Accessing the Switch Web UI, Web UI Requirements | Motorola WS5100

Switch Web UI Access and Image Upgrades

The content of this chapter is segregated amongst the following:

•Accessing the Switch Web UI

•Switch Password Recovery

•Upgrading the Switch Image

•Auto Installation

•Downgrading the Switch Image

•AP-4131 Access Point to Access Port Conversion

2.1Accessing the Switch Web UI

2.1.1 Web UI Requirements

The switch Web UI is accessed using Internet Explorer version 5.5 (or later) and SUN JRE (Java Runtime Environment) 1.5 (or later). Refer to the Sun Microsystems Web site for information on downloading JRE.

NOTE: To successfully access the switch Web UI through a firewall, UDP port 161 must be open in order for the switch’s SNMP backend to function.

To prepare Internet Explorer to run the Web UI:

1.Open IE’s Tools > Internet Options panel and select the Advanced tab.

2.Uncheck the following checkboxes:

•Use HTTP 1.1

•Java console enabled (requires restart)

•Java logging enabled

•JIT compiler for virtual enabled (requires restart).

Image 35

Motorola WS5100 manual Accessing the Switch Web UI, Web UI Requirements

Contents

WS5100 Series Switch Motorola, Inc. All rights reserved Contents Switch Services Network Setup TOC-3 Switch Security Diagnostics Switch Management TOC-5 TOC-6WS5100 Series Switch System Reference Guide Document Conventions IntroductionDocumentation Set Notational Conventions Hardware Overview Overview System Status LED Codes Physical SpecificationsPower Cord Specifications Power Protection Standby Error CodesStart Up Primary Software Overview Infrastructure FeaturesSwitch includes the following Infrastructure features Licensing Support Installation FeatureConfiguration Management Text Based Configuration Hardware Abstraction Layer and Drivers ServiceabilityTracing / Logging Process Monitor Secure Network Time Protocol Sntp Wireless SwitchingPassword Recovery Switch includes the following wireless switching features Rate Limiting Physical Layer Features 802.11a802.11bg HotSpot / IP Redirect Proxy-ARP Currently voice support implies the following IDM Identity Driven ManagementVoice Prioritization Self Healing Self Healing Actions Neighbor ConfigurationWireless Capacity Detector APs MU Balancing Across Multiple APs AP Balancing Across Multiple SwitchesWireless Roaming Fast Roaming Interswitch Layer 2 RoamingMU Move Command L3 Roaming 802.1p Support Power Save Polling2.12 QoS 802.11e QoS Automatic Channel Selection Wireless Layer 2 SwitchingData QoS Dcscp to AC Mapping Ddns Wired SwitchingSwitch includes the following wired switching features Dhcp Servers Interface Management Management FeaturesWS5100 switch supports 32 Wlans Vlan Enhancements Switch includes the following wired security features Security FeaturesEncryption and Authentication 802.1x EAP MU AuthenticationKeyguard-WEP Kerberos MU to MU Allow Switch-to-Wired5.7 802.1x Authentication Secure Beacon Ieee 802.1AB Lldp Change Username/Password after AP AdoptionReset Username/Password to Factory Defaults Lldp is always enabled and cannot be disabled Rogue AP Detection RF scan by Access Port on all channels Rogue AP Report Snmp Trap on discoveryAuthorized AP Lists Certificate Management Access Port Support5.14 NAT Web UI Requirements Accessing the Switch Web UIContent of this chapter is segregated amongst the following Connecting to the Switch Web UI Switch Web UI Access and Image Upgrades Switch Password Recovery Upgrading the Switch Image from 1.4.x or 2.x to Version Upgrading the Switch Image Auto Installation Enables are set using the autoinstall feature command Configuring Auto Install via the CLI Whenever a string is blank it is shown as --not-set Downgrading the Switch ImageAP-4131 Access Point to Access Port Conversion Enables are cleared using the no autoinstall feature Select the AP Installation main menu item Select the Special Functions main menu item 10WS5100 Series Switch System Reference Guide It consists of the following two tabs Viewing the Switch Interface Viewing the Switch Configuration System Name TroubleshootingTime Displays the time of day used by the switch Time Zone Incorrectly could render your switch as operating illegally Viewing Dashboard Details Severity Last Occurrence Message # Occurrences Speed Viewing Switch StatisticsName Status Associated Number of APs Utilization issues negatively impacting performanceAvg Signal Number of MUs Viewing the Port Configuration Viewing Switch Port Information Duplex Displays the port as either half or full duplex Editing the Port ConfigurationModified Viewing the Ports Runtime Status Oper Status Ethernet ports