Installing the D-Link Unified Access System Using the Radius Database for AP Validation Set the Radius server as the validation method Managing Failed or Rogue APs Access Point Profiles Configuring Access Point SettingsAP Profiles, Networks, and the Local Database Local Access Point Database Networks Secret Configuring AAA and Radius SettingsGlobal Radius Server Accounting Default Action Configuring Wireless Radio SettingsMAC Authentication MAC List Radio Settings Dynamic Turbo StateSuper a Super G RTS Threshold Basic RF Scan SentryRate Sets Supported Automatic Dtim PeriodBeacon Period Channel Advanced Radio Configuration Automatic PowerInitial Power RF Scan Duration Configuring Ssid Settings Managing Virtual Access Point Configuration Configuring the Default Network Configuring Network Settings Wireless Network Configuration L3 Tunnel Subnet AuthenticationL3 Tunnel Status L3 Tunnel Mask Radius Secret Enabling and Configuring Additional VAPsAddress None Configuring a VAP for L3 Tunnels Networks Available to the Wireless Client L3 Roaming Example Configuring AP Security Using No Security Using Static or Dynamic WEP Static WEP Configuration Static WEP Field Description Using WPA/WPA2 Personal or Enterprise WPA Personal Configuration Static WPA Field Description Configuring Valid Access Point Settings Static WPA FieldDescription Location Valid Access Point SummaryManaged Mode Profile Valid AP Configuration Password APs operate Page Managing and Maintaining D-Link Access Points Resetting the Access Points Managing Radio Frequency Settings Configuring Channel Plan and Power Settings RF Channel Plan and Power Configuration History Depth RF Channel Plan and Power AdjustmentChannel Plan Interval Viewing the Channel Plan History Channel Plan History Initiating Manual Channel Plan Assignments Initiating Manual Power Adjustments Manual Power Adjustments Server Address Upgrading the Access Point SoftwareAP Upgrade Field Description File Path Group Size Managed AP Download Count Performing Advanced Access Point ManagementStatus Success Count Enabling AP Debugging Debug Adjusting the Channel and Power AP Debug Field Description Power Status Page Monitoring Wireless Global Information Monitoring Status and Statistics Managed Access Peer SwitchesTotal Access Global Wlan Statistics Monitoring Status and Statistics Monitoring Peer Switch Status Viewing IP Discovery Status Monitoring All Access Points Firmware Version Monitoring All Access PointsAuthenticated Clients Monitoring Managed Access Point Status Managed Access Point Status Viewing Detailed Managed Access Point Status Configuration Detailed Managed Access Point Status Viewing Managed Access Point Radio Summary Information Managed AP Radio Summary Viewing Detailed Managed Access Point Radio InformationTransmit Power Managed AP Radio Detail Viewing Managed Access Point Neighbor APs Ex -802.11g Viewing Clients Associated with Neighbor Access PointsManaged AP Neighbor Status Neighbor AP MAC Neighbor AP Clients Viewing Managed Access Point VAPsNeighbor Client Monitoring Managed AP Statistics Managed Access Point Wlan Summary Statistics Viewing Managed Access Point Ethernet StatisticsViewing Detailed Managed Access Point Statistics Managed Access Point Ethernet Summary Statistics Viewing Managed Access Point Radio Statistics Viewing Managed Access Point VAP Statistics Viewing Access Point Authentication Failure Status Authentication Failed AP Status Monitoring Rogue and RF Scan Access Points RF Scan Monitoring Associated Client Information Associated Client Status Summary Viewing Associated Client StatusTunnel IP Address Viewing Detailed Associated Client Status Viewing Associated Client Neighbor AP Status Viewing Associated Client Ssid StatusAssociated Client Neighbor AP Status Viewing Associated Client VAP Status Viewing Associated Client Statistics Associated Client Association Detail Statistics Associated Client Association Summary StatisticsAssociated Client Summary Statistics Transmit Retries Duplicates Received Viewing Client Authentication Failure StatusTransmit Retries Failed Associated Client Session Detail Statistics Client Authentication Failure Status Failed Client Status Monitoring and Managing Ad Hoc Clients Authentication Failure CountAssociation Failure Count Ad Hoc Clients Ad Hoc Client Status Detection Mode Configuring Advanced Settings Creating, Configuring, and Managing AP Profiles Multiple AP Profiles Creating, Copying, and Deleting AP Profiles Adding a Profile Applying an AP Profile Applying the AP Profile Configuring Global Settings Client Failure Enabling Snmp TrapsAP Failure Status RF Scan Status Snmp Traps Field Description Configuring QoS QoS Configuration Maximum Contention QoS SettingsMinimum Contention Queue WMM Mode Max. Burst Length Txop Limit Page Visualizing the Wireless Network Importing and Configuring a Background Image Click Wlan Visualization Download