D-Link DWL-3500AP Configuration Manual

D-Link DWL-3500AP Configuration Manual

Unified wired & wireless access system
Hide thumbs Also See for DWL-3500AP:

Advertisement

Unified Wired & Wireless Access System

Configuration Guide

DWS-3000 Series, DWL-3500AP/8500AP
Product Model:
Version 1.5

Advertisement

Table of Contents
loading

Summary of Contents for D-Link DWL-3500AP

  • Page 1: Configuration Guide

    Unified Wired & Wireless Access System Configuration Guide DWS-3000 Series, DWL-3500AP/8500AP Product Model: Version 1.5...
  • Page 2: Table Of Contents

    Table of Contents Scenario 1 - Basic L2 Edge Setup: 1 WS + 2 APs ............. 4 1.1. Configure AP Network Settings ................. 5 1.2. Configure the DHCP Server ................6 1.2.1. Global DHCP Configuration............... 6 1.2.2. Pool Configuration ..................7 1.3.
  • Page 3 Logs & Traps ....................43 Syslog Configuration ..................45 Debug ......................45 Scenario 4 – L3 Edge: 2 Switches + 2 APs .............. 47 WS1 & WS2 LAN Configuration ..............48 4.2.1 DHCP ......................48 4.2.2 Configure default routes on WS1, WS2, and L3 device ......49 4.2.3 Set the MTU Size ..................
  • Page 4: Scenario 1 - Basic L2 Edge Setup: 1 Ws + 2 Aps

    • Configure an ACL to prevent wireless clients from accessing the WS1 management interface. • Configure DHCP on the wireless switch for wireless client address assignment. • Understand some of the D-LINK Unified Access Point features. 10.90.90.90/8 SSID: Guest Network...
  • Page 5: Configure Ap Network Settings

    The table below gives the IP addresses used in this scenario. The following steps will guide you through the configuration of the Wireless Switch and the Access Point. Device Subnet Wireless Switch 10.90.90.90/8 10.90.90.91/8 10.90.90.92/8 Client Address Pool 10.90.91.1 – 10.90.91.254 To begin the Wireless Switch configuration, connect to port 12 (or any other unused port) from a PC that is on the same subnet and launch the web browser using this IP address, 10.90.90.90.
  • Page 6: Configure The Dhcp Server

    1.2. Configure the DHCP Server The wireless switch can function as a DHCP server to assign addresses to wireless (or wired) clients that connect to each AP. To configure the DHCP Server, you must configure global settings and the address pool for the clients. For this scenario, wireless clients will be assigned addresses in the range of 10.90.91.1/8 –...
  • Page 7: Pool Configuration

    1.2.2. Pool Configuration This section describes how to configure the address pool for the wireless clients. 1. Select Pool Configuration in the Navigation tree. 2. Select create and specify the following settings: a. Pool Name – GuestPool b. Type of Binding - Dynamic c.
  • Page 8 • Protocol Keyword: IP • Source IP Address: 10.90.91.1 • Source IP Mask: 0.0.0.255 (This is a wildcard mask) • Destination IP Address: 10.90.90.1 • Destination IP Mask: 0.0.0.255 • Destination L4 Port: http 6. Create a new rule, enter 2 as the Rule ID, Permit as the Action, and True for Match Every, then click Submit.
  • Page 9: Wireless Configuration

    1.4. Wireless Configuration You configure and monitor all wireless settings from the WLAN tab on the navigation panel. Since the deployment is an L2 Edge and there are no subnet boundaries to cross, the switch can use the network management IP address for the wireless functions (Note: the wireless switch component uses an IP address to manage the APs and peer-switches.
  • Page 10: Device Connections

    1.5. Device Connections At this point, all the devices are ready to be connected. After the switch discovers the APs, they will appear on the Failed list because the MAC addresses of the APs are not configured in the Valid AP database (i.e. the switch has not been configured to accept any valid APs). 1.
  • Page 11: Save Configuration

    1.6. Save Configuration To save the switch configuration, select Save Changes from the tool bar.
  • Page 12: Verify The Configuration

