Samsung WEC8500 Operation Manual

Samsung WEC8500 Operation Manual

Wireless enterprise access point controller
Hide thumbs Also See for WEC8500:
Table of Contents

Advertisement

2600-00FK1RGA4
Ver.
8.0
WEC8500/WEC8050 (APC)
Operation Manual

Advertisement

Table of Contents
loading

Summary of Contents for Samsung WEC8500

  • Page 1 2600-00FK1RGA4 Ver. WEC8500/WEC8050 (APC) Operation Manual...
  • Page 2 This manual is proprietary to SAMSUNG Electronics Co., Ltd. and is protected by copyright. No information contained herein may be copied, translated, transcribed or duplicated for any commercial purposes or disclosed to the third party in any form without the prior written consent of SAMSUNG Electronics Co., Ltd.
  • Page 3: Introduction

    INTRODUCTION Purpose This manual describes the overview, management, and setup of WEC8500/WEC8050 that is a Samsung Wireless Enterprise (W-EP) Access Point Controller (APC). This manual is written for WEC8500 version 3.0.0, WEC8050 version 3.0.0. Document Content and Organization This manual consists of ten Chapters, three Annexes, and a list of Abbreviations.
  • Page 4: Conventions

    Open source list used in the APC and its license notice. ANNEX C. Open Source Announcement (WEA302/WEA303/WEA312/ WEA313/WEA403/WEA412) Open source list used in the Samsung W-EP wireless LAN AP and its license notice. ABBREVIATION Describes the acronyms used in this manual.
  • Page 5: Console Screen Output

    Updated the content overall in accordance with the package version 2.0.0 01. 2014. - Changed contents  1.3.1 WEC8500 Configuration and Functions  4.2.6.3 Tech Support Information 10. 2013. - Updated the content overall in accordance with the package version (WEC8500 version 1.4.4, WEC8050 version 1.0.0)
  • Page 6: Table Of Contents

    Basic Configuration ..................... 33 1.4.2 Configuration of Multiple APC for Redundancy ............34 1.4.3 Clustering Configuration using Multiple APC (WEC8500/ WEC8050) ......35 1.4.4 Configuration of Multiple Sites Consisting of Headquarter and Branches ....38 NAT Configuration between AP and APC ................40 CHAPTER 2.
  • Page 7 Class-map Configuration ...................129 3.5.3 Policy-map Configuration...................130 3.5.4 Service Policy Configuration ..................131 3.5.5 Time Profile........................132 3.5.6 OS-AWARE .......................135 Multicast to Unicast .......................138 IP Multicast Configuration ....................138 3.7.1 IP Multicast Routing Configuration ................138 © SAMSUNG Electronics Co., Ltd. page 7 of 689...
  • Page 8 MCS Configuration Management by WLAN .............. 241 Local Switching ........................244 Security and Authentication ....................247 5.3.1 Initialization of WLAN Security Function ..............247 5.3.2 WPA/WPA2 PSK Configuration ................. 249 5.3.3 WPA/WPA2 802.1x Configuration ................252 © SAMSUNG Electronics Co., Ltd. page 8 of 689...
  • Page 9 Call Admission Control (CAC) Configuration ..............311 7.3.1 SIP ALG Configuration ....................311 7.3.2 Voice CAC Configuration ...................313 7.3.3 Video CAC Configuration ...................315 Radio Resource Management (RRM) ...................318 7.4.1 RRM Configuration ....................318 © SAMSUNG Electronics Co., Ltd. page 9 of 689...
  • Page 10 Setting AP Group Parameter ..................372 7.15.3 Setting AP Parameters ....................374 CHAPTER 8. Security RADIUS Server Configuration ....................376 8.1.1 External RADIUS Server ................... 376 8.1.2 Internal RADIUS Server .................... 382 © SAMSUNG Electronics Co., Ltd. page 10 of 689...
  • Page 11 Configure Remote Acl Profile ..................447 External BYOD Server ......................453 8.8.1 Configuring External BYOD Server ................453 8.8.2 Captive Portal Configuration ..................455 CHAPTER 9. IP Application DNS ............................457 9.1.1 DNS Client Configuration...................457 9.1.2 DNS Proxy Configuration...................458 © SAMSUNG Electronics Co., Ltd. page 11 of 689...
  • Page 12 10.9 Configuration Management ....................503 10.10 Configuration Synchronization .................... 507 10.10.1 Configuration Information Synchronization ..............507 10.10.2 Audit Configuration Information synchronization ........509 10.11 Debug and Diagnosis ......................511 10.11.1 Process ........................511 © SAMSUNG Electronics Co., Ltd. page 12 of 689...
  • Page 13 10.12.9 Statistics Function ......................525 ANNEX A. CLI Command Structure configure ..........................567 show............................607 clear ............................624 debug ............................626 file............................629 Etc ............................629 ANNEX B. Open Source Announcement (WEC8500/WEC8050) ANNEX C. Open Source Announcement (WEA300/WEA400 Series) ABBREVIATION © SAMSUNG Electronics Co., Ltd. page 13 of 689...
  • Page 14 LIST OF FIGURES Figure 1. System Structure for Wireless Enterprise Solution ............23 Figure 2. W-EP Network Configuration ..................24 Figure 3. WEC8500 Interface-Front/Back ................... 27 Figure 4. System LED Configuration ..................27 Figure 5. Management Port Configuration .................. 28 Figure 6.
  • Page 15 Figure 69. Profile Creation Screen ....................145 Figure 70. Profile Configuration Screen ..................145 Figure 71. Application Group Creation Screen ................146 Figure 72. Application Group Configuration Screen ..............147 Figure 73. WLAN/Device Statistics Screen ................152 © SAMSUNG Electronics Co., Ltd. page 15 of 689...
  • Page 16 Figure 109. AP mode configuration ..................209 Figure 110. AP CLI Account Add/Remove Window ..............210 Figure 111. AP SNMP v1/v2c Community Configuration Window ..........211 Figure 112. AP v3 User Configuration Window ................. 211 © SAMSUNG Electronics Co., Ltd. page 16 of 689...
  • Page 17 Figure 146. DHCP Pool (2) .......................268 Figure 147. DHCP Relay......................270 Figure 148. DHCP Proxy......................271 Figure 149. Option 82 configuration (1) ..................273 Figure 150. Option 82 configuration (2) ..................273 Figure 151. Primary/Secondary server configuration (1) ............275 © SAMSUNG Electronics Co., Ltd. page 17 of 689...
  • Page 18 Figure 187. Configuring connection limitation per AP ............... 344 Figure 188. Configuring connection limitation per WLAN ............346 Figure 189. Voice statistics ....................... 348 Figure 190. Detecting WLAN-based communication failure ............. 349 © SAMSUNG Electronics Co., Ltd. page 18 of 689...
  • Page 19 Figure 226. Access List Entry Addition Window ................412 Figure 227. WLAN Web Policy Configuration Window ..............415 Figure 228. WLAN Layer 2 Security Configuration Window ............417 Figure 229. WLAN Web Policy Configuration Window ..............417 © SAMSUNG Electronics Co., Ltd. page 19 of 689...
  • Page 20 Figure 264. DNS proxy ......................459 Figure 265. NTP client configuration ..................462 Figure 266. FTP/SFTP server configuration ................465 Figure 267. Telnet/SSH server configuration ................467 Figure 268. Adding SNMP community ..................470 © SAMSUNG Electronics Co., Ltd. page 20 of 689...
  • Page 21 Figure 283. DB Backup/Restore ....................505 Figure 284. Configuration Information Initialization window ............506 Figure 285. Configuration Synchronization Role Configuration ..........509 Figure 286. Add Sync. Members Window .................509 Figure 287. File management window ..................522 © SAMSUNG Electronics Co., Ltd. page 21 of 689...
  • Page 22: Chapter 1. Access Point Controller System Overview

    Wi-Fi environment. There are two types depending on the AP capacity; WEC8500 and WEC8050. It comprehensively manages all the APs and provides services in a wireless LAN environment. Because AP and APC are connected in tunneling, all the user traffics are exchanged and processed.
  • Page 23: Figure 1. System Structure For Wireless Enterprise Solution

    W-EP wireless LAN Access Point (AP), W-EP AP Controller (APC), and Wireless Enterprise WLAN Manager (WEM). The Samsung APC and W-EP wireless LAN AP are core devices that provide various services such as user authentication, wireless management, voice and data service, etc. in the 802.11-based Wi-Fi environment.
  • Page 24: Figure 2. W-Ep Network Configuration

    CHAPTER 1. Access Point Controller System Overview Network Configuration The network configuration of Samsung W-EP solution that includes APC is shown below. IP-PBX WEC8050/WEC8500 Router Internet … WIPS W-EP AP … client Figure 2. W-EP Network Configuration IP-PBX As an enterprise call manager, it is a switch required to provide the Fixed Mobile Convergence (FMC) function to a wireless terminal (optional).
  • Page 25 Terminal that provides the 802.11a/b/g/n interface such as smart phone, tablet PC, or notebook computer, etc. In an Android smart phone, an enterprise Voice over IP (VoIP) application equipped with the Samsung voice engine is called a FMC client (The FMC client is an option).
  • Page 26 WLAN service, etc. and provides the wireless network invasion detection which implements the safe and effective wireless network environment by detecting security vulnerabilities. © SAMSUNG Electronics Co., Ltd. page 26 of 689...
  • Page 27: Figure 3. Wec8500 Interface-Front/Back

    CHAPTER 1. Access Point Controller System Overview APC Configuration and Functions 1.3.1 WEC8500 Configuration and Functions The Configuration and the purpose of each item of WEC8500 are as follows: Console port USB port System LED Management port 1G Optic port...
  • Page 28: Figure 5. Management Port Configuration

    2 is installed. Power module 2 is not installed. Console port (RS232C) A console port is used to check the operational status of WEC8500 or for input through the CLI. Its basic requirements are as follows:  Baud rate: 115200 bps ...
  • Page 29: Figure 6. Optic Port Configuration

    10 GbE Optic module connector 1 GE port LINK/ACT 1~LINK/ACT 8 LINK/ACT status of each port - Turned on for link connection - Blinking for data exchange 1G 1~1G 8 1 GbE Optic module connector © SAMSUNG Electronics Co., Ltd. page 29 of 689...
  • Page 30: Figure 7. Power Module Configuration

    CHAPTER 1. Access Point Controller System Overview USB port (Host 2.0) The WEC8500 provides a USB host port that supports the upgrade of WEC8500 operation software. A typical USB memory stick is supported. Power module AC LED DC LED Power...
  • Page 31: Figure 8. Wec8050 Interface-Front/Back

    Preparing the system for booting Green The installed FAN module is operating normally Orange The system is now booting Fan fault Green The power is supplied normally The power is turned off or not supplied © SAMSUNG Electronics Co., Ltd. page 31 of 689...
  • Page 32: Figure 10. Ethernet Port Configurations

    It has 4 10/100/1000 Base-T ports. LINK LED ACT LED Figure 10. Ethernet Port Configurations Status Description Orange blinking Blinking while data exchanging No data exchanging LINK Green Link connection display No link connection © SAMSUNG Electronics Co., Ltd. page 32 of 689...
  • Page 33: Figure 11. Basic Configuration Of W-Ep Wireless Lan System

    LAN. With this, the wire/wireless integrated voice service can be provided. An example of service configuration diagram using the W-EP wireless LAN system is shown in the below figure. The configuration diagram is based on Samsung APC (WEC8500).
  • Page 34: Figure 12. Example Of W-Ep Wireless Lan System Configuration For Redundancy

    DHCP WIPS IP-PBX IP-PBX Media G/W server server PoE switch Access switch PoE switch Access switch W-EP AP W-EP AP Figure 12. Example of W-EP Wireless LAN System Configuration for Redundancy © SAMSUNG Electronics Co., Ltd. page 34 of 689...
  • Page 35: Clustering Configuration Using Multiple Apc (Wec8500/ Wec8050)

    WEC8500/WEC8050s. This allows inter APC handover. The WEC8500s configured in a cluster provides a service just like a single WEC8500 through periodic information exchange. Inter APC handover The inter APC handover is a handover between APCs.
  • Page 36: Figure 13. Example Of W-Ep Wireless Lan System Configuration For Distributed Clustering Servic

    1.4.3.1 Configuration of Distributed Clustering Service The configuration of distributed clustering is to install each WEC8500/WEC8050 in a building or a local site according to its capacity. This option can be used when there is no integrated backbone configuration in a site or networks are separated for each building. It is suitable for a site where several buildings are apart from each other.
  • Page 37: Figure 14. Example Of W-Ep Wireless Lan System Configuration For Centralized Clustering Service

    CHAPTER 1. Access Point Controller System Overview 1.4.3.2 Configuration of Centralized Clustering Service In the centralized cluster configuration, all the WEC8500/WEC8050s in a site are installed in the center. This is suitable when all the networks in a site are configured around the backbone.
  • Page 38: Figure 15. Example Of W-Ep Wireless Lan System Configuration For Multiple Sites Consisting Of

    Server server PoE switch Access switch PoE switch Access switch W-EP AP W-EP AP Figure 15. Example of W-EP Wireless LAN System Configuration for Multiple Sites consisting of Headquarter and Branches © SAMSUNG Electronics Co., Ltd. page 38 of 689...
  • Page 39 APC and the branch AP installed in a branch switches a user traffic directly to a destination address without tunneling to the APC. Even at this time, the APC in headquarter manages all the W-EP wireless LAN APs and users. © SAMSUNG Electronics Co., Ltd. page 39 of 689...
  • Page 40: Figure 16. Ap-Apc Nat Environment Configuration Diagram

    An example of service configuration diagram for the NAT environment is illustrated below. IP-PBX WEC8050/ Router Router WEC8500 Internet … … W-EP AP W-EP AP … … FMC Client FMC Client Figure 16. AP-APC NAT Environment Configuration Diagram © SAMSUNG Electronics Co., Ltd. page 40 of 689...
  • Page 41: Chapter 2. Basic System Configuration

    New password must be more than 8 character and contain at least one alphabet/numeric/special letters. The default ID of APC is set to ‘samsung’ that has an administrator privilege. © SAMSUNG Electronics Co., Ltd. page 41 of 689...
  • Page 42: Managing Operator Account

    Use the ‘password’ command to change the password for your account. The ‘password’ command must be executed in the highest user mode. WEC8500# password CURRENT PASSWORD : ******** NEW PASSWORD : ******** CONFIRM NEW PASSWORD : ******** © SAMSUNG Electronics Co., Ltd. page 42 of 689...
  • Page 43: Apc Management Port Configuration

    WEC8500/configure# interface mgmt0 2) Set up an IP address. WEC8500/configure/interface mgmt0# ip address 100.100.100.1/24 In case of WEC8050, there is no management (mgmt0) port. After establishing an IP address in one of ports ge1 to ge4 by referring to the contents of 'Port Configuration' and then using the CLI, connect the Ethernet cable to the port.
  • Page 44 ‘s’ and pressing the TAB key. WEC8500# s [When the TAB key is pressed] WEC8500# show [When the TAB key is pressed once again] WEC8500# save © SAMSUNG Electronics Co., Ltd. page 44 of 689...
  • Page 45 When a parameter that is not supported by a command is entered, an error message according to the situation is displayed. WEC8500# configure test % Invalid parameter (mandatory) Command modes When the ‘exit’ command is entered, the mode is changed to the upper command mode. © SAMSUNG Electronics Co., Ltd. page 45 of 689...
  • Page 46: Figure 17. Web Ui Connection Window

    When connecting to the IP address of APC ethernet port in a web browser, the below login window is displayed. Log in using a default connection account ‘samsung’. After the first login, you go through the course of changing the password. If you have changed the password by connecting to the CLI, you don't have to go through the course of changing the password.
  • Page 47: Figure 18. Wec Main Window

    : Saves the current configuration information into the system.  : Excutes ping test.  : Refreshes the screen. Sub-menus This provides the detail menus for Monitor, Configuration, Administration, or Help in the menu bar. © SAMSUNG Electronics Co., Ltd. page 47 of 689...
  • Page 48: Figure 19. Operator Account Management Window

    1 (Administrator): Administrator privilege that allows to execute all the commands  2 (Operator): Can change system configuration.  3 (Monitor): Can retrieve system status.  4 (Lobby Ambassador): Temporary user © SAMSUNG Electronics Co., Ltd. page 48 of 689...
  • Page 49: Initial Setup Wizard

    Access while the IP address is set If the IP address of the APC is set, check whether the APC and the PC are networked and then open the web browser before accessing the IP address. © SAMSUNG Electronics Co., Ltd. page 49 of 689...
  • Page 50: Figure 21. Initial Setup Wizard Welcome Screen

    AP. The settings are recovered at the last step of the wizard. Description on the Screen Figure 22. Move to the setup step of the initial setup wizard © SAMSUNG Electronics Co., Ltd. page 50 of 689...
  • Page 51 When an external DHCP server is used, configure settings of proxy or relay. 7) DHCP internal server: Configure a DHCP internal server. For more information, refer to ‘5.4.1 DHCP  Server’. © SAMSUNG Electronics Co., Ltd. page 51 of 689...
  • Page 52 (UTC) information from the configured NTP server and synchronizes the local time. 10) Finish:  Finish the basic settings to configure the WLAN of the APC and then close the wizard. © SAMSUNG Electronics Co., Ltd. page 52 of 689...
  • Page 53: Figure 23. Wlan Setup Wizard Step.1

    In the menu bar of <WEC Main window>, select <Configuration> and then select <Wizard>  <WLAN> menu in the sub menu. For step 1, start WLAN Setup. Description on the Screen Figure 23. WLAN Setup Wizard Step.1 © SAMSUNG Electronics Co., Ltd. page 53 of 689...
  • Page 54: Figure 24. Wlan Setup Wizard Step.2

    CHAPTER 2. Basic System Configuration Figure 24. WLAN Setup Wizard Step.2 Figure 25. WLAN Setup Wizard Step.3 © SAMSUNG Electronics Co., Ltd. page 54 of 689...
  • Page 55: Figure 26. Wlan Setup Wizard Result Screen

    Move to step 3 or finish Setup Wizard by L2 Security Type. 3) Step 3:  Setup additional Radius Setup after Security setup of step.2. 4) Result Display After finishing step.2 or step.3, a result is displayed. © SAMSUNG Electronics Co., Ltd. page 55 of 689...
  • Page 56: Figure 27. Nat Setup Wizard Step. 1

    <Wizard>  <NAT> menu in the sub menu. For step 1, start WLAN Setup. Description on the Screen Figure 27. NAT Setup Wizard Step. 1 Figure 28. NAT Setup Wizard Step. 2 © SAMSUNG Electronics Co., Ltd. page 56 of 689...
  • Page 57: Figure 29. Nat Setup Wizard Step. 3

    Setup step The NAT setup wizard consists of the following setup steps: After setting up the description desired on each screen, click the Next button to apply the modifications to the system. © SAMSUNG Electronics Co., Ltd. page 57 of 689...
  • Page 58: Figure 31. Redundancy Setup Wizard Step. 1

    In the menu bar of <WEC Main window>, select <Configuration> and then select <Wizard>  <Redundancy> menu in the sub menu. For step 1, start WLAN Setup. Description on the Screen Figure 31. Redundancy Setup Wizard Step. 1 © SAMSUNG Electronics Co., Ltd. page 58 of 689...
  • Page 59: Figure 32. Redundancy Setup Wizard Step. 2

    CHAPTER 2. Basic System Configuration Figure 32. Redundancy Setup Wizard Step. 2 Figure 33. Redundancy Setup Wizard Step. 3 © SAMSUNG Electronics Co., Ltd. page 59 of 689...
  • Page 60: Figure 34. Redundancy Setup Wizard Result Screen

    2) Step 2:  Input Fallback 3) Step 3:  Select Ap Group, and adopt Redundancy APC which is selected at step 1. 4) Result Display:  After finishing setup, display the result. © SAMSUNG Electronics Co., Ltd. page 60 of 689...
  • Page 61: Port Configuration

    3.1.1 Port management The WEC8500 Management port is used to manage the WEC8500. It does not support VLAN and its interface name is ‘mgmt0’. The 8 ports at the right side of Management port are 10/100/1000 BASE T-ports and their names are GE1-8.
  • Page 62 The port related CLI commands are as follows: [auto-nego, speed, duplex] The commands used to configure an auto-nego, speed, and duplex addresses are shown below. To delete the configuration, enter the ‘no’ parameter. WEC8500/configure/interface ge1# speed-duplex ? 10-full Set 10Mb/s full-duplex 10-half...
  • Page 63: Figure 35. Port Management Window

    1) In the Ports initial window, click the <INTERFACE NAME> button to go to port configuration change window. 2) In the port configuration change window, the auto-nego, speed, duplex, admin status, flow control, mtu size, switch port, or ip address, etc. can be configured. © SAMSUNG Electronics Co., Ltd. page 63 of 689...
  • Page 64: Figure 36. Port Configuration Change Window

    CHAPTER 3. Data Network Function Figure 36. Port Configuration Change Window © SAMSUNG Electronics Co., Ltd. page 64 of 689...
  • Page 65: Interface Configuration

    3.2.1 Interface management The WEC8500 Management port is used to manage the WEC8500. It does not support VLAN and its interface name is ‘mgmt0’. The 8 ports at the right side of Management port are 10/100/1000 BASE T-ports and their names are GE1-8.
  • Page 66: Figure 37. Interfaces Window (1)

    ‘_’ can be used. The VLAN ID is the number from 1 to 4094 and it specifies a unique VLAN value. Click the <Apply> button to go to detail configuration screen. Figure 38. Interfaces Window (2) © SAMSUNG Electronics Co., Ltd. page 66 of 689...
  • Page 67: Figure 39. Interfaces Window (3)

    Figure 39. Interfaces Window (3) [Deleting VLAN] In the Interface initial window, click the <Delete> button to delete a selected VLAN. The select VLAN cannot be deleted if it is being used in the system. © SAMSUNG Electronics Co., Ltd. page 67 of 689...
  • Page 68: Managing Interface Group

    In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>  <Interfaces Groups> menu in the sub-menus. Click the <Add> or <Delete> button to add or delete an interface group. Figure 40. Interface Group Window (1) © SAMSUNG Electronics Co., Ltd. page 68 of 689...
  • Page 69: Figure 41. Interface Group Window (2)

    2) Enter information on GROUP NAME and GROUP DESCRIPTION and then add or delete an interface to or from an interface group. Figure 41. Interface Group Window (2) 3) Click the <Apply> button to apply the configuration. © SAMSUNG Electronics Co., Ltd. page 69 of 689...
  • Page 70: Vlan Configuration

    [VLAN_ID]: Adds VLAN to the hybrid mode.  switchport hybrid allowed vlan remove [VLAN_ID]: Deletes VLAN from the hybrid mode.  no switchport hybrid vlan: Deletes all the hybrid settings. © SAMSUNG Electronics Co., Ltd. page 70 of 689...
  • Page 71 1: Displays static VLAN information. [Typical configuration procedure] The typical configuration procedure of VLAN is as follows: WEC8500# configure terminal WEC8500/configure# bridge 1 protocol mstp WEC8500/configure # vlan database WEC8500/configure/vlan#vlan {2-4094} bridge 1 WEC8500/configure/vlan# exit WEC8500/configure# interface vlan1.{2-4094} Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration>...
  • Page 72: Bridge

    IEEE802.1s multiple STP (MSTP), or IEEE 802.1W Rapid STP (RSTP) protocol.  bridge 1 protocol [PROTOCOL]  no bridge 1 protocol Parameter Description PROTOCOL Protocol to configure (ieee/mstp/rstp) - ieee: STP - mstp: MSTP - rstp: RSTP © SAMSUNG Electronics Co., Ltd. page 72 of 689...
  • Page 73 Filtering database type (address/vlan/interface) - address: Filtering database using a MAC address - vlan: Filtering database using the VLAN information. - interface: Filtering database using the interface information WORD Option BRIDGE_NAME Bridge name © SAMSUNG Electronics Co., Ltd. page 73 of 689...
  • Page 74 This command configures a switch port, i.e. the layer 2 protocol characteristic information of the current VLAN. The ‘no’ parameter is used for default configuration. Go to interface mode and then execute the command.  switchport  no switchport © SAMSUNG Electronics Co., Ltd. page 74 of 689...
  • Page 75: Spanning Tree

    This command configures the bridge priority of MST instance. The ‘no’ parameter is used to delete priority.  bridge 1 instance [INSTANCE_ID] priority [BRIDGE_PRIORITY]  no bridge 1 instance [INSTANCE_ID] Parameter Description INSTANCE_ID Instance ID (range: 1-64) BRIDGE_PRIORITY Bridge priority (range: 0-61440) © SAMSUNG Electronics Co., Ltd. page 75 of 689...
  • Page 76 1 rapid-spanning-tree enable (bridge-forward) [bridge spanning-tree enable] This command configures a STP bridge. The ‘no’ parameter is used to clear the configuration.  bridge 1 spanning-tree enable  no bridge 1 spanning-tree enable (bridge-forward) © SAMSUNG Electronics Co., Ltd. page 76 of 689...
  • Page 77: Figure 42. Spanning Tree Configuration Window (1)

    Instance: Manages the MSTP VLAN instance.  Port: Manages the MSTP port. [Configuring Spanning Tree] After selecting the <Config> menu, enter configuration information and then click the <Apply> button. Figure 42. Spanning Tree Configuration Window (1) © SAMSUNG Electronics Co., Ltd. page 77 of 689...
  • Page 78: Figure 43. Spanning Tree Configuration Window (2)

    When you select the <Port> menu, the configured MSTP Port list is displayed on the window. Click the <Add> or <Delete> button to add or delete a port. Figure 44. Spanning Tree Configuration Window (3) © SAMSUNG Electronics Co., Ltd. page 78 of 689...
  • Page 79: Ip Address Configuration

    The procedure for IP address configuration is given below. 1) Go to configure  interface configuration mode of CLI. WEC8500# configure terminal WEC8500/configure# interface ge2 2) Set up an IP address. WEC8500/configure/interface ge2# ip address 100.100.100.1/24 3) Enable the interface. WEC8500/configure/interface ge2# no shutdown 3.4.2 Static Routing Configuration Configuration using CLI 1) Go to the configure mode of the CLI.
  • Page 80: Ip Multicast Routing Configuration

    1) Go to the configure mode of the CLI. WEC8500# configure terminal WEC8500/configure# 2) Enable or disable multicast-routing.  ip multicast-routing  no multicast-routing 3) Check multicast-routing using the ‘show running-config network’ command. © SAMSUNG Electronics Co., Ltd. page 80 of 689...
  • Page 81: General Settings

    WEC8500# configure terminal WEC8500/configure# interface ge2 2) Configure the PIM sparse mode to an interface. WEC8500/configure/interface ge2# ip pim sparse-mode 3) Check a configured PIM using the ‘show running-config network’ command. To check the multicast-routing table, use the ‘show ip mroute’ command.
  • Page 82: Figure 46. Ospf Configuration Window

