Manuals / Symbol Technologies / Computer Equipment / Switch

Symbol Technologies WS 2000 manual Configuring the Cafe Subnet

Models: WS 2000

1 150

Download 150 pages 4.54 Kb

Page 95

Configuring the Cafe Subnet

Retail Use Cases

Clarisa enters the DNS server IP addresses and leaves the Default Gateway and DHCP Lease Time at their defaults.

She clicks Ok in the Advanced DHCP Server window and then Apply in the Subnet window to save her changes.

Now Clarisa will configure the Cafe subnet.

Configuring the Cafe Subnet

Clarisa selects the third subnet in the LAN menu list under Network Configuration in the left menu.

She then renames this subnet “Cafesn” and gives it the IP address 192.168.2.1 and a subnet mask of 255.255.255.0. The only devices on this subnet are the customer’s laptops in the cafe.

Using the Interfaces section of the screen, she associates the third WLAN with this subnet, and activates the DHCP server with an IP address range of 192.168.2.11 to 192.168.2.254.

Copyright © 2004 Symbol Technologies, Inc. All Rights Reserved	95
WS 2000 Wireless Switch: 1.0 Date of last Revision: March 2004

Image 95

Symbol Technologies WS 2000 manual Configuring the Cafe Subnet

Contents

WS 2000 Wireless Switch System Reference72E-67701-01 Rev A March Patents CopyrightOverview Table of ContentsFeatures ChapterChapter Advanced ConfigurationSystem Administration Retail Use CasesChapter Appendix A. Sample Configuration FileA Field Office Example IndexDocument Conventions WS 2000 Wireless Switch System Reference GuideChapter 1. Overview About this DocumentFirewall Security Management of Access PortsWireless LAN WLAN Security System OverviewHardware Overview Technical SpecificationsPhysical Specifications Environmental Specifications Operating System OS ServicesCell Controller Services Power SpecificationsGateway Services 802.11b Support Chapter 2. Features802.11a Support Access Ports Administration Management Gateway ServicesWS 2000 Wireless Switch Firewall Access PoliciesOverview Layer 3 RoutingSNMP Management Support DHCP Client and ServerWEP 128 104-bit Key 802.1x with RADIUS AuthenticationWEP 64 40-bit key Kerberos Authentication 802.1x with Shared Key AuthenticationKeyGuard-MCM Support Wireless Protected Access WPAGetting Started Overview Installing the SwitchSet up Communication to the Switch Chapter 3. Getting Started4. Log in using “admin” as the username and “symbol” as the password 1. Select System Configuration -- WS-2000 Access from the left menu Changing the Administrator PasswordSecurity Step 1 Configure the LAN InterfaceConfiguring the Switch Address Defining the SubnetsNetwork Interfaces Step 2 Configure SubnetsThe DHCP Configuration Advanced DHCP Settings Communicating with the Outside World Step 3 Configure the WAN InterfaceSetting Up Point-to-Point over Ethernet PPPoE Communication Step 4 Enable Wireless LANs WLANs Wireless Summary Area Access Port Adoption Step 5 Configure WLANsStep 6 Configure WLAN Security 802.1x EAP Authentication Setting the Authentication MethodConfiguring WEP Encryption Setting the Encryption MethodKerberos Authentication Configuring WPA-TKIP 6. Select either the ASCII Passphrase or 128-bit Key radio button No Encryption KeyGuard-MCMMobile Unit Access Control List ACL Step 7 Configure Access PortsRadio type-This field indicates the wireless protocol that the Access Port follows. The WS 2000 Wireless Switch supports 802.11b and 802.11 a/b dual-radio Access Ports Name Step 8 Configure Subnet AccessPlacement Power LevelThe Access Exception Area The Access Overview Table1. Click in a cell of the table that represents the subnet-to-subnet or subnet-to-WAN relationship to define. All access rules if any are defined appear in the table in the lower-half of the screen 5. Click the Apply button to save changes WLAN-How to Configure Advanced Settings Chapter 4. Advanced ConfigurationWLAN-Setting Default Access Port Settings 5. Check the Antenna Diversity checkbox to enable Antenna Diversity if the Access Port has an external antenna. Antenna Diversity should only be enabled if the Access Port has two matching external antennas DTIM Period 8. Set the beacon values as indicated in the table belowBeacon Interval WLAN-Advanced Access Port Settings WS 2000 Wireless Switch 1.0 Date of last Revision March WLAN-Advanced Access Port SettingsCopyright 