Manuals / Motorola / Computer Equipment / Switch

Motorola WS5100 manual Motorola Inc, 72E-100957-01Revision A June

Models: WS5100

1 364

Download 364 pages 29.43 Kb

Page 364

MOTOROLA INC.

MOTOROLA INC.

1303 E. ALGONQUIN ROAD SCHAUMBURG, IL 60196 http://www.motorola.com

72E-100957-01 Revision A June 2007

Image 364

Motorola WS5100 manual Motorola Inc, 72E-100957-01Revision A June

Contents

WS5100 Series Switch System Reference Guide2007 Motorola, Inc. All rights reserved Chapter 3. Switch Information ContentsChapter 1. Overview Chapter 5. Switch Services Chapter 4. Network SetupTOC-2 WS5100 Series Switch System Reference Guide Chapter 6. Switch Security TOC-3Chapter 8. Diagnostics Chapter 7. Switch ManagementTOC-4 WS5100 Series Switch System Reference Guide TOC-5 TOC-6 WS5100 Series Switch System Reference Guide About This Guide IntroductionDocumentation Set Document ConventionsNotational Conventions Overview 1.1 Hardware Overview1.1.1 Physical Specifications 1.1.1.1Power Cord Specifications1.1.1.2Power Protection 1.1.2 System Status LED CodesError Codes Start UpPrimary Standby1.2.1 Infrastructure Features •Infrastructure Features •Wireless Switching•Wired Switching •Management Features •Security Features •Access Port Support1.2.1.1Installation Feature 1.2.1.3Configuration ManagementText Based Configuration 1.2.1.4Diagnostics1.2.1.5Serviceability 1.2.1.6Tracing / Logging1.2.1.7Process Monitor 1.2.1.8Hardware Abstraction Layer and Drivers1.2.2 Wireless Switching 1.2.1.11Password RecoveryConfiguring Switch Redundancy on page Switch Password Recovery on page1.2.2.1Physical Layer Features 802.11a •Self Healing •Wireless Capacity•AP and MU Load Balancing •Wireless Roaming •Power Save Polling •QoS1.2.2.3Proxy-ARP 1.2.2.4HotSpot / IP RedirectConfiguring WMM on page 1.2.2.5IDM Identity Driven Management1.2.2.6Voice Prioritization 1.2.2.7Self HealingNeighbor Configuration 1.2.2.8Wireless Capacity•AP Balancing Across Multiple Switches Detector APsAP Balancing Across Multiple Switches 1.2.2.10Wireless Roaming•Interswitch Layer 2 Roaming •International Roaming •MU Move CommandInterswitch Layer 2 Roaming MU Move CommandL3 Roaming Fast Roaming1.2.2.11Power Save Polling 1.2.2.12QoS802.11e QoS 802.1p Support1.2.2.13Wireless Layer 2 Switching Data QoSDCSCP to AC Mapping 1.2.2.14Automatic Channel Selection1.2.3 Wired Switching DHCP Server Settings on page1.2.3.1DHCP Servers 1.2.3.2DDNS1.2.4 Management Features 1.2.3.4VLAN Enhancements1.2.3.5Interface Management 1.2.3.6Multiple WLAN Support1.2.5 Security Features 1.2.5.1Encryption and Authentication•Encryption and Authentication •MU Authentication •Switch-to-Wired •802.1x Authentication1.2.5.2MU Authentication WPA2Keyguard-WEP Kerberos1.2.5.6Switch-to-Wired 1.2.5.7802.1x Authentication1.2.5.3Secure Beacon 1.2.5.4MU to MU AllowChange Username/Password after AP Adoption Reset Username/Password to Factory Defaults1.2.5.8IEEE 802.1AB LLDP 1.2.5.9 WIPSRF scan by Access Port on all channels •RF scan by Access Port on all channels1.2.5.10Rogue AP Detection •SNMP Trap on discovery •Authorized AP ListsConfiguring ACLs on page SNMP Trap on discoveryAuthorized AP Lists Rogue AP Report1.2.5.14NAT 1.2.6 Access Port Support1.2.5.15Certificate Management 2.1Accessing the Switch Web UI •Accessing the Switch Web UI•Switch Password Recovery •Upgrading the Switch Image •Auto InstallationTo display the switch Web UI 2.1.2 Connecting to the Switch Web UIThe switch login screen displays 2.2 Switch Password Recovery Switch Web UI Access and Image Upgrades2.3 Upgrading the Switch Image 