    Click the <Add> button and configure the PROCESS ID to 1-10 in the below screen. Configuration using CLI 1) Go to configure  ospf configuration mode of CLI. WEC8500# configure terminal WEC8500/configure# router ospf WEC8500/configure# router ospf ? 1 - 10 OSPF process ID WEC8500/configure# router ospf 2 WEC8500/configure/router/ospf 2#...
  • Page 83 Use reference bandwidth method to assign OSPF cost WEC8500/configure/router/ospf 2# auto-cost reference-bandwidth ? 1 - 4294967 The reference bandwidth in terms of Mbits per second WEC8500/configure/router/ospf 2# auto-cost reference-bandwidth 200 ? <cr> WEC8500/configure/router/ospf 2# auto-cost reference-bandwidth 200 Parameter Description reference-bandwidth Enter a value from 1-4294967.
  • Page 84 CHAPTER 3. Data Network Function 5) CAPABILITY OPAQUE configuration Enter the capability opaque. WEC8500/configure/router/ospf 2# capability ? opaque Opaque LSA WEC8500/configure/router/ospf 2# capability opaque ? <cr> WEC8500/configure/router/ospf 2# capability opaque Parameter Description Capability opaque Enabled when the CLI is entered.
  • Page 85 WEC8500/configure/router/ospf 2# timers spf exp 3 ? 0 - 2147483647 Maximum Delay between receiving a change to SPF calculation in milliseconds WEC8500/configure/router/ospf 2# timers spf exp 3 100 ? <cr> WEC8500/configure/router/ospf 2# timers spf exp 3 100 © SAMSUNG Electronics Co., Ltd. page 85 of 689...
  • Page 86 Use the value configured in ‘Configuration using CLI’ as a user-defined value in the below screen. The value configured in ‘Configuration using CLI’ is shown in the below screen. © SAMSUNG Electronics Co., Ltd. page 86 of 689...
  • Page 87 Default Information Configuration of General Settings Configuration using CLI 1) Detail configuration of OSPF default-information WEC8500/configure/router/ospf 2# default-information ? originate Distribute a default route WEC8500/configure/router/ospf 2# default-information originate ? always Always advertise default route metric OSPF default metric metric-type OSPF metric type for default routes...
  • Page 88 CHAPTER 3. Data Network Function 4) Configuration of default-information METRIC-TYPE Configure the OSPF metric-type (1/2) value. WEC8500/configure/router/ospf 2# default-information originate metric- type ? Set OSPF External Type 1 metrics Set OSPF External Type 2 metrics WEC8500/configure/router/ospf 2# default-information originate metric- type 1 ? <cr>...
  • Page 89 WEC8500/configure/router/ospf 2# distance ospf ? external External routes inter-area Inter-area routes intra-area Intra-area routes WEC8500/configure/router/ospf 2# distance ospf external ? 1 - 255 <1-255> Distance for external/inter- area/intra-area routes WEC8500/configure/router/ospf 2# distance ospf external 50 WEC8500/configure/router/ospf 2# © SAMSUNG Electronics Co., Ltd.
  • Page 90 Enter the OSPF INTER-AREA distance value. WEC8500/configure/router/ospf 2# distance ospf inter-area ? 1 - 255 <1-255> Distance for external/inter- area/intra-area routes WEC8500/configure/router/ospf 2# distance ospf inter-area 50 ? <cr> WEC8500/configure/router/ospf 2# distance ospf inter-area 50 WEC8500/configure/router/ospf 2# 5) Configuration of INTRA-AREA distance ospf Enter the OSPF INTRA-AREA distance value.
  • Page 91 Maximum number of LSAs WEC8500/configure/router/ospf 2# overflow database external 3 ? 0 - 65535 Time to recover (0 not recover) WEC8500/configure/router/ospf 2# overflow database external 3 10 ? <cr> WEC8500/configure/router/ospf 2# overflow database external 3 10 3) Configuration of maximum number of LSAs Enter the maximum number of LSAs and hard limit value.
  • Page 92 Soft limit; Warning will be given if exceed <cr> WEC8500/configure/router/ospf 2# overflow database 100 hard ? <cr> WEC8500/configure/router/ospf 2# overflow database 100 hard Enter the maximum number of LSAs and soft limit value. WEC8500/configure/router/ospf 2# overflow ? database...
  • Page 93 Router-id for the OSPF process summary-address Configure IP address summaries timers Adjust routing timers WEC8500/configure/router/ospf 2# network ? A.B.C.D Network number A.B.C.D/M OSPF network prefix Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>...
  • Page 94 Network number A.B.C.D/M OSPF network prefix WEC8500/configure/router/ospf 2# network 100.100.100.1 ? A.B.C.D OSPF wild card bits(network mask) WEC8500/configure/router/ospf 2# network 100.100.100.1 255.255.255.0 ? area Set the OSPF area ID WEC8500/configure/router/ospf 2# network 100.100.100.1 255.255.255.0 ? area Set the OSPF area ID WEC8500/configure/router/ospf 2# network 100.100.100.1 255.255.255.0...
  • Page 95 Redistribute information from another routing protocol router-id Router-id for the OSPF process summary-address Configure IP address summaries timers Adjust routing timers WEC8500/configure/router/ospf 2# redistribute ? connected Connected static Static routes ospf Open Shortest Path First (OSPF) WEC8500/configure/router/ospf 2# redistribute © SAMSUNG Electronics Co., Ltd.
  • Page 96 Set tag for routes redistributed into OSPF <cr> WEC8500/configure/router/ospf 2# redistribute connected metric ? 1 - 16777214 OSPF metric WEC8500/configure/router/ospf 2# redistribute connected metric 3 ? <cr> WEC8500/configure/router/ospf 2# redistribute connected metric 3 © SAMSUNG Electronics Co., Ltd. page 96 of 689...
  • Page 97 Description metric-type Select 1 or 2. 4) Route-map configuration WEC8500/configure/router/ospf 2# redistribute connected route-map ? <WORD> Pointer to route-map entries WEC8500/configure/router/ospf 2# redistribute connected route-map a ? <cr> WEC8500/configure/router/ospf 2# redistribute connected route-map a Parameter Description route-map entries Enter <WORD>.
  • Page 98 <Controller>  <Network>  <OSPF>  <Redistribute> menu in the sub-menus. After configuring Redistribute default, select a PROCESS ID for detail configuration. Configuring Redistribute details Configure the details of metric, metric-type, route-map, or tag, etc. which is configured in CLI. © SAMSUNG Electronics Co., Ltd. page 98 of 689...
  • Page 99 Configuration using CLI WEC8500/configure/router/ospf 2# area 1 stub ? no-summary Do not inject inter-area routes into stub <cr> WEC8500/configure/router/ospf 2# area 1 stub no-summary ? <cr> WEC8500/configure/router/ospf 2# area 1 stub no-summary Parameter Description no-summary Select Stub or No Summary.
  • Page 100 CHAPTER 3. Data Network Function 2) NSSA configuration Configuration using CLI WEC8500/configure/router/ospf 2# area 1 nssa ? default-information-originate Originate Type 7 default into NSSA area no-redistribution No redistribution into this NSSA area no-summary Do not send summary LSA into NSSA...
  • Page 101 CHAPTER 3. Data Network Function Metric-type configuration of NSSA default-information-originate WEC8500/configure/router/ospf 1# area 2 nssa default-information- originate metric-type ? 1 - 2 OSPF Link State type WEC8500/configure/router/ospf 1# area 2 nssa default-information- originate metric-type 2 WEC8500/configure/router/ospf 1# Parameter Description OSPF metric-type Select 1 or 2.
  • Page 102 CHAPTER 3. Data Network Function Configuring translator-role of NSSA default-information-originate WEC8500/configure/router/ospf 1# area 2 nssa default-information- originate translator-role ? always Translate always candidate Candidate for translator (default) never Do not translate WEC8500/configure/router/ospf 1# area 2 nssa default-information- originate translator-role always ?
  • Page 103 The default configuration screen is shown below. The NSSA window screen is shown as below after detail configuration is completed. If you select a Process ID after NSSA default configuration, operator can do detail configuration. © SAMSUNG Electronics Co., Ltd. page 103 of 689...
  • Page 104 Define a virtual link and its parameters WEC8500/configure/router/ospf 1# area 2 virtual-link ? A.B.C.D ID (IP addr) associated with virtual link neighbor WEC8500/configure/router/ospf 1# area 2 virtual-link 10.10.10.1 ? authentication Enable authentication authentication-key Set authentication key dead-interval Dead router detection time...
  • Page 105 10 sec., the dead-interval will be 40 seconds if the hello-interval is not configured. In addition, operator can change it to a value between 1 second and 65535 seconds. WEC8500/configure/router/ospf 2# area 2 virtual-link 10.10.10.1 dead- interval ? 1 - 65535 Seconds WEC8500/configure/router/ospf 2# area 2 virtual-link 10.10.10.1 dead-...
  • Page 106 CHAPTER 3. Data Network Function WEC8500/configure/router/ospf 2# area 2 virtual-link 10.10.10.1 message-digest-key 2 md5 ? <WORD> Authentication key (16 chars) WEC8500/configure/router/ospf 2# area 2 virtual-link 10.10.10.1 message-digest-key 2 md5 b WEC8500/configure/router/ospf 2# Retransmit-interval configuration The default retransmit-interval is 5 seconds. In addition, operator can change it to a value between 1 second and 65535 seconds.
  • Page 107 In the default configuration page, configure PROCESS ID, AREA ID, or LINK ID. For detail configuration, select a PROCESS ID you want. Operator can do detail configuration for an item you select. The detail configuration page is shown below. © SAMSUNG Electronics Co., Ltd. page 107 of 689...
  • Page 108 And then, configure Digest Key or Digest Authentication. Just like CLI configuration, select a digest key between 1 and 255 and enter a key whose length is 16-character or less for digest authentication. 4) Range configuration © SAMSUNG Electronics Co., Ltd. page 108 of 689...
  • Page 109 To configure the Range detail items, start detail configuration after entering an Area range prefix value. WEC8500/configure/router/ospf 2# area 2 range ? A.B.C.D/M Area range prefix WEC8500/configure/router/ospf 2# area 2 range 10.10.10.1/16 ? advertise Advertise this range (default) not-advertise DoNotAdvertise this range <cr>...
  • Page 110 ‘% The area is neither stub, nor NSSA’ WEC8500/configure/router/ospf 2# area 0.0.0.1 default-cost ? 0 - 16777215 Stub's advertised default summary cost WEC8500/configure/router/ospf 2# area 0.0.0.1 default-cost 3 ? <cr> WEC8500/configure/router/ospf 2# area 0.0.0.1 default-cost 3 Shortcut configuration For Shortcut configuration, operator can select one out of 3 selections including default, disable, and enable.
  • Page 111 NSSA is configured to the ID. 3.4.5.9 Summary Configuration Configuration using CLI WEC8500/configure/router/ospf 2# summary-address ? A.B.C.D/M IP summary prefix WEC8500/configure/router/ospf 2# summary-address 1.1.1.1/16 ? not-advertise Suppress routes that match the prefix Set tag <cr> WEC8500/configure/router/ospf 2# summary-address 1.1.1.1/16 WEC8500/configure/router/ospf 2#...
  • Page 112 A tag is a user-defined 32-bit tag value between 0 and 4294967295. A tag also has a default value and it is 0. WEC8500/configure/router/ospf 2# summary-address 11.1.1.1/16 WEC8500/configure/router/ospf 2# summary-address 11.1.1.1/16 tag ? 0 - 4294967295 32-bit tag value WEC8500/configure/router/ospf 2# summary-address 11.1.1.1/16 tag 3 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration>...
  • Page 113 CHAPTER 3. Data Network Function 3.4.5.10 Passive Interface Configuration Configuration using CLI WEC8500/configure/router/ospf 2# passive-interface ? <WORD> Interface's name WEC8500/configure/router/ospf 2# passive-interface ge2 ? A.B.C.D Address of interface <cr> Parameter Description Interface Name Enter the name of an interface to use directly.
  • Page 114 Perform related configuration at the interface that a user wants. Therefore, the CLI configuration is as follows: 1) Go to configure  interface configuration mode of CLI. WEC8500# configure terminal WEC8500/configure# WEC8500/configure# interface ge2 2) The items for detail configuration are as follows: © SAMSUNG Electronics Co., Ltd. page 114 of 689...
  • Page 115 Link state transmit delay DISABLE OSPF configuration WEC8500/configure/interface ge2# ip ospf disable ? All functionality WEC8500/configure/interface ge2# ip ospf disable all ? <cr> WEC8500/configure/interface ge2# ip ospf disable all MTU configuration The default does not use Maximum Transmission Unit (MTU) configuration.
  • Page 116 WEC8500/configure/interface ge2# ip ospf database-filter ? Filter all LSA WEC8500/configure/interface ge2# ip ospf database-filter all ? Outgoing LSA WEC8500/configure/interface ge2# ip ospf database-filter all out ? <cr> WEC8500/configure/interface ge2# ip ospf database-filter all out Dead-interval configuration The default value of dead-interval is 4 times of hello-interval. Because the default hello-interval is configured to 10 sec., the dead-interval will be 40 seconds if the hello-...
  • Page 117 CHAPTER 3. Data Network Function WEC8500/configure/interface ge2# ip ospf dead-interval 30 ? <cr> WEC8500/configure/interface ge2# ip ospf dead-interval 30 Hello-interval configuration The default hello-interval is 10 seconds. In addition, operator can change it to a value between 1 second and 65535 seconds.
  • Page 118 CHAPTER 3. Data Network Function PRIORITY configuration The default OSPF Priority value is 1. A user can configure the priority between 1 and 255. WEC8500/configure/interface ge2# ip ospf priority ? 0 - 255 Priority WEC8500/configure/interface ge2# ip ospf priority 2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration>...
  • Page 119 Then, the page for authentication related detail configuration is displayed as shown below. Select an interface that a user wants to configure, and enter the key string (1-255) of the configuration. © SAMSUNG Electronics Co., Ltd. page 119 of 689...
  • Page 120 CHAPTER 3. Data Network Function The verification page after configuration is as follows: © SAMSUNG Electronics Co., Ltd. page 120 of 689...
  • Page 121: Vrrp Configuration

    ID and interface name to go to the VRRP configuration mode. WEC8500# configure terminal WEC8500/configure# router WEC8500/configure# router vrrp WEC8500/configure# router vrrp 1 vlan1.10 WEC8500/configure/router/vrrp# The following commands are provided. [advertisement-interval] This command configures the advertisement interval of VRRP in second. A user can configure the interval from 1 to 10.
  • Page 122 [A.B.C.D] [MODE] Parameter Description A.B.C.D IP address MODE IP configuration mode (backup/master) - backup: Backup router configuration. - master: Master configuration. [show vrrp] This command retrieves VRRP configuration.  show vrrp © SAMSUNG Electronics Co., Ltd. page 122 of 689...
  • Page 123: Figure 47. Vrrp-Operation Window

    Figure 48. VRRP-Circuit Failover Window (1) To perform detail configuration, select one of VRRP items. After selecting a configuration you want select the <Apply> button to apply the configuration. Figure 49. VRRP-Circuit Failover Window (2) © SAMSUNG Electronics Co., Ltd. page 123 of 689...
  • Page 124: Configuring Ipwatchd

    Configure a TIMEOUT value (that a user wants) to detect an IP address collision. Operator can enter a value between 10 and 300 seconds. WEC8500# configure terminal WEC8500/configure# WEC8500/configure# ipwatch ? defend-interval Ipwatch defend-interval configuration WEC8500/configure# ipwatch defend-interval ? 10 - 300 Ipwatch defend-interval value(seconds) WEC8500/configure# ipwatch defend-interval 30 Parameter Description VALUE Enter a defend-interval (10-300 sec).
  • Page 125: Acl Configuration

    Deleting Access list ‘acl1’:  APC# configure terminal APC/configure# fqm-mode APC/configure# no access-list ip acl1 permit seq 1 icmp any any 3) Check a created access list using the ‘show running-config network’ command. © SAMSUNG Electronics Co., Ltd. page 125 of 689...
  • Page 126: Figure 51. Acl Configuration Window

    1) Go to interface configuration mode where you will apply the configure  ACL rule of CLI. APC# configure terminal APC/configure# interface [name] APC/configure/interface [name]# 2) Configure ACL to an interface.  ip access-group [MODE] [DIRECTION] [ACL_NAME] Parameter Description MODE Configuration mode (fw/fqm) © SAMSUNG Electronics Co., Ltd. page 126 of 689...
  • Page 127: Figure 53. Acl Interface Configuration Window (1)

    <Add> or <Delete> button, you can add or delete ACL rule. Figure 53. ACL Interface Configuration Window (1) To perform detail configuration, select an interface in the list. Figure 54. ACL Interface Configuration Window (2) © SAMSUNG Electronics Co., Ltd. page 127 of 689...
  • Page 128 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Security>  <Access Control Lists>  <Access Group (System)> menu in the sub- menus. © SAMSUNG Electronics Co., Ltd. page 128 of 689...
  • Page 129: Class-Map Configuration

    [PROTOCOL_VALE/any] source IP range match src ip range [A.B.C.D] [A.B.C.D] 5) Exit the Class-map mode.  exit 6) To check the configuration information, use the ‘show running-config network’ command. © SAMSUNG Electronics Co., Ltd. page 129 of 689...
  • Page 130: Policy-Map Configuration

    [QUEUE_NUM] [Peak rate to a class of traffic]  shape-peak [PEAK_RATE] 5) Exit the policy-map mode.  exit 6) To check the configuration information, use the ‘show running-config network’ command. © SAMSUNG Electronics Co., Ltd. page 130 of 689...
  • Page 131: Service Policy Configuration

    An example of entering a command is shown below. APC/configure/interface ge2# service-policy in p1 APC/configure/interface ge2# no service-policy in p1 3) To check the configuration information, use the ‘show running-config network’ command. © SAMSUNG Electronics Co., Ltd. page 131 of 689...
  • Page 132: Time Profile

    The configured time profile list is displayed on the window. When you click the <Add> or <Delete> button, you can add or delete a time profile. Figure 56. Time Profile Configuration Window (1) © SAMSUNG Electronics Co., Ltd. page 132 of 689...
  • Page 133: Figure 57. Time Profile Configuration Window (2)

    An example of applying ‘t1’ to ‘acl’ is shown below. APC# configure terminal APC/configure# fqm-mode access-list ip acl1 time-profile t1 3) To check the configuration information, use the ‘show running-config network’ command. © SAMSUNG Electronics Co., Ltd. page 133 of 689...
  • Page 134: Figure 58. Applying To Acl

    In the menu bar of <WEC Main window>, select <Configuration> and then select the <Security>  <Access Control Lists>  <Access Group (Interface)> menu in the sub- menus. Perform configuration by referring to ‘ACL Rule Configuration’. © SAMSUNG Electronics Co., Ltd. page 134 of 689...
  • Page 135: Os-Aware

    OS_TYPE NAME os-type name to configure (Unknown, android, ios, windows, mac) os-aware ‘window7’ creation: APC# configure terminal APC/configure# os-aware APC/configure/os-aware # os-aware window7 seq 5 dhcp-option 1 eq AA os-type windows © SAMSUNG Electronics Co., Ltd. page 135 of 689...
  • Page 136 [any/A.B.C.D A.B.C.D] eq [eq_VALUE] [any/A.B.C.D A.B.C.D] eq [eq_VALUE] os-aware[OS_AWARE NAME] [[[dscp [*|[0-63]]|precedence [*|[0-7])]]]|]  no access-list [ip/ipv6/mac] [ACL_NAME] [deny/permit/time-profile] seq [seq_NUM] [1/*/ahp/eigrp/esp/gre/icmp/igmp/igrp/ip/nos/ospf/pcp/pim/17/6/tcp/ udp/1-255] [any/A.B.C.D A.B.C.D] eq [eq_VALUE] [any/A.B.C.D A.B.C.D] eq [eq_VALUE] os-aware[OS_AWARE NAME] [[[dscp [*|[0-63]]|precedence [*|[0- 7])]]]|] © SAMSUNG Electronics Co., Ltd. page 136 of 689...
  • Page 137 An example of applying ‘window7’ to ‘acl’ is as follows. APC# configure terminal APC/configure# fqm-mode access-list ip acl1 permit seq 1 icmp any any os-aware window7 3) To check the configuration information, use the ‘show running-config network’ command. © SAMSUNG Electronics Co., Ltd. page 137 of 689...
  • Page 138: Multicast To Unicast

    PIM Configuration As a multicast layer3 transmission protocol, the PIM has two modes, i.e. Dense mode and Sparse mode. The WEC8500 supports only PIM Sparse mode and the PIM Sparse mode can be configured for each interface. Configuration using CLI 1) Go to configure of CLI ...
  • Page 139: Figure 60. Pim-Sm Configuration Window (1)

    Figure 60. PIM-SM Configuration Window (1) Follow the below procedure to add a PIM. 1) In the PIM-SM initial window, click the <Add> button. 2) Click the <Select Interface> button. Figure 61. PIM-SM Configuration Window (2) © SAMSUNG Electronics Co., Ltd. page 139 of 689...
  • Page 140: Figure 62. Pim-Sm Configuration Window (3)

    3) Select an interface to add. Figure 62. PIM-SM Configuration Window (3) 4) The selected interface is displayed on the window. Click the <Apply> button to apply the configuration. Figure 63. PIM-SM Configuration Window (4) © SAMSUNG Electronics Co., Ltd. page 140 of 689...
  • Page 141: Igmp Snooping

    Configuring the IGMP Snooping of a VLAN interface: WEC8500# configure terminal WEC8500/configure# interface vlan1.10 WEC8500/configure/interface vlan1.10# ip igmp snooping In addition, a specific function of the IGMP Snooping functions of a VLAN interface can be enabled or disabled as shown in the below command.
  • Page 142: Figure 64. Igmp Snooping Config Window

    Figure 65. IGMP Snooping Mroute Creation Window (1) 1) In the PIM-SM initial window, click the <Add> button. 2) Click the <Select Vlan> button. Figure 66. IGMP Snooping Mroute Creation Window (2) © SAMSUNG Electronics Co., Ltd. page 142 of 689...
  • Page 143: Figure 67. Igmp Snooping Mroute Creation Window (3)

    Figure 67. IGMP Snooping Mroute Creation Window (3) 4) The selected interface is displayed on the window. Click the <Apply> button to apply the configuration. Figure 68. IGMP Snooping Mroute Creation Window (4) © SAMSUNG Electronics Co., Ltd. page 143 of 689...
  • Page 144: Deep Packet Inspection

    Profile name APPLICATION Application name DSCP DSCP value BW_CNT Bandwidth Contract. Kbps 3) Designate a WLAN where the profile is applied. APC# configure terminal APC/configure# wlan [ID] APC/configure/wlan [ID]# dpi-profile [NAME] © SAMSUNG Electronics Co., Ltd. page 144 of 689...
  • Page 145: Figure 69. Profile Creation Screen

    In the menu bar of <WEC Main Window>, select <Configuration>, and then select <Wireless QoS > Application QoS> in the submenus. Select <Profile>. Figure 69. Profile Creation Screen Figure 70. Profile Configuration Screen © SAMSUNG Electronics Co., Ltd. page 145 of 689...
  • Page 146: Configuring Application Group

    Configuration using Web UI In the menu bar of <WEC Main Window>, select <Configuration>, and then select <Wireless QoS > Application QoS> in the submenus. Select <Application Group>. Figure 71. Application Group Creation Screen © SAMSUNG Electronics Co., Ltd. page 146 of 689...
  • Page 147: Checking Statistics By Category

    Application Name | Upstream Packet Count | Upstream Byte | Downstream Packet Count Downstream Byte Upstream Kbps | | Downstream Kbps ** | Drop Drop | Drop | Drop ------------------------------------------------------------------- ---------------------------------------------------------------------- --------- © SAMSUNG Electronics Co., Ltd. page 147 of 689...
  • Page 148 FLASH | FTP | GMAIL | GOOGLE | GOOGLE_EARTH | GOOGLE_GROUPS | GOOGLE_MAPS | HTTP | HTTP_SECURE | TWITTER | YAHOO_MAIL | YAHOO_SEARCH | ORKUT FACEBOOK | LINKEDIN | VOICETALKSIGNAL | © SAMSUNG Electronics Co., Ltd. page 148 of 689...
  • Page 149 193 bytes | Upstream Packet Drop Count ....0 packets | Upstream Drop Byte ......0 bytes | Downstream Packet Drop Count ....0 packets | Downstream Drop Byte ....... 0 bytes © SAMSUNG Electronics Co., Ltd. page 149 of 689...
  • Page 150 4 ) Check the statistical information on specific WLANs. APC# show dpi stat wlan [ID] Parameter Description WLAN ID 5) Check the statistical information on all stations. APC# show dpi stat station © SAMSUNG Electronics Co., Ltd. page 150 of 689...
  • Page 151 9) Check the statistical information on all application groups. APC# show dpi stat group 10) Check the statistical information on specific application groups. APC# show dpi stat group [NAME] Parameter Description NAME Application group name © SAMSUNG Electronics Co., Ltd. page 151 of 689...
  • Page 152: Figure 73. Wlan/Device Statistics Screen

    CHAPTER 3. Data Network Function Configuration using Web UI In the menu bar of <WEC Main window>, select <Monitor> and then select <Application> submenu. Figure 73. WLAN/Device Statistics Screen Figure 74. WLAN Statistics Screen © SAMSUNG Electronics Co., Ltd. page 152 of 689...
  • Page 153: Figure 75. Device Statistics Screen

    CHAPTER 3. Data Network Function Figure 75. Device Statistics Screen © SAMSUNG Electronics Co., Ltd. page 153 of 689...
  • Page 154: Mdns Snooping

    1) Enable the mDNS Snooping function in the APC system. WEC8500/configure# ip mdns WEC8500/configure/ip/mdns# snoop WEC8500/configure/ip/mdns/snoop# mode bridge WEC8500/configure/ip/mdns/snoop# enable 2) Add an mDNS snooping service object. WEC8500/configure/ip/mdns# service AirPrint _ipp._tcp WEC8500/configure/ip/mdns# service AirTunes _raop._tcp WEC8500/configure/ip/mdns# service AppleTv _airplay.tcp Parameter Description SERVICE_NAME...
  • Page 155: Figure 76. Mdns Snooping Activation Window

    4) Configure the mDNS snooping profile object in the WLAN and the wired interface.  The Bonjour service configured in the mDNS snooping profile is forwarded to the configured WLAN and wired interface. WEC8500/configure# wlan 1 WEC8500/configure/wlan 1# mDNS-snoop-profile mdns_p1 WEC8500/configure/wlan 1# exit WEC8500/configure# interface vlan1.10 WEC8500/configure/interface vlan1.10# mDNS-snoop-profile mdns_p1 WEC8500/configure/interface vlan1.10# exit...
  • Page 156: Figure 77. Mdns Snooping Service Configuration

    4) Configure the mDNS snooping profile object in the WLAN and the wired interface. Select <Configuration>  <WLANs>  <Advanced>. Select the mDNS snooping profile object created in MDNS SNOOPING PROFILE for WLAN. © SAMSUNG Electronics Co., Ltd. page 156 of 689...
  • Page 157: Figure 80. Wlan Mdns Snooping Profile Object Configuration

    Figure 80. WLAN mDNS Snooping Profile Object Configuration Select <Configuration>  <Interfaces>. Select the mDNS snooping profile object created in mDNS Snooping Profile for the wired interface. Figure 81. mDNS Snooping Profile Configuration © SAMSUNG Electronics Co., Ltd. page 157 of 689...
  • Page 158: Chapter 4. Ap Connection Management

    MAC address. The maximum number of APC systems that can be registered per model is as follows: APC Model The maximum number of APC systems that can be registered WEC8500 WEC8050 © SAMSUNG Electronics Co., Ltd. page 158 of 689...
  • Page 159: Figure 82. Apc List Management Window

    In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>  <APC Lists> menu in the sub-menus. Operator can add a new APC by clicking the <Add> button in the figure. Figure 82. APC List Management Window © SAMSUNG Electronics Co., Ltd. page 159 of 689...
  • Page 160: Configuration Using Cli

    In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>  <General> menu in the sub-menus. After entering a configuration in the AP Management of the window, click the <Apply> button. Figure 83. Management interface configuration © SAMSUNG Electronics Co., Ltd. page 160 of 689...
  • Page 161: Wec8500/Configure# Apc

    Configures whether to allow connection to CAPWAP broadcast.  discovery-by-multicast: Configures whether to allow connection to CAPWAP multicast. (The ‘add-multicast-if’ must be configured before configuring whether to allow multicast connection.) © SAMSUNG Electronics Co., Ltd. page 161 of 689...
  • Page 162 CAPWAP control packet transmission. An example of entering a command is shown below. WEC8500/configure/apc/capwap# date-check-timer 30 3) To check the configured CAPWAP information, use the ‘show apc capwap summary’ command. © SAMSUNG Electronics Co., Ltd. page 162 of 689...
  • Page 163: Wec8500/Configure# Apc

    In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>  <General> menu from the sub-menus. After entering a configuration in the AP Registration of the window, click the <Apply> button. Figure 84. AP Registration Method Setup Window © SAMSUNG Electronics Co., Ltd. page 163 of 689...
  • Page 164: Managing Ap File Transmission

    APC. If a fault also occurs to the secondary APC, the AP is connected to the tertiary APC. For reference, the WEC8050 model does not support a tertiary APC. © SAMSUNG Electronics Co., Ltd. page 164 of 689...
  • Page 165: Del-Apc [Apc_Name]

    The APC must be an APC registered in the APC list. IP_ADDRESS IP address of an APC to add This address is an IP required by an AP to connect to the APC. © SAMSUNG Electronics Co., Ltd. page 165 of 689...
  • Page 166 - DHCP: Discovery type is interoperating with the DHCP server. To use this mode, IP ADDRESS POLICY of the AP must be set to DHCP. - Auto: Discovery type is automatically changed by the AP for automatic connection to the APC. © SAMSUNG Electronics Co., Ltd. page 166 of 689...
  • Page 167: Apc Name

    PUBLIC_IP_ADD PUBLIC IP address of the APC to add RESS This address is an IP required by an AP to connect to the APC. If the APC is in © SAMSUNG Electronics Co., Ltd. page 167 of 689...
  • Page 168: Figure 86. Ap Retrieving Window

    After configuring the DISCOVERY TYPE of AP to ‘APC Referal’, select the PRIMARY CONTROLLER NAME, SECONDARY CONTROLLER NAME, and TERTIARY CONTROLLER NAME. For the WEC8500 model, the TERTIARY CONTROLLER NAME is not shown in the menu.
  • Page 169: Figure 87. Ap Redundancy Configuration Window

    - Auto: Discovery type is automatically changed by the AP for automatic connection to the APC. - DHCP: Discovery type is interoperating with the DHCP server. To use this mode, IP ADDRESS POLICY of the AP must be set to DHCP. © SAMSUNG Electronics Co., Ltd. page 169 of 689...
  • Page 170: Ap Management

    The APC asks the AP_1 to add the wlan5 and wlan6. Configuration using CLI To manage an AP group, execute the command as follows. 1) Go to the configure mode of the CLI. WEC8500# configure terminal WEC8500/configure# © SAMSUNG Electronics Co., Ltd. page 170 of 689...
  • Page 171: Figure 88. Ap Groups Configuration Window

    <AP Groups> menu in the sub-menus. It provides the group configuration of the AP. Click the <Add> or <Delete> button to add or delete a group. Figure 88. AP groups configuration Window Figure 89. AP Group Addition Window © SAMSUNG Electronics Co., Ltd. page 171 of 689...
  • Page 172 3) Enter the profile configuration mode for the AP group.  Profile 4) Configure the following AP group profiles:  description  overwrite-ap-mode  no overwrite-ap-mode  ap-mode  overwrite-location  no overwrite-location  location © SAMSUNG Electronics Co., Ltd. page 172 of 689...
  • Page 173 If the APCs are configured for redundancy, this configures the method used for APs to connect to the APC. The following modes are available: - ap-followed: The discovery type and discovery list configured for the © SAMSUNG Electronics Co., Ltd. page 173 of 689...
  • Page 174: Figure 90. General Configuration Window For Ap Group

    If the OVERWRITE AP CONFIG checkbox is selected, the respective setting is applied to all APs within the group. Figure 90. General Configuration Window for AP Group © SAMSUNG Electronics Co., Ltd. page 174 of 689...
  • Page 175 AP group. If you delete an AP from groups other than the default group, the deleted AP is then included in the default AP group.  add-ap [AP_NAME]  no add-ap [AP_NAME] 4) Use the ‘show ap-group summary’ command to check the AP group information. © SAMSUNG Electronics Co., Ltd. page 175 of 689...
  • Page 176: Figure 91. Ap Add/Remove Window For Ap Group

    3) Add/remove an WLAN to/from the AP group. Use ‘no’ parameter in front of the command to delete an WLAN from the AP group.  add-wlan [WLAN_ID]  no add-wlan [WLAN_ID] 4) Use the ‘show ap-group summary’ command to check the AP group information. © SAMSUNG Electronics Co., Ltd. page 176 of 689...
  • Page 177: Figure 92. Wlan Add/Remove Window For Ap Group

    AP group to configure. Under the ‘WLANs’ tab of the AP group, WLANs can be added or removed. Figure 92. WLAN Add/Remove Window for AP Group © SAMSUNG Electronics Co., Ltd. page 177 of 689...
  • Page 178: Figure 93. 802.11A/N/Ac Window For Ap Group

    SERVICE: Enable or disable the radio service. [OPERATIONAL TYPE]  Enable or disable the 11n/ac. [OPTIONS]  Guard-interval (11ac): select short or long for Guard-interval 20/40/80 Mhz.  Beamforming: Enable or disable the Beamforming. © SAMSUNG Electronics Co., Ltd. page 178 of 689...
  • Page 179 BANDWIDTH: select bandwith (range: 20, 40, 80). for 802.11a/n/ac.  Max. Allowed Stations on an AP: define max allowed stations for Radio.  CONTROLLED VOICE OPTIMIZATION: set voice optimization.  Multi-antenna Mode: select Dynamic/Static. © SAMSUNG Electronics Co., Ltd. page 179 of 689...
  • Page 180: Figure 94. 802.11B/G/N Window For Ap Group

