Nortel 2350 User Manuals

Nortel

Product codes

, 2361, 2382

User Manual (English)User Guide (English)Quick Setup Guide (English)Reference Guide (English)User Guide (English)

User Guide

Table of Contents

Nortel WLAN-Security Switch 2300 Series Configuration Guide
1
Contents
9
How to get help
37
Introducing the Nortel WLAN 2300 system
39
- Nortel WLAN 2300 system
  39
- Documentation
  40
  - Safety and advisory notices
    41
  - Nortel manuals use the following text and syntax conventions:
    41
Using the command-line interface
43
- CLI conventions
  43
- Command-line editing
  51
- Using CLI help
  52
- Understanding command descriptions
  53
WSS setup methods
55
- Overview
  56
  - Quick starts
    56
  - WLAN Management Software
    56
  - CLI
    57
  - Web View
    57
- How a WSS gets its configuration
  58
- Web Quick Start (2350 and 2360/2361)
  59
- CLI quickstart command
  62
  - Quickstart example
    64
- Remote WSS configuration
  66
- Opening the QuickStart network plan in WLAN Management Software
  67
Configuring Web-based AAA for administrative and local access
69
- Overview of Web-based AAA for administrative and local access
  69
- Before you start
  71
- About Administrative Access
  71
  - Access modes
    71
  - Types of Administrative Access
    72
- First-time configuration via the console
  72
- Configuring accounting for administrative users
  77
- Displaying the Web-based AAA configuration
  78
- Saving the configuration
  79
- Administrative Web-based AAA configuration scenarios
  79
Managing User Passwords
83
- Passwords Overview
  83
- Configuring Passwords
  84
- Displaying Password Information
  87
Configuring and managing ports and VLANs
89
- Configuring and managing ports
  89
- Configuring and managing VLANs
  103
  - Understanding VLANs in Nortel WSS software
    103
    - VLANs, IP subnets, and IP addressing
      104
    - Users and VLANs
      104
    - VLAN names
      104
    - Roaming and VLANs
      104
    - Traffic forwarding
      105
    - 802.1Q tagging
      105
    - Tunnel affinity
      105
  - Configuring a VLAN
    106
    - Creating a VLAN
      106
    - Adding ports to a VLAN
      106
    - Removing an entire VLAN or a VLAN port
      107
  - Changing tunneling affinity
    108
  - Restricting layer 2 forwarding among clients
    108
  - Displaying VLAN information
    109
- Managing the layer 2 forwarding database
  111
- Port and VLAN configuration scenario
  114
Configuring and managing IP interfaces and services
121
- MTU support
  122
- Configuring and managing IP interfaces
  123
- Configuring the system IP address
  126
- Configuring and managing IP routes
  126
  - Displaying IP routes
    127
  - Adding a static route
    128
  - Removing a static route
    129
- Managing the management services
  130
  - Managing SSH
    130
    - Login timeouts
      130
    - Enabling SSH
      130
    - Adding an SSH user
      131
    - Changing the SSH service port number
      131
    - Managing SSH server sessions
      132
  - Managing Telnet
    132
  - Managing HTTPS
    134
    - Enabling HTTPS
      134
    - Displaying HTTPS information
      135
  - Changing the idle timeout for CLI management sessions
    135
- Configuring and managing DNS
  136
- Configuring and managing aliases
  137
  - Adding an alias
    138
  - Removing an alias
    138
  - Displaying aliases
    138
- Configuring and managing time parameters
  139
- Managing the ARP table
  144
  - Displaying ARP table entries
    144
  - Adding an ARP entry
    144
  - Changing the aging timeout
    145
- Pinging another device
  145
- Logging in to a remote device
  146
- Tracing a route
  147
- IP interfaces and services configuration scenario
  148
Configuring SNMP
151
- Overview
  151
- Configuring SNMP
  151
- Displaying SNMP information
  163
Configuring and managing Mobility Domain roaming
165
- About the Mobility Domain feature
  165
- Configuring a Mobility Domain
  166
- Configuring secure WSS to WSS communications
  170
- Monitoring the VLANs and tunnels in a Mobility Domain
  173
- Understanding the sessions of roaming users
  174
- Mobility Domain scenario
  176
Configuring network domains
179
- About the network domain feature
  179
  - Network domain seed affinity
    182
- Configuring a network domain
  183
- Network domain scenario
  191
Configuring RF load balancing for APs
195
- RF load balancing overview
  195
- Configuring RF load balancing
  195
- Displaying RF load balancing information
  197
Configuring APs
199
- AP overview
  199
  - Country of operation
    201
  - Directly connected APs and distributed APs
    201
  - Boot process for distributed APs
    208
  - Service profiles
    220
    - Public and private SSIDs
      224
    - Encryption
      225
  - Radio profiles
    225
    - Auto-RF
      227
    - Default radio profile
      227
    - Radio-specific parameters
      227
- Configuring global AP parameters
  228
- Disabling or reenabling radios
  271
- Displaying AP information
  273
Configuring WLAN mesh services
281
- WLAN mesh services overview
  281
- Configuring WLAN mesh services