2.4 Auto Installation Configuring Auto Install via the CLI 2.5 Downgrading the Switch Image 2.6AP-4131Access Point to Access Port Conversion3.Select the AP Installation main menu item 2-8 WS5100 Series Switch System Reference Guide7.Select the Firmware Update Menu-F3 menu item 2-10 WS5100 Series Switch System Reference Guide Switch Information 3.1 Viewing the Switch Interface•Viewing the Switch Interface •Viewing Switch Port Information3.1.1 Viewing the Switch Configuration System Name 3.1.1.1Viewing Dashboard Details 3-4 WS5100 Series Switch System Reference Guide•Alarms •Ports •Environment •CPU Memory 3.1.2Viewing Switch Statistics Number of MUs 3.2 Viewing Switch Port Information 3.2.1Viewing the Port Configuration3.2.1.1Editing the Port Configuration 3.2.2Viewing the Ports Runtime Status 3.2.3 Viewing the Ports Statistics 2. Select the Statistics tab To view detailed statistics for a port 3.2.3.1Detailed Port Statistics2.Click the Details button 3.2.3.2Viewing the Port Statistics Graph •Input Bytes •Input Pkts Dropped Name 3.3 Viewing Switch ConfigurationsSize Bytes Created Modified3.3.2Editing a Config File 3.3.3Transferring a Config File 3.4Viewing Switch Firmware Information PasswordPath File3.4.1Editing the Switch Firmware 2.Click the Edit button 3.4.3 Updating the Switch Firmware If using TFTP, use tftp://ipaddress/path/filename3.5 Configuring Automatic Updates Enableboot of the switch IP AddressFile Name With 3.6 Viewing the Switch Alarm Log 3.6.1Viewing Alarm Log Details 3.7Viewing Switch Licenses 3.8How to use the Filter Option 3-30 WS5100 Series Switch System Reference Guide Network Setup •Viewing and Configuring Layer 2 Virtual LANs•Configuring Switch Virtual Interfaces •Viewing and Configuring Switch WLANsResolution Entries Switch Virtualsee Configuring Switch Virtual Interfaces on page Wireless LANs4.2.1Configuring DNS •Configuring DNS •Configuring IP Forwarding•Viewing Address Resolution 4.2 Viewing Network IP Information4.2.1.2Configuring Global Settings 4.2.1.1Adding an IP Address for a DNS Server4.2.2Configuring IP Forwarding The following details display in the table 4.2.2.1Adding a New Static Route 4.2.3Viewing Address Resolution 2.Select the Address Resolution tab4.3 Viewing and Configuring Layer 2 Virtual LANs The following details display in the tableName 4.3.1 Editing the Details of an Existing VLAN 4.4Configuring Switch Virtual Interfaces 4.4.1Configuring the Virtual Interface•Configuring the Virtual Interface •Viewing Virtual Interface StatisticsName 4.4.1.1Adding a Virtual Interface 4.4.1.2Modifying a Virtual Interface4.4.2Viewing Virtual Interface Statistics 2. Select the Statistics tab NameBytes In Packets In4.4.2.1Viewing Virtual Interface Statistics To view detailed virtual interface statistics2. Click the Details button 2.Click the Graph button 4.5Viewing and Configuring Switch WLANs 4.5.1Configuring WLANs•Configuring WLANs •Viewing WLAN Statistics •Viewing VLAN/Tunnel Assignments •Configuring WMMTo configure a WLAN 2.Click the Configuration tab4.5.1.1Editing the WLAN Configuration 4. Click the Edit button VLAN ID WPA-WPA2-TKIP Configuring WPA/WPA2 using TKIP and CCMP on pageCCMP on page 4.5.1.2Configuring Authentication Types Configuring 802.1x EAP•Configuring 802.1x EAP •Configuring Kerboros •Configuring HotspotsMU Timeout Configuring KerborosMU Max Retries 3.Click the Edit button Configuring Hotspots Switch Hotspot Redirection•Setting up the Hotspot Web pages •Setting up the Radius serverConfiguring an Internal Hotspot Network Setup Title TextHeader Text Footer TextMain