Manuals / Motorola / Computer Equipment / Switch

Motorola WS5100 Switch Services, •Displaying the Services Interface, •Configuring GRE Tunnels

Models: WS5100

1 364

Download 364 pages 29.43 Kb

Page 171

Switch Services

Switch Services

This chapter describes the following Services main menu information used to configure the switch.

•Displaying the Services Interface

•DHCP Server Settings

•Configuring Secure NTP

•Configuring Switch Redundancy

•Layer 3 Mobility

•Configuring GRE Tunnels

•Configuring Self Healing

•Configuring Switch Discovery

NOTE: HTTPS must be enabled to access the switch applet. Ensure that HTTPS access has been enabled before using the login screen to access the switch applet.

Image 171

Motorola WS5100 manual Switch Services, •Displaying the Services Interface, •DHCP Server Settings •Configuring Secure NTP

Contents

System Reference Guide WS5100 Series Switch2007 Motorola, Inc. All rights reserved Contents Chapter 3. Switch InformationChapter 1. Overview Chapter 4. Network Setup Chapter 5. Switch ServicesTOC-2 WS5100 Series Switch System Reference Guide TOC-3 Chapter 6. Switch SecurityChapter 7. Switch Management Chapter 8. DiagnosticsTOC-4 WS5100 Series Switch System Reference Guide TOC-5 TOC-6 WS5100 Series Switch System Reference Guide Document Conventions About This GuideIntroduction Documentation SetNotational Conventions 1.1 Hardware Overview Overview1.1.2 System Status LED Codes 1.1.1 Physical Specifications1.1.1.1Power Cord Specifications 1.1.1.2Power ProtectionStandby Error CodesStart Up Primary•Security Features •Access Port Support 1.2.1 Infrastructure Features•Infrastructure Features •Wireless Switching •Wired Switching •Management Features1.2.1.4Diagnostics 1.2.1.1Installation Feature1.2.1.3Configuration Management Text Based Configuration1.2.1.8Hardware Abstraction Layer and Drivers 1.2.1.5Serviceability1.2.1.6Tracing / Logging 1.2.1.7Process MonitorSwitch Password Recovery on page 1.2.2 Wireless Switching1.2.1.11Password Recovery Configuring Switch Redundancy on page•Power Save Polling •QoS 1.2.2.1Physical Layer Features 802.11a•Self Healing •Wireless Capacity •AP and MU Load Balancing •Wireless Roaming1.2.2.4HotSpot / IP Redirect 1.2.2.3Proxy-ARP1.2.2.7Self Healing Configuring WMM on page1.2.2.5IDM Identity Driven Management 1.2.2.6Voice PrioritizationDetector APs Neighbor Configuration1.2.2.8Wireless Capacity •AP Balancing Across Multiple Switches•International Roaming •MU Move Command AP Balancing Across Multiple Switches1.2.2.10Wireless Roaming •Interswitch Layer 2 RoamingFast Roaming Interswitch Layer 2 RoamingMU Move Command L3 Roaming802.1p Support 1.2.2.11Power Save Polling1.2.2.12QoS 802.11e QoS1.2.2.14Automatic Channel Selection 1.2.2.13Wireless Layer 2 SwitchingData QoS DCSCP to AC Mapping1.2.3.2DDNS 1.2.3 Wired SwitchingDHCP Server Settings on page 1.2.3.1DHCP Servers1.2.3.6Multiple WLAN Support 1.2.4 Management Features1.2.3.4VLAN Enhancements 1.2.3.5Interface Management•Switch-to-Wired •802.1x Authentication 1.2.5 Security Features1.2.5.1Encryption and Authentication •Encryption and Authentication •MU AuthenticationKerberos 1.2.5.2MU AuthenticationWPA2 Keyguard-WEP1.2.5.4MU to MU Allow 1.2.5.6Switch-to-Wired1.2.5.7802.1x Authentication 1.2.5.3Secure Beacon1.2.5.9 WIPS Change Username/Password after AP AdoptionReset Username/Password to Factory Defaults 1.2.5.8IEEE 802.1AB LLDP•SNMP Trap on discovery •Authorized AP Lists RF scan by Access Port on all channels•RF scan by Access Port on all channels 1.2.5.10Rogue AP DetectionRogue AP Report Configuring ACLs on pageSNMP Trap on discovery Authorized AP Lists1.2.6 Access