    SERVICE: Enable or disable the radio service. [OPERATIONAL TYPE]  Enable or disable of 11n service. [OPTIONS]  Guard-interval (11n): select short/long for Guard-interval 20/40 Mhz.  Beamforming: Enable or disable of Beamforming. © SAMSUNG Electronics Co., Ltd. page 180 of 689...
  • Page 181: Advanced Configuration

    2) Create an AP group or enter the AP group configuration mode.  ap-group [AP_GROUP_NAME] 3) Enter the profile configuration mode for the AP group.  profile 4) Configure the following AP group profiles:  overwrite-apc-ap-timer © SAMSUNG Electronics Co., Ltd. page 181 of 689...
  • Page 182  no overwrite-poe-type  overwrite-uplink-bandwidth  no overwrite-uplink-bandwidth  uplink-qos  overwrite-temperature-alarm  no overwrite-temperature-alarm  temperature-alarm-on-level  temperature-alarm-off-level  temperature-alarm-control-type  overwrite-link-aggregation  no overwrite-link-aggregation  link-aggregation  no link-aggregation © SAMSUNG Electronics Co., Ltd. page 182 of 689...
  • Page 183 APs within the group. DTLS-POLICY Configures the DTLS Policy of an AP. OVERWRITE-LED-CONTROL If overwrite-led-control is enabled, the LED settings of the AP group are applied to all APs within the group. © SAMSUNG Electronics Co., Ltd. page 183 of 689...
  • Page 184 AP group is adopted to all AP in the group. LINK-TEST Check quality of WAN when AP making a booting. 5) Use the ‘show ap-group detail [AP_GROUP_NAME]’ command to check the AP group information. © SAMSUNG Electronics Co., Ltd. page 184 of 689...
  • Page 185 STA’s scanning scan-trigger-level Set a trigger level for STA's scanning start target-ap Set config target ap <cr> WEC8500/configure/ap-group default/airmove# enable ? <cr> WEC8500/configure/ap-group default/airmove# decision-delta ? 1 - 100 Enter the value [dBm] WEC8500/configure/ap-group default/airmove# number-of-channel ? 1 - 20...
  • Page 186: Figure 95. Ap Group Airmove Configuration

    WEC8500/configure/ap-group default/airmove# target-ap ? keep-ap-config Keep ap config WEC8500/configure/ap-group default/airmove# end 5) Use the ‘show airmove group [ap_group_name]’ command to check the AP group information. WEC8500# show airmove group default Airmove Group Configurations ---------------------------- Airmove State Disable Target AP Keep Ap Config...
  • Page 187 STA's scanning scan-trigger-level Set a trigger level for STA's scanning start target-ap Set config target ap <cr> WEC8500/configure/ap-group default/sta-ssl# enable ? <cr> WEC8500/configure/ap-group default/sta-ssl# decision-delta ? 1 - 100 Enter the value [dBm] WEC8500/configure/ap-group default/sta-ssl# number-of-channel ? 1 - 20 Enter the number ©...
  • Page 188 WEC8500/configure/ap-group default/sta-ssl# target-ap ? keep-ap-config Keep ap config WEC8500/configure/ap-group default/sta-ssl# end 5) To check the AP group information, use the ‘show stats-report conf [ap_group_name]’ command. WEC8500# show sta-ssl group default SSL Group Configurations ---------------------------- Sta SSL State Disable Target AP...
  • Page 189: Figure 96. Ap Group Ssl Configuration

    Enables/disables the IPSec function. PRIMARY-IP Configures the address of the primary security gateway. RIGHT-SUBNET Configures the address of the traffic selector for IPSec. RIGHT-SUBNET-MASK Configures subnet mask of the traffic selector for IPSec. © SAMSUNG Electronics Co., Ltd. page 189 of 689...
  • Page 190: Figure 97. Advanced Configuration Window For Ap Group

    AP group to configure. Advanced settings and AirMove settings of the AP group can be changed under the ‘Advanced’ tab of AP Group. Figure 97. Advanced Configuration Window for AP Group © SAMSUNG Electronics Co., Ltd. page 190 of 689...
  • Page 191: Configuring Remote Ap Group

    APC. If an AP moves between remote AP groups, the AP is not rebooted. 4.2.2.1 Addition/Removal Setting Configuration using CLI 1) Go to the configure mode of the CLI. WEC8500# configure terminal WEC8500/configure# 2) Create an AP group.  ap-group[REMOTE_AP_GROUP_NAME] © SAMSUNG Electronics Co., Ltd. page 191 of 689...
  • Page 192: Figure 98. Remote Ap Group Add/Remove Window

    Configuration using CLI To configure the local authentication of the remote AP group, perform the command as follows: 1) Go to configure Remote AP Group configuration mode of CLI. WEC8500# configure terminal WEC8500/configure# © SAMSUNG Electronics Co., Ltd. page 192 of 689...
  • Page 193 <AP Groups> menu in the sub-menus. After selecting the name of a remote AP group, configure a Radius server or add or delete users in “User Authentication” item of the ‘Remote AP Group’ tab. © SAMSUNG Electronics Co., Ltd. page 193 of 689...
  • Page 194: Figure 100. Local Authentication Configuration Window For Remote Ap Group

    To configure the split ACL of the remote AP group, perform the command as follows: 1) Go to configure  Remote AP Group configuration mode of CLI. WEC8500# configure terminal WEC8500/configure# WEC8500/configure/ap-group [remote-ap-group-name] WEC8500/configure/ap-group/[remote-ap-group-name]#remote © SAMSUNG Electronics Co., Ltd. page 194 of 689...
  • Page 195: Figure 101. Window For Configuring Tunneling Forwarding Of Remote Ap Group

    You can configure the VLAN ID, ACL, and PreAuth ACL to a WLAN set with local bridging among WLANs included in the remote AP group. You can use Interface Group at the Interface which is generated same Remote AP Group’s interface menu. © SAMSUNG Electronics Co., Ltd. page 195 of 689...
  • Page 196 Local Bridging in the “ACL Profile” item of the 'Remote AP Group' tab. In addition, you can click the “Send To APs” button to send the information on ACL Profile, Tunnel Forwarding, and Local Bridging Forwarding to APs. © SAMSUNG Electronics Co., Ltd. page 196 of 689...
  • Page 197: Figure 102. Window For Configuring Local Bridging Forwarding Of Remote Ap Group

    2) Enable/disable DHCP Server AP for using as a DHCP Server.  server-ap [AP PROFILE NAME]  no server-ap 4) Can check DHCP information using ‘show ap-group remote dhcp summary’ command. © SAMSUNG Electronics Co., Ltd. page 197 of 689...
  • Page 198: Figure 103. Remote Ap Group's Dhcp Configure Window

    After selecting the name of the remote AP group, you can configure DHCP in the “DHCP” item of the 'Remote AP Group' tab. Figure 103. Remote AP Group’s DHCP configure window © SAMSUNG Electronics Co., Ltd. page 198 of 689...
  • Page 199 In the menu bar of <WEC Main window>, select <Configuration> and then select the <AP Groups> menu in the sub-menus. After selecting the name of the remote AP group, you can configure DHCP in the “INTERFACE” item of the 'Remote AP Group' tab. © SAMSUNG Electronics Co., Ltd. page 199 of 689...
  • Page 200: Ap Time Synchronization Per Group

    The APC provides a function for configuring the time configuration method of the AP. Configuring Time Stamp type using CLI 1) Go to configure  apc  ap-time-config configuration mode of CLI. WEC8500# configure terminal WEC8500/configure# apc WEC8500/configure/apc# ap-time-config WEC8500/configure/apc/ap-time-config# © SAMSUNG Electronics Co., Ltd. page 200 of 689...
  • Page 201: Figure 105. Ap Time Synchronization Configuration Options

    AP (TimeStamp or NTP), timestamp interval, and NTP polling interval. Also, you can add/remove NTP server from which to fetch time access information for the AP. Figure 105. AP Time Synchronization Configuration Options © SAMSUNG Electronics Co., Ltd. page 201 of 689...
  • Page 202: Ap Configuration

    To configure AP information, execute the command as follows: 1) Go to configure  AP configuration mode of CLI. WEC8500# configure terminal WEC8500/configure# ap [ap profile name] WEC8500/configure/ap ap_1# If there exists the same AP when entering [ap profile name], you are guided to the mode where operator can configure the AP.
  • Page 203 If the APC cannot receive an echo message from an AP until two times of echo-interval is elapsed, the APC assumes that the AP is down (Unit: seconds) © SAMSUNG Electronics Co., Ltd. page 203 of 689...
  • Page 204 APC (Unit: seconds)  retransmit-interval [INTERVAL]: Configures the waiting time until the AP retransmits a CAPWAP control message when there is no reply from the APC (unit: seconds) © SAMSUNG Electronics Co., Ltd. page 204 of 689...
  • Page 205 WEC8500/configure/ap ap_1# ip-sec WEC8500/configure/ap ap_1/ip-sec# 2) Configure ip-sec for the AP using the commands below.  enable  primary-ip  right-subnet  right-subnet-mask  auth-mode  ike-version  ike-lifetime  ipsec-lifetime © SAMSUNG Electronics Co., Ltd. page 205 of 689...
  • Page 206: Figure 107. Ap Profile Setting (1)

    AP GROUP NAME: Indicates name of the AP GROUP to which the AP belongs.  REMOTE AP GROUP NAME: Indicates name of the REMOTE AP GROUP to which the AP belongs. © SAMSUNG Electronics Co., Ltd. page 206 of 689...
  • Page 207 <Access Points>  AP  <Advanced> menu in the sub-menus. he setting options in the Advance tab are as follows. Fill in each item and click the <Apply> button to apply the settings. © SAMSUNG Electronics Co., Ltd. page 207 of 689...
  • Page 208: Ap Mode Configuration

    - meshAp: AP mode of wireless connection between APC and root AP or another mesh AP. 3) To check the information of a configured AP, use the ‘show ap detail [AP_NAME]’ command. © SAMSUNG Electronics Co., Ltd. page 208 of 689...
  • Page 209: Figure 109. Ap Mode Configuration

    Only an alphanumeric and special letters of up to eight characters can be entered, and must have more than one alphabet, number, special letters. Level This is the level of the AP CLI account. Available values are administrator/operator/monitor. © SAMSUNG Electronics Co., Ltd. page 209 of 689...
  • Page 210: Figure 110. Ap Cli Account Add/Remove Window

    Configure the SNMP port number of the AP.  Port [PORT NUMBER] Configure the Read Only Community Name of the AP.  ro-community [COMMUNITY NAME] Configure the Write Only Community Name of the AP.  rw-community [COMMUNITY NAME] © SAMSUNG Electronics Co., Ltd. page 210 of 689...
  • Page 211: Figure 111. Ap Snmp V1/V2C Community Configuration Window

    In the menu bar of <WEC Main Window>, select <Administration>, select <AP> in the submenu, and then select <v1/v2c Community> or <v3 User> to configure the SNMP agent information. Figure 111. AP SNMP v1/v2c Community Configuration Window Figure 112. AP v3 User Configuration Window © SAMSUNG Electronics Co., Ltd. page 211 of 689...
  • Page 212: Information Management

    Real-time Interface Statistics Information Configuration using CLI 1) Go to configure  AP configuration. WEC8500# configure terminal WEC8500/configure# ap ap_1 WEC8500/configure/ap ap_1# 2) Configure to make real-time interface statistics information updated periodically. © SAMSUNG Electronics Co., Ltd. page 212 of 689...
  • Page 213: Figure 113. Ap Ports Window

    As shown below, you can retrieve the real-time interface statistics of the AP. Select an item in the list, and then you can check detail information. Figure 113. AP Ports window Figure 114. AP Ports detail information window © SAMSUNG Electronics Co., Ltd. page 213 of 689...
  • Page 214: Figure 115. Ap Tech Support Information Receiving Window

    WEC8500# configure terminal WEC8500/configure# ap [ap profile name] WEC8500/configure/ap ap_1# tech-support WEC8500/configure/ap ap_1/tech-support# 2) Request the coredump file of the AP. WEC8500/configure/ap ap_1/tech-support# get-coredump (system / radio- coredump) 3) Request the crashfile of the AP. WEC8500/configure/ap ap_1/tech-support# get-crash-file (system / radio-coredump) 4) Request the log file of the AP.
  • Page 215: Outdoor Ap Configuration

    1) Outdoor APs are not included in the AP count of the APC license. 2) Outdoor APs are not included in the ordinary AP count. 3) The maximum up-ported outdoor AP count is 300 for the WEC8500 model and 75 for the WEC8050 model.
  • Page 216: Ap Package Upgrade

    Are you sure you want to continue? (y/n) : y WEC8500/configure/ap ap_1# 3) To check the upgrade file information of the requested AP, use the following command. WEC8500/configure/ap ap_1# show ap upgrade list /* (RC/FR/RC) : RetryCount/FailReason/RebootCause /* Pri : VersionPriority (MD-model,A-AP config)
  • Page 217 - keeping-individual: While maintaining individually configured ap version, perform upgrade for the rest APs. [transfer-protocol] This command selects a transmission protocol that is used to transmit the package file of an AP from the WEC8500 to the AP.  Transfer-protocol [AP TRANSFER MODE] Parameter...
  • Page 218 This command provides the function of stopping the image upgrade of all the APs.  stop [show ap upgrade] To check the upgrade information of an AP, use the following command.  show ap upgrade summary © SAMSUNG Electronics Co., Ltd. page 218 of 689...
  • Page 219: Figure 117. Ap Upgrade

    1) In the AP Upgrade window, click the <Global> button. 2) The <Global> area is displayed on the window. After configuring each item, click the <Apply> button. Figure 118. AP upgrade-global © SAMSUNG Electronics Co., Ltd. page 219 of 689...
  • Page 220: Figure 119. Ap Upgrade-Individual

    SCOPE: Selects upgrade method. The <to individual> upgrades the selected AP to a specific package and the <to global> makes a select AP working as global.  FORCE UPGRADE: Enable or disable  SELECT AP PACKAGE: Selects an AP package to upgrade.. © SAMSUNG Electronics Co., Ltd. page 220 of 689...
  • Page 221: Remote Ap Package Upgrade

    4.2.8.1 Activating Upgrade The operator can enable/disable the AP upgrade in the remote group. When the AP upgrade is enabled, version priority in AP upgrade status changes to Remote. © SAMSUNG Electronics Co., Ltd. page 221 of 689...
  • Page 222 WEC8500/configure# ap-group rUpgrade WEC8500/configure/ap-group rUpgrade# remote WEC8500/configure/ap-group rUpgrade/remote# upgrade WEC8500/configure/ap-group rUpgrade/remote/upgrade# enable WEC8500/configure/ap-group rUpgrade/remote/upgrade# no enable CLI for checking configuration: WEC8500 # show remote-ap-group upgrade config rUpgrade ================== Remote Ap Group Upgrade Config ================= Group Name : rUpgrade Enable : Enable...
  • Page 223: Figure 121. Remote Ap Group Upgrade Activation_1

    CHAPTER 4. AP Connection Management Configuration using Web UI Administration > Package Upgrade > Remote AP Group Example: Figure 121. Remote AP Group Upgrade Activation_1 Figure 122. Remote AP Group Upgrade Activation_2 © SAMSUNG Electronics Co., Ltd. page 223 of 689...
  • Page 224 WEC8500/configure/ap-group rUpgrade# remote WEC8500/configure/ap-group rUpgrade/remote# upgrade WEC8500/configure/ap-group rUpgrade/remote/upgrade# select-masterAP ap_1 WEC8500/configure/ap-group rUpgrade/remote/upgrade# delete-masterAP [weafama/weafamb] CLI for checking configuration: WEC8500# show remote-ap-group upgrade config rUpgrade ================== Remote Ap Group Upgrade Config ================= Group Name : rUpgrade Enable : Enable Type Default...
  • Page 225: Figure 123. Checking Master Ap Configuration

    CHAPTER 4. AP Connection Management Configuration using Web UI Administration > Package Upgrade > Remote AP Group Example: Figure 123. Checking Master AP Configuration Figure 124. Checking Master AP Configuration © SAMSUNG Electronics Co., Ltd. page 225 of 689...
  • Page 226 WEC8500/configure/ap-group rUpgrade# remote WEC8500/configure/ap-group rUpgrade/remote# upgrade WEC8500/configure/ap-group rUpgrade/remote/upgrade# select-package weafama weafama_1.7.0.U.bin WEC8500/configure/ap-group rUpgrade/remote/upgrade#delete-package [weafama/weafamb] CLI for checking configuration: WEC8500# show remote-ap-group upgrade config rUpgrade ================== Remote Ap Group Upgrade Config ================= Group Name : rUpgrade Enable : Enable Type : Default...
  • Page 227: Figure 125. Ap Package Configuration

    WEC8500/configure# ap-group rUpgrade WEC8500/configure/ap-group rUpgrade# remote WEC8500/configure/ap-group rUpgrade/remote# upgrade WEC8500/configure/ap-group rUpgrade/remote/upgrade# start WEC8500/configure/ap-group rUpgrade/remote/upgrade# stop CLI for checking configuration: WEC8500# show remote-ap-group upgrade config rUpgrade ================== Remote Ap Group Upgrade Config ================= Group Name : rUpgrade Enable : Enable Type...
  • Page 228: Figure 126. Starting Ap Upgrade

    ForceOption : Disable weafama : ap_1 (APID:1, IP:10.10.10.160) : weafama_1.7.0.U.bin (1.7.0.U) weafamb : (APID:0, IP:0.0.0.0) : () WEC8500# show remote-ap-group upgrade list rUpgrade /* (RC/FR/RC) : RetryCount/FailReason/RebootCause AP_ID Model Version(config/current) Status(RC/FR/RC) MasterAp WEA303i Remote/1.7.0.U2 DownloadSuccess( 0/ 0/128) MasterApCfg WEA312i Remote/1.7.0.U2 DownloadSuccess( 0/ 0/146) - WEA303i Remote/1.7.0.U2...
  • Page 229 Configuration using CLI Example: WEC8500# configure terminal WEC8500/configure# ap-group rUpgrade WEC8500/configure/ap-group rUpgrade# remote WEC8500/configure/ap-group rUpgrade/remote# reboot upgrade CLI for checking configuration: WEC8500# show remote-ap-group upgrade config rUpgrade ================== Remote Ap Group Upgrade Config ================= Group Name : rUpgrade Enable : Enable Type...
  • Page 230: Figure 127. Restarting And Upgrading Ap

    CHAPTER 4. AP Connection Management Configuration using Web UI Administration > Package Upgrade > Remote AP Group Example: Figure 127. Restarting and Upgrading AP © SAMSUNG Electronics Co., Ltd. page 230 of 689...
  • Page 231: Chapter 5. Wlan Management

    APC. To use WLAN service, it is necessary to basically configure AP group and interface group and specify Service Set Identifier (SSID). Configuration using CLI Go to the wlan configuration mode from the configure mode of CLI. WEC8500# configure terminal WEC8500/configure# wlan [WLAN ID] Parameter Description WLAN_ID WLAN ID (range: 1-255) The WLAN configuration procedures are as follows: 1) Go to configure ...
  • Page 232 Maximum 16 WLANs can be allocated to each AP group. WEC8500# configure terminal WEC8500/configure# ap-group apg_01 WEC8500/configure/ap-group apg_01# add-wlan 1 3) Configure an interface group to which the WLAN service will be provided. Several VLAN interfaces can be added to an interface group, and the WLAN service is available only through the interface.
  • Page 233: Figure 128. Wlan Basic Configuration (1)

    <General> tab. In the screen, you can use various functions such as adding or deleting a WLAN. Figure 128. WLAN basic configuration (1) Figure 129. WLAN basic configuration (2) © SAMSUNG Electronics Co., Ltd. page 233 of 689...
  • Page 234: Wlan Additional Configuration

    WEC8500/configure/wlan 1# aaa-override 3) Determine whether to configure the Guest service.  guest-flag 4) Configure a VLAN ID to use locally.  local-vlan [VLAN_ID] Parameter Description VLAN_ID VLAN ID (range: 1-4094) © SAMSUNG Electronics Co., Ltd. page 234 of 689...
  • Page 235 10) Multicast packets can be forwarded to the WLAN. The default value is disable. WEC8500/configure/wlan 1# multicast-enable 11) Configure the 802.11k service for the WLAN. The default value is enable.  voice-enterprise-80211k [enable/disable] [CAPABILITIES] © SAMSUNG Electronics Co., Ltd. page 235 of 689...
  • Page 236: Wlan-Based Acl Configuration

    WLAN. Configuration using CLI The procedures for configuration are as follows. 1) Before applying ACL, retrieve ACL that is configured as WLAN ACL. WEC8500# show running-config network fqm-mode … ip access-group wireless acl1 2) Go to configure  wlan configuration mode of CLI.
  • Page 237: Figure 130. Wlan-Based Acl Configuration

    STATION IDLE TIMEOUT: Enter a station idle timeout value. The value range is 30- 3600 and it must be the multiple of 15.  VOIP FAILURE DETECT: Configures call failure detection. © SAMSUNG Electronics Co., Ltd. page 237 of 689...
  • Page 238: Managing Root Service

    Disabled 3) Use the ‘show wlan detail repeater’ command to check the root WLAN settings. WEC8500/configure/apc# show wlan detail repeater [Changing to Root AP] The procedure of changing a W-EP AP to a Root AP is as follows: 1) Go to the configure mode of the CLI.
  • Page 239: Figure 131. Root Service Management (1)

    CHAPTER 5. WLAN Management 4) Configure it to a Root AP. WEC8500/ configure/ap ap_1# profile ap-mode rootAp 5) Restart the configured AP. [Changing to Repeater AP] The procedure of changing a W-EP AP to a Repeater AP is as follows: 1) Go to the configure mode of the CLI.
  • Page 240: Figure 132. Root Service Management (2)

    In the menu bar of <WEC Main window>, select <Configuration> and then select the <Access Points>  AP selection  <General> menu in the sub-menus. After selecting AP MODE item, click the <Apply> button and restart the AP. Figure 132. Root service management (2) © SAMSUNG Electronics Co., Ltd. page 240 of 689...
  • Page 241: Mcs Configuration Management By Wlan

    2) Go to 80211a or 80211b depending on the bandwidth to configure. WEC8500/configure/wlan 1# 80211a WEC8500/configure/wlan 1/80211a# 3) Configure the data rate. The settings described as shown below can be made only when the corresponding WLAN is set to be disabled. WEC8500/configure/wlan 1/80211a# rate [MODE][RATE] Parameter Description Mode Mode (basic/supported) - Basic: Basic rate supported for a terminal to access to an AP.
  • Page 242: Figure 133. Mcs By Wlan: 802.11A/N/Ac Configuration Management Window

    CHAPTER 5. WLAN Management 5) Configure the 802.11ac Modulation and Coding Scheme (MCS) rate. Only 5G bandwidth for 802.11ac MCS is configurable. WEC8500/configure/wlan 1/80211a# mcs-11ac num-ss 2/3 enter the maximum MCS(7~9) for 1 spatial stream(s): 7 the maximum MCS : 7...
  • Page 243: Figure 134. Mcs By Wlan: 802.11B/G/N Configuration Management Window

    CHAPTER 5. WLAN Management Figure 134. MCS by WLAN: 802.11b/g/n Configuration Management window © SAMSUNG Electronics Co., Ltd. page 243 of 689...
  • Page 244: Local Switching

    2) Enter into the configure  wlan configuration mode of CLI, and configure ‘tunnel- mode’ to ‘local-bridging’. WEC8500# configure terminal WEC8500/configure# wlan 1 WEC8500/configure/wlan 1# tunnel-mode local-bridging  tunnel-mode local-bridging 3) Enter into the configure  AP configuration mode of CLI, and configure a local Vlan ID per WLAN.
  • Page 245: Figure 135. Local Switching Configuration Window Of Wlan

    <WLANs> menu in the sub-menus. Select a WLAN ID to change in the WLANs screen and go to the <General> tab. After changing the ‘CAPWAP TUNNEL MODE’ to ‘Local Bridging’, click the <Apply> button. Figure 135. Local Switching Configuration Window of WLAN © SAMSUNG Electronics Co., Ltd. page 245 of 689...
  • Page 246: Figure 136. Split Acl Configuration Window Of Wlan Allocated To Ap

    Figure 136. Split ACL Configuration Window of WLAN Allocated to AP Select the WLAN set with local bridging and then enter IF Group/ACL/Pre-Auth. ACL before clicking the <Add> button. Figure 137. IF Group/ACL/Pre-Auth.ACL Configuration Window of WLAN Allocated to AP © SAMSUNG Electronics Co., Ltd. page 246 of 689...
  • Page 247: Security And Authentication

    CHAPTER 5. WLAN Management Security and Authentication The Samsung W-EP AP/APC supports the security and authentication function defined in the IEEE 802.11-based wireless LAN security standard and its main mechanism is as follows:  Wired Equivalent Privacy (WEP)  Wi-Fi Protected Access Version 1 (WPA1), Wi-Fi Protected Access Version 2 (WPA2) ...
  • Page 248: Figure 138. Initialization Of Wlan Security Function

    - 802.1x: 802.1x authentication type through a RADIUS server PSK FORMAT PSK key input type - ASCII: ASCII character string - HEX: Hexadecimal value PSK KEY PSK key - 8-63 ASCII character string © SAMSUNG Electronics Co., Ltd. page 248 of 689...
  • Page 249: Wpa/Wpa2 Psk Configuration

    The WPA/WPA2 PSK, one of wireless LAN authentication types, can be used in a small size network where an authentication server is not installed. The procedure of WPA/ WPA2 PSK configuration is as follows. © SAMSUNG Electronics Co., Ltd. page 249 of 689...
  • Page 250 WPA type (wpa/wpa2): WPA Version 2 must be enabled at all times. - wpa: WPA Version 1 - wpa2: WPA Version 2 4) Configure the PSK key. WEC8500/configure/wlan 1/security# psk [KEY_TYPE] [KEY_STRING] Parameter Description KEY_TYPE PSK key input format (ascii/hex)
  • Page 251 6) Configure the key management algorithm to PSK. WEC8500/configure/wlan 1/security# keymgmt psk 7) Disable the 802.1x key management algorithm. WEC8500/configure/wlan 1/security# no keymgmt ieee8021x 8) Disable the 802.1x authentication. WEC8500/configure/wlan 1/security# no ieee8021x 9) After applying the changed configuration, exit the security configuration mode.
  • Page 252: Wpa/Wpa2 802.1X Configuration

    1) Go to configure  wlan configuration mode of CLI. WEC8500# configure terminal WEC8500/configure# wlan 1 2) Go to security configuration mode and initialize the configuration. WEC8500/configure/wlan 1# security WEC8500/configure/wlan 1/security# setDefault © SAMSUNG Electronics Co., Ltd. page 252 of 689...
  • Page 253 - tkip: TKIP type. TKIP cannot be configured for WPA Version 2. - ccmp: AES-CCMP type 5) Disable the PSK key management algorithm. WEC8500/configure/wlan 1/security# no keymgmt psk 6) Configure the key management algorithm to 802.1x. WEC8500/configure/wlan 1/security# keymgmt ieee8021x 7) Enable the 802.1x authentication.
  • Page 254 WEC8500/configure/wlan 1/security# apply WEC8500/configure/wlan 1/security# exit 11) To check the configuration information, use the following command. WEC8500/configure# show wlan security summary 12) To check configuration information, use the ‘show wlan security summary’ command. Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <WLANs>...
  • Page 255: Figure 140. Wpa/Wpa2 802.1X Configuration (1)

    Accounting information transmission interval (unit: s, range: 0- 10000, default: 600), When set to 0, the periodic accounting information transmission function is disabled. Select AUTHENTICATION SERVER and ACCOUNTING SERVER as Enable and configure the rest items. © SAMSUNG Electronics Co., Ltd. page 255 of 689...
  • Page 256: Figure 141. Wpa/Wpa2 802.1X Configuration (2)

    Select the L2 Security Type as WPA + WPA2 and AUTH KEY MGMT as 802.1x. After configuring the rest values as required, click the <Apply> button. For more information about detail configuration item of L2 tab, see ‘5.3.1 Initialization of WLAN Security Function’. © SAMSUNG Electronics Co., Ltd. page 256 of 689...
  • Page 257: Static Wep Configuration

    5) Configure the WEP Shared Key mode. WEC8500/configure/wlan 1/security# wep shared 6) Use the following command to configure the cryptographic key of WEP. WEC8500/configure/wlan 1/security# wep encryption [KEY_TYPE] [KEY_STRING] [KEY_INDEX] [KEY_LENGTH] © SAMSUNG Electronics Co., Ltd. page 257 of 689...
  • Page 258: Figure 142. Static Wep Configuration

    Select the L2 Security Type as Static WEP. After configuring the rest values as required, click the <Apply> button. For more information about detail configuration item of L2 tab, see ‘5.3.1 Initialization of WLAN Security Function’. © SAMSUNG Electronics Co., Ltd. page 258 of 689...
  • Page 259: Dynamic Wep Configuration

    WEC8500/configure/wlan 1/security# setDefault 3) Enable the 802.1x authentication. WEC8500/configure/wlan 1/security# ieee8021x 4) To configure the length of a cryptographic key of dynamic WEP, execute the following command. WEC8500/configure/wlan 1/security# ieee8021x encryption [KEY_LENGTH] Parameter Description KEY_LENGTH Key length (Bit unit) - 40...
  • Page 260: Figure 143. Dynamic Wep Configuration Window

    7) After applying the changed configuration, exit the security configuration mode. WEC8500/configure/wlan 1/security# apply WEC8500/configure/wlan 1/security# exit 8) To check the configuration information, execute the following command. WEC8500/configure# show wlan security summary 9) To check configuration information, execute the ‘show wlan security summary’ command. Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration>...
  • Page 261 Select the L2 Security Type as Dynamic WEP. After configuring the rest values as required, click the <Apply> button. For more information about detail configuration item of L2 tab, see ‘5.3.1 Initialization of WLAN Security Function’. © SAMSUNG Electronics Co., Ltd. page 261 of 689...
  • Page 262: Dhcp Configuration

    <DHCP>  <Internal Server> menu in the sub-menus. Figure 144. DHCP server configuration Enable/Disable the DHCP SERVER SERVICE item in the Internal Server window to enable or disable a DHCP server. © SAMSUNG Electronics Co., Ltd. page 262 of 689...
  • Page 263: Dhcp Pool

