V1.0, June | NETGEAR WFS709TP-100NAS guide

WFS709TP ProSafe Smart Wireless Switch Software Administration Manual

6-6	Configuring AAA Servers

v1.0, June 2007

Image 124

NETGEAR WFS709TP-100NAS manual V1.0, June

Contents

NETGEAR, Inc Technical Support TrademarksStatement of Conditions Certificate of the Manufacturer/Importer United States CanadaEurope Japan Lithium Battery Safety Notice KoreaAustralia/New Zealand Rest of World European Union RoHS China RoHS Product and Publication Details Publication Date June Product Family Wireless Product NameModel Number Contents Chapter Configuring Network Parameters Chapter Configuring Wlans Chapter Configuring MAC-Based Authentication Appendix a Configuring Dhcp with Vendor-Specific Options Appendix D Related Documents Index About This Manual Conventions, Formats, and Scope How to Use This Manual How to Print this Manual Revision History Xvi About This Manual Chapter Overview of the WFS709TP Netgear ProSafe Access PointsWFS709TP System Components WFS709TP WFS709TP Wiring closet Internet Wireless clients FloorData center Automatic RF Channel and Power Settings WFS709TP ProSafe Switches RF Monitoring V1.0, June Netgear Wireless APs Local WFS709TP Master WFS709TP WFS709TP Software Basic Wlan Configuration Authentication V1.0, June Authentication Method Encryption Option Encryption Options by Authentication MethodEncryption Vlan Floor Wiring closet Internet Netgear AP Wireless Client Access to the Wlan Association 802.1x Authentication Captive Portal MAC Address Authentication Client Mobility and AP Association Configuring and Managing the WFS709TP V1.0, June Configuration Tool ToolsBrowser Interface Tools Menu Description Configuration Pages Basic Wlan V1.0, June Configuration Overview Router is default gateway for WFS709TP and clientsChapter Deploying a Basic WFS709TP System Deployment Scenario #1 Deployment Scenario #2 Run the initial setup seeRun the Initial Setup on Deployment Scenario #3 Configuring the WFS709TP Run the Initial Setup V1.0, June Configure the Switch for the Access Points V1.0, June Configure a Vlan for Network Connection Create the Vlan Configure the Trunk Port Configure the Default Gateway Connect the WFS709TP to the Network Configure the Loopback for the WFS709TP Deploying APs Enable APs to Connect to the WFS709TP Enable APs to Obtain IP Addresses Locate the WFS709TP V1.0, June Install APs Provision APs V1.0, June Additional Configuration Configuring VLANs Chapter Configuring Network ParametersCreating a Vlan Assigning a Static Address to a Vlan Configuring a Vlan to Receive a Dynamic Address Cable modem or BrasTo local Internet Enabling the Dhcp Client Default Gateway from DhcpDNS/WINS Server from Dhcp Configuring Static Routes Configuring the Loopback IP Address V1.0, June V1.0, June Chapter RF Plan RF Plan Overview Task Overview Before You BeginPlanning Requirements Using RF Plan Building Specification Overview Building List Building Dimension V1.0, June AP Modeling Parameters Overlap Factor Radio TypeDesign Model Users AM Modeling ParametersRates Planning Floors Monitor Rates Zoom Coverage Rate CoverageFloor Editor Dialog Box Area Editor Dialog Box V1.0, June Access Point Editor V1.0, June AP Planning Initialize Start Viewing the Results AM Planning Exporting and Importing Files Export Buildings Locate Import Buildings RF Plan Example Sample Building Create a Building Building Planning SpecificationsText Box Information Model the Access Points Model the Air Monitors Add and Edit a Floor Defining Areas Create a Don’t Care Area Create a Don’t Deploy Area Running the AP Plan Running the AM Plan Click Save V1.0, June Chapter Configuring Wlans Authentication Methods Determine the Authentication MethodMethod Description Authentication Server Supported Authentication Servers by Authentication TypesAuthentication Type Authentication Servers Internal DB Basic Wlan Configuration in the Browser Interface Determine the Default Vlan V1.0, June Wlan Basic Configuration Parameters Parameter Definition Example Configuration Parameter Definition V1.0, June Advanced Wlan Configuration in the Browser Interface Configuring Global Parameters Configuring Location-Specific Parameters Add or Modify SSIDs Default Ssid Advanced Ssid Configuration Settings Configure AP Information V1.0, June Configuring Radio Settings V1.0, June V1.0, June Example Configuration V1.0, June Channel Setting