Application Note: Deploy a ProSecure UTM in a Multi SSID Multi VLAN network
Page 1
... document describes the steps to undertake in VLAN1 Wired LAN 192.168.1.x/24 Version 2.0 The solution will allow separating the Wireless traffic and Wired traffic of each of the VLANs configured, from any other VLAN which will exist on the Wired or... Wireless LAN - VLAN30 (ID 30) UTM Port 2 to Switch 0/1 Guest Engineering Layer 2/ Layer 3 switch configuration LAN IP 192.168.1.239 Management VLAN: 1 Membership : all ports Untagged in configuring a UTM 10 (Firmware version 1.0.16-0) and a WNDAP330 (Firmware version 3.0.3) to AP LAN Internet Corporate...
... document describes the steps to undertake in VLAN1 Wired LAN 192.168.1.x/24 Version 2.0 The solution will allow separating the Wireless traffic and Wired traffic of each of the VLANs configured, from any other VLAN which will exist on the Wired or... Wireless LAN - VLAN30 (ID 30) UTM Port 2 to Switch 0/1 Guest Engineering Layer 2/ Layer 3 switch configuration LAN IP 192.168.1.239 Management VLAN: 1 Membership : all ports Untagged in configuring a UTM 10 (Firmware version 1.0.16-0) and a WNDAP330 (Firmware version 3.0.3) to AP LAN Internet Corporate...
Layer 2/Layer and WNDAP330 to host a multi-SSID and multi-VLAN network.
Page 1
... Untagged) , 1/0/6 (Tagged) DGFV338 LAN IP: 10.0.0.1/24 DHCP 10.0.0.0/24 1/0/4 to host a multi-SSID and multiVLAN network. The solution will allow separating the Wireless traffic and Wired traffic of each of the VLANs configured, from any other VLAN which will exist on the Wired or... Wireless LAN. Layer 2 / Layer 3 switches and multi-SSID multi-VLAN network with traffic separation This document describes the steps to undertake in configuring a Layer 2/Layer 3 switch (in this document a FMS7382S with firmware 7.3.1.7) and a WNDAP330 to LAN Internet ...
... Untagged) , 1/0/6 (Tagged) DGFV338 LAN IP: 10.0.0.1/24 DHCP 10.0.0.0/24 1/0/4 to host a multi-SSID and multiVLAN network. The solution will allow separating the Wireless traffic and Wired traffic of each of the VLANs configured, from any other VLAN which will exist on the Wired or... Wireless LAN. Layer 2 / Layer 3 switches and multi-SSID multi-VLAN network with traffic separation This document describes the steps to undertake in configuring a Layer 2/Layer 3 switch (in this document a FMS7382S with firmware 7.3.1.7) and a WNDAP330 to LAN Internet ...
Layer 2/Layer and WNDAP330 to host a multi-SSID and multi-VLAN network.
Page 3
....0.235 SSID VLAN2 (VLAN ID=2), Network authentication (Optional) SSID VLAN3 (VLAN ID=3), Network authentication (Optional) Layer2/Layer3 switch Model: FSM7328S (or any Layer2, Layer3 switch) Firmware: 7.3.1.7 (or above) VLAN1 Management IP = 192.168.0.254 Ports = 1/0/1, 1/0/6-1/0/28 (All ports untagged) VLAN2 Ports = 1/0/2, 1/0/3 (PVID = 2, Untagged), 1/0/6 (Tagged) VLAN3 Ports = 1/0/4, 1/0/5 (PVID = 3, Untagged), 1/0/6 (Tagged) Version...
....0.235 SSID VLAN2 (VLAN ID=2), Network authentication (Optional) SSID VLAN3 (VLAN ID=3), Network authentication (Optional) Layer2/Layer3 switch Model: FSM7328S (or any Layer2, Layer3 switch) Firmware: 7.3.1.7 (or above) VLAN1 Management IP = 192.168.0.254 Ports = 1/0/1, 1/0/6-1/0/28 (All ports untagged) VLAN2 Ports = 1/0/2, 1/0/3 (PVID = 2, Untagged), 1/0/6 (Tagged) VLAN3 Ports = 1/0/4, 1/0/5 (PVID = 3, Untagged), 1/0/6 (Tagged) Version...
