Page 1
WEC8500/WEC8050 (APC) Operation Manual This manual describes how to perform operation activities for the Samsung WEC8500/WEC8050 (APC) system. Document Version 10.1 October 2017...
Page 2
To the extent permitted by law no liability (including liability to any person by reason of negligence) will be accepted by SAMSUNG Electronics America, its subsidiaries or employees for any direct or indirect loss or damage caused by omissions from or inaccuracies in this document.
APC Application Configuration and Service Scenario ..............11 Basic Configuration ........................11 Configuration of Multiple APC for Redundancy ................. 12 Clustering Configuration using Multiple APC (WEC8500/WEC8050) ......... 14 Configuration of Multiple Sites Consisting of Headquarter and Branches ........ 16 NAT Configuration between AP and APC ..................18...
Preface This manual describes the overview, management, and setup of WEC8500/WEC8050 that is a Samsung Wireless Enterprise (W-EP) Access Point Controller (APC). This manual is written for WEC8500 version 4.7.7 and WEC8050 version 4.7.7. Relevance This manual applies to the following products/software.
Open Source Announcement Open source list used in the APC and its license (WEC8500/WEC8050) notice. Abbreviation Open Source Announcement Open source list used in the Samsung W-EP wireless (WEA300/WEA400 Series) LAN AP and its license notice. Related Documentation • WEC8500_System Description •...
Business users should contact their supplier and check the terms and conditions of the purchase contract. This product and its electronic accessories should not be mixed with other commercial wastes for disposal. For information on Samsung’s environmental commitments and product specific regulatory obligations e.g. REACH visit: samsung.com/uk/aboutsamsung/samsungelectronics/corporatecitizenship/data_corner.ht This marking on the product, accessories or literature indicates that the product and its electronic accessories (e.g.
Wi-Fi environment. There are two types depending on the AP capacity; WEC8500 and WEC8050. It comprehensively manages all the APs and provides services in a wireless LAN environment. Because AP and APC are connected in tunnelling, all the user traffics are exchanged and processed.
W-EP wireless LAN Access Point (AP), W-EP AP Controller (APC), and Wireless Enterprise WLAN Manager (WEM). The Samsung APC and W-EP wireless LAN AP are core devices that provide various services such as user authentication, wireless management, voice and data service, and so on.
Network Configuration The network configuration of Samsung W-EP solution that includes APC is shown below. Figure 2. W-EP Network Configuration IP-PBX WEC8050/WEC8 Router Internet … Ethernet Switch WIPS … W-EP FMC client IP-PBX As an enterprise call manager, it is a switch required to provide the Fixed Mobile Convergence (FMC) function to a wireless terminal (optional).
Terminal that provides the 802.11a/b/g/n interface such as smart phone, tablet PC, or notebook computer, and so on. In an Android smart phone, an enterprise Voice over IP (VoIP) application equipped with the Samsung voice engine is called a FMC client (The FMC client is an option).
APC Configuration and Functions WEC8500 Configuration and Functions The Configuration and the purpose of each item of WEC8500 are as follows: Figure 3. WEC8500 Interface-Front/Back Console port USB port System Management 1G Optic port 10G Optic port port Ground hole...
Power module 2 is not installed. Console Port (RS232C) A console port is used to check the operational status of WEC8500 or for input through the CLI. Its basic requirements are as follows: • Baud rate: 115200 bps •...
• Blinking for data exchange 1G 1~1G 8 1 GbE Optic module connector USB Port (Host 2.0) The WEC8500 provides a USB host port that supports the upgrade of WEC8500 operation software. A typical USB memory stick is supported. WEC8500/WEC8050 (APC) Operation Manual v10.1...
VoIP in a wireless LAN. With this, the wire/wireless integrated voice service can be provided. An example of service configuration diagram using the W-EP wireless LAN system is shown in the below figure. The configuration diagram is based on Samsung APC (WEC8500). Figure 11.
WEC8500/WEC8050s. This allows inter APC handover. The WEC8500s configured in a cluster provides a service just like a single WEC8500 through periodic information exchange. Inter handover The inter APC handover is a handover between APCs.
W-EP W-EP Configuration of Centralized Clustering Service In the centralized cluster configuration, all the WEC8500/WEC8050s in a site are installed in the center. This is suitable when all the networks in a site are configured around the backbone. This option is suitable for a site where several buildings are close to each other or a large building where a seamless handover service is required using one or more WEC8500/WEC8050s.
New password must be more than 8 characters and contain at least one alphabet/numeric/special letters. The default ID of APC is set to ‘samsung’ that has an administrator privilege. Managing Operator Account An operator who has an administrator privilege (level 1) can create or delete a new operator account.
When connecting to the IP address of APC Ethernet port in a web browser, the below login window is displayed. Log in using a default connection account ‘samsung’. After the first login, you go through the course of changing the password. If you have changed the password by connecting to the CLI, you don’t have to go through the course...
Physical interface of 4 ports except WEC8050 console port Port Management The WEC8500 Management port is used to manage the WEC8500. It does not support VLAN and its interface name is ‘mgmt0’. The 8 ports at the right side of Management port are 10/100/1000 BASE T-ports and their names GE1-8.
Interface Configuration The WEC8500 interface consists of the following physical interface and virtual interface: • Physical interface of 11 ports except console port • 1024 virtual interfaces using VLAN There are two types of WEC8050 interface as shown below; physical interface and virtual interface: •...
1: Displays static VLAN information. [Typical configuration procedure] The typical configuration procedure of VLAN is as follows: WEC8500# configure terminal WEC8500/configure# bridge 1 protocol mstp WEC8500/configure # vlan database WEC8500/configure/vlan#vlan {2-4094} bridge 1 WEC8500/configure/vlan# exit WEC8500/configure# interface vlan1.{2-4094} Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration>...
The procedure for IP address configuration is given below: Go to configure interface configuration mode of CLI. WEC8500# configure terminal WEC8500/configure# interface ge2 Set up an IP address. WEC8500/configure/interface ge2# ip address 100.100.100.1/24 Enable the interface. WEC8500/configure/interface ge2# no shutdown Static Routing Configuration Configuration using CLI Go to the configure mode of the CLI.