have a maximum MTU settingViewing the Ports Statistics Name Displays the ports current name MAC Address Different port could be required Packets In ErrorIndication of a network problem Network issues Detailed Port Statistics With interface is saturated Viewing the Port Statistics GraphOutput Unicast Output Packets Switch Information Size Bytes Viewing Switch Configurations Viewing the Detailed Contents of a Config File Main screen displays the contents of the configuration file Editing a Config File Transferring a Config File Path Viewing Switch Firmware InformationPassword Editing the Switch Firmware Enabling Global Settings for the Failover Image If using TFTP, use tftp//ipaddress/path/filename Updating the Switch Firmware Boot of the switch Configuring Automatic UpdatesEnable Protocol SettingPassword Enter the password required to access the server File Name With Index Viewing the Switch Alarm LogView By View All Viewing Alarm Log Details Possible Causes Viewing Switch LicensesSolution Description How to use the Filter Option 30WS5100 Series Switch System Reference Guide Displaying the Network Interface Network Setup DNS Servers Resolution EntriesSwitch Virtual Wireless LANs Select the Domain Network System tab Configuring DNSAccess Ports Viewing Network IP Information Server IP Address Configuring Global SettingsAdding an IP Address for a DNS Server Obsolete addresses are periodically removed Configuring IP Forwarding Following details display in the table Active Adding a New Static RouteRoute Metric Type Viewing Address ResolutionSelect the Address Resolution tab Typically a Vlan Viewing and Configuring Layer 2 Virtual LANs Trunk Mode It can be either Access or TrunkEthernet 1 or ethernet Is selected, the Allowed VLANs field is unavailable Editing the Details of an Existing Vlan Mode drop-down menu Configuring Switch Virtual InterfacesConfiguring the Virtual Interface Up or not Down Following configuration details display in the tableName Displays the name of the virtual interface Displays the Vlan ID associated with the interface To modify an existing virtual interface Adding a Virtual InterfaceModifying a Virtual Interface To add a new virtual interface Viewing Virtual Interface Statistics Packets, etc Viewing Virtual Interface Statistics Only hard-coded at the factory and cannot be modified Viewing the Virtual Interface Statistics Graph Click Close to close the dialog Viewing and Configuring Switch WLANsConfiguring WLANs Modify the WLAN’s current authentication scheme Enabled4094. The default Vlan ID is Authentication Editing the Wlan Configuration Intended function of the Wlan Value used is unique Kerberos No AuthenticationTunnel 802.1X EAP Refer to the Advanced field for the following information Configuring 802.1x EAP Configuring Authentication Types MU Max Retries Configuring KerborosMU Timeout 28WS5100 Series Switch System Reference Guide Switch Hotspot Redirection Configuring Hotspots Configuring an Internal Hotspot Small Logo URL Title TextHeader Text Footer Text Descriptive Text Configuring External HotspotMain Logo URL Failed Page URL Login Page URLNeed to provide correct login information to access the Web 34WS5100 Series Switch System Reference Guide Configuring Advanced Hotspot Network Setup Configuring External Radius Server Support Configuring Dynamic MAC ACL Radius Server Address Authentication data source Radius PortAuthentication data source. The default port is Secret Secondary Radius server Server Timeout Motorola user privilege values User login source Configuring the User Login Sources Configuring Different Encryption Types Configuring WEP Key 1011121314 2021222324 3031323334 4041424344 Configuring WEP 128 / KeyGuard Key Default hexadecimal keys for WEP 128 and KeyGuard includeUse the Key #1-4areas to specify key numbers Configuring WPA/WPA2 using Tkip and Ccmp Bit Key Ascii PassphraseFrom entering the 256-bit key each time keys are generated Opportunistic Key Pre-AuthenticationViewing Wlan Statistics PMK Caching Last Hr That may have similar characteristicsSsid is the Service Set ID Ssid for the selected Wlan Last 30s Viewing Wlan Statistics in Detail Refer to the RF Status field for the following information Viewing Wlan Statistics in a Graphical Format Refer to the Errors field for the following information 50WS5100 Series Switch System Reference Guide Viewing Wlan Switch Statistics Click the VLAN/Tunnel Assignment tab Edit button on the Configuration tab within the WLANsViewing VLAN/Tunnel Assignments Configuring WMM Background Optimized for background traffic WMM enabledAccess Four Access Category types are Generic QoS GQoS application