Image Setting Up the Graph Components Creating a New Graph Importing and Configuring a Background Image on With a graph definition length of 800 feet Graphing the Wlan Components Multiple Graphs Component Tool Tip Menu Item Description Understanding the Menu Bar OptionsWlan Visualization Menu Bar Options File View On page 166 shows the difference between the tab view Options Help Sentry Mode Detailed View Tool Tip for Radio Managed AP Information Managing the Graph Component Attributes Links/CommandsPeer Switch Component Information Wireless Client Other AP Default D-Link Wlan Controller Switch Settings Link Unified Access System Default SettingsFeature Default AP Default AP Profile Settings Default D-Link Access Point Profile SettingsWlan Information Link Unified Access System Default Settings Virtual Access Point and Network Settings Other Settings Radius Attributes for the Access Point Configuring the External Radius ServerConfiguring Radius Settings for Access Points Radius Server Description Range Usage Attribute Radius Server Description Range Usage Attribute Configuring Radius Clients FreeRADIUS Server Configuration ExampleCreating and Including an Attribute Dictionary Vendor Adding Access Points to the Valid AP Database Configuring Radius for Client MAC Authentication Configuring Radius Settings for Wireless ClientsFreeRADIUS Example for Wireless Client Configuration Radius Attributes for Wireless Clients Configuring User-Based Authentication and Dynamic VLANs Configuring MAC Authentication Configuring the Wlan and Tunnel Interfaces L3 Roaming Example Using a Loopback Interface for the Wireless Functions Creating the Vlan Routing Interface Create a Vlan routing interface on Vlan L3 Roaming Example Configuring the L3 Tunnel Network Example of Configuring L3 Roaming by Using the CLI L3 Tunnel Status Values ConfiguredL3 Tunnel Status Description Switch-prompt#wireless ap profile apply Example of Configuring L3 Roaming by Using the Web Interface Configuring Dhcp Relay and the Dhcp Server Configuring the Relay Agent Configuring the Dhcp Server Configure the default router for the address pool L3 Roaming Example Setting the MTU Size Setting the MTU Size Page QoS and Load Balancing Understanding Quality of Service802.11e and WMM Standards Support Coordinating Traffic Flow QoS Queues and Dscp on Packets Edcf Control of Data Frames and Aifs Random Backoff and Contention Windows Packet Bursting for Better Performance Txop Interval for Client Stations 802.1p and Dscp tags Vlan Priority Tags Vlan Priority Dscp Value Warranty and Registration Information All countries and regions excluding USA Warranties Exclusive Hardware Limited WarrantySoftware Limited Warranty USA Only Limited Warranty USA Only Page Warranty and Registration Information Trademarks Link Europe Limited Product WarrantyProduct Registration Copyright Statement Geographical Scope of the Limited Product Warranty Limitation of Product Warranty Performance of the Limited Product Warranty Limited Product Warranty PeriodProduct Type Product Warranty Period Link Europe Limited Produktgarantie Warrantor Einschränkung der Garantie Räumlicher Geltungsbereich der eingeschränkten GarantieLaufzeit der eingeschränkten Garantie Garantiegeber Leistungsumfang der eingeschränkten GarantieProdukttyp Gewährleistungslaufzeit Link Europe a limité la garantie des produits Etendue géographique de la Garantie Produit Limitée Période de Garantie Produit Limitée Limitation de la Garantie ProduitType de produit Période de Garantie Exécution de la Garantie Produit Limitée Garantía limitada del producto D-LINK EuropaGarant Cobertura geográfica de la garantía limitada del producto Limitación de la garantía del producto Uso de la garantía limitada del producto Período de la garantía limitada del productoTipo de producto Período de garantía del Producto Link Europe Termini di Garanzia dei Prodotti Garante Limitazione della Garanzia Ambito geografico della Garanzia limitataPeriodo di garanzia Prestazioni della Garanzia limitata Londra NW9 5 AB Regno Unito Telefono +44-020-8731-5555Page Technical Support Technical Support Technical Support Technische Unterstützung Assistance technique Asistencia Técnica Supporto tecnico Tech Support for customers within the Netherlands Pomoc techniczna Technická podpora Technikai Támogatás Teknisk Support Link teknisk support på Internettet Teknistä tukea asiakkaille Suomessa Teknisk Support för kunder i Sverige Tech Support for customers within Australia Suporte Técnico Τεχνική Υποστήριξη Emailsupport@dlink.com.sg Tech Support for customers within India Tech Support for customers within the Russia Technical Support Emailsupport@d-link.co.za Tech Support for Latin America customers Техническая поддержка Asistencia Técnica Suporte Técnico 技术支持友冠技術支援 International Offices Europe U. K Registration Information Product Model Product Serial No Registration Information