Switch Services | Motorola WS5100 instruction

Switch Services

This chapter describes the following Services main menu information used to configure the switch.

•Displaying the Services Interface

•DHCP Server Settings

•Configuring Secure NTP

•Configuring Switch Redundancy

•Layer 3 Mobility

•Configuring GRE Tunnels

•Configuring Self Healing

•Configuring Switch Discovery

NOTE: HTTPS must be enabled to access the switch applet. Ensure that HTTPS access has been enabled before using the login screen to access the switch applet.

Image 171

Motorola WS5100 manual Switch Services

Contents

WS5100 Series Switch Motorola, Inc. All rights reserved Contents Switch Services Network Setup TOC-3 Switch Security Diagnostics Switch Management TOC-5 TOC-6WS5100 Series Switch System Reference Guide Introduction Documentation SetDocument Conventions Notational Conventions Hardware Overview Overview System Status LED Codes Physical SpecificationsPower Cord Specifications Power Protection Standby Error CodesStart Up Primary Infrastructure Features Switch includes the following Infrastructure featuresSoftware Overview Licensing Support Installation FeatureConfiguration Management Text Based Configuration Hardware Abstraction Layer and Drivers ServiceabilityTracing / Logging Process Monitor Secure Network Time Protocol Sntp Wireless SwitchingPassword Recovery Switch includes the following wireless switching features Physical Layer Features 802.11a 802.11bgRate Limiting HotSpot / IP Redirect Proxy-ARP Currently voice support implies the following IDM Identity Driven ManagementVoice Prioritization Self Healing Self Healing Actions Neighbor ConfigurationWireless Capacity Detector APs AP Balancing Across Multiple Switches Wireless RoamingMU Balancing Across Multiple APs Fast Roaming Interswitch Layer 2 RoamingMU Move Command L3 Roaming 802.1p Support Power Save Polling2.12 QoS 802.11e QoS Automatic Channel Selection Wireless Layer 2 SwitchingData QoS Dcscp to AC Mapping Ddns Wired SwitchingSwitch includes the following wired switching features Dhcp Servers Interface Management Management FeaturesWS5100 switch supports 32 Wlans Vlan Enhancements Security Features Encryption and AuthenticationSwitch includes the following wired security features 802.1x EAP MU AuthenticationKeyguard-WEP Kerberos MU to MU Allow Switch-to-Wired5.7 802.1x Authentication Secure Beacon Ieee 802.1AB Lldp Change Username/Password after AP AdoptionReset Username/Password to Factory Defaults Lldp is always enabled and cannot be disabled Rogue AP Detection RF scan by Access Port on all channels Snmp Trap on discovery Authorized AP ListsRogue AP Report Access Port Support 5.14 NATCertificate Management Accessing the Switch Web UI Content of this chapter is segregated amongst the followingWeb UI Requirements Connecting to the Switch Web UI Switch Web UI Access and Image Upgrades Switch Password Recovery Upgrading the Switch Image from 1.4.x or 2.x to Version Upgrading the Switch Image Auto Installation Enables are set using the autoinstall feature command Configuring Auto Install via the CLI Whenever a string is blank it is shown as --not-set Downgrading the Switch ImageAP-4131 Access Point to Access Port Conversion Enables are cleared using the no autoinstall feature Select the AP Installation main menu item Select the Special Functions main menu item 10WS5100 Series Switch System Reference Guide It consists of the following two tabs Viewing the Switch Interface Viewing the Switch Configuration System Name TroubleshootingTime Displays the time of day used by the switch Time Zone Incorrectly could render your switch as operating illegally Viewing Dashboard Details Severity Last Occurrence Message # Occurrences Speed Viewing Switch StatisticsName Status Associated Number of APs Utilization issues negatively impacting performanceAvg Signal Number of MUs Viewing the Port Configuration Viewing Switch Port Information Editing the Port Configuration ModifiedDuplex Displays the port as either half or full duplex Viewing the Ports Runtime Status Oper Status Ethernet ports have a maximum MTU settingViewing the Ports Statistics Name Displays the ports current name MAC Address Different port could be required Packets In ErrorIndication of a network problem Network issues Detailed Port Statistics With interface is saturated Viewing the Port Statistics GraphOutput Unicast Output Packets Switch Information Size Bytes Viewing Switch Configurations Viewing the Detailed Contents of a Config File Main screen displays the