WFS709TP Setup Manual
Page 7
Overview of the WFS709TP WFS709TP System Components 1-1 NETGEAR ProSafe Access Points 1-1 WFS709TP ProSafe Switches 1-5 WFS709TP Software 1-7 Basic WLAN Configuration 1-8 Authentication ...1-8 Encryption ...1-10 VLAN ...1-11 Wireless Client Access to Print this Manual xiv Revision History...xv Chapter 1. Deploying a Basic WFS709TP System Configuration Overview 2-1 Deployment Scenario #1 2-1 Deployment Scenario #2 2-2 Deployment Scenario #3 2-4 Configuring the WFS709TP 2-5 Run the Initial Setup 2-6 vii v1.0, June 2007 Contents About This Manual Conventions, Formats...
Overview of the WFS709TP WFS709TP System Components 1-1 NETGEAR ProSafe Access Points 1-1 WFS709TP ProSafe Switches 1-5 WFS709TP Software 1-7 Basic WLAN Configuration 1-8 Authentication ...1-8 Encryption ...1-10 VLAN ...1-11 Wireless Client Access to Print this Manual xiv Revision History...xv Chapter 1. Deploying a Basic WFS709TP System Configuration Overview 2-1 Deployment Scenario #1 2-1 Deployment Scenario #2 2-2 Deployment Scenario #3 2-4 Configuring the WFS709TP 2-5 Run the Initial Setup 2-6 vii v1.0, June 2007 Contents About This Manual Conventions, Formats...
WFS709TP Setup Manual
Page 8
... Locate ...4-21 RF Plan Example ...4-22 Sample Building ...4-22 viii Contents v1.0, June 2007 WFS709TP ProSafe Smart Wireless Switch Hardware Installation Guide Configure the Switch for the Access Points 2-8 Configure a VLAN for Network Connection 2-10 Connect the WFS709TP to the Network 2-12 Configure the Loopback for the WFS709TP 2-13 Deploying APs ...2-14 Enable APs to Connect to Receive a Dynamic Address...
... Locate ...4-21 RF Plan Example ...4-22 Sample Building ...4-22 viii Contents v1.0, June 2007 WFS709TP ProSafe Smart Wireless Switch Hardware Installation Guide Configure the Switch for the Access Points 2-8 Configure a VLAN for Network Connection 2-10 Connect the WFS709TP to the Network 2-12 Configure the Loopback for the WFS709TP 2-13 Deploying APs ...2-14 Enable APs to Connect to Receive a Dynamic Address...
WFS709TP Setup Manual
Page 9
Configuring 802.1x Authentication 802.1x Authentication ...7-1 Authentication with a RADIUS Server 7-2 Contents ix v1.0, June 2007 WFS709TP ProSafe Smart Wireless Switch Hardware ...Installation Guide Create a Building ...4-23 Model the Access Points 4-24 Model the Air Monitors 4-25 Add and Edit a Floor 4-25 Defining Areas ...4-26 Running the AP Plan 4-29 Running the AM Plan 4-30 Chapter 5. Configuring WLANS Before You Begin ...5-1 Determine the Authentication Method 5-2 Determine the Default VLAN 5-4 Basic WLAN Configuration...
Configuring 802.1x Authentication 802.1x Authentication ...7-1 Authentication with a RADIUS Server 7-2 Contents ix v1.0, June 2007 WFS709TP ProSafe Smart Wireless Switch Hardware ...Installation Guide Create a Building ...4-23 Model the Access Points 4-24 Model the Air Monitors 4-25 Add and Edit a Floor 4-25 Defining Areas ...4-26 Running the AP Plan 4-29 Running the AM Plan 4-30 Chapter 5. Configuring WLANS Before You Begin ...5-1 Determine the Authentication Method 5-2 Determine the Default VLAN 5-4 Basic WLAN Configuration...
WFS709TP Setup Manual
Page 24
... the Media Access Control (MAC) address of the wireless adapter in the WFS709TP system. Essentially, any client requesting access to the WLAN is the default authentication protocol. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual The base configuration software includes the ... and VLAN configuration in the wireless client, is passed to the WFS709TP. However, you must authenticate to access WLAN resources. Authentication A user must configure the following functions: • Centralized configuration and management of APs • Wireless client authentication...
