Manuals / Motorola / Computer Equipment / Switch

Motorola WS5100 manual Using the Wizard to Create a New Certificate, akey for you new certificate

Models: WS5100

1 364

Download 364 pages 29.43 Kb

Page 301

Using the Wizard to Create a New Certificate

Switch Security 6-77

Using the Wizard to Create a New Certificate

To generate a new self-signed certificate or prepare a certificate request which can be send to a Certificate Authority (CA):

1. Select the Create new certificate radio button in the wizard and click the Next button.

The second page of the wizard contains two editable fields, Select Certificate Operation and Specify

akey for you new certificate.

2.Use the second page to create either a self signed certificate or prepare for a certificate request. For certificate operation, select one of the following options:

•Generate a self signed certificate — Configure the properties of a new self-signed certificate. Once the values of the certificate are defined, the user can create and install the certificate.

•Prepare a certificate request to send to a Certificate Authority — Configure and save a valid certificate request. Once the values of the certificate are defined, the user can create and install the certificate.

Image 301

Motorola WS5100 manual Using the Wizard to Create a New Certificate, akey for you new certificate

Contents

System Reference Guide WS5100 Series Switch2007 Motorola, Inc. All rights reserved Chapter 3. Switch Information ContentsChapter 1. Overview Chapter 5. Switch Services Chapter 4. Network SetupTOC-2 WS5100 Series Switch System Reference Guide TOC-3 Chapter 6. Switch SecurityChapter 8. Diagnostics Chapter 7. Switch ManagementTOC-4 WS5100 Series Switch System Reference Guide TOC-5 TOC-6 WS5100 Series Switch System Reference Guide Introduction About This GuideDocumentation Set Document ConventionsNotational Conventions 1.1 Hardware Overview Overview1.1.1.1Power Cord Specifications 1.1.1 Physical Specifications1.1.1.2Power Protection 1.1.2 System Status LED CodesStart Up Error CodesPrimary Standby•Infrastructure Features •Wireless Switching 1.2.1 Infrastructure Features•Wired Switching •Management Features •Security Features •Access Port Support1.2.1.3Configuration Management 1.2.1.1Installation FeatureText Based Configuration 1.2.1.4Diagnostics1.2.1.6Tracing / Logging 1.2.1.5Serviceability1.2.1.7Process Monitor 1.2.1.8Hardware Abstraction Layer and Drivers1.2.1.11Password Recovery 1.2.2 Wireless SwitchingConfiguring Switch Redundancy on page Switch Password Recovery on page•Self Healing •Wireless Capacity 1.2.2.1Physical Layer Features 802.11a•AP and MU Load Balancing •Wireless Roaming •Power Save Polling •QoS1.2.2.4HotSpot / IP Redirect 1.2.2.3Proxy-ARP1.2.2.5IDM Identity Driven Management Configuring WMM on page1.2.2.6Voice Prioritization 1.2.2.7Self Healing1.2.2.8Wireless Capacity Neighbor Configuration•AP Balancing Across Multiple Switches Detector APs1.2.2.10Wireless Roaming AP Balancing Across Multiple Switches•Interswitch Layer 2 Roaming •International Roaming •MU Move CommandMU Move Command Interswitch Layer 2 RoamingL3 Roaming Fast Roaming1.2.2.12QoS 1.2.2.11Power Save Polling802.11e QoS 802.1p SupportData QoS 1.2.2.13Wireless Layer 2 SwitchingDCSCP to AC Mapping 1.2.2.14Automatic Channel SelectionDHCP Server Settings on page 1.2.3 Wired Switching1.2.3.1DHCP Servers 1.2.3.2DDNS1.2.3.4VLAN Enhancements 1.2.4 Management Features1.2.3.5Interface Management 1.2.3.6Multiple WLAN Support1.2.5.1Encryption and Authentication 1.2.5 Security Features•Encryption and Authentication •MU Authentication •Switch-to-Wired •802.1x AuthenticationWPA2 1.2.5.2MU AuthenticationKeyguard-WEP Kerberos1.2.5.7802.1x Authentication 