Port Support 1.2.5.14NAT1.2.5.15Certificate Management •Upgrading the Switch Image •Auto Installation 2.1Accessing the Switch Web UI•Accessing the Switch Web UI •Switch Password Recovery2.1.2 Connecting to the Switch Web UI To display the switch Web UIThe switch login screen displays Switch Web UI Access and Image Upgrades 2.2 Switch Password Recovery2.3 Upgrading the Switch Image 2.4 Auto Installation Configuring Auto Install via the CLI 2.6AP-4131Access Point to Access Port Conversion 2.5 Downgrading the Switch Image2-8 WS5100 Series Switch System Reference Guide 3.Select the AP Installation main menu item7.Select the Firmware Update Menu-F3 menu item 2-10 WS5100 Series Switch System Reference Guide •Viewing Switch Port Information Switch Information3.1 Viewing the Switch Interface •Viewing the Switch Interface3.1.1 Viewing the Switch Configuration System Name 3-4 WS5100 Series Switch System Reference Guide 3.1.1.1Viewing Dashboard Details•Alarms •Ports •Environment •CPU Memory 3.1.2Viewing Switch Statistics Number of MUs 3.2.1Viewing the Port Configuration 3.2 Viewing Switch Port Information3.2.1.1Editing the Port Configuration 3.2.2Viewing the Ports Runtime Status 3.2.3 Viewing the Ports Statistics 2. Select the Statistics tab 3.2.3.1Detailed Port Statistics To view detailed statistics for a port2.Click the Details button 3.2.3.2Viewing the Port Statistics Graph •Input Bytes •Input Pkts Dropped 3.3 Viewing Switch Configurations NameSize Bytes Modified Created3.3.2Editing a Config File 3.3.3Transferring a Config File File 3.4Viewing Switch Firmware InformationPassword Path3.4.1Editing the Switch Firmware 2.Click the Edit button If using TFTP, use tftp://ipaddress/path/filename 3.4.3 Updating the Switch FirmwareIP Address 3.5 Configuring Automatic UpdatesEnable boot of the switchFile Name With 3.6 Viewing the Switch Alarm Log 3.6.1Viewing Alarm Log Details 3.7Viewing Switch Licenses 3.8How to use the Filter Option 3-30 WS5100 Series Switch System Reference Guide •Viewing and Configuring Switch WLANs Network Setup•Viewing and Configuring Layer 2 Virtual LANs •Configuring Switch Virtual InterfacesWireless LANs Resolution EntriesSwitch Virtual see Configuring Switch Virtual Interfaces on page4.2 Viewing Network IP Information 4.2.1Configuring DNS•Configuring DNS •Configuring IP Forwarding •Viewing Address Resolution4.2.1.1Adding an IP Address for a DNS Server 4.2.1.2Configuring Global Settings4.2.2Configuring IP Forwarding The following details display in the table 4.2.2.1Adding a New Static Route 2.Select the Address Resolution tab 4.2.3Viewing Address ResolutionThe following details display in the table 4.3 Viewing and Configuring Layer 2 Virtual LANsName 4.3.1 Editing the Details of an Existing VLAN •Viewing Virtual Interface Statistics 4.4Configuring Switch Virtual Interfaces4.4.1Configuring the Virtual Interface •Configuring the Virtual InterfaceName 4.4.1.2Modifying a Virtual Interface 4.4.1.1Adding a Virtual Interface4.4.2Viewing Virtual Interface Statistics Packets In 2. Select the Statistics tabName Bytes InTo view detailed virtual interface statistics 4.4.2.1Viewing Virtual Interface Statistics2. Click the Details button 2.Click the Graph button •Viewing VLAN/Tunnel Assignments •Configuring WMM 4.5Viewing and Configuring Switch WLANs4.5.1Configuring WLANs •Configuring WLANs •Viewing WLAN Statistics2.Click the Configuration tab To configure a WLAN4.5.1.1Editing the WLAN Configuration 4. Click the Edit button VLAN ID Configuring WPA/WPA2 using TKIP and CCMP on page WPA-WPA2-TKIPCCMP on page •Configuring Hotspots 4.5.1.2Configuring Authentication TypesConfiguring 802.1x EAP •Configuring 802.1x EAP •Configuring KerborosConfiguring Kerboros MU TimeoutMU Max Retries 3.Click the Edit button •Setting up the Radius server Configuring HotspotsSwitch Hotspot Redirection •Setting up the Hotspot Web pagesConfiguring an Internal Hotspot Footer Text Network SetupTitle Text Header TextConfiguring External Hotspot Main Logo URLDescriptive Text Login Page URL Configuring Advanced Hotspot 4.Select the Hotspot button from within the Authentication field Configuring Dynamic MAC ACL Configuring External Radius Server Support4-36 WS5100 Series Switch System Reference Guide 3.Click the Edit button •Motorola user privilege values • Configuring WEP 128 / KeyGuard 4.5.1.3Configuring Different Encryption TypesConfiguring the User Login Sources • Configuring WEPConfiguring WEP Configuring WEP 128 / KeyGuard 6.Use the Key #1-4 areas to specify key numbers Configuring WPA/WPA2 using TKIP and CCMP •1011121314151617 •18191A1B1C1D1E1F 4.5.2 Viewing WLAN Statistics 2. Click the Statistics tab 4.5.2.1Viewing WLAN Statistics in Detail ESSID To view detailed graphical statistics for a WLAN 2. Click the Graph button 4.5.2.3Viewing WLAN Switch Statistics 2.Click the VLAN/Tunnel Assignment tab 4.5.3Viewing VLAN/Tunnel Assignments4.5.4Configuring WMM WMM enabled Access Category to 4.5.4.1Editing WMM Settings 4.6Viewing Associated MU Details 4.6.1 Viewing MU Status•Viewing MU Status •Viewing MU Statistics 2. Click the Status tab 4.6.1.1Viewing MU Details 4.6.2Viewing MU Statistics 2. Click the Statistics tab 4.6.2.1Viewing MU Statistics in Detail MAC Address 4.6.2.2View a MU Statistics Graph 4.7Viewing Access Port Information•Viewing AP Statistics 4.7.1Configuring Access Port Radios•Configuring Access Port Radios •Configuring WLAN Assignment •Configuring WMMAP Type Configuring Layer 3 Access Port Adoption on page 4.7.1.1Configuring an AP’s Global SettingsPort Authentication 4.7.1.2 Editing AP Settings4.Click the Configure Port Authentication button To edit a radio’s configuration Maximum MUs path Network SetupRTS Threshold portsConfiguring Rate Settings 4.7.1.3Adding APs 4.7.2 Viewing AP Statistics 2. Click the Statistics tab 4.7.2.1Viewing AP Statistics in Detail 4.7.2.2Viewing AP Statistics in Graphical Format 2.Click the WLAN Assignment tab 4.7.3Configuring WLAN Assignment4.7.3.1Editing a WLAN Assignment 2.Click the WLAN Assignment tab 4.7.4Configuring WMM4.7.4.1Editing WMM Settings •Configuring Layer 3 Access Port Adoption 4.8 Viewing Access Port Adoption Defaults4.8.1Configuring AP Adoption Defaults •Configuring AP Adoption Defaults2.Click the Configuration tab 4.8.1.1Editing Default Radio Adoption Settings •Primary Only: Enables only the primary antenna the transmission path 4-86 WS5100 Series Switch System Reference GuideRTS Threshold portsTo configure a radio’s rate settings Configuring Rate Settings4.8.3Configuring WLAN Assignment 4.8.2 Configuring Layer 3 Access Port Adoption2.Click the WLAN Assignment tab Select/Change Assigned WLANs4.8.4Configuring WMM 4.8.4.1Editing Access Port Adoption WMM Settings •Viewing Unadopted Access Ports 4.9 Viewing Access Port Status4.9.1Viewing Adopted Access Ports •Viewing Adopted Access Ports4.9.2Viewing Unadopted Access Ports To view existing Radio Configuration information2. Click the Adopted AP tab 2.Click the Unadopted AP tab Network Setup 4-96 WS5100 Series Switch System Reference Guide •Configuring Switch Redundancy •Layer 3 Mobility Switch Services•Displaying the Services Interface •DHCP Server Settings •Configuring Secure NTPTo display a Services Summary 5.1 Displaying the Services Interface•Configuring Excluded IP Address Information 5.2 