programming interface API Access Category toCategory Network traffic Dscp to Access Category Network traffic Read-only and cannot be modified within this screen Editing WMM Settings CW Maximum Viewing Associated MU DetailsViewing MU Status CW Minimum Interoperating with Power SaveThis address is burned into the ROM of the MU Ready Displays of the Wlan the MU is currently associated with Similar configurationsViewing MU Details Viewing MU Statistics Address is hard coded at the factory and cannot be modified ConfigurationSelected MU from the access port Possible network or hardware problems Viewing MU Statistics in Detail Hard-coded at the factory and cannot be modified Refer to the Traffic field for the following information View a MU Statistics Graph Viewing Access Port Information Name Displays a user assigned name for the radio Configuring Access Port RadiosAccess Ports screen consists of the following tabs Refer to the Properties field for the following Configuring Layer 3 Access Port Adoption on Configuring an AP’s Global Settings Click the Configure Port Authentication button Port AuthenticationEditing AP Settings Network Setup MUs that can associate to a radio is Maximum MUs Beacon Interval RTS Threshold Dtim Periods Configuring Rate SettingsSelf Healing Offset Adding APs Viewing AP Statistics RF Util Differentiate the radio from other device radiosAverage Mbps Packets that are sent and received Viewing AP Statistics in Detail Was encountered on the configured channel Statistic for the last hour Viewing AP Statistics in Graphical Format Click the Wlan Assignment tab Configuring Wlan Assignment Its intended coverage area or function ConfigurationsEditing a Wlan Assignment Identifier such as 1/4, 1/3, etc From the description field in the Radio Configuration screen Editing WMM Settings To view existing Radio Configuration information Viewing Access Port Adoption DefaultsConfiguring AP Adoption Defaults Defaults are 20 dBM for 802.11bg and 17 dBm for 802.11a Options include Indoor or Outdoor. Default is IndoorChannel. Default is random Power dBm Editing Default Radio Adoption Settings Stations that can associate to a radio are Dtim Period Transmission path Configuring Rate Settings Configuring Layer 3 Access Port Adoption Select/Change Assigned WLANs Assigned WLANs tab displays two fields Select Radios/BSS Cannot be modified Access Category reflects the radios intended network traffic Higher priority traffic Editing Access Port Adoption WMM SettingsTo edit the existing WMM settings Viewing Adopted Access Ports Viewing Access Port Status Viewing Unadopted Access Ports Unadopted AP tab displays the following information Network Setup 96WS5100 Series Switch System Reference Guide Switch Services NTP Time Displaying the Services InterfaceTo display a Services Summary Dhcp Servers For information on configuring GRE tunneling, see Dhcp Server SettingsConfiguring the Switch Dhcp Server Pool Name Domain Editing the Properties of an Existing Dhcp PoolLease Time Ddhhmm Adding a New Dhcp Pool Click the Add button at the bottom of the screen Configuring Dhcp Global Options Configuring Dhcp Server Ddns Values 10WS5100 Series Switch System Reference Guide Client Name Viewing the Attributes of Existing Host PoolsCan be assigned Hardware Address Configuring Excluded IP Address Information Configuring Dhcp Server Relay Information 14WS5100 Series Switch System Reference Guide Viewing Dhcp Server Status Refer to the contents of the Status tab for the following Configuring Secure NTPDefining the Sntp Configuration Refer to the Other Settings field to define the following Adding a New Sntp Symmetric Key Defining a Sntp Neighbor Configuration Neighbor Type When adding or editing an NTP neighborHostname Support Adding an NTP Neighbor Viewing Sntp Associations Select the NTP Associations tab Found in some workstations Viewing Sntp StatusLeap Transmissions are synchronized Root Dispersion Configuring Switch RedundancyRoot delay 26WS5100 Series Switch System Reference Guide Discovery Period Redundancy SwitchRedundancy ID Mode Reviewing Redundancy Status Redundancy Group License Aggregation Rules on Configuring Redundancy Group Membership Values Do not match this switch’s parametersNot Seen The member is no more seen by this switch Module Displaying Redundancy Member Details Adoption Capacity Complimentary with this switch’s version?Updates Sent Updates Received Adding a Redundancy Group Member Redundancy Group License Aggregation Rules Layer 3 Mobility Configuring Layer 3 Mobility 36WS5100 Series Switch System Reference Guide Switch Services Defining the Layer 3 Peer List Select the