... the Media Access Control (MAC) address of the wireless adapter in the WFS709TP system. Essentially, any client requesting access to the WLAN is the default authentication protocol. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual The base configuration software includes the ... and VLAN configuration in the wireless client, is passed to the WFS709TP. However, you must authenticate to access WLAN resources. Authentication A user must configure the following functions: • Centralized configuration and management of APs • Wireless client authentication...
WFS709TP Setup Manual
Page 27
... wireless users are tunneled to the WFS709TP, it appears to VLAN 20 on any other device in the wired network Overview of the network as contractors or guests, into a VLAN, which determines the user's DHCP server, IP address, and Layer 2 connection. Note: You create the VLANs for wireless users only on VLAN 20. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual VLAN...
... wireless users are tunneled to the WFS709TP, it appears to VLAN 20 on any other device in the wired network Overview of the network as contractors or guests, into a VLAN, which determines the user's DHCP server, IP address, and Layer 2 connection. Note: You create the VLANs for wireless users only on VLAN 20. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual VLAN...
WFS709TP Setup Manual
Page 28
... of the WFS709TP The VLAN is configured for it. 3. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual . The VLAN is an order of VLANs are (from rules based on user attributes SSID, BSSID (Basic Service Set Identifier), user MAC, location, and encryption type. VLAN 20 Floor Netgear AP Wiring closet Internet VLAN 20 Data center WFS709TP Figure 1-5 A user is assigned to a VLAN by one...
... of the WFS709TP The VLAN is configured for it. 3. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual . The VLAN is an order of VLANs are (from rules based on user attributes SSID, BSSID (Basic Service Set Identifier), user MAC, location, and encryption type. VLAN 20 Floor Netgear AP Wiring closet Internet VLAN 20 Data center WFS709TP Figure 1-5 A user is assigned to a VLAN by one...
WFS709TP Setup Manual
Page 29
...by the WLAN. For example, clients may have a VLAN configured for encrypting data transmitted on the supported data rate. • WLAN requirements for RADIUS server authentication. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual 4. Wireless Client Access to join. Association of the radio network ...based on the WLAN. If a NETGEAR VSA is derived from NETGEAR vendor-specific attributes (VSAs) for the client. Clients can also send out probes to locate a WLAN within range or to a WLAN: 1. Authentication of the WFS709TP v1.0, June 2007 1-13 Within...
...by the WLAN. For example, clients may have a VLAN configured for encrypting data transmitted on the supported data rate. • WLAN requirements for RADIUS server authentication. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual 4. Wireless Client Access to join. Association of the radio network ...based on the WLAN. If a NETGEAR VSA is derived from NETGEAR vendor-specific attributes (VSAs) for the client. Clients can also send out probes to locate a WLAN within range or to a WLAN: 1. Authentication of the WFS709TP v1.0, June 2007 1-13 Within...
WFS709TP Setup Manual
Page 32
... web browser from the NETGEAR support site. Before you can find the WFS709TP ProSafe Smart Wireless Switch Hardware Installation Guide in a web browser. Note: You can use the browser interface, enter the IP address of -band management. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual Configuring and Managing the WFS709TP The browser interface allows you must configure the WFS709TP with an IP address...
... web browser from the NETGEAR support site. Before you can find the WFS709TP ProSafe Smart Wireless Switch Hardware Installation Guide in a web browser. Note: You can use the browser interface, enter the IP address of -band management. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual Configuring and Managing the WFS709TP The browser interface allows you must configure the WFS709TP with an IP address...
WFS709TP Setup Manual
Page 35
... the browser interface. Note: By default, clicking Apply does not save the configuration. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual Table 1-3 describes the Basic Configuration pages in top right corner of the selected item. • Delete. Network These pages allow you to configure ports, VLANs, IP interfaces, and DHCPrelated information. Resets options on both the Basic and...
... the browser interface. Note: By default, clicking Apply does not save the configuration. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual Table 1-3 describes the Basic Configuration pages in top right corner of the selected item. • Delete. Network These pages allow you to configure ports, VLANs, IP interfaces, and DHCPrelated information. Resets options on both the Basic and...
WFS709TP Setup Manual
Page 38
... ports and will use the ADP protocol to locate the WFS709TP. By default, all users. You would then configure the SSIDs with VLAN 1 as the assigned VLAN for clients 2-2 Deploying a Basic WFS709TP System v1.0, June 2007 WFS709TP ProSafe Smart Wireless Switch Software Administration Manual • Set the IP address of VLAN 1. • Set the default gateway to the IP address...
