WFS709TP Setup Manual
Page 7
... to the WLAN 1-13 Association ...1-13 Authentication ...1-14 Client Mobility and AP Association 1-15 Configuring and Managing the WFS709TP 1-16 Tools ...1-18 Chapter 2. Overview of the WFS709TP WFS709TP System Components 1-1 NETGEAR ProSafe Access Points 1-1 WFS709TP ProSafe Switches 1-5 WFS709TP Software 1-7 Basic WLAN Configuration 1-8 Authentication ...1-8 Encryption ...1-10 VLAN ...1-11 Wireless Client Access to Print this Manual xiv Revision History...xv Chapter 1. Deploying a Basic...
... to the WLAN 1-13 Association ...1-13 Authentication ...1-14 Client Mobility and AP Association 1-15 Configuring and Managing the WFS709TP 1-16 Tools ...1-18 Chapter 2. Overview of the WFS709TP WFS709TP System Components 1-1 NETGEAR ProSafe Access Points 1-1 WFS709TP ProSafe Switches 1-5 WFS709TP Software 1-7 Basic WLAN Configuration 1-8 Authentication ...1-8 Encryption ...1-10 VLAN ...1-11 Wireless Client Access to Print this Manual xiv Revision History...xv Chapter 1. Deploying a Basic...
WFS709TP Setup Manual
Page 8
....0, June 2007 Configuring Network Parameters Configuring VLANs ...3-1 Assigning a Static Address to a VLAN 3-2 Configuring a VLAN to the WFS709TP 2-15 Install APs ...2-18 Provision APs ...2-18 Additional Configuration 2-20 Chapter 3. WFS709TP ProSafe Smart Wireless Switch Hardware Installation Guide Configure the Switch for the Access Points 2-8 Configure a VLAN for Network Connection 2-10 Connect the WFS709TP to the Network 2-12 Configure the Loopback for the WFS709TP 2-13 Deploying...
....0, June 2007 Configuring Network Parameters Configuring VLANs ...3-1 Assigning a Static Address to a VLAN 3-2 Configuring a VLAN to the WFS709TP 2-15 Install APs ...2-18 Provision APs ...2-18 Additional Configuration 2-20 Chapter 3. WFS709TP ProSafe Smart Wireless Switch Hardware Installation Guide Configure the Switch for the Access Points 2-8 Configure a VLAN for Network Connection 2-10 Connect the WFS709TP to the Network 2-12 Configure the Loopback for the WFS709TP 2-13 Deploying...
WFS709TP Setup Manual
Page 9
Configuring AAA Servers Configuring an External RADIUS Server 6-1 Adding Users to the Internal Database 6-3 Configuring Authentication Timers 6-4 Chapter 7. WFS709TP ProSafe Smart Wireless Switch Hardware Installation Guide Create a Building ...4-23 Model the Access ...Points 4-24 Model the Air Monitors 4-25 Add and Edit a Floor 4-25 Defining Areas ...4-26 Running the AP Plan 4-29 Running the AM Plan 4-30 Chapter 5. Configuring...
Configuring AAA Servers Configuring an External RADIUS Server 6-1 Adding Users to the Internal Database 6-3 Configuring Authentication Timers 6-4 Chapter 7. WFS709TP ProSafe Smart Wireless Switch Hardware Installation Guide Create a Building ...4-23 Model the Access ...Points 4-24 Model the Air Monitors 4-25 Add and Edit a Floor 4-25 Defining Areas ...4-26 Running the AP Plan 4-29 Running the AM Plan 4-30 Chapter 5. Configuring...
WFS709TP Setup Manual
Page 10
... AP Learning 12-2 x Contents v1.0, June 2007 Configuring MAC-Based Authentication Configuring the WFS709TP 9-1 Configuring Users ...9-2 Chapter 10. Configuring the Captive Portal Overview of Captive Portal Functions 8-1 Configuring Captive Portal 8-2 Configuring Advanced Captive Portal Options 8-3 Configuring the AAA Server for 802.1x 7-6 Chapter 8. WFS709TP ProSafe Smart Wireless Switch Hardware Installation Guide Authentication Terminated on WFS709TP 7-3 Configuring 802.1x Authentication 7-4 802.1x Authentication Page 7-5 Advanced...
