Colubris Networks CN3000 Manuals

Manuals and User Guides for Colubris Networks CN3000. We have 1 Colubris Networks CN3000 manual available for free PDF download: Administrator's Manual

Colubris Networks CN3000 Administrator's Manual (418 pages)

Brand: Colubris Networks | Category: Wireless Access Point | Size: 10.55 MB

Table of Contents
3
Chapter 1 Introduction

9
- How to Use this Guide
  10
- Feature Summary
  11
  - Wireless Radio
    11
  - Compatibility
    11
  - Networking
    11
  - Security
    12
  - Authentication and Accounting
    12
  - Management
    12
  - Interfaces
    12
  - Operating Environment
    12
  - Regulatory Approvals
    12
- Package Contents
  13
- Technical Support
  13
- Syntax Conventions
  14
- How It Works
  15
Chapter 2 How It Works

15
- Integrated Access Point and Access Controller
  16
- Scalable Solution
  17
  - Simple Installation
    17
  - Multi-Site Installation
    18
  - Multi-Area Installation
    19
- The Public Access Interface
  20
  - Logging in
    20
  - Customizing the Public Access Interface
    21
- Connecting Customers
  22
  - Security
    22
  - Proxy Server Support
    22
  - Email Redirection
    23
  - Quotas
    23
- Customer Authentication
  24
  - Location Aware
    24
  - Authentication Methods
    24
- Management Tool
  26
  - Management Station
    26
  - Management Scenarios
    26
  - Starting the Management Tool
    27
  - Remote Management
    27
  - Security
    28
- Wireless Coverage
  30
- Address Allocation
  37
  - Default Addresses
    37
  - Addressing Options
    37
  - Host Name
    37
  - Connecting to a Wired LAN
    38
  - Connecting to the Internet
    39
  - Configuring the Dhcp Server
    39
- The RADIUS Server
  40
  - CN3000 Authentication
    40
  - Customer Authentication
    40
  - Administrator Authentication
    40
  - Connecting to a RADIUS Server
    40
  - More Information
    41
- Firewall
  42
  - Firewall Presets
    42
  - Firewall Configuration
    43
  - Customizing the Firewall
    44
- Network Address Translation
  45
  - NAT Overview
    45
  - NAT Security and Static Mappings
    45
  - One-To-One NAT
    46
  - Colubris Intercept
    46
  - NAT Example
    47
- Secure Remote Connectivity
  49
  - Important
    49
- Local Mode
  50
  - Enabling Local Mode
    50
  - Defining Customer Accounts
    51
  - Customizing Local Mode
    51
- Centralized Mode
  52
- Wireless Bridging
  53
  - RF Extension
    53
  - Building-To-Building Connections
    53
- Firmware Management
  55
  - Manual Update
    55
  - Scheduled Install
    55
  - Using Curl
    56
- Configuration Management
  57
  - Manual Management
    57
  - Using Curl
    58
Chapter 3 Installation

61
- Anatomy
  62
  - Status Lights
    62
  - Reset Button
    63
- Step 1: Preparation
  64
  - Important
    64
  - Seating the Wireless Card
    64
  - Installing Rubber Feet
    64
  - Mounting on a Wall or Ceiling
    65
- Step 2: Connect Power
  66
- Step 3: Configure the CN3000
  66
Chapter 4 Scenarios

67
- Before You Begin
  68
  - Contents
    68
- Scenario 1A: Hotspot with Internet Access (Local Mode)
  69
  - How It Works
    69
  - Configuration Roadmap
    69
- Scenario 1B: Custom Public Access Interface (Local Mode)
  72
  - How It Works
    72
  - Configuration Roadmap
    73
- Scenario 2A: Hotspot with Internet Access (RADIUS)
  75
  - How It Works
    75
  - Configuration Roadmap
    76
- Scenario 2B: Custom Public Access Interface (RADIUS)
  79
  - How It Works
    79
  - Configuration Roadmap
    79
- Scenario 2C: Supporting 802.1X/Wpa Customers
  80
  - How It Works
    80
  - Configuration Roadmap
    80
- Scenario 3: Centralized Authentication
  81
  - How It Works
    81
  - Configuration Roadmap
    82
- Scenario 4: Wholesaling with GRE
  84
  - How It Works
    84
  - Configuration Roadmap
    85
- Scenario 5: Wholesaling with Vpns
  87
  - How It Works
    87
  - Configuration Roadmap
    87
- Scenario 6: Public/Private Access with Vlans
  90
  - How It Works
    90
  - Configuration Roadmap
    91
Chapter 5 Activating the Public Access Interface