    To configure the DHCP Pool related function, execute the command as follows to go to the DHCP pool mode. WEC8500# configure terminal WEC8500/configure # ip dhcp pool test WEC8500/configure/ip/dhcp/pool test# [Configuring IP address] Before configuring a DHCP pool, you should configure a network first. If the network is not configured, you cannot execute other commands.
  • Page 264 DNS Server’s IP address IP_ADDRESS [Configuring Domain Name] This command configures or deletes a domain name.  domain-name [DOMAIN]  no domain-name [DOMAIN] Parameter Description DOMAIN Domain name to configure (e.g. samsung APC.co.kr) © SAMSUNG Electronics Co., Ltd. page 264 of 689...
  • Page 265 As shown in the below example, 100.100.100.10 can be always allocated to the IP address of a wireless terminal whose MAC address is 11:22:33:44:55:66. WEC8500/configure/ip/dhcp/pool test# fix-address 11:22:33:44:55:66 100.100.100.10 [Configuring IP Address Lease Time] Configure the time when a wireless terminal receives an IP address. The ‘lease infinite’...
  • Page 266 Option: Up to 254 can be entered (1-254).  Data type: string (character string), octet (hex string), int (32 bit integer), uint (32-bit unsigned integer), int16 (16-bit integer), uint16 (16-bit unsigned integer), ipaddress (IP address) © SAMSUNG Electronics Co., Ltd. page 266 of 689...
  • Page 267 - no user-option [1-254] ipaddress A.B.C.D [active/passive] no user-option all Deletes all the configured options. A usage example is given below. WEC8500/configure/ip/dhcp/pool test# user-option 3 string “hi, there” active WEC8500/configure/ip/dhcp/pool test# user-option 200 octet 33:4A:5C:6F:DD passive WEC8500/configure/ip/dhcp/pool test# user-option 201 int -3000...
  • Page 268: Figure 145. Dhcp Pool (1)

    Click the <Add> or <Delete> button to add or delete a DHCP pool. Figure 145. DHCP Pool (1) The window where a DHCP pool can be added is shown below. Figure 146. DHCP Pool (2) © SAMSUNG Electronics Co., Ltd. page 268 of 689...
  • Page 269 IP address range. 5.4.1.3 Retrieving Number of DHCP Packets To check the number of DHCP packets that the DHCP server receives, execute the ‘show ip dhcp statistics’ command. © SAMSUNG Electronics Co., Ltd. page 269 of 689...
  • Page 270: Dhcp Relay

    The relay and proxy are operating in the switching mode. If a proxy is not used, it is operating in the relay mode. WEC8500/configure # no ip dhcp-proxy enable 3) To check the configured DHCP information, use the ‘show ip dhcp-proxy’ command.
  • Page 271: Dhcp Proxy

    <DHCP>  <Proxy> menu in the sub-menus. You can configure the Proxy mode of DHCP to relay/proxy. Change the radio box for configuration in the DHCP PROXY MODE of Global Parameter item. Figure 148. DHCP Proxy © SAMSUNG Electronics Co., Ltd. page 271 of 689...
  • Page 272: Option 82 Configuration

    Specifies one out of the following three data to the Option 82 remote-id. - ap-mac: MAC address of an AP - ap-mac-ssid: MAC address and SSID of an AP - ap- ethermac: Ethernet MAC address of an AP © SAMSUNG Electronics Co., Ltd. page 272 of 689...
  • Page 273: Figure 149. Option 82 Configuration (1)

    STATE and OPTION 82 TYPE and then click the <Apply> button. In the OPTION 82 STATE, configure Enable/Disable for Option 82 and configure ap-mac, ap-mac-ssid, or ap-ethermac for OPTION 82 TYPE. © SAMSUNG Electronics Co., Ltd. page 273 of 689...
  • Page 274: Primary/Secondary Server Configuration

    A.B.C.D: Configures only a global primary server.  no ip dhcp-proxy default-dhcp-server primary A.B.C.D secondary A.B.C.D: Deletes both global primary/secondary servers.  no ip dhcp-proxy default-dhcp-server primary A.B.C.D: Deletes a global primary server. © SAMSUNG Electronics Co., Ltd. page 274 of 689...
  • Page 275: Figure 151. Primary/Secondary Server Configuration (1)

    Select an item in the list and perform detail configuration. Figure 152. Primary/Secondary server configuration (2) After unchecking the GLOBAL USE checkbox in the DHCP part, configure PRIMARY DHCP SERVER and ‘SECONDARY DHCP SERVER’ and then click the <Apply> button. © SAMSUNG Electronics Co., Ltd. page 275 of 689...
  • Page 276: Figure 153. Primary/Secondary Server Configuration (3)

    If you does Global configuration, the configuration is applied to all the interfaces whose ‘GLOBAL USE’ checkbox is checked in the DHCP configuration of APC interface. Figure 153. Primary/Secondary server configuration (3) © SAMSUNG Electronics Co., Ltd. page 276 of 689...
  • Page 277: Radio Service Configuration

    [WLAN_ID] [TIMEOUT] Parameter Description WLAN_ID WLAN ID (range: 1-240) TIMEOUT Station idle timeout (range: 30-3600, unit: 15 s, default: 300) 5) To check the configured information, use the ‘show wlan-radio-service’ command. © SAMSUNG Electronics Co., Ltd. page 277 of 689...
  • Page 278: Figure 154. Radio Service Configuration

     DTIM: Enter a DTIM value (1-255).  STATION IDLE TIMEOUT: Enter a station idle timeout value. The value range is 30- 3600 and it must be the multiple of 15. © SAMSUNG Electronics Co., Ltd. page 278 of 689...
  • Page 279: Chapter 6. Wi-Fi Configuration

    ‘show 80211a summary’ or ‘show 80211bg summary’, the channel value is displayed in ‘*’.) Parameter Description CHANNEL Channel Configuration - Range for 80211a: 36-165 - Range for 80211bg: 1-14 AP_ID AP ID (range: 1-3000) © SAMSUNG Electronics Co., Ltd. page 279 of 689...
  • Page 280 Parameter Description POWER TX power value (range: 3-30) GROUP_ID ID of the AP group all-ap Applies to all APs in the group active-ap Applies to all live APs in the group © SAMSUNG Electronics Co., Ltd. page 280 of 689...
  • Page 281 CHAPTER 6. Wi-Fi Configuration 6) To check the configured channel and TX power information, use the following command. WEC8500# show 80211a[|80211bg] summary AP Name MAC Address Operation State Channel TxPower ----------------- ----------------- --------------- -------- -------- AP_f4d9fb23bfb9 F4:D9:FB:23:BF:B9 1 10 *...
  • Page 282: Figure 155. 802.11A/B/G/N Radio (1)

    <ACCESS POINTS>  <802.11a/n> or <802.11b/g/n> menu in the sub-menus. An example of selecting 802.11a/n is shown below. Figure 155. 802.11a/b/g/n radio (1) The configuration items are as follows: [AP Service Configuration]  SERVICE: Enable or disable the radio service. © SAMSUNG Electronics Co., Ltd. page 282 of 689...
  • Page 283: Figure 156. 802.11A/B/G/N Radio (2)

    BEACON PERIOD: Beacon period (range: 40-3500)  FRAGMENTATION THRESHOLD: AP fragmentation threshold (range: 256-8000)  MAX. CLIENT COUNTS: Limits the number of connected clients per radio  CONTROLLED VOICE OPTIMIZATION: Configures voice optimization. © SAMSUNG Electronics Co., Ltd. page 283 of 689...
  • Page 284: Figure 157. 802.11A/N/Ac Datarates

    Select <Configuration> in the menu bar of <WEC Main Window> and select <Radio>  <802.11a/n/ac> or <802.11b/g/n> in submenus to configure Data Rates. An example of selecting 802.11a/n/ac is shown below. Figure 157. 802.11a/n/ac DataRates © SAMSUNG Electronics Co., Ltd. page 284 of 689...
  • Page 285: N Configuration

    Applies to all APs in the group active-ap Applies to all live APs in the group 4) Configure the Modulation and Coding Scheme (MCS) rate. WEC8500/configure/80211a/11n-support# mcs [RATE] global Parameter Description RATE MSC rate (range: 0-23) 5) To check the configured 11n-support information, use the ‘show 80211a radio-config ap [AP_ID]’...
  • Page 286: Figure 158. 802.11/B/G/N Operational Type & Optionswindow

    Groups>  <802.11a/n/ac> or <802.11b/g/n> in submenus to configure Operational Type & Options. An example of selecting 802.11b/g/n is shown below. Figure 158. 802.11/b/g/n Operational Type & OptionsWindow Figure 159. 802.11/b/g/n MCS SettingWindow © SAMSUNG Electronics Co., Ltd. page 286 of 689...
  • Page 287: Ac Configuration

    Applies to all APs in the group active-ap Applies to all live APs in the group 4) Configure the Modulation and Coding Scheme (MCS) rate. WEC8500/configure/80211a/11ac-support# mcs num-ss [SPATIAL STREAM ] global Parameter Description SPATIAL STREAM Number of spatial streams (range: 2~3)
  • Page 288: Figure 160. 802.11A/N/Ac Operational Type & Optionswindow

    Groups>  <802.11a/n/ac> or <802.11b/g/n> in submenus to configure Operational Type & Options. An example of selecting 802.11a/n/ac is shown below. Figure 160. 802.11a/n/ac Operational Type & OptionsWindow Figure 161. 802.11a/n/ac MCS SettingWindow © SAMSUNG Electronics Co., Ltd. page 288 of 689...
  • Page 289  3 spatial streams: 9 [OPTIONS]  Guard-interval (11n): Select short/long for Guard-interval 20/40 Mhz respectively.  Guard-interval (11ac): Select short/long for Guard-interval 20/40/80 Mhz respectively.  Beamforming: Select use or not use beamforming. © SAMSUNG Electronics Co., Ltd. page 289 of 689...
  • Page 290: Wi-Fi Qos Configuration

    In the Qos menu, there are Wired and Wireless tab. To change the Station EDCA parameter, select the Wired tab. If you want to change the AP EDCA parameter to configure the QoS of an AP wireless section, select the Wireless tab. © SAMSUNG Electronics Co., Ltd. page 290 of 689...
  • Page 291: Figure 162. Qos Configuration Of A Wireless Terminal (1)

    CHAPTER 6. Wi-Fi Configuration [Wired tab] Figure 162. QoS configuration of a wireless terminal (1) [Wireless tab] Figure 163. QoS configuration of a wireless terminal (2) © SAMSUNG Electronics Co., Ltd. page 291 of 689...
  • Page 292: Qos Configuration Of Ap

    - default: Marks pre-configured basic value to the Inner DSCP field. 3) Configure a default 802.1p value per packet.  dot1p-tag [PACKET_TYPE] [802.1P_TAG] Parameter Description PACKET_TYPE Packet type configuration (voice/video/best_effort/background) 802.1P_TAG Default 802.1p value © SAMSUNG Electronics Co., Ltd. page 292 of 689...
  • Page 293 3) To enable a DSCP policy in the DSCP POLICY, select Enable. a) Select one out of Inner Packet/Default Value in the OUTER DSCP drop-down list. b) Select one out of No Mark/Default Value in the INNER DSCP drop-down list. © SAMSUNG Electronics Co., Ltd. page 293 of 689...
  • Page 294: Figure 164. Qos Configuration Of Ap (Wireless Section)

    In the menu bar of <WEC Main window>, select <CONFIGURATION> and then select the <RADIO>  <802.11a/n> or <802.11b/g/n>  <QoS> menu in the sub-menus. Figure 164. QoS configuration of AP (wireless section) © SAMSUNG Electronics Co., Ltd. page 294 of 689...
  • Page 295: Configuring Qos Profile Of A Specific Terminal

    AP QoS packet.  max-dot1p <802.1p tag> Parameter Description 802.1P_TAG Maximum allowed 802.1p configuration (range: 0-7) 5) To check the configured QoS profile information, use the ‘show qos profile’ command. © SAMSUNG Electronics Co., Ltd. page 295 of 689...
  • Page 296: Figure 165. Configuring Qos Profile Of A Specific Terminal

    PER-USER UPSTREAM BANDWIDTH CONTRACT: Maximum upward usage (range: 0-450000)  PER-USER DOWNSTREAM BANDWIDTH CONTRACT: Maximum downward usage (range: 0-450000)  VOICE/VIDEO/BEST EFFORT/BACKGROUND: Enter 802.1P TAG (range: 0-7) and DSCP TAG (range: 0-64) for each item. © SAMSUNG Electronics Co., Ltd. page 296 of 689...
  • Page 297: Voice Optimization Configuration

    In the menu bar of <WEC Main window>, select <CONFIGURATION> and then select the <RADIO>  <802.11a/n> or <802.11b/g/n>  <General> menu in the sub-menus. Figure 166. Configuring voice optimization by radio © SAMSUNG Electronics Co., Ltd. page 297 of 689...
  • Page 298: Figure 167. Configuring Voice Optimization By Each Ap Group

    <ACCESS POINTS>  <802.11a/n> or <802.11b/g/n>  <General> menu in the sub-menus. Figure 168. Configuring voice optimization by each AP To enable Controlled Voice Optimization (CVO), select Enable in the CONTROLLED VOICE OPTIMIZATION. To disable it, select Disable. © SAMSUNG Electronics Co., Ltd. page 298 of 689...
  • Page 299: H Configuration

    3) Configure the transmission power of a wireless terminal.  power-constraint [VALUE] Parameter Description VALUE Transmission power (0-31 dB) 4) To check the configuration information, use the ‘show 80211h configuration’ command. © SAMSUNG Electronics Co., Ltd. page 299 of 689...
  • Page 300: Figure 169. Configuring 802.11H

    POWER CONSTRAINT: Power constraint value (0-100)  CHANNEL SWITCH: Enables channel switch announcement.  RESTRICTION MODE: Configures transmission restriction.  CHANNEL SWTICH COUNT: Enter a waiting time until channel switching announcement. Target Beacon Transmission Times (TBTT) © SAMSUNG Electronics Co., Ltd. page 300 of 689...
  • Page 301: Country Code

    To check the configuration information, use the ‘show country ap-config [AP_ID]’ command. [AP Group Country Code Configuration] To configure a country code, execute the command as follows:  set-group [AP group ID] [COUNTRY_CODE] [VALUE] © SAMSUNG Electronics Co., Ltd. page 301 of 689...
  • Page 302: Figure 170. Country Code Window

    Country code to configure Configuration using Web UI In the menu bar of <WEC Main window>, select <CONFIGURATION> and then select the <CONTROLLER>  <Country> menu in the sub-menus. Figure 170. Country code window © SAMSUNG Electronics Co., Ltd. page 302 of 689...
  • Page 303: Figure 171. Ap Country Code Configuration

    After selecting COUNTRY and ENVIRONMENT, click the <Apply> button. [AP Group Country Code Configuration] In the menu bar of <WEC Main window>, select <CONFIGURATION> and then select the <AP Groups>  <Advanced> menu in the sub-menus. © SAMSUNG Electronics Co., Ltd. page 303 of 689...
  • Page 304: Figure 172. Ap Group Contry Code Configuration

    CHAPTER 6. Wi-Fi Configuration Figure 172. AP Group Contry Code Configuration © SAMSUNG Electronics Co., Ltd. page 304 of 689...
  • Page 305: Chapter 7. Wlan Additional Services

     show station detail [MAC ADDRESS] 파라미터 설명 MAC ADDRESS wirelss station MAC address 3) The WI-FI statistics information of a wireless terminal is retrieved.  show station stats ap-80211-stats [MAC_ADDRESS] © SAMSUNG Electronics Co., Ltd. page 305 of 689...
  • Page 306 5) The debug statistics information of a wireless terminal is retrieved.  show stats [OPTION] all 파라미터 설명 [OPTION] - debug: all bug statistics information - management_frame: all bug statistics of wireless station management frame © SAMSUNG Electronics Co., Ltd. page 306 of 689...
  • Page 307: Connection History Related Configuration

    You can configure maximum value for the connection history of a wireless terminal that will be managed in the APC.  station number-of-assoc-tracking [COUNT] Parameter Description COUNT Maximum number of association tracking © SAMSUNG Electronics Co., Ltd. page 307 of 689...
  • Page 308: Handover Management

    AirMove handover is performed by the collaboration between wireless terminals compatible with the APC. Therefore, the packet loss or handover time is optimized. Some Samsung smartphones such as Galaxy S2 or S3, etc. provide the AirMove function.
  • Page 309 - OPTION: station-decision-delta - OPTION_DETAIL: Threshold (dBm) An example of using the command for each configuration item is as follows: WEC8500/configure# handover opmode APP WEC8500/configure# handover buffered-forwarding enable WEC8500/configure# handover decision-delta 10 WEC8500/configure# handover scan-time-channel 10 WEC8500/configure# handover scan-time-interleave 1000...
  • Page 310: Inter Apc Handover Configuration

    Configures whether to use the Inter APC handover. The default value of Inter APC handover is not configured.  handover inter-apc enable To check the configuration information, use the ‘show handover configuration’ command. © SAMSUNG Electronics Co., Ltd. page 310 of 689...
  • Page 311: Call Admission Control (Cac) Configuration

    SIP No Answer Timeout and SIP Connect Timeout in order. To enable SIP ALG, execute the command as follows: 1) Go to the configure mode of the CLI. APC# configure terminal © SAMSUNG Electronics Co., Ltd. page 311 of 689...
  • Page 312: Figure 175. Sip Alg Configuration Window

    <Controller>  <General> menu in the sub-menus. Figure 175. SIP ALG configuration window After configuring SIP ALG that is a voice CAC related configuration in the SIP ALG, click the <Apply> button. © SAMSUNG Electronics Co., Ltd. page 312 of 689...
  • Page 313: Voice Cac Configuration

    [VALUE] Parameter Description VALUE Number of marginal voice calls considering the handover 5) To check the configured voice CAC information, use the ‘show [80211a | 80211bg] cac voice configuration’ command. © SAMSUNG Electronics Co., Ltd. page 313 of 689...
  • Page 314: Figure 176. Admission Control Configuration

    MINOR ALARM THRESHOLD: Configures a threshold that generates a Minor alarm (range: 0-15) Enter ‘0’ to prevent the alarm.  MAJOR ALARM THRESHOLD: Configures a threshold that generates a Major alarm (range: 0-30) Enter ‘0’ to prevent the alarm. © SAMSUNG Electronics Co., Ltd. page 314 of 689...
  • Page 315: Video Cac Configuration

    Maximum allowed number of video calls 5) Configure the number of marginal calls with consideration for handover.  reserved-ho-calls [VALUE] Parameter Description VALUE Number of marginal calls with consideration for handover © SAMSUNG Electronics Co., Ltd. page 315 of 689...
  • Page 316: Figure 177. Admission Control Configuration Window

    After configuring the items below in the Call Admission Control, click the <Apply> button.  ADMISSION CONTROL: Configure the video CAC function  METHOD: Select a video CAC method (static/chan_util)  MAX CALLS: Maximum allowed number of calls (range: 2-30) © SAMSUNG Electronics Co., Ltd. page 316 of 689...
  • Page 317 The maximum allowed number of calls becomes MAX CALLS-HANDOVER CALLS.  MAX CHANNEL UTILIZATION (%): Maximum allowed usage of channels (range: 5-85)  HANDOVER CHANNEL UTILIZATION (%): Usage of marginal channels with consideration for handover (range: 0-25) © SAMSUNG Electronics Co., Ltd. page 317 of 689...
  • Page 318: Radio Resource Management (Rrm)

    You can select between rssi and handover, and the default value is rssi. WEC8500/configure/rrm# 80211a WEC8500/configure/rrm/80211a# neighbor-list WEC8500/configure/rrm/80211a/neighbor-list# wlan-neighbor-priority rssi/handover 5) To check the configured information, use the ‘show rrm config-summary’ command. © SAMSUNG Electronics Co., Ltd. page 318 of 689...
  • Page 319: Dpc Configuration

    3) Set the DPC function. Enter the dpc setting mode and set it to ‘enable’. Use the ‘no’ parameter to disable the mode. The function operates only when the RRM is set to Enable. WEC8500/configure/rrm/80211a# dpc WEC8500/configure/rrm/80211a/dpc# enable © SAMSUNG Electronics Co., Ltd. page 319 of 689...
  • Page 320: Figure 179. Dpc Settings

    7) Execute the following command to change the Tx Power range which is automatically set by DPC. The default minimum is 3 and the default maximum is 30 for both 80211a and 80211b. WEC8500/configure/rrm/80211a/dpc# txPower min [value] max [value] 8) Check the settings using the ‘show rrm config-summary’ command. Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration>...
  • Page 321: Dcs Configuration

    The default value is 80 (%). WEC8500/configure/rrm/80211a/dcs# channel-utilization-threshold [value] 7) Execute the following command to change the My Utilization threshold. The default is 10 (%) for 802.11a and 40 (%) for 802.11b. WEC8500/configure/rrm/80211a/dcs# my-utilization-threshold [value] © SAMSUNG Electronics Co., Ltd. page 321 of 689...
  • Page 322 4, end time 5. If both start time and end time are set to the same time, Anchor Run function is disabled. WEC8500/configure/rrm/80211a/dcs# anchor-time start [value] end [value] 9) Execute the following command to change the channels that is automatically set by the DCS.
  • Page 323: Chdc Configuration

    After entering into the chdc configuration mode, complete configuration (statsCollectEnable). To disable the configuration, enter the ‘no’ parameter. All the functions for pre-alarm are available only when both RRM and CHDC are enabled. © SAMSUNG Electronics Co., Ltd. page 323 of 689...
  • Page 324 9) Configure the threshold of RSSI that will be added to the statistics Failed Client Count for the pre-alarm function. Configure it for Voice Frame and Data Frame. It can be -90~-20 (dB). WEC8500/configure/rrm/80211a/chdc# rssi-threshold data -75 Success: CHDC 802.11a : Set RSSI THRESHOLD(-75) Successful WEC8500/configure/rrm/80211a/chdc# rssi-threshold voice -75 Success: CHDC 802.11a : Set RSSI THRESHOLD(-75) Successful...
  • Page 325 12) To check the configured information, execute the ‘show rrm config-summary’ command. In the ‘Coverage Hole Detection and Control’, operator can check the current status of all the configured values. WEC8500/configure/rrm/80211a/chdc# show rrm config-summary RRM Status ..Enabled Rf Group Name ...
  • Page 326: Figure 181. Chdc Settings

    <Radio>  <802.11a/n/ac> or <802.11b/g/n>  <RRM> menu in the sub-menus. In the Coverage Hole Detection Control window, operator can enable or disable the CHDC and configure the values using the same functions as the CLI. Figure 181. CHDC settings © SAMSUNG Electronics Co., Ltd. page 326 of 689...
  • Page 327: Sleeping Cell Detection

    (For a full day, set the start and end times as the same time.) WEC8500/configure/rrm/sleep-cell-detect# period_2nd 6) PERIOD_ALL: Start and end times of sleeping cell detection for periods other than Specific Periods 1 and 2. WEC8500/configure/rrm/sleep-cell-detect# period_all © SAMSUNG Electronics Co., Ltd. page 327 of 689...
  • Page 328 CHAPTER 7. WLAN Additional Services Configuration using Web UI From the menu bar of <WEC Main Window>, select <Configuration> and then select <Radio>  <Advanced>  <Sleeping Cell Detection> in the submenus. © SAMSUNG Electronics Co., Ltd. page 328 of 689...
  • Page 329: Energy Saving Groups

    4) WEEKDEND: Start and end times of energy saving for weekends. (For a full day, set the start and end times as the same time.) WEC8500/configure/rrm/energy-saving-group 1# weekend 5) ADD-AP: Add AP members to the energy saving group. WEC8500/configure/rrm/energy-saving-group 1# add-ap © SAMSUNG Electronics Co., Ltd. page 329 of 689...
  • Page 330 WEC8500/configure/rrm/energy-saving-group 1# neighbor-ap-on Configuration using Web UI From the menu bar of <WEC Main Window>, select <Configuration> and then select <Radio>  <Advanced>  <Energy Saving Groups>  <GROUP NAME> in the submenus. © SAMSUNG Electronics Co., Ltd. page 330 of 689...
  • Page 331: Energy Saving Auto Classification

    When the APC designates a standby group (energy saving group), the others are recognized as an active group. Up to 20 groups can be designated (Same as WEC8500/WEC8050). Energy Saving Auto Classification is not a method under which the operator configures a standby group but a method under which the system automatically classifies an energy saving group by using the analysis of each AP.
  • Page 332 ../configure/rrm/energy-saving-auto-class# neighbor-ap-on Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select <Radio>  <Advanced>  <Energy Saving>  <Automatic Classification> menus in the sub-menus. © SAMSUNG Electronics Co., Ltd. page 332 of 689...
  • Page 333: Location Tracking

    2) The maximum number of APs belonging to the APC, which is to be applied with the location tracking scan information, can be specified using the following command.  num-req-ap-list [NUM] Parameter Description NUM (range: 1-500) © SAMSUNG Electronics Co., Ltd. page 333 of 689...
  • Page 334: Configures Location Tracking Scan

    NUM (range: 5-3600) default: 10 4) To check the configuration information, execute the following command.  show locationtrack config WEC8500/configure/locationtrack # show locationtrack config Location tracking enable...: Enabled Algorithm type.....: 4 Expiry date of history files..: 0 Scan Result Type....: 0 Number of ap list for report..: 0...
  • Page 335: Controlling Usage Per User

    VALUE Downward usage 4) Configure the upward usage in kbps.  bw-contract-upstream [VALUE] Parameter Description VALUE Upward usage 5) To check the configured profile information, use the ‘show qos profile’ command. © SAMSUNG Electronics Co., Ltd. page 335 of 689...
  • Page 336: Figure 182. Controlling Usage Per User

    PER-USER UPSTREAM BANDWIDTH CONTRACT: Maximum upward usage (range: 0-450000)  PER-USER DOWNSTREAM BANDWIDTH CONTRACT: Maximum downward usage (range: 0-450000)  VOICE/VIDEO/BEST EFFORT/BACKGROUND: Enter 802.1P TAG (range: 0-7) and DSCP TAG (range: 0-64) for each item. © SAMSUNG Electronics Co., Ltd. page 336 of 689...
  • Page 337: Remote Packet Capture

    Capture target can be specified by configuring the filtering mode APC/configure/pcap# filtering-mode [FILTERING MODE] Parameter Description FILTERING MODE Filtering mode - station-only: Use only the configured station MAC information. - ap-only: Use only the configured AP MAC information. © SAMSUNG Electronics Co., Ltd. page 337 of 689...
  • Page 338 ===== ===================== =========== ============================= ================ ================ 78:47:1D:C5:4C:85 OFF <------- SSID IPv4 Addr ---- ---- --------------------------- --------------- Ajay_2_2_4G 20.20.20.30 FC:A1:3E:47:59:E7 OFF <------- SSID IPv4 Addr ---- ---- --------------------------- --------------- Ajay_2_2_4G 20.20.20.25 WEC8500# © SAMSUNG Electronics Co., Ltd. page 338 of 689...
  • Page 339: Clustering

    [Cluster Setting] To use the clustering function, you must configure each APC according to the following procedure. Maximum 12 WEC8500 can be grouped in a cluster. Maximum 2 WEC8050 can be grouped in a cluster. 1) Go to the configure mode of the CLI.
  • Page 340 [INDEX] [APC_NAME] [IPV4_ADDRESS] [DB_REFRESH_ INTERVAL] Parameter Description INDEX Index in cluster (range: 1-12) APC_NAME APC name (maximum 18 characters) IPV4_ADDRESS IPv4 address DB_REFRESH_INTERVAL Database update interval (Unit: s, range: 60-5000, default: 120) © SAMSUNG Electronics Co., Ltd. page 340 of 689...
  • Page 341 Parameter Description INDEX Index in cluster (range: 1-12) [Retrieving APC information added in cluster] You can check the added APC information using the ‘show cluster list-apc’ command. WEC8500# show cluster list-apc ====================================================================== INDEX APC-NAME IPv4-ADDRESS DB-REF-INT CONNECT-STATUS ====================================================================== APC-01 90.90.194.111...
  • Page 342: Figure 183. Clustering Window

    <Apply> button to apply. The Clustering Members item shows all the clustering members. Click the <Add> or <Delete> button to add or delete a clustering member. The clustering addition window is shown below. Figure 184. Clustering addition window © SAMSUNG Electronics Co., Ltd. page 342 of 689...
  • Page 343: Limiting The Number Of Connected Users

    AP ID (range: 1-3000) AP group ID AP group ID (range: 1-3000) 3) To check the configuration information, use the ‘show [80211a | 80211bg] radio-config [ap <ID> | group <ID> | global]’ command. © SAMSUNG Electronics Co., Ltd. page 343 of 689...
  • Page 344: Figure 185. Configuring Connection Limitation Per Radio

    In the menu bar of <WEC Main window>, select <Configuration> and then select the <Access Points>  <802.11a/n> or <802.11b/g/n> menu in the sub-menus. Figure 187. Configuring connection limitation per AP After configuring MAX CLIENT COUNTS, click the <Apply> button. © SAMSUNG Electronics Co., Ltd. page 344 of 689...
  • Page 345: Connection Limitation Per Wlan

    Maximum number of wireless terminals that can be connected (default: 127) 4) Enable the WLAN. APC/configure/wlan 1# enable 5) To check the configured connection limitation, use the ‘show wlan detail’ command. © SAMSUNG Electronics Co., Ltd. page 345 of 689...
  • Page 346: Figure 188. Configuring Connection Limitation Per Wlan

    In the menu bar of <WEC Main window>, select <Configuration> and then select the <WLANs>  <WLANs>  <General> menu in the sub-menus. Figure 188. Configuring connection limitation per WLAN After configuring MAXIMUM CONNECTIONS, click the <Apply> button. © SAMSUNG Electronics Co., Ltd. page 346 of 689...
  • Page 347: Voice Statistics And Communication Failure Detection

    Handover Calls Since AP Joined .... 0 Calls Rejected Since AP Joined .... 0 Handover Calls Rejected Since AP Joined ... 0 Calls On Invite ......0 Preferred Calls Received ....0 Preferred Calls Accepted ....0 © SAMSUNG Electronics Co., Ltd. page 347 of 689...
  • Page 348: Figure 189. Voice Statistics