  283
- Configuring Wireless Bridging
  288
- Displaying WLAN Mesh Services Information
  289
Configuring user encryption
291
- Configuring WPA
  294
  - WPA cipher suites
    295
  - TKIP countermeasures
    298
  - WPA authentication methods
    299
  - WPA information element
    300
  - Client support
    301
  - Configuring WPA
    303
- Configuring RSN (802.11i)
  307
- Configuring WEP
  309
  - Setting static WEP key values
    311
  - Assigning static WEP keys
    312
- Encryption configuration scenarios
  312
Configuring Auto-RF
321
- Auto-RF overview
  321
  - Initial channel and power assignment
    321
    - How channels are selected
      322
  - Channel and power tuning
    322
    - Power tuning
      322
    - Channel tuning
      322
    - Tuning the transmit data rate
      323
  - Auto-RF parameters
    323
- Changing Auto-RF settings
  325
  - Changing channel tuning settings
    325
  - Changing power tuning settings
    326
- Locking down tuned settings
  327
- Displaying Auto-RF information
  327
  - Displaying Auto-RF settings
    327
  - Displaying RF neighbors
    328
  - Displaying RF attributes
    329
Configuring APs to be AeroScout listeners
331
- Configuring AP radios to listen for AeroScout RFID tags
  331
- Locating an RFID tag
  332
  - Using an AeroScout engine
    333
  - Using WMS
    334
AirDefense integration with the Nortel WLAN 2300 system
335
- About AirDefense integration
  335
- Converting an AP into an AirDefense sensor
  336
Configuring quality of service
343
- About QoS
  343
  - Summary of QoS features
    343
  - End-to-End QoS
    346
    - QoS Mapping
      346
  - QoS mode
    347
    - WMM QoS mode
      348
    - SVP QoS mode
      356
  - U-APSD support
    357
  - Call admission control
    357
  - Broadcast control
    358
  - Static CoS
    358
  - Overriding CoS
    358
- Changing QoS settings
  358
- Displaying QoS information
  361
Configuring and managing spanning tree protocol
367
- Enabling the spanning tree protocol
  368
- Changing standard spanning tree parameters
  369
- Configuring and managing STP fast convergence features
  375
- Displaying spanning tree information
  382
- Spanning tree configuration scenario
  388
Configuring and managing IGMP snooping
391
- Disabling or reenabling IGMP snooping
  391
- Disabling or reenabling proxy reporting
  391
- Enabling the pseudo-querier
  392
- Changing IGMP timers
  392
- Enabling router solicitation
  397
  - Changing the router solicitation interval
    398
- Configuring static multicast ports
  398
  - Adding or removing a static multicast router port
    399
  - Adding or removing a static multicast receiver port
    400
- Displaying multicast information
  400
Configuring and managing security ACLs
407
- About security access control lists
  407
  - Overview of security ACL commands
    408
  - Security ACL filters
    409
  - Order in which ACLs are applied to traffic
    410
    - Traffic direction
      410
    - Selection of user ACLs
      410
- Creating and committing a security ACL
  410
  - Setting a source IP ACL
    411
    - Wildcard masks
      412
    - Class of Service
      412
  - Setting an ICMP ACL
    414
  - Setting TCP and UDP ACLs
    416
    - Setting a TCP ACL
      416
    - Setting a UDP ACL
      416
  - Determining the ACE order
    418
  - Committing a Security ACL
    419
  - Viewing security ACL information
    420
  - Clearing security ACLs
    422
- Mapping security ACLs
  422
  - Mapping user-based security ACLs
    423
  - Mapping security ACLs to ports, VLANs, virtual ports, or distributed APs
    425
    - Displaying ACL maps to ports, VLANs, and virtual ports
      425
    - Clearing a security ACL map
      425
- Modifying a security ACL
  426
- Using ACLs to change CoS
  431
  - Filtering based on DSCP values
    433
    - Using the dscp option
      433
    - Using the precedence and ToS options
      433
- Enabling prioritization for legacy voice over IP
  434
- Restricting client-to-client forwarding among IP-only clients
  441
- Security ACL configuration scenario
  442
Managing keys and certificates
443
- Why use keys and certificates?
  443
  - Wireless security through TLS
    444
  - PEAP-MS-CHAP-V2 security
    445
- About keys and certificates
  445
- Certificates automatically generated by WSS software
  450
- Creating keys and certificates
  451
- Displaying certificate and key information
  458
- Key and certificate configuration scenarios
  459
Configuring AAA for network users
467
- About AAA for network users
  467
  - Authentication
    468
    - Authentication types
      468
    - Authentication algorithm
      469
  - Accounting
    474
  - Summary of AAA features
    475
- AAA tools for network users
  475
- Configuring 802.1X authentication
  482
- Configuring authentication and authorization by MAC address
  490
- Configuring Web portal Web-based AAA
  493
- Configuring last-resort access
  513
  - Configuring last-resort access for wired authentication ports
    516
- Configuring AAA for users of third-party APs
  516
- Assigning authorization attributes
  522
