User Manual
Page 4
...through the L2/L3 Network 51 Connecting to the Core Network 51 4 Installing the D-Link Unified Access System 53 System Deployment Overview 53 Connecting the Switch to the Network 55 ... Switches 61 Understanding the Discovery Methods 61 Discovery and Peer Switches 64 Assigning the IP Address to Switches and Managed APs 64 Enabling the AP and Peer Switch Discovery ...Wireless Radio Settings 87 Configuring SSID Settings 92 Managing Virtual Access Point Configuration 93 Configuring the Default Network 94 Enabling and Configuring Additional VAPs 98 Configuring a VAP for L3 Tunnels 99 ...
...through the L2/L3 Network 51 Connecting to the Core Network 51 4 Installing the D-Link Unified Access System 53 System Deployment Overview 53 Connecting the Switch to the Network 55 ... Switches 61 Understanding the Discovery Methods 61 Discovery and Peer Switches 64 Assigning the IP Address to Switches and Managed APs 64 Enabling the AP and Peer Switch Discovery ...Wireless Radio Settings 87 Configuring SSID Settings 92 Managing Virtual Access Point Configuration 93 Configuring the Default Network 94 Enabling and Configuring Additional VAPs 98 Configuring a VAP for L3 Tunnels 99 ...
User Manual
Page 24
...Reserved. The client keeps the same IP address and does not need to re-authenticate when it moves into the broadcast area of the WLAN. Each peer Unified Switch can configure up to the APs are on a per-AP basis. D-Link Unified Access System User Manual Single ..., which includes automatic RF channel selection and automatic power adjustment. Peer Unified Switch Deployment To support larger networks, you deploy a D-Link Access Point, the D-Link Unified Switch can automatically detect the AP and assign a default profile, which increases the size and range of a different AP.
...Reserved. The client keeps the same IP address and does not need to re-authenticate when it moves into the broadcast area of the WLAN. Each peer Unified Switch can configure up to the APs are on a per-AP basis. D-Link Unified Access System User Manual Single ..., which includes automatic RF channel selection and automatic power adjustment. Peer Unified Switch Deployment To support larger networks, you deploy a D-Link Access Point, the D-Link Unified Switch can automatically detect the AP and assign a default profile, which increases the size and range of a different AP.
User Manual
Page 26
...configuration graphic is no password. 3. Open a Web browser and enter the IP address of each page to provide an alternate way to navigate to configuration and monitoring options. 26 © 2001- 2008 D-Link Corporation. All Rights Reserved. Enter the user name and password into the ...the navigation tree, and the configuration status or options. By default, the user name is admin, and there is a Java™ applet that appears. Figure 4 shows the layout of the D-Link Unified Switch Web interface. Figure 4. D-Link Unified Access System User Manual Using the Web Interface The ...
...configuration graphic is no password. 3. Open a Web browser and enter the IP address of each page to provide an alternate way to navigate to configuration and monitoring options. 26 © 2001- 2008 D-Link Corporation. All Rights Reserved. Enter the user name and password into the ...the navigation tree, and the configuration status or options. By default, the user name is admin, and there is a Java™ applet that appears. Figure 4 shows the layout of the D-Link Unified Switch Web interface. Figure 4. D-Link Unified Access System User Manual Using the Web Interface The ...
User Manual
Page 53
...switch to acquire this information automatically. 3. The WLAN feature must connect to the switch from a host in the same subnet as the switch default IP address (10.90.90.90/8). To install and configure the switch, you need a serial connection to the switch, or you install your ...existing network topology. Install and configure the D-Link Unified Switch. You should also determine how to the WLAN switch interface. For more information about planning the WLAN topology, see "WLAN Topology ...
...switch to acquire this information automatically. 3. The WLAN feature must connect to the switch from a host in the same subnet as the switch default IP address (10.90.90.90/8). To install and configure the switch, you need a serial connection to the switch, or you install your ...existing network topology. Install and configure the D-Link Unified Switch. You should also determine how to the WLAN switch interface. For more information about planning the WLAN topology, see "WLAN Topology ...