95
- Overview
  96
  - Important
    96
  - Local Mode
    96
  - Supporting Pdas
    96
- Step 1: Setting up the CN3000 RADIUS Client
  97
  - Configuration Procedure
    97
  - Profile Name
    98
  - RADIUS Profile Settings
    98
  - Primary RADIUS Server
    99
  - Secondary RADIUS Server
    99
- Step 2: Setting up CN3000 Authentication
  100
  - Configuration Procedure
    100
  - CN3000 RADIUS Authentication
    101
- Step 3: Setting up Customer Authentication
  102
  - Configuration Procedure
    102
  - HTML-Based User Logins
    103
- Step 4: Setting up the RADIUS Server
  104
  - Minimum Setup
    104
  - More Information
    104
- Step 5: Testing the Public Access Interface
  105
Chapter 6 Customizing the Public Access Interface

107
- Overview
  108
  - Common Configuration Tasks
    108
- Site Map
  109
  - Internal Pages
    110
  - External Pages
    112
  - How It Works
    113
- Customizing the Internal Pages
  114
  - Creating New Internal
    114
  - Important Restrictions
    114
  - Loading New Internal
    114
  - Examples
    116
- Customizing the External Pages
  117
  - Creating New External
    117
  - Activating New External
    117
  - Examples
    119
- Using a Remote Login Page
  121
  - Activating a Remote Login Page
    121
  - How It Works
    123
  - Security Issues
    123
  - Example
    124
- Location-Aware Authentication
  125
  - How It Works
    125
  - Example
    125
  - Security
    126
  - Configuration
    127
- Ipass Support
  128
- ASP Functions
  129
  - Errors
    129
  - Radius
    129
  - Page Urls
    130
  - Session Status and Properties
    130
  - Session Quotas
    133
  - Ipass Support
    134
- Message File
  136
- Source Code for the Internal Pages
  138
  - Login Page
    138
  - Transport Page
    140
  - Session Page
    140
  - Fail Page
    142
Chapter 7 Customizing CN3000 and Customer Settings

143
- Overview
  144
  - Important
    144
- Standard RADIUS Attributes
  145
- Colubris Networks Vendor-Specific Attributes
  146
  - Attribute Value Summary
    146
  - RADIUS Limitations
    147
  - Terminate-Acct-Cause Values
    147
- Creating a RADIUS Client Entry for the CN3000
  149
  - Configuration Settings
    149
  - Managing Shared Secrets
    149
- Creating a Profile for the CN3000 on the RADIUS Server
  150
  - Standard RADIUS Attributes
    150
  - Colubris-Avpair Attribute
    152
  - Access Lists
    153
  - Custom SSL Certificate
    158
  - Configuration File
    159
  - MAC Authentication
    160
  - Default User Idle Timeout
    160
  - Default User Session Timeout
    161
  - Default User SMTP Server
    161
  - Default User Interim Accounting Update Interval
    161
  - Default User One-To-One NAT
    162
  - Default User Quotas
    162
  - Ipass Login Url
    163
- Creating Customer Profiles on the RADIUS Server
  164
  - Supported RADIUS Attributes
    164
  - Colubris-Avpair Attribute
    167
  - Group Name
    168
  - NAT Port Range
    168
  - Ssid
    168
  - Access List
    168
  - Colubris-Intercept
    169
  - One-To-One NAT
    169
  - Quotas
    169
  - SMTP Redirection
    170
  - VLAN Support
    171
- Creating Administrator Profiles on the RADIUS Server
  172
  - Supported RADIUS Attributes
    172
Chapter 8 NOC Authentication

