Barco CSE-200 Installation Manual page 52

6. CSE-200 Configurator
the ClickShare Buttons use to connect. These so-called "rogue" APs can become a nuisance in larger installations. Next to that,
meeting participants who are sharing content from mobile devices have to switch networks to connect with the ClickShare Base Unit.
This is where ClickShare Network Integration comes in. Once fully configured and enabled, the built-in AP of the Base Unit is
disabled. The Button or the mobile devices can then connect to a wireless access point that is part of the corporate network. At this
point, the Base Unit needs to be connected to the corporate network via the wired Ethernet interface so that the Buttons and mobile
devices can share their content on the Base Unit.
Image 6-17
Security modes
There are 2 security modes supported by the Button to connect to the corporate network:
• The first one, which applies to a typical corporate network setup, is WPA2-Enterprise with 802.1X.
• As we also want to support smaller organizations, which might have a more traditional Wi-Fi setup, there is also support for
WPA2-PSK, also known as WPA2-Personal.
Both modes are based on Wi-Fi Protected Access (WPA). We talk about WPA2, an improved version of the original WPA standard,
which adds AES encryption to improve security.
WPA2-Enterprise with 802.1X
WPA2-Enterprise relies on a server (using RADIUS) to authenticate each individual client on the network. To do this, authentication
802.1x is used (also known as port-based Network Access Control). 802.1x encapsulates the Extensible Authentication Protocol
(EAP) for use on local area networks. This is also known as "EAP over LAN" or EAPoL. Using RADIUS, these EAPoL messages
are routed through the network in order to authenticate the client device on the network – which, in the case of ClickShare, are the
Buttons.
The 802.11i (WPA2) standard defines a number of required EAP methods. However, not all of them are used extensively in the field,
and some other ones (which are not in the standard) are used much more often. Therefore, we have selected the most widely used
EAP methods. The list of EAP methods supported in the ClickShare system is:
• EAP-TLS
• PEAP
• EAP-TTLS
Considerations
When you choose to integrate the ClickShare system into your corporate network, there are a few things to consider up front. First
of all, make sure that all your Base Units can be connected to your network via the wired Ethernet interface. Also, take into account
the amount of bandwidth that each Button needs to stream the captured screen content to the Base Unit – this is usually somewhere
between 5 and 15 Mbps. So, prevent bottlenecks in your network (e.g. 100 Mbps switches) that could potentially degrade your
ClickShare experience due to a lack of bandwidth.
Prerequisites
Before rolling out ClickShare Network Integration, make sure your infrastructure meets the following prerequisites.
Network
Once you enable the corporate network, the internal Wi-Fi access point of the ClickShare Base Unit is disabled. Make sure your
Base Unit is connected to the corporate network via its wired Ethernet interface.
Firewall
To ensure that you can successfully share content via the ClickShare Button, or from mobile devices, to the Base Unit, make sure
the ports mentioned in "Ports used by the ClickShare Base Unit", page 11are open on your network:
VLAN
40 R5900023 CSE-200 11/04/2016