Peer Statistics tab Reviewing Layer 3 Peer List Statistics Reviewing Layer 3 MU Status Configuring GRE Tunnels Assigning priority to different types of traffic Destinations IP To configure GRE tunnelling on the switchSource IP Interface IP DisabledEditing the Properties of a GRE Tunnel Adding a New GRE Tunnel Select the Enable Neighbor Recovery checkbox Configuring Self Healing Select the Neighbor Details tab Configuring Self Healing Neighbor Details Editing the Properties of a Neighbor Switch Services Configuring Discovery Profiles Configuring Switch Discovery Network devices is conducted Profile NameTo be located Start IP Address Adding a New Discovery Profile Viewing Discovered Switches New search Assigned using the Switch Configuration screenDifferent profile for the switch discovery process Discovery profile and launching a new search Displaying the Main Security Interface Switch Security Trustpoints Wireless FiltersDetection Certificates AP Intrusion Detection Enabling and Configuring AP DetectionTo configure AP Detection BSS MAC Address TimeoutUnapproved AP Refresh Time Address Particular index Adding or Editing an Allowed APAny MAC Address Specific MAC To review the attributes of allowed APs Approved APs Reported by APs Dbm Unapproved APs Reported by APsTherefore interpreted as a threat on the network Address to a new Allowed AP index Essid to a new Allowed AP index Unapproved APs Reported by MUsSeconds Detecting AP As a threat Configuring MU Intrusion DetectionTo configure MU intrusion detection MU Intrusion Detection Mobile Unit Switch columnsContents of the MUs that have been filtered thus far Violation Type Identifier Click on Revert to rollback to the previous configurationViewing Filtered MUs Configuring Wireless Filters Refer to the Associated WLANs field for following Filters field contains the following read-only information Editing an Existing Wireless Filter Enter the a hex value for the Starting MAC address Adding a new Wireless Filter Associating an ACL with Wlan Configuring ACLs For more information, see Switch supports the following ACLs to filter trafficACL Overview Router ACLs Port ACLs Precedence Order Wireless LAN ACLsACL Actions Adding a New ACL Configuring an ACL Adding a New ACL Rule 22WS5100 Series Switch System Reference Guide Editing an Existing Rule Eth2 Adding a New ACL ConfigurationAttaching an ACL Eth1 Click on the Attach tab Click on the Add button Attaching an ACL on a Wlan Interface/Port Direction Adding a New ACL Wlan ConfigurationDisplays the IP ACL configured Displays the MAC ACL configured Reviewing ACL Statistics Click on the Dynamic Translation tab Configuring NAT InformationDefining Dynamic NAT Translations Type Displays the NAT type as either Anywhere on the InternetLAN over the switch managed network Access List Adding a New Dynamic NAT Configuration Click the Static Translation tab Defining Static NAT Translations Click on the Static Translation tab Adding a New Static NAT Configuration Switch Security Available from the drop-down menu for use as the interface Configuring NAT Interfaces Viewing NAT Status Inside Local Configuring IKE SettingsInside-Global World Click the Configurations tab Defining the IKE Configuration Peers Setting IKE PoliciesAggressive Mode Peer IP Address Switch Security Highest priority value SHA The default valueDefault value Priority Secret without transmitting it to one another IncludeOptions include Viewing SA Statistics Configure a Dhcp Sever to give public IP address Configuring IPSec VPN Configure security associations parameters Defining the IPSec Configuration Transport Editing an Existing Transform Set Tunnel or Transport AH AuthenticationAdding a New Transform Set ESP Encryption Scheme Include None No AH authentication is used Click the IP Range tab to view the following information Defining the IPSec VPN Remote Configuration Configuring Ipsec VPN Authentication Shared Secret Click the Authentication tabDefault port is Port Configuring Crypto Maps Priority / Seq Crypto Map EntriesClick the Crypto Maps tab and select Crypto Map Entries ACL ID Mode Config Crypto Map Peers Peer Name Click the Crypto Maps tab and select PeersPriority / Seq # Higher the priority Set for protecting the data flow Crypto Map Manual SAsTransform Set Crypto Map Transform Sets Protecting the data flow Crypto Map Interfaces Viewing IPSec Security Associations Index from others with similar configurations TLS and MD5 Ttls and PAP Configuring the Radius ServerSetting up Radius on the switch entails the following Radius Overview Ttls and MSCHAPv2 Peap and GTC Peap and MSCHAPv2 User Database Using the Switch’s Radius