contents of the configuration file Editing a Config File Transferring a Config File Viewing Switch Firmware Information PasswordPath Editing the Switch Firmware Enabling Global Settings for the Failover Image If using TFTP, use tftp//ipaddress/path/filename Updating the Switch Firmware Configuring Automatic Updates EnableBoot of the switch Protocol SettingPassword Enter the password required to access the server File Name With Index Viewing the Switch Alarm LogView By View All Viewing Alarm Log Details Possible Causes Viewing Switch LicensesSolution Description How to use the Filter Option 30WS5100 Series Switch System Reference Guide Displaying the Network Interface Network Setup DNS Servers Resolution EntriesSwitch Virtual Wireless LANs Select the Domain Network System tab Configuring DNSAccess Ports Viewing Network IP Information Server IP Address Configuring Global SettingsAdding an IP Address for a DNS Server Obsolete addresses are periodically removed Configuring IP Forwarding Following details display in the table Adding a New Static Route Route MetricActive Type Viewing Address ResolutionSelect the Address Resolution tab Typically a Vlan Viewing and Configuring Layer 2 Virtual LANs Mode It can be either Access or Trunk Ethernet 1 or ethernetTrunk Is selected, the Allowed VLANs field is unavailable Editing the Details of an Existing Vlan Configuring Switch Virtual Interfaces Configuring the Virtual InterfaceMode drop-down menu Up or not Down Following configuration details display in the tableName Displays the name of the virtual interface Displays the Vlan ID associated with the interface To modify an existing virtual interface Adding a Virtual InterfaceModifying a Virtual Interface To add a new virtual interface Viewing Virtual Interface Statistics Packets, etc Viewing Virtual Interface Statistics Only hard-coded at the factory and cannot be modified Viewing the Virtual Interface Statistics Graph Viewing and Configuring Switch WLANs Configuring WLANsClick Close to close the dialog Modify the WLAN’s current authentication scheme Enabled4094. The default Vlan ID is Authentication Editing the Wlan Configuration Intended function of the Wlan Value used is unique Kerberos No AuthenticationTunnel 802.1X EAP Refer to the Advanced field for the following information Configuring 802.1x EAP Configuring Authentication Types Configuring Kerboros MU TimeoutMU Max Retries 28WS5100 Series Switch System Reference Guide Switch Hotspot Redirection Configuring Hotspots Configuring an Internal Hotspot Small Logo URL Title TextHeader Text Footer Text Configuring External Hotspot Main Logo URLDescriptive Text Login Page URL Need to provide correct login information to access the WebFailed Page URL 34WS5100 Series Switch System Reference Guide Configuring Advanced Hotspot Network Setup Configuring External Radius Server Support Configuring Dynamic MAC ACL Radius Server Address Authentication data source Radius PortAuthentication data source. The default port is Secret Secondary Radius server Server Timeout Motorola user privilege values User login source Configuring the User Login Sources Configuring Different Encryption Types Configuring WEP Key 1011121314 2021222324 3031323334 4041424344 Configuring WEP 128 / KeyGuard Default hexadecimal keys for WEP 128 and KeyGuard include Use the Key #1-4areas to specify key numbersKey Configuring WPA/WPA2 using Tkip and Ccmp Ascii Passphrase From entering the 256-bit key each time keys are generatedBit Key Opportunistic Key Pre-AuthenticationViewing Wlan Statistics PMK Caching Last Hr That may have similar characteristicsSsid is the Service Set ID Ssid for the selected Wlan Last 30s Viewing Wlan Statistics in Detail Refer to the RF Status field for the following information Viewing Wlan Statistics in a Graphical Format Refer to the Errors field for the following information 50WS5100 Series Switch System Reference Guide Viewing Wlan Switch Statistics Edit button on the Configuration tab within the WLANs Viewing VLAN/Tunnel AssignmentsClick the VLAN/Tunnel Assignment tab Configuring WMM Background Optimized for background traffic WMM enabledAccess Four Access Category types are Generic QoS GQoS application programming interface API Access Category toCategory Network traffic Dscp to Access Category Network traffic Read-only and cannot be modified within this screen Editing WMM Settings CW Maximum Viewing Associated MU DetailsViewing MU Status CW Minimum Interoperating with Power SaveThis address is burned into the ROM of the MU Ready