Motorola INC | Motorola WS5100 guide

MOTOROLA INC.

1303 E. ALGONQUIN ROAD SCHAUMBURG, IL 60196 http://www.motorola.com

72E-100957-01 Revision A June 2007

Image 364

Motorola WS5100 manual Motorola INC

Contents

WS5100 Series Switch Motorola, Inc. All rights reserved Contents Network Setup Switch Services Switch Security TOC-3 Switch Management Diagnostics TOC-5 TOC-6WS5100 Series Switch System Reference Guide Documentation Set IntroductionDocument Conventions Notational Conventions Overview Hardware Overview Physical Specifications Power Cord SpecificationsPower Protection System Status LED Codes Error Codes Start UpPrimary Standby Switch includes the following Infrastructure features Infrastructure FeaturesSoftware Overview Installation Feature Configuration ManagementText Based Configuration Licensing Support Serviceability Tracing / LoggingProcess Monitor Hardware Abstraction Layer and Drivers Wireless Switching Password RecoverySwitch includes the following wireless switching features Secure Network Time Protocol Sntp 802.11bg Physical Layer Features 802.11aRate Limiting Proxy-ARP HotSpot / IP Redirect IDM Identity Driven Management Voice PrioritizationSelf Healing Currently voice support implies the following Neighbor Configuration Wireless CapacityDetector APs Self Healing Actions Wireless Roaming AP Balancing Across Multiple SwitchesMU Balancing Across Multiple APs Interswitch Layer 2 Roaming MU Move CommandL3 Roaming Fast Roaming Power Save Polling 2.12 QoS802.11e QoS 802.1p Support Wireless Layer 2 Switching Data QoSDcscp to AC Mapping Automatic Channel Selection Wired Switching Switch includes the following wired switching featuresDhcp Servers Ddns Management Features WS5100 switch supports 32 WlansVlan Enhancements Interface Management Encryption and Authentication Security FeaturesSwitch includes the following wired security features MU Authentication Keyguard-WEPKerberos 802.1x EAP Switch-to-Wired 5.7 802.1x AuthenticationSecure Beacon MU to MU Allow Change Username/Password after AP Adoption Reset Username/Password to Factory DefaultsLldp is always enabled and cannot be disabled Ieee 802.1AB Lldp RF scan by Access Port on all channels Rogue AP Detection Authorized AP Lists Snmp Trap on discoveryRogue AP Report 5.14 NAT Access Port SupportCertificate Management Content of this chapter is segregated amongst the following Accessing the Switch Web UIWeb UI Requirements Connecting to the Switch Web UI Switch Password Recovery Switch Web UI Access and Image Upgrades Upgrading the Switch Image Upgrading the Switch Image from 1.4.x or 2.x to Version Auto Installation Configuring Auto Install via the CLI Enables are set using the autoinstall feature command Downgrading the Switch Image AP-4131 Access Point to Access Port ConversionEnables are cleared using the no autoinstall feature Whenever a string is blank it is shown as --not-set Select the AP Installation main menu item Select the Special Functions main menu item 10WS5100 Series Switch System Reference Guide Viewing the Switch Interface It consists of the following two tabs Viewing the Switch Configuration Troubleshooting Time Displays the time of day used by the switch Time ZoneIncorrectly could render your switch as operating illegally System Name Viewing Dashboard Details Severity Last Occurrence Message # Occurrences Viewing Switch Statistics NameStatus Speed Utilization issues negatively impacting performance Avg SignalNumber of MUs Associated Number of APs Viewing Switch Port Information Viewing the Port Configuration Modified Editing the Port ConfigurationDuplex Displays the port as either half or full duplex Viewing the Ports Runtime Status Ethernet ports have a maximum MTU setting Viewing the Ports StatisticsName Displays the ports current name MAC Address Oper Status Packets In Error Indication of a network problemNetwork issues Different port could be required Detailed Port Statistics Viewing the Port Statistics Graph Output UnicastOutput Packets With interface is saturated Switch Information Viewing Switch Configurations Size Bytes Viewing the Detailed Contents of a Config File Editing a Config File Main screen displays the contents of the configuration file Transferring a Config File Password Viewing Switch Firmware InformationPath Editing the Switch Firmware Enabling Global Settings for the Failover Image Updating the Switch Firmware If using TFTP, use tftp//ipaddress/path/filename Enable Configuring