Server Versus an External Radius Defining the Radius Configuration Radius Proxy Server Configuration Radius Client Configuration Configuring Radius Authentication and Accounting EAP and Auth Type Specify the EAP type for the Radius server Activity is detected Configuring Radius UsersCert Trustpoint CA Cert Trustpoint Their Radius privileges expire UserGuest User Configuring Radius User Groups Guest Group Select the Groups tab Available WLANs Configured WLANsTime of access Viewing Radius Accounting Logs Size Creating Server CertificatesSelect the Accounting Logs tab Automatically once they reach their limit Within the State/Prov stated Using Trustpoints to Configure CertificatesCertificate was issued City L Creating a Server / CA Root Certificate Key for you new certificate Using the Wizard to Create a New Certificate 78WS5100 Series Switch System Reference Guide Organization Unit CityOrganization Requests Using the Wizard Delete OperationTo use the wizard to delete trustpoint properties Click the Next button to complete the trustpoint removal Configuring Trustpoint Associated Keys Key Label Adding a New KeySelect the Keys tab Keys tab displays the following Transferring Keys 84WS5100 Series Switch System Reference Guide Displaying the Management Access Interface Switch Management Log Output Configuring Access ControlTo configure access control settings on the switch Enable Snmp Retries Enable TelnetNetwork. This setting is enabled by default Long as the Enable Telnet option remains enabled 360 is associated with the SSH-Server Configuring Snmp Access Community Name Configuring Snmp v1/v2 AccessAccess Control Editing an Existing Snmp v1/v2 Community Name Configuring Snmp v3 Access User Name Unique SNMPv3 usernames and passwords include Select Management Access Snmp Access from the main menu tree Editing a Snmp v3 Authentication and Privacy Password V2/V3 Metrics Accessing Snmp v2/v3 StatisticsRead-Only errors Usm Statistics Values To configure Snmp trap definitions Configuring Snmp TrapsEnabling Trap Configuration Mobility WirelessRedundancy Miscellaneous Generation Configuring Trap ThresholdsTo configure Snmp trap threshold values Threshold Name 14WS5100 Series Switch System Reference Guide Radio Range Wlan Range Wireless Units Wireless Trap Threshold Values To configure the attributes of Snmp trap receivers Configuring Snmp Trap Receivers To add a new Snmp trap receiver Editing Snmp Trap ReceiversAdding Snmp Trap Receivers Configuring Local Users Configuring Management Users Creating a New Local User Modifying an Existing Local User Provides read-only permissions Redundancy/clustering and control access Creating a Guest Admin and Guest User Assign the guest-admin WebUser Administrator access Configuring Switch Authentication Assignment is from 1 Not a DNS name Modify the following Radius Server attributes as necessary Modifying the Properties of an Existing Radius Server Session. The available range is between 0 Adding a New Radius ServerAddress Not a DNS name Radius Server Port Is from 1 Switch Management 28WS5100 Series Switch System Reference Guide Displaying the Main Diagnostic Interface Diagnostics Switch Environment CPU Performance Usage Switch Memory AllocationSwitch Disk Allocation Buffer Switch Memory Processes Other Switch Resources Select the Other Resources tab Configuring System LoggingLog Options 8WS5100 Series Switch System Reference Guide Date File ManagementLog level Made, they have been accounted for Viewing the Entire Contents of Individual Log Files Transferring Log Files Reviewing Core Snapshots File extension is always .core for core files Troubleshooting issuesTransferring Core Snapshots Select a target file, and select the Transfer Files button Reviewing Panic Snapshots Panic actually occurred Remaining nine are renamed so the newest can be saved asSize Displays the size of the panic file in bytes Created Transferring Panic Files Viewing Panic Details Debugging the Applet Select Diagnostics Applet Debugging from the main menu Configuring a Ping New ping test is required Timeout secNot received by the switch from its target device Time between the switch and its connected device Adding a New Ping Test Modifying the Configuration of an Existing Ping TestTimeoutsec Test description to convey the overall function of the test Within the Configuration tabBetween the switch and its connected device Test Name Viewing Ping Statistics Last Response Average RTT 24WS5100 Series Switch System Reference Guide General Information Motorola’s Enterprise Mobility Support CenterCustomer Support Web Site 2WS5100 Series System Reference Guide Page Motorola INC