NETGEAR ProSafe WC7520 Reference Manual

20-ap wireless controller
Hide thumbs Also See for ProSafe WC7520:
Table of Contents

Advertisement

350 East Plumeria Drive
San Jose, CA 95134
USA
July 8, 2011
202-10686-03
1.0
ProSafe 20-AP Wireless
Controller WC7520
Reference M anua l

Advertisement

Table of Contents
loading

Summary of Contents for NETGEAR ProSafe WC7520

  • Page 1 ProSafe 20-AP Wireless Controller WC7520 Reference M anua l 350 East Plumeria Drive San Jose, CA 95134 July 8, 2011 202-10686-03...
  • Page 2: Technical Support

    NETGEAR, Inc. Technical Support Thank you for choosing NETGEAR. To register your product, get the latest product updates, get support online, or for more information about the topics covered in this manual, visit the Support website at http://support.netgear.com.
  • Page 3 ProSafe 20-AP Wireless Controller WC7520 202-10686-02 v1.0 March 2011 Added the following new information: • Support for the WNAP320 access point. • New features: - Capability to specify use of an access point’s internal or external antenna or antennas (see...
  • Page 4: Table Of Contents

    WC7520 Wireless Controller System Components ....14 NETGEAR ProSafe Access Points ......15 What Can You Do with the WC7520 Wireless Controller? .
  • Page 5 ProSafe 20-AP Wireless Controller WC7520 Chapter 4 Access Point Discovery and Management Access Point Discovery ........49 Requirements for Autodiscovery .
  • Page 6 ProSafe 20-AP Wireless Controller WC7520 Specify RF Management ........95 Basic RF Management .
  • Page 7 ProSafe 20-AP Wireless Controller WC7520 Controller Selection List ........146 Manage Redundancy .
  • Page 8 ProSafe 20-AP Wireless Controller WC7520 Appendix B Notification of Compliance Index...
  • Page 9: Chapter 1 Introduction And Overview

    Key Features and Capabilities The ProSafe 20-AP Wireless Controller WC7520 is intended for medium-sized businesses, schools, and hospitals. In a stacked configuration and with the appropriate licenses, a wireless controller can support up to 150 access points (APs) with up to 1,500 users or more.
  • Page 10 ProSafe 20-AP Wireless Controller WC7520 The wireless controller provides the following key features and capabilities: • Scalable architecture with stacking and redundancy Support for 20 access points on a single wireless controller with no additional license. Purchased licenses (WC7510L) in increments of 10 access points allow for support of up to a maximum number of 50 access points on a single wireless controller.
  • Page 11: Package Contents

    WC7520 ProSafe Wireless Controller Installation Guide • Resource CD If any of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer. Keep the carton, including the original packing materials, in case you need to return the product for repair.
  • Page 12: Hardware Features

    ProSafe 20-AP Wireless Controller WC7520 Hardware Features The front panel ports and LEDs, rear panel components, and bottom label of the wireless controller are described in this section. Front Panel Ports and LEDs The following figure shows the front panel ports and status LEDs of the wireless controller.
  • Page 13: Rear Panel Features

    DB9 male connector. The default baud rate is 9600 K. The configuration is 8 bits, no parity, and 1 stop bit. Note: The console port is for debugging under guidance of NETGEAR technical support only. • Factory Defaults button. Using a sharp object, press and hold this button for about 10 seconds until the front panel LED flashes and the wireless controller returns to factory default settings.
  • Page 14: Bottom Panel With Product Label

    Figure 3. WC7520 Wireless Controller System Components A WC7520 wireless controller system consists of one or more wireless controllers and a collection of access points that are organized into groups based on location or network access.
  • Page 15: Netgear Prosafe Access Points

    From then on, you can centrally manage and monitor the access points. A WC7520 wireless controller system can support the following access points: • WNAP210 ProSafe Wireless-N Access Point Supports 802.11b, 802.11g, and 802.11n network devices...
  • Page 16: What Can You Do With The Wc7520 Wireless Controller

    ProSafe 20-AP Wireless Controller WC7520 What Can You Do with the WC7520 Wireless Controller? These are some of the tasks that you can perform with a WC7520 wireless controller: Plan a Wireless Network • Design a WLAN. Design an efficient WLAN with building and floor dimensions for your specific environment.
  • Page 17 ProSafe 20-AP Wireless Controller WC7520 • Manage QoS settings. Manage QoS queue settings for data, background, video, and voice traffic for access point profile groups. • Configure RF management settings. Configure WLAN healing and wireless coverage hole detection for the entire network or for access point profile groups.
  • Page 18: Licenses

    For information about how to manage your licenses, see Manage Licenses on page 138. Maintenance and Support NETGEAR offers technical support seven days a week, 24 hours a day. Information about support is available on the NETGEAR ProSupport website at http://kb.netgear.com/app/answers/detail/a_id/212. Web Management Interface Layout The following figure shows the menu at the top and the left of the wireless controller’s web...
  • Page 19: Initial Connection And Configuration

    Initial Connection and Configuration Follow the steps in this section to set up the wireless controller. For additional information, see the WC7520 ProSafe Wireless Controller Installation Guide that you can access from http://kb.netgear.com/app/products/model/a_id/13060. ...
  • Page 20 ProSafe 20-AP Wireless Controller WC7520 d. Check the lights on the front of the wireless controller: • Power. The green Power LED should be lit. If the Power LED is not lit, check the connections and check to see if the power outlet is controlled by a wall switch that is turned off.
  • Page 21: Basic And Advanced Settings

    ProSafe 20-AP Wireless Controller WC7520 Figure 6. Note: The Network navigation menu tab displays under the Monitor main navigation tab only when you have configured stacking. For information about the layout and general characteristics of the web management interface, see Web Management Interface Layout on page 18.
  • Page 22 ProSafe 20-AP Wireless Controller WC7520 Depending on your network configuration, use basic settings or advanced settings to manage your access points: Basic settings for a typical network. The basic settings work with most common • network configurations. For example, all access points on the WLAN are for the same organization or business and therefore adhere to the same policies and use a small number of service set identifiers (SSIDs, or network names).
  • Page 23: Profile Groups

    ProSafe 20-AP Wireless Controller WC7520 Profile Groups Each access point can support up to 8 security profiles (16 for dual-band access points), each with its own SSID, security settings, MAC ACL, rate-limiting settings, WMM, and so on. The wireless controller follows the same architecture. A profile group on the wireless...
  • Page 24 ProSafe 20-AP Wireless Controller WC7520 Group-6 Group-7 Group-5 Group-8 Group-4 Group-1 Group-2 Group-3 5-GHz 2.4-GHz radio radio Security Profiles Security Profiles Figure 8. The following figure shows an example of three access point profile groups, in which the first profile group (Group-1) has three security profiles. For each profile in this profile group, the profile name, radio mode, and authentication setting are shown.
  • Page 25: Choose A Location For The Wireless Controller

    ProSafe 20-AP Wireless Controller WC7520 Choose a Location for the Wireless Controller The wireless controller is suitable for use in an office environment where it can be freestanding on its runner feet or mounted into a standard 19-inch equipment rack.
  • Page 26: Chapter 2 System Planning And Deployment Scenarios

    Number of wireless controllers required • 802.11 frequency band and the channels that are optimal for Wi-Fi usage NETGEAR recommends that you perform a site survey: • Run a spectrum analysis of channels of the site to determine the current RF behavior and detect both 802.11 and non-802.11 noise.
  • Page 27: Before You Configure A Wireless Controller