Logo URL Configuring External HotspotDescriptive Text Login Page URL Configuring Advanced Hotspot 4.Select the Hotspot button from within the Authentication field Configuring External Radius Server Support Configuring Dynamic MAC ACL4-36 WS5100 Series Switch System Reference Guide 3.Click the Edit button •Motorola user privilege values 4.5.1.3Configuring Different Encryption Types Configuring the User Login Sources• Configuring WEP • Configuring WEP 128 / KeyGuardConfiguring WEP Configuring WEP 128 / KeyGuard 6.Use the Key #1-4 areas to specify key numbers Configuring WPA/WPA2 using TKIP and CCMP •1011121314151617 •18191A1B1C1D1E1F 4.5.2 Viewing WLAN Statistics 2. Click the Statistics tab 4.5.2.1Viewing WLAN Statistics in Detail ESSID To view detailed graphical statistics for a WLAN 2. Click the Graph button 4.5.2.3Viewing WLAN Switch Statistics 4.5.3Viewing VLAN/Tunnel Assignments 2.Click the VLAN/Tunnel Assignment tab4.5.4Configuring WMM WMM enabled Access Category to 4.5.4.1Editing WMM Settings 4.6.1 Viewing MU Status 4.6Viewing Associated MU Details•Viewing MU Status •Viewing MU Statistics 2. Click the Status tab 4.6.1.1Viewing MU Details 4.6.2Viewing MU Statistics 2. Click the Statistics tab 4.6.2.1Viewing MU Statistics in Detail MAC Address 4.7Viewing Access Port Information 4.6.2.2View a MU Statistics Graph4.7.1Configuring Access Port Radios •Configuring Access Port Radios•Configuring WLAN Assignment •Configuring WMM •Viewing AP StatisticsAP Type 4.7.1.1Configuring an AP’s Global Settings Configuring Layer 3 Access Port Adoption on page4.7.1.2 Editing AP Settings Port Authentication4.Click the Configure Port Authentication button To edit a radio’s configuration Maximum MUs Network Setup RTS Thresholdports pathConfiguring Rate Settings 4.7.1.3Adding APs 4.7.2 Viewing AP Statistics 2. Click the Statistics tab 4.7.2.1Viewing AP Statistics in Detail 4.7.2.2Viewing AP Statistics in Graphical Format 4.7.3Configuring WLAN Assignment 2.Click the WLAN Assignment tab4.7.3.1Editing a WLAN Assignment 4.7.4Configuring WMM 2.Click the WLAN Assignment tab4.7.4.1Editing WMM Settings 4.8 Viewing Access Port Adoption Defaults 4.8.1Configuring AP Adoption Defaults•Configuring AP Adoption Defaults •Configuring Layer 3 Access Port Adoption2.Click the Configuration tab 4.8.1.1Editing Default Radio Adoption Settings •Primary Only: Enables only the primary antenna 4-86 WS5100 Series Switch System Reference Guide RTS Thresholdports the transmission pathConfiguring Rate Settings To configure a radio’s rate settings4.8.2 Configuring Layer 3 Access Port Adoption 4.8.3Configuring WLAN AssignmentSelect/Change Assigned WLANs 2.Click the WLAN Assignment tab4.8.4Configuring WMM 4.8.4.1Editing Access Port Adoption WMM Settings 4.9 Viewing Access Port Status 4.9.1Viewing Adopted Access Ports•Viewing Adopted Access Ports •Viewing Unadopted Access PortsTo view existing Radio Configuration information 4.9.2Viewing Unadopted Access Ports2. Click the Adopted AP tab 2.Click the Unadopted AP tab Network Setup 4-96 WS5100 Series Switch System Reference Guide Switch Services •Displaying the Services Interface•DHCP Server Settings •Configuring Secure NTP •Configuring Switch Redundancy •Layer 3 Mobility5.1 Displaying the Services Interface To display a Services Summary5.2 DHCP Server Settings 5.2.1Configuring the Switch DHCP Server•Configuring the Switch DHCP Server •Configuring Excluded IP Address InformationTo configure DHCP Lease Time dd:hh:mmthere are fewer users Domain5.2.1.2Adding a New DHCP Pool 2. Click the Add button at the bottom