User Manual
Page 54
Changing the IP address of the AP settings before it authenticates. Prepare and deploy D-Link Access Points and enable AP-to the access point. Authenticate and validate the APs. Once you validate the AP, you follow the procedures in this chapter, the APs will have the default configuration profile. For ...the Valid AP database. Whether or not you must log on the default profile before you deploy the APs, or you add them to validate an AP before or after the switch validates it obtains an IP address (either statically or dynamically by the switch upon discovery, you require...
Changing the IP address of the AP settings before it authenticates. Prepare and deploy D-Link Access Points and enable AP-to the access point. Authenticate and validate the APs. Once you validate the AP, you follow the procedures in this chapter, the APs will have the default configuration profile. For ...the Valid AP database. Whether or not you must log on the default profile before you deploy the APs, or you add them to validate an AP before or after the switch validates it obtains an IP address (either statically or dynamically by the switch upon discovery, you require...
User Manual
Page 55
...workstation to enter the Privileged EXEC command mode. The command prompt changes to the Network 55 4 Installing the D-Link Unified Access System Connecting the Switch to the Network After you perform the physical hardware installation, you do not need to connect the... information. - Data bits: 8 - To manually configure the IP address, subnet mask, and default gateway, enter network parms [], for example: network parms 192.168.2.23 255.255.255.0 192.168.2.1 The default gateway is disabled by default. The default IP address of a Web browser or a Telnet client. To connect...
...workstation to enter the Privileged EXEC command mode. The command prompt changes to the Network 55 4 Installing the D-Link Unified Access System Connecting the Switch to the Network After you perform the physical hardware installation, you do not need to connect the... information. - Data bits: 8 - To manually configure the IP address, subnet mask, and default gateway, enter network parms [], for example: network parms 192.168.2.23 255.255.255.0 192.168.2.1 The default gateway is disabled by default. The default IP address of a Web browser or a Telnet client. To connect...
User Manual
Page 56
...access points can use the write command in Privileged Exec mode. The status can also use the IP address for the Unified Switch to be able to non-volatile memory (NVRAM). D-Link Unified Access System User Manual To view the network information, enter show network. 6. The WLAN ...Save Changes to navigate to refresh the screen. 56 © 2001- 2008 D-Link Corporation. Basic Wireless Global Configuration Field Enable WLAN Switch WLAN Switch Operational Status Description Check the box to the switch by default. If you can only operate in the modes permitted in the United States....
...access points can use the write command in Privileged Exec mode. The status can also use the IP address for the Unified Switch to be able to non-volatile memory (NVRAM). D-Link Unified Access System User Manual To view the network information, enter show network. 6. The WLAN ...Save Changes to navigate to refresh the screen. 56 © 2001- 2008 D-Link Corporation. Basic Wireless Global Configuration Field Enable WLAN Switch WLAN Switch Operational Status Description Check the box to the switch by default. If you can only operate in the modes permitted in the United States....
User Manual
Page 57
...this field appears and one of the following reasons: • No Loopback Interface-The switch does not have an IP address. • No SSL Files-The D-Link Unified Switch communicates with the show wireless command in Privileged EXEC mode. Basic Wireless Global Configuration Field WLAN Switch Disable ...Reason IP Address AP Authentication AP MAC Validation Country Code Description If the status is disabled, this option, you can associate with Routing Enabled" on page 65. Select the check box to require APs to the default values. Make sure you select...
...this field appears and one of the following reasons: • No Loopback Interface-The switch does not have an IP address. • No SSL Files-The D-Link Unified Switch communicates with the show wireless command in Privileged EXEC mode. Basic Wireless Global Configuration Field WLAN Switch Disable ...Reason IP Address AP Authentication AP MAC Validation Country Code Description If the status is disabled, this option, you can associate with Routing Enabled" on page 65. Select the check box to require APs to the default values. Make sure you select...