Automatic UpdatesBoot of the switch Setting Password Enter the password required to access the serverFile Name With Protocol Viewing the Switch Alarm Log View ByView All Index Viewing Alarm Log Details Viewing Switch Licenses SolutionDescription Possible Causes How to use the Filter Option 30WS5100 Series Switch System Reference Guide Network Setup Displaying the Network Interface Resolution Entries Switch VirtualWireless LANs DNS Servers Configuring DNS Access PortsViewing Network IP Information Select the Domain Network System tab Configuring Global Settings Adding an IP Address for a DNS ServerObsolete addresses are periodically removed Server IP Address Configuring IP Forwarding Following details display in the table Route Metric Adding a New Static RouteActive Viewing Address Resolution Select the Address Resolution tabTypically a Vlan Type Viewing and Configuring Layer 2 Virtual LANs Ethernet 1 or ethernet Mode It can be either Access or TrunkTrunk Editing the Details of an Existing Vlan Is selected, the Allowed VLANs field is unavailable Configuring the Virtual Interface Configuring Switch Virtual InterfacesMode drop-down menu Following configuration details display in the table Name Displays the name of the virtual interfaceDisplays the Vlan ID associated with the interface Up or not Down Adding a Virtual Interface Modifying a Virtual InterfaceTo add a new virtual interface To modify an existing virtual interface Viewing Virtual Interface Statistics Packets, etc Viewing Virtual Interface Statistics Only hard-coded at the factory and cannot be modified Viewing the Virtual Interface Statistics Graph Configuring WLANs Viewing and Configuring Switch WLANsClick Close to close the dialog Enabled 4094. The default Vlan ID isAuthentication Modify the WLAN’s current authentication scheme Editing the Wlan Configuration Value used is unique Intended function of the Wlan No Authentication Tunnel802.1X EAP Kerberos Refer to the Advanced field for the following information Configuring Authentication Types Configuring 802.1x EAP MU Timeout Configuring KerborosMU Max Retries 28WS5100 Series Switch System Reference Guide Configuring Hotspots Switch Hotspot Redirection Configuring an Internal Hotspot Title Text Header TextFooter Text Small Logo URL Main Logo URL Configuring External HotspotDescriptive Text Need to provide correct login information to access the Web Login Page URLFailed Page URL Configuring Advanced Hotspot 34WS5100 Series Switch System Reference Guide Network Setup Configuring Dynamic MAC ACL Configuring External Radius Server Support Address Authentication data source Radius Port Authentication data source. The default port isSecret Secondary Radius server Server Timeout Radius Server Motorola user privilege values User login source Configuring Different Encryption Types Configuring the User Login Sources Configuring WEP Configuring WEP 128 / KeyGuard Key 1011121314 2021222324 3031323334 4041424344 Use the Key #1-4areas to specify key numbers Default hexadecimal keys for WEP 128 and KeyGuard includeKey Configuring WPA/WPA2 using Tkip and Ccmp From entering the 256-bit key each time keys are generated Ascii PassphraseBit Key Pre-Authentication Viewing Wlan StatisticsPMK Caching Opportunistic Key That may have similar characteristics Ssid is the Service Set ID Ssid for the selected WlanLast 30s Last Hr Viewing Wlan Statistics in Detail Refer to the RF Status field for the following information Refer to the Errors field for the following information Viewing Wlan Statistics in a Graphical Format 50WS5100 Series Switch System Reference Guide Viewing Wlan Switch Statistics Viewing VLAN/Tunnel Assignments Edit button on the Configuration tab within the WLANsClick the VLAN/Tunnel Assignment tab Configuring WMM WMM enabled AccessFour Access Category types are Background Optimized for background traffic Access Category to Category Network traffic Dscp to AccessCategory Network traffic Generic QoS GQoS application programming interface API Editing WMM Settings Read-only and cannot be modified within this screen Viewing Associated MU Details Viewing MU StatusCW Minimum CW Maximum Power Save This address is burned into the ROM of the MUReady Interoperating with Viewing MU Details Similar configurationsDisplays of the Wlan the MU is currently associated with Viewing MU Statistics Configuration Selected MU from the access portPossible network or hardware problems Address is hard coded at