WEC8500# configure terminal WEC8500/configure# interface ge2 Configure the PIM sparse mode to an interface. WEC8500/configure/interface ge2# ip pim sparse-mode Check a configured PIM using the ‘show running-config network’ command. To check the multicast-routing table, use the ‘show ip mroute’ command.
Page 82
Use reference bandwidth method to assign OSPF cost WEC8500/configure/router/ospf 2# auto-cost reference-bandwidth ? 1 - 4294967 The reference bandwidth in terms of Mbits per second WEC8500/configure/router/ospf 2# auto-cost reference-bandwidth 200 ? <cr> WEC8500/configure/router/ospf 2# auto-cost reference-bandwidth 200 Parameter Description reference-bandwidth Enter a value from 1-4294967.
Page 83
Enabled when the CLI is entered. COMPATIBLE RFC configuration Enter the compatible rfc1583. WEC8500/configure/router/ospf 2# compatible ? rfc1583 Compatible with RFC 1583 WEC8500/configure/router/ospf 2# compatible rfc1583 ? <cr> WEC8500/configure/router/ospf 2# compatible rfc1583 Parameter Description compatible rfc1583 Enabled when the CLI is entered.
Page 84
0 - 2147483647 Maximum Delay between receiving a change to SPF calculation in milliseconds WEC8500/configure/router/ospf 2# timers spf exp 3 100 ? <cr> WEC8500/configure/router/ospf 2# timers spf exp 3 100 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>...
Page 86
Configure the OSPF metric-type (1/2) value. WEC8500/configure/router/ospf 2# default-information originate metric-type ? Set OSPF External Type 1 metrics Set OSPF External Type 2 metrics WEC8500/configure/router/ospf 2# default-information originate metric-type 1 ? <cr> Configuration of default-information ROUTE MAP Enter the name of pointer to route-map entries.
Page 87
Enter the OSPF INTER-AREA distance value. WEC8500/configure/router/ospf 2# distance ospf inter-area ? 1 - 255 <1-255> Distance for external/inter-area/intra-area routes WEC8500/configure/router/ospf 2# distance ospf inter-area 50 ? <cr> WEC8500/configure/router/ospf 2# distance ospf inter-area 50 WEC8500/configure/router/ospf 2# Configuration of INTRA-AREA distance ospf Enter the OSPF INTRA-AREA distance value.
Page 88
Maximum number of LSAs WEC8500/configure/router/ospf 2# overflow database external 3 ? 0 - 65535 Time to recover (0 not recover) WEC8500/configure/router/ospf 2# overflow database external 3 10 ? <cr> WEC8500/configure/router/ospf 2# overflow database external 3 10 Configuration of maximum number of LSAs Enter the maximum number of LSAs and hard limit value.
Page 89
WEC8500/configure/router/ospf 2# overflow database 100 hard ? <cr> WEC8500/configure/router/ospf 2# overflow database 100 hard Enter the maximum number of LSAs and soft limit value. WEC8500/configure/router/ospf 2# overflow ? database Database WEC8500/configure/router/ospf 2# overflow database ? external External link states 0 - 4294967294...
Page 90
Set the OSPF area ID WEC8500/configure/router/ospf 2# network 100.100.100.1 255.255.255.0 ? area Set the OSPF area ID WEC8500/configure/router/ospf 2# network 100.100.100.1 255.255.255.0 area ? 0 - 4294967295 OSPF area ID as a decimal value A.B.C.D OSPF area ID in IP address format WEC8500/configure/router/ospf 2# network 100.100.100.1 255.255.255.0 area 3...
Page 91
WEC8500/configure/router/ospf 2# network 100.100.100.1 255.255.255.0 area 3 Parameter Description NETWORK Network number OSPF network prefix ADDRESS NETMASK OSPF wild card bits (network mask) AREA ID OSPF area ID as a decimal value/ OSPF area ID in IP address format Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration>...
Page 92
Route map reference Set tag for routes redistributed into OSPF <cr> WEC8500/configure/router/ospf 2# redistribute connected metric ? 1 - 16777214 OSPF metric WEC8500/configure/router/ospf 2# redistribute connected metric 3 ? <cr> WEC8500/configure/router/ospf 2# redistribute connected metric 3 Parameter Description metric Enter a value from 1-16777214.
Page 93
Description metric-type Select 1 or 2. Route-map configuration WEC8500/configure/router/ospf 2# redistribute connected route-map ? <WORD> Pointer to route-map entries WEC8500/configure/router/ospf 2# redistribute connected route-map a ? <cr> WEC8500/configure/router/ospf 2# redistribute connected route-map a Parameter Description route-map entries Enter <WORD>. Tag configuration...
Page 94
Stub configuration Configuration using CLI WEC8500/configure/router/ospf 2# area 1 stub ? no-summary Do not inject inter-area routes into stub <cr> WEC8500/configure/router/ospf 2# area 1 stub no-summary ? <cr> WEC8500/configure/router/ospf 2# area 1 stub no-summary Parameter Description no-summary Select Stub or No Summary.
Page 95
Do not send summary LSA into NSSA translator-role NSSA-ABR Translator role <cr> Metric configuration of NSSA default-information-originate WEC8500/configure/router/ospf 1# area 2 nssa default-information-originate metric ? 0 - 16777214 OSPF metric WEC8500/configure/router/ospf 1# area 2 nssa default-information-originate metric 3 WEC8500/configure/router/ospf 1#...
Page 96
WEC8500/configure/router/ospf 1# area 2 nssa default-information-originate metric-type ? 1 - 2 OSPF Link State type WEC8500/configure/router/ospf 1# area 2 nssa default-information-originate metric-type 2 WEC8500/configure/router/ospf 1# Parameter Description OSPF metric-type Select 1 or 2. Configuring no-redistribution of NSSA default-information-originate WEC8500/configure/router/ospf 1# area 2 nssa default-information-originate ?
Page 97
WEC8500/configure/router/ospf 1# area 2 nssa default-information-originate translator- role candidate ? no-redistribution No redistribution into this NSSA area no-summary Do not send summary LSA into NSSA <cr> WEC8500/configure/router/ospf 1# area 2 nssa default-information-originate translator- role never ? no-redistribution No redistribution into this NSSA area...