DHCP Server Settings5.2.1Configuring the Switch DHCP Server •Configuring the Switch DHCP ServerTo configure DHCP Domain Lease Timedd:hh:mm there are fewer users5.2.1.2Adding a New DHCP Pool 2. Click the Add button at the bottom of the screen 5.2.1.3Configuring DHCP Global Options 5.2.1.4Configuring DHCP Server DDNS Values 10.Refer to the Status field To view the attributes of existing host pools 5.2.3Configuring Excluded IP Address Information 5.2.4 Configuring DHCP Server Relay Information 2. Click the Relay tab 5.2.5 Viewing DHCP Server Status •Defining a SNTP Neighbor Configuration 5.3Configuring Secure NTP5.3.1Defining the SNTP Configuration •Defining the SNTP Configuration2. Select the Configuration tab 5.3.2Adding a New SNTP Symmetric Key 5.3.3Defining a SNTP Neighbor Configuration 2. Select the NTP Neighbor tab 5.3.4 Adding an NTP Neighbor 5.3.5 Viewing SNTP Associations 2.Select the NTP Associations tab 5.3.6 Viewing SNTP Status 5.4 Configuring Switch Redundancy Root delayRoot Dispersion 5-26 WS5100 Series Switch System Reference Guide •Configuring Redundancy Group Membership •Reviewing Redundancy StatusTo configure switch redundancy 5.4.1Reviewing Redundancy Status 2. Select the Status tab 5.4.2Configuring Redundancy Group Membership 2. Select the Member tab module 5.4.2.1Displaying Redundancy Member DetailsLicense Aggregation Rules on page reboot of the switchsince the last reboot adopted5.4.2.2Adding a Redundancy Group Member 5.4.3Redundancy Group License Aggregation Rules•Defining the Layer 3 Peer List 5.5.1Configuring Layer 3 Mobility•Configuring Layer 3 Mobility 5.5Layer 3 MobilityTo locate switch IP addresses on the network To configure Layer 3 Mobility for the switch 5.5.2 Defining the Layer 3 Peer List 2.Select the Peer Statistics tab 5.5.3 Reviewing Layer 3 Peer List Statistics5.5.4Reviewing Layer 3 MU Status 5.6 Configuring GRE Tunnels 2. Select the MU Status tab• Assigning routes to different types of traffic •Assigning priority to different types of traffic Destinations IP To configure GRE tunnelling on the switchName Source IPaddress 5.6.1Editing the Properties of a GRE Tunnel5.6.2Adding a New GRE Tunnel 2.Select the Enable Neighbor Recovery checkbox 5.7Configuring Self Healing2.Select the Neighbor Details tab 5.7.1Configuring Self Healing Neighbor Details2.Select the Neighbor Details tab 5.7.1.1Editing the Properties of a Neighbor3. Select an existing neighbor and click the Edit button 5.8.1Configuring Discovery Profiles 5.8 Configuring Switch DiscoveryStart IP Address IndexProfile Name to be located5.8.1.1Adding a New Discovery Profile 5.8.2Viewing Discovered Switches IP Address •Configuring IKE Settings •Configuring IPSec VPN Switch Security•Configuring Wireless Filters •Configuring ACLs •Configuring NAT InformationAccess Port Intrusion Wireless Filters on pageConfiguring Trustpoint Associated Keys on page 6-2 WS5100 Series Switch System Reference Guide•Approved APs Reported by APs 6.2.1Enabling and Configuring AP Detection•Enabling and Configuring AP Detection 6.2 AP Intrusion Detection5.Click the Apply button to save the changes made 6.2.1.1Adding or Editing an Allowed AP 2.Select the Approved APs Reported by APs tab 6.2.2 Approved APs Reported by APs2.Click on the Unapproved APs Reported by APs tab 6.2.3 Unapproved APs Reported by APs2.Click on the Unapproved APs Reported by MUs tab 6.2.4Unapproved APs Reported by MUs•Viewing Filtered MUs 6.3.1Configuring MU Intrusion Detection•Configuring MU Intrusion Detection 6.3MU Intrusion DetectionSwitch 2.Click the Configuration tab•Collection Settings •Violation Parameters and switch columns6.3.2Viewing Filtered