Application Note: Deploy a ProSecure UTM in a Multi SSID Multi VLAN network
Page 2
Table of Contents Network Setup ...3 Physical setup...3 Logical setup ...3 UTM10 Configuration ...4 Create a new VLAN ...4 AP configuration (WNDAP330 5 Create a new SSID ...5 Further Notes ...6 Testing ...6 Managing devices ...6 Version 2.0
Table of Contents Network Setup ...3 Physical setup...3 Logical setup ...3 UTM10 Configuration ...4 Create a new VLAN ...4 AP configuration (WNDAP330 5 Create a new SSID ...5 Further Notes ...6 Testing ...6 Managing devices ...6 Version 2.0
Application Note: Deploy a ProSecure UTM in a Multi SSID Multi VLAN network
Page 3
... 2/Layer 3 switch Port 0/1 connected to UTM10 Port 2 Wireless AP LAN port connected to UTM10 Port 1 UTM10 WAN port connected to the Internet Logical setup UTM 10 Configuration LAN IP 192.168.1.1 VLAN1 (default) IP 192.168.1.1 Membership: Port 1, 2, 3, 4 DHCP enabled 192.168.1.x/24 VLAN20 IP 192.168.20.1 Membership: ...
... 2/Layer 3 switch Port 0/1 connected to UTM10 Port 2 Wireless AP LAN port connected to UTM10 Port 1 UTM10 WAN port connected to the Internet Logical setup UTM 10 Configuration LAN IP 192.168.1.1 VLAN1 (default) IP 192.168.1.1 Membership: Port 1, 2, 3, 4 DHCP enabled 192.168.1.x/24 VLAN20 IP 192.168.20.1 Membership: ...
Application Note: Deploy a ProSecure UTM in a Multi SSID Multi VLAN network
Page 4
to create a new VLAN Repeat the same process for both VLAN 20 and VLAN 30 (for example a Netgear switch 802.1q capable. After creating each VLAN the User will connect to changing the PVID of it. Changing the Default VLAN for a Port will be the ... NOTE: Although not relevant in this is the port the Access Point will be prompted with a scope of addresses within the same range as the default VLAN is VLAN 1. UTM10 Configuration Create a new VLAN Access the VLAN configuration via Network Config, LAN settings, LAN Setup. VLAN1 exists on the default configuration and all the...
to create a new VLAN Repeat the same process for both VLAN 20 and VLAN 30 (for example a Netgear switch 802.1q capable. After creating each VLAN the User will connect to changing the PVID of it. Changing the Default VLAN for a Port will be the ... NOTE: Although not relevant in this is the port the Access Point will be prompted with a scope of addresses within the same range as the default VLAN is VLAN 1. UTM10 Configuration Create a new VLAN Access the VLAN configuration via Network Config, LAN settings, LAN Setup. VLAN1 exists on the default configuration and all the...
Layer 2/Layer and WNDAP330 to host a multi-SSID and multi-VLAN network.
Page 2
Table of Contents NETWORK SETUP...3 Physical setup...3 Logical setup ...3 LAYER2/LAYER3 SWITCH CONFIGURATION 4 Create a new VLAN ...4 Assign Port's membership (to a VLAN 4 Change the port PVID 4 Save the configuration 5 ACCESS POINT CONFIGURATION 6 Enable the Wireless Radio mode and configure the Radio Channel 6 Create a new SSID and assign a VLAN ID 6 Select the management VLAN and Untagged VLAN 6 FURTHER NOTES...7 Testing ...7 Managing devices ...7 Version 1.0
Table of Contents NETWORK SETUP...3 Physical setup...3 Logical setup ...3 LAYER2/LAYER3 SWITCH CONFIGURATION 4 Create a new VLAN ...4 Assign Port's membership (to a VLAN 4 Change the port PVID 4 Save the configuration 5 ACCESS POINT CONFIGURATION 6 Enable the Wireless Radio mode and configure the Radio Channel 6 Create a new SSID and assign a VLAN ID 6 Select the management VLAN and Untagged VLAN 6 FURTHER NOTES...7 Testing ...7 Managing devices ...7 Version 1.0
Layer 2/Layer and WNDAP330 to host a multi-SSID and multi-VLAN network.
Page 3
... connected to port 1/0/2 on Layer2/Layer3 switch Corporate LAN connected to port 1/0/4 on Layer2/Layer3 switch WNDAP330 connected to port 1/0/6 on Layer2/Layer3 switch Logical setup DGFV338 LAN IP: 10.0.0.1/24 DHCP: 10.0.0.0/24 WNDAP330 Management VLAN = 1 Untagged VLAN = 1 LAN management IP = 102.168.0.235 SSID VLAN2 (VLAN ID=2), Network authentication...
... connected to port 1/0/2 on Layer2/Layer3 switch Corporate LAN connected to port 1/0/4 on Layer2/Layer3 switch WNDAP330 connected to port 1/0/6 on Layer2/Layer3 switch Logical setup DGFV338 LAN IP: 10.0.0.1/24 DHCP: 10.0.0.0/24 WNDAP330 Management VLAN = 1 Untagged VLAN = 1 LAN management IP = 102.168.0.235 SSID VLAN2 (VLAN ID=2), Network authentication...
