User Manual
Page 2
...WS2000 enable the easy extension of Ownership (TCO) The WS2000 reduces the complexities and costs associated with static IP support; Ideal for hotspots The WS2000...network connection your wired and wireless network - for the offline device. Superior network performance...and resiliency The WS2000 is fast and easy: the plug-and-play WS2000 automatically detects and configures access ports with DHCP options) enable staff in RF management...uplink (with the wired network simplifies the extension of ownership (TCO). Protected EAP (PEAP); Motorola Enterprise Mobility Services provide ...
...WS2000 enable the easy extension of Ownership (TCO) The WS2000 reduces the complexities and costs associated with static IP support; Ideal for hotspots The WS2000...network connection your wired and wireless network - for the offline device. Superior network performance...and resiliency The WS2000 is fast and easy: the plug-and-play WS2000 automatically detects and configures access ports with DHCP options) enable staff in RF management...uplink (with the wired network simplifies the extension of ownership (TCO). Protected EAP (PEAP); Motorola Enterprise Mobility Services provide ...
User Manual
Page 3
...Radius server, simplifying hotspot enablement for the enterprise and the user Site-to-Site IPSec VPN Cost-effective secure pointto-point and client device-tohost communications 802.3af... Power-overEthernet (PoE) support Built-in defining access policies URL filtering Provides complete control over which websites workers can access; easy-to branch offices and other distributed locations. supports URL Blacklist; WS2000 Network Architecture The WS2000 brings enterprise mobility and secure wired and wireless networking to -use "anytime, anywhere" management...
...Radius server, simplifying hotspot enablement for the enterprise and the user Site-to-Site IPSec VPN Cost-effective secure pointto-point and client device-tohost communications 802.3af... Power-overEthernet (PoE) support Built-in defining access policies URL filtering Provides complete control over which websites workers can access; easy-to branch offices and other distributed locations. supports URL Blacklist; WS2000 Network Architecture The WS2000 brings enterprise mobility and secure wired and wireless networking to -use "anytime, anywhere" management...
User Manual
Page 4
...Management Command Line Interface (Serial, Telnet, SSH v2); secure Web-based GUI (SSL); excessive authentication failures; W x 8 in USA 11/09. to 8,000 ft./16 m to -site VPN capabilities Secure Guest Local Web Based Authentication: URL redirection for access (hotspot user login; SPECIFICATION Sheet ws2000...your local Motorola office or Business Partner. Motorola mobile client assist IP Filtering: Configurable incoming and outgoing IP filtering policies on detection of RF interference or loss of data traffic performed on one wired and wireless switch for ...
...Management Command Line Interface (Serial, Telnet, SSH v2); secure Web-based GUI (SSL); excessive authentication failures; W x 8 in USA 11/09. to 8,000 ft./16 m to -site VPN capabilities Secure Guest Local Web Based Authentication: URL redirection for access (hotspot user login; SPECIFICATION Sheet ws2000...your local Motorola office or Business Partner. Motorola mobile client assist IP Filtering: Configurable incoming and outgoing IP filtering policies on detection of RF interference or loss of data traffic performed on one wired and wireless switch for ...
Reference Guide
Page 6
TOC-4 WS2000 Wireless Switch System Reference Guide 6.2.1 Configuring the RADIUS Server 6-5 6.2.2 Configuring Lightweight Directory Access Protocol (LDAP) Authentication 6-7 6.2.3 Setting Up a Proxy RADIUS Server 6-8 6.2.4 Managing the Local User Database 6-9 6.2.5 Adding New Guest Users Quickly 6-11 6.2.6 Setting the User Access Policy 6-12 6.3 Managing Digital Certificates 6-13 6.3.1 Importing CA Certificates 6-13 6.3.2 Creating Self Certificates 6-15 Chapter 7: Switch Administration 7.1 Overview of...