MUs 6.4Configuring Wireless Filters Editing an Existing Wireless Filter on page 6.4.1Editing an Existing Wireless Filter 6.4.2 Adding a new Wireless Filter •Attaching an ACL on a WLAN Interface/Port 6.5Configuring ACLs•Configuring an ACL •Attaching an ACL 6.4.3 Associating an ACL with WLAN•ACL Actions •Precedence Order •Router ACLs •Port ACLs •Wireless LAN ACLs6.5.1 ACL Overview 6.5.1.1Router ACLs6.5.1.2Port ACLs 6.5.1.3Wireless LAN ACLs 6.5.1.4ACL Actions6.5.1.5Precedence Order 6.5.2.1Adding a New ACL 6.5.2 Configuring an ACL6.5.2.2Adding a New ACL Rule Precedence is a required parameter 6.5.2.3Editing an Existing Rule 6.5.3 Attaching an ACL 6.5.3.1Adding a New ACL Configuration6.5.4Attaching an ACL on a WLAN Interface/Port 6.5.4.1Adding a New ACL WLAN Configuration 6.5.5 Reviewing ACL Statistics •Defining Dynamic NAT Translations 6.6Configuring NAT Information•Configuring NAT Interfaces •Viewing NAT Status 6.6.1Defining Dynamic NAT TranslationsType 2.Click on the Dynamic Translation tab 6.6.1.1Adding a New Dynamic NAT Configuration2.Click the Static Translation tab 6.6.2 Defining Static NAT Translations2.Click on the Static Translation tab 6.6.2.1Adding a New Static NAT Configuration3. Click the Add button 6.6.3 Configuring NAT Interfaces 6.6.4 Viewing NAT Status 6.7Configuring IKE Settings •Defining the IKE Configuration•Setting IKE Policies •Viewing SA Statistics 2.Click the Configurations tab 6.7.1 Defining the IKE Configurationof peers 6.7.2 Setting IKE PoliciesAggressive Mode Peer IP Address•An encryption scheme protecting the data Priority Priority 6.7.3 Viewing SA Statistics 6.8Configuring IPSec VPN •Configure a DHCP Sever to give public IP address•Configure a Crypto policy IKE •Configuring IPSEC VPN Authentication •Configure security associations parameters•Defining the IPSec Configuration •Defining the IPSec VPN Remote Configuration•Viewing IPSec Security Associations 6.8.1Defining the IPSec Configuration6.8.1.1Editing an Existing Transform Set 6.8.1.2Adding a New Transform Set 3. Click the Add button 6.8.2 Defining the IPSec VPN Remote Configuration 6-50 WS5100 Series Switch System Reference Guide 6.8.3 Configuring IPSEC VPN Authentication2.Click the Authentication tab 6-52 WS5100 Series Switch System Reference Guide 6.8.4 Configuring Crypto Maps•Crypto Map Interfaces 6.8.4.1Crypto Map Entries•Crypto Map Entries •Crypto Map Peers •Crypto Map Manual SAs •Crypto Map Transform SetsMode Config 6.8.4.2Crypto Map Peers 2. Click the Crypto Maps tab and select Peers 6.8.4.3Crypto Map Manual SAs 6-58 WS5100 Series Switch System Reference Guide 6.8.4.4Crypto Map Transform SetsTransform Set Priority / Seq #higher the priority Name6.8.4.5Crypto Map Interfaces 6.8.5 Viewing IPSec Security Associations To display IPSec VPN security associations2.Click the IPSec SAs tab •Configuring Radius Users 6.9Configuring the Radius Server•Defining the Radius Configuration •Configuring Radius Authentication and Accounting6.9.1.1User Database •TTLS and MSCHAPv2 •PEAP and GTC•PEAP and MSCHAPv2 6.9.1.6Accounting 6.9.1.3Access Policy6.9.1.4Proxy to External Radius Server 6.9.1.5LDAP6.9.3 Defining the Radius Configuration 6.9.3.2Radius Proxy Server Configuration 6.9.3.1Radius Client ConfigurationTo configure Radius proxy server support 2.Select the Authentication tab 6.9.5Configuring Radius Users 2.Select the Users tab 6.9.6 Configuring Radius User Groups 2. Select the Groups tab 6.9.7 Viewing Radius Accounting Logs 2.Select the Accounting Logs tab 6.10 Creating Server Certificates6.10.1Using Trustpoints to Configure Certificates •Using Trustpoints to Configure Certificates•Configuring Trustpoint