WNDAP350 User Manual
Page 7
Contents ProSafe Dual Band Wireless-N WNDAP350 Reference Manual About This Manual Chapter 1 Introduction About the ProSafe Dual Band Wireless-N Access Point WNDAP350 1-1 Key Features and Standards 1-1 Compatible and Related NETGEAR Products 1-5 System Requirements ...1-6 What's In the Box? ...1-6 Hardware Description ...1-7 Chapter 2 Basic Installation and Configuration Wireless Equipment Placement and Range Guidelines 2-2 Understanding WNDAP350 Wireless Security Options 2-3 Installing the WNDAP350 wirelss access point 2-4 Logging In Using the Default IP Address 2-12 Setting...
Contents ProSafe Dual Band Wireless-N WNDAP350 Reference Manual About This Manual Chapter 1 Introduction About the ProSafe Dual Band Wireless-N Access Point WNDAP350 1-1 Key Features and Standards 1-1 Compatible and Related NETGEAR Products 1-5 System Requirements ...1-6 What's In the Box? ...1-6 Hardware Description ...1-7 Chapter 2 Basic Installation and Configuration Wireless Equipment Placement and Range Guidelines 2-2 Understanding WNDAP350 Wireless Security Options 2-3 Installing the WNDAP350 wirelss access point 2-4 Logging In Using the Default IP Address 2-12 Setting...
WNDAP350 User Manual
Page 21
..."Setting Up and Testing Basic Wireless Connectivity 8. "Setting up your ProSafe Dual Band Wireless-N Access Point WNDAP350for wireless connectivity to your LAN. "Wireless Equipment Placement and Range Guidelines 2. "Installing the WNDAP350 wirelss access point 4. "Wireless Settings 7. "SSID and WEP/WPA Settings Setup Form 10. "Logging In ...802.11b/bg/ng or 802.11a/na wireless networks at ranges of several hundred feet or more. It is important to take appropriate steps to secure your needs. "Understanding WNDAP350 Wireless Security Options 3. The WNDAP350 wirelss access point...
..."Setting Up and Testing Basic Wireless Connectivity 8. "Setting up your ProSafe Dual Band Wireless-N Access Point WNDAP350for wireless connectivity to your LAN. "Wireless Equipment Placement and Range Guidelines 2. "Installing the WNDAP350 wirelss access point 4. "Wireless Settings 7. "SSID and WEP/WPA Settings Setup Form 10. "Logging In ...802.11b/bg/ng or 802.11a/na wireless networks at ranges of several hundred feet or more. It is important to take appropriate steps to secure your needs. "Understanding WNDAP350 Wireless Security Options 3. The WNDAP350 wirelss access point...
WNDAP350 User Manual
Page 25
... the wireless access point is lit when connected to exit the WNDAP350 setup screens. (You will automatically be blinking. Click Login. Figure 2-2 Login screen 3. Turn on your browser and entering http://192.168.0.237 in lower case letters. Configuring LAN and Wireless Access To configure the WNDAP350 Ethernet port for the Subnet Mask. 3. Connect to the computer. 4. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference...
... the wireless access point is lit when connected to exit the WNDAP350 setup screens. (You will automatically be blinking. Click Login. Figure 2-2 Login screen 3. Turn on your browser and entering http://192.168.0.237 in lower case letters. Configuring LAN and Wireless Access To configure the WNDAP350 Ethernet port for the Subnet Mask. 3. Connect to the computer. 4. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference...
WNDAP350 User Manual
Page 30
... 1 (from the Static IP) back to save your wireless settings for 11b/bg/ng and 11a/na: 1. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Configuring Wireless Access To configure your settings. Click Apply to its original TCP/IP settings. Enter the wireless settings for 802.11b/bg/ng When you have completed the setup steps, you used in Figure 2-7. 2. If needed...
... 1 (from the Static IP) back to save your wireless settings for 11b/bg/ng and 11a/na: 1. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Configuring Wireless Access To configure your settings. Click Apply to its original TCP/IP settings. Enter the wireless settings for 802.11b/bg/ng When you have completed the setup steps, you used in Figure 2-7. 2. If needed...
WNDAP350 User Manual
Page 47
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual - SSID and WEP/WPA Settings Setup Form 802.11b/bg/ng Configuration For a new wireless network, print or copy this information. For an existing wireless network, the person who set up to 32 alphanumeric characters. However, you configure in the same network must... devices in the network will not be from 8 to Shared Key as well and have the same keys in the wireless access point is the default WNDAP350 SSID. The default Profile VLAN ID must use the same passphrase (network key). Note: The SSID in the same positions...
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual - SSID and WEP/WPA Settings Setup Form 802.11b/bg/ng Configuration For a new wireless network, print or copy this information. For an existing wireless network, the person who set up to 32 alphanumeric characters. However, you configure in the same network must... devices in the network will not be from 8 to Shared Key as well and have the same keys in the wireless access point is the default WNDAP350 SSID. The default Profile VLAN ID must use the same passphrase (network key). Note: The SSID in the same positions...