1.2.5.6Switch-to-Wired1.2.5.3Secure Beacon 1.2.5.4MU to MU AllowReset Username/Password to Factory Defaults Change Username/Password after AP Adoption1.2.5.8IEEE 802.1AB LLDP 1.2.5.9 WIPS•RF scan by Access Port on all channels RF scan by Access Port on all channels1.2.5.10Rogue AP Detection •SNMP Trap on discovery •Authorized AP ListsSNMP Trap on discovery Configuring ACLs on pageAuthorized AP Lists Rogue AP Report1.2.5.14NAT 1.2.6 Access Port Support1.2.5.15Certificate Management •Accessing the Switch Web UI 2.1Accessing the Switch Web UI•Switch Password Recovery •Upgrading the Switch Image •Auto InstallationTo display the switch Web UI 2.1.2 Connecting to the Switch Web UIThe switch login screen displays Switch Web UI Access and Image Upgrades 2.2 Switch Password Recovery2.3 Upgrading the Switch Image 2.4 Auto Installation Configuring Auto Install via the CLI 2.6AP-4131Access Point to Access Port Conversion 2.5 Downgrading the Switch Image2-8 WS5100 Series Switch System Reference Guide 3.Select the AP Installation main menu item7.Select the Firmware Update Menu-F3 menu item 2-10 WS5100 Series Switch System Reference Guide 3.1 Viewing the Switch Interface Switch Information•Viewing the Switch Interface •Viewing Switch Port Information3.1.1 Viewing the Switch Configuration System Name 3-4 WS5100 Series Switch System Reference Guide 3.1.1.1Viewing Dashboard Details•Alarms •Ports •Environment •CPU Memory 3.1.2Viewing Switch Statistics Number of MUs 3.2.1Viewing the Port Configuration 3.2 Viewing Switch Port Information3.2.1.1Editing the Port Configuration 3.2.2Viewing the Ports Runtime Status 3.2.3 Viewing the Ports Statistics 2. Select the Statistics tab To view detailed statistics for a port 3.2.3.1Detailed Port Statistics2.Click the Details button 3.2.3.2Viewing the Port Statistics Graph •Input Bytes •Input Pkts Dropped Name 3.3 Viewing Switch ConfigurationsSize Bytes Modified Created3.3.2Editing a Config File 3.3.3Transferring a Config File Password 3.4Viewing Switch Firmware InformationPath File3.4.1Editing the Switch Firmware 2.Click the Edit button If using TFTP, use tftp://ipaddress/path/filename 3.4.3 Updating the Switch FirmwareEnable 3.5 Configuring Automatic Updatesboot of the switch IP AddressFile Name With 3.6 Viewing the Switch Alarm Log 3.6.1Viewing Alarm Log Details 3.7Viewing Switch Licenses 3.8How to use the Filter Option 3-30 WS5100 Series Switch System Reference Guide •Viewing and Configuring Layer 2 Virtual LANs Network Setup•Configuring Switch Virtual Interfaces •Viewing and Configuring Switch WLANsSwitch Virtual Resolution Entriessee Configuring Switch Virtual Interfaces on page Wireless LANs•Configuring DNS •Configuring IP Forwarding 4.2.1Configuring DNS•Viewing Address Resolution 4.2 Viewing Network IP Information4.2.1.1Adding an IP Address for a DNS Server 4.2.1.2Configuring Global Settings4.2.2Configuring IP Forwarding The following details display in the table 4.2.2.1Adding a New Static Route 2.Select the Address Resolution tab 4.2.3Viewing Address ResolutionThe following details display in the table 4.3 Viewing and Configuring Layer 2 Virtual LANsName 4.3.1 Editing the Details of an Existing VLAN 4.4.1Configuring the Virtual Interface 4.4Configuring Switch Virtual Interfaces•Configuring the Virtual Interface •Viewing Virtual Interface StatisticsName 4.4.1.2Modifying a Virtual Interface 4.4.1.1Adding a Virtual Interface4.4.2Viewing Virtual Interface Statistics Name 2. Select the Statistics tabBytes In Packets InTo view detailed virtual interface statistics 4.4.2.1Viewing Virtual Interface Statistics2. Click the Details button 2.Click the Graph button 4.5.1Configuring WLANs 4.5Viewing and Configuring Switch WLANs•Configuring WLANs •Viewing WLAN