    These sections assume that you have deployed at least one wireless controller in your network and are ready to configure the wireless controller. For information about how to deploy the wireless controller in your network, see the WC7520 ProSafe Wireless Controller Installation Guide that you can access from http://kb.netgear.com/app/products/model/a_id/13060.
  • Page 28 ProSafe 20-AP Wireless Controller WC7520 Client VLANs Each authenticated wireless user is placed into a VLAN that determines the user’s DHCP server, IP address, and Layer 2 connection. Although you could place all authenticated wireless users into the single VLAN that is specified in the basic security profile, the wireless controller allows you to group wireless users into separate VLANs based on the wireless SSID to differentiate access to network resources.
  • Page 29: Single Controller Configuration With Basic Profile Group

    ProSafe 20-AP Wireless Controller WC7520 Table 2. Authentication and encryption options (continued) Authentication method Encryption option Authentication server WPA2 AES or TKIP+AES One of the following authentication servers: • External RADIUS server • Internal authentication server • External LDAP server...
  • Page 30: Single Controller Configuration With Advanced Profile Groups

    ProSafe 20-AP Wireless Controller WC7520 Single Controller Configuration with Advanced Profile Groups A more complex configuration consists of a single wireless controller that controls a collection of access points that are organized in access point profile groups and might use several profiles in each access point profile group.
  • Page 31: Stacked Controller Configuration

    Management VLAN and Data VLAN Strategies If your network includes 10 or more access points, NETGEAR recommends that you set up at least two VLAN groups: a management VLAN group and a data VLAN group. If your network is large, you should create a number of data VLAN groups. Setting up data VLANs for clients allows you to: •...
  • Page 32 ProSafe 20-AP Wireless Controller WC7520 Figure 10. The wireless controller uses the management VLAN to continually exchange packets with the access points. For large networks, if all traffic uses a single VLAN, the client traffic could potentially flood the network. If this happens, and the wireless controller is not able to exchange packets with the access points, it can cause network performance to slow down, and the access points can lose their connectivity with the wireless controller.
  • Page 33: Deployment Scenarios

    ProSafe 20-AP Wireless Controller WC7520 Deployment Scenarios This section provides three deployment scenarios to illustrate how the wireless controller can function in a variety of network configurations: • Scenario Example 1: Basic Network with Single VLAN • Scenario Example 2: Advanced Network with VLANs and SSIDs •...
  • Page 34: Scenario Example 2: Advanced Network With Vlans And Ssids

    ProSafe 20-AP Wireless Controller WC7520 The access points and wireless controller are connected in the same subnet and use the same IP address range that is assigned for that subnet. There are no routers between the access points and the wireless controller. The access points are connected to a PoE switch, which, in turn, is connected to the wireless controller.
  • Page 35 ProSafe 20-AP Wireless Controller WC7520 Figure 12. The access points and wireless controller are connected in the same subnet and same VLAN and use the same IP address range that is assigned for that subnet. There are no routers between the access points and the wireless controller. The access points are connected to a PoE switch, which, in turn, is connected to the wireless controller.
  • Page 36 ProSafe 20-AP Wireless Controller WC7520 Provisioning the Wireless Controller Step Configuration Web management interface path For initial discovery and configuration of the access points, Configuration > System > IP/VLAN temporarily configure management VLAN 100 as an untagged management VLAN on both the wireless controller and the PoE switch.
  • Page 37: Scenario Example 3: Advanced Network With Redundancy

    ProSafe 20-AP Wireless Controller WC7520 Step Configuration Web management interface path For each access point on the managed list, clear the Untagged Vlan check box and configure VLAN 100 as the management VLAN. Doing so causes the access points to lose connectivity with the wireless controller.
  • Page 38 ProSafe 20-AP Wireless Controller WC7520 Figure 13. The access points and wireless controllers are connected in the same subnet and same VLAN and use the same IP address range that is assigned for that subnet. The core switch is located between the wireless controllers and the PoE switches, to which the access points are connected.
  • Page 39 ProSafe 20-AP Wireless Controller WC7520 Provisioning the Wireless Controller Step Configuration Web management interface path Configure the basic system settings: 1. Configure the country code of operation. Configuration > System > General 2. Configure the IP address of wireless controller.
  • Page 40: Chapter 3 Rf Planning

    RF Planning This chapter includes the following sections: • RF Planning Overview • Define and Edit Buildings and Floors • Specify Access Point Requirements • View and Manage Heat Maps for Deployed Plans RF Planning Overview You can do the following with RF planning: •...
  • Page 41: Define And Edit Buildings And Floors

    ProSafe 20-AP Wireless Controller WC7520 • Total number of users and number of users per access point. • Radio type or types. • Desired data rates for access points. • Identify areas where you do not necessarily want coverage. •...
  • Page 42 ProSafe 20-AP Wireless Controller WC7520 Figure 14. The Buildings table shows the names of the previously defined buildings and their number of floors. To add a building, click Add. The Add Building pop-up window displays. Enter a name for your building in the Building Name field, and then click Add. The new building is added to the Buildings table.
  • Page 43 ProSafe 20-AP Wireless Controller WC7520 Table 4. Building name and floors (continued) Setting Description Floors Floor Names The floor name is an alphanumeric string up to 64 characters in length. Floor Dimensions Enter the floor length in meters in the Length field; enter the floor width in meters in Width field.
  • Page 44: Specify Access Point Requirements

    ProSafe 20-AP Wireless Controller WC7520 Specify Access Point Requirements After you have defined the buildings and floors, you need to specify the following RF requirements for each floor and each supported access point model (WNAP210, WNAP320, and WNDAP350): • Frequency band. The radio frequency to be used (802.11b/bg/ng or 802.11a/na).
  • Page 45 ProSafe 20-AP Wireless Controller WC7520 Specify the WLAN requirements for the floor as explained in the following table: Table 5. Floor WLAN requirements Setting Description Access Point Model Specify the access point model that you will use on the floor by selecting the WNDAP 350, WNAP 210, WNAP 320, or WNDAP 360 radio button.
  • Page 46: View And Manage Heat Maps For Deployed Plans

    ProSafe 20-AP Wireless Controller WC7520 Note that the planning tool provides only default placement and shows the coverage area for each access point. Move the access points to optimize coverage in desired areas and avoid coverage in unwanted areas based on the floor plan.
  • Page 47 ProSafe 20-AP Wireless Controller WC7520 • Location of rogue access points • Location of clients associated with the access points • Location of blacklisted clients  To view the heat map for a building floor and to adjust access points: Select Plans >...
  • Page 48 ProSafe 20-AP Wireless Controller WC7520 The first time you view the heat map, the access points need to be manually placed on the heat map to closely match their actual physical locations. Click Apply to save the locations. Doing so regenerates the complete heat map of the floor.
  • Page 49: Chapter 4 Access Point Discovery And Management

    You need to run the Discovery Wizard for the wireless controller to discover supported NETGEAR access points on the LAN. The wireless controller can discover access points that are still in their factory default state and access points that are deployed and running.
  • Page 50: Run The Discovery Wizard

    ProSafe 20-AP Wireless Controller WC7520 In addition, for the auto discovery process to work across Layer 3 networks, enable either one of the following options: Multicast routing for IP address 254.0.100.250 between the wireless controller and the • access points.
  • Page 51 ProSafe 20-AP Wireless Controller WC7520 Figure 21. Select the radio button that specifies the network layout of the access points, and click Next. • Same L2 network - directly or via backend L2 switch. Discover all access points on the LAN that are in the same IP subnet and are connected to the wireless controller either directly or through a back-end Layer 2 switch.
  • Page 52: Discovery Results