Page 98
The detail items include authentication, authentication-key, dead-interval, hello-interval, message-digest-key, retransmit-interval, or transmit-delay, and so on. Authentication configuration Operator can configure authentication and message-digest. WEC8500/configure/router/ospf 2# area 2 virtual-link 10.10.10.1 authentication ? message-digest Use message-digest authentication <cr> WEC8500/configure/router/ospf 2# area 2 virtual-link 10.10.10.1 authentication message- digest ? <cr>...
Page 99
When you enter an authentication key, the message-digest-key configuration is completed. WEC8500/configure/router/ospf 2# area 2 virtual-link 10.10.10.1 message-digest-key ? 1 - 255 Key ID WEC8500/configure/router/ospf 2# area 2 virtual-link 10.10.10.1 message-digest-key 2 ? Use MD5 algorithm WEC8500/configure/router/ospf 2# area 2 virtual-link 10.10.10.1 message-digest-key 2 md5 ? <WORD>...
Page 100
WEC8500/configure/router/ospf 2# area 2 virtual-link 10.10.10.1 retransmit-interval ? 1 - 65535 Seconds (default: 5) WEC8500/configure/router/ospf 2# area 2 virtual-link 10.10.10.1 retransmit-interval Transmit-delay configuration The default transmit-delay is 1 second. In addition, operator can change it to a value between 1 second and 65535 seconds.
Page 102
To configure the Range detail items, start detail configuration after entering an Area range prefix value. WEC8500/configure/router/ospf 2# area 2 range ? A.B.C.D/M Area range prefix WEC8500/configure/router/ospf 2# area 2 range 10.10.10.1/16 ? advertise Advertise this range (default) not-advertise DoNotAdvertise this range <cr>...
Page 103
WEC8500/configure/router/ospf 2# area 2 authentication ? message-digest Use message-digest authentication <cr> WEC8500/configure/router/ospf 2# area 2 authentication message-digest ? <cr> WEC8500/configure/router/ospf 2# area 2 authentication message-digest Default-cost configuration Configure a value between 0 and 1677215 as a default-cost. However, operator can configure the default-cost value in AREA ID whether a stub or NSSA is configured.
Page 104
A tag is a user-defined 32-bit tag value between 0 and 4294967295. A tag also has a default value and it is 0. WEC8500/configure/router/ospf 2# summary-address 11.1.1.1/16 WEC8500/configure/router/ospf 2# summary-address 11.1.1.1/16 tag ? 0 - 4294967295 32-bit tag value WEC8500/configure/router/ospf 2# summary-address 11.1.1.1/16 tag 3 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration>...
Page 105
Unlike CLI, there is no no-advertise. A user can change the default Enable to Disable. Passive Interface Configuration Configuration using CLI WEC8500/configure/router/ospf 2# passive-interface ? <WORD> Interface's name WEC8500/configure/router/ospf 2# passive-interface ge2 ? A.B.C.D Address of interface <cr> Parameter Description Interface Name Enter the name of an interface to use directly.
Page 106
Go to configure interface configuration mode of CLI. WEC8500# configure terminal WEC8500/configure# WEC8500/configure# interface ge2 The items for detail configuration are as follows: WEC8500/configure/interface ge2# ip ospf ? address Address of interface authentication Enable authentication authentication-key...
Page 107
WEC8500/configure/interface ge2# ip ospf disable ? All functionality WEC8500/configure/interface ge2# ip ospf disable all ? <cr> WEC8500/configure/interface ge2# ip ospf disable all MTU configuration The default does not use Maximum Transmission Unit (MTU) configuration. The range of MTU user configuration is 576-65535.
Page 108
WEC8500/configure/interface ge2# ip ospf database-filter all ? Outgoing LSA WEC8500/configure/interface ge2# ip ospf database-filter all out ? <cr> WEC8500/configure/interface ge2# ip ospf database-filter all out Dead-interval configuration The default value of dead-interval is 4 times of hello-interval. Because the default hello-interval is configured to 10 sec., the dead-interval will be 40 seconds if the hello-interval is not configured.
Page 109
WEC8500/configure/interface ge2# ip ospf mtu-ignore ? <cr> WEC8500/configure/interface ge2# ip ospf mtu-ignore WEC8500/configure/interface ge2# PRIORITY configuration The default OSPF Priority value is 1. A user can configure the priority between 1 and 255. WEC8500/configure/interface ge2# ip ospf priority ? 0 - 255...
Page 111
ID and interface name to go to the VRRP configuration mode. WEC8500# configure terminal WEC8500/configure# router WEC8500/configure# router vrrp WEC8500/configure# router vrrp 1 vlan1.10 WEC8500/configure/router/vrrp# The following commands are provided: [advertisement-interval] This command configures the advertisement interval of VRRP in second. A user can configure the interval from 1 to 10.
PIM Configuration As a multicast layer3 transmission protocol, the PIM has two modes, that is Dense mode and Sparse mode. The WEC8500 supports only PIM Sparse mode and the PIM Sparse mode can be configured for each interface. Configuration using CLI Go to configure of CLI ...
Configuring the IGMP Snooping of a VLAN interface: WEC8500# configure terminal WEC8500/configure# interface vlan1.10 WEC8500/configure/interface vlan1.10# ip igmp snooping In addition, a specific function of the IGMP Snooping functions of a VLAN interface can be enabled or disabled as shown in the below command: [ip igmp snooping fast-leave] This command enables or disables the Fast-Leave function.
WEC8500/configure# [no] ipv6 station enable Enable or disable the function of checking if the address of an IPv6 station is valid in a WLAN each time the station is connected to the WLAN.
AP Profile to which the redundancy function will be applied. After configuring the DISCOVERY TYPE of AP to ‘APC Referal’, select the PRIMARY CONTROLLER NAME, SECONDARY CONTROLLER NAME, and TERTIARY CONTROLLER NAME. For the WEC8500 model, the TERTIARY CONTROLLER NAME is not shown in the menu. Figure 96.