WNDAP350 User Manual
Page 49
...profiles. Note: The RADIUS Server Settings apply to configure the WNDAP350. To set up or modify the RADIUS Server Settings: 1. Basic Installation and Configuration v1.1, November 2009 2-29 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual • WPA-PSK (Preshared Key) Record the...8226; WPA RADIUS Settings. Configuring the RADIUS Server Settings You can setup or modify the RADIUS Server settings to the WNDAP350 using a RADIUS Server, the RADIUS Server settings must be used with Legacy 802.1x, and can be configured once per wireless access point.
...profiles. Note: The RADIUS Server Settings apply to configure the WNDAP350. To set up or modify the RADIUS Server Settings: 1. Basic Installation and Configuration v1.1, November 2009 2-29 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual • WPA-PSK (Preshared Key) Record the...8226; WPA RADIUS Settings. Configuring the RADIUS Server Settings You can setup or modify the RADIUS Server settings to the WNDAP350 using a RADIUS Server, the RADIUS Server settings must be used with Legacy 802.1x, and can be configured once per wireless access point.
WNDAP350 User Manual
Page 101
... 1 or LAN Segment 2. 6. Click Apply to -point bridge setup LAN Segment 2 3. Configure the WNDAP350 (AP2) on LAN Segment 1 in Point-to -Point Bridge mode. Configure the WNDAP350 (AP1) on LAN Segment 2 in Point-to -Point Bridge mode. Under the Configuration tab, select Wireless Bridge. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Configuring a WNDAP350 as a Point-to-Point Bridge To configure a point-to operate in the same LAN network...
... 1 or LAN Segment 2. 6. Click Apply to -point bridge setup LAN Segment 2 3. Configure the WNDAP350 (AP2) on LAN Segment 1 in Point-to -Point Bridge mode. Configure the WNDAP350 (AP1) on LAN Segment 2 in Point-to -Point Bridge mode. Under the Configuration tab, select Wireless Bridge. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Configuring a WNDAP350 as a Point-to-Point Bridge To configure a point-to operate in the same LAN network...
WNDAP350 User Manual
Page 102
... the same LAN. Then, select Bridging. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Configuring a Point-to-Multi-Point Wireless Bridge To configure a point-to-multi-point wireless bridge as the LAN devices • Only one access point is , all the others are required in AP2. • Configure the WNDAP350 (AP3) on LAN 3 in Point-to-Point Bridge mode. • All access points must be on LAN Segment 2 in...
... the same LAN. Then, select Bridging. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Configuring a Point-to-Multi-Point Wireless Bridge To configure a point-to-multi-point wireless bridge as the LAN devices • Only one access point is , all the others are required in AP2. • Configure the WNDAP350 (AP3) on LAN 3 in Point-to-Point Bridge mode. • All access points must be on LAN Segment 2 in...
WNDAP350 User Manual
Page 133
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual reset button, using 5-4 rebooting losing previous state 3-17 reception 2-2 redirect HTTP 4-3 redirect URL hotspot settings 4-4 reduced inter frame spacing, support for 1-4 remote console secure shell (SSH) 3-3 Telnet 3-3 request to send threshold 4-5 reset button 3-9 reset to factory defaults 3-9 retransmission 1-4 RIFS wireless settings 4-6 RIFS (Reduced Interframe Space) transmission 4-8 roaming multiple wireless access points 3-16 roaming...
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual reset button, using 5-4 rebooting losing previous state 3-17 reception 2-2 redirect HTTP 4-3 redirect URL hotspot settings 4-4 reduced inter frame spacing, support for 1-4 remote console secure shell (SSH) 3-3 Telnet 3-3 request to send threshold 4-5 reset button 3-9 reset to factory defaults 3-9 retransmission 1-4 RIFS wireless settings 4-6 RIFS (Reduced Interframe Space) transmission 4-8 roaming multiple wireless access points 3-16 roaming...
WNDAP350 User Manual
Page 134
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual default 5-3 support documentation 2-5 syslog server setup 3-11 system information 3-12 fields 3-13 system requirements 1-6 T technical specifications A-3 Telnet ...troubleshooting 5-1 access point, connecting to 5-3 configuring, 5-3 LAN activity 5-2 power connection 5-1 timeout error 5-3 wireless Internet connection 5-2 wireless LAN activity l 5-2 trusted wireless stations list MAC authentication 2-45 U unauthorized access, secure from 2-1 untagged VLAN default settings 2-7 upgradeable firmware, support for 1-3 V VLAN (802.1Q) ...
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual default 5-3 support documentation 2-5 syslog server setup 3-11 system information 3-12 fields 3-13 system requirements 1-6 T technical specifications A-3 Telnet ...troubleshooting 5-1 access point, connecting to 5-3 configuring, 5-3 LAN activity 5-2 power connection 5-1 timeout error 5-3 wireless Internet connection 5-2 wireless LAN activity l 5-2 trusted wireless stations list MAC authentication 2-45 U unauthorized access, secure from 2-1 untagged VLAN default settings 2-7 upgradeable firmware, support for 1-3 V VLAN (802.1Q) ...