Statistics •Viewing VLAN/Tunnel Assignments •Configuring WMM2.Click the Configuration tab To configure a WLAN4.5.1.1Editing the WLAN Configuration 4. Click the Edit button VLAN ID WPA-WPA2-TKIP Configuring WPA/WPA2 using TKIP and CCMP on pageCCMP on page Configuring 802.1x EAP 4.5.1.2Configuring Authentication Types•Configuring 802.1x EAP •Configuring Kerboros •Configuring HotspotsMU Timeout Configuring KerborosMU Max Retries 3.Click the Edit button Switch Hotspot Redirection Configuring Hotspots•Setting up the Hotspot Web pages •Setting up the Radius serverConfiguring an Internal Hotspot Title Text Network SetupHeader Text Footer TextMain Logo URL Configuring External HotspotDescriptive Text Login Page URL Configuring Advanced Hotspot 4.Select the Hotspot button from within the Authentication field Configuring External Radius Server Support Configuring Dynamic MAC ACL4-36 WS5100 Series Switch System Reference Guide 3.Click the Edit button •Motorola user privilege values Configuring the User Login Sources 4.5.1.3Configuring Different Encryption Types• Configuring WEP • Configuring WEP 128 / KeyGuardConfiguring WEP Configuring WEP 128 / KeyGuard 6.Use the Key #1-4 areas to specify key numbers Configuring WPA/WPA2 using TKIP and CCMP •1011121314151617 •18191A1B1C1D1E1F 4.5.2 Viewing WLAN Statistics 2. Click the Statistics tab 4.5.2.1Viewing WLAN Statistics in Detail ESSID To view detailed graphical statistics for a WLAN 2. Click the Graph button 4.5.2.3Viewing WLAN Switch Statistics 2.Click the VLAN/Tunnel Assignment tab 4.5.3Viewing VLAN/Tunnel Assignments4.5.4Configuring WMM WMM enabled Access Category to 4.5.4.1Editing WMM Settings 4.6.1 Viewing MU Status 4.6Viewing Associated MU Details•Viewing MU Status •Viewing MU Statistics 2. Click the Status tab 4.6.1.1Viewing MU Details 4.6.2Viewing MU Statistics 2. Click the Statistics tab 4.6.2.1Viewing MU Statistics in Detail MAC Address 4.6.2.2View a MU Statistics Graph 4.7Viewing Access Port Information•Configuring Access Port Radios 4.7.1Configuring Access Port Radios•Configuring WLAN Assignment •Configuring WMM •Viewing AP StatisticsAP Type Configuring Layer 3 Access Port Adoption on page 4.7.1.1Configuring an AP’s Global Settings4.7.1.2 Editing AP Settings Port Authentication4.Click the Configure Port Authentication button To edit a radio’s configuration Maximum MUs RTS Threshold Network Setupports pathConfiguring Rate Settings 4.7.1.3Adding APs 4.7.2 Viewing AP Statistics 2. Click the Statistics tab 4.7.2.1Viewing AP Statistics in Detail 4.7.2.2Viewing AP Statistics in Graphical Format 2.Click the WLAN Assignment tab 4.7.3Configuring WLAN Assignment4.7.3.1Editing a WLAN Assignment 2.Click the WLAN Assignment tab 4.7.4Configuring WMM4.7.4.1Editing WMM Settings 4.8.1Configuring AP Adoption Defaults 4.8 Viewing Access Port Adoption Defaults•Configuring AP Adoption Defaults •Configuring Layer 3 Access Port Adoption2.Click the Configuration tab 4.8.1.1Editing Default Radio Adoption Settings •Primary Only: Enables only the primary antenna RTS Threshold 4-86 WS5100 Series Switch System Reference Guideports the transmission pathTo configure a radio’s rate settings Configuring Rate Settings4.8.3Configuring WLAN Assignment 4.8.2 Configuring Layer 3 Access Port Adoption2.Click the WLAN Assignment tab Select/Change Assigned WLANs4.8.4Configuring WMM 4.8.4.1Editing Access Port Adoption WMM Settings 4.9.1Viewing Adopted Access Ports 4.9 Viewing Access Port Status•Viewing Adopted Access Ports •Viewing Unadopted Access PortsTo view existing Radio Configuration information 4.9.2Viewing Unadopted Access Ports2. Click the Adopted AP tab 2.Click the Unadopted AP tab Network Setup 4-96 WS5100 Series Switch System Reference Guide •Displaying the Services Interface Switch Services•DHCP Server Settings •Configuring Secure NTP •Configuring Switch Redundancy •Layer 3 MobilityTo display a Services Summary 5.1 Displaying the Services Interface5.2.1Configuring the Switch DHCP Server 5.2 DHCP Server Settings•Configuring the Switch DHCP Server •Configuring Excluded IP Address InformationTo configure DHCP dd:hh:mm Lease Timethere are fewer users Domain5.2.1.2Adding a New DHCP Pool 2. Click the Add button at the bottom of the screen 5.2.1.3Configuring DHCP Global Options 5.2.1.4Configuring DHCP Server DDNS Values 10.Refer to the Status field To view the attributes of existing host pools 5.2.3Configuring Excluded IP Address Information 5.2.4 Configuring DHCP Server Relay Information 2. Click the Relay tab 5.2.5 Viewing DHCP Server Status 5.3.1Defining the SNTP Configuration 5.3Configuring Secure NTP•Defining the SNTP Configuration •Defining a SNTP Neighbor Configuration2. Select the Configuration tab 5.3.2Adding a New SNTP Symmetric Key 5.3.3Defining a SNTP Neighbor Configuration 2. Select the NTP Neighbor tab 5.3.4 Adding an NTP Neighbor 5.3.5 Viewing SNTP Associations 2.Select the NTP Associations tab 5.3.6 Viewing SNTP Status Root delay 5.4 Configuring Switch RedundancyRoot Dispersion 5-26 WS5100 Series Switch System Reference Guide •Reviewing Redundancy Status •Configuring Redundancy Group MembershipTo configure switch redundancy 5.4.1Reviewing Redundancy Status 2. Select the Status tab 5.4.2Configuring Redundancy Group Membership 2. Select the Member tab module 5.4.2.1Displaying Redundancy Member Detailssince the last reboot reboot of the switchadopted License Aggregation Rules on page5.4.2.2Adding a Redundancy Group Member 5.4.3Redundancy Group License Aggregation Rules•Configuring Layer 3 Mobility 5.5.1Configuring Layer 3 Mobility5.5Layer 3 Mobility •Defining the Layer 3 Peer ListTo locate switch IP addresses on the network To configure Layer 3 Mobility for the switch 5.5.2 Defining the Layer 3 Peer List 2.Select the Peer Statistics tab 5.5.3 Reviewing Layer 3 Peer List Statistics5.5.4Reviewing Layer 3 MU Status 2. Select the MU Status tab 5.6 Configuring GRE Tunnels• Assigning routes to different types of traffic •Assigning priority to different types of traffic Name To configure GRE tunnelling on the switchSource IP Destinations IPaddress 5.6.1Editing the Properties of a GRE Tunnel5.6.2Adding a New GRE Tunnel 2.Select the Enable Neighbor Recovery checkbox 5.7Configuring Self Healing2.Select the Neighbor Details tab 5.7.1Configuring Self Healing Neighbor Details2.Select the Neighbor Details tab 5.7.1.1Editing the Properties of a Neighbor3. Select an existing neighbor and click the Edit button 5.8.1Configuring Discovery Profiles 5.8 Configuring Switch DiscoveryProfile Name Indexto be located Start IP Address5.8.1.1Adding a New Discovery Profile 5.8.2Viewing Discovered Switches IP Address •Configuring Wireless Filters •Configuring ACLs Switch Security•Configuring NAT Information •Configuring IKE Settings •Configuring IPSec VPNConfiguring Trustpoint Associated Keys on page Wireless Filters on page6-2 WS5100 Series Switch System Reference Guide Access Port Intrusion•Enabling and Configuring AP Detection 6.2.1Enabling and Configuring AP Detection6.2 AP Intrusion Detection •Approved APs Reported by APs5.Click the Apply button to save the changes made 6.2.1.1Adding or Editing an Allowed AP 2.Select the Approved APs Reported by APs tab 6.2.2 Approved APs Reported by APs2.Click on the Unapproved APs Reported by APs tab 6.2.3 Unapproved APs Reported by APs2.Click on the Unapproved APs Reported by MUs tab 6.2.4Unapproved APs Reported by MUs•Configuring MU Intrusion Detection 6.3.1Configuring MU Intrusion