Similar configurations Viewing MU DetailsDisplays of the Wlan the MU is currently associated with Viewing MU Statistics Address is hard coded at the factory and cannot be modified ConfigurationSelected MU from the access port Possible network or hardware problems Viewing MU Statistics in Detail Hard-coded at the factory and cannot be modified Refer to the Traffic field for the following information View a MU Statistics Graph Viewing Access Port Information Configuring Access Port Radios Access Ports screen consists of the following tabsName Displays a user assigned name for the radio Refer to the Properties field for the following Configuring Layer 3 Access Port Adoption on Configuring an AP’s Global Settings Port Authentication Editing AP SettingsClick the Configure Port Authentication button Network Setup MUs that can associate to a radio is Maximum MUs Beacon Interval RTS Threshold Configuring Rate Settings Self Healing OffsetDtim Periods Adding APs Viewing AP Statistics RF Util Differentiate the radio from other device radiosAverage Mbps Packets that are sent and received Viewing AP Statistics in Detail Was encountered on the configured channel Statistic for the last hour Viewing AP Statistics in Graphical Format Click the Wlan Assignment tab Configuring Wlan Assignment Configurations Editing a Wlan AssignmentIts intended coverage area or function Identifier such as 1/4, 1/3, etc From the description field in the Radio Configuration screen Editing WMM Settings Viewing Access Port Adoption Defaults Configuring AP Adoption DefaultsTo view existing Radio Configuration information Defaults are 20 dBM for 802.11bg and 17 dBm for 802.11a Options include Indoor or Outdoor. Default is IndoorChannel. Default is random Power dBm Editing Default Radio Adoption Settings Stations that can associate to a radio are Dtim Period Transmission path Configuring Rate Settings Configuring Layer 3 Access Port Adoption Select/Change Assigned WLANs Assigned WLANs tab displays two fields Select Radios/BSS Cannot be modified Access Category reflects the radios intended network traffic Editing Access Port Adoption WMM Settings To edit the existing WMM settingsHigher priority traffic Viewing Adopted Access Ports Viewing Access Port Status Viewing Unadopted Access Ports Unadopted AP tab displays the following information Network Setup 96WS5100 Series Switch System Reference Guide Switch Services NTP Time Displaying the Services InterfaceTo display a Services Summary Dhcp Servers Dhcp Server Settings Configuring the Switch Dhcp ServerFor information on configuring GRE tunneling, see Pool Name Domain Editing the Properties of an Existing Dhcp PoolLease Time Ddhhmm Adding a New Dhcp Pool Click the Add button at the bottom of the screen Configuring Dhcp Global Options Configuring Dhcp Server Ddns Values 10WS5100 Series Switch System Reference Guide Client Name Viewing the Attributes of Existing Host PoolsCan be assigned Hardware Address Configuring Excluded IP Address Information Configuring Dhcp Server Relay Information 14WS5100 Series Switch System Reference Guide Viewing Dhcp Server Status Configuring Secure NTP Defining the Sntp ConfigurationRefer to the contents of the Status tab for the following Refer to the Other Settings field to define the following Adding a New Sntp Symmetric Key Defining a Sntp Neighbor Configuration Neighbor Type When adding or editing an NTP neighborHostname Support Adding an NTP Neighbor Viewing Sntp Associations Select the NTP Associations tab Found in some workstations Viewing Sntp StatusLeap Transmissions are synchronized Configuring Switch Redundancy Root delayRoot Dispersion 26WS5100 Series Switch System Reference Guide Discovery Period Redundancy SwitchRedundancy ID Mode Reviewing Redundancy Status Redundancy Group License Aggregation Rules on Configuring Redundancy Group Membership Do not match this switch’s parameters Not Seen The member is no more seen by this switchValues Module Displaying Redundancy Member Details Adoption Capacity Complimentary with this switch’s version?Updates Sent Updates Received Adding a Redundancy Group Member Redundancy Group License Aggregation Rules Layer 3 Mobility Configuring Layer 3 Mobility 36WS5100 Series Switch System Reference Guide Switch Services Defining the Layer 3 Peer List Select the Peer Statistics tab Reviewing Layer 3 Peer List Statistics Reviewing Layer 3 MU Status Configuring GRE Tunnels Assigning priority to different types of traffic To configure GRE tunnelling on the switch Source IPDestinations