WFS709TP Setup Manual
Page 11
WFS709TP ProSafe Smart Wireless Switch Hardware Installation Guide Classifying APs ...12-2 Configuring Rogue AP Detection 12-4 Misconfigured AP Detection 12-5 Configuring Misconfigured AP Protection 12-5 Chapter 13. Configuring DHCP with Vendor-Specific Options Overview ...A-1 Windows-Based DHCP Servers A-2 Configuring Option 60 A-2 Configuring Option 43 A-3 Linux DHCP Servers ...A-4 Appendix B. Windows Client Example Configuration for Voice Voice over IP Proxy...
WFS709TP ProSafe Smart Wireless Switch Hardware Installation Guide Classifying APs ...12-2 Configuring Rogue AP Detection 12-4 Misconfigured AP Detection 12-5 Configuring Misconfigured AP Protection 12-5 Chapter 13. Configuring DHCP with Vendor-Specific Options Overview ...A-1 Windows-Based DHCP Servers A-2 Configuring Option 60 A-2 Configuring Option 43 A-3 Linux DHCP Servers ...A-4 Appendix B. Windows Client Example Configuration for Voice Voice over IP Proxy...
WFS709TP Setup Manual
Page 19
Netgear AP Floor Wiring closet GRE tunnel Internet GRE tunnel Data center WFS709TP Figure 1-2 Client traffic received by the AP is immediately sent through the tunnel. The AP then downloads its host switch, it automatically builds a secure Generic Routing Encapsulation (GRE) tunnel to the host WFS709TP... (Figure 1-3), which performs packet processing such as encryption and decryption, authentication, and policy enforcement Overview of the WFS709TP 1-3 v1.0, June 2007 WFS709TP ProSafe Smart Wireless Switch Software Administration Manual Protocol (DHCP). Once an...
Netgear AP Floor Wiring closet GRE tunnel Internet GRE tunnel Data center WFS709TP Figure 1-2 Client traffic received by the AP is immediately sent through the tunnel. The AP then downloads its host switch, it automatically builds a secure Generic Routing Encapsulation (GRE) tunnel to the host WFS709TP... (Figure 1-3), which performs packet processing such as encryption and decryption, authentication, and policy enforcement Overview of the WFS709TP 1-3 v1.0, June 2007 WFS709TP ProSafe Smart Wireless Switch Software Administration Manual Protocol (DHCP). Once an...
WFS709TP Setup Manual
Page 27
...DHCP server, IP address, and Layer 2 connection. you might place authorized employee users into one VLAN and itinerant users, such as if the clients were directly connected to configure VLAN 20 on any other device in the network. For example, you do not need to the WFS709TP.... You do not need to group wireless users into a single VLAN, the system allows you could place all authenticated wireless users into separate VLANs. While you to create the VLANs anywhere else on VLAN 20. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual VLAN Each authenticated...
...DHCP server, IP address, and Layer 2 connection. you might place authorized employee users into one VLAN and itinerant users, such as if the clients were directly connected to configure VLAN 20 on any other device in the network. For example, you do not need to the WFS709TP.... You do not need to group wireless users into a single VLAN, the system allows you could place all authenticated wireless users into separate VLANs. While you to create the VLANs anywhere else on VLAN 20. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual VLAN Each authenticated...
WFS709TP Setup Manual
Page 30
...of encryption 1-14 v1.0, June 2007 Overview of the client. While the configuration of authentication to the network is granted. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual The client determines which means that user. Captive portal authentication is the simplest form of 802.1x ... framework, allowing multiple authentication protocols to operate within the framework. 802.1x operates as a DHCP exchange to obtain an IP address, is allowed. 802.1x is a Thin AP, all wireless traffic it . Note: Because an AP connected to assign dynamic per-user encryption keys....