of the screen 5.2.1.3Configuring DHCP Global Options 5.2.1.4Configuring DHCP Server DDNS Values 10.Refer to the Status field To view the attributes of existing host pools 5.2.3Configuring Excluded IP Address Information 5.2.4 Configuring DHCP Server Relay Information 2. Click the Relay tab 5.2.5 Viewing DHCP Server Status 5.3Configuring Secure NTP 5.3.1Defining the SNTP Configuration•Defining the SNTP Configuration •Defining a SNTP Neighbor Configuration2. Select the Configuration tab 5.3.2Adding a New SNTP Symmetric Key 5.3.3Defining a SNTP Neighbor Configuration 2. Select the NTP Neighbor tab 5.3.4 Adding an NTP Neighbor 5.3.5 Viewing SNTP Associations 2.Select the NTP Associations tab 5.3.6 Viewing SNTP Status Root delay 5.4 Configuring Switch RedundancyRoot Dispersion 5-26 WS5100 Series Switch System Reference Guide •Reviewing Redundancy Status •Configuring Redundancy Group MembershipTo configure switch redundancy 5.4.1Reviewing Redundancy Status 2. Select the Status tab 5.4.2Configuring Redundancy Group Membership 2. Select the Member tab 5.4.2.1Displaying Redundancy Member Details modulereboot of the switch since the last rebootadopted License Aggregation Rules on page5.4.3Redundancy Group License Aggregation Rules 5.4.2.2Adding a Redundancy Group Member5.5.1Configuring Layer 3 Mobility •Configuring Layer 3 Mobility5.5Layer 3 Mobility •Defining the Layer 3 Peer ListTo locate switch IP addresses on the network To configure Layer 3 Mobility for the switch 5.5.2 Defining the Layer 3 Peer List 5.5.3 Reviewing Layer 3 Peer List Statistics 2.Select the Peer Statistics tab5.5.4Reviewing Layer 3 MU Status 2. Select the MU Status tab 5.6 Configuring GRE Tunnels• Assigning routes to different types of traffic •Assigning priority to different types of traffic To configure GRE tunnelling on the switch NameSource IP Destinations IP5.6.1Editing the Properties of a GRE Tunnel address5.6.2Adding a New GRE Tunnel 5.7Configuring Self Healing 2.Select the Enable Neighbor Recovery checkbox5.7.1Configuring Self Healing Neighbor Details 2.Select the Neighbor Details tab5.7.1.1Editing the Properties of a Neighbor 2.Select the Neighbor Details tab3. Select an existing neighbor and click the Edit button 5.8 Configuring Switch Discovery 5.8.1Configuring Discovery ProfilesIndex Profile Nameto be located Start IP Address5.8.1.1Adding a New Discovery Profile 5.8.2Viewing Discovered Switches IP Address Switch Security •Configuring Wireless Filters •Configuring ACLs•Configuring NAT Information •Configuring IKE Settings •Configuring IPSec VPNWireless Filters on page Configuring Trustpoint Associated Keys on page6-2 WS5100 Series Switch System Reference Guide Access Port Intrusion6.2.1Enabling and Configuring AP Detection •Enabling and Configuring AP Detection6.2 AP Intrusion Detection •Approved APs Reported by APs5.Click the Apply button to save the changes made 6.2.1.1Adding or Editing an Allowed AP 6.2.2 Approved APs Reported by APs 2.Select the Approved APs Reported by APs tab6.2.3 Unapproved APs Reported by APs 2.Click on the Unapproved APs Reported by APs tab6.2.4Unapproved APs Reported by MUs 2.Click on the Unapproved APs Reported by MUs tab6.3.1Configuring MU Intrusion Detection •Configuring MU Intrusion Detection6.3MU Intrusion Detection •Viewing Filtered MUs2.Click the Configuration tab •Collection Settings •Violation Parametersand switch columns Switch6.3.2Viewing Filtered MUs 6.4Configuring Wireless Filters Editing an Existing Wireless Filter on page 6.4.1Editing an Existing Wireless Filter 6.4.2 Adding a new Wireless