173
- Main Benefits
  174
- Activating a Remote Login Page with NOC Authentication
  175
  - Colubris-Avpair Value String
    175
  - Placeholders
    175
- How It Works
  177
- Addressing Security Concerns
  178
  - Securing the Remote Login Page
    178
  - Authenticating with the Login Application
    178
  - Authenticating the CN3000
    178
  - NOC Authentication List
    178
- Setting up the Certificates
  179
  - Install Certificates on the Web Server
    179
  - Define Attributes
    179
  - Install a Certificate on CN3000
    179
- Authenticating Customers
  180
  - Example 1
    180
  - Example 2
    180
- Simple NOC Authentication Example
  182
  - Configuration Procedure
    182
- Forcing Customer Logouts
  184
Chapter 9 SNMP Interface

185
- Configuring the SNMP Interface
  186
  - To Configure SNMP Options
    186
  - Attributes
    186
  - Agent
    187
  - Traps
    187
  - Security
    187
- Standard Mibs
  188
  - Management Consoles
    188
  - MIB II Support Details
    188
- Colubris Enterprise MIB
  190
Chapter 10 SSL Certificates

191
- Overview of SSL Certificates
  192
  - SSL Authentication
    192
  - DNS and the Cn3000'S SSL Certificate
    192
- About Certificate Warning Messages
  194
- Installing a New SSL Certificate
  196
- Step 1: Creating an SSL Certificate
  197
  - Certificate Tools
    197
  - Obtaining a Registered Certificate
    197
  - Becoming a Private CA
    199
  - Creating a Self-Signed Certificate
    202
  - Viewing the Certificate
    203
  - Verifying the Certificate
    204
- Step 2: Preparing the Certificate Chain
  205
- Step 3: Converting a Certificate to PKCS #12 Format
  206
- Step 4: Installing a New SSL Certificate
  207
  - Manual Installation
    207
  - Automatic Installation
    207
- Step 5: Installing Certificates in a Browser
  208
  - Internet Explorer
    208
  - Netscape Navigator
    212
Chapter 11 Configuration Parameters