Associated Keys 6.10.1.1Creating a Server / CA Root Certificate akey for you new certificate Using the Wizard to Create a New CertificateSelect a trustpoint for the new certificate City Country2 characters StateUsing the Wizard Delete Operation 6.10.2Configuring Trustpoint Associated Keys 6.10.2.1Adding a New Key 6.10.2.2Transferring Keys 6-84 WS5100 Series Switch System Reference Guide •Configuring Access Control Switch Management7.1 Displaying the Management Access Interface •Displaying the Management Access InterfaceTo display the main Management screen 7.2 Configuring Access Controlon Management •Accessing SNMP v2/v3 Statistics 7.3Configuring SNMP Access•Configuring SNMP v1/v2 Access •Configuring SNMP v3 Access7.3.1 Configuring SNMP v1/v2 Access 7-6 WS5100 Series Switch System Reference Guide 7.3.2Configuring SNMP v3 AccessThe unique SNMPv3 usernames and passwords include 7-8 WS5100 Series Switch System Reference Guide 7.3.3 Accessing SNMP v2/v3 Statistics Usm Statistics Values 7-10 WS5100 Series Switch System Reference Guide•Configuring Trap Thresholds 7.4 Configuring SNMP Traps7.4.1Enabling Trap Configuration •Enabling Trap Configurationthe Wireless category enable all traps within the Cluster categoryenable all traps within the Mobility category Wireless2.Click the Wireless Statistics Thresholds tab 7.4.2 Configuring Trap Thresholds7-14 WS5100 Series Switch System Reference Guide Threshold Name 7.4.2.1Wireless Trap Threshold ValuesSwitch Management Wireless7.5 Configuring SNMP Trap Receivers Timeout Trap VersionDestination Address Port Community Retry Count 7.5.2Adding SNMP Trap Receivers 7.5.1Editing SNMP Trap Receivers•Configuring Switch Authentication 7.6Configuring Management Users7.6.1 Configuring Local Users •Configuring Local Users7.6.1.1Creating a New Local User 7.6.1.2Modifying an Existing Local User Monitor 7.6.1.3Creating a Guest Admin and Guest User 7.6.2Configuring Switch Authentication 2. Click on the Authentication tab 2.Click on the Authentication tab Adding a New Radius Server on page7.6.2.2Adding a New Radius Server 6.Click on OK to complete the addition of the Radius Server 7-28 WS5100 Series Switch System Reference Guide •Configuring System Logging Diagnostics8.1 Displaying the Main Diagnostic Interface •Displaying the Main Diagnostic Interface8.1.1 Switch Environment 8.1.2CPU Performance 8.1.4Switch Disk Allocation 8.1.3 Switch Memory Allocation8.1.5Switch Memory Processes 8.1.6Other Switch Resources •Log Options •File Management 8.2 Configuring System Logging8.2.1Log Options 2.Select the Other Resources tab2. Select the Log Options tab 8.2.2File Management To display the entire contents of a log file 8.2.2.2Transferring Log Files 8-12 WS5100 Series Switch System Reference Guide 8.3 Reviewing Core SnapshotsTransferring Core Snapshots on page 8.3.1Transferring Core Snapshots8-14 WS5100 Series Switch System Reference Guide 8.4 Reviewing Panic SnapshotsCreated NameSize Displays the size of the panic file in bytes8.4.2 Transferring Panic Files 8.4.1 Viewing Panic Details8.5 Debugging the Applet 8.6Configuring a Ping To view the switch’s existing ping configuration 8.6.2Adding a New Ping Test Test Name To view ping test statistics 8.6.3 Viewing Ping Statistics1.Select Diagnostics > Ping from the main menu 8-22 WS5100 Series Switch System Reference GuideLast Response DiagnosticsAverage RTT and target device8-24 WS5100 Series Switch System Reference Guide General Information Appendix A Customer SupportMotorola’s Enterprise Mobility Support Center Customer Support Web SiteA-2 WS5100 Series System Reference Guide Page 72E-100957-01Revision A June MOTOROLA INC