Filter 6.5Configuring ACLs •Configuring an ACL •Attaching an ACL6.4.3 Associating an ACL with WLAN •Attaching an ACL on a WLAN Interface/Port•Router ACLs •Port ACLs •Wireless LAN ACLs 6.5.1 ACL Overview6.5.1.1Router ACLs •ACL Actions •Precedence Order6.5.1.2Port ACLs 6.5.1.4ACL Actions 6.5.1.3Wireless LAN ACLs6.5.1.5Precedence Order 6.5.2 Configuring an ACL 6.5.2.1Adding a New ACL6.5.2.2Adding a New ACL Rule Precedence is a required parameter 6.5.2.3Editing an Existing Rule 6.5.3.1Adding a New ACL Configuration 6.5.3 Attaching an ACL6.5.4Attaching an ACL on a WLAN Interface/Port 6.5.4.1Adding a New ACL WLAN Configuration 6.5.5 Reviewing ACL Statistics 6.6Configuring NAT Information •Configuring NAT Interfaces •Viewing NAT Status6.6.1Defining Dynamic NAT Translations •Defining Dynamic NAT TranslationsType 6.6.1.1Adding a New Dynamic NAT Configuration 2.Click on the Dynamic Translation tab6.6.2 Defining Static NAT Translations 2.Click the Static Translation tab6.6.2.1Adding a New Static NAT Configuration 2.Click on the Static Translation tab3. Click the Add button 6.6.3 Configuring NAT Interfaces 6.6.4 Viewing NAT Status •Defining the IKE Configuration 6.7Configuring IKE Settings•Setting IKE Policies •Viewing SA Statistics 6.7.1 Defining the IKE Configuration 2.Click the Configurations tab6.7.2 Setting IKE Policies Aggressive ModePeer IP Address of peers•An encryption scheme protecting the data Priority Priority 6.7.3 Viewing SA Statistics •Configure a DHCP Sever to give public IP address 6.8Configuring IPSec VPN•Configure a Crypto policy IKE •Configure security associations parameters •Defining the IPSec Configuration•Defining the IPSec VPN Remote Configuration •Configuring IPSEC VPN Authentication6.8.1Defining the IPSec Configuration •Viewing IPSec Security Associations6.8.1.1Editing an Existing Transform Set 6.8.1.2Adding a New Transform Set 3. Click the Add button 6.8.2 Defining the IPSec VPN Remote Configuration 6.8.3 Configuring IPSEC VPN Authentication 6-50 WS5100 Series Switch System Reference Guide2.Click the Authentication tab 6.8.4 Configuring Crypto Maps 6-52 WS5100 Series Switch System Reference Guide6.8.4.1Crypto Map Entries •Crypto Map Entries •Crypto Map Peers•Crypto Map Manual SAs •Crypto Map Transform Sets •Crypto Map InterfacesMode Config 6.8.4.2Crypto Map Peers 2. Click the Crypto Maps tab and select Peers 6.8.4.3Crypto Map Manual SAs 6.8.4.4Crypto Map Transform Sets 6-58 WS5100 Series Switch System Reference GuidePriority / Seq # higher the priorityName Transform Set6.8.4.5Crypto Map Interfaces To display IPSec VPN security associations 6.8.5 Viewing IPSec Security Associations2.Click the IPSec SAs tab 6.9Configuring the Radius Server •Defining the Radius Configuration•Configuring Radius Authentication and Accounting •Configuring Radius Users•TTLS and MSCHAPv2 •PEAP and GTC 6.9.1.1User Database•PEAP and MSCHAPv2 6.9.1.3Access Policy 6.9.1.4Proxy to External Radius Server6.9.1.5LDAP 6.9.1.6Accounting6.9.3 Defining the Radius Configuration 6.9.3.1Radius Client Configuration 6.9.3.2Radius Proxy Server ConfigurationTo configure Radius proxy server support 2.Select the Authentication tab 6.9.5Configuring Radius Users 2.Select the Users tab 6.9.6 Configuring Radius User Groups 2. Select the Groups tab 6.9.7 Viewing Radius Accounting Logs 6.10 Creating Server Certificates 2.Select the Accounting Logs tab•Using Trustpoints to Configure Certificates 6.10.1Using Trustpoints to Configure Certificates•Configuring Trustpoint Associated Keys 6.10.1.1Creating a Server / CA Root Certificate Using the