WNDAP350 User Manual
Page 3
...ími požadavky a dalšími p?íslušnými ustanoveními sm?rnice 1999/5/ES. Undertegnede NETGEAR Inc. erklærer herved, at preventing radio interference in Übereinstimmung mit den grundlegenden Anforderungen und den übrigen einschlä...the essential requirements of the European Community Cesky [Czech] Dansk [Danish] Deutsch [German] Eesti [Estonian] English Español [Spanish] NETGEAR Inc. NOTE: This product's firmware limits operation to prove presumption of conformity with the essential requirements of radio devices.
...ími požadavky a dalšími p?íslušnými ustanoveními sm?rnice 1999/5/ES. Undertegnede NETGEAR Inc. erklærer herved, at preventing radio interference in Übereinstimmung mit den grundlegenden Anforderungen und den übrigen einschlä...the essential requirements of the European Community Cesky [Czech] Dansk [Danish] Deutsch [German] Eesti [Estonian] English Español [Spanish] NETGEAR Inc. NOTE: This product's firmware limits operation to prove presumption of conformity with the essential requirements of radio devices.
WNDAP350 User Manual
Page 6
Operation is not accessible by the end user. The required antenna impedance is 50 ohms. Caution: The device for the band 5150-5250 MHz is strictly prohibited per regulations of 5250-5350 MHz and 5650-...WNDAP350 November 2009 Wireless Access Point ProSafe Dual Band Wireless-N Access Point WNDAP350 Business English 202-10534-01 1.1 vi v1.1, November 2009 This device has been designed to operate with an antenna having a maximum gain of 5 dBi Antenna having a higher gain is only for indoor usage to the following two conditions: (1) This device may cause undesired operation. The firmware...
Operation is not accessible by the end user. The required antenna impedance is 50 ohms. Caution: The device for the band 5150-5250 MHz is strictly prohibited per regulations of 5250-5350 MHz and 5650-...WNDAP350 November 2009 Wireless Access Point ProSafe Dual Band Wireless-N Access Point WNDAP350 Business English 202-10534-01 1.1 vi v1.1, November 2009 This device has been designed to operate with an antenna having a maximum gain of 5 dBi Antenna having a higher gain is only for indoor usage to the following two conditions: (1) This device may cause undesired operation. The firmware...
WNDAP350 User Manual
Page 15
... BSSIDs, you specify. • Upgradeable Firmware. The other . The Rogue AP detection feature shows a list of multiple WNDAP350s across an extensive network via the Ethernet interface. Wireless Access Point. Point-to -Point Bridge. The SSID is stored in a flash memory and can be used to a file and restored. • Power over Ethernet. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual • Multiple operating...
... BSSIDs, you specify. • Upgradeable Firmware. The other . The Rogue AP detection feature shows a list of multiple WNDAP350s across an extensive network via the Ethernet interface. Wireless Access Point. Point-to -Point Bridge. The SSID is stored in a flash memory and can be used to a file and restored. • Power over Ethernet. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual • Multiple operating...
WNDAP350 User Manual
Page 71
... to upload new firmware into the WNDAP350 must use a computer that is connected to interrupt the Web browser by NETGEAR. You must support HTTP uploads, such as new software is released by closing the window, clicking a link, or loading a new page. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Upgrading the Wireless Access Point Software The software of the WNDAP350 wirelss access point is stored...
... to upload new firmware into the WNDAP350 must use a computer that is connected to interrupt the Web browser by NETGEAR. You must support HTTP uploads, such as new software is released by closing the window, clicking a link, or loading a new page. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Upgrading the Wireless Access Point Software The software of the WNDAP350 wirelss access point is stored...
WNDAP350 User Manual
Page 72
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual The Web browser used to upload new firmware into the WNDAP350 must support HTTP uploads, such as shown in a configuration file. Download the new software file from the main menu, and then select Firmware Upgrade. Under the Maintenance tab, select Upgrade from the NETGEAR website, save it to your wireless access point will automatically restart. When...
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual The Web browser used to upload new firmware into the WNDAP350 must support HTTP uploads, such as shown in a configuration file. Download the new software file from the main menu, and then select Firmware Upgrade. Under the Maintenance tab, select Upgrade from the NETGEAR website, save it to your wireless access point will automatically restart. When...