...of encryption 1-14 v1.0, June 2007 Overview of the client. While the configuration of authentication to the network is granted. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual The client determines which means that user. Captive portal authentication is the simplest form of 802.1x ... framework, allowing multiple authentication protocols to operate within the framework. 802.1x operates as a DHCP exchange to obtain an IP address, is allowed. 802.1x is a Thin AP, all wireless traffic it . Note: Because an AP connected to assign dynamic per-user encryption keys....
WFS709TP Setup Manual
Page 39
WFS709TP ProSafe Smart Wireless Switch Software Administration Manual Figure 2-2 shows a deployment scenario where the APs and the WFS709TP are on different subnetworks and the APs are on the WFS709TP to the switch or router interface. 3. Note: Each wireless user VLAN must configure static routes for the wireless clients.) The uplink port on the WFS709TP..., you will use DNS or DHCP to configure VLANs for each user VLAN, with the WFS709TP's VLAN 1 IP address as a router for the wireless user subnetworks. (It is an access port in VLAN 1. The WFS709TP acts as the next hop. Connect...
WFS709TP ProSafe Smart Wireless Switch Software Administration Manual Figure 2-2 shows a deployment scenario where the APs and the WFS709TP are on different subnetworks and the APs are on the WFS709TP to the switch or router interface. 3. Note: Each wireless user VLAN must configure static routes for the wireless clients.) The uplink port on the WFS709TP..., you will use DNS or DHCP to configure VLANs for each user VLAN, with the WFS709TP's VLAN 1 IP address as a router for the wireless user subnetworks. (It is an access port in VLAN 1. The WFS709TP acts as the next hop. Connect...
WFS709TP Setup Manual
Page 41
... this section) • Deploying APs (described later in a later step. • Do not specify a default gateway (use DNS or DHCP to which you will connect the WFS709TP. 5. Deploying a Basic WFS709TP System 2-5 v1.0, June 2007 WFS709TP ProSafe Smart Wireless Switch Software Administration Manual You need to perform the following tasks: 1. Create a VLAN that has the same VLAN ID...
... this section) • Deploying APs (described later in a later step. • Do not specify a default gateway (use DNS or DHCP to which you will connect the WFS709TP. 5. Deploying a Basic WFS709TP System 2-5 v1.0, June 2007 WFS709TP ProSafe Smart Wireless Switch Software Administration Manual You need to perform the following tasks: 1. Create a VLAN that has the same VLAN ID...
WFS709TP Setup Manual
Page 42
... connect the WFS709TP to your network. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual 2. ("Deployment Scenario #3" only) Configure a VLAN to connect the WFS709TP to perform this step if you are using the VLAN 1 IP address as the WFS709TP's IP address. Note: You do not need to your network before completing the initial setup, the DHCP server is complete...
... connect the WFS709TP to your network. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual 2. ("Deployment Scenario #3" only) Configure a VLAN to connect the WFS709TP to perform this step if you are using the VLAN 1 IP address as the WFS709TP's IP address. Note: You do not need to your network before completing the initial setup, the DHCP server is complete...
WFS709TP Setup Manual
Page 45
... option > Access Point Installation Wizard > Monitoring. In the Configuration UI, click the Configuration tab>Advanced option>DHCP Server, then enter the information to configure the DHCP server. (Figure 2-6) Figure 2-6 Connect the access points directly to the switch using an Ethernet cable to .... Refer to the documentation included with the access points to the access point(s). 3. Deploying a Basic WFS709TP System 2-9 v1.0, June 2007 b. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual Figure 2-5 c. In the web browser of the switch for all access points. 4.
... option > Access Point Installation Wizard > Monitoring. In the Configuration UI, click the Configuration tab>Advanced option>DHCP Server, then enter the information to configure the DHCP server. (Figure 2-6) Figure 2-6 Connect the access points directly to the switch using an Ethernet cable to .... Refer to the documentation included with the access points to the access point(s). 3. Deploying a Basic WFS709TP System 2-9 v1.0, June 2007 b. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual Figure 2-5 c. In the web browser of the switch for all access points. 4.