    In the menu bar of <WEC Main window>, select <MONITOR> and then select the <ACCESS POINTS>  <RADIO>  <802.11a/n> or <802.11b/g/n>  AP menu in the sub-menus. Figure 189. Voice statistics © SAMSUNG Electronics Co., Ltd. page 348 of 689...
  • Page 349: Detecting Wlan-Based Communication Failure

    <WLANS> menu in the sub-menus. Select a WLAN ID to change in the WLANs screen and go to the <Advanced> tab. Figure 190. Detecting WLAN-based communication failure After configuring the VOIP FAILURE DETECT item, click the <Apply> button. © SAMSUNG Electronics Co., Ltd. page 349 of 689...
  • Page 350: Voice Signal And Media Monitoring

    Configuration using CLI Execute the following command to check voice related fault analysis statistics. [Checking Voice Related Wireless Information] 1) Check the connection status of a voice wireless terminal. WEC8500# show voice station summary MAC Address IP Address Tel-no AP BSS...
  • Page 351 CHAPTER 7. WLAN Additional Services 3) Check the information of a completed call. WEC8500# show voice complete-call summary CONN Start Time SSID MAC Address Tel-no IPv4 Address Port Rat MOS LQ/CQ/PQ Pkt Cnt ==== ==================== ==== ==== =============== === ==============...
  • Page 352 0 0.0 5 Min 0 0.0 0 0.0 15 Min 0 0.0 0 0.0 1 Hour 0 0.0 0 0.0 1 Day 0 0.0 0 0.0 WEC8500# show voice statistics wlan 1 © SAMSUNG Electronics Co., Ltd. page 352 of 689...
  • Page 353 1 Hour 0 0.0 0 0.0 1 Day 2 0.0 0 0.0 WEC8500# show voice statistics device DEVICE ( Model Name:SHV-E210L, OS Ver:4.1.1 Build Ver:E210LKLJLK1 ) Voice Statistis ---------- ------ ------ ------ ------ --- ------ ------ --- ------ -- ---- Type...
  • Page 354 1) Check the connection status of a voice wireless terminal. In the menu bar of <WEC Main window>, select <Monitor> and then select the <VoIP Call>  <VoIP Stations> <Active Calls> <Complete Calls> menu in the sub-menus. © SAMSUNG Electronics Co., Ltd. page 354 of 689...
  • Page 355: Figure 191. Voip Stations Retrieval Screen

    2) Check the connection status of an active call. In the menu bar of <WEC Main window>, select <Monitor> and then select the <VoIP Call>  <Active Calls>menu in the sub-menus. Figure 192. Active Call Retrieval Screen © SAMSUNG Electronics Co., Ltd. page 355 of 689...
  • Page 356: Figure 193. Complete Calls Retrieval Screen

    3) Check the information of a completed call. In the menu bar of <WEC Main window>, select <Monitor> and then select the <VoIP Call>  <Complete Calls>menu in the sub-menus. Figure 193. Complete Calls Retrieval Screen © SAMSUNG Electronics Co., Ltd. page 356 of 689...
  • Page 357 CHAPTER 7. WLAN Additional Services [Configures Device Type] 1) In the menu bar of <WEC Main window>, select <Statistics> and then select the <Network Quality> <Device Types> menu in the sub-menus. © SAMSUNG Electronics Co., Ltd. page 357 of 689...
  • Page 358 CHAPTER 7. WLAN Additional Services 2) Configure the Registration screen in the top left corner, and enter a model name and an OS version for the devices to monitor. © SAMSUNG Electronics Co., Ltd. page 358 of 689...
  • Page 359: Checking Voice Related Quality Information

    Execute the following command to check the voice related quality analysis (Voice Quality Monitoring) information. 1) Operator can check the voice quality analysis information of a wireless terminal that has an active call. WEC8500# show voice vqm current-stats brief ======================================================== [CONN-740 Start Time=2013/7/19.14:47:27, Duration=47 sec(s) Call-ID[f03c77b50564418855587192e12b889d <-> ca371fce-6e10-401a- 9a4e-dd53678804c6@ug1.scm.com] Session id :0...
  • Page 360 RTP Flow Quality Metrics: [Flow-2] DIR==Reverse Quality Ratings=Fair [MOS-LQ=3.65, MOS-CQ=3.57, MOS-PQ=3.68] WEC8500# 3) Operator can check the call statistics information. WEC8500# show voice vqm summary-stats ======================================================== VQM Summary Stats for last YEAR:0 MONTH:0 DAY:0 0 HR:26 MN:44 SEC Calls Active Calls Terminated Flows Quality Summary (Total/Good/Fair/Poor) = 6/0/2/4 Listening Call Quality (MOS) min/ave/max = 2.21/3.10/3.73...
  • Page 361 Upload Fail Count = 0 Requested Count = 1141 WEC8500# 4) Operator can check the alarm information that occurs during call. WEC8500# show voice vqm alarms brief ======================================================== VQM ActiveRfactor/ActivePktLoss/ActivePktDly/ActiveMos = 1/1/1/1 VQM QualityThresh/LossThresh/DelayThresh/MOSThresh = 50/50/195/35 ALARMS REPORTED : Src Call Id = f03c77b50564418855587192e12b889d Dst Call Id = ca371fce-6e10-401a-9a4e-dd53678804c6@ug1.scm.com Session = 0...
  • Page 362: Multicast Stream Admission Control

    Whether or not to use the multicast stream admission control (enable/disable) - enable: Enable - disable: Disable 3) Configure the maximum allowed number of streams.  max-streams [VALUE] Parameter Description VALUE Maximum allowed number of streams © SAMSUNG Electronics Co., Ltd. page 362 of 689...
  • Page 363 Configuration using Web UI From the menu bar of <WEC Main Window>, select <CONFIGURATION> and then select <RADIO>  <802.11a/n> or <802.11b/g/n>  <Admission Control> in the submenus. Admission Control Configuration Window © SAMSUNG Electronics Co., Ltd. page 363 of 689...
  • Page 364 The maximum allowed number of streams becomes MAX STREAMS-HANDOVER STREAMS.  MAX CHANNEL UTILIZATION (%): Maximum allowed usage of channels (range: 5-85)  HANDOVER CHANNEL UTILIZATION (%): Usage of marginal channels with consideration for handover (range: 0-30) © SAMSUNG Electronics Co., Ltd. page 364 of 689...
  • Page 365: Wi-Fi Band Steering

    Whether to configure the Band Steering function - enable: Setting - disable: Release (by default) WEC8500/configure/wlan 1# band-steering enable WLAN (1) band steering is On (5-GHz preferred) WEC8500/configure/wlan 1# no band-steering enable WLAN (1) band steering is Off 3) Select a steering band.  band-steering [VALUE]...
  • Page 366 4) Add an entry to the dual band station database.  band-steering add-station [MAC] Parameter Description Station MAC Address WEC8500/configure/wlan 1# band-steering add-station 00:00:00:00:00:01 WLAN(1): add station(00:00:00:00:00:01), prefer a band(5-GHz) are set 5) Delete an entry from the dual band station database.  band-steering delete-station [MAC] Parameter...
  • Page 367 WLAN > Advanced > STATION COUNT OF ACTIVATION > [VALUE] WLAN > Advanced > PRIOIR TO HAND OVER > [YES] [NO] WLAN > Advanced > MAX STATION DENIAL > [VALUE] WLAN > Advanced > MAX STATION DENIAL TIME(SEC) > [VALUE] © SAMSUNG Electronics Co., Ltd. page 367 of 689...
  • Page 368: Figure 194. Configure On/Off For Proportional Band Steering Function

    Figure 194. Configure on/off for Proportional Band Steering function. Configuration using Web UI WLAN > Advanced > BAND STEERING [Disable] [2.4 GHz preferred] [5 GHz preferred] Figure 195. Band Steering Function On/Off and Band Setting © SAMSUNG Electronics Co., Ltd. page 368 of 689...
  • Page 369: Wi-Fi Load Balancing

    - enable: Setting - disable: Release (by default) WEC8500/configure/wlan 1# load-balancing enable WLAN (1), Wi-Fi Load Balancing: Enable WEC8500/configure/wlan 1# no load-balancing enable WLAN (1), Wi-Fi Load Balancing: Disable 3) Configure the load balancing station count threshold value.  load-balancing threshold_station [VALUE]...
  • Page 370: Figure 196. Configuring Load Balancing Function

    CHAPTER 7. WLAN Additional Services WEC8500/configure/wlan 1# load-balancing threshold_station 100 Wi-Fi Load Balancing threshold: 100 stations 4) Configure the maximum denial count value.  load-balancing denial_count [VALUE] Parameter Description VALUE 1-10 (2 by default) WEC8500/configure/wlan 1# load-balancing denial_count 4 Wi-Fi Load Balancing MAX denial count: 4 Configuration using Web UI Configure WLAN >...
  • Page 371: Station-Based Adaptive Load Balancing

    Parameter Description NUMBER Interval for performing active load balancing (sec) 5) To allow load balancing among APs which use the same channel, set the following option (Default: no allow-channel):  allow-channel © SAMSUNG Electronics Co., Ltd. page 371 of 689...
  • Page 372: Setting Ap Group Parameter

    APC/configure/ap-group lb/load-balancing# radio 1 APC/configure/ap-group lb/load-balancing/radio 1# 3) Activate load balancing in the corresponding radio.  enable 4) Set the interval to attempt at the Load Balancing function.  interval [NUMBER] © SAMSUNG Electronics Co., Ltd. page 372 of 689...
  • Page 373 9) The rssi-low value is a criterion for selecting a sticky station. The station with the RSSI value lower than the set value always attempts at load balancing.  rssi-low [NUMBER] Parameter Description NUMBER RSSI reference value (-100~0 dbm) © SAMSUNG Electronics Co., Ltd. page 373 of 689...
  • Page 374: Setting Ap Parameters

    Station threshold as the standard for the performance of load balancing 6) Set the time of blocking the reconnection after the load of the station is now balanced.  kickout-timeout [NUMBER] © SAMSUNG Electronics Co., Ltd. page 374 of 689...
  • Page 375 The station with the RSSI value higher than the set value does not attempt at load balancing (In case of the active mode, N/A).  rssi-low [NUMBER] Parameter Description NUMBER RSSI reference value (-100~0 dbm) © SAMSUNG Electronics Co., Ltd. page 375 of 689...
  • Page 376: Chapter 8. Security

    Configuration using CLI 1) Go to configure  security  radius configuration mode of CLI. WEC8500# configure terminal WEC8500/configure# security WEC8500/configure/wlan 1/security# radius 1 WEC8500/configure/security/radius 1# 2) Configure the IP address of a RADIUS server. WEC8500/configure/security/radius 1# serverIp [IP_ADDRESS] © SAMSUNG Electronics Co., Ltd.
  • Page 377 CHAPTER 8. Security Parameter Description IP_ADDRESS The IP address of a RADIUS server 3) Configure the key of a RADIUS server. WEC8500/configure/security/radius 1# secret [KEY_TYPE] [KEY_STRING] Parameter Description KEY_TYPE RADIUS server key input format - ASCII: ASCII character string - HEX: Hexadecimal value...
  • Page 378: Figure 197. Radius Server Configuration

    RADIUS server failover is attempted Must smaller than the RETRY_COUNT value (range: 1-10, default value: 3) 7) Enable or disable CoA (Change of Authorization) . WEC8500/configure/security/radius 1# [no] coa 8) Exit RADIUS server configuration and security configuration mode. WEC8500/configure/security/radius 1# exit WEC8500/configure/security# exit 9) To check the configuration information, use the ‘show security radius-server summary’...
  • Page 379: Configuring Mac Authentication

    The MAC authentication of a RADIUS server is configured as follows: Configuration using CLI 1) Go to configure  security  radius configuration mode of CLI. WEC8500# configure terminal WEC8500/configure# security WEC8500/configure/wlan 1/security# radius 1 WEC8500/configure/security/radius 1# © SAMSUNG Electronics Co., Ltd. page 379 of 689...
  • Page 380 CHAPTER 8. Security 2) Set the password type that will be used for the MAC authentication of the device. WEC8500/configure/security/radius 1# mac-auth-pw-type [PW_TYPE] Parameter Description PW_TYPE Password type (default value: mac) - mac: MAC address of the device. Note: it must be a string whose...
  • Page 381: Figure 198. Radius Server Mac Authentication Configuration Window

    - Single Hyphen: Only one ‘-’ used in the middle (xxxxxx- xxxxxx) MAC CASE English upper case and lower case types of the MAC string - Lower: Lower case used - Upper: Upper case used © SAMSUNG Electronics Co., Ltd. page 381 of 689...
  • Page 382: Internal Radius Server

    RADIUS server. To use the internal RADIUS server, operator can add, delete, or edit a user (WEC8500: maximum 2048 users, WEC8050: maximum 512 users). Configuration using CLI To configure a local network user related function, enter into the ‘radiuscm’ of configure mode by executing the following command.
  • Page 383 , =*, !*, ==, #, ““, ‘‘, ``, *, ?, \, space, & Cannot be used. To delete all the users from the Local Net Users, execute the following command.  Remove-all-local-userdb © SAMSUNG Electronics Co., Ltd. page 383 of 689...
  • Page 384 Show radiuscm all-user Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Security>  <AAA>  <Local User> menu in the sub-menus. © SAMSUNG Electronics Co., Ltd. page 384 of 689...
  • Page 385 Operator can import or export the list of local users. The user list is in the CSV format. An existing data is deleted if there is new importing. 3) Exporting a local net user list Operator can export the list of local users in the CSV format file. © SAMSUNG Electronics Co., Ltd. page 385 of 689...
  • Page 386: Unauthorized Ap/Terminal Detection And Blocking

    <Wireless Intrusion>  <General> menu in the sub-menus. Click Apply after selecting Enable or Disable, then operator can configure the Wireless Intrusion service status. Figure 199. Wireless Intrusion General Configuration Window © SAMSUNG Electronics Co., Ltd. page 386 of 689...
  • Page 387: Detection

    - managed-ssid: SSID that is used in an authorized AP that is connected to the APC. - user-configured-ssid [SSID]: Entered SSID (An AP that has SSID as SSID_NAME is classified as a friendly type unauthorized AP.) © SAMSUNG Electronics Co., Ltd. page 387 of 689...
  • Page 388: Figure 200. Managed Rule Configuration Window

    1) By using Add, Delete, or Change, operator can add, delete, or change user defined rules. Figure 200. Managed Rule Configuration Window 2) In the rule addition screen, operator can add a rule by entering the information and click Apply. Figure 201. Managed Addition Window © SAMSUNG Electronics Co., Ltd. page 388 of 689...
  • Page 389 - user-configured-ssid [SSID]: Entered SSID (An AP that has SSID as SSID_NAME is classified as a friendly type unauthorized AP.) SSID_NAME SSID that is used when the SSID_TYPE is entered as user- configured-ssid © SAMSUNG Electronics Co., Ltd. page 389 of 689...
  • Page 390: Figure 202. Unmanaged Rule Configuration Window

    1) By using Add, Delete, or Change, operator can add, delete, or change user defined rules. Figure 202. Unmanaged Rule Configuration Window 2) In the rule addition screen, operator can add a rule by entering the information and click Apply. Figure 203. Unmanaged Rule Addition Window © SAMSUNG Electronics Co., Ltd. page 390 of 689...
  • Page 391 AP list to go to the detail view screen. In the detail view screen, operator can manually change the classification of an AP by using the top down menu of MOVE CLASSIFICATION MANUALLY. © SAMSUNG Electronics Co., Ltd. page 391 of 689...
  • Page 392: Figure 204. List Window To Manually Change Classification

    Figure 204. List Window to Manually Change Classification 2) In the AP detail screen, change the classification and click Apply, then the configuration is changed. Figure 205. Classification Change Window in AP Detail Screen © SAMSUNG Electronics Co., Ltd. page 392 of 689...
  • Page 393: Figure 206. List Window To Manually Remove

    AP by changing the REMOVE MANUALLY option to On. 1) In the AP list screen, operator can change the status of several APs to ‘Removed’ by clicking <Remove> button. Figure 206. List Window to Manually Remove © SAMSUNG Electronics Co., Ltd. page 393 of 689...
  • Page 394: Figure 207. Manual Remove Change Window In Ap Detail Screen

    2) Using the following command, configure the unauthorized AP detection option.  [OPTION] [NOTI_TYPE] Parameter Description OPTION Unauthorized AP detection option NOTI_TYPE Event save option - notify: Notify the state with alarm - detect: Save the state with sys log © SAMSUNG Electronics Co., Ltd. page 394 of 689...
  • Page 395 <Wireless Intrusion>  <Policy>  <Static Rule> menu in the sub-menus. And then, operator can change the setting by selecting <AP> at the upper tab and clicking Apply. In the configuration screen, operator can check Option and click Apply for configuration. © SAMSUNG Electronics Co., Ltd. page 395 of 689...
  • Page 396: Figure 208. Configuration Window For Unauthorized Ap Detection Option

    - detect: Save the state with sys log The description of OPTION parameter is as follows: Parameter Description assoc-fail-det Classifies a client that exceeds the association fail threshold as an unauthorized client. © SAMSUNG Electronics Co., Ltd. page 396 of 689...
  • Page 397: Figure 209. Configuration Window For Unauthorized Station Detection Option

    <Station> at the upper tab and clicking Apply. In the configuration screen, operator can check Option and click Apply for configuration. Figure 209. Configuration Window for Unauthorized Station Detection Option © SAMSUNG Electronics Co., Ltd. page 397 of 689...
  • Page 398 <Wireless Intrusion>  <Channel Validation> menu in the sub-menus. And then, operator can configure the SERVICE STATE and Valid Channel List in the screen. Operator can change configuration after changing the SERVICE STATE and Valid Channel List and clicking Apply. © SAMSUNG Electronics Co., Ltd. page 398 of 689...
  • Page 399: Figure 210. Configuration Window For Channel Validation

    3) Configure the station black-list.  client-black-list [MAC] Parameter Description MAC address that will be used as a black-list of the station 4) Configure the Managed Organizationally Unique Identifier (OUI).  oui-whitelist [OUI] © SAMSUNG Electronics Co., Ltd. page 399 of 689...
  • Page 400: Figure 211. Ap Blacklist Configuration Window

    1) In the [AP Blacklist] tab, operator can add an AP blacklist by entering a MAC and click Add. Operator can also delete it by using Delete. Figure 211. AP blacklist Configuration Window © SAMSUNG Electronics Co., Ltd. page 400 of 689...
  • Page 401: Figure 212. Managed Ap Window

    Add. Operator can also delete it by using Delete. Figure 213. Station blacklist Search/Configuration Window 4) In the [Managed Station] tab, operator can search Managed Station. Figure 214. Managed Station Search Window © SAMSUNG Electronics Co., Ltd. page 401 of 689...
  • Page 402: Figure 215. Managed Ssid Window

    Neighbor AP list addition screen and can add a Managed/Neighbor AP list. Operator can also delete it by using Delete.  [Managed/Neighbor AP] tab main screen Figure 216. Managed/Neighbor AP Search/Configuration Window © SAMSUNG Electronics Co., Ltd. page 402 of 689...
  • Page 403: Figure 217. Managed/Neighbor Ap List Addition Window

    - 80211-auth-fail: Authentication failures threshold per second - 8021x-auth-fail: 802.1x authentication failures threshold per WIDS interval - web-auth-fail: Web authentication failures threshold that occurs continuously COUNT Threshold value of [OPTION] ranging from 3 to 20 © SAMSUNG Electronics Co., Ltd. page 403 of 689...
  • Page 404: Figure 218. Station Allowed Limit Configuration Window

    <Wireless Intrusion>  <Station Allow Limit> menu in the sub-menus. And then, enter a threshold value and click Apply to configure the value in the screen. Figure 218. Station Allowed Limit Configuration Window © SAMSUNG Electronics Co., Ltd. page 404 of 689...
  • Page 405: Enabling Blocking Function

    Configuration using CLI 1) Go to the configure mode of the CLI. WEC8500# configure terminal 2) Enable the blocking function. WEC8500/configure# wids containment enable 3) To check the configuration information, execute the following command.  show wids containment current-config Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration>...
  • Page 406: Figure 220. List Window For Blocking Ap

    Select the target and perform containment to perform manual blocking. 1) After selecting an AP in the AP list, possible to block by using the containment. Figure 220. List Window for Blocking AP © SAMSUNG Electronics Co., Ltd. page 406 of 689...
  • Page 407: Figure 221. List Window For Blocking Station

    If the managed station and the unmanaged AP are managed-station connected, it is automatically blocked. unmanaged-ap-uses-managed- If the honeypot is detected, it is automatically blocked. ssid unmanaged-ap If the unmanaged AP is detected, it is automatically blocked. © SAMSUNG Electronics Co., Ltd. page 407 of 689...
  • Page 408: Figure 222. Automatic Blocking Configuration Window

    In the menu bar of <WEC Main window>, select <Configuration> and then select <Wireless Intrusion>  <Containment> menus in the sub-menus. Select the target and press Apply to configure automatic blocking. Figure 222. Automatic Blocking Configuration Window © SAMSUNG Electronics Co., Ltd. page 408 of 689...
  • Page 409: Captive Portal

    Password START_TIME Start time (YYYY-MM-DD:HH:MM:SS format) END_TIME End time (YYYY-MM-DD:HH:MM:SS format) 3) The command to add a web authentication user is as follows:  Web-auth-users delete [ID] Parameter Description User ID © SAMSUNG Electronics Co., Ltd. page 409 of 689...
  • Page 410: Figure 223. Web Certification User Configuration Window

    Figure 223. Web Certification User Configuration Window The operator can check and delete a Web Certification User created in the <Web Certification Users> menu. Figure 224. Web Certification User List Window © SAMSUNG Electronics Co., Ltd. page 410 of 689...
  • Page 411: Configuring Pre-Auth Acl

    WEC8500/configure# fqm-mode 2) Configure an access list. WEC8500/configure/fqm-mode# WEC8500/configure/fqm-mode# access-list ip guest_acl permit seq 1 udp any eq * any eq 53 os-aware * WEC8500/configure/fqm-mode# access-list ip guest_acl permit seq 2 tcp 192.168.20.10 255.255.255.255 eq 80 any eq * os-aware * WEC8500/configure/fqm-mode# access-list ip guest_acl permit seq 3 tcp any eq * 192.168.20.10 255.255.255.255 eq 80 os-aware *...
  • Page 412: Figure 225. Access List Addition Window

    CHAPTER 8. Security Figure 225. Access List Addition Window Figure 226. Access List Entry Addition Window © SAMSUNG Electronics Co., Ltd. page 412 of 689...
  • Page 413: Configuring Web Authentication

    2) Go to configure  WLAN  security  layer 3 configuration mode of CLI. WEC8500/configure/wlan 1# security WEC8500/configure/wlan 1/security# layer3 WEC8500/configure/wlan 1/security/layer3# 3) Enable the WEB authentication (default: disabled).  web-policy authentication WEC8500/configure/wlan 1/security/layer3# web-policy authentication 4) Configure the Pre-Authentication ACL.  pre-auth-acl [ACL] Parameter Description ACL applied before authenticated 5) Configures Web Page Type ...
  • Page 414 [URL] Parameter Description Redirect URL if after auth type is redirect 10) The configuration can be checked using the ‘show wlan security detail’ command. WEC8500# show wlan security detail 1 © SAMSUNG Electronics Co., Ltd. page 414 of 689...
  • Page 415: Figure 227. Wlan Web Policy Configuration Window

    Enable the operation after authentication and configure <URL>. For details on <Derivation Profile Name> configuration, see the section on 8.7.2 Derivation Profile Configuration in this document. Figure 227. WLAN Web Policy Configuration Window © SAMSUNG Electronics Co., Ltd. page 415 of 689...
  • Page 416: Configuring Web Authentication On Mac Authentication Failure

    WEC8500/configure/wlan 1# security WEC8500/configure/wlan 1/security# layer3 WEC8500/configure/wlan 1/security/layer3# 3) Enable the WEB authentication (default: disabled).  web-policy macAuthFailure WEC8500/configure/wlan 1/security/layer3# web-policy macAuthFailure 4) Next step, refer to CLI of 8.3.2 Web Authentification. © SAMSUNG Electronics Co., Ltd. page 416 of 689...
  • Page 417: Figure 228. Wlan Layer 2 Security Configuration Window

    Go to the <L3> of the <Security> tab. Enable <WEB POLICY> and select the Web Authentication on MAC Authentication Failure Next step, refer to Configures Web UI at 8.3.2 Web Authentification. Figure 229. WLAN Web Policy Configuration Window © SAMSUNG Electronics Co., Ltd. page 417 of 689...
  • Page 418: Configuring Web Pass-Through

    2) Go to configure  WLAN  security  layer 3 configuration mode of CLI. WEC8500/configure/wlan 1# security WEC8500/configure/wlan 1/security# layer3 WEC8500/configure/wlan 1/security/layer3# 3) Enable the WEB authentication (default: disabled).  web-policy pass-through WEC8500/configure/wlan 1/security/layer3# web-policy pass-through 4) Configure the Pre-Authentication ACL.  pre-auth-acl [ACL] Parameter Description ACL for occurrence of redirection 5) Configure the Web Page Type.
  • Page 419: Figure 230. Web Pass-Through Configuration Window

    CHAPTER 8. Security 6) The configuration can be checked using the ‘show wlan security detail’ command. WEC8500# show wlan security detail 1 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <WLANs>...
  • Page 420: Configuring One Time Redirection

     Web-policy oneTimeRedirection Parameter Description Page Type Web authentication method - external: Uses the authentication page of an external web server. - downloaded: Uses the authentication page downloaded from the system. © SAMSUNG Electronics Co., Ltd. page 420 of 689...
  • Page 421: Figure 231. One Time Redirection Configuration Window

    CHAPTER 8. Security 6) To check the configuration, use the ‘show wlan security detail’ command. WEC8500# show wlan security detail 1 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <WLANs> menu in the sub-menus. In the WLANs screen, select WLAN ID and go to the <L3>...
  • Page 422: Configure Captive Potal Service Port

    In the menu bar of <WEC Main window>, select <Administration> and then select the <HTTP-HTTPS> menu in the sub-menus. Configure http service port at <HTTP>  <Captive Portal Port> and <HTTPS>  <Captive Potal Port>. © SAMSUNG Electronics Co., Ltd. page 422 of 689...
  • Page 423: Redirection Address Format

    WEB PAGE TYPE Description Internal Default internal web pages Downloaded Downloading web pages to the system Customized Editing internal web pages Logo, Header, Body, Footer, etc. can be edited on internal web pages. © SAMSUNG Electronics Co., Ltd. page 423 of 689...
  • Page 424: Captive Portal Web Service Configuration

    Internet without re-authentication over multiple sessions for a set period of time. The length of time allowed for Internet access without requiring re-authentication can be configured using Cache Duration (Days) in the L3 option when creating the WLAN. © SAMSUNG Electronics Co., Ltd. page 424 of 689...
  • Page 425: Nat And Firewall Configuration

    1) Go to the configure mode of the CLI. WEC8500# configure terminal 2) Create an access-list. WEC8500/configure# access-list fw fw4 deny tcp any any eq 23 3) Configure a firewall to the interface using an access-list. WEC8500/configure# interface vlan1.10 WEC8500/configure/interface vlan1.10# ip access-group fw forward fw4 WEC8500/configure/interface vlan1.10# exit...
  • Page 426: Access List Configuration

    In the menu bar of <WEC Main window>, select <Configuration> and then select the <Security>  <Firewall>  <<Policy> menu in the sub-menus. Click the <Add> button to configure the firewall Policy. © SAMSUNG Electronics Co., Ltd. page 426 of 689...
  • Page 427: Nat Configuration

    4) Configure a NAT to the interface. WEC8500/configure# interface vlan1.30 WEC8500/configure/interface vlan1.30# ip nat inside WEC8500/configure/interface vlan1.30#exit 5) Add the NAT rule by using access-list and pool. WEC8500/configure# ip nat outside source list fw1 pool pool1 © SAMSUNG Electronics Co., Ltd. page 427 of 689...
  • Page 428 3) Configure a NAT to the interface. WEC8500/configure# interface vlan1.30 WEC8500/configure/interface vlan1.30#ip nat outside WEC8500/configure/interface vlan1.30#exit 4) Add the NAT rule by using access-list and pool. WEC8500/configure# ip nat outside destination list fw6 pool pool2 © SAMSUNG Electronics Co., Ltd. page 428 of 689...
  • Page 429: Figure 235. Nat Configuration (1)

    WEC8500/configure/interface vlan1.30#ip nat outside WEC8500/configure/interface vlan1.30#exit 3) Configure a NAT rule using a static IP (A port can be also specified for DNAT). WEC8500/configure# ip nat outside destination static tcp 10.10.10.1 4300 30.30.30.2 23 [Checking NAT Configuration] To check the created NAT, use the following command.
  • Page 430: Figure 236. Nat Configuration (2)

    Static and configure the values of Original IP Addr: Port and Translated IP Addr: Port. Figure 236. NAT configuration (2) To proceed with NAT configuration, you must create an access list first. © SAMSUNG Electronics Co., Ltd. page 430 of 689...
  • Page 431: Mac Filter

    2) Creates a MAC filter list. WEC8500/configure/security# mac-filter [ID] Parameter Description MAC filter list table ID (range: 1-20) 3) Configure the filtering policy. WEC8500/configure/security/mac-filter 1# policy [POLICY] Parameter Description POLICY Table policy of MAC filtering list 4) Configure a MAC entry.
  • Page 432: Figure 237. Mac Configuration

    MAC FILTER ID (range: 1-20) 6) You can check the configured information below. show security mac-filter summary WEC8500# show security mac-filter detail Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Security>...
  • Page 433: Figure 239. Mac Entry Configuration (2)

    CHAPTER 8. Security 2) Configure the policy in the Edit configuration screen by selecting the index of MAC filter list. Figure 239. MAC entry configuration (2) © SAMSUNG Electronics Co., Ltd. page 433 of 689...
  • Page 434: Figure 240. Mac Entry Configuration (3)

    3) Select a WLAN for which the MAC filter will be applied. Check a MAC FILTER ID to apply in the Security > L2 configuration screen. To apply the configuration, click the <Apply> button. Figure 240. MAC entry configuration (3) © SAMSUNG Electronics Co., Ltd. page 434 of 689...
  • Page 435: Operator Authentication Through Interoperation With Tacacs+ Server