    ProSafe 20-AP Wireless Controller WC7520 Click Next to continue. The following occurs: • The wireless controller searches for NETGEAR products on the LAN based on MAC address, and then identifies which products are supported access point models. • When discovery is finished, the table shows the access points that were located: for each access point, the table includes the model number, IP address, MAC address, and name.
  • Page 53: Manage The Access Point List

    ProSafe 20-AP Wireless Controller WC7520 discovered at a time. You have to add the access point to the managed list, change its IP address, and then run discovery again to discover the next access point with that IP address. •...
  • Page 54 ProSafe 20-AP Wireless Controller WC7520 The Managed AP List shows the following entries for each access point that you added to the list: Table 6. Managed AP list information Item Description The IP address of the access point. The MAC address of the access point.
  • Page 55: Edit And Remove Access Point Information

    ProSafe 20-AP Wireless Controller WC7520 Edit and Remove Access Point Information  To edit an access point in the Managed AP List: Select Access Point > Managed AP List to view the Managed AP List: Figure 25. Select the access point that you want to edit by selecting its radio button in the Edit column of the Managed AP List.
  • Page 56 ProSafe 20-AP Wireless Controller WC7520 Configure the settings as explained in the following table. Some fields are masked out and cannot be edited; other fields are masked out but can be edited. Table 7. Access point settings Setting Description Access Point Info section Name Enter a unique value that indicates the access point name.
  • Page 57 ProSafe 20-AP Wireless Controller WC7520 Table 7. Access point settings (continued) Setting Description Wireless Settings section Antenna You can specify which antenna the access point uses by making a selection from the drop-down list: • Internal. The access point uses its internal antenna.
  • Page 58: Chapter 5 Configuring Network Settings

    If your location is not listed, check with your local government agency or check the NETGEAR website for more information about which channels to use.
  • Page 59: Time Management

    Description Name Enter a unique value as the wireless controller name. NETGEAR recommends changing the name as soon as possible after setting up. The name needs to contain only alphabetical characters, numbers, and hyphens, and needs to be 31 characters or less.
  • Page 60: Configure Ip And Vlan Settings

    ProSafe 20-AP Wireless Controller WC7520 Figure 28. Configure the settings as explained in the following table: Table 9. Time settings Setting Description Time Zone From the drop-down list, select the local time zone for your country or region. Current Time This is a nonconfigurable field that displays the current time at your location.
  • Page 61 ProSafe 20-AP Wireless Controller WC7520 Figure 29. Configure the settings as explained in the following table: Table 10. IP and management VLAN settings Setting Description IP Settings section IP Address Enter the IP address of the wireless controller. The default IP address is 192.168.0.250.
  • Page 62: Management Vlans

    Management VLANs are used for all SNMP and HTTP traffic to and from the wireless controller and managed access points. For large deployments, NETGEAR recommends that the wireless controller and access points are in separate VLANs to ensure uninterrupted connectivity between the wireless controller and the access points.
  • Page 63 ProSafe 20-AP Wireless Controller WC7520  To add a DHCP server and configure its settings: Select Configuration > System > DHCP. The DHCP Settings screen displays. The following figure shows part of the DHCP Settings screen: Figure 30. The DHCP Server List shows the DHCP servers that are already configured on the wireless controller.
  • Page 64 ProSafe 20-AP Wireless Controller WC7520 Table 11. DHCP settings (continued) Setting Description IP Network Enter the IP address for the wireless controller in the VLAN that you have specified in the VLAN field. If you have not selected the Use VLAN Interface check box, the IP address of the wireless controller’s management VLAN is...
  • Page 65: Manage Certificates

    There is a default self-signed server certificate installed on the wireless controller. However, NETGEAR strongly recommends that you replace this default certificate with a custom certificate issued for your site or domain by a trusted Certificate Authority (CA).
  • Page 66: Configure Syslog And Alarm Notification Settings

    ProSafe 20-AP Wireless Controller WC7520 Configure Syslog and Alarm Notification Settings From the Alerts menu you can configure the syslog and the alarms, and specify the email address from which alerts originate. Configure Syslog Settings This screen lets you configure the settings to connect to a syslog server, if you have one configured in your network.
  • Page 67: Configure Alarm Notification Settings

    ProSafe 20-AP Wireless Controller WC7520 Configure Alarm Notification Settings You can classify certain events as critical, major, normal, or minor. Some events you can classify only as critical or major. For example, on the RF Management screen, you can specify whether a coverage hole should be classified as critical or major (see...
  • Page 68 ProSafe 20-AP Wireless Controller WC7520 Figure 35. Configure the settings as explained in the following table: Table 14. Email configuration settings Setting Description Server Address Enter the IP address of the server from which email notifications are sent. Port Enter the port number of the server from which email notifications are sent. The default is port number 25.
  • Page 69: Chapter 6 Managing Security Profiles And Profile Groups

    Managing Security Profiles and Profile Groups This chapter includes the following sections: • Manage Wireless Security Profiles • Configure Security Profiles for the Basic Profile Group • Configure Security Profiles for Advanced Profile Groups • Manage Basic and Advanced Profile Groups in the WLAN Note: In this chapter and in the following chapters, access point profile groups are referred to as just profile groups.
  • Page 70: Small Wlan Networks

    ProSafe 20-AP Wireless Controller WC7520 Note: Note that if an access point is removed from its building (someone takes it home or it is stolen) the access point does not retain the configuration that it received from the wireless controller. The configuration is not stored in memory on the access point.
  • Page 71: Profile Naming Conventions

    ProSafe 20-AP Wireless Controller WC7520 Profile Naming Conventions You can use profile naming conventions that are based on user groups such as Marketing, or based on VLANs such as VLAN40, or you can use other naming conventions such as CompanyName15.
  • Page 72: Configure Security Profiles For The Basic Profile Group

    ProSafe 20-AP Wireless Controller WC7520 After you have configured one or more MAC ACLs, you can then assign any MAC ACL to a security profile in a basic profile group or advanced profile group. Cloning profiles. For faster setup you can clone a profile and rename it. Cloning copies •...
  • Page 73 ProSafe 20-AP Wireless Controller WC7520 Click the + button to add a profile to the basic profile group. The Add Profiles pop-up window displays: Figure 37. Either click Add, or, if you want to clone an existing profile, select the Clone an existing Profile check box, select a profile from the Profiles drop-down list, and then click Add.
  • Page 74 ProSafe 20-AP Wireless Controller WC7520 Table 15. Basic security profile definition settings (continued) Setting Description Client Authentication section Note: The options that display onscreen depend on the selection from Network Authentication drop-down list. Network Authentication From the drop-down list, select the authentication type to be used: see Table 16 on page 76.
  • Page 75: Edit And Remove Profiles From The Basic Profile Group

    ProSafe 20-AP Wireless Controller WC7520 Table 15. Basic security profile definition settings (continued) Setting Description Open System, Shared Captive Portal Select this check box if you want to enable the captive portal. Key, WPA-PSK, For more information, see Configure Captive Portal Settings WPA2-PSK, and page 119.
  • Page 76: Network Authentication And Data Encryption Options