    1.7. Verify the Configuration 1. From a wireless client, verify that you can see the Guest Network SSID. 2. Using a wireless client, connect to the Guest Network. 3. Check the IP address that the switch DHCP server assigned. 4. Try pinging from a client on the Guest Network to the switch or AP IP address. The ping should pass.
  • Page 13 The Channel adjustment algorithm may be triggered periodically or manually. To manually adjust the channel plan, use the following steps: 1. Select the WLAN tab from the navigation panel and navigate to Administration Management RF Management. 2. Choose the 802.11 b/g and select the Manual Channel Plan tab and then the Start button to start the process.
  • Page 14: Rogue Ap Detection

    You may also manually change the operational channel from the Administration Management Advanced page. Select the appropriate channel of the AP radio and change it to the desired channel on the next screen. 1.8.3. Rogue AP Detection To check the rogue AP list, select the WLAN tab from the navigation panel and navigate to Monitoring Access Points Rogue/RF Scan Access Points.
  • Page 15: Power Adjustment

    1.8.4. Power Adjustment To check power level, select the WLAN tab from the navigation panel and click Monitoring Access Points Managed Access Points. Select Radio Details tab to check the power level. The Automatic Power Adjustment algorithm works by setting the initial power of the AP to the value specified in the AP profile.
  • Page 16: Load Balancing

    1.8.4.1. Self Healing Cell Recovery When a Managed AP is powered down, the power of its neighboring AP(s) managed by the same switch is immediately increased by 20%. Power Adjustment Mode should be Interval to see an increase in power of neighboring AP. By default, Initial Power is 100%, so decrease power of APs below 80% or less to see 20% increase before powering down one AP.
  • Page 17 To reset the AP configuration, you will need to telnet into the AP CLI and use the “factory-reset” command. As mentioned earlier, you can place the AP into “debug” mode from the switch if the AP is currently managed to gain access to the UI.
  • Page 18: Scenario 2 - L2/L3 Edge: 1 Ws + 1 Ap + 1 Remote Ap

    L3 device. Although the two APs are directly connected to the switch, they are in different subnets. Both the APs are managed by the D-LINK Wireless Switch (WS1). Since the wireless switch supports VLAN routing, L2 paths can be established between the AP switch ports although they are on different IP subnets such that L3 Tunneling is not required.
  • Page 19: Configuring Lan Settings

    192.168.200.x/24 2.1. Configuring LAN Settings All of the features you configure in this section are within the LAN tab on the D-LINK Wireless Switch. In this scenario, the switch is a L3 device with a total of four VLAN routing interfaces. Each connected AP is in a different subnet, so you need to configure two separate VLAN routing interfaces and configure an IP address for each interface.
  • Page 20 1. From the LAN tab on the switch Web interface, click L2 Features VLAN VLAN Configuration. 2. Select Create from VLAN ID and Name pull down menu. 3. Enter the VLAN ID. 4. Enter VLAN Name. On the Slot/Port row for the port to include in the VLAN, select Include from the Participation drop-down menu.
  • Page 21 After you have repeated the steps to configure all four VLANs, use the Monitoring VLAN Summary VLAN Status and VLAN Port Status pages to verify that the VLANs and the ports are configured properly. VLAN Status...
  • Page 22: Configure Vlan Routing

    VLAN Port Status 2.1.2. Configure VLAN Routing To configure the VLAN routing interfaces for AP1, AP2, and the two D-LINK-NET networks, use the following steps. 1. Select the LAN tab from the navigation panel and click L3 Features VLAN Routing Configuration.
  • Page 23 b. Subnet Mask: 255.255.255.0 c. Routing Mode: Enable 6. Click Submit. 7. Repeat the steps for interface 4/2 (VLAN 30), 4/3 (VLAN 100), and 4/4 (VLAN 200). Refer to the following table for IP address information: Interface IP Address Subnet Mask Interface 4/1 192.168.20.254 255.255.255.0...
  • Page 24: Enable Global Routing

    2.1.3. Enable Global Routing You need to enable the routing mode to allow the switch to operate as a L3 device in this scenario. To do this, navigate to the L3 Features Configuration page. Select Enable from the Routing Mode drop-down menu and click Submit. 2.1.4.
  • Page 25: Dhcp Server

    DHCP Server 2.1.6. You need to configure IP address pools for each AP and for the clients that connect to the APs through the D-LINK NET1 and DLINK-NET2 SSIDs. 1. From the LAN menu, click Administration DHCP Server Global Configuration 2.
  • Page 26: Acl Configuration