    WEC8500# configure terminal WEC8500/configure# security WEC8500/configure/security# tacacs 1 WEC8500/configure/security/tacacs 1# 2) Configure the IP address of the TACACS+ server. WEC8500/configure/security/tacacs 1# server-ip [IP_ADDRESS] Parameter Description IP_ADDRESS IP address of the TACACS+ server 3) Set the public key of the TACACS+ server.
  • Page 436 (range: 1-65,535, default value: 49) 5) Configure the items related to retransmissions in TACACS+ communications. You can use default values without changing configuration. WEC8500/configure/security/tacacs 1# retransmit-interval [RETRY_INTERVAL] WEC8500/configure/security/tacacs 1# retransmit-count [FO_RETRY_COUNT] Parameter Description RETRY_INTERVAL Retransmission interval for a TACACS+ message...
  • Page 437: Figure 241. Ttacacs+ Server Configuration Window

    - Note: it must be one of the IP addresses configured in the W-EP wireless LAN system. STATUS Status indicating whether packets are transferred to the TACACS+ server (default value: enable) © SAMSUNG Electronics Co., Ltd. page 437 of 689...
  • Page 438: Configuring Authentication Type Of Operator Account

    Configuration using CLI 1) Go to the configure mode of the CLI. WEC8500# configure terminal WEC8500/configure# 2) Configure the type of operator account authentication. WEC8500/configure# mgmt-user auth-type [AUTH_TYPE] Parameter Description AUTH_TYPE Authentication type of the operator account (default value: local) - local: Authentication is performed using the database stored inside.
  • Page 439: Role Based Access Control

    WEC8500/configure/rbac/role- profile role_01# end WEC8500# configure terminal WEC8500/configure# rbac WEC8500/configure/rbac# no role-profile role_01 WEC8500/configure/rbac# end CLI for confirming configuration: WEC8500# show rbac role-profile summary ===== Role Profile Summary ===== Id ProfileName Acl Qos Vlan Url DpiProfileName == =========== ========== === ==== ==================== ==============...
  • Page 440: Configuring Derivation Profile

    WEC8500/configure/rbac# derivation-profile derivation_1 WEC8500/configure/rbac/derivation-profile derivation_1# condition priority 11 user equal derivationUser role role_1 WEC8500/configure/rbac/derivation-profile derivation_1# condition priority 12 user start-with derivation role role_2 WEC8500/configure/rbac/derivation-profile derivation_1# condition priority 13 user contain vation role role_3 © SAMSUNG Electronics Co., Ltd. page 440 of 689...
  • Page 441: Figure 245. Derivation Profile Configuration

    12 user start-with derivation role role_2 condition priority 13 user contain vation role role_3 condition priority 14 user end-with User role role_4 condition priority 15 user not-equal samsung role role_5 Configuration using Web UI Configuration > Security > Role Based Access Control > Derivation Profile Example: Figure 245.
  • Page 442: Figure 247. Derivation Profile Configuration

    The method for configuring a derivation profile in the WLAN is as follows: Configuration using CLI Example: WEC8500# configure terminal WEC8500/configure# wlan 1 WEC8500/configure/wlan 1# derivation-profile ieee8021x derivation_1 WEC8500/configure/wlan 1# exit WEC8500/configure# wlan 2 WEC8500/configure/wlan 2# derivation-profile web-auth derivation_2 WEC8500/configure/wlan 2# end...
  • Page 443: Figure 249. Wlan Derivation Profile Configuration

    CHAPTER 8. Security CaptivePotal Global Open Radius CaptivePotal Configuration using Web UI Configuration > WLANs > Security > Radius Example: Figure 249. Wlan Derivation Profile Configuration © SAMSUNG Electronics Co., Ltd. page 443 of 689...
  • Page 444: Configuring Acl Profile

    Figure 250. Wlan Derivation Profile Configuration 8.7.3 Configuring ACL Profile The W-EP WLAN system can manage ACL to apply to a user if the AP of the remote group operates as local bridge. © SAMSUNG Electronics Co., Ltd. page 444 of 689...
  • Page 445 Example: WEC8500# configure terminal WEC8500/configure# rbac WEC8500/configure/rbac# remote WEC8500/configure/rbac/remote # access-list ip acl1 permit seq 1 * any any os-aware WEC8500/configure/rbac/remote # access-list ip acl2 permit seq 2 * any any os-aware WEC8050/configure/rbac/remote# update access-list ip acl1 permit seq 1...
  • Page 446: Figure 251. Remote Ip Acl Configuration

    Configuration > Security > Role Based Access Control > Remote IP ACL Example: Figure 251. Remote IP Acl Configuration Figure 252. Remote IP Acl Add Configuration Figure 253. Remote IP Acl Edit Configuration © SAMSUNG Electronics Co., Ltd. page 446 of 689...
  • Page 447: Configure Remote Acl Profile

    Remote Acl Group. Configuring by CLI Example: WEC8500# configure terminal WEC8500/configure# rbac WEC8500/configure/rbac# remote WEC8500/configure/rbac/remote # acl-profile aclPro_1 WEC8500/configure/rbac/remote/acl-profile aclPro_1# add-acl acl1 WEC8500/configure/rbac/remote/acl-profile aclPro_1# add-acl acl2 WEC8500/configure/rbac/remote/acl-profile aclPro_1# exit WEC8500/configure/rbac/remote # acl-profile aclPro_2 WEC8500/configure/rbac/remote/acl-profile aclPro_2# end © SAMSUNG Electronics Co., Ltd.
  • Page 448: Figure 255. Remote Acl Profile Configuration

    WEC8500# configure terminal WEC8500/configure# rbac WEC8500/configure/rbac/remote# no acl-profile aclPro_2 WEC8500/configure/rbac/remote# end CLI for confirming configuration: WEC8500# show rbac remote acl-profile summary ================ LocalSwAclProfile ================ Id ProfileName TotalRuleCnt AclCnt RmtCnt == =========== ============ ====== ====== 1 aclPro_ Configuring by Web UI Configuration >...
  • Page 449: Figure 257. Remote Acl Profile Edit Configuration

    Configuring by CLI Example: WEC8500# configure terminal WEC8500/configure# ap-group apg_1 WEC8500/configure/ap-group apg_1# remote WEC8500/configure/ap-group apg_1/remote# acl-profile aclPro_1 WEC8500/configure/ap-group apg_1/remote# end CLI for confirming configuration: WEC8500# show rbac remote-group summary GRP_ID GRP_NAME PRO_ID Role Config File Name ====== ================== ====== ========================== apg_1 etc/rmtapgrp/rbac_cfg_rmtapgrp2_XXXX.tar...
  • Page 450: Figure 258. Remote Ap Group-Alc Profile Configuration

    Sync-config Remote Ap Group  all: Perform synchronization for all APs of the remote group.  remote-ap-group [group-name]: Performs synchronization only for the APs included in the corresponding remote group. © SAMSUNG Electronics Co., Ltd. page 450 of 689...
  • Page 451: Figure 259. Remote Ip Acl Configuration Synchronization-All

    [profile-name]: Performs synchronization only for the APs included in the remote group which uses the corresponding ACL profile (CLI only).  ap [ap-profile-name]: Performs synchronization only for a specific AP (CLI only). Synchronization can be confirmed as follows: WEC8500# show rbac remote-group summary GRP_ID GRP_NAME PRO_ID Role...
  • Page 452: Figure 260. Remote Ip Acl Configuration Synchronization-Remote Group

    Configuration > AP Groups > Remote AP Group > ACL Profile  ‘Send To APs’ Figure 260. Remote IP ACL Configuration Synchronization-Remote Group Configuration > Access Points > Remote AP  ‘Send To AP’ Figure 261. ACL Configuration Synchronization-Remote AP © SAMSUNG Electronics Co., Ltd. page 452 of 689...
  • Page 453: External Byod Server

    The basically set value is used and if change is required in the future, change as follows: WEC8500/configure/security/byod# https-requrl regist.do?cmd=dhcpTableXMLReceiver 5) To check the configured environment, use the ‘show security byod configuration’ command. © SAMSUNG Electronics Co., Ltd. page 453 of 689...
  • Page 454: Figure 262. External Byod Server Configuration Window

    No response: When there is no response from the BYOD server  Invalid data format: When the BYOD server failed to send the data on the list of all authentications or in the invalid format © SAMSUNG Electronics Co., Ltd. page 454 of 689...
  • Page 455: Captive Portal Configuration

    WEC8500# configure terminal WEC8500/configure# fqm-mode WEC8500/configure/fqm-mode # access-list ip preauth permit seq 1 udp any eq * any eq 53 os-aware * WEC8500/configure/fqm-mode # access-list ip preauth permit seq 2 tcp 192.168.20.10 255.255.255.255 eq 80 any eq * os-aware * WEC8500/configure/fqm-mode # access-list ip preauth permit seq 3 tcp any eq * 192.168.20.10 255.255.255.255 eq 80 os-aware *...
  • Page 456 Web Authentication. Designate the pre-set ACL for Captive Portal as PRE- AUTHENTICATION ACL on the bottom. Select External for WEB PAGE TYPE, the address of the web page redirect for URL, and External BYOD for SERVER Type, and then click Apply. © SAMSUNG Electronics Co., Ltd. page 456 of 689...
  • Page 457: Chapter 9. Ip Application

     ip dns name-server [A.B.C.D]: Configures a DNS server.  no ip dns name-server [A.B.C.D]: Deletes a configured DNS server.  no ip dns name-server all: Deletes all the DNS servers. © SAMSUNG Electronics Co., Ltd. page 457 of 689...
  • Page 458: Dns Proxy Configuration

    1) Go to the configure mode of the CLI. WEC8500# configure terminal 2) Configure a DNS relay. Configure the cache to a default, i.e. 10000.  ip dns relay enable: Enables a relay. © SAMSUNG Electronics Co., Ltd. page 458 of 689...
  • Page 459: Figure 264. Dns Proxy

    The DNS Relay item supports DNS Proxy configuration. In the SERVICE, you can enable or disable a DNS proxy and configure the cache size of the DNS proxy in the CACHING SIZE. If the cache size is 0, disable the cache. © SAMSUNG Electronics Co., Ltd. page 459 of 689...
  • Page 460 Configure the index of a server that a NTP client will refer to. (Use a default value 1 if it is not configured.)  ntp client server-addr hostname <WORD> index [INDEX]: Enable  no ntp client server-addr hostname <WORD> index [INDEX]: Disable © SAMSUNG Electronics Co., Ltd. page 460 of 689...
  • Page 461 <A.B.C.D> version [1-4] index [1-5] [NTP Server Configuration] The NTP server configuration is as follows: 1) Go to the configure mode of the CLI. WEC8500# configure terminal © SAMSUNG Electronics Co., Ltd. page 461 of 689...
  • Page 462: Figure 265. Ntp Client Configuration

    Click the <Add> or <Delete> button to add or delete a NTP proxy server. Click the <Add> button to configure a specific ‘Server IP’ or ‘Server DOMAIN NAME’ that will be used by a NTP proxy. © SAMSUNG Electronics Co., Ltd. page 462 of 689...
  • Page 463: Ftp/Sftp

    2) Enable or disable the sFTP server.  ftp-server enable: Enable  no ftp-server enable: Disable 3) Enter as follows to change a user’s ID and password.  ftp-server chguser [ID] [PASSWORD] © SAMSUNG Electronics Co., Ltd. page 463 of 689...
  • Page 464 WEC8500# file download samsung Samsung 90.90.21.108 wec8500 wec8500 sftp  File upload using a sFTP client WEC8500# file upload samsung Samsung 90.90.21.108 wec8500 wec8500 sftp  File download using a FTP client WEC8500# file download samsung Samsung 90.90.21.108 wec8500 wec8500 ...
  • Page 465: Figure 266. Ftp/Sftp Server Configuration

    ‘PASSWORD’, or ‘CONFIRM PASSWORD’. Enter an idle timeout value in ‘IDLE TIMEOUT’. Also for SFTP, you can change the user name and password of a SFTP server by entering ‘USER’, ‘PASSWORD’, or ‘CONFIRM PASSWORD’. © SAMSUNG Electronics Co., Ltd. page 465 of 689...
  • Page 466: Telnet/Ssh

    2) Enable or disable the SSH server.  ssh-server enable: Enable  no ssh-server enable: Disable 3) Specify the port number of SSH server.  ssh-server port [PORT_NUMBER] Parameter Description PORT_NUMBER Port number to configure (range: 1-65535) © SAMSUNG Electronics Co., Ltd. page 466 of 689...
  • Page 467: Figure 267. Telnet/Ssh Server Configuration

    You can configure the port number of service by using ‘TELNET PORT’ or ‘SSH PORT’. By using ‘SESSION TIMEOUT’, you can configure the session timeout of TELNET or SSH in min. and can also configure maximum number of sessions by using ‘MAXIMUM NUMBER OF SESSIONS’. © SAMSUNG Electronics Co., Ltd. page 467 of 689...
  • Page 468: Utilities

    Used to check network connection status.  ping [IP_ADDRESS] [traceroute] Used to check a route path.  traceroute [IP_ADDRESS] [tcpdump] Used to check the packet of a specific interface.  tcpdump [INTERFACE_NAME] © SAMSUNG Electronics Co., Ltd. page 468 of 689...
  • Page 469: Snmp Configuration

    - ro: read-only privilege IP_VERSION IP address version type (v4/v6) IP_ADDRESS, NETMAST IP address area that can be connected 3) To check the created SNMP community, use the ‘show snmp community’ command. © SAMSUNG Electronics Co., Ltd. page 469 of 689...
  • Page 470: Snmp Trap

    IP address to which a trap will be transmitted PORT_NUMBER Port number to which a trap will be transmitted (default: 162) 3) To check the added trap target, use the ‘show snmp trap’ command. © SAMSUNG Electronics Co., Ltd. page 470 of 689...
  • Page 471: Nmp V3 User

    - rw: read-write rights - ro: read-only rights AUTH_PROTOCOL Authentication Protocol - MD5: Message-Digest algorithm 5 - SHA: Secure Hash Algorithm AUTH_KEY Authentication Key PRIV_PROTOCOL Privacy Protocol - DES: Data Encryption Standard © SAMSUNG Electronics Co., Ltd. page 471 of 689...
  • Page 472: Figure 270. Snmp V3 User Configuration Window

    Click <Add> button on the v3 User window, then created SNMP v3 User window is displayed. Input configuration value and click <Apply> button, then it is applied. Figure 270. SNMP v3 User configuration window © SAMSUNG Electronics Co., Ltd. page 472 of 689...
  • Page 473: System Management

    By using the ‘show system info’ command, you can check the system configuration information of the APC system such as version information, memory information, disk information, temperature sensor and fan status, etc. The execution results of the command in WEC8500 are as follows: WEC8500/configure# show system info -----------------------------------------------------...
  • Page 474 System total disk capacity [Temperature Sensor Status] Parameter Description cpu upside sensor CPU upside sensor status (OK, NOK) cpu downside sensor CPU downside sensor status (OK, NOK) board sensor Board sensor status (OK, NOK) © SAMSUNG Electronics Co., Ltd. page 474 of 689...
  • Page 475 For WEC8050: Parameter Description Fan [0]~[1] Fan operation status (OK, NOK) [Power Supply Status] The WEC8500 has dual detachable power module as shown below. Parameter Description Power Supply [0]~[1] Whether a power module is equipped (Equipped, Not Equipped) Status Power module operation status (OK, NOK) The WEC8050 has only one power module as shown below.
  • Page 476: Figure 271. System Information

    In the menu bar of <WEC Main window>, select <Monitor> and then select the <DASHBOARD>  <Summary> menu in the sub-menus. It provides a wide range of information, status retrieving event and alarm retrieving function of the WEC8500 system. Figure 271. System information ©...
  • Page 477 CHAPTER 10. System Management It provides various information, status retrieving event and alarm retrieving function of the WEC8050 system. © SAMSUNG Electronics Co., Ltd. page 477 of 689...
  • Page 478: System Reboot

    Use the ‘reboot in HH:MM:SS’ command to reserve system reboot. Once the reservation is completed, the system is rebooted after a specified time (HH:MM:SS). WEC8500# reboot in 12:00:00 Do you want to save the configuration? (y/n): y Do you want to restart the system? (y/n): y Notice: The system WILL reboot in 12:00:00.
  • Page 479: Figure 272. Reboot (Apc)

    CHAPTER 10. System Management [APC] Figure 272. Reboot (APC) [AP] Figure 273. Reboot (AP) © SAMSUNG Electronics Co., Ltd. page 479 of 689...
  • Page 480: System Resource Management

    Retrieves system temperature (°C). The result of system status retrieval using each command is as follows: [CPU Load] The retrieving CLI execution result of WEC8500 is as follows: WEC8500# show system cpu Average CPU usage (%) control plane : 3.84...
  • Page 481 : 13520032 KBytes Used Disk 4338296 KBytes Free Disk 9181736 KBytes [Fan RPM Level] The retrieving CLI execution result of WEC8500 is as follows: WEC8500# show system fan FAN ID rpm Level(0-3) ------- -------------- FAN[0] 1 level FAN[1] 1 level...
  • Page 482 CHAPTER 10. System Management [System Temperature (°C)] The retrieving CLI execution result of WEC8500 is as follows: WEC8500# show system temp Sensor Location Temperature --------------- ----------- CPU sensor 1 CPU sensor 2 Board The retrieving CLI execution result of WEC8050 is as follows:...
  • Page 483: Retrieving And Configuring Threshold

    You can retrieve and configure a threshold at which CPU load, disk usage, temperature alarm, memory usage, or fan alarm occurs. Enter a value for each item, and click the <Apply> button to make the configuration applied. Figure 274. Configuring SNMP alarm threshold © SAMSUNG Electronics Co., Ltd. page 483 of 689...
  • Page 484: Managing Alarm And Event

    Retrieves a major alarm. A major alarm is a system log that could give a major effect to a service. minor Retrieves a minor alarm. A minor alarm is a system log that could give a minor effect to a service. © SAMSUNG Electronics Co., Ltd. page 484 of 689...
  • Page 485: Retrieving Current Alarm

    2012-12-17 09:56:13 MAJ APC xe2 1301 NET Link dn AdminStatus[up] OperStatus[down] … To selectively retrieve a group or level, execute the command as follows: WEC8500# show alarm list group network 1 network 2012-12-17 09:56:13 MAJ APC ge8 1301 NET Link dn AdminStatus[up] OperStatus[down]...
  • Page 486: Retrieving History

    [Event History] You can retrieve event information using the following command. WEC8500# show event 1 system 2012-08-31 13:59:46 NOT APC MGMT User Login ID=samsung, IP=192.168.0.91 2 system 2012-08-31 13:48:33 NOT SWM:system Boot Complete - … An event is managed per group and you can retrieve it selectively using the following command.
  • Page 487: Figure 276. History

    In the menu bar of <WEC Main window>, select <Monitor> and then select the <Summary> menu in the sub-menus. It provides status retrieving event and alarm retrieving function. Figure 276. History © SAMSUNG Electronics Co., Ltd. page 487 of 689...
  • Page 488: External Transmission Configuration

    1) Go to the configure mode of the CLI. WEC8500# configure terminal 2) Configure group information. WEC8500/configure# alarm group system 3) Configure level information. WEC8500/configure# alarm level major 4) To check the configured alarm filter information, use the ‘show alarm conf’ command.
  • Page 489: Figure 277. Configuring Alarm Filter And Level

    In the menu bar of <WEC Main window>, select <Administrator> and then select the <SNMP>  <Trap Control>  <Alarm Information> menu in the sub-menus. You can retrieve the configuration related to alarm filter and alarm level. Figure 277. Configuring alarm filter and level © SAMSUNG Electronics Co., Ltd. page 489 of 689...
  • Page 490: Managing Traffic Performance

    ‘show stats-report conf’ command. 5) Configure so that the performance information is uploaded to the FTP server. But, because the default is the ‘start’ status, this step may be skipped. WEC8500/configure# stats-report upload start © SAMSUNG Electronics Co., Ltd. page 490 of 689...
  • Page 491: Managing Real-Time Information Collection

    [INTERFACE_NAME] If the real-time information collection is suspended or initialized, you cannot check the real-time information of the interface. WEC8500/configure# show stats-report current-stats ge3 Error: This interface was not configured to gather statistics. © SAMSUNG Electronics Co., Ltd.
  • Page 492: Managing License Key

    CHAPTER 10. System Management 10.6 Managing License Key The Samsung Electronics Common License Method (SLM) is applied to Version 1.5 or newer of the APC system. Therefore, SLM licensing is applied to new websites that are installed using Version 1.5 or later.
  • Page 493 ‘show system license-key’ command. After clearance, you can view information about the deactivation key in the ‘License Key’ of the key after executing the ‘show system license-key’ command. © SAMSUNG Electronics Co., Ltd. page 493 of 689...
  • Page 494: Figure 278. Slm License Search And Configuration Window

    Deactivation in ‘License Control’ and then entering the license key shown in ‘SLM License Key Status’. Figure 278. SLM License Search and Configuration Window © SAMSUNG Electronics Co., Ltd. page 494 of 689...
  • Page 495: Managing Old License Key

    Once it is installed, the license key file is deleted from the system.  install-key [LICENSE_KEY]: Direct registration  install-key [IP_ADDRESS] [PORT_NUMBER] [ID] [PASSWORD] [PATH]: Remote registration © SAMSUNG Electronics Co., Ltd. page 495 of 689...
  • Page 496 : 00 [Analyzing License Key] Before registering a license key to the system, you can check the functions supported by the license key.  analyze-key [LICENSE-KEY] Parameter Description LICENSE_KEY License key © SAMSUNG Electronics Co., Ltd. page 496 of 689...
  • Page 497: Figure 279. Old License Installation Check Window

    In the figure below, ‘License Key Status’ is the section that shows whether old license keys are installed properly and ‘Current System Status’ shows license information currently applied to the system. Figure 279. Old License Installation Check Window © SAMSUNG Electronics Co., Ltd. page 497 of 689...
  • Page 498: Syslog Configuration

    3) Configure the IP address and UDP port of a target syslog server (The default of the UDP port is ‘514’.). WEC8500/configure# syslog add 192.168.0.91 WEC8500/configure# syslog add 192.168.0.99 udpport 510 4) Configure a log level to filter. WEC8500/configure# syslog level information 5) To check the configured syslog information, use the ‘show syslog conf’...
  • Page 499: Figure 280. Syslog Window

    In the menu bar of <WEC Main window>, select <Administrator> and then select the <Logs>  <SysLog Configuration> menu in the sub-menus. It provides syslog related configuration and retrieving function. Figure 280. Syslog window © SAMSUNG Electronics Co., Ltd. page 499 of 689...
  • Page 500: System Upgrade

    WEC8500# configure terminal WEC8500/configure# 2) Perform upgrade by using a package.  package upgrade [FILE_NAME] Parameter Description FILE_NAME Package file to upgrade The package must be located in the /user/package directory. © SAMSUNG Electronics Co., Ltd. page 500 of 689...
  • Page 501 2) Execute the ‘show system cpu detail’ an internal error command to check the CPU status. 3) Transmit the logs above to the Samsung Technical Support. 1) Execute the ‘show process status’ command Upgrade saving the configuration-...
  • Page 502: Figure 281. Package Upgrade (Apc)

    CHAPTER 10. System Management 4) After system rebooting, check if the new package is applied to the system. WEC8500# show reboot cause Reboot Cause: Block: Upgrade/ Code: Package Upgrade WEC8500# show version Samsung package version information Primary (currently running) : 0.7.1.R...
  • Page 503: Configuration Management

    In addition, to apply a file (‘FILENAME’) from outside to the current system, execute the command as follows: WEC8500# import [FILENAME] [Periodic backup configuration information] Excute following command to transfer configuration information to ftp/sfpt server. filename: System MAC_Package Version_backup time.wec8500.config [wec8050.config] 1) Enter to CLI periodic-backup mode. WEC8500# configure terminal WEC8500/configure# periodic-backup WEC8500/configure/periodic-backup# ©...
  • Page 504 To initialize the current configuration information to the factory default, execute the command as follows: If the ‘full-erase’ parameter is not entered, only the configuration information is initialized. WEC8500# factory-reset (full-erase) © SAMSUNG Electronics Co., Ltd. page 504 of 689...
  • Page 505: Figure 282. Configuration Information Save Icon

    The STATUS shows the execution results of backup/restore function. [Initialize Configuration information] In the menu bar of <WEC Main window>, select <Administrator> and then select the < FACTORY RESET > menu in the sub-menus. © SAMSUNG Electronics Co., Ltd. page 505 of 689...
  • Page 506: Figure 284. Configuration Information Initialization Window

    CHAPTER 10. System Management Figure 284. Configuration Information Initialization window © SAMSUNG Electronics Co., Ltd. page 506 of 689...
  • Page 507: Configuration Synchronization

    IPv4 address [Deleting APC from Sync List] Registered APCs can be deleted from the Sync List. 1) Go to the configure mode of the CLI. WEC8500# configure terminal WEC8500/configure# configuration-sync WEC8500/configure/configuration-sync# © SAMSUNG Electronics Co., Ltd. page 507 of 689...
  • Page 508 Index on the Sync List (range: 1-2) [Retrieving APC information registered on Sync List] You can check the APC information registered on the Sync List using the ‘show configuration-sync list-apc’ command. WEC8500# show configuration-sync list-apc ======================================================== INDEX APC-NAME IPv4-ADDRESS CONNECT-STATUS...
  • Page 509: Audit Configuration Information Synchronization

    To check mismatching configuration information, the APCs must be configured as synchronization members. In the menu bar of <WEC Main window>, select <Configuration> and then select the <Configuration Synchronization>  <Audit> menu in the sub-menus. © SAMSUNG Electronics Co., Ltd. page 509 of 689...
  • Page 510 Monthly configuration information retrieval: Enter date and time information. b) Weekly configuration information retrieval: Enter day of week and time information. c) Daily configuration information retrieval: Enter time information. © SAMSUNG Electronics Co., Ltd. page 510 of 689...
  • Page 511: Debug And Diagnosis

    2012-08-31 13:47:35 up(S) zebosm 2188 2012-08-31 13:47:55 up(S) awmb 2226 2012-08-31 13:48:00 up(S) 2385 2012-08-31 13:48:30 up(S) capwap 2386 2012-08-31 13:48:30 up(S) hostapd 2387 2012-08-31 13:48:30 up(S) 2388 2012-08-31 13:48:30 up(S) © SAMSUNG Electronics Co., Ltd. page 511 of 689...
  • Page 512 2522. 2012-12-21 15:59:50 guestService 2294 SIGTERM(15) In addition, you can check the detail information corresponding to the ‘id’ of each error log by using the following command. WEC8500# show processes log id 15 id date name signal backtrace...
  • Page 513: Retrieving Crash Information

    [Retrieving Summarized CDR History Information] To retrieve the entire history information for all the rebooting including rebooting due to a crash, enter the ‘show debug reboot summary’ command.  show debug reboot summary WEC8500# show debug reboot summary ====================================================================== ==================================== EVENT_NAME EVENT_DESCRIPTION...
  • Page 514 CHAPTER 10. System Management If no parameter is entered, the most recent reboot information is retrieved. WEC8500# show debug reboot info ###################################################################### [REBOOT_SUMMARY]====================================================== : 0001 EVENT NAME : DIE EVENT DESC : DIE_VAL[1] - Unhandled kernel unaligned access REBOOT TIME...
  • Page 515 CHAPTER 10. System Management 10.11.2.2 Retrieving Core Dump Information Use the ‘show debug coredump summary’ command to retrieve the status of core dump. WEC8500# show debug coredump summary CORE_DUMP enable DUMP_QUOTA 1024 (MB) CORE_SIZE 204800 (KB) POLL_PERIOD 60 (sec) THRESHOLD...
  • Page 516: File Management

    For example, if the current directory is ‘disk:/’, the ‘copy test1 test2’ is the same as the ‘copy disk:/test1 disk:/test2’ command. To retrieve a current directory, enter the ‘pwd’ command. WEC8500/file# pwd disk:/ © SAMSUNG Electronics Co., Ltd. page 516 of 689...
  • Page 517: Retrieving Directory List

    5 13:49:49 PKG_INFO_STANDBY WEC8500/file# ls disk:/etc Current working directory: disk:/ directory 4.0K 9 15:36:02 ap directory 4.0K 9 15:36:02 config directory 4.0K 9 15:36:02 db file 5 13:49:49 P KG_INFO_STANDBY WEC8500/file# © SAMSUNG Electronics Co., Ltd. page 517 of 689...
  • Page 518: Revising File

    To copy a file, use the ‘copy [SRC_FILENAME] [DES_FILENAME]’ command. The below command copies the ‘test’ file into ‘disk:/test2’. WEC8500/file# copy test disk:/test2 To delete a file, use the ‘remove [FILENAME]’ command. If you enter the below command and enter ‘y’, the ‘test2’ file is deleted.
  • Page 519: File Download And Upload

    To download a file, use the ‘download’ command. An example of downloading the ‘test’ file from ‘192.168.1.1’ to ‘disk:/test’ is shown below. WEC8500/file# download guest guest 192.168.1.1 test disk:/test Following is example of file downloading ‘test’ file from ‘3ffe:500::862b:2bff:fe6d:2199’ to ‘disk:/test’.
  • Page 520 Build Path /home2/apcbuild/release/apc MD5SUM b715450abf1be81616fd7e6391e12cee [Retrieving the information of AP package file] WEC8500/file# version package/ap/wea302.img ===================================================== Model wea302 Version 0.1.0.R Build Date Fri Apr 13 18:41:26 KST 2012 Sisze 31998080 d5aa76ad © SAMSUNG Electronics Co., Ltd. page 520 of 689...
  • Page 521: Retrieving Storage Media

    CHAPTER 10. System Management 10.12.7 Retrieving Storage Media The WEC8500 supports a disk and USB memory as a storage media. And the WEC8050 supports only a disk as a storage media. Both current directory-based relative path and absolute path are all supported during command execution and the path of each device is shown in the below table.
  • Page 522: Managing File In Web Ui

    In the popup window, specify a location where the file will be moved. Deleting a file After selecting the checkbox of a file to delete, click the <Delete> button. © SAMSUNG Electronics Co., Ltd. page 522 of 689...
  • Page 523 Because the APC system use the UTF-8 method and the encoded file in the UTF-8 method cannot be displayed in the PC which uses EUC-KR. To correct such problem, it provides a function of configuring a method for encoding in the © SAMSUNG Electronics Co., Ltd. page 523 of 689...
  • Page 524 To configure an encoding method, it is possible to select <Administration> in the menu bar of <WEC Main window> and then configure in <File Management>  <Character Encoding> in the sub-menus. © SAMSUNG Electronics Co., Ltd. page 524 of 689...
  • Page 525: Statistics Function