... AP Learning 12-2 x Contents v1.0, June 2007 Configuring MAC-Based Authentication Configuring the WFS709TP 9-1 Configuring Users ...9-2 Chapter 10. Configuring the Captive Portal Overview of Captive Portal Functions 8-1 Configuring Captive Portal 8-2 Configuring Advanced Captive Portal Options 8-3 Configuring the AAA Server for 802.1x 7-6 Chapter 8. WFS709TP ProSafe Smart Wireless Switch Hardware Installation Guide Authentication Terminated on WFS709TP 7-3 Configuring 802.1x Authentication 7-4 802.1x Authentication Page 7-5 Advanced...
WFS709TP Setup Manual
Page 11
... Number of Active Voice Calls 14-3 WPA Fast Handover ...14-4 Appendix A. WFS709TP ProSafe Smart Wireless Switch Hardware Installation Guide Classifying APs ...12-2 Configuring Rogue AP Detection 12-4 Misconfigured AP Detection 12-5 Configuring Misconfigured AP Protection 12-5 Chapter 13. Configuring WFS709TP for Access Points 13-4 SNMP Traps ...13-9 Configuring Logging 13-12 Creating Guest Accounts 13-14 Managing Files on...
... Number of Active Voice Calls 14-3 WPA Fast Handover ...14-4 Appendix A. WFS709TP ProSafe Smart Wireless Switch Hardware Installation Guide Classifying APs ...12-2 Configuring Rogue AP Detection 12-4 Misconfigured AP Detection 12-5 Configuring Misconfigured AP Protection 12-5 Chapter 13. Configuring WFS709TP for Access Points 13-4 SNMP Traps ...13-9 Configuring Logging 13-12 Creating Guest Accounts 13-14 Managing Files on...
WFS709TP Setup Manual
Page 13
This manual uses the following formats to highlight special messages: Note: This format is used wireless LAN (WLAN) switch configurations such as Virtual Private Networks (VPNs) and redundancy. Tip: This format is used to highlight...2007 Warning: Ignoring this type of this manual are described in a malfunction or damage to deploy and configure the WFS709TP ProSafe Smart Wireless Switch. About This Manual The WFS709TP ProSafe™ Smart Wireless Switch Software Administration Manual describes how to the equipment. Conventions, Formats, and Scope The conventions, formats,...
This manual uses the following formats to highlight special messages: Note: This format is used wireless LAN (WLAN) switch configurations such as Virtual Private Networks (VPNs) and redundancy. Tip: This format is used to highlight...2007 Warning: Ignoring this type of this manual are described in a malfunction or damage to deploy and configure the WFS709TP ProSafe Smart Wireless Switch. About This Manual The WFS709TP ProSafe™ Smart Wireless Switch Software Administration Manual describes how to the equipment. Conventions, Formats, and Scope The conventions, formats,...
WFS709TP Setup Manual
Page 17
... the WFS709TP The WFS709TP ProSafe Smart Wireless Switch is a full-featured wireless switch that centrally manages NETGEAR Light access points, delivering integrated wireless mobility, security, and converged services for the WFS709TP, and provide the best features and easiest integration. NETGEAR ProSafe Access Points The NETGEAR ProSafe WAGL102 and ProSafe WGL102 access points (APs) are designed for both wired and wireless users. An AP broadcasts its configured...
... the WFS709TP The WFS709TP ProSafe Smart Wireless Switch is a full-featured wireless switch that centrally manages NETGEAR Light access points, delivering integrated wireless mobility, security, and converged services for the WFS709TP, and provide the best features and easiest integration. NETGEAR ProSafe Access Points The NETGEAR ProSafe WAGL102 and ProSafe WGL102 access points (APs) are designed for both wired and wireless users. An AP broadcasts its configured...