- Overriding or adding attributes locally with a location policy
  537
- Configuring accounting for wireless network users
  542
- Displaying the AAA configuration
  548
- Avoiding AAA problems in configuration order
  549
  - Using the wildcard “Any” as the SSID name in authentication rules
    549
  - Using authentication and accounting rules together
    551
    - Configuration producing an incorrect processing order
      551
    - Configuration for a correct processing order
      551
- Configuring a Mobility Profile
  552
- Network user configuration scenarios
  553
Configuring communication with RADIUS
561
- RADIUS overview
  561
- Before you begin
  563
- Configuring RADIUS servers
  563
- Configuring RADIUS server groups
  567
  - Creating server groups
    568
  - Deleting a server group
    571
- RADIUS and server group configuration scenario
  571
Managing 802.1X on the WSS
573
- Managing 802.1X on wired authentication ports
  573
  - Enabling and disabling 802.1X globally
    574
  - Setting 802.1X port control
    575
- Managing 802.1X encryption keys
  575
- Setting EAP retransmission attempts
  579
- Managing 802.1X client reauthentication
  579
- Managing other timers
  583
- Displaying 802.1X information
  586
  - Viewing 802.1X clients
    587
  - Viewing the 802.1X configuration
    588
  - Viewing 802.1X statistics
    589
Configuring SODA endpoint security for a WSS
591
- About SODA endpoint security
  591
  - SODA endpoint security support on WSSs
    593
  - How SODA functionality works on WSSs
    594
- Configuring SODA functionality
  594
Managing sessions
609
- About the session manager
  609
- Displaying and clearing administrative sessions
  609
- Displaying and clearing network sessions
  613
- Displaying and changing network session timers
  620
  - Disabling keepalive probes
    622
  - Changing or disabling the user idle timeout
    623
Rogue detection and counter measures
625
- About rogues and RF detection
  625
  - Rogue access points and clients
    625
    - Rogue classification
      626
    - Rogue detection lists
      626
  - RF detection scans
    629
    - Dynamic Frequency Selection (DFS)
      629
  - Countermeasures
    629
  - Mobility Domain requirement
    630
- Summary of rogue detection features
  630
- Configuring rogue detection lists
  631
- Enabling countermeasures
  636
  - Using on-demand countermeasures in a Mobility Domain
    637
- Disabling or reenabling Scheduled RF Scanning
  637
- Enabling AP signatures
  637
- Disabling or reenabling logging of rogues
  638
- Enabling rogue and countermeasures notifications
  638
- IDS and DoS alerts
  638
  - Flood attacks
    638
  - DoS attacks
    639
  - Netstumbler and Wellenreiter applications
    639
  - Wireless bridge
    640
  - Ad-Hoc network
    640
  - Weak WEP key used by client
    640
  - Disallowed devices or SSIDs
    640
  - Displaying statistics counters
    640
  - IDS log message examples
    641
- Displaying RF detection information
  643
Managing system files
651
- About system files
  651
  - Displaying software version information
    652
  - Displaying boot information
    653
- Working with files
  653
  - Displaying a list of files
    653
  - Copying a file
    655
  - Using an image file’s MD5 checksum to verify its integrity
    657
  - Deleting a file
    657
  - Creating a subdirectory
    658
  - Removing a subdirectory
    659
- Managing configuration files
  659
- Backing up and restoring the system
  663
  - Managing configuration changes
    664
  - Backup and restore examples
    664
- Upgrading the system image
  665
Appendix A: Troubleshooting a WSS
669
- Fixing common WSS setup problems
  670
- Recovering the system when the enable password is lost
  671
  - 2382, 2380 or 2360/2361
    671
- Configuring and managing the system log
  672
- Running traces
  679
  - Using the trace command
    679
  - Displaying a trace
    680
  - Stopping a trace
    680
  - About trace results
    680
  - Displaying trace results
    681
  - Copying trace results to a server
    681
  - Clearing the trace log
    682
  - List of trace areas
    682
- Using show commands
  682
  - Viewing VLAN interfaces
    682
  - Viewing AAA session statistics
    682
  - Viewing FDB information
    683
  - Viewing ARP information
    683
- Port mirroring
  684
- Remotely monitoring traffic
  685
- Capturing system information and sending it to technical support
  690
  - The show tech-support command
    691
  - Core files
    691
  - Debug messages
    692
  - Sending information to NETS
    693
Appendix A: Enabling and logging onto Web View
695
- System requirements
  695
  - Browser requirements
    695
  - WSS requirements
    695
- Logging onto Web View
  696
Appendix A: Supported RADIUS attributes
697
- Supported standard and extended attributes
  697
- Nortel vendor-specific attributes
  701
Appendix A: Traffic ports used by WSS software
703
Appendix A: DHCP server
705
- How the WSS software DHCP server works
  706
- Configuring the DHCP server
  706
- Displaying DHCP server information
  707
Appendix A: Glossary
709
Index
731
Command Index
751