Page 172
WEC8500/configure/ap-group default/airmove# target-ap ? keep-ap-config Keep ap config WEC8500/configure/ap-group default/airmove# end Use the ‘show airmove group [ap_group_name]’ command to check the AP group information. WEC8500# show airmove group default Airmove Group Configurations ---------------------------- Airmove State Disable Target AP Keep Ap Config...
WEC8500/configure/ap-group default/sta-ssl# target-ap ? keep-ap-config Keep ap config WEC8500/configure/ap-group default/sta-ssl# end To check the AP group information, use the ‘show stats-report conf [ap_group_name]’ command. WEC8500# show sta-ssl group default SSL Group Configurations ---------------------------- Sta SSL State Disable Target AP Keep Ap Config...
To configure AP information, execute the command as follows: Go to configure AP configuration mode of CLI. WEC8500# configure terminal WEC8500/configure# ap [ap profile name] WEC8500/configure/ap ap_1# If there exists the same AP when entering [ap profile name], you are guided to the mode where operator can configure the AP.
APC is first installed, a default account is provided (id: root, password: samsung). Up to three AP CLI accounts can be added, and at least one account must be configured. Therefore, if there is only one remaining account, it cannot be deleted.
WEC8500/configure# ap [ap profile name] WEC8500/configure/ap ap_1# tech-support WEC8500/configure/ap ap_1/tech-support# Request the coredump file of the AP. WEC8500/configure/ap ap_1/tech-support# get-coredump (system / radio-coredump) Request the crashfile of the AP. WEC8500/configure/ap ap_1/tech-support# get-crash-file (system / radio-coredump) Request the log file of the AP.
The function of the AP connection diagnostics checks ping status of outdoor APs and displays the results on the operator’s monitor. This function is applied connected with 3rd party outdoor AP. Samsung outdoor AP is managed identically with general AP.
Page 209
APs. [transfer-protocol] This command selects a transmission protocol that is used to transmit the package file of an AP from the WEC8500 to the AP. • Transfer-protocol [AP TRANSFER MODE] WEC8500/WEC8050 (APC) Operation Manual v10.1...
Page 227
Go to AP configuration mode to change to a Root AP. WEC8500/configure# ap ap_1 Configure it to a Root AP. WEC8500/ configure/ap ap_1# profile ap-mode rootAp Restart the configured AP. [Changing to Repeater AP] The procedure of changing a W-EP AP to a Repeater AP is as follows: Go to the configure mode of the CLI.
WEC8500/configure# ap ap_2 Configure it to a Repeat AP. WEC8500/configure/ap ap_2# profile ap-mode repeaterAp Restart the configured AP. Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller> <General> menu in the sub-menus. To change authentication mode, configure SECURITY in Repeater Service of the windows, select mode, and click the <Apply>...
Page 229
MSC rate (Range: 0~23) Configure the 802.11ac Modulation and Coding Scheme (MCS) rate. Only 5G bandwidth for 802.11ac MCS is configurable. WEC8500/configure/wlan 1/80211a# mcs-11ac num-ss 2/3 enter the maximum MCS(7~9) for 1 spatial stream(s): 7 the maximum MCS : 7...
Page 231
MSC rate (range: 0-31) Configure the 802.11ac MCS (Modulation and Coding Scheme) rate. 802.11ac MCS can configure only 5G band. WEC8500/configure/wlan 1/80211a# mcs-11ac num-ss 2~4 enter the maximum MCS(7~9) for 1 spatial stream(s): 7 the maximum MCS : 7 enter the maximum MCS(7~9) for 2 spatial stream(s): 7...
WEC8500# show wlan detail 1 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <WLANs> menu in the sub-menus. In the WLANs Screen, select WLAN ID to be modified and move to <802.11a/n/ac> tab or <802.11b/g/n> tab as per band.
Security and Authentication The Samsung W-EP AP/APC supports the security and authentication function defined in the IEEE 802.11-based wireless LAN security standard and its main mechanism is as follows: • Wired Equivalent Privacy (WEP) • Wi-Fi Protected Access Version 1 (WPA1), Wi-Fi Protected Access Version 2 (WPA2) •...
Page 241
• ccmp: AES-CCMP type Configure the key management algorithm to PSK. WEC8500/configure/wlan 1/security# keymgmt psk Disable the 802.1x key management algorithm. WEC8500/configure/wlan 1/security# no keymgmt ieee8021x Disable the 802.1x authentication. WEC8500/configure/wlan 1/security# no ieee8021x After applying the changed configuration, exit the security configuration mode.
Page 245
Parameter Description Version 2. • ccmp: AES-CCMP type Disable the PSK key management algorithm. WEC8500/configure/wlan 1/security# no keymgmt psk Configure the key management algorithm to 802.1x. WEC8500/configure/wlan 1/security# keymgmt ieee8021x Enable the 802.1x authentication. WEC8500/configure/wlan 1/security# ieee8021x After enabling the RADIUS server function for authentication, specify the index of authentication RADIUS server.
Page 248
Enable the WEP. WEC8500/configure/wlan 1/security# wep Configure the WEP Shared Key mode. WEC8500/configure/wlan 1/security# wep shared Use the following command to configure the cryptographic key of WEP: WEC8500/configure/wlan 1/security# wep encryption [KEY_TYPE] [KEY_STRING] [KEY_INDEX] [KEY_LENGTH] Parameter Description KEY_TYPE WEP key Input format of WEP cryptographic key (ascii/hex) •...
Page 250
• 104 After enabling the RADIUS server function for authentication, specify the index of authentication RADIUS server. The RADIUS server information must be configured in advance. WEC8500/configure/wlan 1/security# radius-server auth-servers [RADIUS_SERVER_ID_LIST] Parameter Description RADIUS_SERVER_ID_LIST RADIUS server ID list (Up to 3 IDs can be configured.) After enabling the RADIUS server function for accounting, specify the index of account RADIUS server.
Page 253
To configure the DHCP Pool related function, execute the command as follows to go to the DHCP pool mode: WEC8500# configure terminal WEC8500/configure # [ip/ipv6] dhcp pool test WEC8500/configure/[ip/ipv6]/dhcp/pool test# [Configuring IP address] Before configuring a DHCP pool, you should configure a network first. If the network is not configured, you cannot execute other commands.