2004 Symbol Technologies, Inc. All Rights Reserved DTIM Period 9. Set the beacon values as indicated in the table belowBeacon Interval Gateway-How to Configure Network Address Translation NAT 2. For each of the addresses, the select the NAT type Always On Firewall Filters Gateway-How to Configure the WS 2000 FirewallWinnuke Attack Check Configurable Firewall FiltersSYN Flood Attack Check Source Routing CheckMIME Flood Attack Check Gateway-How to Configure Static RoutesNo RIP Setting the RIP ConfigurationDefining Routes Security-How to Configure 802.1x EAP Authentication 3. Click the 802.1x EAP Configuration button to display a sub-screen for specific authentication settings 16. Click the Apply button to save changes Security-How to Configure Kerberos Authentication Security-How to Specify a Network Time Protocol NTP Server Overview Chapter 5. System AdministrationSwitch Settings WS 2000 Wireless Switch LED Functions1. Select System Configuration -- System Settings from the left menu Changing the Name of the Switch1. Select System Configuration -- System Settings from the left menu Change the Location and Country Settings of the WSLocation field 1. Select System Configuration -- System Settings from the left menu How to Restart the WS 2000 Wireless SwitchUpdating the WS 2000 Wireless Switch’s Firmware Performing the Firmware Update Checking for and Downloading Firmware updatesExporting and Importing Wireless Switch Settings System ConfigurationTo Export Settings to a Local File To Import or Export Settings to an FTP SiteTo Import Settings to a Local File 2. Select System Configuration -- System Settings from the left menu How to Restore Default Configuration Settings3. Set the properties for the port as indicated below Setting Up SNMP v1/v2c Community Definitions Remote AdministrationHow to Configure SNMP Traps Setting the SNMP Version ConfigurationSetting Up SNMP v3 Community Definitions Setting the Trap Configuration Setting Up the Access Control ListMU Traps SNMP TrapsAP Traps 3. Check the traps to enableSetting the Trap Configuration for SNMP v1/v2c Setting the Trap Configuration for SNMP Configure Administrator AccessConfigure Management Access Statistics and Logs Access Port StatisticsSetup AirBEAM Software Access Changing the Administrator and Manager PasswordsGeneral Access Port Information Associated Mobile Units Received and Transmitted TablesSubnet Statistics The Information portion of the Subnet Stats screen displays general information about the subnet Interfaces WAN StatisticsDescription Received FieldDescription TransmittedViewing the Log on the Switch Setting Up and Viewing the System LogSetting Up a Log Server Background Chapter 6. Retail Use CasesThe Plan Contacting the Wireless Switch Configuring the System SettingsEntering the Basic System Settings Setting Access Control The IP Address Plan Configuring the SubnetsConfiguring POS Subnet Configuring the Printer Subnet Retail Use Cases Copyright 2004 Symbol Technologies, Inc. All Rights ReservedWS 2000 Wireless Switch 1.0 Date of last Revision March Configuring the Cafe Subnet Clarisa clicks Advanced DHCP Server and enters the DNS server IP addresses. The Default Gateway is fine. However, Clarisa expects the cafe patrons to come and go frequently, so she reduces the IP address lease time to 1800 seconds. This means that a DHCP client mobile unit will give up its IP address if it is inactive on the network for more than half an hour. This seems about right for the usage patterns that she expects for the cafe. If she gets complaints, she will bump it to an hour Configuring the WAN Interface Configuring Network Address Translation NAT After she makes this selection a new button appears, labeled 1 to Many Mappings. She selects the 1 to Many Mappings button Inspecting the Firewall Configuring the Access PortsSetting Access Port Defaults Naming the POS Access Port Configuring the Printer Access Port Configuring the Cafe Access Port Associating the Access Ports to the WLANs Configuring the Cafe WLAN Configuring the WLANsConfiguring the Printer WLAN Configuring the POS WLAN Setting Subnet Access For the POS subnet and the Printer subnet, she selects Allow all protocols when going to the WAN, the POS subnet, and the Printer subnet Configuring the Clients Testing ConnectionsBackground Chapter 7. A Field Office