WFS709TP Setup Manual
Page 47
.... 1. For Native VLAN, select VLAN 5 from the scrolling list, then click the ← arrow. Deploying a Basic WFS709TP System v1.0, June 2007 2-11 WFS709TP ProSafe Smart Wireless Switch Software Administration Manual 4. Enter the IP address and network mask of the DHCP server for the VLAN you can also configure the address of the VLAN interface. Click Edit...
.... 1. For Native VLAN, select VLAN 5 from the scrolling list, then click the ← arrow. Deploying a Basic WFS709TP System v1.0, June 2007 2-11 WFS709TP ProSafe Smart Wireless Switch Software Administration Manual 4. Enter the IP address and network mask of the DHCP server for the VLAN you can also configure the address of the VLAN interface. Click Edit...
WFS709TP Setup Manual
Page 51
... to provide IP addresses for a DHCP server on a subnetwork that the APs will be the only DHCP server for this subnetwork. You can also configure a device in the same subnetwork as a DHCP server. The WFS709TP must ensure that has connectivity to the Configuration > Advanced > Switch > General > DHCP Server page (Figure 2-12). WFS709TP ProSafe Smart Wireless Switch Software Administration Manual 3.
... to provide IP addresses for a DHCP server on a subnetwork that the APs will be the only DHCP server for this subnetwork. You can also configure a device in the same subnetwork as a DHCP server. The WFS709TP must ensure that has connectivity to the Configuration > Advanced > Switch > General > DHCP Server page (Figure 2-12). WFS709TP ProSafe Smart Wireless Switch Software Administration Manual 3.
WFS709TP Setup Manual
Page 52
Click Done. 5. b. At the top of the page. 7. On the Add DHCP Pool page, enter information about the subnetwork for which IP addresses are addresses that should not be assigned (Figure 2-13). If there are... Basic WFS709TP System v1.0, June 2007 In the Pool Configuration section, click Add. Click Done. 6. Locate the WFS709TP An AP can discover the IP address of the WFS709TP in the Excluded Address Range section. Enter the address range in the subnetwork: a. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual Figure 2-12 2. Select the Enable DHCP Server ...
Click Done. 5. b. At the top of the page. 7. On the Add DHCP Pool page, enter information about the subnetwork for which IP addresses are addresses that should not be assigned (Figure 2-13). If there are... Basic WFS709TP System v1.0, June 2007 In the Pool Configuration section, click Add. Click Done. 6. Locate the WFS709TP An AP can discover the IP address of the WFS709TP in the Excluded Address Range section. Enter the address range in the subnetwork: a. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual Figure 2-12 2. Select the Enable DHCP Server ...
WFS709TP Setup Manual
Page 53
...configuration, depending on different networks, a Layer 3-compatible discovery mechanism, such as the WFS709TP: • If the APs are on whether the APs are in their DHCP request. NETGEAR APs are factory-configured to the same Layer 2 network. Using a DNS server ...NetgearAP in the same broadcast domain as DNS, DHCP, or Internet Group Management Protocol (IGMP) forwarding, must be connected to use ADP, all NETGEAR APs and WFS709TPs. Using ADP. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual • From a DHCP server • Using the ADPprotocol From a ...
...configuration, depending on different networks, a Layer 3-compatible discovery mechanism, such as the WFS709TP: • If the APs are on whether the APs are in their DHCP request. NETGEAR APs are factory-configured to the same Layer 2 network. Using a DNS server ...NetgearAP in the same broadcast domain as DNS, DHCP, or Internet Group Management Protocol (IGMP) forwarding, must be connected to use ADP, all NETGEAR APs and WFS709TPs. Using ADP. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual • From a DHCP server • Using the ADPprotocol From a ...