WFS709TP Setup Manual
Page 18
...Netgear AP connected with an Ethernet cable WFS709TP Figure 1-1 Access points used with an Ethernet cable or remotely through a variety of methods, including the Aruba Discovery Protocol (ADP), Domain Name Service (DNS), or D ynamic Host Configuration 1-2 Overview of the WFS709TP ...switch through an IP network. When powered on the WFS709TP. Figure 1-1 shows two APs connected to a WFS709TP either directly with the WFS709TP are Light APs, which means their primary function is located. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual You can connect an AP ...
...Netgear AP connected with an Ethernet cable WFS709TP Figure 1-1 Access points used with an Ethernet cable or remotely through a variety of methods, including the Aruba Discovery Protocol (ADP), Domain Name Service (DNS), or D ynamic Host Configuration 1-2 Overview of the WFS709TP ...switch through an IP network. When powered on the WFS709TP. Figure 1-1 shows two APs connected to a WFS709TP either directly with the WFS709TP are Light APs, which means their primary function is located. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual You can connect an AP ...
WFS709TP Setup Manual
Page 19
... an AP locates its firmware and configuration from the switch through the tunnel to it automatically builds a secure Generic Routing Encapsulation (GRE) tunnel to the host WFS709TP (Figure 1-3), which performs packet processing such as encryption and decryption, authentication, and policy enforcement Overview of the WFS709TP 1-3 v1.0, June 2007 WFS709TP ProSafe Smart Wireless Switch Software Administration Manual Protocol...
... an AP locates its firmware and configuration from the switch through the tunnel to it automatically builds a secure Generic Routing Encapsulation (GRE) tunnel to the host WFS709TP (Figure 1-3), which performs packet processing such as encryption and decryption, authentication, and policy enforcement Overview of the WFS709TP 1-3 v1.0, June 2007 WFS709TP ProSafe Smart Wireless Switch Software Administration Manual Protocol...
WFS709TP Setup Manual
Page 20
...the system's self-healing mechanism automatically ensures coverage for better channels at periodic intervals and report information to the WFS709TP. When IRM is a radio frequency (RF) resource allocation algorithm that you can determine the optimum channel ...scan for wireless users. Wireless clients Floor Netgear AP Wiring closet Internet Data center WFS709TP Figure 1-3 Automatic RF Channel and Power Settings IntelliFi RF Management (IRM) is enabled, each AP can enable and configure in a higher-performance RF environment. WFS709TP ProSafe Smart Wireless Switch Software...
...the system's self-healing mechanism automatically ensures coverage for better channels at periodic intervals and report information to the WFS709TP. When IRM is a radio frequency (RF) resource allocation algorithm that you can determine the optimum channel ...scan for wireless users. Wireless clients Floor Netgear AP Wiring closet Internet Data center WFS709TP Figure 1-3 Automatic RF Channel and Power Settings IntelliFi RF Management (IRM) is enabled, each AP can enable and configure in a higher-performance RF environment. WFS709TP ProSafe Smart Wireless Switch Software...
WFS709TP Setup Manual
Page 21
... when there is not adequately reaching wireless clients. While APs provide radio services only, the WFS709TP performs upper-layer media access control (MAC) processing, such as encryption and authentication, as well as dedicated AMs. You can configure dedicated AMs to perform the following ... are critical to your network, designate a few APs as centralized configuration and management of SSIDs and RF characteristics for the APs. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual You can also enable WFS709TPs to detect coverage holes, or areas where a good RF signal is...
... when there is not adequately reaching wireless clients. While APs provide radio services only, the WFS709TP performs upper-layer media access control (MAC) processing, such as encryption and authentication, as well as dedicated AMs. You can configure dedicated AMs to perform the following ... are critical to your network, designate a few APs as centralized configuration and management of SSIDs and RF characteristics for the APs. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual You can also enable WFS709TPs to detect coverage holes, or areas where a good RF signal is...