    ../network-stats/alert/voip/call-setup# enable ../network-stats/alert/voip/call-setup# threadhold 50 3) Retrieve the status of configuration of the VoIP statistics. WEC8500# show network-stats statistics voip configuration 4) Retrieve the status of configuration of the VoIP alert. WEC8500# show network-stats alert voip configuration 5) Retrieve call statistics by radio.
  • Page 526 7) Retrieve call statistics by WLAN. WEC8500# show network-stats statistics voip wlan 8) Retrieve call statistics by device type. WEC8500# show network-stats statistics voip de vice Configuration using Web UI In the menu bar of <WEC Main window>, select <Monitoring> and then select <Statistics>...
  • Page 527 If the error count exceeds the threshold by each period, an alert occurs. Configuration using CLI 1) Enable/Disable: Configure whether to operate RF Statistics. (Enable: Function operation, Disable: No function operation) WEC8500/configure/network-stats/statistics/rf-value# enable © SAMSUNG Electronics Co., Ltd. page 527 of 689...
  • Page 528 WEC8500# show network-stats statistics rf-value summary 6) Retrieve the RF statistics of the RF values by AP. ex.) Statistics of air-quality of AP 43 WEC8500# show network-stats statistics rf-value air-quality 43 © SAMSUNG Electronics Co., Ltd. page 528 of 689...
  • Page 529 Control, User Data, Tx/Rx, Unicast/Muticast/Broadcast, Background/Best Effort/Video/Voice, and Peak-rate (Kbps) as detailed items. They also provide statistical information on Real-time Transport Protocol (RTP) as voice traffic as well. © SAMSUNG Electronics Co., Ltd. page 529 of 689...
  • Page 530 3) To retrieve the statistical information of RTP of a specific AP, give a RTP option as follows: WEC8500# show network-stats statistics data ap-stat 1 rtp 4) To retrieve the statistical information of all APs, enter as follows: WEC8500# show network-stats statistics data apc-stat...
  • Page 531 Whether to configure network statistics alert - enable: Set (by default) - disable: Cleared APC/configure# network-stats alert station enable Enabled Station Net-Stats Alert APC/configure# no network-stats alert station enable Disabled Station Net-Stats Alert © SAMSUNG Electronics Co., Ltd. page 531 of 689...
  • Page 532 6) Configure the alert boundary value of the disassoc. attempt count.  network-stats alert station alert-assoc-try [VALUE] Parameter Description VALUE 10~1000 (default: 30) APC/configure# network-stats alert station alert-assoc-try 40 Assoc Try Alert Threshold: 40 © SAMSUNG Electronics Co., Ltd. page 532 of 689...
  • Page 533 10) Configure the max entry value of the target in the station network statistics.  network-stats alert station alert-max-db [MODE] Parameter Description VALUE 1000~50000 (default: 10000) APC/configure# network-stats alert station alert-max-db 5000 Max Alert DB Number : 5000 © SAMSUNG Electronics Co., Ltd. page 533 of 689...
  • Page 534 2) Check the station association attempt count (by AP/Device/Radio/WLAN). ex.) by WLAN APC# show network-stats statistics station association num-of-attempt- assoc wlan 1 [WLAN ID (1)] Reason Total 5Min 1Hour 1Day ====================================================================== ======== AssocAttempt 0 0 0 0 © SAMSUNG Electronics Co., Ltd. page 534 of 689...
  • Page 535 INVALID_IE MICHAEL_MIC_FAILURE 4WAY_HANDSHAKE_TIMEOUT GROUP_KEY_UPDATE_TIMEOUT IE_IN_4WAY_DIFFERS GROUP_CIPHER_NOT_VALID PAIRWISE_CIPHER_NOT_VALID AKMP_NOT_VALID UNSUPPORTED_RSN_IE_VERSION INVALID_RSN_IE_CAPAB IEEE_802_1X_AUTH_FAILED CIPHER_SUITE_REJECTED TDLS_TEARDOWN_UNREACHABLE TDLS_TEARDOWN_UNSPECIFIED TOO_MANY STAION_RETRY_THRESHOLD ACL_KICKOUT AUTH_IDLE_TIMEOUT AUTH_IN_ASSOC_STATE WRONG_STA EXPIRED_SERVICE_TIME MAC_AUTH_TIMEOUT MAC_AUTH_REJECT MANUAL_KICKOUT MALICIOUS_STA_STATISTICS KICKOUT_MAC_FILTER KICKOUT_INVALID_IP KICKOUT_ACL INTER_APC_HO CLUSTER_DOWN VAP_DOWN © SAMSUNG Electronics Co., Ltd. page 535 of 689...
  • Page 536 Station Association Succ Rate(%)....0.000000 % 6) Check the statistics of station data rate (by AP/Radio). ex.) by AP/Radio APC# show network-stats statistics station data-rate 1 [AP ID (1), Radio 5-GHz] 802.11b/g_TxCount © SAMSUNG Electronics Co., Ltd. page 536 of 689...
  • Page 537 Reason Total 5Min 1Hour 1Day ====================================================================== ======== 802.11g_6M 802.11g_9M 802.11g_12M 802.11g_18M 802.11g_24M 802.11g_36M 802.11g_48M 802.11g_54M 802.11g_TxFailedCount Reason Total 5Min 1Hour 1Day ====================================================================== ======== 802.11g_6M 802.11g_9M 802.11g_12M 802.11g_18M 802.11g_24M 802.11g_36M 802.11g_48M 802.11g_54M © SAMSUNG Electronics Co., Ltd. page 537 of 689...
  • Page 538 MCS_7 MCS_8 MCS_9 MCS_10 MCS_11 MCS_12 MCS_13 MCS_14 MCS_15 MCS_16 MCS_17 MCS_18 MCS_19 MCS_20 MCS_21 MCS_22 MCS_23 TxHtMcsFailed Reason Total 5Min 1Hour 1Day ====================================================================== ======== MCS_0 MCS_1 MCS_2 MCS_3 MCS_4 MCS_5 © SAMSUNG Electronics Co., Ltd. page 538 of 689...
  • Page 539 MCS_1 MCS_2 MCS_3 MCS_4 MCS_5 MCS_6 MCS_7 MCS_8 MCS_9 MCS_10 MCS_11 MCS_12 MCS_13 MCS_14 MCS_15 MCS_16 MCS_17 MCS_18 MCS_19 MCS_20 MCS_21 MCS_22 MCS_23 TxVhtMcs Reason Total 5Min 1Hour 1Day ====================================================================== ======== © SAMSUNG Electronics Co., Ltd. page 539 of 689...
  • Page 540 11AC_MCS[2][4] 11AC_MCS[2][5] 11AC_MCS[2][6] 11AC_MCS[2][7] 11AC_MCS[2][8] 11AC_MCS[2][9] TxVhtMcsFailed Reason Total 5Min 1Hour 1Day ====================================================================== ======== 11AC_MCS[0][0] 11AC_MCS[0][1] 11AC_MCS[0][2] 11AC_MCS[0][3] 11AC_MCS[0][4] 11AC_MCS[0][5] 11AC_MCS[0][6] 11AC_MCS[0][7] 11AC_MCS[0][8] 11AC_MCS[0][9] 11AC_MCS[1][0] 11AC_MCS[1][1] 11AC_MCS[1][2] 11AC_MCS[1][3] 11AC_MCS[1][4] 11AC_MCS[1][5] 11AC_MCS[1][6] © SAMSUNG Electronics Co., Ltd. page 540 of 689...
  • Page 541 11AC_MCS[1][0] 11AC_MCS[1][1] 11AC_MCS[1][2] 11AC_MCS[1][3] 11AC_MCS[1][4] 11AC_MCS[1][5] 11AC_MCS[1][6] 11AC_MCS[1][7] 11AC_MCS[1][8] 11AC_MCS[1][9] 11AC_MCS[2][0] 11AC_MCS[2][1] 11AC_MCS[2][2] 11AC_MCS[2][3] 11AC_MCS[2][4] 11AC_MCS[2][5] 11AC_MCS[2][6] 11AC_MCS[2][7] 11AC_MCS[2][8] 11AC_MCS[2][9] [AP ID (1), Radio 2.4-GHz] 802.11b/g_TxCount Reason Total 5Min 1Hour 1Day © SAMSUNG Electronics Co., Ltd. page 541 of 689...
  • Page 542 Reason Total 5Min 1Hour 1Day ====================================================================== ======== 802.11g_6M 802.11g_9M 802.11g_12M 802.11g_18M 802.11g_24M 802.11g_36M 802.11g_48M 802.11g_54M 802.11g_TxFailedCount Reason Total 5Min 1Hour 1Day ====================================================================== ======== 802.11g_6M 802.11g_9M 802.11g_12M 802.11g_18M 802.11g_24M 802.11g_36M 802.11g_48M 802.11g_54M © SAMSUNG Electronics Co., Ltd. page 542 of 689...
  • Page 543 MCS_6 MCS_7 MCS_8 MCS_9 MCS_10 MCS_11 MCS_12 MCS_13 MCS_14 MCS_15 MCS_16 MCS_17 MCS_18 MCS_19 MCS_20 MCS_21 MCS_22 MCS_23 TxHtMcsFailed Reason Total 5Min 1Hour 1Day ====================================================================== ======== MCS_0 MCS_1 MCS_2 MCS_3 MCS_4 © SAMSUNG Electronics Co., Ltd. page 543 of 689...
  • Page 544 ======== MCS_0 MCS_1 MCS_2 MCS_3 MCS_4 MCS_5 MCS_6 MCS_7 MCS_8 MCS_9 MCS_10 MCS_11 MCS_12 MCS_13 MCS_14 MCS_15 MCS_16 MCS_17 MCS_18 MCS_19 MCS_20 MCS_21 MCS_22 MCS_23 TxVhtMcs Reason Total 5Min 1Hour 1Day © SAMSUNG Electronics Co., Ltd. page 544 of 689...
  • Page 545 11AC_MCS[2][2] 11AC_MCS[2][3] 11AC_MCS[2][4] 11AC_MCS[2][5] 11AC_MCS[2][6] 11AC_MCS[2][7] 11AC_MCS[2][8] 11AC_MCS[2][9] TxVhtMcsFailed Reason Total 5Min 1Hour 1Day ====================================================================== ======== 11AC_MCS[0][0] 11AC_MCS[0][1] 11AC_MCS[0][2] 11AC_MCS[0][3] 11AC_MCS[0][4] 11AC_MCS[0][5] 11AC_MCS[0][6] 11AC_MCS[0][7] 11AC_MCS[0][8] 11AC_MCS[0][9] 11AC_MCS[1][0] 11AC_MCS[1][1] 11AC_MCS[1][2] 11AC_MCS[1][3] 11AC_MCS[1][4] © SAMSUNG Electronics Co., Ltd. page 545 of 689...
  • Page 546 ======== 11AC_MCS[0][0] 11AC_MCS[0][1] 11AC_MCS[0][2] 11AC_MCS[0][3] 11AC_MCS[0][4] 11AC_MCS[0][5] 11AC_MCS[0][6] 11AC_MCS[0][7] 11AC_MCS[0][8] 11AC_MCS[0][9] 11AC_MCS[1][0] 11AC_MCS[1][1] 11AC_MCS[1][2] 11AC_MCS[1][3] 11AC_MCS[1][4] 11AC_MCS[1][5] 11AC_MCS[1][6] 11AC_MCS[1][7] 11AC_MCS[1][8] 11AC_MCS[1][9] 11AC_MCS[2][0] 11AC_MCS[2][1] 11AC_MCS[2][2] 11AC_MCS[2][3] 11AC_MCS[2][4] 11AC_MCS[2][5] 11AC_MCS[2][6] 11AC_MCS[2][7] 11AC_MCS[2][8] 11AC_MCS[2][9] © SAMSUNG Electronics Co., Ltd. page 546 of 689...
  • Page 547 DISASSOC_AP_BUSY CLASS2_FRAME_FROM_NONAUTH_STA 0 CLASS3_FRAME_FROM_NONASSOC_STA 0 DISASSOC_STA_HAS_LEFT STA_REQ_ASSOC_WITHOUT_AUTH PWR_CAPABILITY_NOT_VALID SUPPORTED_CHANNEL_NOT_VALID INVALID_IE MICHAEL_MIC_FAILURE 4WAY_HANDSHAKE_TIMEOUT GROUP_KEY_UPDATE_TIMEOUT IE_IN_4WAY_DIFFERS GROUP_CIPHER_NOT_VALID PAIRWISE_CIPHER_NOT_VALID AKMP_NOT_VALID UNSUPPORTED_RSN_IE_VERSION INVALID_RSN_IE_CAPAB IEEE_802_1X_AUTH_FAILED CIPHER_SUITE_REJECTED TDLS_TEARDOWN_UNREACHABLE TDLS_TEARDOWN_UNSPECIFIED TOO_MANY STAION_RETRY_THRESHOLD ACL_KICKOUT AUTH_IDLE_TIMEOUT AUTH_IN_ASSOC_STATE WRONG_STA EXPIRED_SERVICE_TIME MAC_AUTH_TIMEOUT © SAMSUNG Electronics Co., Ltd. page 547 of 689...
  • Page 548 STA_REQ_ASSOC_WITHOUT_AUTH PWR_CAPABILITY_NOT_VALID SUPPORTED_CHANNEL_NOT_VALID INVALID_IE MICHAEL_MIC_FAILURE 4WAY_HANDSHAKE_TIMEOUT GROUP_KEY_UPDATE_TIMEOUT IE_IN_4WAY_DIFFERS GROUP_CIPHER_NOT_VALID PAIRWISE_CIPHER_NOT_VALID AKMP_NOT_VALID UNSUPPORTED_RSN_IE_VERSION INVALID_RSN_IE_CAPAB IEEE_802_1X_AUTH_FAILED CIPHER_SUITE_REJECTED TDLS_TEARDOWN_UNREACHABLE TDLS_TEARDOWN_UNSPECIFIED TOO_MANY STAION_RETRY_THRESHOLD ACL_KICKOUT AUTH_IDLE_TIMEOUT AUTH_IN_ASSOC_STATE WRONG_STA EXPIRED_SERVICE_TIME MAC_AUTH_TIMEOUT MAC_AUTH_REJECT MANUAL_KICKOUT MALICIOUS_STA_STATISTICS KICKOUT_MAC_FILTER KICKOUT_INVALID_IP KICKOUT_ACL © SAMSUNG Electronics Co., Ltd. page 548 of 689...
  • Page 549 INVALID_IE MICHAEL_MIC_FAILURE 4WAY_HANDSHAKE_TIMEOUT GROUP_KEY_UPDATE_TIMEOUT IE_IN_4WAY_DIFFERS GROUP_CIPHER_NOT_VALID PAIRWISE_CIPHER_NOT_VALID AKMP_NOT_VALID UNSUPPORTED_RSN_IE_VERSION INVALID_RSN_IE_CAPAB IEEE_802_1X_AUTH_FAILED CIPHER_SUITE_REJECTED TDLS_TEARDOWN_UNREACHABLE TDLS_TEARDOWN_UNSPECIFIED TOO_MANY STAION_RETRY_THRESHOLD ACL_KICKOUT AUTH_IDLE_TIMEOUT AUTH_IN_ASSOC_STATE WRONG_STA EXPIRED_SERVICE_TIME MAC_AUTH_TIMEOUT MAC_AUTH_REJECT MANUAL_KICKOUT MALICIOUS_STA_STATISTICS KICKOUT_MAC_FILTER KICKOUT_INVALID_IP KICKOUT_ACL INTER_APC_HO CLUSTER_DOWN VAP_DOWN © SAMSUNG Electronics Co., Ltd. page 549 of 689...
  • Page 550 INVALID_RSN_IE_CAPAB IEEE_802_1X_AUTH_FAILED CIPHER_SUITE_REJECTED TDLS_TEARDOWN_UNREACHABLE TDLS_TEARDOWN_UNSPECIFIED TOO_MANY STAION_RETRY_THRESHOLD ACL_KICKOUT AUTH_IDLE_TIMEOUT AUTH_IN_ASSOC_STATE WRONG_STA EXPIRED_SERVICE_TIME MAC_AUTH_TIMEOUT MAC_AUTH_REJECT MANUAL_KICKOUT MALICIOUS_STA_STATISTICS KICKOUT_MAC_FILTER KICKOUT_INVALID_IP KICKOUT_ACL INTER_APC_HO CLUSTER_DOWN VAP_DOWN DisassocStateInReason Reason Total 5Min 1Hour 1Day ====================================================================== ======== UNKNOWN © SAMSUNG Electronics Co., Ltd. page 550 of 689...
  • Page 551 Station H/O Latency [WLAN ID (1)]: [Total] Station H/O Latency Minimum....... 0 ms Station H/O Latency Maximum....... 0 ms Station H/O Latency Average....... 0 ms Station H/O Latency Total Count....0 © SAMSUNG Electronics Co., Ltd. page 551 of 689...
  • Page 552 WLAN APC# show network-stats statistics station hand-over num-of-fail-by- reason wlan 1 [WLAN ID (1)] Reason Total 5Min 1Hour 1Day ====================================================================== ======== UNSPECIFIED PREV_AUTH_NOT_VALID DEAUTH_LEAVING DISASSOC_DUE_TO_INACTIVITY DISASSOC_AP_BUSY CLASS2_FRAME_FROM_NONAUTH_STA CLASS3_FRAME_FROM_NONASSOC_STA 0 DISASSOC_STA_HAS_LEFT STA_REQ_ASSOC_WITHOUT_AUTH © SAMSUNG Electronics Co., Ltd. page 552 of 689...
  • Page 553 11) Check the station handover RSSI MIN/MAX/AVG statistics (by AP/Device/Radio/ WLAN). ex.) by WLAN APC# show network-stats statistics station hand-over rssi wlan 1 [WLAN ID (1)] Reason Total 5Min 1Hour 1Day ====================================================================== ======== Minimum Maximum Average © SAMSUNG Electronics Co., Ltd. page 553 of 689...
  • Page 554 APC# show network-stats statistics station hand-over trace 1 [AP ID (1), Radio 5-GHz] Reason Total 5Min 1Hour 1Day ====================================================================== ======== destAp(1)[destAp/statsCnt] destAp(2)[destAp/statsCnt] destAp(3)[destAp/statsCnt] destAp(4)[destAp/statsCnt] destAp(5)[destAp/statsCnt] destAp(6)[destAp/statsCnt] destAp(7)[destAp/statsCnt] destAp(8)[destAp/statsCnt] destAp(9)[destAp/statsCnt] destAp(10)[destAp/statsCnt] destAp(11)[destAp/statsCnt] destAp(12)[destAp/statsCnt] destAp(13)[destAp/statsCnt] destAp(14)[destAp/statsCnt] © SAMSUNG Electronics Co., Ltd. page 554 of 689...
  • Page 555 ====================================================================== ======== destAp(1)[destAp/statsCnt] destAp(2)[destAp/statsCnt] destAp(3)[destAp/statsCnt] destAp(4)[destAp/statsCnt] destAp(5)[destAp/statsCnt] destAp(6)[destAp/statsCnt] destAp(7)[destAp/statsCnt] destAp(8)[destAp/statsCnt] destAp(9)[destAp/statsCnt] destAp(10)[destAp/statsCnt] destAp(11)[destAp/statsCnt] destAp(12)[destAp/statsCnt] destAp(13)[destAp/statsCnt] destAp(14)[destAp/statsCnt] destAp(15)[destAp/statsCnt] destAp(16)[destAp/statsCnt] destAp(17)[destAp/statsCnt] destAp(18)[destAp/statsCnt] destAp(19)[destAp/statsCnt] destAp(20)[destAp/statsCnt] destAp(21)[destAp/statsCnt] destAp(22)[destAp/statsCnt] destAp(23)[destAp/statsCnt] destAp(24)[destAp/statsCnt] destAp(25)[destAp/statsCnt] destAp(26)[destAp/statsCnt] destAp(27)[destAp/statsCnt] destAp(28)[destAp/statsCnt] destAp(29)[destAp/statsCnt] © SAMSUNG Electronics Co., Ltd. page 555 of 689...
  • Page 556 15) Check the number of users connecting with the station (MIN/MAX/AVG) (by AP/Radio/WLAN). ex.) by WLAN APC# show network-stats statistics station num-of-station wlan 1 [WLAN ID (1)] Reason Total 5Min 1Hour 1Day ====================================================================== ======== Minimum Maximum Average © SAMSUNG Electronics Co., Ltd. page 556 of 689...
  • Page 557 AP Total Transmitted Success Data Frame Count ..0 AP Total Transmission Failure Data Frame Count ... 0 AP Total Retry Success Data Frame Count ..0 AP Total Transmitted Success Mgmt Frame Count ..0 © SAMSUNG Electronics Co., Ltd. page 557 of 689...
  • Page 558 AP Total Retry Success Mgmt Frame Count ..0 Checking and Configuring Using Web UI  Configure and check an alert.  Alert configuration: [Configuration Management] > [Statistics] > [Network Quality] > Association/Handover © SAMSUNG Electronics Co., Ltd. page 558 of 689...
  • Page 559 Network Statistics Root Path: [Monitoring] > [Statistics] > [Network Quality] 1) Check the station association latency and success rate (by AP/Device/Radio/WLAN). ex.) by WLAN [Monitoring] > [Statistics] > [Network Quality] > [by WLAN] > [Association/Handover] > General © SAMSUNG Electronics Co., Ltd. page 559 of 689...
  • Page 560 [Association/Handover] > General 4) Check the number of users connecting to the station (by AP/Radio/WLAN). ex.) by WLAN [Monitoring] > [Statistics] > [Network Quality] > [by WLAN] > [Association/Handover] > General © SAMSUNG Electronics Co., Ltd. page 560 of 689...
  • Page 561 WLAN [Monitoring] > [Statistics] > [Network Quality] > [by WLAN] > [Association/Handover] > Cause of Failure ※ Check the association/handover statistics by using the tab on the top of the right. © SAMSUNG Electronics Co., Ltd. page 561 of 689...
  • Page 562 WLAN [Monitoring] > [Statistics] > [Network Quality] > [by WLAN] > [Association/Handover] > Disassoc/Deauth ※ Check the disassoc/deauth statistics by station/system by using the tab on the top of the right. © SAMSUNG Electronics Co., Ltd. page 562 of 689...
  • Page 563 WLAN [Monitoring] > [Statistics] > [Network Quality] > [by WLAN] > [Association/Handover] > Disassoc/Deauth ※ Check the disassoc/deauth statistics by station/system by using the tab on the top of the right. © SAMSUNG Electronics Co., Ltd. page 563 of 689...
  • Page 564 [Monitoring] > [Statistics] > [Network Quality] > [by AP] > [802.11a/n/ac] > Transmission Speed ※ To change a radio, press 'Convert Radio' button by using the tab on the top of the right. © SAMSUNG Electronics Co., Ltd. page 564 of 689...
  • Page 565 [Monitoring] > [Statistics] > [Network Quality] > [by AP] > [802.11a/n/ac] > Handover Trace ※ To change a radio, press 'Convert Radio' button by using the tab on the top of the right. © SAMSUNG Electronics Co., Ltd. page 565 of 689...
  • Page 566 [Monitoring] > [Statistics] > [Network Quality] > [by AP] > [802.11a/n/ac] > Data Traffic ※ To change a radio, press 'Convert Radio' button by using the tab on the top of the right. © SAMSUNG Electronics Co., Ltd. page 566 of 689...
  • Page 567: Annex A. Cli Command Structure

