Motorola RFS7000GR Installation Manual

Motorola RFS7000GR Installation Manual

Series rf switch

Advertisement

Motorola Solutions RFS7000GR Series RF Switch
FIPS Installation Guide

Advertisement

Table of Contents
loading

Summary of Contents for Motorola RFS7000GR

  • Page 1 Motorola Solutions RFS7000GR Series RF Switch FIPS Installation Guide...
  • Page 3: Table Of Contents

    Contents 1. Introduction ........................1-1 Package Contents ........................1-1 Document Conventions ......................1-1 Warnings ..........................1-2 Site Preparation ........................1-2 2. Specifications ......................1-4 Physical Specifications ......................1-4 Power Cord Specifications ....................... 1-4 3. LED Codes ........................1-5 System Status LEDs ......................... 1-5 RJ-45 Gigabit Ethernet LEDs ....................
  • Page 4 Contents Resetting the Wireless Controller RFS7000’s Password ............1-45 8. Regulatory Information .................... 1-46 Waste Electrical and Electronic Equipment (WEEE) .............. 1-48 9. Motorola Solutions’ Enterprise Mobility Support Center ........1-50 10. Motorola Solutions, Inc. End-User License Agreement ........1-51...
  • Page 5: Introduction

    Introduction The Motorola Solutions RFS7000 Series RF Switch is a high-performance member of Motorola Solutions’ Wireless Switch family. The RFS7000 Series RF Switch provides centralized Wireless LAN (WLAN) configuration and management by coalescing a network “intelligence” previously spread across physically distributed access points. By replacing access points with simpler access ports (or “thin”...
  • Page 6: Warnings

    Attach only approved power cords to the device. • Motorola Solutions strongly recommends the use of an Uninterruptible Power Supply (UPS) that • supports the RFS7000 Series RF Switch power rating. Not using a UPS can result in data loss or equipment damage due to a power surge or power failure.
  • Page 7 Installation Guide Verify that the RFS7000 Series RF Switch is powered through an Uninterruptible Power Supply • (UPS).
  • Page 8: Specifications

    Motorola Solutions RFS7000GR Series RF Switch Secure Installation Guide Specifications 2.1 Physical Specifications Width 440mm (17.32 in) Height 44.45mm (1.75 in) Depth 390.8mm (15.38 in) Weight 6.12 Kg (13.5 lbs) ° ° Operating Temperature C - 40 Operating Humidity 5% - 85% RH, non-condensing...
  • Page 9: Led Codes

    Installation Guide LED Codes The RFS7000 RF Switch has four vertically-stacked LEDs on its front panel. Each of the switch’s Gigabit Ethernet ports have two status LEDs. These LEDs display two colors (green & amber), and three lit states (solid, blinking, and off). The following tables decode the combinations of LED colors and states for the System Status LEDs and the Gigabit Ethernet LEDs.
  • Page 10 Motorola Solutions RFS7000GR Series RF Switch Secure Installation Guide 3.1.2 Switch Status (Primary System) System Status 1 LED System Status 2 LED Event Power off Green Solid No Redundancy Feature Enabled Redundancy Feature Enabled Green Solid Green Solid Actively Adopting Access Ports...
  • Page 11: Temperature Status Led

    Installation Guide 3.1.4 Fan LED Fan LED Event System Off / POST Start Green Blinking POST in Process Green Solid All System Fans Normal Operation Redundant Cooling Failure Amber Solid System Operational System Cooling Failure Amber Blinking System will be held in reset until the issue is resolved 3.1.5 Temperature Status LED Temperature LED...
  • Page 12: Gigabit Ethernet Leds

    Motorola Solutions RFS7000GR Series RF Switch Secure Installation Guide 3.2 RJ-45 Gigabit Ethernet LEDs Port Port speed status sym_006 Port Port status speed 3.2.1 RJ-45 Port Speed LED Port Speed LED Event 10 Mbps Green Solid 100 Mbps Green Blinking...
  • Page 13: Sfp Gigabit Ethernet Leds

    Installation Guide 3.3 SFP Gigabit Ethernet LEDs Port Port speed status 3.3.1 SFP Port Speed LED Port Speed LED Event Green Blinking 1000 Mbps Amber Blinking Module or Tx/Rx Fault Loss 3.3.2 SFP Port Status LED Port Status LED Event No Link or Administratively shut down Green Solid Link present / Operational...
  • Page 14: Out Of Band Management Port Leds