the factory and cannot be modified Viewing MU Statistics in Detail Refer to the Traffic field for the following information Hard-coded at the factory and cannot be modified Viewing Access Port Information View a MU Statistics Graph Access Ports screen consists of the following tabs Configuring Access Port RadiosName Displays a user assigned name for the radio Refer to the Properties field for the following Configuring an AP’s Global Settings Configuring Layer 3 Access Port Adoption on Editing AP Settings Port AuthenticationClick the Configure Port Authentication button Network Setup Maximum MUs MUs that can associate to a radio is RTS Threshold Beacon Interval Self Healing Offset Configuring Rate SettingsDtim Periods Adding APs Viewing AP Statistics Differentiate the radio from other device radios Average MbpsPackets that are sent and received RF Util Was encountered on the configured channel Viewing AP Statistics in Detail Viewing AP Statistics in Graphical Format Statistic for the last hour Configuring Wlan Assignment Click the Wlan Assignment tab Editing a Wlan Assignment ConfigurationsIts intended coverage area or function From the description field in the Radio Configuration screen Identifier such as 1/4, 1/3, etc Editing WMM Settings Configuring AP Adoption Defaults Viewing Access Port Adoption DefaultsTo view existing Radio Configuration information Options include Indoor or Outdoor. Default is Indoor Channel. Default is randomPower dBm Defaults are 20 dBM for 802.11bg and 17 dBm for 802.11a Editing Default Radio Adoption Settings Stations that can associate to a radio are Transmission path Dtim Period Configuring Rate Settings Configuring Layer 3 Access Port Adoption Assigned WLANs tab displays two fields Select Radios/BSS Select/Change Assigned WLANs Access Category reflects the radios intended network traffic Cannot be modified To edit the existing WMM settings Editing Access Port Adoption WMM SettingsHigher priority traffic Viewing Access Port Status Viewing Adopted Access Ports Viewing Unadopted Access Ports Unadopted AP tab displays the following information Network Setup 96WS5100 Series Switch System Reference Guide Switch Services Displaying the Services Interface To display a Services SummaryDhcp Servers NTP Time Configuring the Switch Dhcp Server Dhcp Server SettingsFor information on configuring GRE tunneling, see Pool Name Editing the Properties of an Existing Dhcp Pool Lease TimeDdhhmm Domain Adding a New Dhcp Pool Click the Add button at the bottom of the screen Configuring Dhcp Global Options Configuring Dhcp Server Ddns Values 10WS5100 Series Switch System Reference Guide Viewing the Attributes of Existing Host Pools Can be assignedHardware Address Client Name Configuring Excluded IP Address Information Configuring Dhcp Server Relay Information 14WS5100 Series Switch System Reference Guide Viewing Dhcp Server Status Defining the Sntp Configuration Configuring Secure NTPRefer to the contents of the Status tab for the following Refer to the Other Settings field to define the following Adding a New Sntp Symmetric Key Defining a Sntp Neighbor Configuration When adding or editing an NTP neighbor HostnameSupport Neighbor Type Adding an NTP Neighbor Viewing Sntp Associations Select the NTP Associations tab Viewing Sntp Status LeapTransmissions are synchronized Found in some workstations Root delay Configuring Switch RedundancyRoot Dispersion 26WS5100 Series Switch System Reference Guide Redundancy Switch Redundancy IDMode Discovery Period Reviewing Redundancy Status Redundancy Group License Aggregation Rules on Configuring Redundancy Group Membership Not Seen The member is no more seen by this switch Do not match this switch’s parametersValues Displaying Redundancy Member Details Module Complimentary with this switch’s version? Updates SentUpdates Received Adoption Capacity Redundancy Group License Aggregation Rules Adding a Redundancy Group Member Configuring Layer 3 Mobility Layer 3 Mobility 36WS5100 Series Switch System Reference Guide Switch Services Defining the Layer 3 Peer List Reviewing Layer 3 Peer List Statistics Select the Peer Statistics tab Reviewing Layer 3 MU Status Configuring GRE Tunnels Assigning priority to different types of traffic Source IP To configure GRE tunnelling on the switchDestinations IP Editing the Properties of a GRE Tunnel DisabledInterface IP Adding a New GRE Tunnel Configuring Self Healing Select the Enable Neighbor Recovery checkbox