TOC-4 WS2000 Wireless Switch System Reference Guide 6.2.1 Configuring the RADIUS Server 6-5 6.2.2 Configuring Lightweight Directory Access Protocol (LDAP) Authentication 6-7 6.2.3 Setting Up a Proxy RADIUS Server 6-8 6.2.4 Managing the Local User Database 6-9 6.2.5 Adding New Guest Users Quickly 6-11 6.2.6 Setting the User Access Policy 6-12 6.3 Managing Digital Certificates 6-13 6.3.1 Importing CA Certificates 6-13 6.3.2 Creating Self Certificates 6-15 Chapter 7: Switch Administration 7.1 Overview of...
Reference Guide
Page 7
TOC-5 8.2 Configuring Hotspot 8-2 8.2.1 Enabling Hotspot on a WLAN 8-3 8.2.2 Set Hotspot Configuration 8-4 8.2.3 Setting the User Access Policy 8-7 8.2.4 Defining the Hotspot State of a Mobile Unit 8-7 8.2.5 Handling log-in and redirection 8-8 8.2.6 Authentication (RADIUS 8-8 8.2.7 Accounting (RADIUS 8-8 Chapter 9: Using DDNS ... 11.2 Subnet Statistics 11-3 11.2.1 Subnet Lease stats 11-3 11.2.2 Subnet Stats 11-5 11.2.3 STP Stats 11-6 11.3 Wireless LAN Statistics 11-8 11.3.1 Displaying WLAN Summary Information 11-8 11.3.2 Getting Statistics for a Particular WLAN 11-10 11.3.3 General...
TOC-5 8.2 Configuring Hotspot 8-2 8.2.1 Enabling Hotspot on a WLAN 8-3 8.2.2 Set Hotspot Configuration 8-4 8.2.3 Setting the User Access Policy 8-7 8.2.4 Defining the Hotspot State of a Mobile Unit 8-7 8.2.5 Handling log-in and redirection 8-8 8.2.6 Authentication (RADIUS 8-8 8.2.7 Accounting (RADIUS 8-8 Chapter 9: Using DDNS ... 11.2 Subnet Statistics 11-3 11.2.1 Subnet Lease stats 11-3 11.2.2 Subnet Stats 11-5 11.2.3 STP Stats 11-6 11.3 Wireless LAN Statistics 11-8 11.3.1 Displaying WLAN Summary Information 11-8 11.3.2 Getting Statistics for a Particular WLAN 11-10 11.3.3 General...
Reference Guide
Page 85
... disappears from the left of WLANs that are currently defined. To start the WLAN configuration process, select the Network Configuration --> Wireless item from the menu tree. To use as a hotspot, check the box marked Hotspot next to the WLAN(s) you wish to use the wireless features of the switch, the administrator needs to the left menu.
... disappears from the left of WLANs that are currently defined. To start the WLAN configuration process, select the Network Configuration --> Wireless item from the menu tree. To use as a hotspot, check the box marked Hotspot next to the WLAN(s) you wish to use the wireless features of the switch, the administrator needs to the left menu.
Reference Guide
Page 168
The detection functionality is greatly enhanced when the Approved AP list is authenticated, unauthenticated or dropped. An MU using the switch's Hotspot feature is filled out on the AP List screen under Rogue AP Detection. WIDS MU Event A WIDS violation event is detected. Click ...7.9.7 Setting RF Traps A screen is non-disruptive and will not affect the performance of activities either exceed or drop below a specified threshold. 7-26 WS2000 Wireless Switch System Reference Guide Trap Category Trap Name Rogue AP Wireless Hotspot MU State Traps Change Generates a Trap whenever...
The detection functionality is greatly enhanced when the Approved AP list is authenticated, unauthenticated or dropped. An MU using the switch's Hotspot feature is filled out on the AP List screen under Rogue AP Detection. WIDS MU Event A WIDS violation event is detected. Click ...7.9.7 Setting RF Traps A screen is non-disruptive and will not affect the performance of activities either exceed or drop below a specified threshold. 7-26 WS2000 Wireless Switch System Reference Guide Trap Category Trap Name Rogue AP Wireless Hotspot MU State Traps Change Generates a Trap whenever...