IP Disabled Editing the Properties of a GRE TunnelInterface IP Adding a New GRE Tunnel Select the Enable Neighbor Recovery checkbox Configuring Self Healing Select the Neighbor Details tab Configuring Self Healing Neighbor Details Editing the Properties of a Neighbor Switch Services Configuring Discovery Profiles Configuring Switch Discovery Network devices is conducted Profile NameTo be located Start IP Address Adding a New Discovery Profile Viewing Discovered Switches New search Assigned using the Switch Configuration screenDifferent profile for the switch discovery process Discovery profile and launching a new search Displaying the Main Security Interface Switch Security Trustpoints Wireless FiltersDetection Certificates Enabling and Configuring AP Detection To configure AP DetectionAP Intrusion Detection BSS MAC Address TimeoutUnapproved AP Refresh Time Address Particular index Adding or Editing an Allowed APAny MAC Address Specific MAC To review the attributes of allowed APs Approved APs Reported by APs Dbm Unapproved APs Reported by APsTherefore interpreted as a threat on the network Address to a new Allowed AP index Unapproved APs Reported by MUs Seconds Detecting APEssid to a new Allowed AP index As a threat Configuring MU Intrusion DetectionTo configure MU intrusion detection MU Intrusion Detection Mobile Unit Switch columnsContents of the MUs that have been filtered thus far Violation Type Click on Revert to rollback to the previous configuration Viewing Filtered MUsIdentifier Configuring Wireless Filters Refer to the Associated WLANs field for following Filters field contains the following read-only information Editing an Existing Wireless Filter Enter the a hex value for the Starting MAC address Adding a new Wireless Filter Associating an ACL with Wlan Configuring ACLs For more information, see Switch supports the following ACLs to filter trafficACL Overview Router ACLs Port ACLs Wireless LAN ACLs ACL ActionsPrecedence Order Adding a New ACL Configuring an ACL Adding a New ACL Rule 22WS5100 Series Switch System Reference Guide Editing an Existing Rule Eth2 Adding a New ACL ConfigurationAttaching an ACL Eth1 Click on the Attach tab Click on the Add button Attaching an ACL on a Wlan Interface/Port Direction Adding a New ACL Wlan ConfigurationDisplays the IP ACL configured Displays the MAC ACL configured Reviewing ACL Statistics Configuring NAT Information Defining Dynamic NAT TranslationsClick on the Dynamic Translation tab Type Displays the NAT type as either Anywhere on the InternetLAN over the switch managed network Access List Adding a New Dynamic NAT Configuration Click the Static Translation tab Defining Static NAT Translations Click on the Static Translation tab Adding a New Static NAT Configuration Switch Security Available from the drop-down menu for use as the interface Configuring NAT Interfaces Viewing NAT Status Inside Local Configuring IKE SettingsInside-Global World Click the Configurations tab Defining the IKE Configuration Peers Setting IKE PoliciesAggressive Mode Peer IP Address Switch Security Highest priority value SHA The default valueDefault value Priority Include Options includeSecret without transmitting it to one another Viewing SA Statistics Configure a Dhcp Sever to give public IP address Configuring IPSec VPN Configure security associations parameters Defining the IPSec Configuration Transport Editing an Existing Transform Set Tunnel or Transport AH AuthenticationAdding a New Transform Set ESP Encryption Scheme Include None No AH authentication is used Click the IP Range tab to view the following information Defining the IPSec VPN Remote Configuration Configuring Ipsec VPN Authentication Shared Secret Click the Authentication tabDefault port is Port Configuring Crypto Maps Crypto Map Entries Click the Crypto Maps tab and select Crypto Map EntriesPriority / Seq ACL ID Mode Config Crypto Map Peers Peer Name Click the Crypto Maps tab and select PeersPriority / Seq # Higher the priority Crypto Map Manual SAs Transform SetSet for protecting the data flow Crypto Map Transform Sets Protecting the data flow Crypto Map Interfaces Viewing IPSec Security Associations Index from others with similar configurations TLS and MD5 Ttls and PAP Configuring the Radius ServerSetting up Radius on the switch entails the following Radius Overview Ttls and MSCHAPv2 Peap and GTC Peap and MSCHAPv2 User Database Using the Switch’s Radius Server Versus an External Radius Defining the Radius Configuration Radius Proxy Server Configuration Radius