    Motorola Solutions RFS7000GR Series RF Switch Secure Installation Guide 3.4 Out of Band Management Port LEDs Port Port speed status sym_ 3.4.1 Out of Band Management Port Speed LED Port Speed LED Event 10 Mbps Green Solid 100 Mbps Amber Blinking Port Fault 3.5 Out of Band Management Port Status LED...
  • Page 15: Hardware Setup

    Installation Guide Hardware Setup 4.1 Cabling Information Console Gigabit Gigabit Gigabit Gigabit Out-of-Band Ethernet Ethernet Management Port 1 Port 1 Port 3 Port 3 USB 1 Compact Flash Gigabit Gigabit Gigabit Gigabit USB 2 Ethernet Ethernet sym_005 Port 2 Port 2 Port 4 Port 4 NOTE...
  • Page 16: Gigabit Ethernet On The Rfs7000 Rf Switch

    The RFS7000 RF Switch has four RJ-45 Gigabit Ethernet ports and four Gigabit SFP (fiber optic) ports. Using the RJ-45 ports requires connecting a Category-6 Ethernet cable to the port. To use the Gigabit SFP ports, first install the SFP Modules (Motorola Solutions Part Number: Fiber-3000-1S-WWR).
  • Page 17: Installing Gigabit Ethernet Sfps

    Installation Guide 4.2.1 Installing Gigabit Ethernet SFPs Open the bail on the transceiver. Open bail to insert or remove SFP transceiver Insert each of the SFP transceivers into the corresponding ports on the switch.
  • Page 18 Motorola Solutions RFS7000GR Series RF Switch Secure Installation Guide Once the SFP transceivers are properly seated in their ports, close the bails to lock the transceivers in place. Open bail to insert or remove SFP transceiver sym_019...
  • Page 19 Installation Guide Insert the fiber optic cables into the installed transceivers.
  • Page 20: Rack Mount Instructions

    Motorola Solutions RFS7000GR Series RF Switch Secure Installation Guide 4.3 Rack Mount Instructions To install the RFS7000 Series RF Switch in a rack: The rack mounting brackets are installed at the factory. No additional steps are needed. Attach the brackets to the rack using screws appropriate for your rack’s mounting holes.
  • Page 21: Supplying Power To The Rfs7000 Series Rf Switch

    WARNING! An improper shutdown can render the RFS7000 Series RF Switch inoperable such that it could require service by Motorola Solutions Support. Do not remove AC power without first following the shutdown procedure. An abrupt loss of power can corrupt the information stored on...
  • Page 22: Verifying The Installation

    Motorola Solutions RFS7000GR Series RF Switch Secure Installation Guide 4.6 Verifying the Installation View the LEDs on the front panel of the RFS7000 RF Switch to ensure the device is functioning properly. The normal LED pattern follows this path: • During the Power On Self Test (POST), the System 1 and System 2 LEDs both blink green.
  • Page 23: Firmware Upgrade

    Installation Guide Firmware Upgrade The firmware upgrade through GUI has the following steps: 1. Select a target device from the left-hand side of the UI. 2. Click the down arrow next to the device to view a set of operations that can be performed on the selected device.
  • Page 24 Motorola Solutions RFS7000GR Series RF Switch Secure Installation Guide 7. Define the user name used to access SFTP server. 8. Specify the user account password to access SFTP server. 9. Specify the path to the firmware file. Enter the complete relative path to the file on the server.
  • Page 25: Secure Installation Procedure