Page 255
• domain-name [DOMAIN] Parameter Description DOMAIN Domain name to configure (For example, samsung APC.co.kr) [Configuring Fixed IP Address to MAC Address] This command configures a fixed IP address to a specific MAC address or deletes the configuration. The ‘range’ of IP address to configure cannot be overlapped with the IP range and maximum 255 IP addresses can be configured.
Deletes configured options. A usage example is given below. WEC8500/configure/ip/dhcp/pool test# user-option 3 string “hi, there” active WEC8500/configure/ip/dhcp/pool test# user-option 200 octet 33:4A:5C:6F:DD passive WEC8500/configure/ip/dhcp/pool test# user-option 201 int -3000 WEC8500/configure/ip/dhcp/pool test# user-option 202 uint16 300 WEC8500/configure/ip/dhcp/pool test# user-option 203 ipaddress 111.22.22.33 [Retrieving Pool Information] To check the entire information of a DHCP pool, execute the ‘show ip dhcp pool’...
The relay and proxy are operating in the switching mode. If a proxy is not used, it is operating in the relay mode. WEC8500/configure # no ip dhcp-proxy enable To check the configured DHCP information, use the ‘show ip dhcp-proxy’...
WEC8500/configure #ipv6 dhcp-relay default-dhcpv6-server primary [IPV6_ADDRESS1] secondary [IPV6_ADDRESS2] WEC8500/configure #ipv6 dchp-relay timeout [TIME] Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <DHCP> <Proxy/Relay> menu in the sub-menus. You can configure the Proxy mode of DHCP to relay/proxy. Change the radio box for configuration in the DHCP PROXY MODE of Global Parameter item.
WEC8500/configure/80211a/11ac-support# mcs num-ss [SPATIAL STREAM] global Parameter Description SPATIAL STREAM Number of spatial streams (range: 2~3) AP_ID ID of the AP (range: 1-500) To check the configured 11ac-support information, use the ‘show 80211a radio-config ap [AP_ID]’ command. Configuration using Web UI In the menu bar of <WEC Main Window>, select <Configuration>...
AirMove handover is performed by the collaboration between wireless terminals compatible with the APC. Therefore, the packet loss or handover time is optimized. Some Samsung smartphones such as Galaxy S2 or S3, and more to provide the AirMove function.
Execute the following command to change the Tx Power range which is automatically set by DPC. The default minimum is 3 and the default maximum is 30 for both 80211a and 80211b. WEC8500/configure/rrm/80211a/dpc# txPower min [value] max [value] Check the settings using the ‘show rrm config-summary’ command. Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration>...
Page 315
4, end time 5. If both start time and end time are set to the same time, Anchor Run function is disabled. WEC8500/configure/rrm/80211a/dcs# anchor-time start [value] end [value] Execute the following command to change the channels that is automatically set by the DCS.
WEC8500/configure/rrm/80211a/dcs# aware-option station [station count] WEC8500/configure/rrm/80211a/dcs# aware-option traffic Check the settings using the ‘show rrm config-summary’ command. Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Radio> <802.11a/n/ac> or <802.11b/g/n> <RRM> menu in the sub-menus.
APC designates a standby group (energy saving group), the others are recognized as an active group. Up to 20 groups can be designated (Same as WEC8500/WEC8050). Energy Saving Auto Classification is not a method under which the operator configures a standby group but a method under which the system automatically classifies an energy saving group by using the analysis of each AP.
Description NUM (range: 5-3600) default: 10 To check the configuration information, execute the following command: o show locationtrack config WEC8500/configure/locationtrack # show locationtrack config Location tracking enable...: Enabled Algorithm type.....: 4 Expiry date of history files..: 0 Scan Result Type....: 0 Number of ap list for report..: 0...
[Cluster Setting] To use the clustering function, you must configure each APC according to the following procedure. Maximum 12 WEC8500 can be grouped in a cluster. Maximum 2 WEC8050 can be grouped in a cluster: Go to the configure mode of the CLI.
Configuration using CLI Execute the following command to check voice related fault analysis statistics: [Checking Voice Related Wireless Information] Check the connection status of a voice wireless terminal. WEC8500# show voice station summary MAC Address IP Address Tel-no WLAN Proto...
Page 342
CallConnect 78:47:1D:C2:18:11 F4:D9:FB:24:C8:D1 1 caller(9907) callee(9950) 2013-05-12 21:21:47 Check the voice related statistics. WEC8500# show voice statistics radio RADIO (5G) Voice Statistis ------ ------ ------- ------ ----- --- ------ ------ --- ------ ------ Type Total Success Failed Active UpstreamTime...
Page 343
0 0.0 1 Hour 0 0.0 0 0.0 1 Day 0 0.0 0 0.0 WEC8500# show voice statistics wlan 1 WLAN (A_toanyone_1) Voice Statistis ------ ------ ------- ------ ----- --- ------ ------ --- ------ ------ Type Total Success Failed Active UpstreamTime...
Execute the following command to check the voice related quality analysis (Voice Quality Monitoring) information: Operator can check the voice quality analysis information of a wireless terminal that has an active call. WEC8500# show voice vqm current-stats brief ======================================================== [CONN-740 Start Time=2013/7/19.14:47:27, Duration=47 sec(s) Call-ID[f03c77b50564418855587192e12b889d <-> ca371fce-6e10-401a-9a4e- dd53678804c6@ug1.scm.com] Session id :0...
Page 348
WEC8500# show voice vqm history-stats brief ======================================================== [CONN-1 Start Time=2013/7/19.14:47:27, Duration=75 sec(s) Station Mac [78:47:1d:c5:4c:85:fc:a1:3e:47:59:e7:] startBssid [f4:d9:fb:23:66:10f4:d9:fb:23:66:10] endBssid [f4:d9:fb:23:66:10f4:d9:fb:23:66:10] ssid [Ajay_2_2_4GAjay_2_2_4G] Direction [12] wlanId [22] startApId [22] endApId [22] Session id :0 SRC [I/F=ge4 Call-ID=f03c77b50564418855587192e12b889d Phone-No=9960, IP=20.20.20.30:22458] DST [I/F=ge4 Call-ID=ca371fce-6e10-401a-9a4e-dd53678804c6@ug1.scm.com Phone-No=9910, IP=20.20.20.25:25407]...