Reference Guide
Page 173
Configuring HotSpot 8.1 Overview 8-2 8.1.1 Requirements 8-2 8.2 Configuring Hotspot 8-2 8.2.1 Enabling Hotspot on a WLAN 8-3 8.2.2 Set Hotspot Configuration 8-4 8.2.3 Setting the User Access Policy 8-7 8.2.4 Defining the Hotspot State of a Mobile Unit 8-7 8.2.5 Handling log-in and redirection 8-8 8.2.6 Authentication (RADIUS 8-8 8.2.7 Accounting (RADIUS 8-8
Configuring HotSpot 8.1 Overview 8-2 8.1.1 Requirements 8-2 8.2 Configuring Hotspot 8-2 8.2.1 Enabling Hotspot on a WLAN 8-3 8.2.2 Set Hotspot Configuration 8-4 8.2.3 Setting the User Access Policy 8-7 8.2.4 Defining the Hotspot State of a Mobile Unit 8-7 8.2.5 Handling log-in and redirection 8-8 8.2.6 Authentication (RADIUS 8-8 8.2.7 Accounting (RADIUS 8-8
Reference Guide
Page 174
...8.2 Configuring Hotspot To configure the hotspot access controller on the WS2000 Wireless Switch: 1. Enables a list of IP address (not domain names) to be accessed without a special client application. Configure a subnet as an open network with hotspot authentication. ...the LAN/Subnet Configuration chapter and enable hotspot on -site solution to provide wireless LAN hotspots and management. 8-2 WS2000 Wireless Switch System Reference Guide 8.1 Overview The hotspot feature enables the WS2000 Wireless Switch to act as a secure authentication device. It enables an web browser as ...
...8.2 Configuring Hotspot To configure the hotspot access controller on the WS2000 Wireless Switch: 1. Enables a list of IP address (not domain names) to be accessed without a special client application. Configure a subnet as an open network with hotspot authentication. ...the LAN/Subnet Configuration chapter and enable hotspot on -site solution to provide wireless LAN hotspots and management. 8-2 WS2000 Wireless Switch System Reference Guide 8.1 Overview The hotspot feature enables the WS2000 Wireless Switch to act as a secure authentication device. It enables an web browser as ...
Reference Guide
Page 175
Select the Hotspot check-box for the WLAN that will support Hotspot. 3. Click Undo Changes to revert back to this screen. This enables hotspot on a WLAN: 1. Click Apply to apply the changes made to the previous settings. Click [Network Configuration] --> Wireless. S 2. Configuring HotSpot 8-3 8.2.1 Enabling Hotspot on a WLAN To enable hotspot on the particular WLAN. The Wireless screen is displayed.
Select the Hotspot check-box for the WLAN that will support Hotspot. 3. Click Undo Changes to revert back to this screen. This enables hotspot on a WLAN: 1. Click Apply to apply the changes made to the previous settings. Click [Network Configuration] --> Wireless. S 2. Configuring HotSpot 8-3 8.2.1 Enabling Hotspot on a WLAN To enable hotspot on the particular WLAN. The Wireless screen is displayed.
Reference Guide
Page 176
When a user successfully logs on using the hotspot, the user is enabled. To use redirect HTML files stored on the local network, use Use CF Card option. When selected, the CF Card Files area is redirected to a welcome screen. When... allows you to configure the different parameters to enable users to the switch, use the Use External URL option. 8-4 WS2000 Wireless Switch System Reference Guide 8.2.2 Set Hotspot Configuration Hotspots can be configured from the Hotspot Config screen. To configure the hotspot: 1. This selection decides the redirection mode. 2. Set the location ...
When a user successfully logs on using the hotspot, the user is enabled. To use redirect HTML files stored on the local network, use Use CF Card option. When selected, the CF Card Files area is redirected to a welcome screen. When... allows you to configure the different parameters to enable users to the switch, use the Use External URL option. 8-4 WS2000 Wireless Switch System Reference Guide 8.2.2 Set Hotspot Configuration Hotspots can be configured from the Hotspot Config screen. To configure the hotspot: 1. This selection decides the redirection mode. 2. Set the location ...