... ports and will use the ADP protocol to locate the WFS709TP. By default, all users. You would then configure the SSIDs with VLAN 1 as the assigned VLAN for clients 2-2 Deploying a Basic WFS709TP System v1.0, June 2007 WFS709TP ProSafe Smart Wireless Switch Software Administration Manual • Set the IP address of VLAN 1. • Set the default gateway to the IP address...
WFS709TP Setup Manual
Page 39
WFS709TP ProSafe Smart Wireless Switch Software Administration Manual Figure 2-2 shows a deployment scenario where the APs and the WFS709TP are on different subnetworks and the APs are on the WFS709TP to the switch or router interface. 3. You would then need to perform the following tasks: 1. Note: Each wireless user VLAN must configure static routes for VLAN 1. • Set the default gateway to...
WFS709TP ProSafe Smart Wireless Switch Software Administration Manual Figure 2-2 shows a deployment scenario where the APs and the WFS709TP are on different subnetworks and the APs are on the WFS709TP to the switch or router interface. 3. You would then need to perform the following tasks: 1. Note: Each wireless user VLAN must configure static routes for VLAN 1. • Set the default gateway to...
WFS709TP Setup Manual
Page 40
... as the default gateway. 2-4 Deploying a Basic WFS709TP System v1.0, June 2007 The WFS709TP is default gateway for VLAN 1, use VLAN 1 to connect to the switch or router as well as the default gateway for all wireless user VLANs. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual Deployment Scenario #3 Floor 3...multiple subnetworks, with routers between the APs and the WFS709TP. Note: This deployment scenario does not use the default values. When the initial setup prompts you will configure the appropriate VLAN to connect to the Layer 2 switch or router through...
... as the default gateway. 2-4 Deploying a Basic WFS709TP System v1.0, June 2007 The WFS709TP is default gateway for VLAN 1, use VLAN 1 to connect to the switch or router as well as the default gateway for all wireless user VLANs. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual Deployment Scenario #3 Floor 3...multiple subnetworks, with routers between the APs and the WFS709TP. Note: This deployment scenario does not use the default values. When the initial setup prompts you will configure the appropriate VLAN to connect to the Layer 2 switch or router through...
WFS709TP Setup Manual
Page 41
... setup (see"Run the Initial Setup" on the WFS709TP to this chapter) To connect the WFS709TP to locate WFS709TP. Connect the uplink port on the WFS709TP. The APs will connect the WFS709TP. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual You need to configure administrative information for each wireless user subnetwork. Configure the loopback interface for VLAN 1. Deploying a Basic WFS709TP System 2-5 v1.0, June 2007
... setup (see"Run the Initial Setup" on the WFS709TP to this chapter) To connect the WFS709TP to locate WFS709TP. Connect the uplink port on the WFS709TP. The APs will connect the WFS709TP. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual You need to configure administrative information for each wireless user subnetwork. Configure the loopback interface for VLAN 1. Deploying a Basic WFS709TP System 2-5 v1.0, June 2007
WFS709TP Setup Manual
Page 42
WFS709TP ProSafe Smart Wireless Switch Software Administration Manual 2. ("Deployment Scenario #3" only) Configure a VLAN to connect the WFS709TP to your network. 4. (Optional) Configure a loopback address for the WFS709TP. Run the Initial Setup When you to the wired network. 3. If you connect the switch to your network before you are using VLAN 1 to connect the WFS709TP to set a master or local role for the...
WFS709TP ProSafe Smart Wireless Switch Software Administration Manual 2. ("Deployment Scenario #3" only) Configure a VLAN to connect the WFS709TP to your network. 4. (Optional) Configure a loopback address for the WFS709TP. Run the Initial Setup When you to the wired network. 3. If you connect the switch to your network before you are using VLAN 1 to connect the WFS709TP to set a master or local role for the...
WFS709TP Setup Manual
Page 43
WFS709TP ProSafe Smart Wireless Switch Software Administration Manual To run the initial setup: 1. If this PC is already part of 192.168.0.200. Connect an Ethernet cable to communicate with other end of the cable into one of the Fast Ethernet Ports on the WFS709TP. Turn on the switch's planned subnetwork (the default gateway and VLAN 1 IP...
WFS709TP ProSafe Smart Wireless Switch Software Administration Manual To run the initial setup: 1. If this PC is already part of 192.168.0.200. Connect an Ethernet cable to communicate with other end of the cable into one of the Fast Ethernet Ports on the WFS709TP. Turn on the switch's planned subnetwork (the default gateway and VLAN 1 IP...