User Manual
Page 58
...management VLAN. The default IP address is 10.90.90.91/8, and DHCP is no security. All Rights Reserved. Also, if you configure the D-Link Unified Switch to require local AP authentication, you must have an IP address on the D-Link Access Point. If there is enabled by default on the same ...subnet as shown in the 10.0.0.0/8 subnet so you can access the AP CLI. For initial configuration with a DHCP server, the AP automatically acquires an IP address. By default, the AP uses...
...management VLAN. The default IP address is 10.90.90.91/8, and DHCP is no security. All Rights Reserved. Also, if you configure the D-Link Unified Switch to require local AP authentication, you must have an IP address on the D-Link Access Point. If there is enabled by default on the same ...subnet as shown in the 10.0.0.0/8 subnet so you can access the AP CLI. For initial configuration with a DHCP server, the AP automatically acquires an IP address. By default, the AP uses...
User Manual
Page 59
...the 802.1s password Command get dot1x-supplicant set dot1x-supplicant status up set dot1x-supplicant status down set dot1x-supplicant user set a static IP address, see "D-Link Access Point" on the AP or to set dot1x-supplicant password Preparing the Access Points 59 If your network uses 802.1X, you ... directly to the PC but instead is connected to the LAN. Table 4 shows the commands you can supply to the authenticator. To change the default AP password to make access to the device more secure. Changing the AP Password For access to the AP, you need to reconfigure the cabling...
...the 802.1s password Command get dot1x-supplicant set dot1x-supplicant status up set dot1x-supplicant status down set dot1x-supplicant user set a static IP address, see "D-Link Access Point" on the AP or to set dot1x-supplicant password Preparing the Access Points 59 If your network uses 802.1X, you ... directly to the PC but instead is connected to the LAN. Table 4 shows the commands you can supply to the authenticator. To change the default AP password to make access to the device more secure. Changing the AP Password For access to the AP, you need to reconfigure the cabling...
User Manual
Page 61
... clients, see Chapter 5, "Configuring Access Point Settings" on page 143. For information about how to discover D-Link Access Points and other D-Link Unified Switches. The default AP Profile settings are listed in the same layer 2 broadcast domain and use to change the AP Profile settings... Wireless clients • Rogue APs • Rogue wireless clients. 4 Installing the D-Link Unified Access System Table 5. Understanding the Discovery Methods The Unified Switch and AP have their own IP address, must be able to discover other WLAN devices and establish communication with them, ...
... clients, see Chapter 5, "Configuring Access Point Settings" on page 143. For information about how to discover D-Link Access Points and other D-Link Unified Switches. The default AP Profile settings are listed in the same layer 2 broadcast domain and use to change the AP Profile settings... Wireless clients • Rogue APs • Rogue wireless clients. 4 Installing the D-Link Unified Access System Table 5. Understanding the Discovery Methods The Unified Switch and AP have their own IP address, must be able to discover other WLAN devices and establish communication with them, ...
User Manual
Page 64
...an AP, use one or more peer switches as this switch, then the switch sends a "re-link" message to the access point with D-Link Access Points by using the IP protocol, so each other and with the IP address of the Unified Switch to which switch or switches are in the same L2 broadcast... are allowed to four switches in the DHCP Option" on page 205. To use the default VLAN settings, a peer switch will automatically discover the AP if the primary Unified Switch becomes unavailable. • Configure the IP address of the AP in up to four switches. • Connect to Switches and Managed...
...an AP, use one or more peer switches as this switch, then the switch sends a "re-link" message to the access point with D-Link Access Points by using the IP protocol, so each other and with the IP address of the Unified Switch to which switch or switches are in the same L2 broadcast... are allowed to four switches in the DHCP Option" on page 205. To use the default VLAN settings, a peer switch will automatically discover the AP if the primary Unified Switch becomes unavailable. • Configure the IP address of the AP in up to four switches. • Connect to Switches and Managed...