Reference Guide
Page 177
...RADIUS server located on the network or you can access without authentication. White List Entries 5. Configuring HotSpot 8-5 Radius Server Configuration 3. By default, hotspot user authentication is optional. ...To use a RADIUS server located on to the RADIUS server if no response is a list of 10 URLs can be between 1-10. You can be on the WS2000... be sent to an external RADIUS server or to enter and manage White List entries for an external secondary RADIUS server. This user...
...RADIUS server located on the network or you can access without authentication. White List Entries 5. Configuring HotSpot 8-5 Radius Server Configuration 3. By default, hotspot user authentication is optional. ...To use a RADIUS server located on to the RADIUS server if no response is a list of 10 URLs can be between 1-10. You can be on the WS2000... be sent to an external RADIUS server or to enter and manage White List entries for an external secondary RADIUS server. This user...
Reference Guide
Page 178
This screen is displayed when Login button is enabled. Creating Hotspot users To create a new hotspot user quickly, see Adding New Guest Users Quickly. Three files are clicked. Type in its text box. You can be found, the CF Card Files ... URL to set the location where these files can also paste the code from the clipboard by clicking the Get from Clipboard button. 8-6 WS2000 Wireless Switch System Reference Guide Redirect Pages Hotspot uses HTML pages to provide login and login status to enter the HTML files. Use the Login, Welcome, and Fail buttons to...
This screen is displayed when Login button is enabled. Creating Hotspot users To create a new hotspot user quickly, see Adding New Guest Users Quickly. Three files are clicked. Type in its text box. You can be found, the CF Card Files ... URL to set the location where these files can also paste the code from the clipboard by clicking the Get from Clipboard button. 8-6 WS2000 Wireless Switch System Reference Guide Redirect Pages Hotspot uses HTML pages to provide login and login status to enter the HTML files. Use the Login, Welcome, and Fail buttons to...
Reference Guide
Page 179
... group access. After the RADIUS server successfully authenticates the mobile unit, it sends a trigger to the wireless switch to change the hotspot-state of the mobile unit to the group. There is a dedicated socket connection between the wireless switch and an the RADIUS server for this state until it successfully authenticates through the RADIUS server...
... group access. After the RADIUS server successfully authenticates the mobile unit, it sends a trigger to the wireless switch to change the hotspot-state of the mobile unit to the group. There is a dedicated socket connection between the wireless switch and an the RADIUS server for this state until it successfully authenticates through the RADIUS server...
Reference Guide
Page 180
...To create new guest hotspot users see Chapter 6, Adding New Guest Users Quickly. 8.2.7 Accounting (RADIUS) Upon successful login a CGI script will use REMOTE_ADDR environment variable to get the IP address of the requester and verify its MAC address from ARP table. 8-8 WS2000 Wireless Switch System Reference Guide When ...will stop the RADIUS accounting for that the logout request should be in the response header. To host a login page on the WS2000 Wireless Switch. Then CGI script will reply back to the Login Handler to log out of IP addresses that it , which user can be...
...To create new guest hotspot users see Chapter 6, Adding New Guest Users Quickly. 8.2.7 Accounting (RADIUS) Upon successful login a CGI script will use REMOTE_ADDR environment variable to get the IP address of the requester and verify its MAC address from ARP table. 8-8 WS2000 Wireless Switch System Reference Guide When ...will stop the RADIUS accounting for that the logout request should be in the response header. To host a login page on the WS2000 Wireless Switch. Then CGI script will reply back to the Login Handler to log out of IP addresses that it , which user can be...
Reference Guide
Page 181
That packet will be sent to the RADIUS accounting server, which replies with an acknowledgement that was delivered, the statistics, and the elapsed time. Configuring HotSpot 8-9 If a client logs out or an MU is dis-associated, an Accounting Stop packet will be generated describing the type of service that the packet has been received.
That packet will be sent to the RADIUS accounting server, which replies with an acknowledgement that was delivered, the statistics, and the elapsed time. Configuring HotSpot 8-9 If a client logs out or an MU is dis-associated, an Accounting Stop packet will be generated describing the type of service that the packet has been received.