    11. The screen refreshes with additional fields. Click the Configure button associated with the appropriate fields and enter the following criteria to deny IP traffic from clients on the D-LINK-NET1 network to clients on the D-LINK-NET2 network: • Protocol Keyword: IP •...
  • Page 27 13. The screen refreshes with additional fields. Click the Configure button associated with the appropriate fields and enter the following criteria to deny IP traffic from clients on the D-LINK-NET2 network to clients on the D-LINK-NET1 network: • Protocol Keyword: IP •...
  • Page 28 14. Create Rule 3 to allow all other type of traffic between any source and any destination since as mentioned earlier, there is an implicit “deny all” rule at the end of every ACL. 15. From the Rule drop-down menu, select Create. 16.
  • Page 29: Configuring Wlan Settings

    2.2. Configuring WLAN Settings All of the features you configure in this section are within the WLAN tab on the D-LINK Wireless Switch. Use the following steps to configure the Wireless Switch and the APs. 1. On the Global tab of the Administration Basic Setup page, make sure the switch IP address is the Loopback interface address (192.168.10.254), the country code is...
  • Page 30 5. Select the 802.11b/g radio. 6. Select the check box next to Managed SSID 2 and click Edit. 7. Change the following Network parameters and select Submit: a. SSID – D-LINK-NET1 b. VLAN – 100 c. Security – WEP •...
  • Page 31 SSID tab. 9. Select the check box next to Managed SSID 3 and click Edit. Change the follow ing parameters and select Submit: a. SSID – D-LINK-NET2 b. VLAN – 200 c. Security – WEP •...
  • Page 32: Save Configuration

    8. Try pinging from a client on D-LINK-NET1 to D-LINK-NET2. The ping should fail because of the ACL. 9. Perform a “fast roam” from one AP to the other on one of the D-LINK-NET SSIDs (this can be simulated by pulling power on the AP you are currently associated with)
  • Page 33 and observe that your IP address does not change even though you have now associated with an AP on a different subnet. Fast roams will not function on the Guest Network SSID because the client will be forced to acquire a new IP address.
  • Page 35: Scenario 3 - L3 Overlay: 1 Ws + 2 Ap

    The diagram in this section shows a network configuration with a D-LINK Wireless Switch connected to an L3 Device/Router. One AP is connected to the D-LINK Wireless Switch, and the other is connected to the L3 device. Both APs are managed by the D- LINK Wireless Switch (WS1).
  • Page 36: Configuring Lan Settings

    192.168.250.x/24 Wireless 2.1. Configuring LAN Settings All of the features you configure in this section are within the LAN tab on the D-LINK Wireless Switch. 2.1.1. Configure the VLANs The summary information for the VLAN configuration is as follows (the bold entries are new for...
  • Page 37: Configure Vlan Routing

    VLAN 20 (Interface 4/1) Port 0/1 192.168.20.254 VLAN 30 (Interface 4/2) Port 0/13 192.168.30.254 VLAN 100 (Interface 4/3) D-LINK-NET1 Ports 0/1 and 0/13 192.168.100.254 VLAN 200 (Interface 4/4) D-LINK-NET2 Ports 0/1 and 0/13 192.168.200.254 VLAN 5 (Interface 4/5) Customer-NET Port 0/24 172.17.5.253...
  • Page 38: Configure Static Routing

    11. To create a routing interface for VLAN 250, enter 250 into the VLAN ID field and select Create. This creates a logical routing interface with the slot/port designation of 4/6 for VLAN 250. 12. Navigate to L3 Features Interface Configuration. 13.
  • Page 39: Dhcp Server

    Proper static routes to Wireless Switch (WS1) must be also configured on the “customer” L3 device as well. In a customer environment, you would need to configure the following static routes on the customer’s L3 device. The static routes in bold is required. The static routes that are not bold are optional.
  • Page 40: Configuring Wlan Settings

    3. Enter 1542 as the MTU size in the Maximum Frame Size field. 4. Click Submit to apply your changes to the running configuration. Configuring WLAN Settings All of the features you configure in this section are within the WLAN tab on the D-LINK Wireless Switch.
  • Page 41: Configure The Basic Settings

    Configure the Basic Settings Use the following steps to configure the Wireless Switch and the APs. 1. On the Global tab of the Administration Basic Setup page, make sure the switch IP address is the Loopback interface address (192.168.10.254), the country code is correct, and that the WLAN Switch Operational Status is Enabled.
  • Page 42: Apply The Ap Profile