WFS709TP Setup Manual
Page 46
... click Apply. Note: In the browser interface configuration pages, clicking the Apply button saves configuration changes so they are usually Gigabit ports.) • Configure the ports as in this section only if you connect to a router are retained after the WFS709TP is rebooted. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual Configure a VLAN for Network Connection Follow the instructions in...
... click Apply. Note: In the browser interface configuration pages, clicking the Apply button saves configuration changes so they are usually Gigabit ports.) • Configure the ports as in this section only if you connect to a router are retained after the WFS709TP is rebooted. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual Configure a VLAN for Network Connection Follow the instructions in...
WFS709TP Setup Manual
Page 47
... network mask of the DHCP server for the VLAN you can also configure the address of the VLAN interface. If required, you just added. Configure the Trunk Port The following procedure configures a Gigabit Ethernet port as a trunk port. 1. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual 4. To add a port to the Configuration > Basic > Network > IP Interfaces page (Figure 2-8). For Native...
... network mask of the DHCP server for the VLAN you can also configure the address of the VLAN interface. If required, you just added. Configure the Trunk Port The following procedure configures a Gigabit Ethernet port as a trunk port. 1. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual 4. To add a port to the Configuration > Basic > Network > IP Interfaces page (Figure 2-8). For Native...
WFS709TP Setup Manual
Page 49
WFS709TP ProSafe Smart Wireless Switch Software Administration Manual • If you are not using VLAN 1 to connect the WFS709TP to the network (see "Deployment Scenario #1" on page 2-1 and "Deployment Scenario #2" on page 2-2), ping the VLAN 1 IP address from a workstation on the network. • If you created and configured a new VLAN...take effect. The loopback IP address in the procedure "Create the VLAN" on page 2-10, the VLAN 5 interface on the network. Note: You configure the loopback address as the WFS709TP's IP address. To set the loopback address through the browser interface...
WFS709TP ProSafe Smart Wireless Switch Software Administration Manual • If you are not using VLAN 1 to connect the WFS709TP to the network (see "Deployment Scenario #1" on page 2-1 and "Deployment Scenario #2" on page 2-2), ping the VLAN 1 IP address from a workstation on the network. • If you created and configured a new VLAN...take effect. The loopback IP address in the procedure "Create the VLAN" on page 2-10, the VLAN 5 interface on the network. Note: You configure the loopback address as the WFS709TP's IP address. To set the loopback address through the browser interface...
WFS709TP Setup Manual
Page 101
... will need to the Configuration > Basic > WLAN page (Figure 5-1). Figure 5-1 Configuring WLANS 5-5 v1.0, June 2007 WFS709TP ProSafe Smart Wireless Switch Software Administration Manual • You can configure the server's IP address, authentication and accounting ports, and shared key. To configure an SSID in the WLAN Basic Configuration page, navigate to have multiple VLANs configured for communication with the WFS709TP. If you specify...
... will need to the Configuration > Basic > WLAN page (Figure 5-1). Figure 5-1 Configuring WLANS 5-5 v1.0, June 2007 WFS709TP ProSafe Smart Wireless Switch Software Administration Manual • You can configure the server's IP address, authentication and accounting ports, and shared key. To configure an SSID in the WLAN Basic Configuration page, navigate to have multiple VLANs configured for communication with the WFS709TP. If you specify...
WFS709TP Setup Manual
Page 121
...Description User name (mandatory field) Password (mandatory field) E-mail address of the account. Configuring AAA Servers 6-3 v1.0, June 2007 WFS709TP ProSafe Smart Wireless Switch Software Administration Manual 4. See "Configuring Authentication Timers" on page 6-4 for the user during authentication. To edit or delete a ...you want to activate the authentication server. If an expiration is configured for the user. Adding Users to authenticate users. These values take precedence over the default VLAN configured for the user, the user is checked against the internal ...
...Description User name (mandatory field) Password (mandatory field) E-mail address of the account. Configuring AAA Servers 6-3 v1.0, June 2007 WFS709TP ProSafe Smart Wireless Switch Software Administration Manual 4. See "Configuring Authentication Timers" on page 6-4 for the user during authentication. To edit or delete a ...you want to activate the authentication server. If an expiration is configured for the user. Adding Users to authenticate users. These values take precedence over the default VLAN configured for the user, the user is checked against the internal ...