    Installation Guide Secure Installation Procedure This installation procedure explains how to login to the Command Line Interface for initial configuration. Through this process the wireless switch is configured with a set of default values for specific features. These default values should be changed in order to maintain the security of the wireless users and access to the switch.
  • Page 26 Motorola Solutions RFS7000GR Series RF Switch Secure Installation Guide 1. Configure the IP address and default gateway (if applicable) RFS7000#sh version RFS7000 version 4.1.1.0-003GR Copyright (c) 2006-2009 Motorola, Inc. Booted from primary. Switch uptime is 0 days, 0 hours 04 minutes CPU is RMI XLR V0.4...
  • Page 27 Installation Guide 2. Ping the SFTP server to make sure it is reachable. RFS7000#ping 172.16.1.200 PING 172.16.1.200 (172.16.1.200): 100 data bytes 128 bytes from 172.16.1.200: icmp_seq=0 ttl=128 time=2.8 ms 128 bytes from 172.16.1.200: icmp_seq=1 ttl=128 time=0.4 ms 128 bytes from 172.16.1.200: icmp_seq=2 ttl=128 time=0.4 ms 128 bytes from 172.16.1.200: icmp_seq=3 ttl=128 time=0.5 ms 128 bytes from 172.16.1.200: icmp_seq=4 ttl=128 time=0.4 ms --- 172.16.1.200 ping statistics ---...
  • Page 28 Motorola Solutions RFS7000GR Series RF Switch Secure Installation Guide ....................Version of firmware update file is 5.4.10.0-037GB Removing unneeded files from flash:/crashinfo directory FPGA firmware version is already at version 3_29, no need to upgrade Power Supervisor updates are handled via a patch file...
  • Page 29 The system is going down NOW !! % Connection is closed by administrator! Please stand by while rebooting the system. Restarting system. BootOS (c) 2004-2012 Motorola Solutions, Inc. All rights reserved. RFS7000 version 5.4.10.0-037GB Booting from NAND image2 0| ddr2.c:691 configure_ddr2 Clamping DIMM 0 speed at 533MHz 0| ddr2.c:829 configure_ddr2 Using SPD-derived 533MHz DDR...
  • Page 30 Motorola Solutions RFS7000GR Series RF Switch Secure Installation Guide 3DES test...successful. AES test...successful. XLR crypto test successful. Loading runtime image 2 ..........Welcome. restoring /etc2/./ppp restoring /etc2/./ppp/hsdpa_apn_set restoring /etc2/./dhclient.conf restoring /etc2/./system_options restoring /etc2/./dhclient.conf.template restoring /var2/./lib/dpd restoring /var2/./state restoring /var2/./state/dhcp restoring /flash/./cache restoring /flash/./archived_logs...
  • Page 31 Installation Guide Wed Mar 6 07:06:42 2013 2. AES encryption/ decryption...Successful Wed Mar 6 07:06:43 2013 3. RSA key generation and encryption/ decryption...successful Wed Mar 6 07:06:43 2013 4. 3DES-CBC encryption/ decryption...successful Wed Mar 6 07:06:48 2013 5. DSA key generation and signature validation...successful Wed Mar 6 07:06:48 2013...
  • Page 32 Motorola Solutions RFS7000GR Series RF Switch Secure Installation Guide Software fallback feature is enabled RFS7000 release 5.4.10.0-037GB This Device Is Running In FIPS Mode Attention: This is a protected and private wireless system. No un-authorized access is allowed. You must have proper rights to access and manage this system from authorized personnel.
  • Page 33 Installation Guide 7. Press enter and login with username/password as admin/0umP.s45fIOD6 and change the password. rfs7000-380842 login: rfs7000-380842 login: admin Password: Mar 06 07:09:37 2013: %AUTHPRIV-4-WARNING: pluto[1417]: including NAT-Traversal patch (Version 0.6c) Mar 06 07:09:37 2013: %AUTHPRIV-4-WARNING: pluto[1417]: Changing to directory '/var/etc/ipsec.d/crls' Mar 06 07:09:37 2013: %AUTHPRIV-4-WARNING: pluto[1417]: listening for IKE messages Mar 06 07:09:37 2013: %AUTHPRIV-4-WARNING: pluto[1417]: adding...
  • Page 34 Motorola Solutions RFS7000GR Series RF Switch Secure Installation Guide Password for user 'admin' changed successfully. Please write this password change to memory ("write memory") to make the change persistent. [G]rfs7000-380842>en [G]rfs7000-380842#wr mem [OK] [G]rfs7000-380842# 8. Interface specific configs are retained while upgrading from 4.X to 5.X. Other configurations can be converted with the help of configuration convertor tool.
  • Page 35: Upgrading The Wireless Controller From 4.X Non-Fips To 5.X Fips