    AP profile settings in order to update it with the new L3- Tunnel network. The new profile will automatically be applied to AP2 after you connect it to the L3 device and the D-LINK Wireless Switch discovers and validates it. 1. To apply the updated AP profile, access the Administration...
  • Page 43: Verifying The Configuration

    Basic Setup SSID 5. From a wireless client, verify that you can see the SSIDs for the following: • Guest Network • D-LINK NET1 • D-LINK NET2 • L3-Tunnel 6. Connect to the L3-Tunnel SSID. 7. After connecting, check the IP address that the switch DHCP server assigned.
  • Page 44 Peer WS Traps 10. Peer WS Discovered 11. Peer WS Failed 12. Peer WS Unknown Protocol Discovered AP State Traps 13. WS Managed AP Discovered 14. WS Managed AP Failed 15. WS Managed AP Unknown Protocol Discovered AP Failure Traps 16.
  • Page 45: Syslog Configuration

    Syslog Configuration Enable Syslog by traversing to DWS-3026 -> Administration -> System Log Configuration and selecting submit. Then, configure syslog server by providing the server IP Address and selecting the level of Severity Filter and selecting submit. Debug This section outlines information required for engineering debugging. Connect your laptop/PC to WLAN Switch’s serial console or telnet to the IP address of the switch and capture the following information: 1.
  • Page 47: Scenario 4 - L3 Edge: 2 Switches + 2 Aps

    L3 Tunnels: 192.168.2.253 192.168.3.253 192.168.100.253 Network IP: 10.90.90.90 Across L3 Network Loopback: 192.168.10.250 172.17.6.0/24 L3 Device L3 Tunnels: 192.168.2.254 192.168.3.254 192.168.100.254 172.17.5.0/24 192.168.102.x/24 RADIUS Server 192.168.4.0/24 FTP Server Audio/Video Server Seamless Roaming 192.168.5.x/24 192.168.101.x/24 SSIDs: Guest: 192.168.100.x/24 D-LINK-NET1: 192.168.2.x/24 D-LINK-NET2: 192.168.3.x/24 Client...
  • Page 48: Ws1 & Ws2 Lan Configuration

    192.168.101.x/24 AP2 on WS2 102 – AP2 192.168.102.x/24 Clients on Guest 192.168.100.x/24 Wireless Clients on D-LINK-NET1 NA 192.168.2.x/24 Wireless Clients on D-LINK-NET2 NA 192.168.3.x/24 Wireless WS1 & WS2 LAN Configuration The configuration in this section takes place on WS1 and WS2, and all features are under the LAN tab on the navigation panel.
  • Page 49: Configure Default Routes On Ws1, Ws2, And L3 Device

    Configure WLAN Settings Configure the WLAN parameters to support the 3 Tunneled SSID Networks on both WS1 and WS2. Configure the “Guest” SSID to use no security, “D-LINK-NET1” to use WPA2 (see below), and “D-LINK-NET2” to use Static-WEP. WPA2 Configuration To support WPA2, enable “wpa-enterprise”...
  • Page 50: Verifying The Configuration

    • Guest Network • D-LINK NET1 • D-LINK NET2 11. Connect to D-LINK-NET1 from a wireless client to verify that WPA2 authentication is required. 12. After connecting, check the IP address that the switch DHCP server assigned. 13. Start the Roaming Test.
  • Page 51 and associated wireless clients. The WLAN Visualization tool can help you visualize where the APs are in relationship to the building. You can upload one or more custom images to create a background for the graph. Then, you place the WLAN components discovered by the switch on the graph to help provide a realistic representation of your wireless network.
  • Page 52 3. The RF power display in this tool is only for reference, and it doesn’t intend to reflect the real RF status cause that requires the input of materials of office blocks and walls or ceilings and complex computing and simulation accordingly. The Network visualization can be launched by selecting the WLAN tab from the navigation panel and traversing down to Administration ->...
  • Page 53 After above, you should be able to see the following You can start to drag and drop from items from left hand side tab including Switches, Managed APs and Rogue APs. Then you can go to ‘View’ ‘AP Power Display’ and select ‘Show 802.11b/g’, you’ll be able to see the following Then you can move your cursor to any of the object and with right click, you can see more detail information of that object like device/RF information.

This manual is also suitable for:

Dwl-8500apDws-3000 series

Table of Contents