    ProSafe 20-AP Wireless Controller WC7520 Network Authentication and Data Encryption Options The following table shows the data encryption options based on network authentication, and the required configuration steps to implement a selected network authentication. Note: On the Edit Profile (Basic) or Edit Profile (Group-X) screen, for any...
  • Page 77 ProSafe 20-AP Wireless Controller WC7520 Table 16. Network authentication and data encryption settings (continued) Network authentication Data encryption Configuration steps selection options Shared Key 64-bit WEP To configure Shared Key authentication with WEP: 128-bit WEP 1. From the Data Encryption drop-down list, select a level of...
  • Page 78 ProSafe 20-AP Wireless Controller WC7520 Table 16. Network authentication and data encryption settings (continued) Network authentication Data encryption Configuration steps selection options WPA2 with Radius To configure WPA2 authentication with a RADIUS server: TKIP + AES 1. Set up and enable an internal or external (RADIUS or LDAP) authentication server.
  • Page 79: Configure Security Profiles For Advanced Profile Groups

    ProSafe 20-AP Wireless Controller WC7520 Table 16. Network authentication and data encryption settings (continued) Network authentication Data encryption Configuration steps selection options WPA-PSK & WPA2-PSK To configure WPA-PSK & WPA2-PSK authentication, type a passphrase of at least 8 characters in the WPA Passphrase...
  • Page 80 ProSafe 20-AP Wireless Controller WC7520 The following table describes the fields that are shown for each profile in a profile group. Table 17. Profile group settings Setting Description Name The unique profile name. Radio The wireless radio mode in which the profile is operating.
  • Page 81 ProSafe 20-AP Wireless Controller WC7520 Click + to add another profile. Your selection from Select the Local radio the Network Authentication button to display the drop-down list Local MAC ACL determines the Group drop-down list. information that is Select the External displayed onscreen.
  • Page 82: Edit And Remove Profiles From An Advanced Profile Group

    ProSafe 20-AP Wireless Controller WC7520 Edit and Remove Profiles from an Advanced Profile Group  To edit an existing profile to an advanced profile group: On the Profile Groups screen, click a tab to select a profile group. Click Edit. The Edit Profile screen displays.
  • Page 83 ProSafe 20-AP Wireless Controller WC7520 Figure 41. The displayed settings are explained in the following table: Table 18. WLAN group assignments Setting Description The IP address of the access point. The MAC address of the access point. Model The model of the access point.
  • Page 84: Chapter 7 Configuring Wireless And Qos Settings

    When you are ready to configure your access points, NETGEAR recommends using the default settings as they are unless you have specific reasons to change them.
  • Page 85: Configure The Radio

    ProSafe 20-AP Wireless Controller WC7520 • Advanced wireless settings. If you use the advanced configuration model, you can configure the following wireless and QoS settings separately for each profile group that you have created: Advanced radio on/off schedules for up to 8 profile groups...
  • Page 86: Advanced Radio Configuration For Profile Groups

    ProSafe 20-AP Wireless Controller WC7520 Configure the settings as explained in the following table: Table 19. Schedule radio on/off settings Setting Description Current Time This is a nonconfigurable field that displays the current time for the wireless controller. Schedule Radio On/Off You can specify either when the radio is on by selecting the On radio button or when it is off by selecting the Off radio button.
  • Page 87: Configure Wireless Settings

    ProSafe 20-AP Wireless Controller WC7520 Configure the settings as explained in the previous table. Click Apply to save your settings. Configure Wireless Settings Typically, the default wireless settings do not need adjustment. Override the wireless settings only if there is a specific need, such as a phone vendor that specifies a setting different from the default.
  • Page 88 ProSafe 20-AP Wireless Controller WC7520 Note: If automatic channel allocation is enabled on the Channel Allocation screen (see Configure Channels on page 92), you cannot configure the wireless settings on the Basic Wireless Settings screen. You need to disable automatic channel allocation to be able to configure the wireless settings.
  • Page 89 ProSafe 20-AP Wireless Controller WC7520 Table 20. Wireless settings (continued) Setting Description RTS Threshold (0-2347) Enter the size of the Request to Send (RTS) threshold packet. The RTS threshold is related to the transmission mechanism (CSMA/CA or CSMA/CD) for the packets. If the packet size is equal to or less than this threshold, the data frame is transmitted immediately;...
  • Page 90: Advanced Wireless Configuration For Profile Groups

    Click Apply to save your settings. Advanced Wireless Configuration for Profile Groups NETGEAR recommends using the default wireless settings unless you have specific reasons to change them. You can configure wireless settings for the basic profile group (see the previous section) or for advanced profile groups.
  • Page 91 ProSafe 20-AP Wireless Controller WC7520 Figure 45. Click a tab to select a profile group. Click a tab to select a radio. Select the Turn Radio On check box to enable configuration of the wireless settings. Note: If automatic channel allocation is enabled on the Channel Allocation...
  • Page 92: Configure Channels

    ProSafe 20-AP Wireless Controller WC7520 Optionally, you can override the channel and transmission power for individual access points. Note: If automatic Tx power control is enabled on the advanced RF Management screen (see Advanced RF Management for Profile Groups on page 98), you cannot configure the transmission power on the Advanced Wireless Settings screen.
  • Page 93 Running channel allocation might temporarily affect traffic on the managed access points in the network. To adhere to best practices when adjusting channel allocation, NETGEAR recommends the following: • Select channels that do not overlap. For example, for 2.4 GHz, use channels 1, 6, and 11.
  • Page 94 ProSafe 20-AP Wireless Controller WC7520 Figure 46. Configure the settings as explained in the following table: Table 23. Channel allocation settings Setting Description Automatic channel allocation Ensure that the Enable radio button is selected during normal operation. Automatic channel allocation distributes channels across the managed access points to reduce interference.
  • Page 95: Specify Rf Management

    ProSafe 20-AP Wireless Controller WC7520 Table 23. Channel allocation settings (continued) Setting Description Prevent channel change during Active voice call Select the Enable radio button to prevent channel changes during voice calls. Select the Note: If the wireless controller is...
  • Page 96: Basic Rf Management

    RF environment to minimize neighboring access point interference, leakage across floors, and coverage holes. When you configure WLAN healing, NETGEAR recommends the following: • Configure the WLAN self-healing wait time to a value greater than the access point reboot time, which is usually 1 minute.
  • Page 97 ProSafe 20-AP Wireless Controller WC7520 Figure 47. Configure the settings as explained in the following table: Table 24. RF management settings Setting Description TX Power Settings section Default Tx Power Make a selection from the drop-down list to specify how the transmission (Tx) power is configured on the access points: Full, Half, Quarter, Eighth, or Minimum.
  • Page 98: Advanced Rf Management For Profile Groups

    ProSafe 20-AP Wireless Controller WC7520 Table 24. RF management settings (continued) Setting Description Coverage Hole Detection section Periodic Coverage Hole Detection Select the Enable radio button to allow coverage hole detection to run in the background periodically. Select the Disable radio button to disable this option.
  • Page 99: Configure Qos For Profile Groups

    ProSafe 20-AP Wireless Controller WC7520 Click a tab to select a profile group. Configure the settings as explained in the previous table. Click Apply to save your settings. Configure QoS for Profile Groups Quality of Service (QoS) works by default. Change QoS only if there is a reason, such as device vendor specifications that require you to use different settings.
  • Page 100 ProSafe 20-AP Wireless Controller WC7520 Figure 49. Click a tab to select a profile group. Click a tab to select a radio. This screen lets you modify the QoS settings per profile group and per radio for upstream traffic flowing from the station (that is, the wireless client) to managed access points and the downstream traffic flowing from managed access points to the station.
  • Page 101: Configure Load Balancing