Wizard to Create a New Certificate akey for you new certificateSelect a trustpoint for the new certificate Country 2 charactersState CityUsing the Wizard Delete Operation 6.10.2Configuring Trustpoint Associated Keys 6.10.2.1Adding a New Key 6.10.2.2Transferring Keys 6-84 WS5100 Series Switch System Reference Guide Switch Management 7.1 Displaying the Management Access Interface•Displaying the Management Access Interface •Configuring Access Control7.2 Configuring Access Control To display the main Management screenon Management 7.3Configuring SNMP Access •Configuring SNMP v1/v2 Access•Configuring SNMP v3 Access •Accessing SNMP v2/v3 Statistics7.3.1 Configuring SNMP v1/v2 Access 7.3.2Configuring SNMP v3 Access 7-6 WS5100 Series Switch System Reference GuideThe unique SNMPv3 usernames and passwords include 7-8 WS5100 Series Switch System Reference Guide 7.3.3 Accessing SNMP v2/v3 Statistics 7-10 WS5100 Series Switch System Reference Guide Usm Statistics Values7.4 Configuring SNMP Traps 7.4.1Enabling Trap Configuration•Enabling Trap Configuration •Configuring Trap Thresholdsenable all traps within the Cluster category enable all traps within the Mobility categoryWireless the Wireless category7.4.2 Configuring Trap Thresholds 2.Click the Wireless Statistics Thresholds tab7-14 WS5100 Series Switch System Reference Guide 7.4.2.1Wireless Trap Threshold Values Switch ManagementWireless Threshold NameTimeout Trap Version 7.5 Configuring SNMP Trap ReceiversDestination Address Port Community Retry Count 7.5.1Editing SNMP Trap Receivers 7.5.2Adding SNMP Trap Receivers7.6Configuring Management Users 7.6.1 Configuring Local Users•Configuring Local Users •Configuring Switch Authentication7.6.1.1Creating a New Local User 7.6.1.2Modifying an Existing Local User Monitor 7.6.1.3Creating a Guest Admin and Guest User 7.6.2Configuring Switch Authentication 2. Click on the Authentication tab Adding a New Radius Server on page 2.Click on the Authentication tab7.6.2.2Adding a New Radius Server 6.Click on OK to complete the addition of the Radius Server 7-28 WS5100 Series Switch System Reference Guide Diagnostics 8.1 Displaying the Main Diagnostic Interface•Displaying the Main Diagnostic Interface •Configuring System Logging8.1.1 Switch Environment 8.1.2CPU Performance 8.1.3 Switch Memory Allocation 8.1.4Switch Disk Allocation8.1.5Switch Memory Processes 8.1.6Other Switch Resources 8.2 Configuring System Logging 8.2.1Log Options2.Select the Other Resources tab •Log Options •File Management2. Select the Log Options tab 8.2.2File Management To display the entire contents of a log file 8.2.2.2Transferring Log Files 8.3 Reviewing Core Snapshots 8-12 WS5100 Series Switch System Reference Guide8.3.1Transferring Core Snapshots Transferring Core Snapshots on page8.4 Reviewing Panic Snapshots 8-14 WS5100 Series Switch System Reference GuideName SizeDisplays the size of the panic file in bytes Created8.4.1 Viewing Panic Details 8.4.2 Transferring Panic Files8.5 Debugging the Applet 8.6Configuring a Ping To view the switch’s existing ping configuration 8.6.2Adding a New Ping Test Test Name 8.6.3 Viewing Ping Statistics 1.Select Diagnostics > Ping from the main menu8-22 WS5100 Series Switch System Reference Guide To view ping test statisticsDiagnostics Average RTTand target device Last Response8-24 WS5100 Series Switch System Reference Guide Appendix A Customer Support Motorola’s Enterprise Mobility Support CenterCustomer Support Web Site General InformationA-2 WS5100 Series System Reference Guide Page MOTOROLA INC 72E-100957-01Revision A June