    Login to the wireless controller. RFS7000#show version RFS7000 version 4.4.2.0-001R MIB=01a Copyright (c) 2006-2011 Motorola Solutions, Inc. Booted from primary. switch uptime is 0 days, 0 hours 25 minutes CPU is RMI XLR V0.4 255484 kB of on-board RAM...
  • Page 36 Motorola Solutions RFS7000GR Series RF Switch Secure Installation Guide RFS7000#upgrade sftp://root:symbol@172.16.1.200/RFS7000- 5.4.0.0-047R.img Running from partition /dev/mtdblock6, partition to update is / dev/mtdblock7 Validating image file header Making file system Extracting files (this can take some time)................................., Version of firmware update file is 5.4.0.0-047R...
  • Page 37 MD5 signed FIPS image. Logon to the wireless controller. rfs7000-1ACEAB#show version RFS7000 version 5.4.0.0-047R Copyright (c) 2004-2012 Motorola Solutions, Inc. All rights reserved. Booted from secondary rfs7000-1ACEAB uptime is 0 days, 00 hours 27 minutes CPU is RMI XLR V0.4...
  • Page 38 Motorola Solutions RFS7000GR Series RF Switch Secure Installation Guide Control C disabled Version of firmware update file is 5.4.10.0-041GR Can not upgrade Non FIPS-CC image 5.4.0.0-047R with FIPS-CC image 5.4.10.0-041GR Removing unneeded files from flash:/crashinfo directory FPGA firmware version is already at version 3_29, no need to...
  • Page 39 Installation Guide Next Boot : Primary Software Fallback : Enabled rfs7000-1ACEAB# rfs7000-1ACEAB#reload NOTE After reloading, the upgraded device will boot with the 5.X FIPS image.
  • Page 40: Command Line Interface Login Procedure For The Wireless Switch

    Motorola Solutions RFS7000GR Series RF Switch Secure Installation Guide 6.3 Command Line Interface Login Procedure for the Wireless Switch The following steps explains the CLI login procedure: 1. Please press “Enter” to activate this console. login as: admin RFS7000 release 5.4.10.0-003GD...
  • Page 41 Installation Guide 4. Execute show version command to view the firmware version. [G]rfs7000-37FABE#show version RFS7000 version 5.4.10.0-003GD Copyright (c) 2004-2012 Motorola Solutions, Inc. All rights reserved. Booted from primary rfs7000-37FABE uptime is 29 days, 18 hours 13 minutes CPU is RMI XLR V0.4...
  • Page 42: Changing Default Wireless Switch Parameters

    Motorola Solutions RFS7000GR Series RF Switch Secure Installation Guide 6.4 Changing Default Wireless Switch Parameters The various default parameters which must be changed to operate the wireless switch in a secured operational mode are listed below: 1. Country code must be set to the appropriate country in order to have proper channel of operations.
  • Page 43 Export this certificate request to an external machine/server where the request can be submitted to the Certificate Authority as shown below. [G]rfs7000-37FABE#crypto pki export request generate-rsa-key K subject-name motoFIPS US CA SJ Motorola WLAN sftp:// root:symbol@172.16.1.1/K Successfully generated and exported certificate request [G]rfs7000-37FABE# e.
  • Page 44 Motorola Solutions RFS7000GR Series RF Switch Secure Installation Guide [G]rfs7000-37FABE(config-device-00-15-70-37-FA-BE)trustpoint radius-server W [G]rfs7000-37FABE(config-device-00-15-70-37-FA-BE)#end [G]rfs7000-37FABE# h. Restart the RADIUS server. [G]rfs7000-37FABE(config-device-00-15-70-37-FA-BE)#use radius-server-policy TEST Trustpoints to be used for RADIUS Server can be configured with 'trustpoint' command in device context [G]rfs7000-37FABE(config-device-00-15-70-37-FA-BE)# [G]rfs7000-37FABE(config-device-00-15-70-37-FA-BE)#commit...
  • Page 45 Installation Guide [G]rfs7000-37FABE(config-device-00-15-70-37-FA-BE)#comm wr [OK] [G]rfs7000-37FABE(config-device-00-15-70-37-FA-BE)# [G]rfs7000-37FABE(config-device-00-15-70-37-FA-BE)#end [G]rfs7000-37FABE# [G]rfs7000-37FABEAug 06 02:06:45 2012: ap7131-39F38A : %RADCONF-6-RADIUSDSTART: Radius Server Started Aug 06 02:06:45 2012: %DAEMON-6-INFO: radiusd[1954]: Core dumps are enabled. Aug 06 02:06:46 2012: %DAEMON-6-INFO: radiusd[1954]: Loaded virtual server <default> Aug 06 02:06:52 2012: %DAEMON-6-INFO: radiusd[1954]: Ready to process requests.
  • Page 46: Basic Configuration

    Motorola Solutions RFS7000GR Series RF Switch Secure Installation Guide Basic Configuration 7.1 Configuring Browser for RFS7000 An RFS7000 model is compliant with the FIPS140-2 standard. The RFS7000 is only accessible using browsers that support the TLS 1.0 protocol. The RFS7000 is not accessible by browsers supporting the SSL 2.0 or SSL 3.0 protocols.
  • Page 47: Configuring The Wireless Controller Rfs7000