    ProSafe 20-AP Wireless Controller WC7520 Configure the settings as explained in the following table: Table 25. QoS settings Setting Description AIFS Specify a wait time (in milliseconds) for data frames. Valid values for Arbitration Inter-Frame Space (AIFS) are 1 through 255.
  • Page 102 ProSafe 20-AP Wireless Controller WC7520 access point determines whether or not to accept a client based on the number of clients already connected or the signal strength of the clients. Number of clients. When there are several access points and you want a good •...
  • Page 103: Configure Rate Limiting

    ProSafe 20-AP Wireless Controller WC7520 Configure Rate Limiting The available bandwidth is determined by the number of errors during transmission and the time that a packet spends in the transmission queues. Within a profile group (including the basic profile group), you configure rate limiting separately for each wireless radio (2.4 GHz and 5 GHz).
  • Page 104: Advanced Rate Limiting For Profile Groups

    ProSafe 20-AP Wireless Controller WC7520 Figure 51. Click a tab to select a radio. For each profile on a wireless radio, specify the rate limit as a percentage. You can use the slider bars to adjust the values in the rate limit fields to the right of the slider bars. Make sure that the total percentages of all profiles on one wireless radio do not exceed 100 percent.
  • Page 105 ProSafe 20-AP Wireless Controller WC7520 Click a tab to select a profile group. Click a tab to select a radio. For each profile on a wireless radio in the selected profile group, specify the rate limit as a percentage. You can use the slider bars to adjust the values in the rate limit fields to the right of the slider bars.
  • Page 106: Chapter 8 Configuring Network Access And Security

    Configuring Network Access and Security This chapter includes the following sections: • About Basic and Advanced Security Configurations • Manage Rogue Access Points • Manage MAC Authentication and MAC Authentication Groups • Manage Authentication Servers and Authentication Server Groups • Manage Guest Network Access •...
  • Page 107: Manage Rogue Access Points

    ProSafe 20-AP Wireless Controller WC7520 • Basic security settings. You can apply the following security settings to any profile, whether in the basic profile group or in an advanced profile group: Basic MAC authentication (the MAC ACL group that is called basic)
  • Page 108: Configure Basic Rogue Detection Settings

    Rogue Detection Interval If rogue AP detection is enabled, select the detection interval from the drop-down list: • Low. With the Low setting, the access point goes off-channel less frequently than with the Medium, High, or Aggressive setting. NETGEAR recommends the Low setting, which should work well in most network configurations. • Medium.
  • Page 109: Configure Advanced Rogue Detection Settings

    ProSafe 20-AP Wireless Controller WC7520 Click Apply to save your settings. Because the neighbor and rogue access points are detected during off-channel scans, it typically takes about 10 minutes after the rogue AP detection is enabled for the neighbor and rogue access points to be detected and the known list (that is, the database with known access points) and unknown list (that is, the database with unknown access points) on the wireless controller to be populated.
  • Page 110: Manage Mac Authentication And Mac Authentication Groups

    ProSafe 20-AP Wireless Controller WC7520 b. Click one of the following two buttons, both of which are located below the Rogue List: • Known. Moves the selected access points to the known list. As an option, for each access point, you can enter a name in the Name column, so the access point is more easily identified.
  • Page 111: Guidelines For External Mac Authentication

    ProSafe 20-AP Wireless Controller WC7520 Note: The wireless controller can support an aggregate number of 4096 MAC addresses for all its local ACLs. Guidelines for External MAC Authentication  To use an external ACL: Configure an ACL on an external RADIUS server.
  • Page 112 ProSafe 20-AP Wireless Controller WC7520 Figure 55. As an option, you can import a list of MAC addresses from a file. For more information, see the next section. Next to Trust ACL as, select one of the following radio buttons: •...
  • Page 113: Configure Local Mac Authentication Groups

    ProSafe 20-AP Wireless Controller WC7520  To import a MAC list from a file: Create a text file that includes a list of MAC addresses. Each MAC address should be on a separate line with hard returns between lines as shown in the following example:...
  • Page 114 ProSafe 20-AP Wireless Controller WC7520 Click + to add another ACL group. Figure 56. Click the + button to create an additional ACL group. The new ACL group displays on the advanced MAC Authentication screen, and the tab for the new ACL is automatically selected to let you configure the new group.
  • Page 115: Manage Authentication Servers And Authentication Server Groups

    ProSafe 20-AP Wireless Controller WC7520 Manage Authentication Servers and Authentication Server Groups You can specify three types of authentication servers: internal, external RADIUS, and external LDAP: • Internal authentication server. The wireless controller handles authentication. If you use this setting, set up Wi-Fi clients on the User Management screen (see...
  • Page 116: Configure Basic Authentication Server Settings

    ProSafe 20-AP Wireless Controller WC7520 Configure Basic Authentication Server Settings Use the basic Authentication Server screen to set up the internal authentication server, the basic external RADIUS server (which is called Auth-basic), and the external LDAP server (which is called Auth-LDAP). After you have set up these authentication servers, you can assign any of them to any profile, whether in the basic profile group or in an advanced profile group.
  • Page 117 ProSafe 20-AP Wireless Controller WC7520 Configure the settings that correspond to the selected authentication server as described in the following table: Table 28. Authentication server settings Setting Description External Primary Authentication Specify the IP address, port (default RADIUS Server 1812), and shared secret.
  • Page 118: Configure Radius Authentication Server Groups

    ProSafe 20-AP Wireless Controller WC7520 Configure RADIUS Authentication Server Groups For greater security flexibility, you can create up to 8 external RADIUS servers to authenticate different groups of users. After you have set up these authentication servers, you can assign any of them, including the basic RADIUS server, to any profile, whether in the basic profile group or in an advanced profile group.
  • Page 119: Manage Guest Network Access

    ProSafe 20-AP Wireless Controller WC7520 Manage Guest Network Access Users with management (admin) credentials—for example, receptionists or hotel clerks—can provision guests. Guests need to provide their email address, or both their email address and a password. These latter guests are referred to as captive portal users, for which you need to set up a captive portal and captive portal user credentials.
  • Page 120 ProSafe 20-AP Wireless Controller WC7520 WISPr-Session-Terminate-Time Session-Timeout If you change the values for any of these variables before the wireless client disassociates from the access point, the new values are not updated on the wireless controller. • A managed access point can send accounting information to the external RADIUS server because the wireless controller functions as a proxy RADIUS client for the managed access point.
  • Page 121: Manage Users And Passwords

    ProSafe 20-AP Wireless Controller WC7520 Configure the settings as described in the following table. Table 29. Portal settings Setting Description Portal Settings section Portal Type Select one of the following radio buttons: • Guest. A guest portal with a field for entering an email address.
  • Page 122 ProSafe 20-AP Wireless Controller WC7520 Guest provisioning. These users can configure only captive portals users, that is, they can access only the User Management configuration menu tab under the Maintenance main navigation tab. License management only. These users can configure only licenses, that is, they...
  • Page 123 ProSafe 20-AP Wireless Controller WC7520 Configure the users settings as described in the following table. Table 30. User settings Setting Description Management User Name Enter a unique user name. User Type From the drop-down list, select the type of user, which determines their access to the wireless controller’s web management interface.
  • Page 124 ProSafe 20-AP Wireless Controller WC7520  To edit or remove users: Select a tab (Management, Captive Portal, or WiFi Clients). Select a radio button that corresponds to a user. Select one of the following buttons: • Edit. Opens a pop-up window that lets you change the user settings as described in the previous table.
  • Page 125: Chapter 9 Maintaining The Controller