ExampleThe Plan Each WS 2000 WLAN has exactly one security policy, where a security policy is defined as a user authentication method and a data encryption method. Because each WLAN can have one and only one security policy, WLAN configuration is usually defined by the security needs of the installation. If two groups of users require different security policies, then they must associate to the WS 2000 through different WLANs. See the Retail Use Case for an example of an installation where different security needs drive the need for separate WLANsTo begin configuration of the switch, Leo sets up a communication link to the switch. Leo starts with a direct network link between his laptop and the switch, plugging the cable into one of the local, non-WAN, ports. The switch defaults to having all the LAN ports on the first subnet and that subnet having an IP address of 192.168.0.1. So, as far as this connection is concerned, the switch comes up with an initial IP address of 192.168.0.1. He sets his laptop to have an IP address of 192.168.0.2 and a netmask of 255.255.255.0. He also sets the gateway IP address to be 192.168.0.1, the WS 2000’s IP address Configuring the System SettingsContacting the Wireless Switch Leo launches his web browser and enters “http//192.168.0.1/” as the URL. He logs in using “admin” for the username and “symbol” as the password Entering the Basic System SettingsSetting Access Control Leo then changes the switch passwords from the default to something relatively secure, something with letters, numbers, and punctuation marks in it Configuring the Engineering LAN Configuring the LANHe also selects the option This interface is a DHCP server. Choosing this DHCP option means that the switch will pick IP addresses from the Address Assignment Range and assign them to network clients on this subnet, as needed A Field Office Example Copyright 2004 Symbol Technologies, Inc. All Rights ReservedWS 2000 Wireless Switch 1.0 Date of last Revision March Configuring the Sales Subnet Configuring the WAN The next step is to set up the network address translations NAT Setting Up Network Address Translation The next step is to configure the firewall Adopting Access Ports Confirm Firewall ConfigurationLeo clicks the Apply button to save his changes Configuring the WLANs Security Leo clicks the OK button to save the 802.1x EAP settings Leo clicks the OK button to save his WPA-TKIP settings, then the Apply button to confirm the WLAN configuration Configuring the Access PortsHe does not change the Antenna Diversity setting, Short Preamble setting, the RTS Threshold, or the Beacon Settings. These parameters control some of the broadcast mechanics of an 802.11 communication between mobile units and Access Ports. In most cases, there is no reason to change them. He clicks Apply to save his choices He clicks the Apply button to save his changes Leo clicks Apply to save his changes Leo clicks the Apply button to save the changes for the administration Access Port Configuring Subnet Access Installing the Access Ports and Testing WS2000 menu Appendix A. Sample Configuration FileWS2000 Configuration Command Script System Firmware Version Config menuSNMP v3 trap configuration delete v3 all SNMP ACL configuration delete acl allSNMP v1/v2c configuration delete v1v2c all SNMP v1/v2c trap configuration delete v1v2c allWLAN 2 configuration WLAN 1 configuration set mode 1 enableWLAN 3 configuration set mode 3 disable Default 802.11 A radio configuration set reg A in/out 149 Port To Subnet Map configuration set port 1 s1 Default 802.11 B radio configuration set reg B in/out 1Access Port configuration LAN configuration networkenc-passwd 8e57 LAN DHCP configuration networkWAN configuration NAT configuration Firewall configuration set syn enableRouter configuration network Outbound 1-To-Many NAT configuration set outb map s1Inbound NAT configuration Subnet map configuration networkWS 2000 Wireless Switch 1.0 Date of last Revision March Sample Configuration FileCopyright 2004 Symbol Technologies, Inc. All Rights Reserved example use cases IndexSee NAT operating system servicesphysical specifications power specificationsRouting information Protocol configuring security Copyright 2004 Symbol Technologies, Inc. All Rights ReservedWS 2000 Wireless Switch 1.0 Date of last Revision March configuring printer