Detection6.3MU Intrusion Detection •Viewing Filtered MUs•Collection Settings •Violation Parameters 2.Click the Configuration taband switch columns Switch6.3.2Viewing Filtered MUs 6.4Configuring Wireless Filters Editing an Existing Wireless Filter on page 6.4.1Editing an Existing Wireless Filter 6.4.2 Adding a new Wireless Filter •Configuring an ACL •Attaching an ACL 6.5Configuring ACLs6.4.3 Associating an ACL with WLAN •Attaching an ACL on a WLAN Interface/Port6.5.1 ACL Overview •Router ACLs •Port ACLs •Wireless LAN ACLs6.5.1.1Router ACLs •ACL Actions •Precedence Order6.5.1.2Port ACLs 6.5.1.4ACL Actions 6.5.1.3Wireless LAN ACLs6.5.1.5Precedence Order 6.5.2.1Adding a New ACL 6.5.2 Configuring an ACL6.5.2.2Adding a New ACL Rule Precedence is a required parameter 6.5.2.3Editing an Existing Rule 6.5.3 Attaching an ACL 6.5.3.1Adding a New ACL Configuration6.5.4Attaching an ACL on a WLAN Interface/Port 6.5.4.1Adding a New ACL WLAN Configuration 6.5.5 Reviewing ACL Statistics •Configuring NAT Interfaces •Viewing NAT Status 6.6Configuring NAT Information6.6.1Defining Dynamic NAT Translations •Defining Dynamic NAT TranslationsType 2.Click on the Dynamic Translation tab 6.6.1.1Adding a New Dynamic NAT Configuration2.Click the Static Translation tab 6.6.2 Defining Static NAT Translations2.Click on the Static Translation tab 6.6.2.1Adding a New Static NAT Configuration3. Click the Add button 6.6.3 Configuring NAT Interfaces 6.6.4 Viewing NAT Status •Defining the IKE Configuration 6.7Configuring IKE Settings•Setting IKE Policies •Viewing SA Statistics 2.Click the Configurations tab 6.7.1 Defining the IKE ConfigurationAggressive Mode 6.7.2 Setting IKE PoliciesPeer IP Address of peers•An encryption scheme protecting the data Priority Priority 6.7.3 Viewing SA Statistics •Configure a DHCP Sever to give public IP address 6.8Configuring IPSec VPN•Configure a Crypto policy IKE •Defining the IPSec Configuration •Configure security associations parameters•Defining the IPSec VPN Remote Configuration •Configuring IPSEC VPN Authentication•Viewing IPSec Security Associations 6.8.1Defining the IPSec Configuration6.8.1.1Editing an Existing Transform Set 6.8.1.2Adding a New Transform Set 3. Click the Add button 6.8.2 Defining the IPSec VPN Remote Configuration 6-50 WS5100 Series Switch System Reference Guide 6.8.3 Configuring IPSEC VPN Authentication2.Click the Authentication tab 6-52 WS5100 Series Switch System Reference Guide 6.8.4 Configuring Crypto Maps•Crypto Map Entries •Crypto Map Peers 6.8.4.1Crypto Map Entries•Crypto Map Manual SAs •Crypto Map Transform Sets •Crypto Map InterfacesMode Config 6.8.4.2Crypto Map Peers 2. Click the Crypto Maps tab and select Peers 6.8.4.3Crypto Map Manual SAs 6-58 WS5100 Series Switch System Reference Guide 6.8.4.4Crypto Map Transform Setshigher the priority Priority / Seq #Name Transform Set6.8.4.5Crypto Map Interfaces To display IPSec VPN security associations 6.8.5 Viewing IPSec Security Associations2.Click the IPSec SAs tab •Defining the Radius Configuration 6.9Configuring the Radius Server•Configuring Radius Authentication and Accounting •Configuring Radius Users•TTLS and MSCHAPv2 •PEAP and GTC 6.9.1.1User Database•PEAP and MSCHAPv2 6.9.1.4Proxy to External Radius Server 6.9.1.3Access Policy6.9.1.5LDAP 6.9.1.6Accounting6.9.3 Defining the Radius Configuration 6.9.3.2Radius Proxy Server Configuration 6.9.3.1Radius Client ConfigurationTo configure Radius proxy server support 2.Select the Authentication tab 6.9.5Configuring Radius Users 2.Select the Users tab 6.9.6 Configuring Radius User Groups 2. Select the Groups tab 6.9.7 Viewing Radius Accounting Logs 2.Select the Accounting Logs tab 6.10 Creating Server Certificates•Using Trustpoints to Configure