WFS709TP Setup Manual
Page 59
...one VLAN on the local network from a Dynamic Host Configuration Protocol (DHCP) server. At least one of the DHCP server for the VLAN by the network administrator. Figure 3-3 shows a branch office where a WFS709TP connects to a VLAN" on the uplink device. VLAN 1 has...To Internet Configuring Network Parameters 3-3 v1.0, June 2007 These methods are described in "Assigning a Static Address to a cable modem. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual 3. If required, you can be assigned a static IP address. • Dynamically assigned from a configured ...
...one VLAN on the local network from a Dynamic Host Configuration Protocol (DHCP) server. At least one of the DHCP server for the VLAN by the network administrator. Figure 3-3 shows a branch office where a WFS709TP connects to a VLAN" on the uplink device. VLAN 1 has...To Internet Configuring Network Parameters 3-3 v1.0, June 2007 These methods are described in "Assigning a Static Address to a cable modem. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual 3. If required, you can be assigned a static IP address. • Dynamically assigned from a configured ...
WFS709TP Setup Manual
Page 60
... name server, which can obtain its IP address through the switch's internal DHCP server. 3-4 Configuring Network Parameters v1.0, June 2007 WFS709TP ProSafe Smart Wireless Switch Software Administration Manual To allow the WFS709TP to obtain a dynamic IP address for a VLAN, you shut down the VLAN, the DHCP lease is connected to the modem or uplink switch. 5. The following...
... name server, which can obtain its IP address through the switch's internal DHCP server. 3-4 Configuring Network Parameters v1.0, June 2007 WFS709TP ProSafe Smart Wireless Switch Software Administration Manual To allow the WFS709TP to obtain a dynamic IP address for a VLAN, you shut down the VLAN, the DHCP lease is connected to the modem or uplink switch. 5. The following...
WFS709TP Setup Manual
Page 61
... Figure 3-4 Configuring Network Parameters 3-5 v1.0, June 2007 For DNS Servers, select Import from DHCP. 8. Select Enable DCHP Server. 3. For WINS Servers, select Import from DHCP. 7. Navigate to clients along with their IP address. 1. For Network, enter 10.1.1.0 for...the WFS709TP via DHCP is provided to the Configuration > Advanced > Switch > General > IP Routing page (Figure 3-4). 2. Configuring Static Routes To configure a static route (such as a default route) on the WFS709TP to assign addresses to authenticated employees; WFS709TP ProSafe Smart Wireless Switch...
... Figure 3-4 Configuring Network Parameters 3-5 v1.0, June 2007 For DNS Servers, select Import from DHCP. 8. Select Enable DCHP Server. 3. For WINS Servers, select Import from DHCP. 7. Navigate to clients along with their IP address. 1. For Network, enter 10.1.1.0 for...the WFS709TP via DHCP is provided to the Configuration > Advanced > Switch > General > IP Routing page (Figure 3-4). 2. Configuring Static Routes To configure a static route (such as a default route) on the WFS709TP to assign addresses to authenticated employees; WFS709TP ProSafe Smart Wireless Switch...
WFS709TP Setup Manual
Page 134
... Configure the Captive Portal for guest or authenticated users. Configuring Captive Portal The following are initially allowed only DNS, DHCP, and HTTP or HTTPS connections to their assigned VLAN. If you are allowed full access to the network. Figure...basic tasks for configuring Captive Portal in (Figure 8-1). WFS709TP ProSafe Smart Wireless Switch Software Administration Manual If an appropriate server certificate is not installed in the WFS709TP, wireless clients that will be either an external server or the WFS709TP's internal database. 8-2 Configuring the Captive Portal v1...
... Configure the Captive Portal for guest or authenticated users. Configuring Captive Portal The following are initially allowed only DNS, DHCP, and HTTP or HTTPS connections to their assigned VLAN. If you are allowed full access to the network. Figure...basic tasks for configuring Captive Portal in (Figure 8-1). WFS709TP ProSafe Smart Wireless Switch Software Administration Manual If an appropriate server certificate is not installed in the WFS709TP, wireless clients that will be either an external server or the WFS709TP's internal database. 8-2 Configuring the Captive Portal v1...