Client Configuration Configuring Radius Authentication and Accounting EAP and Auth Type Specify the EAP type for the Radius server Activity is detected Configuring Radius UsersCert Trustpoint CA Cert Trustpoint User Guest UserTheir Radius privileges expire Configuring Radius User Groups Guest Group Select the Groups tab Available WLANs Configured WLANsTime of access Viewing Radius Accounting Logs Size Creating Server CertificatesSelect the Accounting Logs tab Automatically once they reach their limit Within the State/Prov stated Using Trustpoints to Configure CertificatesCertificate was issued City L Creating a Server / CA Root Certificate Key for you new certificate Using the Wizard to Create a New Certificate 78WS5100 Series Switch System Reference Guide City OrganizationOrganization Unit Using the Wizard Delete Operation To use the wizard to delete trustpoint propertiesRequests Click the Next button to complete the trustpoint removal Configuring Trustpoint Associated Keys Adding a New Key Select the Keys tab Keys tab displays the followingKey Label Transferring Keys 84WS5100 Series Switch System Reference Guide Displaying the Management Access Interface Switch Management Configuring Access Control To configure access control settings on the switchLog Output Enable Snmp Retries Enable TelnetNetwork. This setting is enabled by default Long as the Enable Telnet option remains enabled 360 is associated with the SSH-Server Configuring Snmp Access Configuring Snmp v1/v2 Access Access ControlCommunity Name Editing an Existing Snmp v1/v2 Community Name Configuring Snmp v3 Access User Name Unique SNMPv3 usernames and passwords include Select Management Access Snmp Access from the main menu tree Editing a Snmp v3 Authentication and Privacy Password Accessing Snmp v2/v3 Statistics Read-Only errorsV2/V3 Metrics Usm Statistics Values Configuring Snmp Traps Enabling Trap ConfigurationTo configure Snmp trap definitions Mobility WirelessRedundancy Miscellaneous Generation Configuring Trap ThresholdsTo configure Snmp trap threshold values Threshold Name 14WS5100 Series Switch System Reference Guide Radio Range Wlan Range Wireless Units Wireless Trap Threshold Values To configure the attributes of Snmp trap receivers Configuring Snmp Trap Receivers Editing Snmp Trap Receivers Adding Snmp Trap ReceiversTo add a new Snmp trap receiver Configuring Local Users Configuring Management Users Creating a New Local User Modifying an Existing Local User Provides read-only permissions Redundancy/clustering and control access Creating a Guest Admin and Guest User Assign the guest-admin WebUser Administrator access Configuring Switch Authentication Assignment is from 1 Not a DNS name Modify the following Radius Server attributes as necessary Modifying the Properties of an Existing Radius Server Session. The available range is between 0 Adding a New Radius ServerAddress Not a DNS name Radius Server Port Is from 1 Switch Management 28WS5100 Series Switch System Reference Guide Displaying the Main Diagnostic Interface Diagnostics Switch Environment CPU Performance Usage Switch Memory AllocationSwitch Disk Allocation Buffer Switch Memory Processes Other Switch Resources Configuring System Logging Log OptionsSelect the Other Resources tab 8WS5100 Series Switch System Reference Guide Date File ManagementLog level Made, they have been accounted for Viewing the Entire Contents of Individual Log Files Transferring Log Files Reviewing Core Snapshots Troubleshooting issues Transferring Core SnapshotsFile extension is always .core for core files Select a target file, and select the Transfer Files button Reviewing Panic Snapshots Remaining nine are renamed so the newest can be saved as Size Displays the size of the panic file in bytes CreatedPanic actually occurred Transferring Panic Files Viewing Panic Details Debugging the Applet Select Diagnostics Applet Debugging from the main menu Configuring a Ping New ping test is required Timeout secNot received by the switch from its target device Time between the switch and its connected device Modifying the Configuration of an Existing Ping Test TimeoutsecAdding a New Ping Test Test description to convey the overall function of the test Within the Configuration tabBetween the switch and its connected device Test Name Viewing Ping Statistics Last Response Average RTT 24WS5100 Series Switch System Reference Guide Motorola’s Enterprise Mobility Support Center Customer Support Web SiteGeneral Information 2WS5100 Series System Reference Guide Page Motorola INC