    Maintaining the Controller This chapter includes the following sections: • Manage the Configuration File • Reboot or Reset the Wireless Controller • Reboot Access Points • Manage External Storage • Manage Remote Access • View Alerts and Events and Save the Logs •...
  • Page 126 ProSafe 20-AP Wireless Controller WC7520 Figure 61. The Backup/Restore screen lets you: • Back up and save a copy of the current settings • Restore saved settings from the backed-up file  To back up the configuration file: On the Backup/Restore Settings screen (see the previous figure), click the Backup button to save a copy of your current settings.
  • Page 127: Upgrade The Configuration File

    TFTP or FTP server. If you intend use a local file for the upgrade, download the firmware from the NETGEAR support page for the WC7520 wireless controller and save it to your computer. Select Maintenance > Upgrade. The Firmware Upgrade screen displays: Figure 62.
  • Page 128 ProSafe 20-AP Wireless Controller WC7520 Configure the settings as explained in the following table: Table 31. Firmware upgrade settings Setting Description TFTP, FTP, or Local File Select one of the following radio buttons to specify from which location the upgrade should occur. The screen adjusts to display the fields that are required for each upgrade location.
  • Page 129: Reboot Or Reset The Wireless Controller

    ProSafe 20-AP Wireless Controller WC7520 WARNING! During a firmware upgrade, do not try to go online, turn off the wireless controller, shut down the computer, or do anything else to the wireless controller until the wireless controller finishes rebooting! When the LED light turns off, wait a few more seconds before you do anything.
  • Page 130: Reboot Access Points

    ProSafe 20-AP Wireless Controller WC7520  To reboot the wireless controller: Select the Reboot radio button. Click Apply to save your settings. The wireless controller reboots. The reboot process is complete after several minutes when the Test LED on the front panel goes off.
  • Page 131: Manage External Storage

    ProSafe 20-AP Wireless Controller WC7520 Figure 64. As an optional step, enter the IP address, MAC address, or name of an access point in the Search Access Point by IP/MAC/Name field, and click Search. From the List of Access Points, which you can sort by building, floor, or location, specify the...
  • Page 132: Manage Remote Access

    ProSafe 20-AP Wireless Controller WC7520 Attach the external storage device to the USB port on the front panel of the wireless controller. Click Mount. The storage details become visible on the Extended Storage screen. Before you remove the external storage device from the USB port, click Unmount.
  • Page 133: Specify Session Time-Outs

    ProSafe 20-AP Wireless Controller WC7520 Table 32. SNMP settings (continued) Setting Description Read-Write Community Name Enter the community string that allows the SNMP manager to read and write the wireless controller’s MIB objects. The default setting is private. Trap Community Name Enter the community name that is associated with the IP address to receive traps.
  • Page 134: View Alerts And Events And Save The Logs

    ProSafe 20-AP Wireless Controller WC7520 View Alerts and Events and Save the Logs You can view system alerts and save system logs that are collected on the wireless controller. You can also save logs of individual access points. In the event of a problem or failure, these logs along with backed-up configuration settings could help determine the cause.
  • Page 135: View Alerts And Events

    ProSafe 20-AP Wireless Controller WC7520 Click Save, and follow the directions of you browser to save the logs to your computer. The name of the zipped log file is wnc_logs.tgz. View Alerts and Events The wireless controller lets you view the following alerts and events: •...
  • Page 136 ProSafe 20-AP Wireless Controller WC7520 Figure 70. To clear the existing log, click Clear All. Consider saving the contents before you clear the system alerts (see Save the Logs on page 134).  To view RF events: Select Maintenance > Logs & Alerts > RF Events. The RF Events screen displays: Figure 71.
  • Page 137 ProSafe 20-AP Wireless Controller WC7520 Figure 72.  To view rate-limit events: Select Maintenance > Logs & Alerts > Rate Limit. The Rate Limit screen displays: Figure 73.  To view redundancy events: Select Maintenance > Logs & Alerts > Redundancy. The Redundancy screen displays:...
  • Page 138: Manage Licenses

    Server Settings screen. Allows you to configure the server settings to import your licenses. • Registration screen. Allows to register your licenses. • Advanced screen. Lets you retrieve your licenses. This screen displays relevant information only if you have received a replacement unit from NETGEAR. Maintaining the Controller...
  • Page 139: View Your Licenses

    ProSafe 20-AP Wireless Controller WC7520 View Your Licenses  To view your licenses: Select Maintenance > License, and then click the Inventory tab. The Inventory screen displays: Figure 76. The following table explains the fields of the screen: Table 33. License inventory settings...
  • Page 140: Configure The License Server Settings

    ProSafe 20-AP Wireless Controller WC7520 Configure the License Server Settings  To configure the license server settings: Select Maintenance > License, and then click the Server Settings tab. The Server Settings screen displays: Figure 77. Configure the settings as explained in the following table: Table 34.
  • Page 141: Register Your Licenses

    ProSafe 20-AP Wireless Controller WC7520 Register Your Licenses  To register your licenses: Make sure that the wireless controller is connected to the Internet. Select Maintenance > License, and then click the Registration tab. The Registration screen displays: Figure 78.
  • Page 142: Retrieve Your Licenses

    To delete a license from the table, select its radio button, and then click Delete. Retrieve Your Licenses If NETGEAR exchanged your wireless controller for another one, your licenses no longer display on the Inventory and Registration screens. You need to retrieve your licences from the license update server.
  • Page 143: Chapter 10 Managing Stacking And Redundancy

    Managing Stacking and Redundancy This chapter includes the following sections: • Manage Stacking • Manage Redundancy Manage Stacking The wireless controller supports stacking of up to three units for management of up to 150 access points through purchased licensing (see Licenses on page 18).
  • Page 144: Configure Stacking

    ProSafe 20-AP Wireless Controller WC7520 controller. When stacking is enabled, the primary controller synchronizes the administrative user name and password and the firmware image with the secondary controllers. The master controller can push all configuration changes to the individual access points through the secondary controllers.
  • Page 145 ProSafe 20-AP Wireless Controller WC7520 Figure 80. The Stacking table shows all wireless controllers in the stack, with their IP address and role (Master or Slave). Click Add to add a wireless controller to the stack. The Add Settings pop-up window displays: Figure 81.
  • Page 146: Controller Selection List

    ProSafe 20-AP Wireless Controller WC7520 Table 36. Stacking table fields Setting Description Role The role or function that the wireless controller has in the stack: either Master or Slave. Controller The IP address of the wireless controller. Local IP The local IP address of the wireless controller in a redundancy group. If you have not configured redundancy, the local IP address for the master controller is identical to its controller IP address, and there is no local IP address for any slave controller.
  • Page 147: Manage Redundancy

    ProSafe 20-AP Wireless Controller WC7520 Figure 83. Manage Redundancy The wireless controller supports N:1 redundancy with failover. Redundancy is implemented through the use of the Virtual Router Redundancy Protocol (VRRP). Single Controller with Redundancy You can configure two controllers to form a redundancy group. You then designate one controller in the redundancy group as the primary controller and the other wireless controller as the redundant controller.
  • Page 148 ProSafe 20-AP Wireless Controller WC7520 • The VRRP ID for the relationship between the primary controller and redundant controller needs to be unique, also in relation to any other VRRP IDs that might be used for other purposes in the network.
  • Page 149: N:1 Redundancy