213
- Default Wireless Profile
  214
  - Access Point
    214
  - Radio
    215
  - Wireless Port
    215
  - Wireless Protection
    216
  - Dynamic Keys
    217
- Wireless Profile List
  218
  - WLAN Profiles
    218
- Wireless Profile Settings
  219
  - Access Point
    219
  - HTML-Based User Logins
    220
  - RADIUS Accounting
    220
  - Wireless Protection
    220
  - Traffic Tunnelling (GRE)
    221
- Wireless Links List
  223
  - Wireless Link Configuration
    223
- Wireless Link Configuration
  224
  - Settings
    224
  - Security
    224
  - Addressing
    224
- Wireless Neighborhood
  225
- LAN Port Configuration
  227
  - Link
    227
- Internet Connection
  228
  - Assign IP Address Via
    228
  - Link Settings
    228
  - Network Address Translation (NAT)
    229
  - Pppoe Client
    229
  - DHCP Client
    231
  - Static Addressing
    232
- DHCP Services
  233
- DHCP Server
  234
  - Addresses
    234
  - Settings
    234
- DHCP Relay Agent
  235
  - DHCP Relay Agent Settings
    235
- Bandwidth Control
  236
  - Outgoing Traffic Throttle
    236
- IP Routes
  237
  - Active Routes
    237
  - Default Routes
    237
  - Persistent Routes
    238
- DNS/WINS Settings
  239
  - DNS Servers
    239
- GRE Tunnel List
  240
  - Defined GRE Tunnels
    240
- GRE Tunnel Definition
  241
  - Tunnel Settings
    241
- NAT List
  242
  - NAT Mappings
    242
- NAT Static Mapping
  243
  - Mapping Definition
    243
- RIP Configuration
  244
  - Rip
    244
- Authentication Options
  245
  - CN3000 RADIUS Authentication
    245
  - HTML-Based User Logins
    246
  - RADIUS Accounting
    246
- Authentication Advanced Options
  247
  - Client Station Settings
    247
  - Location-Aware Authentication
    248
  - Access Controller Shared Secret
    249
  - Access Controller Mode
    249
  - NOC Authentication
    249
  - Access Controller Ports
    249
  - Ipass Settings
    249
- RADIUS Profiles List
  250
  - RADIUS Profiles
    250
- RADIUS Profile Definition
  251
  - Profile Name
    251
  - RADIUS Profile Settings
    251
  - Primary RADIUS Server
    252
  - Secondary RADIUS Server
    252
- Firewall - Preset
  253
- Firewall - Custom
  254
  - General Settings
    254
  - Services
    255
  - Stateful Matching
    255
- PPTP Client
  256
  - Connection
    256
  - Account
    256
  - Network Address Translation (NAT)
    257
- Ipsec Policy List
  258
  - Ipsec Security Policy Database
    258
- Ipsec New Policy
  259
  - Preconfigured Settings
    259
  - General
    260
  - Peer
    261
  - Authentication Method
    262
  - Security
    262
  - Preconfigured Settings
    263
- Certificates
  264
- Users
  268
  - Local User List
    268
- Local Config List
  269
  - Active Attributes
    269
- Local Config Attribute
  270
  - Attribute
    270
  - Access Lists
    270
  - Custom SSL Certificate
    271
  - Configuration File
    272
  - MAC Authentication
    272
  - Default User Idle Timeout
    273
  - Default User Session Timeout
    273
  - Default User SMTP Server
    274
  - Default User Interim Accounting Update Interval
    274
  - Default User Quotas
    274
  - Default User Idle Timeout
    275
  - Default User SMTP Server
    275
  - Default User Session Timeout
    275
  - Default User One-To-One NAT
    276
  - Ipass Login Url
    276
  - Internal Pages
    276
  - External Pages
    277
  - Remote Login Page
    278
  - Placeholders
    278
  - NOC Authentication
    279
- Management Tool
  280
  - Administrator Authentication
    280
  - Login Override
    280
  - Web Server
    281
  - Security
    281
- Snmp
  282
  - Attributes
    282
  - Agent
    283
  - Traps
    283
  - Security
    283
- System Time
  284
- Satellites
  285
- Country
  286
Chapter 12 Building a Cross-Over Cable

287
- Wiring Details
  288
Chapter 13 The Configuration File

289
- Manually Editing the Config File
  290
  - Retrieving/Restoring the Configuration File
    290
- Configuration File Structure
  291
Chapter 14 Sample Setup - Backend Software

293
- Overview
  294
  - Caution
    294
  - Prerequisites
    294
- Equipment Setup
  295
  - Topology
    295
  - About the Components
    296
- Step 1: Retrieve Software
  297
  - Server 1
    297
  - Server 2
    297
- Step 2: Install Configure Software on Server 1
  298
  - Windows 2000
    298
  - Colubris Backend Archive
    298
  - Steel-Belted Radius
    298
  - Apache
    299
  - Sample Pages
    300
  - Php 4.2.3
    301
  - Mysql
    301
  - Configure the OBDC Data Source
    301
  - Phpmyadmin
    303
  - Setting the Path
    303
  - Start Mysql
    304
  - Test PHP
    304
  - Create the Sample RADIUS Database
    304
- Step 3: Configure Steel-Belted Radius on Server 1
  305
- Step 4: Install Web Server Certificates on Server 1
  310
- Step 5: Install and Configure the CN3000
  313
  - Start Apache
    313
  - Assign a Static Address
    313
  - Configure RADIUS Settings
    314
  - Certificates
    316
- Step 6: Install and Configure Software on Server 2
  317
- Step 7: Test the Installation
  318
- Step 8: Test the Remote Login Page Feature
  320
  - Enable the Remote Login Feature
    320
  - Test the Remote Login Feature
    321
- Step 9: Test the NOC Authentication Feature
  323
  - Enable NOC Authentication
    323
  - Test NOC Authentication
    324
- Tools
  326
  - Batch Files
    326
  - Phpmyadmin
    326
- Troubleshooting
  329
Chapter 15 Sample Setup - Steel-Belted Radius