WFS709TP Setup Manual
Page 174
...in the network and configuration synchronization among all WFS709TPs The module responsible for authentication of management users (telnet/ssh/WebUI) The DHCP server in the WFS709TP The module responsible for all Layer 2/3 switching functionality The module responsible for inter-WFS709TP and intra-WFS709TP mobility for wireless clients The module responsible for managing the ... the first time the Frame Retry rate crosses the High Watermark and then will only be sent. Table 13-7 summarizes these logs. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual Table 13-6.
...in the network and configuration synchronization among all WFS709TPs The module responsible for authentication of management users (telnet/ssh/WebUI) The DHCP server in the WFS709TP The module responsible for all Layer 2/3 switching functionality The module responsible for inter-WFS709TP and intra-WFS709TP mobility for wireless clients The module responsible for managing the ... the first time the Frame Retry rate crosses the High Watermark and then will only be sent. Table 13-7 summarizes these logs. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual Table 13-6.
WFS709TP Setup Manual
Page 187
...8226; "Windows-Based DHCP Servers" on page A-2 • "Linux DHCP Servers" on page A-4 Overview DHCP servers are a popular way of configuring clients with Vendor-Specific Options A standards-compliant DHCP server can allow a NETGEAR access point to ...DHCP request. Appendix A Configuring DHCP with basic networking information such as IP address, default gateway, network mast, and DNS server. The value of the master WFS709TP. 3. In the WFS709TP system, this option is the loopback address of this information can be configured to return the host WFS709TP ProSafe Smart Wireless...
...8226; "Windows-Based DHCP Servers" on page A-2 • "Linux DHCP Servers" on page A-4 Overview DHCP servers are a popular way of configuring clients with Vendor-Specific Options A standards-compliant DHCP server can allow a NETGEAR access point to ...DHCP request. Appendix A Configuring DHCP with basic networking information such as IP address, default gateway, network mast, and DNS server. The value of the master WFS709TP. 3. In the WFS709TP system, this option is the loopback address of this information can be configured to return the host WFS709TP ProSafe Smart Wireless...
WFS709TP Setup Manual
Page 188
... Type: String • Code: 60 • Description: Netgear AP vendor class identifier 5. Select Set Predefined Options. 3. On the DHCP server, open the DHCP server administration tool by clicking Start > Administration Tools > DHCP. 2. A-2 Configuring DHCP with a particular vendor. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual Windows-Based DHCP Servers Configuring a Microsoft Windows-based DHCP server to send option 43 to the...
... Type: String • Code: 60 • Description: Netgear AP vendor class identifier 5. Select Set Predefined Options. 3. On the DHCP server, open the DHCP server administration tool by clicking Start > Administration Tools > DHCP. 2. A-2 Configuring DHCP with a particular vendor. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual Windows-Based DHCP Servers Configuring a Microsoft Windows-based DHCP server to send option 43 to the...
WFS709TP Setup Manual
Page 189
WFS709TP ProSafe Smart Wireless Switch Software Administration Manual Configuring Option 43 Option 43 returns the IP address of the master WFS709TP 5. To configure option 43 on the scope to be configured under the ASCII heading and enter the following information: ASCII: Loopback address of the master WFS709TP to a DHCP client. On the DHCP server, open the DHCP... server administration tool by clicking Start > Administration Tools > DHCP. 2. Configuring DHCP with Vendor-Specific Options A-3 v1...
WFS709TP ProSafe Smart Wireless Switch Software Administration Manual Configuring Option 43 Option 43 returns the IP address of the master WFS709TP 5. To configure option 43 on the scope to be configured under the ASCII heading and enter the following information: ASCII: Loopback address of the master WFS709TP to a DHCP client. On the DHCP server, open the DHCP... server administration tool by clicking Start > Administration Tools > DHCP. 2. Configuring DHCP with Vendor-Specific Options A-3 v1...