Configuring Self Healing Neighbor Details Select the Neighbor Details tab Editing the Properties of a Neighbor Switch Services Configuring Switch Discovery Configuring Discovery Profiles Profile Name To be locatedStart IP Address Network devices is conducted Adding a New Discovery Profile Viewing Discovered Switches Assigned using the Switch Configuration screen Different profile for the switch discovery processDiscovery profile and launching a new search New search Switch Security Displaying the Main Security Interface Wireless Filters DetectionCertificates Trustpoints To configure AP Detection Enabling and Configuring AP DetectionAP Intrusion Detection Timeout Unapproved APRefresh Time BSS MAC Address Adding or Editing an Allowed AP Any MAC AddressSpecific MAC Address Particular index Approved APs Reported by APs To review the attributes of allowed APs Unapproved APs Reported by APs Therefore interpreted as a threat on the networkAddress to a new Allowed AP index Dbm Seconds Detecting AP Unapproved APs Reported by MUsEssid to a new Allowed AP index Configuring MU Intrusion Detection To configure MU intrusion detectionMU Intrusion Detection As a threat Switch columns Contents of the MUs that have been filtered thus farViolation Type Mobile Unit Viewing Filtered MUs Click on Revert to rollback to the previous configurationIdentifier Configuring Wireless Filters Filters field contains the following read-only information Refer to the Associated WLANs field for following Editing an Existing Wireless Filter Adding a new Wireless Filter Enter the a hex value for the Starting MAC address Configuring ACLs Associating an ACL with Wlan Switch supports the following ACLs to filter traffic ACL OverviewRouter ACLs For more information, see Port ACLs ACL Actions Wireless LAN ACLsPrecedence Order Configuring an ACL Adding a New ACL Adding a New ACL Rule 22WS5100 Series Switch System Reference Guide Editing an Existing Rule Adding a New ACL Configuration Attaching an ACLEth1 Eth2 Attaching an ACL on a Wlan Interface/Port Click on the Attach tab Click on the Add button Adding a New ACL Wlan Configuration Displays the IP ACL configuredDisplays the MAC ACL configured Direction Reviewing ACL Statistics Defining Dynamic NAT Translations Configuring NAT InformationClick on the Dynamic Translation tab Anywhere on the Internet LAN over the switch managed networkAccess List Type Displays the NAT type as either Adding a New Dynamic NAT Configuration Defining Static NAT Translations Click the Static Translation tab Adding a New Static NAT Configuration Click on the Static Translation tab Switch Security Configuring NAT Interfaces Available from the drop-down menu for use as the interface Viewing NAT Status Configuring IKE Settings Inside-GlobalWorld Inside Local Defining the IKE Configuration Click the Configurations tab Setting IKE Policies Aggressive ModePeer IP Address Peers Switch Security SHA The default value Default valuePriority Highest priority value Options include IncludeSecret without transmitting it to one another Viewing SA Statistics Configuring IPSec VPN Configure a Dhcp Sever to give public IP address Configure security associations parameters Defining the IPSec Configuration Editing an Existing Transform Set Transport AH Authentication Adding a New Transform SetESP Encryption Tunnel or Transport Scheme Include None No AH authentication is used Defining the IPSec VPN Remote Configuration Click the IP Range tab to view the following information Configuring Ipsec VPN Authentication Click the Authentication tab Default port isPort Shared Secret Configuring Crypto Maps Click the Crypto Maps tab and select Crypto Map Entries Crypto Map EntriesPriority / Seq Mode Config ACL ID Crypto Map Peers Click the Crypto Maps tab and select Peers Priority / Seq #Higher the priority Peer Name Transform Set Crypto Map Manual SAsSet for protecting the data flow Crypto Map Transform Sets Protecting the data flow Crypto Map Interfaces Index from others with similar configurations Viewing IPSec Security Associations Configuring the Radius Server Setting up Radius on the switch entails the followingRadius Overview TLS and MD5 Ttls and PAP User Database Ttls and MSCHAPv2 Peap and GTC Peap and MSCHAPv2 Using the Switch’s Radius Server Versus an External Radius Defining the Radius Configuration Radius Client Configuration Radius Proxy Server Configuration Configuring Radius Authentication and Accounting EAP and