Certificates 6.10.1Using Trustpoints to Configure Certificates•Configuring Trustpoint Associated Keys 6.10.1.1Creating a Server / CA Root Certificate akey for you new certificate Using the Wizard to Create a New CertificateSelect a trustpoint for the new certificate 2 characters CountryState CityUsing the Wizard Delete Operation 6.10.2Configuring Trustpoint Associated Keys 6.10.2.1Adding a New Key 6.10.2.2Transferring Keys 6-84 WS5100 Series Switch System Reference Guide 7.1 Displaying the Management Access Interface Switch Management•Displaying the Management Access Interface •Configuring Access ControlTo display the main Management screen 7.2 Configuring Access Controlon Management •Configuring SNMP v1/v2 Access 7.3Configuring SNMP Access•Configuring SNMP v3 Access •Accessing SNMP v2/v3 Statistics7.3.1 Configuring SNMP v1/v2 Access 7-6 WS5100 Series Switch System Reference Guide 7.3.2Configuring SNMP v3 AccessThe unique SNMPv3 usernames and passwords include 7-8 WS5100 Series Switch System Reference Guide 7.3.3 Accessing SNMP v2/v3 Statistics Usm Statistics Values 7-10 WS5100 Series Switch System Reference Guide7.4.1Enabling Trap Configuration 7.4 Configuring SNMP Traps•Enabling Trap Configuration •Configuring Trap Thresholdsenable all traps within the Mobility category enable all traps within the Cluster categoryWireless the Wireless category2.Click the Wireless Statistics Thresholds tab 7.4.2 Configuring Trap Thresholds7-14 WS5100 Series Switch System Reference Guide Switch Management 7.4.2.1Wireless Trap Threshold ValuesWireless Threshold NameTimeout Trap Version 7.5 Configuring SNMP Trap ReceiversDestination Address Port Community Retry Count 7.5.2Adding SNMP Trap Receivers 7.5.1Editing SNMP Trap Receivers7.6.1 Configuring Local Users 7.6Configuring Management Users•Configuring Local Users •Configuring Switch Authentication7.6.1.1Creating a New Local User 7.6.1.2Modifying an Existing Local User Monitor 7.6.1.3Creating a Guest Admin and Guest User 7.6.2Configuring Switch Authentication 2. Click on the Authentication tab 2.Click on the Authentication tab Adding a New Radius Server on page7.6.2.2Adding a New Radius Server 6.Click on OK to complete the addition of the Radius Server 7-28 WS5100 Series Switch System Reference Guide 8.1 Displaying the Main Diagnostic Interface Diagnostics•Displaying the Main Diagnostic Interface •Configuring System Logging8.1.1 Switch Environment 8.1.2CPU Performance 8.1.4Switch Disk Allocation 8.1.3 Switch Memory Allocation8.1.5Switch Memory Processes 8.1.6Other Switch Resources 8.2.1Log Options 8.2 Configuring System Logging2.Select the Other Resources tab •Log Options •File Management2. Select the Log Options tab 8.2.2File Management To display the entire contents of a log file 8.2.2.2Transferring Log Files 8-12 WS5100 Series Switch System Reference Guide 8.3 Reviewing Core SnapshotsTransferring Core Snapshots on page 8.3.1Transferring Core Snapshots8-14 WS5100 Series Switch System Reference Guide 8.4 Reviewing Panic SnapshotsSize NameDisplays the size of the panic file in bytes Created8.4.2 Transferring Panic Files 8.4.1 Viewing Panic Details8.5 Debugging the Applet 8.6Configuring a Ping To view the switch’s existing ping configuration 8.6.2Adding a New Ping Test Test Name 1.Select Diagnostics > Ping from the main menu 8.6.3 Viewing Ping Statistics8-22 WS5100 Series Switch System Reference Guide To view ping test statisticsAverage RTT Diagnosticsand target device Last Response8-24 WS5100 Series Switch System Reference Guide Motorola’s Enterprise Mobility Support Center Appendix A Customer SupportCustomer Support Web Site General InformationA-2 WS5100 Series System Reference Guide Page 72E-100957-01Revision A June MOTOROLA INC