Page 349
Upload Ok Count = Upload Fail Count = 0 Requested Count = 1141 WEC8500# Operator can check the alarm information that occurs during call. WEC8500# show voice vqm alarms brief ======================================================== VQM ActiveRfactor/ActivePktLoss/ActivePktDly/ActiveMos = 1/1/1/1 VQM QualityThresh/LossThresh/DelayThresh/MOSThresh = 50/50/195/35 ALARMS REPORTED :...
Whether to configure the Band Steering function • enable: Setting • disable: Release (by default) WEC8500/configure/wlan 1# band-steering enable WLAN (1) band steering is On (5-GHz preferred) WEC8500/configure/wlan 1# no band-steering enable WLAN (1) band steering is Off Select a steering band. o band-steering [VALUE] Parameter...
Page 354
WEC8500/configure/wlan 1# band-steering add-station 00:00:00:00:00:01 WLAN(1): add station(00:00:00:00:00:01), prefer a band(5-GHz) are set Delete an entry from the dual band station database. o band-steering delete-station [MAC] Parameter Description Station MAC Address WEC8500/configure/wlan 1# band-steering delete-station 00:00:00:00:00:01 Deleted... Delete all entries from the dual band station database.
[USERNAME]: Deletes a user Parameter Description USERNAME User ID DESCRIPTION Adds user information WEC8500/configure/open-api# account test description "test account" Password [8~25] : ********* Confirm Password : ********* User(test) was created WEC8500/configure/open-api# no account test User(test) was deleted.
Page 368
WEC8500/configure/security/radius 1# serverIp [IPV6_ADDRESS] Parameter Description IPV6_ADDRESS The IP version 6 address of a RADIUS server Configure the key of a RADIUS server. WEC8500/configure/security/radius 1# secret [KEY_TYPE] [KEY_STRING] Parameter Description KEY_TYPE RADIUS server key input format • ASCII: ASCII character string •...
Page 373
Edit Users for Internal Authentication To use the internal RADIUS server, operator can add, delete, or edit a user (WEC8500: maximum 2048 users, WEC8050: maximum 512 users). Configuration using CLI To configure a local network user related function, enter into the ‘radiuscm’ of configure mode by executing the following command.
Page 401
Redirect URL if after auth type is redirect The configuration can be checked using the ‘show wlan security detail’ command. WEC8500# show wlan security detail 1 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <WLANs>...
The configuration can be checked using the ‘show wlan security detail’ command. WEC8500# show wlan security detail 1 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <WLANs> menu in the sub-menus. In the WLANs screen, select WLAN ID, move to WEC8500/WEC8050 (APC) Operation Manual v10.1...
To check the configuration, use the ‘show wlan security detail’ command. WEC8500# show wlan security detail 1 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <WLANs>...
Go to the configure mode of the CLI. WEC8500# configure terminal Create an access-list. WEC8500/configure# access-list fw fw4 deny tcp any any eq 23 Configure a firewall to the interface using an access-list. WEC8500/configure# interface vlan1.10 WEC8500/configure/interface vlan1.10# ip access-group fw forward fw4 WEC8500/configure/interface vlan1.10# exit...
WEC8500/configure/interface vlan1.30# ip nat inside WEC8500/configure/interface vlan1.30# exit Add the NAT rule by using access-list and pool. WEC8500/configure# ip nat outside source list fw1 pool pool1 [SNAT Configuration using Static IP] To add SNAT using a static IP, execute the command as follows: Go to the configure mode of the CLI.
WEC8500/configure/interface vlan1.30#exit Configure a NAT rule using a static IP (A port can be also specified for DNAT). WEC8500/configure# ip nat outside destination static tcp 10.10.10.1 4300 30.30.30.2 23 [Checking NAT Configuration] To check the created NAT, use the following command:...
You can check the configured information below. show security mac-filter summary WEC8500# show security mac-filter detail Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Security> <MAC Filter> menu in the sub-menus.
12 user start-with derivation role role_2 condition priority 13 user contain vation role role_3 condition priority 14 user end-with User role role_4 condition priority 15 user not-equal samsung role role_5 Configuration using Web UI Configuration > Security > Role Based Access Control > Derivation Profile Example: Figure 276.
WEC8500/configure/rbac/remote # end WEC8500# configure terminal WEC8500/configure# rbac WEC8500/configure/rbac# remote WEC8500/configure/rbac/remote # no access-list ip acl2 permit seq 2 * any any os-aware CLI for confirming configuration: WEC8500# show rbac remote ip-acl ================ LocalSwAclProfile ================ access-list ip acl1 permit seq 1 tcp any eq * any eq * os-aware * Configuration using Web UI Configuration >...
• ap [ap-profile-name]: Performs synchronization only for a specific AP (CLI only). Synchronization can be confirmed as follows: WEC8500# show rbac remote-group summary GRP_ID GRP_NAME PRO_ID Role Config File Name ====== ================== ====== ========================== rmt_grp_01 etc/rmtapgrp/rbac_cfg_20140305094752849046.tar Configuration using Web UI Configuration >...
Page 438
PRE-AUTH ACL must have the basic permit rules for the HTTP port to DNS and web servers. WEC8500# configure terminal WEC8500/configure# fqm-mode WEC8500/configure/fqm-mode # access-list ip preauth permit seq 1 udp any eq * any eq 53 os-aware * WEC8500/configure/fqm-mode # access-list ip preauth permit seq 2 tcp 192.168.20.10 255.255.255.255 eq 80 any eq * os-aware *...
By using the ‘show system info’ command, you can check the system configuration information of the APC system such as version information, memory information, disk information, temperature sensor, fan status and so on. The execution results of the command in WEC8500 are as follows: WEC8500/configure# show system info -----------------------------------------------------...