Auth Type Specify the EAP type for the Radius server Configuring Radius Users Cert TrustpointCA Cert Trustpoint Activity is detected Guest User UserTheir Radius privileges expire Configuring Radius User Groups Select the Groups tab Guest Group Configured WLANs Time of accessViewing Radius Accounting Logs Available WLANs Creating Server Certificates Select the Accounting Logs tabAutomatically once they reach their limit Size Using Trustpoints to Configure Certificates Certificate was issuedCity L Within the State/Prov stated Creating a Server / CA Root Certificate Using the Wizard to Create a New Certificate Key for you new certificate 78WS5100 Series Switch System Reference Guide Organization CityOrganization Unit To use the wizard to delete trustpoint properties Using the Wizard Delete OperationRequests Configuring Trustpoint Associated Keys Click the Next button to complete the trustpoint removal Select the Keys tab Keys tab displays the following Adding a New KeyKey Label Transferring Keys 84WS5100 Series Switch System Reference Guide Switch Management Displaying the Management Access Interface To configure access control settings on the switch Configuring Access ControlLog Output Enable Telnet Network. This setting is enabled by defaultLong as the Enable Telnet option remains enabled Enable Snmp Retries Configuring Snmp Access 360 is associated with the SSH-Server Access Control Configuring Snmp v1/v2 AccessCommunity Name Configuring Snmp v3 Access Editing an Existing Snmp v1/v2 Community Name Unique SNMPv3 usernames and passwords include User Name Editing a Snmp v3 Authentication and Privacy Password Select Management Access Snmp Access from the main menu tree Read-Only errors Accessing Snmp v2/v3 StatisticsV2/V3 Metrics Usm Statistics Values Enabling Trap Configuration Configuring Snmp TrapsTo configure Snmp trap definitions Wireless RedundancyMiscellaneous Mobility Configuring Trap Thresholds To configure Snmp trap threshold valuesThreshold Name Generation 14WS5100 Series Switch System Reference Guide Wireless Trap Threshold Values Radio Range Wlan Range Wireless Units Configuring Snmp Trap Receivers To configure the attributes of Snmp trap receivers Adding Snmp Trap Receivers Editing Snmp Trap ReceiversTo add a new Snmp trap receiver Configuring Management Users Configuring Local Users Creating a New Local User Modifying an Existing Local User Redundancy/clustering and control access Provides read-only permissions Creating a Guest Admin and Guest User Configuring Switch Authentication Assign the guest-admin WebUser Administrator access Not a DNS name Assignment is from 1 Modifying the Properties of an Existing Radius Server Modify the following Radius Server attributes as necessary Adding a New Radius Server Address Not a DNS name Radius Server PortIs from 1 Session. The available range is between 0 Switch Management 28WS5100 Series Switch System Reference Guide Diagnostics Displaying the Main Diagnostic Interface Switch Environment CPU Performance Switch Memory Allocation Switch Disk AllocationBuffer Usage Switch Memory Processes Other Switch Resources Log Options Configuring System LoggingSelect the Other Resources tab 8WS5100 Series Switch System Reference Guide File Management Log levelMade, they have been accounted for Date Viewing the Entire Contents of Individual Log Files Transferring Log Files Reviewing Core Snapshots Transferring Core Snapshots Troubleshooting issuesFile extension is always .core for core files Reviewing Panic Snapshots Select a target file, and select the Transfer Files button Size Displays the size of the panic file in bytes Created Remaining nine are renamed so the newest can be saved asPanic actually occurred Viewing Panic Details Transferring Panic Files Select Diagnostics Applet Debugging from the main menu Debugging the Applet Configuring a Ping Timeout sec Not received by the switch from its target deviceTime between the switch and its connected device New ping test is required Timeoutsec Modifying the Configuration of an Existing Ping TestAdding a New Ping Test Within the Configuration tab Between the switch and its connected deviceTest Name Test description to convey the overall function of the test Viewing Ping Statistics Average RTT Last Response 24WS5100 Series Switch System Reference Guide Customer Support Web Site Motorola’s Enterprise Mobility Support CenterGeneral Information 2WS5100 Series System Reference Guide Page Motorola INC