WFS709TP Setup Manual
Page 22
...) to be instructed by a master switch to as in the plenum or in air-handling spaces. Note: For information about configuring the switch for APs and services. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual WFS709TP switches provide 10/100 Mbps Fast Ethernet, IEEE 802.3af-compliant ports that is the master switch while non-master...
...) to be instructed by a master switch to as in the plenum or in air-handling spaces. Note: For information about configuring the switch for APs and services. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual WFS709TP switches provide 10/100 Mbps Fast Ethernet, IEEE 802.3af-compliant ports that is the master switch while non-master...
WFS709TP Setup Manual
Page 23
... each other, so APs that runs on all WFS709TPs and allows you to configure and manage the wireless and mobile user environment. Overview of local WFS709TPs. WFS709TP Software The WFS709TP ProSafe Smart Wireless Switch software is a suite of mobility applications that share roaming tables, security policies, and other configurations should be managed by the same master WFS709TP. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual .
... each other, so APs that runs on all WFS709TPs and allows you to configure and manage the wireless and mobile user environment. Overview of local WFS709TPs. WFS709TP Software The WFS709TP ProSafe Smart Wireless Switch software is a suite of mobility applications that share roaming tables, security policies, and other configurations should be managed by the same master WFS709TP. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual .
WFS709TP Setup Manual
Page 24
...wireless adapter in the form of the Media Access Control (MAC) address of the WFS709TP v1.0, June 2007 The client's identity, in the wireless client, is the default authentication protocol. Authentication A user must configure the following functions: • Centralized configuration and management of APs • Wireless...security mechanisms allowed by the IEEE 802.11 standard that you configure a WLAN in the WFS709TP system. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual The base configuration software includes the following basic elements: • An SSID ...
...wireless adapter in the form of the Media Access Control (MAC) address of the WFS709TP v1.0, June 2007 The client's identity, in the wireless client, is the default authentication protocol. Authentication A user must configure the following functions: • Centralized configuration and management of APs • Wireless...security mechanisms allowed by the IEEE 802.11 standard that you configure a WLAN in the WFS709TP system. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual The base configuration software includes the following basic elements: • An SSID ...
WFS709TP Setup Manual
Page 25
WFS709TP ProSafe Smart Wireless Switch Software Administration Manual • IEEE 802.1x. Note: The 802.1x standard requires the use of Extensible Authentication Protocol (EAP) they will use for the authentication transaction. Note: During the authentication process, the supplicant (the wireless client) and the RADIUS ...its configuration. • Wi-Fi Protected Access (WPA). Most Lightweight Directory Access Protocol (LDAP) servers do not support 802.1x. With 802.1x authentication, a supplicant is completely transparent to this mode as WPA-Personal). The EAP type is the wireless ...
WFS709TP ProSafe Smart Wireless Switch Software Administration Manual • IEEE 802.1x. Note: The 802.1x standard requires the use of Extensible Authentication Protocol (EAP) they will use for the authentication transaction. Note: During the authentication process, the supplicant (the wireless client) and the RADIUS ...its configuration. • Wi-Fi Protected Access (WPA). Most Lightweight Directory Access Protocol (LDAP) servers do not support 802.1x. With 802.1x authentication, a supplicant is completely transparent to this mode as WPA-Personal). The EAP type is the wireless ...
WFS709TP Setup Manual
Page 26
...and distribution of WEP keys is used and packets passing between the wireless client and WFS709TP are two forms of WPA or WPA-PSK and WPA2 or Mixed TKIP/AES WPA2-PSK You can configure the following data encryption options for every data packet. Dynamic WEP... for WPA and WPA-PSK authentication. • Advanced Encryption Standard (AES). You can select depends upon the authentication method chosen. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual Encryption The Layer 2 encryption option you can specify AES-CCMP encryption with WPA2 or WPA2-PSK authentication. ...