Page 460
Fan operation status (OK, NOK) For WEC8050: Parameter Description Fan [0]~[1] Fan operation status (OK, NOK) [Power Supply Status] The WEC8500 has dual detachable power module as shown below. Parameter Description Power Supply [0]~[1] Whether a power module is equipped (Equipped, Not Equipped) Status Power module operation status (OK, NOK) The WEC8050 has only one power module as shown below.
In the menu bar of <WEC Main window>, select <Monitor> and then select the <DASHBOARD> <Summary> menu in the sub-menus. It provides a wide range of information, status retrieving event and alarm retrieving function of the WEC8500 system. Figure 302.
Retrieves system temperature (°C). The result of system status retrieval using each command is as follows: [CPU Load] The retrieving CLI execution result of WEC8500 is as follows: WEC8500# show system cpu Average CPU usage control plane 3.84...
Page 471
Disk 13520032 KBytes Used Disk 4338296 KBytes Free Disk 9181736 KBytes [Fan RPM Level] The retrieving CLI execution result of WEC8500 is as follows: WEC8500# show system fan FAN ID rpm Level(0-3) ------- -------------- FAN[0] 1 level FAN[1] 1 level...
All the system alarms are basically recorded into a system log. The procedure of retrieving current alarms is as follows: Retrieving with CLI To retrieve current alarms, execute the command as follows: WEC8500# show alarm list all 1 network 2012-12-17 09:56:13 MAJ APC ge8 1301 NET Link dn AdminStatus[up] OperStatus[down]...
WEC8500# show alarm list group network 1 network 2012-12-17 09:56:13 MAJ APC ge8 1301 NET Link dn AdminStatus[up] OperStatus[down] WEC8500# show alarm history level major 1 network 2012-12-17 09:56:13 MAJ APC ge8 1301 NET Link dn AdminStatus[up] OperStatus[down] Retrieving with Web UI To retrieve the list of current alarms, in the menu bar of <WEC Main window>, select...
Page 476
[Event History] You can retrieve event information using the following command. WEC8500# show event 1 system 2012-08-31 13:59:46 NOT APC MGMT User Login ID=samsung, IP=192.168.0.91 2 system 2012-08-31 13:48:33 NOT SWM:system Boot Complete - … An event is managed per group and you can retrieve it selectively using the following command.
[INTERFACE_NAME] If the real-time information collection is suspended or initialized, you cannot check the real-time information of the interface. WEC8500/configure# show stats-report current-stats ge3 Error: This interface was not configured to gather statistics. WEC8500/WEC8050 (APC) Operation Manual v10.1...
Managing License Key The Samsung Electronics Common License Method (SLM) is applied to Version 1.5 or newer of the APC system. Therefore, SLM licensing is applied to new websites that are installed using Version 1.5 or later. However, if Version 1.4 is upgraded to Version 1.5, the existing license key is used without any modification.
Configure the IP address and UDP port of a target syslog server (the default of the UDP port is ‘514’.). WEC8500/configure# syslog add 192.168.0.91 WEC8500/configure# syslog add 192.168.0.99 udpport 510 Configure a log level to filter. WEC8500/configure# syslog level information To check the configured syslog information, use the ‘show syslog conf’...
Page 490
2 Execute the ‘show system cpu detail’ command to check the CPU status. 3 Transmit the logs above to the Samsung Technical Support. 1 Execute the ‘show process status’ command to check Upgrade saving...
In addition, to apply a file (‘FILENAME’) from outside to the current system, execute the command as follows: WEC8500# import [FILENAME] [Periodic backup configuration Information] Execute following command to transfer configuration information to ftp/sfpt server. filename: System MAC_Package Version_backup time.wec8500.config [wec8050.config] Enter to CLI periodic-backup mode. WEC8500# configure terminal WEC8500/configure# periodic-backup WEC8500/configure/periodic-backup# Configure upload ftp/sftp server.
2522. 2012-12-21 15:59:50 guestService 2294 SIGTERM(15) In addition, you can check the detail information corresponding to the ‘id’ of each error log by using the following command. WEC8500# show processes log id 15 id date name signal backtrace reason ----- ------------------- ------------ ----- ----------- ----------- --------- 15.
Page 501
Selects crash information (id/all) • id: A specific CDR ID value to view • all: Retrieve all the CDR histories If no parameter is entered, the most recent reboot information is retrieved. WEC8500# show debug reboot info ###################################################################### [REBOOT_SUMMARY]====================================================== : 0001...
Page 502
WEC8500# show debug coredump summary CORE_DUMP enable DUMP_QUOTA 1024 (MB) CORE_SIZE 204800 (KB) POLL_PERIOD 60 (sec) THRESHOLD 80 (%) ---------------------------------------------------------------------------------------- -------------------------------- PROCESS SIGNAL TIME CORE_FILE ---------------------------------------------------------------------------------------- -------------------------------- Segmentation fault Wed Aug 22 03:05:16 2012 core-eqm-11-1345572316- 2437.gz hostapd Aborted Wed Aug 22 03:06:02 2012 core-hostapd-6-1345572362-2436.gz Bus error Wed Aug 22 03:07:21 2012 core-nsm-10-1345572441-2013.gz...
Retrieving Storage Media The WEC8500 supports a disk and USB memory as a storage media. The WEC8050 supports only a disk as a storage media. Both current directory-based relative path and absolute path are all supported during command execution and the path of each device is shown in the below table.
Page 510
WEC8500# show network-stats alert voip configuration Retrieve call statistics by radio. WEC8500# show network-stats statistics voip radio Retrieve call statistics by AP. WEC8500# show network-stats statistics voip ap Retrieve call statistics by WLAN. WEC8500# show network-stats statistics voip wlan Retrieve call statistics by device type.
Page 513
Retrieve the RF statistics of the RF values by AP. ex.) Statistics of air-quality of AP 43 WEC8500# show network-stats statistics rf-value air-quality 43 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select <Statistics>...
Page 514
Check the configuration of the data traffic statistics and if the status is set to be disabled, set to be enabled. WEC8500# show network-stats statistics data current-config WEC8500/configure/network-stats/statistics/data# enable To retrieve the statistical information of a specific AP, enter as follows: WEC8500/WEC8050 (APC) Operation Manual v10.1...