    Installation Guide 7.1.2 Accessing the RFS7000 Using Mozilla Firefox To define the browser settings needed to access the RFS7000 using Mozilla Firefox: 1. Open the Mozilla Firefox browser and open the Tools > Options menu. 2. Select the Advanced tab, then select either the Encryption Security tab (they differ...
  • Page 48 Motorola Solutions RFS7000GR Series RF Switch Secure Installation Guide Remember, Internet Explorer and Mozilla Firefox require unique settings be defined in order for the browser to access the RFS7000 GUI applet. For instructions on configuring these browser settings, see Configuring Browser for RFS7000 on page -42.
  • Page 49: Resetting The Wireless Controller Rfs7000'S Password

    Wireless Controller’s security, to their default settings. Only an installation professional should reset the Controller’s password and promptly define a new restrictive password. . NOTE To contact Motorola Support in the event of a password reset requirement, go to http://supportcentral.motorola.com. CAUTION Only a qualified installation professional should set or restore the Wireless Controller in the event of a password reset.
  • Page 50: Regulatory Information

    Motorola Solutions’ Enterprise Mobility Support Center on page -50 All Motorola Solutions devices are designed to be compliant with rules and regulations in locations they are sold and will be labeled as required. Any changes or modifications to Motorola Solutions equipment, not expressly approved by Motorola Solutions, could void the user’s authority to operate the equipment.
  • Page 51 Cet appareil numérique de la classe A est conforme à la norme NMB-003 du Canada. Marking and European Economic Area (EEA) Statement of Compliance Motorola Solutions, Inc., hereby declares that this device is in compliance with all the applicable Directives, 89/336/EEC, 73/23/EEC. A Declaration of Conformity may be obtained from http://www.motorolasolutions.com...
  • Page 52: Waste Electrical And Electronic Equipment (Weee)

    Bulgarish: За клиенти от ЕС: След края на полезния им живот всички продукти трябва да се връщат на Motorola Solutions за рециклиране. За информация относно връщането на продукти, моля отидете на адрес: http:// www.motorolasolutions.com/recycling/weee.
  • Page 53 Slovenski: Za kupce v EU: vsi izdelki se morajo po poteku življenjske dobe vrniti podjetju Symbol za reciklažo. Za informacije o vraèilu izdelka obišèite: http://www.motorolasolutions.com/recycling/weee. Svenska: För kunder inom EU: Alla produkter som uppnått sin livslängd måste returneras till Motorola Solutions för återvinning. Information om hur du returnerar produkten finns på http://www.motorolasolutions.com/recycling/weee.
  • Page 54: General Information

    • Model number or product name • Software type and version number Motorola Solutions responds to calls by email, telephone or fax within the time limits set forth in support agreements. If you purchased your Enterprise Mobility business product from a Motorola Solutions business partner, contact that business partner for support.
  • Page 55: Motorola Solutions, Inc. End-User License Agreement

    ANOTHER PERSON OR ANY OTHER LEGAL ENTITY, YOU REPRESENT AND WARRANT THAT YOU HAVE THE AUTHORITY TO BIND THAT COMPANY, PERSON OR ENTITY. LICENSE GRANT. Subject to the terms of this Agreement, Motorola Solutions, Inc. and/or its subsidiaries ("Licensor") hereby grants Licensee a limited, personal, non-sublicensable, non-transferable, nonexclusive license to use the software that Licensee is about to download or install and the documentation that accompanies it (collectively, the "Software") for Licensee's personal use in connection with hardware produced by Licensor and only in accordance...
  • Page 56 Motorola Solutions RFS7000GR Series RF Switch Secure Installation Guide FEES; SUPPORT AND UPGRADES. Licensor may, at Licensor's sole option, provide support services related to the Software ("Support Services"). Nothing in this Agreement grants Licensee any right to receive any Support Services.
  • Page 57 "Restricted Rights" as provided for in FAR, 48 CFR 52.227-14 (JUNE 1987) or DFAR, 48 CFR 252.227- 7013 (OCT 1988), as applicable. The "Manufacturer" for purposes of these regulations is Motorola Solutions, Inc., One Symbol Plaza, Holtsville, NY 11742.
  • Page 58 Motorola Solutions RFS7000GR Series RF Switch Secure Installation Guide...
  • Page 59 MOTOROLA, MOTO, MOTOROLA Solutions and the Stylized M logo are trademarks or registered trademarks of Motorola Trademark Holdings, LLC and are used under license. All other trademarks are a properties of their owners. ©2013 Motorola Solutions, Inc. All rights reserved.

Table of Contents