    |-- video_camera |-- zigbee |-- dsss_wireless_phone |-- narrow_band_jammer |-- wide_band_jammer |-- inverter_microwave_oven |-- xbox_controller |-- wireless_analog_phone |-- baby_monitor |-- s_band_motion_detector |-- possible_interference |-- unknown |-- hostname |-- call-fail-detect |-- mgmt-user |-- configuration-sync © SAMSUNG Electronics Co., Ltd. page 567 of 689...
  • Page 568 |-- bw-contract |-- enable |-- app-group |-- application |-- description |-- country |-- set-global |-- set-ap |-- set-group |-- handover |-- time |-- ho-decision |-- command |-- scan-suppress |-- mode |-- opmode © SAMSUNG Electronics Co., Ltd. page 568 of 689...
  • Page 569 |-- internal-server |-- mac-auth-pw-type |-- mac-auth-delimiter |-- mac-auth-case |-- coa |-- advanced |-- eap-retransmit-interval |-- eap-retransmit-count |-- eap-key-retransmit-interval |-- eap-key-retransmit-interval-1st |-- eap-key-retransmit-count |-- allow-last-eap-key-timeout |-- rsn-ie-ptksa-replay-counter |-- rsn-ie-gtksa-replay-counter |-- sta-info-free-timer-after-disassoc |-- log-mic-error © SAMSUNG Electronics Co., Ltd. page 569 of 689...
  • Page 570 |-- comments |-- web-page |-- title |-- content |-- footer |-- color |-- self-registration |-- enable |-- fullname |-- phone |-- company |-- custom-label |-- email |-- lifetime |-- web-auth-cache-list |-- delete © SAMSUNG Electronics Co., Ltd. page 570 of 689...
  • Page 571 |-- source-ip |-- enable |-- byod |-- enable |-- address1 |-- address2 |-- https-requrl |-- db-sync |-- ap-group |-- add-wlan |-- add-ap |-- remote-group |-- mesh-group |-- profile |-- overwrite-8023af-mode |-- poe-8023af-monitor © SAMSUNG Electronics Co., Ltd. page 571 of 689...
  • Page 572 |-- overwrite-location |-- overwrite-ip-mode |-- overwrite-state |-- overwrite-redundancy |-- overwrite-apc-ap-timer |-- overwrite-telnet-ssh |-- overwrite-console |-- overwrite-dtls |-- overwrite-led-control |-- overwrite-poe-type |-- overwrite-vlan |-- overwrite-link-aggregation |-- link-aggregation |-- overwrite-uplink-bandwidth |-- uplink-qos |-- airmove © SAMSUNG Electronics Co., Ltd. page 572 of 689...
  • Page 573 |-- auth-mode |-- load-balancing |-- radio |-- enable |-- threshold |-- rssi-high |-- rssi-low |-- interval |-- kickout-timeout |-- no-probe-timeout |-- sticky-interval |-- remote |-- interface |-- vlan |-- description |-- if-group © SAMSUNG Electronics Co., Ltd. page 573 of 689...
  • Page 574 |-- start |-- stop |-- force |-- max-retry |-- select-package |-- delete-package |-- select-masterAP |-- delete-masterAP |-- reboot |-- mesh |-- station-service-allow |-- bridge-service-allow |-- max-node |-- max-hop |-- diag-connection-allow |-- overwrite-flag © SAMSUNG Electronics Co., Ltd. page 574 of 689...
  • Page 575 |-- wpa2 |-- ieee8021x |-- keymgmt |-- wep |-- okc |-- dynamicVlan |-- setDefault |-- grpRekeyTime |-- pmkLifeTime |-- radius-server |-- auth-servers |-- acct-servers |-- eapReauthTime |-- eapolVersion |-- radiusPrimaryRetryInterval |-- acct_interim_interval © SAMSUNG Electronics Co., Ltd. page 575 of 689...
  • Page 576 |-- codec-list |-- if-group |-- if-group-os |-- acl |-- aaa-override |-- tunnel-mode |-- qos-class |-- ext-wips |-- suppress-ssid |-- local-vlan |-- max-associated-stations |-- hotspot |-- mode |-- interworking-service |-- roaming-consortium |-- dgaf-disable © SAMSUNG Electronics Co., Ltd. page 576 of 689...
  • Page 577 |-- language |-- file-type |-- file-name |-- gas |-- 80211a |-- rate |-- basic |-- supported |-- mcs-11n |-- mcs-11ac |-- 80211b |-- rate |-- basic |-- supported |-- mcs-11n |-- vdm © SAMSUNG Electronics Co., Ltd. page 577 of 689...
  • Page 578 |-- reject-probe-mode |-- broadcast-enable |-- multicast-enable |-- static-address-disallowed |-- dpi-profile |-- bandwidth-management |-- enable |-- bw-contract-upstream |-- bw-contract-downstream |-- mode |-- derivation-profile |-- preferred-vlan |-- enable |-- add |-- qos-map |-- enable © SAMSUNG Electronics Co., Ltd. page 578 of 689...
  • Page 579 |-- ip-mode |-- static-ip |-- primary-apc |-- secondary-apc |-- tertiary-apc |-- ap-stats-history-enable |-- vlan-support |-- native-vlanId |-- console-enable |-- telnet-enable |-- ssh-enable |-- led-config |-- edge-ap |-- edge-ap-opmode |-- edge-ap-threshold |-- edge-ap-window © SAMSUNG Electronics Co., Ltd. page 579 of 689...
  • Page 580 |-- scan-time-service |-- scan-time-interleave |-- number-of-proreq |-- number-of-channel |-- decision-delta |-- sta-ssl |-- config-priority |-- scan-trigger-level |-- scan-time-channel |-- scan-time-service |-- scan-time-interleave |-- number-of-proreq |-- number-of-channel |-- decision-delta |-- send-remote-acl-to-ap |-- packet-capture © SAMSUNG Electronics Co., Ltd. page 580 of 689...
  • Page 581 |-- delete-package |-- target |-- reboot |-- apc |-- apc-list |-- add-apc |-- del-apc |-- change-name |-- change-mac |-- ap-mgmt-if |-- capwap |-- ctr-src-port |-- window-size |-- change-state-pending-timer |-- data-check-timer |-- dtls-session-delete © SAMSUNG Electronics Co., Ltd. page 581 of 689...
  • Page 582 |-- ftp |-- sftp |-- http |-- https |-- redundancy |-- fallback-enable |-- fallback-interval |-- add-apc |-- del-apc |-- 80211a |-- max-associated-stations |-- edca-parameters |-- qos |-- protocol |-- edca-profile |-- cw-min © SAMSUNG Electronics Co., Ltd. page 582 of 689...
  • Page 583 |-- max-calls |-- max-chan-util |-- msac |-- acm |-- method |-- max-streams |-- max-chan-util |-- reserved-ho-streams |-- reserved-ho-chan-util |-- multi-antenna |-- mode |-- default-comb |-- rate |-- basic |-- supported |-- txPower © SAMSUNG Electronics Co., Ltd. page 583 of 689...
  • Page 584 |-- ti-threshold |-- enable |-- cvo |-- enable |-- local-call-enable |-- set-profile |-- rate-control |-- voice |-- max-rate |-- probe-interval |-- weight |-- threshold |-- video |-- max-rate |-- probe-interval |-- weight © SAMSUNG Electronics Co., Ltd. page 584 of 689...
  • Page 585 |-- edca-profile |-- cw-min |-- cw-max |-- aifsn |-- txop-limit |-- msdu-lifetime |-- policy |-- dot1p |-- enable |-- policy |-- dscp |-- enable |-- policy |-- dot1p-tag |-- dscp-tag |-- ap-tags © SAMSUNG Electronics Co., Ltd. page 585 of 689...
  • Page 586 |-- supported |-- txPower |-- channel |-- 11n-support |-- enable |-- mcs |-- guard-interval |-- rifs |-- phy-format |-- ldpc |-- tx-stbc |-- rx-stbc |-- beamforming |-- tx-mcs-set |-- protection |-- spatial-stream © SAMSUNG Electronics Co., Ltd. page 586 of 689...
  • Page 587 |-- max-rate |-- probe-interval |-- weight |-- threshold |-- antenna |-- station-kickout |-- extra-features |-- peak-detector |-- external-antenna-gain |-- hybrid-mode |-- hybrid-mode |-- home-channel-time |-- off-channel-dwell-time |-- max-off-channel-scan-time |-- scan-interleave-time |-- traffic-idle-time © SAMSUNG Electronics Co., Ltd. page 587 of 689...
  • Page 588 |-- network |-- range |-- lease |-- domain-name |-- dns-server |-- default-router |-- fix-address |-- ntp-server |-- user-option |-- ping-check |-- capwap-dhcp-option |-- enable |-- server-ip |-- dhcp-proxy |-- timeout |-- default-dhcp-server © SAMSUNG Electronics Co., Ltd. page 588 of 689...
  • Page 589 |-- spt-threshold |-- rp-candidate |-- interval |-- priority |-- group-list |-- nat |-- mdns |-- snoop |-- enable |-- mode |-- service |-- profile |-- service |-- access-list |-- http |-- http © SAMSUNG Electronics Co., Ltd. page 589 of 689...
  • Page 590 |-- port |-- chguser |-- idle-timeout |-- clock |-- set |-- timezone |-- ntp |-- server |-- enable |-- client |-- enable |-- interval |-- server-addr |-- ip |-- hostname |-- syslog © SAMSUNG Electronics Co., Ltd. page 590 of 689...
  • Page 591 |-- rapid-spanning-tree |-- enable |-- multiple-spanning-tree |-- enable |-- priority |-- transmit-holdcount |-- spanning-tree |-- bridge |-- instance |-- vlan |-- region |-- revision |-- vlan |-- vlan |-- interface |-- switchport © SAMSUNG Electronics Co., Ltd. page 591 of 689...
  • Page 592 |-- direction |-- ip |-- address |-- igmp |-- ra-option |-- access-group |-- immediate-leave |-- last-member-query-count |-- last-member-query-interval |-- limit |-- except |-- mroute-proxy |-- querier-timeout |-- query-interval |-- query-max-response-time |-- robustness-variable © SAMSUNG Electronics Co., Ltd. page 592 of 689...
  • Page 593 |-- cost |-- database-filter |-- dead-interval |-- hello-interval |-- message-digest-key |-- md5 |-- mtu-ignore |-- priority |-- retransmit-interval |-- transmit-delay |-- authentication |-- authentication-key |-- cost |-- database-filter |-- dead-interval |-- hello-interval © SAMSUNG Electronics Co., Ltd. page 593 of 689...
  • Page 594 |-- dhcp |-- server |-- option-82 |-- arp-ageing-timeout |-- speed-duplex |-- mtu |-- spanning-tree |-- autoedge |-- edgeport |-- force-version |-- guard |-- hello-time |-- instance |-- path-cost |-- priority |-- restricted-role © SAMSUNG Electronics Co., Ltd. page 594 of 689...
  • Page 595 |-- range |-- shortcut |-- stub |-- virtual-link |-- authentication |-- authentication-key |-- dead-interval |-- hello-interval |-- message-digest-key |-- md5 |-- retransmit-interval |-- transmit-delay |-- auto-cost |-- capability |-- opaque |-- compatible © SAMSUNG Electronics Co., Ltd. page 595 of 689...
  • Page 596 |-- metric |-- metric-type |-- tag |-- router-id |-- summary-address |-- timers |-- spf |-- exp |-- vrrp |-- advertisement-interval |-- circuit-failover |-- disable |-- enable |-- preempt-mode |-- preempt-delay |-- priority © SAMSUNG Electronics Co., Ltd. page 596 of 689...
  • Page 597 |-- police |-- cir |-- mark |-- cos |-- ip |-- dscp |-- precdence |-- priority |-- bandwidth |-- shape-peak |-- queue-limit |-- ip |-- time-profile |-- day-start |-- update |-- access-list © SAMSUNG Electronics Co., Ltd. page 597 of 689...
  • Page 598 |-- chdc |-- enable |-- statsCollectEnable |-- statsWarningEnable |-- statsActionEnable |-- statsCollectInterval |-- rssi-threshold |-- min-failed-client-count |-- percent-failed-client-count |-- min-idle-timeout-count |-- neighbor-list |-- wlan-neighbor-priority |-- 80211b |-- dpc |-- enable |-- periodic-interval © SAMSUNG Electronics Co., Ltd. page 598 of 689...
  • Page 599 |-- sleep-cell-detect |-- enable |-- apc-threshold |-- ap-threshold |-- period_1st |-- period_2nd |-- period_all |-- energy-saving-group |-- enable |-- apc-threshold |-- weekday |-- weekend |-- add-ap |-- del-ap |-- radio_off_unconditionally |-- neighbor-ap-on © SAMSUNG Electronics Co., Ltd. page 599 of 689...
  • Page 600 |-- invalid-channel |-- managed-ap-valid-channel |-- adhoc-connection |-- honeypot |-- hidden-ssid |-- invalid-channel-fake-ap |-- mac-spoofing |-- honeypot-with-unmanaged-station |-- invalid-uic-fake-ap |-- user_defined_managed |-- unclassified |-- station |-- auth-request-det |-- probe-request-det |-- deauth-request-det |-- assoc-fail-det © SAMSUNG Electronics Co., Ltd. page 600 of 689...
  • Page 601 |-- unmanaged-ap |-- neighbor-ap-associated-with-managed-station |-- manual |-- expiration-timeout |-- monitor-radio |-- scan-interval |-- periodic-interval |-- snmp |-- ap |-- enable |-- ro-community |-- rw-community |-- port |-- user |-- community |-- user © SAMSUNG Electronics Co., Ltd. page 601 of 689...
  • Page 602 |-- sta-idle-timeout |-- wmm-mode |-- dtim |-- default-qos |-- preferred-calls |-- add |-- del |-- locationtrack |-- autotrace |-- algorithm |-- enable |-- ap |-- station |-- rogueap |-- roguestation |-- expiryhistory © SAMSUNG Electronics Co., Ltd. page 602 of 689...
  • Page 603 |-- router-id |-- radiuscm |-- add-local-userdb |-- modify-local-userdb |-- delete-local-userdb |-- export-local-userdb |-- import-local-userdb |-- remove-all-local-userdb |-- rbac |-- role-profile |-- acl |-- qos |-- vlan |-- url |-- dpi |-- remote © SAMSUNG Electronics Co., Ltd. page 603 of 689...
  • Page 604 |-- call-setup |-- enable |-- interval |-- threshold |-- drop-call |-- enable |-- interval |-- threshold |-- voice-quality |-- enable |-- interval |-- threshold |-- rf-value |-- threshold |-- 80211a |-- channel-utilization © SAMSUNG Electronics Co., Ltd. page 604 of 689...
  • Page 605 |-- alert-disassoc-try |-- alert-handover-try |-- alert-assoc-rssi |-- alert-max-db |-- data |-- packet-loss-alert |-- enable |-- interval |-- threshold |-- packet-retry-alert |-- enable |-- interval |-- threshold |-- upload-info |-- enable |-- target © SAMSUNG Electronics Co., Ltd. page 605 of 689...
  • Page 606 |-- wips |-- group-enable |-- group-disable |-- group-size |-- group-threshold |-- upload-info |-- enable |-- target-delete |-- data-collection |-- enable |-- interval |-- onetime-redirect |-- flood-protect |-- arp |-- icmp |-- enable © SAMSUNG Electronics Co., Ltd. page 606 of 689...
  • Page 607: A.2 Show

    |-- worst-interferers |-- mgmt-users |-- configuration-sync |-- conf |-- current-stats-all |-- current-stats-apc |-- list-apc |-- summary-stats-all |-- summary-stats-apc |-- command-log |-- cli-idle-timeout |-- cli-sessions |-- country |-- global-config |-- ap-config |-- group-config © SAMSUNG Electronics Co., Ltd. page 607 of 689...
  • Page 608 |-- hybrid-mode |-- hybrid-sa-mode |-- 80211bg |-- cac |-- voice |-- configuration |-- video |-- configuration |-- msac |-- configuration |-- stats |-- multi-antenna |-- summary |-- qos |-- policy |-- ac-profile © SAMSUNG Electronics Co., Ltd. page 608 of 689...
  • Page 609 |-- airmove |-- all |-- IAHO |-- all |-- debug |-- all |-- ap-80211-stats |-- SSL |-- all |-- association |-- history |-- mgmtframe-rate-limit |-- all |-- summary |-- ap |-- bssid © SAMSUNG Electronics Co., Ltd. page 609 of 689...
  • Page 610 |-- list |-- ap-group |-- remote |-- dhcp |-- summary |-- pool-detail |-- pool |-- fixed-ip |-- interface |-- vlan |-- if-group |-- forwarding |-- mesh |-- detail |-- tree |-- summary © SAMSUNG Electronics Co., Ltd. page 610 of 689...
  • Page 611 |-- list |-- capwap |-- summary |-- ap-if-stats |-- ap-account |-- ap-time-config |-- public-port |-- redundancy |-- summary |-- priority-list |-- wlan |-- summary |-- hotspot |-- general |-- roaming-consortium |-- nai-realm © SAMSUNG Electronics Co., Ltd. page 611 of 689...
  • Page 612 |-- group |-- history |-- all |-- level |-- group |-- backup |-- event |-- running-config |-- system |-- cli-idle-timeout |-- alarm |-- network |-- snmp |-- wifim |-- vqm |-- voice-vqm © SAMSUNG Electronics Co., Ltd. page 612 of 689...
  • Page 613 |-- snmp |-- wifim |-- vqm |-- apc |-- capwap |-- if-group |-- wlan |-- wlan-security |-- rrm |-- alarmhistory |-- event |-- wids |-- ip |-- dhcp |-- pool |-- lease © SAMSUNG Electronics Co., Ltd. page 613 of 689...
  • Page 614 |-- rp-hash |-- ospf |-- border-routers |-- database |-- adv-router |-- asbr-summary |-- external |-- max-age |-- network |-- nssa-external |-- opaque-area |-- opaque-as |-- opaque-link |-- router |-- self-originate |-- summary © SAMSUNG Electronics Co., Ltd. page 614 of 689...
  • Page 615 |-- vlan |-- mirror |-- reboot |-- processes |-- status |-- log |-- memory |-- version |-- syslog |-- debug |-- coredump |-- summary |-- reboot |-- info |-- summary |-- export © SAMSUNG Electronics Co., Ltd. page 615 of 689...
  • Page 616 |-- ssh-server |-- telnet-server |-- ftp-server |-- filter |-- filter-stats |-- policy-map |-- class-map |-- firewall |-- sftp-server |-- ntp |-- timezone |-- clock |-- event-filter |-- security |-- radius-server |-- summary © SAMSUNG Electronics Co., Ltd. page 616 of 689...
  • Page 617 |-- mst |-- config |-- detail |-- interface |-- instance |-- interface |-- interface |-- interface |-- sipalg |-- configuration |-- rrm |-- config-summary |-- help |-- neighbor-list |-- channel-status |-- rrm-history © SAMSUNG Electronics Co., Ltd. page 617 of 689...
  • Page 618 |-- cluster |-- config |-- current-stats-all |-- current-stats-apc |-- help |-- list-apc |-- list-station |-- summary-stats-all |-- summary-stats-apc |-- wids |-- help |-- statistics |-- current-config |-- lists |-- managed-ap |-- ap-blacklist © SAMSUNG Electronics Co., Ltd. page 618 of 689...
  • Page 619 |-- station |-- conf |-- lbs-tracking |-- station |-- preferred-calls |-- vdm |-- config |-- policy-for-station |-- config-files |-- rate-control |-- tx-power-range |-- os-aware |-- os-aware-all |-- onetime-redirect |-- monitor-radio |-- voice © SAMSUNG Electronics Co., Ltd. page 619 of 689...
  • Page 620 |-- alarms |-- statistics |-- ap |-- radio |-- wlan |-- device |-- station |-- event |-- sipmsg-log |-- device |-- bss-if |-- radiuscm |-- username |-- all-user |-- rbac |-- role-profile © SAMSUNG Electronics Co., Ltd. page 620 of 689...
  • Page 621 |-- air-quality |-- rx-utilization |-- tx-utilization |-- noise-level |-- station |-- association |-- num-of-attempt-assoc |-- ap |-- wlan |-- radio |-- device |-- num-of-fail-by-reason |-- ap |-- wlan |-- radio |-- device © SAMSUNG Electronics Co., Ltd. page 621 of 689...
  • Page 622 |-- rssi |-- ap |-- wlan |-- radio |-- device |-- success-rate |-- ap |-- wlan |-- radio |-- device |-- ho-type |-- latency |-- ap |-- wlan |-- radio |-- device © SAMSUNG Electronics Co., Ltd. page 622 of 689...
  • Page 623 |-- enable-alert |-- count-alert |-- history |-- upload-info |-- wips |-- ap-summary |-- group-config |-- group-summary |-- upload-info |-- data-collection |-- upload-status |-- upload-list |-- flood-protect-status |-- dpi |-- wlan-bandwidth-mgt |-- acl-dns-query © SAMSUNG Electronics Co., Ltd. page 623 of 689...
  • Page 624: A.3 Clear

    |-- neighbors |-- spanning-tree |-- bridge |-- interface |-- cli-session |-- interface |-- arp-cache |-- voice |-- vqm |-- all |-- history-stats |-- summary-stats |-- current-stats |-- history-file |-- debug-stats |-- event © SAMSUNG Electronics Co., Ltd. page 624 of 689...
  • Page 625 |-- debug |-- current |-- all |-- detail |-- current |-- all |-- alarm |-- actalarm |-- alarminfo |-- vrrp |-- network-stats |-- statistics |-- station |-- data |-- wlan-bandwidth-mgt |-- dpi-stat © SAMSUNG Electronics Co., Ltd. page 625 of 689...
  • Page 626: A.4 Debug

    |-- virtual-if |-- msho |-- irfm |-- module |-- rfsgw |-- wids |-- locationtracking |-- log |-- level |-- logsize |-- logcount |-- on |-- off |-- detail |-- level |-- logsize © SAMSUNG Electronics Co., Ltd. page 626 of 689...
  • Page 627 |-- awmb |-- awfb |-- wssm |-- apm |-- apd |-- capwap |-- hostapd |-- radiuscm |-- wids |-- cpm |-- irfm |-- rfsgw |-- apclt |-- pm |-- httprd |-- sipalg © SAMSUNG Electronics Co., Ltd. page 627 of 689...
  • Page 628 ANNEX A. CLI Command Structure |-- vem |-- agsm |-- snmpd |-- WebAgent |-- salbm |-- bifm |-- cgc |-- mdns |-- filter |-- packet |-- service-cache © SAMSUNG Electronics Co., Ltd. page 628 of 689...
  • Page 629: A.5 File

    |-- verify |-- version A.6 Etc |-- password |-- reboot |-- save |-- local |-- factory-reset |-- export |-- import |-- ping |-- traceroute |-- ping6 |-- traceroute6 |-- telnet |-- ssh © SAMSUNG Electronics Co., Ltd. page 629 of 689...
  • Page 630: Annex B. Open Source Announcement (Wec8500/Wec8050)

    ANNEX B. Open Source Announcement (WEC8500/WEC8050) ANNEX B. Open Source Announcement (WEC8500/WEC8050) Some software components of this product incorporate source code covered under the GNU General Public License (GPL), the GNU Lesser General Public License (LGPL) and BSD License etc.
  • Page 631 ANNEX B. Open Source Announcement (WEC8500/WEC8050) Open Source Software License libnet-dev BSD License Libedit BSD License Octeon SDK BSD License lz4mt BSD License Telnet BSD License Cavium Networks Octeon SDK BSD License curl Curl License ISC DHCP DHCP License Free Radius GPL 2.0...
  • Page 632 ANNEX B. Open Source Announcement (WEC8500/WEC8050) Apache License Version 2.0, January 2004 http://www.apache.org/licenses/ TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION 1. Definitions. “License” shall mean the terms and conditions for use, reproduction, and distribution as defined by Sections 1 through 9 of this document.
  • Page 633 ANNEX B. Open Source Announcement (WEC8500/WEC8050) “Contribution” shall mean any work of authorship, including the original version of the Work and any modifications or additions to that Work or Derivative Works thereof, that is intentionally submitted to Licensor for inclusion in the Work by the copyright owner or by an individual or Legal Entity authorized to submit on behalf of the copyright owner.
  • Page 634 ANNEX B. Open Source Announcement (WEC8500/WEC8050) (c) You must retain, in the Source form of any Derivative Works that You distribute, all copyright, patent, trademark, and attribution notices from the Source form of the Work, excluding those notices that do not pertain to any part of the Derivative Works; and (d) If the Work includes a “NOTICE”...
  • Page 635 ANNEX B. Open Source Announcement (WEC8500/WEC8050) 8. Limitation of Liability. In no event and under no legal theory, whether in tort (including negligence), contract, or otherwise, unless required by applicable law (such as deliberate and grossly negligent acts) or agreed to in writing, shall any Contributor be liable to You for damages, including any...
  • Page 636 ANNEX B. Open Source Announcement (WEC8500/WEC8050) BSD 2.0 License Copyright(c) <YEAR>, <OWNER> All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:  Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
  • Page 637 ANNEX B. Open Source Announcement (WEC8500/WEC8050) THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS. IN NO EVENT SHALL THE...
  • Page 638 ANNEX B. Open Source Announcement (WEC8500/WEC8050) Preamble The licenses for most software are designed to take away your freedom to share and change it. By contrast, the GNU General Public License is intended to guarantee your freedom to share and change free software--to make sure the software is free for all its users. This General Public License applies to most of the Free Software Foundation's software and to any other program whose authors commit to using it.
  • Page 639 ANNEX B. Open Source Announcement (WEC8500/WEC8050) TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION 0) This License applies to any program or other work which contains a notice placed by the copyright holder saying it may be distributed under the terms of this General Public License.
  • Page 640 ANNEX B. Open Source Announcement (WEC8500/WEC8050) this License, whose permissions for other licensees extend to the entire whole, and thus to each and every part regardless of who wrote it. Thus, it is not the intent of this section to claim rights or contest your rights to work written entirely by you;...
  • Page 641 ANNEX B. Open Source Announcement (WEC8500/WEC8050) 5) You are not required to accept this License, since you have not signed it. However, nothing else grants you permission to modify or distribute the Program or its derivative works. These actions are prohibited by law if you do not accept this License.
  • Page 642 ANNEX B. Open Source Announcement (WEC8500/WEC8050) 9) The Free Software Foundation may publish revised and/or new versions of the General Public License from time to time. Such new versions will be similar in spirit to the present version, but may differ in detail to address new problems or concerns.
  • Page 643 ANNEX B. Open Source Announcement (WEC8500/WEC8050) How to Apply These Terms to Your New Programs If you develop a new program, and you want it to be of the greatest possible use to the public, the best way to achieve this is to make it free software which everyone can redistribute and change under these terms.
  • Page 644 ANNEX B. Open Source Announcement (WEC8500/WEC8050) ISIC License (BSD -) ISIC is Copyright(c) 1999 Mike Frantzen, Chicago, IL, USA. All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: 1) Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
  • Page 645 ANNEX B. Open Source Announcement (WEC8500/WEC8050) When we speak of free software, we are referring to freedom of use, not price. Our General Public Licenses are designed to make sure that you have the freedom to distribute copies of free software (and charge for this service if you wish); that you receive source code or can get it if you want it;...
  • Page 646 ANNEX B. Open Source Announcement (WEC8500/WEC8050) For example, on rare occasions, there may be a special need to encourage the widest possible use of a certain library, so that it becomes a de-facto standard. To achieve this, non-free programs must be allowed to use the library. A more frequent case is that a free library does the same job as widely used non-free libraries.
  • Page 647 ANNEX B. Open Source Announcement (WEC8500/WEC8050) 1) You may copy and distribute verbatim copies of the Library’s complete source code as you receive it, in any medium, provided that you conspicuously and appropriately publish on each copy an appropriate copyright notice and disclaimer of warranty; keep intact all the notices that refer to this License and to the absence of any warranty;...
  • Page 648 ANNEX B. Open Source Announcement (WEC8500/WEC8050) 3) You may opt to apply the terms of the ordinary GNU General Public License instead of this License to a given copy of the Library. To do this, you must alter all the notices that refer to this License, so that they refer to the ordinary GNU General Public License, version 2, instead of to this License.
  • Page 649 ANNEX B. Open Source Announcement (WEC8500/WEC8050) 6) As an exception to the Sections above, you may also combine or link a “work that uses the Library” with the Library to produce a work containing portions of the Library, and distribute that work under terms of your choice, provided that the terms permit modification of the work for the customer’s own use and reverse engineering for...
  • Page 650 ANNEX B. Open Source Announcement (WEC8500/WEC8050) 7) You may place library facilities that are a work based on the Library side-by-side in a single library together with other library facilities not covered by this License, and distribute such a combined library, provided that the separate distribution of the work...
  • Page 651 ANNEX B. Open Source Announcement (WEC8500/WEC8050) It is not the purpose of this section to induce you to infringe any patents or other property right claims or to contest validity of any such claims; this section has the sole purpose of protecting the integrity of the free software distribution system which is implemented by public license practices.
  • Page 652 ANNEX B. Open Source Announcement (WEC8500/WEC8050) 16) IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR REDISTRIBUTE THE LIBRARY AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY GENERAL,...
  • Page 653 ANNEX B. Open Source Announcement (WEC8500/WEC8050) Yoyodyne, Inc., hereby disclaims all copyright interest in the library ‘Frob’ (a library for tweaking knobs) written by James Random Hacker. Signature of Ty Coon, 1 April 1990 Ty Coon, President of Vice That’s all there is to it! libsmi license Copyright(c) 1999-2002 Frank Strauss, Technical University of Braunschweig.
  • Page 654 ANNEX B. Open Source Announcement (WEC8500/WEC8050) Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the “Software”), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge,...
  • Page 655 ANNEX B. Open Source Announcement (WEC8500/WEC8050) NTP License Copyright(c) David L. Mills 1992-2001 Permission to use, copy, modify, and distribute this software and its documentation for any purpose with or without fee is hereby granted, provided that the above copyright notice...
  • Page 656 ANNEX B. Open Source Announcement (WEC8500/WEC8050) THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT “AS IS” AND ANY EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL...
  • Page 657 ANNEX B. Open Source Announcement (WEC8500/WEC8050) “This product includes cryptographic software written by Eric Young (eay@cryptsoft.com)” The word ‘cryptographic’ can be left out if the rouines from the library being used are not cryptographic related:-). 4) If you include any Windows specific code (or a derivative thereof) from the apps directory (application code) you must include an acknowledgement: “This product...
  • Page 658: Annex C. Open Source Announcement (Wea300/Wea400 Series)

    BSD 3-clause “New” or “Revised” License The libpcap project BSD 3-clause “New” or “Revised” License Net SNMP-net-snmp BSD 3-clause “New” or “Revised” License wpa_supplicant BSD 3-clause “New” or “Revised” License The tcpdump project © SAMSUNG Electronics Co., Ltd. page 658 of 689...
  • Page 659 GNU General Public License v2.0 wireless-tools GNU General Public License v2.0 wput GNU General Public License v2.0 Das U-Boot-Universal Bootloader GNU General Public License v2.0 squashfs-a compressed fs for Linux GNU General Public License v2.0 © SAMSUNG Electronics Co., Ltd. page 659 of 689...
  • Page 660 © SAMSUNG Electronics Co., Ltd. page 660 of 689...
  • Page 661 User to third parties, or 2) distribution of the binary or source code to third parties for use with a commercial product sold or licensed by, or on behalf of, User. Revised 6/98 © SAMSUNG Electronics Co., Ltd. page 661 of 689...
  • Page 662 Permission to use, copy, modify, and distribute this software for any purpose with or without fee is hereby granted, provided that the above copyright notice and this permission notice appear in all copies. © SAMSUNG Electronics Co., Ltd. page 662 of 689...
  • Page 663 THIS SOFTWARE IS PROVIDED “AS IS” AND WITHOUT ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. © SAMSUNG Electronics Co., Ltd. page 663 of 689...
  • Page 664 To prevent this, we have made it clear that any patent must be licensed for everyone's free use or not licensed at all. © SAMSUNG Electronics Co., Ltd. page 664 of 689...
  • Page 665 Program is not required to print an announcement.) These requirements apply to the modified work as a whole. © SAMSUNG Electronics Co., Ltd. page 665 of 689...
  • Page 666 © SAMSUNG Electronics Co., Ltd. page 666 of 689...
  • Page 667 In such case, this License incorporates the limitation as if written in the body of this License. © SAMSUNG Electronics Co., Ltd. page 667 of 689...
  • Page 668 LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. END OF TERMS AND CONDITIONS © SAMSUNG Electronics Co., Ltd. page 668 of 689...
  • Page 669 Copyright(c) 1991, 1999 Free Software Foundation, Inc. 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. © SAMSUNG Electronics Co., Ltd. page 669 of 689...
  • Page 670 Most GNU software, including some libraries, is covered by the ordinary GNU General Public License. © SAMSUNG Electronics Co., Ltd. page 670 of 689...
  • Page 671 A “library” means a collection of software functions and/or data prepared so as to be conveniently linked with application programs (which use some of those functions and data) to form executables. © SAMSUNG Electronics Co., Ltd. page 671 of 689...
  • Page 672 Library, and can be reasonably considered independent and separate works in themselves, then this License, and its terms, do not apply to those sections when you distribute them as separate works. © SAMSUNG Electronics Co., Ltd. page 672 of 689...
  • Page 673 Whether this is true is especially significant if the work can be linked without the Library, or if the work is itself a library. The threshold for this to be true is not precisely defined by law. © SAMSUNG Electronics Co., Ltd. page 673 of 689...
  • Page 674 If distribution of the work is made by offering access to copy from a designated place, offer equivalent access to copy the above specified materials from the same place. © SAMSUNG Electronics Co., Ltd. page 674 of 689...
  • Page 675 Library subject to these terms and conditions. You may not impose any further restrictions on the recipients’ exercise of the rights granted herein. You are not responsible for enforcing compliance by third parties with this License. © SAMSUNG Electronics Co., Ltd. page 675 of 689...
  • Page 676 Free Software Foundation; we sometimes make exceptions for this. Our decision will be guided by the two goals of preserving the free status of all derivatives of our free software and of promoting the sharing and reuse of software generally. © SAMSUNG Electronics Co., Ltd. page 676 of 689...
  • Page 677 This library is free software; you can redistribute it and/or modify it under the terms of the GNU Lesser General Public License as published by the Free Software Foundation; either version 2.1 of the License, or (at your option) any later version. © SAMSUNG Electronics Co., Ltd. page 677 of 689...
  • Page 678 Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: © SAMSUNG Electronics Co., Ltd. page 678 of 689...
  • Page 679 2) Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. © SAMSUNG Electronics Co., Ltd. page 679 of 689...
  • Page 680 Young’s, and as such any Copyright notices in the code are not to be removed. If this package is used in a product, Eric Young should be given attribution as the author of the parts of the library used. © SAMSUNG Electronics Co., Ltd. page 680 of 689...
  • Page 681 You are also allowed to include executables that you made from the unmodified Vim sources, plus your own usage examples and Vim scripts. © SAMSUNG Electronics Co., Ltd. page 681 of 689...
  • Page 682 Vim is able to see that it was modified. When distributing as mentioned under 2)e) adding the message is only required for as far as this does not conflict with the license used for the changes. © SAMSUNG Electronics Co., Ltd. page 682 of 689...
  • Page 683 Copyright(c) <year> <copyright holders> This software is provided ‘as-is’, without any express or implied warranty. In no event will the authors be held liable for any damages arising from the use of this software. © SAMSUNG Electronics Co., Ltd. page 683 of 689...
  • Page 684 2) Altered source versions must be plainly marked as such, and must not be misrepresented as being the original software. 3) This notice may not be removed or altered from any source distribution. © SAMSUNG Electronics Co., Ltd. page 684 of 689...
  • Page 685: Abbreviation

    Dynamic Frequency Selection DHCP Dynamic Host Configuration Protocol DNAT Destination NAT Domain Naming Service Dynamic Power control DSCP Differentiated Services Code Point DTIM Delivery Traffic Indication Message DTLS Datagram Transmission Layer Security © SAMSUNG Electronics Co., Ltd. page 685 of 689...
  • Page 686 Modulation and Coding Scheme Management Information Base MIMO Multiple Input Multiple Output MSTP Multiple Spanning-Tree Protocol Maximum Transmission Unit Network Address Translation Network Management System NSSA Not So Stubby Areas Network Time Protocol © SAMSUNG Electronics Co., Ltd. page 686 of 689...
  • Page 687 Signal to Noise Ratio Secure Shell SSID Service Set Identifier Signaling Transfer Point TBTT Target Beacon Transmission Times TKIP Temporal Key Integrity Protocol Universal Serial Bus Coordinated Universal Time Unshielded Twisted Pair © SAMSUNG Electronics Co., Ltd. page 687 of 689...
  • Page 688 Wired Equivalent Privacy Wi-Fi Wireless Fidelity WIDS Wireless Intrusion Detection System WIPS Wireless Intrusion Prevention System WLAN Wireless Local Area Network WiFi Multimedia Wi-Fi Protected Access WPA2 Wi-Fi Protected Access Version 2 © SAMSUNG Electronics Co., Ltd. page 688 of 689...
  • Page 689 Operation Manual © 2013~2015 Samsung Electronics Co., Ltd. All rights reserved. Information in this manual is proprietary to SAMSUNG Electronics Co., Ltd. No information contained here may be copied, translated, transcribed or duplicated by any form without the prior written consent of SAMSUNG.

This manual is also suitable for:

Wec8050

Table of Contents