User Manual
Page 67
... command: set management static-ip static-mask For example: set management dhcp-status down 4. set management static-ip 192.168.22.133 static-mask 255.255.255.0 5. 4 Installing the D-Link Unified Access System D-Link Access Point On the D-Link Access Points, the default IP address is 10.90.90....91/8, and DHCP is enabled by telnetting to the D-Link Access Point. If you...
... command: set management static-ip static-mask For example: set management dhcp-status down 4. set management static-ip 192.168.22.133 static-mask 255.255.255.0 5. 4 Installing the D-Link Unified Access System D-Link Access Point On the D-Link Access Points, the default IP address is 10.90.90....91/8, and DHCP is enabled by telnetting to the D-Link Access Point. If you...
User Manual
Page 70
D-Link Unified Access System User Manual Table 6. By default, L3/IP Discovery is used to enable or disable IP-based discovery of the AP, log on to save the list in the From field, and leave the To field blank. 5. Enter the IP address at the start of the address range in the ... the get management command. Click Add to add the IP addresses to prevent the switch from the list select one IP address, enter the the address in the running configuration. IP List The list of IP address entries to the D-Link Unified Switch. 2. IP Address Range This text field is enabled. NOTE: To...
D-Link Unified Access System User Manual Table 6. By default, L3/IP Discovery is used to enable or disable IP-based discovery of the AP, log on to save the list in the From field, and leave the To field blank. 5. Enter the IP address at the start of the address range in the ... the get management command. Click Add to add the IP addresses to prevent the switch from the list select one IP address, enter the the address in the running configuration. IP List The list of IP address entries to the D-Link Unified Switch. 2. IP Address Range This text field is enabled. NOTE: To...
User Manual
Page 72
... discovery status. For example, to enter a Unified Switch with an IP address of 192.168.66.202 and a Unified Switch with a default subnet mask of the switch that are backup or alternate switches. The default IP address of the AP is correct. If you can only use the... following command: (switch-prompt) #show wireless ap status 72 © 2001- 2008 D-Link Corporation. The other mechanisms, the AP only accepts associations from ...
... discovery status. For example, to enter a Unified Switch with an IP address of 192.168.66.202 and a Unified Switch with a default subnet mask of the switch that are backup or alternate switches. The default IP address of the AP is correct. If you can only use the... following command: (switch-prompt) #show wireless ap status 72 © 2001- 2008 D-Link Corporation. The other mechanisms, the AP only accepts associations from ...
User Manual
Page 78
...validate the AP, you must configure settings on page 85. 78 © 2001- 2008 D-Link Corporation. Using the RADIUS Database for AP authentication. When you require a RADIUS server to the switch. If ...you enable RADIUS as its IP address. and not to authenticate wireless clients before they can associate with an AP, you...:00:14:40 4. The Valid AP database is not used for the Valid AP database, use the default AP Profile - To use a RADIUS server for local authentication and validation. If you configure the settings ...
...validate the AP, you must configure settings on page 85. 78 © 2001- 2008 D-Link Corporation. Using the RADIUS Database for AP authentication. When you require a RADIUS server to the switch. If ...you enable RADIUS as its IP address. and not to authenticate wireless clients before they can associate with an AP, you...:00:14:40 4. The Valid AP database is not used for the Valid AP database, use the default AP Profile - To use a RADIUS server for local authentication and validation. If you configure the settings ...
User Manual
Page 85
...not tunnel packets between the AP and RADIUS server. Table 7. Once the AP is enabled for the default AP profile. Global RADIUS Server Field Description IP Address This is the IP address of AP-to -switch management, see "Using the RADIUS Database for an individual AP, which ... applies to the client-to -AP communications, such as when clients use a RADIUS server for the default AP profile RADIUS server. Configuring AAA and RADIUS Settings In the D-Link Unified Access System, you can configure for wireless client-to -AP authentication and accounting management. When you...