    ProSafe 20-AP Wireless Controller WC7520 Figure 85. The following figure shows a configuration with a primary controller and a redundant controller after a failover has occurred: Figure 86. N:1 Redundancy With N:1 redundancy, you can add one redundant controller for up to three controllers, that is, a redundancy group can consist of four controllers, one of which is a redundant controller.
  • Page 150 ProSafe 20-AP Wireless Controller WC7520 has a redundancy relationship with a primary controller. You need a unique VRRP ID for each relationship. Each controller in the redundancy group has a unique controller IP address and a unique local IP address. Local addresses remain constant so a controller can always be identified before and after a failover.
  • Page 151 ProSafe 20-AP Wireless Controller WC7520 • When a failover occurs and the redundant controller takes over for a primary controller, redundancy is no longer available for the other primary controllers in the redundancy group. • When you upgrade from a firmware release before release 2.2 to release 2.2, you need to reconfigure redundancy.
  • Page 152 ProSafe 20-AP Wireless Controller WC7520 Figure 88. The following figure shows an N:1 configuration with three primary controllers and one redundant controller after a failover has occurred: Figure 89. Managing Stacking and Redundancy...
  • Page 153: Configure Redundancy

    ProSafe 20-AP Wireless Controller WC7520 Configure Redundancy To enable redundancy, configure the redundancy settings on both the primary and redundant controllers. If you configure redundancy with two controllers, there is a single primary controller; if you configure N:1 redundancy, there are two or three primary controllers.
  • Page 154 ProSafe 20-AP Wireless Controller WC7520 Configure the VRRP IDs and local IP addresses of the controllers in the stack so they can become part of the redundancy group. The settings, including the nonconfigurable fields, are explained in the following table: Table 38.
  • Page 155 ProSafe 20-AP Wireless Controller WC7520  To modify the redundant controller after you have configured redundancy: Click Replace. The Replacing Controller Information pop-up window displays. Note: The Replace button displays onscreen only after a redundancy configuration has become active. The button is shown on Figure 88 page 152.
  • Page 156: Chapter 11 Monitoring The Wireless Network And Components

    Monitoring the Wireless Network and Components This chapter includes the following sections: • Monitor the Network • Monitor the Wireless Controller • Monitor the SSIDs • Monitor the Clients The monitoring screens display read-only status information of the network and its various components.
  • Page 157: View The Network Summary Screen

    ProSafe 20-AP Wireless Controller WC7520  To monitor the network: Select Monitor > Network. Select one of the following submenu links to display a network monitoring screen: • Summary. See View the Network Summary Screen • Usage. See View Network Usage •...
  • Page 158 ProSafe 20-AP Wireless Controller WC7520 Table 39. Network summary information (continued) Item Description Local Device IP The local IP address of a primary controller in a redundancy group. This IP address remains assigned to the primary controller and is not transferred to the secondary controller if a failover occurs.
  • Page 159: View Network Usage

    ProSafe 20-AP Wireless Controller WC7520 Table 39. Network summary information (continued) Item Description Rogue Access Points section Rogue AP current The total number of unique rogue and unmanaged neighboring access points that are detected now in the network. Rogue AP count 24hrs The total number of unique rogue and unmanaged neighboring access points that were detected over the last 24 hours in the network.
  • Page 160: View Wireless Controllers In The Network

    ProSafe 20-AP Wireless Controller WC7520 View Wireless Controllers in the Network Figure 93. The Network Controllers screen lets you monitor the stacking configuration of the wireless controllers in the network. The following table explains the fields of the Controllers table on the Network Controllers screen: Table 40.
  • Page 161: View Managed Access Points In The Network

    ProSafe 20-AP Wireless Controller WC7520 View Managed Access Points in the Network Figure 94. The Network Access Point screen lets you monitor all managed access points in the network. To view additional access points, click Next; to return to the previous access points, click Previous.
  • Page 162 ProSafe 20-AP Wireless Controller WC7520 To see details about an access point, select its corresponding radio button in the Select column of the Access Point table, and then click the Details button to display the AP Details pop-up window. Because of its seize, an example of this window is shown in two figures.
  • Page 163 ProSafe 20-AP Wireless Controller WC7520 The following table explains the fields of the AP Details window: Table 42. Network access point details information Item Description AP Info section This information is self-explanatory. Profile Info section For each security profile that is configured on the selected access point, the following information displays: Type The type of profile (802.11b/bg/ng or 802.11a/na).
  • Page 164: View Clients In The Network

    ProSafe 20-AP Wireless Controller WC7520 View Clients in the Network Figure 97. The Network Clients screen lets you monitor all clients that are connected to the network. To view additional clients, click Next; to return to the previous clients, click Previous.
  • Page 165 ProSafe 20-AP Wireless Controller WC7520 To see details about a client, select its corresponding radio button in the Select column of the Client table, and then click the Details button to display the Client Details pop-up window: Figure 98. To close the Client Details window, click Cancel.
  • Page 166: View Security Profiles In The Network

    ProSafe 20-AP Wireless Controller WC7520 Table 44. Network client details information (continued) Item Description The association ID of the client. RSSI Received signal strength indicator (RSSI) of the wireless client. Tx Power The transmit power of the wireless client. Tx Rate The transmit rate in Mbps of the wireless client.
  • Page 167: Monitor The Wireless Controller

    ProSafe 20-AP Wireless Controller WC7520 The following table explains the fields of the Profiles table on the Network Profiles screen: Table 45. Network security profiles information Item Description SSID The wireless network SSID for the security profile. Security The security mode (Open, WEP, WPA, WPA2, or WPA/WPA2) for the security profile.
  • Page 168: View The Wireless Controller Summary Screen

    ProSafe 20-AP Wireless Controller WC7520 View the Wireless Controller Summary Screen Figure 100. The following table explains the fields of the Network Status, Wireless Clients, Rogue Access Points, Network Info, and Redundancy Status tables on the Controller Summary screen: Table 46. Controller summary information...
  • Page 169 ProSafe 20-AP Wireless Controller WC7520 Table 46. Controller summary information (continued) Item Description The number of wireless clients that are connected to managed access points using security profiles configured with WPA. WPA2 The number of wireless clients that are connected to managed access points using security profiles configured with WPA2.
  • Page 170: View Wireless Controller Usage

    ProSafe 20-AP Wireless Controller WC7520 View Wireless Controller Usage Figure 101. The Controller Usage screen displays a graphic of the average rate of data traffic that was received and transmitted over the last 24 hours by all access points that are managed by the wireless controller and by the rogue access points that were detected by the wireless controller.
  • Page 171: View Clients Managed By The Wireless Controller

    ProSafe 20-AP Wireless Controller WC7520 The Controller Access Point screen lets you monitor all access points that are managed by the wireless controller. To view additional access points, click Next; to return to the previous access points, click Previous. Because this screen is almost identical to the Network Access...
  • Page 172: View Rogue Access Points Managed By The Wireless Controller

    ProSafe 20-AP Wireless Controller WC7520 View Rogue Access Points Managed by the Wireless Controller Figure 104. The Controller Rogue AP screen lets you monitor all rogue access points that were detected by the wireless controller. To view additional rogue access points, click Next; to return to the previous rogue access points, click Previous.
  • Page 173: View Security Profiles Managed By The Wireless Controller