331
- Overview
  332
  - Prerequisites
    332
- Equipment Setup
  333
  - Topology
    333
  - About the Components
    333
- Step 1: Install Software on Server 1
  335
  - Windows 2000
    335
  - Steel-Belted Radius
    335
  - Internet Explorer
    335
- Step 1: Add Support for Colubris Networks Attributes
  336
- Step 2: Connect to the Steel-Belted Radius Server
  337
- Step 3: Create a RADIUS Client Profile for the CN3000
  339
- Step 4: Define RADIUS Profiles
  341
- Step 5: Define User Accounts
  347
  - Defining User Accounts
    347
- Step 6: Install and Configure the CN3000
  349
  - Assign a Static Address
    349
  - Configure RADIUS Settings
    349
- Step 7: Install Server 2
  352
- Step 8: Test the Installation
  353
  - Testing Administrator Logins
    354
Chapter 16 Sample Setup - Microsoft RADIUS

355
- Overview
  356
  - Prerequisites
    356
- Equipment Setup
  357
  - Topology
    357
  - About the Components
    357
- Step 1: Install Software on Server 1
  358
  - Windows 2000
    358
  - Internet Explorer
    358
- Step 2: Define User Accounts
  359
- Step 3: Define Groups and Add Users to Them
  360
- Step 4: Start the RADIUS Server
  362
- Step 5: Create a RADIUS Client Account
  363
- Step 6: Create an Access Policy for the CN3000
  365
- Step 7: Create an Access Policy for Customers
  375
- Step 8: Create an Access Policy for CN3000 Admins
  385
- Step 9: Install and Configure the CN3000
  391
  - Assign a Static Address
    391
  - Configure RADIUS Settings
    391
- Step 10: Install Server 2
  393
- Step 11: Test the Installation
  394
  - Testing Administrator Logins
    395
Chapter 17 Experimenting with NOC Authentication

397
- Overview
  398
  - About the Certificates
    398
  - Requirements
    398
- Equipment Setup
  399
  - Topology
    399
- Step 1: Configure the CN3000
  400
- Step 2: Configure the RADIUS Profile for the CN3000
  401
  - Define the Profile
    401
  - Force Authentication
    401
- Step 3: Configure Server 1
  402
- Experimenting with Noc-Authenticate.vbs
  408
  - Retrieve Noc-Authenticate.vbs
    408
  - Running the Program
    408
  - Examples
    408
- Authentication Results
  410
  - Noc.h Contents
    410
  - Returned Values
    411
  - Examples
    413
Chapter 18 Regulatory, Wireless Interoperability, and Health Information

415
- Regulatory Information
  416
- Health Information
  418

Colubris Networks Categories

Wireless Access Point Network Hardware

Network Router IP Access Controllers

More Colubris Networks Manuals

Colubris Networks CN3000 Manuals

Colubris Networks CN3000 Administrator's Manual (418 pages)

Table of Contents

Chapter 1 Introduction

Chapter 2 How It Works

Chapter 3 Installation

Chapter 4 Scenarios

Chapter 5 Activating the Public Access Interface

Chapter 6 Customizing the Public Access Interface

Chapter 7 Customizing CN3000 and Customer Settings

Chapter 8 NOC Authentication

Chapter 9 SNMP Interface

Chapter 10 SSL Certificates

Chapter 11 Configuration Parameters

Chapter 12 Building a Cross-Over Cable

Chapter 13 The Configuration File

Chapter 14 Sample Setup - Backend Software

Chapter 15 Sample Setup - Steel-Belted Radius

Chapter 16 Sample Setup - Microsoft RADIUS

Chapter 17 Experimenting with NOC Authentication

Chapter 18 Regulatory, Wireless Interoperability, and Health Information

Related Products

Colubris Networks Categories