Reference Guide
Page 279
... 13-201 13.37 Network WLAN Hotspot Commands 13-202 WS2000>admin(network.wlan)> hotspot 13-202 WS2000>admin(network.wlan.hotspot)> set 13-203 WS2000> admin(network.wlan.hotspot)> show 13-205 WS2000> admin(network.wlan.hotspot)> import 13-206 13.38 Network WLAN Hotspot RADIUS commands 13-207 WS2000> admin(network.wlan.hotspot)> radius 13-207 WS2000> admin(network.wlan.hotspot.radius)> show 13-208 WS2000> admin(network.wlan.hotspot.radius)> set 13...
... 13-201 13.37 Network WLAN Hotspot Commands 13-202 WS2000>admin(network.wlan)> hotspot 13-202 WS2000>admin(network.wlan.hotspot)> set 13-203 WS2000> admin(network.wlan.hotspot)> show 13-205 WS2000> admin(network.wlan.hotspot)> import 13-206 13.38 Network WLAN Hotspot RADIUS commands 13-207 WS2000> admin(network.wlan.hotspot)> radius 13-207 WS2000> admin(network.wlan.hotspot.radius)> show 13-208 WS2000> admin(network.wlan.hotspot.radius)> set 13...
Reference Guide
Page 434
set Sets WLAN parameters. 13-160 WS2000 Wireless Switch System Reference Guide 13.28 Network WLAN Commands WS2000>admin(network)> wlan Description: Displays the WLAN submenu. delete Deletes MU access control list entries. muprobe Goes to the MU Probe submenu hotspot Goes to the Hotspot submenu wlanipfpolicy Goes to the root menu. Goes to the parent menu. / Goes to...
set Sets WLAN parameters. 13-160 WS2000 Wireless Switch System Reference Guide 13.28 Network WLAN Commands WS2000>admin(network)> wlan Description: Displays the WLAN submenu. delete Deletes MU access control list entries. muprobe Goes to the MU Probe submenu hotspot Goes to the Hotspot submenu wlanipfpolicy Goes to the root menu. Goes to the parent menu. / Goes to...
Reference Guide
Page 476
Goes to a submenu. Goes to a submenu. Quits the CLI. Goes to the parent menu. set show import radius white-list save quit .. / Sets the hotspot parameters Displays the hotspot parameters Imports hotspot display pages Sets hotspot RADIUS configuration. Goes to the root menu. Saves the configuration to system flash. Sets the hotspot white-list. The items available under this menu are shown below. 13-202 WS2000 Wireless Switch System Reference Guide 13.37 Network WLAN Hotspot Commands WS2000>admin(network.wlan)> hotspot Description: Displays the Hotspot sub menu.
Goes to a submenu. Goes to a submenu. Quits the CLI. Goes to the parent menu. set show import radius white-list save quit .. / Sets the hotspot parameters Displays the hotspot parameters Imports hotspot display pages Sets hotspot RADIUS configuration. Goes to the root menu. Saves the configuration to system flash. Sets the hotspot white-list. The items available under this menu are shown below. 13-202 WS2000 Wireless Switch System Reference Guide 13.37 Network WLAN Hotspot Commands WS2000>admin(network.wlan)> hotspot Description: Displays the Hotspot sub menu.
Reference Guide
Page 477
... and indicates the page type. index . HTTPS indicates use security. The URL information is applicable to all WLANs. Command Line Interface Reference 13-203 WS2000>admin(network.wlan.hotspot)> set exturl 1 welcome //192.168.1.10/wlan1/hotspt/ welcome.htm page- Sets the location of default, cf, url. can be one of the welcome...
... and indicates the page type. index . HTTPS indicates use security. The URL information is applicable to all WLANs. Command Line Interface Reference 13-203 WS2000>admin(network.wlan.hotspot)> set exturl 1 welcome //192.168.1.10/wlan1/hotspt/ welcome.htm page- Sets the location of default, cf, url. can be one of the welcome...