...and distribution of WEP keys is used and packets passing between the wireless client and WFS709TP are two forms of WPA or WPA-PSK and WPA2 or Mixed TKIP/AES WPA2-PSK You can configure the following data encryption options for every data packet. Dynamic WEP... for WPA and WPA-PSK authentication. • Advanced Encryption Standard (AES). You can select depends upon the authentication method chosen. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual Encryption The Layer 2 encryption option you can specify AES-CCMP encryption with WPA2 or WPA2-PSK authentication. ...
WFS709TP Setup Manual
Page 27
...into a VLAN, which determines the user's DHCP server, IP address, and Layer 2 connection. You configure VLAN 20 only on the WFS709TP. While you could place all authenticated wireless users into a single VLAN, the system allows you to create the VLANs anywhere else on any ... to network resources. This enables you must configure a static route to configure VLAN 20 on your network. For example, in the topology shown in the wired network Overview of the WFS709TP v1.0, June 2007 1-11 WFS709TP ProSafe Smart Wireless Switch Software Administration Manual VLAN Each authenticated user...
...into a VLAN, which determines the user's DHCP server, IP address, and Layer 2 connection. You configure VLAN 20 only on the WFS709TP. While you could place all authenticated wireless users into a single VLAN, the system allows you to create the VLANs anywhere else on any ... to network resources. This enables you must configure a static route to configure VLAN 20 on your network. For example, in the topology shown in the wired network Overview of the WFS709TP v1.0, June 2007 1-11 WFS709TP ProSafe Smart Wireless Switch Software Administration Manual VLAN Each authenticated user...
WFS709TP Setup Manual
Page 28
... VLAN takes precedence over a rule that derives a user role that may have a VLAN configured for the AP location. 2. Within the set of the WFS709TP WFS709TP ProSafe Smart Wireless Switch Software Administration Manual . VLAN 20 Floor Netgear AP Wiring closet Internet VLAN 20 Data center WFS709TP Figure 1-5 A user is assigned to highest precedence): 1. The VLAN is derived from lowest...
... VLAN takes precedence over a rule that derives a user role that may have a VLAN configured for the AP location. 2. Within the set of the WFS709TP WFS709TP ProSafe Smart Wireless Switch Software Administration Manual . VLAN 20 Floor Netgear AP Wiring closet Internet VLAN 20 Data center WFS709TP Figure 1-5 A user is assigned to highest precedence): 1. The VLAN is derived from lowest...
WFS709TP Setup Manual
Page 29
WFS709TP ProSafe Smart Wireless Switch Software Administration Manual 4. The VLAN is derived from NETGEAR vendor-specific attributes (VSAs) for RADIUS server authentication. Authentication of the WFS709TP v1.0, June 2007 1-13 Clients can select the network they want to join. Overview of the client/user before... which a wireless client gains access to the process by the WLAN. This does not require any previous VLAN assignment. This does not require any server-derived rule. 6. There are two phases to a WLAN: 1. For example, clients may have a VLAN configured for the client...
WFS709TP ProSafe Smart Wireless Switch Software Administration Manual 4. The VLAN is derived from NETGEAR vendor-specific attributes (VSAs) for RADIUS server authentication. Authentication of the WFS709TP v1.0, June 2007 1-13 Clients can select the network they want to join. Overview of the client/user before... which a wireless client gains access to the process by the WLAN. This does not require any previous VLAN assignment. This does not require any server-derived rule. 6. There are two phases to a WLAN: 1. For example, clients may have a VLAN configured for the client...
WFS709TP Setup Manual
Page 30
... work in -room Internet access. Captive portal authentication is fairly simple, 802.1x can be used to use and requires no software installation or configuration on the client. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual The client determines which means that user. Authentication Authentication provides a way to identify a user and provide appropriate access to...
... work in -room Internet access. Captive portal authentication is fairly simple, 802.1x can be used to use and requires no software installation or configuration on the client. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual The client determines which means that user. Authentication Authentication provides a way to identify a user and provide appropriate access to...