...not tunnel packets between the AP and RADIUS server. Table 7. Once the AP is enabled for the default AP profile. Global RADIUS Server Field Description IP Address This is the IP address of AP-to -switch management, see "Using the RADIUS Database for an individual AP, which ... applies to the client-to -AP communications, such as when clients use a RADIUS server for the default AP profile RADIUS server. Configuring AAA and RADIUS Settings In the D-Link Unified Access System, you can configure for wireless client-to -AP authentication and accounting management. When you...
User Manual
Page 96
... physical network, even though they are connected to the tunneled network. No Routing Interface The network IP address you define on the switch. Enter the subnet mask for L3 Tunnels" on the same ...field can be on a unique VLAN or on page 99. The D-Link Unified Access System supports the configuration of L3 Tunneling. By default, all networks use , you configure in the tunnel subnet. NOTE: ...When L3 tunneling is enabled the VLAN ID is also untagged by the VLAN ID configured for example, a DWS-3000 switch...
... physical network, even though they are connected to the tunneled network. No Routing Interface The network IP address you define on the switch. Enter the subnet mask for L3 Tunnels" on the same ...field can be on a unique VLAN or on page 99. The D-Link Unified Access System supports the configuration of L3 Tunneling. By default, all networks use , you configure in the tunnel subnet. NOTE: ...When L3 tunneling is enabled the VLAN ID is also untagged by the VLAN ID configured for example, a DWS-3000 switch...
User Manual
Page 97
...if you can use any security mechanism by the AP in the VLAN field. The Adaptable Wireless technology offers maximized flexibility. D-Link's Adaptable Wireless technology provides you select a security mechanism so that unauthorized wireless clients cannot gain access to the network. To... and complete the L3 Tunnel Subnet and L3 Tunnel Mask fields. You must be authenticated by default. Wireless Network Configuration Field MAC Authentication RADIUS IP Address RADIUS Secret RADIUS Accounting Security Description If you enable MAC authentication, wireless clients must configure the...
...if you can use any security mechanism by the AP in the VLAN field. The Adaptable Wireless technology offers maximized flexibility. D-Link's Adaptable Wireless technology provides you select a security mechanism so that unauthorized wireless clients cannot gain access to the network. To... and complete the L3 Tunnel Subnet and L3 Tunnel Mask fields. You must be authenticated by default. Wireless Network Configuration Field MAC Authentication RADIUS IP Address RADIUS Secret RADIUS Accounting Security Description If you enable MAC authentication, wireless clients must configure the...
User Manual
Page 100
...networks, all on different subnets. VoIP Network Unified Switch Associated With: AP1 SSID: Company WLAN IP: 192.168.20.20 Associated With: AP2 SSID: Guest Network IP: 192.168.30.11 AP2 3 VAPs: SSID - The default profile has three virtual access points (VAPs) enabled, and each VAP uses a different network...to take advantage of 192.168.100.0. In the sample network that Figure 43 shows, the laptop users are controlled by a D-Link Unified Switch. D-Link Unified Access System User Manual In general, only clients that transmit and receive time-sensitive data while roaming need to the same ...
...networks, all on different subnets. VoIP Network Unified Switch Associated With: AP1 SSID: Company WLAN IP: 192.168.20.20 Associated With: AP2 SSID: Guest Network IP: 192.168.30.11 AP2 3 VAPs: SSID - The default profile has three virtual access points (VAPs) enabled, and each VAP uses a different network...to take advantage of 192.168.100.0. In the sample network that Figure 43 shows, the laptop users are controlled by a D-Link Unified Switch. D-Link Unified Access System User Manual In general, only clients that transmit and receive time-sensitive data while roaming need to the same ...