WNDAP350 User Manual
Page 79
... desired. It may be found in a region other than one of the WNDAP350. The default gateway for 802.11b/bg/ng Operating Mode Identifies the 802.11 operating mode of those identified in Table 3-1: Table 3-1. Current Wireless Settings for the wireless access point communication. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Under the Monitoring tab on the main menu, select System to...
... desired. It may be found in a region other than one of the WNDAP350. The default gateway for 802.11b/bg/ng Operating Mode Identifies the 802.11 operating mode of those identified in Table 3-1: Table 3-1. Current Wireless Settings for the wireless access point communication. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Under the Monitoring tab on the main menu, select System to...
WNDAP350 User Manual
Page 127
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual | |-time> | | |-custom-ntp-server | | |-daylightsaving | | |-ntp-client | | |-ntp-server | | |-time-zone | | | |-vlan> | | |-management-vlan | | |-untagged-vlan | | |-untagged-vlan-status | | | |-exit |-file |-firmware-upgrade |-password |-restore-configuration |-restore-default-password |-show> | |-configuration | |-interface> | | |-eth> | | | |-statistics wlan> | | | |-2.4GHz> | | | | |-configuration | | | | |-knownaplist | | | | |-stationlist | | | | |-statistics | | | | |-trusted-stationlist | | | | |-unknownaplist 5GHz...
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual | |-time> | | |-custom-ntp-server | | |-daylightsaving | | |-ntp-client | | |-ntp-server | | |-time-zone | | | |-vlan> | | |-management-vlan | | |-untagged-vlan | | |-untagged-vlan-status | | | |-exit |-file |-firmware-upgrade |-password |-restore-configuration |-restore-default-password |-show> | |-configuration | |-interface> | | |-eth> | | | |-statistics wlan> | | | |-2.4GHz> | | | | |-configuration | | | | |-knownaplist | | | | |-stationlist | | | | |-statistics | | | | |-trusted-stationlist | | | | |-unknownaplist 5GHz...
WNDAP350 User Manual
Page 131
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual documentation 2-5 DTIM (Delivery Traffic Indication Message) interval 4- 6, 4-8 dual band concurrent, use 1-2 dynamic encryption key generation, support 1-2 dynamic IP address, configure 2-11 dynamic per frame rekeying 2-4 E EDCA (Enhanced Distributed Channel Access) 4-9 Ethernet RJ-45 port 1-10 ethernet cable, connect 2-11 I Infrastructure mode, selecting or changing channels 2-19 interference, channel settings 2-16 interference, least...
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual documentation 2-5 DTIM (Delivery Traffic Indication Message) interval 4- 6, 4-8 dual band concurrent, use 1-2 dynamic encryption key generation, support 1-2 dynamic IP address, configure 2-11 dynamic per frame rekeying 2-4 E EDCA (Enhanced Distributed Channel Access) 4-9 Ethernet RJ-45 port 1-10 ethernet cable, connect 2-11 I Infrastructure mode, selecting or changing channels 2-19 interference, channel settings 2-16 interference, least...
WNDAP350 User Manual
Page 134
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual default 5-3 support documentation 2-5 syslog server setup 3-11 system information 3-12 fields 3-13 system requirements ...17, 2-20 Trap 3-2 troubleshooting 5-1 access point, connecting to 5-3 configuring, 5-3 LAN activity 5-2 power connection 5-1 timeout error 5-3 wireless Internet connection 5-2 wireless LAN activity l 5-2 trusted wireless stations list MAC authentication 2-45 U unauthorized access, secure from 2-1 untagged VLAN default settings 2-7 upgradeable firmware, support for 1-3 V VLAN (802.1Q) 2-33 VLAN ID DHCP server...
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual default 5-3 support documentation 2-5 syslog server setup 3-11 system information 3-12 fields 3-13 system requirements ...17, 2-20 Trap 3-2 troubleshooting 5-1 access point, connecting to 5-3 configuring, 5-3 LAN activity 5-2 power connection 5-1 timeout error 5-3 wireless Internet connection 5-2 wireless LAN activity l 5-2 trusted wireless stations list MAC authentication 2-45 U unauthorized access, secure from 2-1 untagged VLAN default settings 2-7 upgradeable firmware, support for 1-3 V VLAN (802.1Q) 2-33 VLAN ID DHCP server...