Power SettingAdvantages of Using IRM IntelliFi RF Management Configuring IRM V1.0, June V1.0, June Chapter Configuring AAA Servers Configuring an External Radius ServerRadius Server Configuration Information Parameter Description Configuring AAA Servers Adding Users to the Internal Database Internal Database Entry Information Configuring Authentication Timers Logon User Lifetime V1.0, June V1.0, June Chapter Configuring 802.1x Authentication 802.1x Authentication Authentication with a Radius Server AuthenticationNetwork authentication Data encryption Client Authentication Terminated on WFS709TP Authentication viaUser Internal database Configuring 802.1x Authentication 1x Authentication Browser Interface Page Options 802.1x AuthenticationParameter Description Default Advanced Configuration Options for Advanced Authentication Fields Field Description Default 500 Chapter Configuring the Captive Portal Overview of Captive Portal Functions Configuring Captive Portal Configuring Advanced Captive Portal Options Enabled Configuring the AAA Server for Captive Portal Changing the Protocol to Http Personalizing the Captive Portal V1.0, June V1.0, June Configuring MAC-Based Authentication Configuring Users V1.0, June V1.0, June Moving to a Multi-Switch Environment Chapter Adding Local WFS709TPs Configuring the Local WFS709TP Configuring Local WFS709TPsConfiguring L2/L3 Settings Configuring Trusted Ports Configuring APs Rebooting APs Redundancy Configuration Chapter Configuring RedundancyVirtual Router Redundancy Protocol Configuring Local WFS709TP Redundancy Vrrp Parameters for Local WFS709TP Redundancy Parameter Explanation Expected or Recommended Values Master WFS709TP Redundancy Master-Local WFS709TP Redundancy Association Function Switch IDVrrp Associations Master Vlan 1, 2, ... NLayer Network Configuring Redundancy 11-7 11-8 Configuring Redundancy Configuring Wireless Intrusion Protection Rogue/Interfering AP Detection Enabling AP Learning Classifying APs Configuring Wireless Intrusion Protection 12-3 AP Classifications Configuring Rogue AP DetectionFIeld Description Configuring Misconfigured AP Protection Misconfigured AP DetectionValid Channel Types 12-6 Configuring Wireless Intrusion Protection Chapter Configuring Management Utilities Configuring Management Users Configuring Snmp Snmp for the WFS709TPBasic WFS709TP Snmp Parameters Field Description Expected/Recommended Value SNMPv3 User Details Snmp for Access Points Basic Access Point Snmp Parameters Field Description Expected/Recommended Values SNMPv3 Access Point User Details Traps on page 13-9 for a complete list Configuring Management Utilities 13-7 13-8 Configuring Management Utilities Snmp Traps WFS709TP TrapsWFS709TP Snmp Traps Trap Description Priority Level Access Point/Air Monitor Traps Access Point Snmp Traps Configuring Management Utilities 13-11 WFS709TP Modules Configuring LoggingModule Description Configuring Management Utilities 13-13 Creating Guest Accounts Configuring Management Utilities 13-15 Managing Files on the WFS709TP Server Type ConfigurationServers for File Transfer Managing Image Files Backing Up and Restoring the Flash File System Copying Log Files Copying Other Files Installing a Server Certificate 13-20 Configuring Management Utilities Chapter Configuring WFS709TP for Voice Voice over IP Proxy ARP Battery Boost Limiting the Number of Active Voice Calls WPA Fast Handover Appendix a Configuring Dhcp with Vendor-Specific Options Overview Configuring Option Windows-Based Dhcp Servers Figure A-1 Linux Dhcp Servers Figure A-2 V1.0, June V1.0, June Appendix B Windows Client Example Configuration for Window XP Wireless Client Example Configuration Figure B-1 V1.0, June Figure B-3 Figure B-4 Figure B-5 Figure B-6 V1.0, June Appendix C Internal Captive Portal Creating a New Internal Web Password Username Basic Html Example Html Head Body Installing a New Captive Portal Displaying Authentication Error Message V1.0, June Language Customization Head TitlePortal Login/title Replace this with a link like the following Div id=errorbox style=display none V1.0, June Figure C-1shows a sample of a translated Customizing the Welcome Figure C-2 V1.0, June Customizing the Pop-Up Box Customizing the Logged Out Box V1.0, June Appendix D Related Documents Document Link V1.0, May Index Numbers Netgear FrameMaker Templates for the Reference Print Manual Index Index-3 Index-4