Nortel 2300 Configuration Manual
  1. Manuals
  2. Brands
  3. Nortel Manuals
  4. Switch
  5. 2300 Series
  6. Configuration manual
Nortel 2300 Configuration Manual

Nortel 2300 Configuration Manual

2300 series wlan security switch and access points
Hide thumbs Also See for 2300:
Table of Contents

Advertisement

Quick Links

Download this manual See also: Configuration Manual, Reference
VIEW Certified Configuration Guide
Nortel
WLAN Security Switch 2300 Series
with AP-2330
January 2008 Edition
1725-36082-001
Version F

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the 2300 and is the answer not in the manual?

Questions and answers

Related Manuals for Nortel 2300

Summary of Contents for Nortel 2300

  • Page 1 VIEW Certified Configuration Guide Nortel WLAN Security Switch 2300 Series with AP-2330 January 2008 Edition 1725-36082-001 Version F...

  • Page 2: Trademark Information

    Polycom, Inc. has prepared this document for use by Polycom personnel and customers. The drawings and specifications contained herein are the property of Polycom and shall be neither reproduced in whole or in part without the prior written approval of Polycom, nor be implied to grant any license to make, use, or sell equipment manufactured in accordance herewith.

  • Page 3: Certified Product Summary

    SpectraLink 8000 Wireless Telephones and wireless LAN (WLAN) infrastructure products. The products listed below have been thoroughly tested in Polycom’s lab and have passed VIEW Certification. This document details how to configure the Nortel WLAN Security Switch 2300 Series and WLAN AP- 2330/2330A/2330B with SpectraLink 8000 Wireless Telephones.

  • Page 4: Known Limitations

    SpectraLink 8000 Telephony Gateway. SRP uses multicast packets to do an SRP Check-In, which are not forwarded through the WLAN Security Switch (WSS) when IGMP snooping is enabled. When a tunneled virtual LAN (VLAN) is configured...

  • Page 5: Network Topology

    SpectraLink 8000 Wireless Telephones requires the use of a generic routing encapsulation (GRE) tunnel. SpectraLink 8000 SVP Server SpectraLink 8000 Wireless Telephones PN: 1725-36082-001_F.doc Nortel: WLAN Security Switch 2300 Series with AP-2330 SpectraLink 8000 Telephony Gateway SpectraLink 8000 Wireless Telephones WSS2380 SpectraLink 8000...
  • Page 6 Access Point Capacity and Positioning Each site is unique in its AP requirements. Therefore, please take the following points into account when determining how many APs are needed and where they should be placed in the facility: Handset range There must be WLAN coverage wherever the SpectraLink 8000 Wireless Telephones will be used.
  • Page 7 Nortel: WLAN Security Switch 2300 Series with AP-2330 the available bandwidth per call for 1 Mb/s operation, approximately 10 % of the available bandwidth per call for 2 Mb/s operation, approximately 7 % of the available bandwidth per call for 5.5 Mb/s operation, and approximately 5 % of the available bandwidth per call for 11 Mb/s operations.
  • Page 8 4. A Quick Start Wizard provides for an easy means to perform initial WLAN Security Switch setup and configuration. Refer to the WLAN Security Switch 2300 Series Quick Start Guide found at Nortel’s Technical Support site. This document contains a detailed explanation of using the Startup Wizard: http://support.nortel.com/go/main.jsp?cscat=DOCDETAIL&id=...

  • Page 9: Connecting Aps

    WLAN Security Switch (e.g. port 1), but both methods are supported. For more information on how to configure the network to support a distributed AP, see the Nortel WLAN Security Switch 2300 Series Configuration Guide. PN: 1725-36082-001_F.doc...
  • Page 10 Command, comment, and screen text key In the sections below you will find commands, comments and system responses or other screen-displayed information involved in the configuration process. This key explains the text styles and symbols used to denote them. Text Style xxxxxxxx <xxxxxxxx>...