Page 515
To retrieve the statistical information of RTP of a specific AP, give a RTP option as follows: WEC8500# show network-stats statistics data ap-stat 1 rtp To retrieve the statistical information of all APs, enter as follows: WEC8500# show network-stats statistics data apc-stat...
Appendix C Open Source Announcement (WEC8500/WEC8050) Component License GNU Core Utils GNU General Public License v2.0 Avahi GNU Lesser General Public License v2.1 libnl-Netlink Library GNU Lesser General Public License v2.1 OSIP Library GNU Lesser General Public License v2.1 Linux Kernel SCTP GNU Lesser General Public License v2.1...
Page 637
Appendix C Open Source Announcement (WEC8500/WEC8050) ‘Contribution’ shall mean any work of authorship, including the original version of the Work and any modifications or additions to that Work or Derivative Works thereof, that is intentionally submitted to Licensor for inclusion in the Work by the copyright owner or by an individual or Legal Entity authorized to submit on behalf of the copyright owner.
Page 638
Appendix C Open Source Announcement (WEC8500/WEC8050) add Your own attribution notices within Derivative Works that You distribute, alongside or as an addendum to the NOTICE text from the Work, provided that such additional attribution notices cannot be construed as modifying the License.
Page 639
Appendix C Open Source Announcement (WEC8500/WEC8050) END OF TERMS AND CONDITIONS APPENDIX: How to apply the Apache License to your work To apply the Apache License to your work, attach the following boilerplate notice, with the fields enclosed by brackets ‘[]’ replaced with your own identifying information. (Don’t include the brackets!) The text should be enclosed in the appropriate comment syntax for the file format.
Page 640
Appendix C Open Source Announcement (WEC8500/WEC8050) notice appear in all copies, and that the name of Digital Equipment Corporation not be used in advertising or publicity pertaining to distribution of the document or software without specific, written prior permission. THE SOFTWARE IS PROVIDED ‘AS IS’ AND DIGITAL EQUIPMENT CORP.
Page 641
Appendix C Open Source Announcement (WEC8500/WEC8050) Preamble The licenses for most software are designed to take away your freedom to share and change it. By contrast, the GNU General Public License is intended to guarantee your freedom to share and change free software--to make sure the software is free for all its users.
Page 642
Appendix C Open Source Announcement (WEC8500/WEC8050) 1) You may copy and distribute verbatim copies of the Program’s source code as you receive it, in any medium, provided that you conspicuously and appropriately publish on each copy an appropriate copyright notice and disclaimer of warranty; keep intact all the notices that refer to this License and to the absence of any warranty;...
Page 643
Appendix C Open Source Announcement (WEC8500/WEC8050) complete machine-readable copy of the corresponding source code, to be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange; or, Accompany it with the information you received as to the offer to distribute corresponding source code.
Page 644
Appendix C Open Source Announcement (WEC8500/WEC8050) is intended to apply in other circumstances. It is not the purpose of this section to induce you to infringe any patents or other property right claims or to contest validity of any such claims; this section has the sole purpose of protecting the integrity of the free software distribution system, which is implemented by public license practices.
Page 645
Appendix C Open Source Announcement (WEC8500/WEC8050) RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Page 646
Appendix C Open Source Announcement (WEC8500/WEC8050) change it. By contrast, the GNU General Public Licenses are intended to guarantee your freedom to share and change free software--to make sure the software is free for all its users. This license, the Lesser General Public License, applies to some specially designated software packages--typically libraries--of the Free Software Foundation and other authors who decide to use it.
Page 647
Appendix C Open Source Announcement (WEC8500/WEC8050) We call this license the ‘Lesser’ General Public License because it does Less to protect the user’s freedom than the ordinary General Public License. It also provides other free software developers Less of an advantage over competing non-free programs.
Page 648
Appendix C Open Source Announcement (WEC8500/WEC8050) 1) You may copy and distribute verbatim copies of the Library’s complete source code as you receive it, in any medium, provided that you conspicuously and appropriately publish on each copy an appropriate copyright notice and disclaimer of warranty; keep intact all the notices that refer to this License and to the absence of any warranty;...
Page 649
Appendix C Open Source Announcement (WEC8500/WEC8050) 2) in object code or executable form under the terms of Sections 1 and 2 above provided that you accompany it with the complete corresponding machine-readable source code, which must be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange.
Page 650
Appendix C Open Source Announcement (WEC8500/WEC8050) 5) A program that contains no derivative of any portion of the Library, but is designed to work with the Library by being compiled or linked with it, is called a ‘work that uses the Library’.
Page 651
Appendix C Open Source Announcement (WEC8500/WEC8050) c) Accompany the work with a written offer, valid for at least three years, to give the same user the materials specified in Subsection 6a, above, for a charge no more than the cost of performing this distribution.
Page 652
Appendix C Open Source Announcement (WEC8500/WEC8050) any other reason (not limited to patent issues), conditions are imposed on you (whether by court order, agreement or otherwise) that contradict the conditions of this License, they do not excuse you from the conditions of this License. If you cannot distribute so as to satisfy simultaneously your obligations under this License and any other pertinent obligations, then as a consequence you may not distribute the Library at all.
Page 653
Appendix C Open Source Announcement (WEC8500/WEC8050) DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION. 16) IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY...
Page 654
Appendix C Open Source Announcement (WEC8500/WEC8050) libxml2 License Except where otherwise noted in the source code (For example, the files hash.c, list.c and the trio files, which are covered by a similar licence but with different Copyright notices) all the files are: Copyright(c) 1998-2003 Daniel Veillard.
Page 655
Appendix C Open Source Announcement (WEC8500/WEC8050) IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. RSA Data Security Copyright(c) 1991-2, RSA Data Security, Inc. Created 1991. All rights reserved.
Page 656
If you want to obtain the complete Corresponding Source code in the physical medium such as CD-ROM, the cost of physically performing source distribution may be charged. You may also find a copy of the source at http://opensource.samsung.com/ This offer is valid to anyone in receipt of this information.