Size:

6.08 MB
Pages:

758
Language:

English

Quick Setup Guide

Table of Contents

Quick Setup Guide

Size:

725 KB
Pages:

44
Language:

English

Reference Guide

Table of Contents

Reference Guide

Size:

5.35 MB
Pages:

480
Language:

English

User Guide

Table of Contents

Nortel WLAN Management Software 2300 Series User Guide
1
Contents
7
How to get help
13
Introducing the Nortel WLAN 2300 Series System
15
- Nortel WLAN 2300 System
  15
- Documentation
  16
  - Safety and Advisory Notices
    17
  - Text and Syntax Conventions
    17
Getting Started
19
Planning and Managing Your Wireless Network with WMS
35
- Which Services to Provide?
  35
- Network Plan
  36
- RF Coverage Area
  36
  - Auto-RF
    37
  - Auto-RF with Modelling
    37
  - RF Planning
    37
  - Which Planning Method Should I Use?
    38
- Configuration
  39
- Equipment Installation
  46
- Deployment
  47
- Management and Monitoring
  47
  - Network Status
    48
  - RF Monitoring
    48
  - Client Monitoring
    48
  - Fault Management
    49
  - Rogue Detection
    49
  - Verification
    49
- RF Plan Optimization
  51
Configuring Wireless Services
53
- What Are Services?
  53
- Configure Employee Access Services
  54
  - Task Table
    54
  - Step Summary
    56
  - Example: Configure Employee Access
    56
- What’s Next?
  69
- Configure Guest Access Services
  69
  - Task Table
    70
  - Step Summary
    72
  - Optional: Configure Mobility Profiles
    84
- What’s Next?
  85
- Configure Voice over Wireless IP Service
  85
- What’s Next?
  100
Using Auto-RF
101
Using Auto-RF with Modelling
109
- What Is Auto-RF with Modelling?
  109
- Add Site Information
  109
- Insert RF Obstacles
  113
- Create Your RF Coverage Area
  115
  - Create a Wiring Closet
    115
  - Create Your RF Coverage Area
    116
  - Add APs
    124
  - Associate APs to the Coverage Area
    124
- What’s Next?
  127
Using RF Planning
129
- What Is RF Planning?
  129
- Prepare the Floor Drawings
  130
- Define Site Information
  131
  - Import a Floor Plan
    136
  - Set the Scale
    137
  - Clean Layout
    138
- Model RF Obstacles
  140
- Import a Site Survey
  142
- Plan RF Coverage
  142
  - Add Wiring Closets
    143
  - Create Coverage Areas
    144
  - Compute and Place APs
    151
  - Assign Channel Settings
    154
  - Calculate Optimal Power
    155
  - Display Coverage
    156
- Generate a Work Order
  157
- Install the Equipment
  158
- What’s Next?
  159
Managing and Monitoring Your Network
161
- What Is Network Management?
  161
- What Is Network Monitoring?
  161
- Deploy Your Configuration
  162
- Perform Basic Administrative Tasks
  163
  - Configuring WSS Management Services
    163
- Distribute System Images
  164
- Import and Export Switch Configuration Files
  167
- Monitoring Examples
  168
  - Monitor an Individual User
    169
  - Monitor a Group of Users
    179
- What’s Next?
  182
Managing Alarms
183
- What Is Fault Management?
  183
- Set Up the Fault Management System
  183
- Classify and Organize Faults
  185
  - Search Capabilities
    185
- Manage Faults
  186
  - Alarm Summary
    186
  - Top 5 Sources of Alarms
    187
  - Intrusion Detection System (IDS) Alarms
    188
  - Denial of Service (DoS) Alarms
    188
- Store Faults and Retrieve Fault History
  189
- Generate Alarm Reports
  190
  - Alarm Summary Report
    190
  - Alarm History Report
    191
  - Security and Client OUI Reports
    192
- Use the Fault Management System to Locate a Rogue
  192
- What’s Next?
  200
Optimizing a Network Plan
201
Index
213

Size:

3.28 MB
Pages:

218
Language:

English

User Manual

Size:

68.4 KB
Pages:

4
Language:

English