    ProSafe 20-AP Wireless Controller WC7520 To see the location of the rogue access point on a floor map, select the access point’s radio button (in the Select column), and then click the Locate button. View Security Profiles Managed by the Wireless Controller Figure 105.
  • Page 174: View Dhcp Leases Provided By The Wireless Controller

    ProSafe 20-AP Wireless Controller WC7520 View DHCP Leases Provided by the Wireless Controller Figure 106. The DHCP Leases screen displays the current DHCP clients that have been allocated IP addresses by the DHCP server on the wireless controller. To view additional DHCP leases, click Next;...
  • Page 175: View Captive Portal Users Managed By The Wireless Controller

    ProSafe 20-AP Wireless Controller WC7520 View Captive Portal Users Managed by the Wireless Controller Figure 107. The Controller Captive Portal Users screen displays the current guests that are logged in to a captive portal on the access points that are managed by the wireless controller. The Guest List table shows the IP address and email address of the logged-in guests.
  • Page 176: Monitor The Clients

    ProSafe 20-AP Wireless Controller WC7520 The Active SSID table on the WLAN SSID Mapping screen lets you monitor all access points that function in an SSID. To view additional access points, click Next; to return to the previous access points, click Previous. Because this table is almost identical to the...
  • Page 177: View Blacklisted Clients

    ProSafe 20-AP Wireless Controller WC7520 To see details about a client, select its corresponding radio button in the Select column of the Client table, and then click the Details button to display the Client Details pop-up window. Because this screen is identical to the Client Details pop-up window that you can access from...
  • Page 178: Chapter 12 Troubleshooting

    Troubleshooting This chapter includes the following sections: • Troubleshoot Basic Functioning • Troubleshoot the Web Management Interface • Troubleshoot a TCP/IP Network Using the Ping Utility • Use the Factory Default Button to Restore Default Settings • Problems with Date and Time •...
  • Page 179: Test Led Never Turns Off

    ProSafe 20-AP Wireless Controller WC7520 If the error persists, you have a hardware problem and should contact NETGEAR technical support. Test LED Never Turns Off When the wireless controller is powered on, the Test LED turns on for approximately 2 minutes and then turns off when the wireless controller has completed its initialization.
  • Page 180: Internet Browser

    ProSafe 20-AP Wireless Controller WC7520 Note: If your PC’s IP address is shown as 169.254.x.x: Windows and Mac operating systems generate and assign an IP address if the computer cannot reach a DHCP server. These autogenerated addresses are in the range of 169.254.x.x. If your IP address is in this range, check the connection from the PC to the wireless controller and reboot your PC.
  • Page 181: Troubleshoot A Tcp/Ip Network Using The Ping Utility

    ProSafe 20-AP Wireless Controller WC7520 Troubleshoot a TCP/IP Network Using the Ping Utility Most TCP/IP terminal devices and routers contain a ping utility that sends an echo request packet to the designated device. The device then responds with an echo reply. You can easily troubleshooting a TCP/IP network by using the ping utility in your computer.
  • Page 182: Use The Factory Default Button To Restore Default Settings

    ProSafe 20-AP Wireless Controller WC7520 Use the Factory Default Button to Restore Default Settings If you can access the wireless controller, you can use the Reboot/Reset Controllers screen (select Maintenance > Backup/Restore) to perform a soft or hard reset (see...
  • Page 183: Problems With Access Points

    ProSafe 20-AP Wireless Controller WC7520 Problems with Access Points Discovery Problems If the wireless controller does not discover any or all access points, check the following: • Make sure that the wireless controller is connected to the LAN (see LAN Port LEDs Not on page 179).
  • Page 184: Use The Diagnostic Tools On The Wireless Controller

    ProSafe 20-AP Wireless Controller WC7520 Use the Diagnostic Tools on the Wireless Controller As part of the diagnostics functions on the wireless controller, you can ping a managed access point from the wireless controller or trace its route from the wireless controller.
  • Page 185 ProSafe 20-AP Wireless Controller WC7520 Figure 113. Troubleshooting...
  • Page 186: Appendix A Factory Default Settings And Technical Specifications

    Factory Default Settings and Technical Specifications You can restore the wireless controller to its factory default settings on the Reboot/Reset Controllers screen (see Reboot or Reset the Wireless Controller on page 129) or by using the Factory Defaults button on the rear panel (see Use the Factory Default Button to Restore Default Settings on page 182).
  • Page 187 ProSafe 20-AP Wireless Controller WC7520 Table 51. Technical and physical specifications (continued) Feature Default Setting Operating temperatures and humidity 0° to 45° C (32° to 113° F) 90% maximum relative humidity Storage temperatures and humidity –20° to 70° C (–4° to 58° F)
  • Page 188 ProSafe 20-AP Wireless Controller WC7520 Table 52. Password requirements (continued) Web management interface path User type Restrictions Section in this manual Allowed Length data encryption characters Advanced Profile: Shared Key 64-bit WEP Hexadecimal 10 fixed 1. Configuration > Profile >...
  • Page 189 This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter. FCC Declaration Of Conformity We, NETGEAR, Inc., 350 East Plumeria Drive, San Jose, CA 95134, declare under our sole responsibility that the ProSafe 20-AP Wireless Controller WC7520 complies with Part 15 of FCC Rules.
  • Page 190: European Union

    Canadian Department of Communications Radio Interference Regulations This digital apparatus, ProSafe 20-AP Wireless Controller WC7520, does not exceed the Class B limits for radio-noise emissions from digital apparatus as set out in the Radio Interference Regulations of the Canadian Department of Communications.
  • Page 191 ProSafe 20-AP Wireless Controller WC7520 GPL License Agreement GPL may be included in this product; to view the GPL license agreement go to ftp://downloads.netgear.com/files/GPLnotice.pdf. For GNU General Public License (GPL) related information, please visit http://support.netgear.com/app/answers/detail/a_id/2649. Notification of Compliance...
  • Page 192 Index Numerics tracing a route troubleshooting 2.4 GHz and 5 GHz channels TX power, controlling 802.11 wireless modes automatically 802.1Q VLAN header manually viewing in the network on the wireless controller AC power socket security profiles access point groups statistics assignment VLAN settings basic (or default)
  • Page 193 ProSafe 20-AP Wireless Controller WC7520 basic access point group basic service set identifier (BSSID) data encryption basic settings, description configuring beacon interval supported methods best effort QoS queue data rate blacklisted clients, viewing data sheet bottom label date, troubleshooting broadcasting SSID...
  • Page 194 ProSafe 20-AP Wireless Controller WC7520 licenses number and types required guard interval redundancy group – guest access registering and managing viewing GUI, troubleshooting load balancing load balancing logs, viewing location, placement hard reset lock, Kensington heat map logs high traffic load, preventing channel allocation...
  • Page 195 ProSafe 20-AP Wireless Controller WC7520 power socket, AC RSSI (received signal strength indication) preamble type RTS threshold preventing channel allocation primary controller, stacking product label scheduling profile groups. See access point groups. channel allocation profiles. See security profiles. firmware updates...
  • Page 196 ProSafe 20-AP Wireless Controller WC7520 Test LED VRRP (Virtual Router Redundancy Protocol) TFTP server, firmware upgrade time and time zone configuring WC7510L licenses troubleshooting web management interface, troubleshooting TKIP (Temporal Key Integrity Protocol) WEP encryption tracing a route WEP key requirements...

Table of Contents