  • Page 11: Vlan Configuration

    2 port 8 tag 2 # Assigns the VLAN to a port and specifies an 802.1Q tag value. set igmp disable vlan Voice # Disables IGMP on Voice VLAN. PN: 1725-36082-001_F.doc Nortel: WLAN Security Switch 2300 Series with AP-2330...
  • Page 12 Service profile / SSID configuration To create a SSID named Voice using WPA-PSK that will be advertised on 802.11a/b/g radios using CLI: set service-profile Voice ssid-name Voice # Creates a new service profile and SSID named Voice. Note it’s a best practice recommendation to use the same name for both the service profile and SSID set service-profile Voice auth-fallthru last-resort # Sets the authentication type to open...
  • Page 13 # Creates an ACL that matches all traffic and ports. commit security acl SpectraLink # Commits and applies the ACL. set security acl map SpectraLink vlan Voice in set security acl map SpectraLink vlan Voice out PN: 1725-36082-001_F.doc Nortel: WLAN Security Switch 2300 Series with AP-2330...
  • Page 14 # Applies the ACL to the Voice VLAN for ingress and egress traffic. To create an ACL that allows and prioritizes IP protocol 119 (SVP) with a Class of Service (CoS) 7 and denies all other IP traffic on the Voice VLAN using CLI: set security acl ip SpectraLink permit cos 7 119 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255...
  • Page 15 2. In WMS, click 3. In the 4. In the Switch. PN: 1725-36082-001_F.doc Nortel: WLAN Security Switch 2300 Series with AP-2330 on the tool bar. Configuration panel, under Network Plan Tasks field, type the IP address for the WLAN Security...
  • Page 16 5. In the WLAN Security Switch. The enable password must match the enable password that was defined in the Quick Start Wizard. For more information, see the Nortel WLAN Security Switch 2300 Series Configuration Guide. 6. Click the 7. After the Next...
  • Page 17 5. For directly connected APs, select an available port on the switch from the 6. For distributed APs, enter the Click the PN: 1725-36082-001_F.doc Nortel: WLAN Security Switch 2300 Series with AP-2330 drop-down list. Click the Available Ports Name button.
  • Page 18 7. Specify the model of the Nortel AP you are configuring. Valid models include 8. To configure the a. Select b. Specify the 2330, 2330A 2330B 802.11g Radio for the default Radio Profile Channel Number use, as determined by the site survey performed on the facility.
  • Page 19 9. To configure the a. Select b. Specify the 10. Click the 11. The AP has now been added to the WLAN Security Switch. PN: 1725-36082-001_F.doc Nortel: WLAN Security Switch 2300 Series with AP-2330 802.11a Radio for the default Radio Profile Channel Number use, as determined by the site survey performed on the facility.
  • Page 20 VLAN configuration For security and flexibility it is recommended that voice and data be on separate VLANs. For this example, a new VLAN named a VLAN ID 1. In WMS click 2. In the 3. In the will be created and tagged to the uplink port on the tool bar.
  • Page 21 4. For 5. For 6. In the (P08) 8. Click the PN: 1725-36082-001_F.doc Nortel: WLAN Security Switch 2300 Series with AP-2330 enter VLAN Name Voice specify . Click the VLAN ID list, select the 802.1Q tagged uplink port Port/Port Group and click the button.
  • Page 22 Configuration Guide 9. The Voice VLAN 2 is now 802.1Q tagged to the uplink port P08. a. Highlight the VLAN. Voice b. In the panel, select Network Plan Tasks IGMP. 10. In the window, disable IGMP by clearing the VLAN Properties check box.
  • Page 23 1. In WMS click 2. In the 3. In the selecting 4. In the button. 5. Specify a PN: 1725-36082-001_F.doc Nortel: WLAN Security Switch 2300 Series with AP-2330 using Voice WPA-PSK on the tool bar. Configuration panel expand the Organizer...
  • Page 24 6. Set the SpectraLink Selecting the vendor prioritize the voice traffic later in the wizard. 7. Select the MAC authentication may optionally be selected but will require that the MAC addresses for each handset be defined in the local AAA database on the WSS.
  • Page 25 8. Settings for a. To support handsets using WPA-PSK security, select the b. To support handsets using WPA2-PSK, select the PN: 1725-36082-001_F.doc Nortel: WLAN Security Switch 2300 Series with AP-2330 Wireless Security check box. check box. RSN (WPA2)
  • Page 26 Configuration Guide 9. Click the button. Next 10. Settings for Wireless Encryption Cipher Suite a. To support handsets using WPA-PSK with TKIP, select the check box. TKIP PN: 1725-36082-001_F.doc...
  • Page 27 Nortel: WLAN Security Switch 2300 Series with AP-2330 b. To support handsets using WPA2-PSK with AES/CCMP, select the check box. AES (CCMP) 11. Click the button. Next PN: 1725-36082-001_F.doc...
  • Page 28 12. Enter a hexadecimal pre-shared key or passphrase. a. If a passphrase is entered, click the 13. Click the The pre-shared key must match on both the WSS and handsets or the handsets will not be able to associate with the Voice SSID. 14.
  • Page 29 IP traffic on the Voice VLAN. a. (Optional) Modify the default ACL by removing the last PN: 1725-36082-001_F.doc Nortel: WLAN Security Switch 2300 Series with AP-2330 ) traffic with the Class of Service level statement, which will allow and prioritize IP protocol 119 (SVP) but deny all other IP traffic on the Voice VLAN.
  • Page 30 16. Assign the determine which 802.11a and 802.11g radios will advertise the Voice SSID. For this example the default Radio Profile will be used which is assigned to all 802.11a/g radios. This will provide support for handsets operating in 802.11a, 802.11b and 802.11g modes.
  • Page 31 To modify the default Radio Profile using WMS: 1. In WMS click 2. In the 3. In the PN: 1725-36082-001_F.doc Nortel: WLAN Security Switch 2300 Series with AP-2330 on the tool bar. Configuration panel expand the Organizer list, highlight the Radio Profiles button.
  • Page 32 4. In the 5. Clear the scanning, which prevents the radios from going off-channel and disrupting voice services. window, click the Radio Profile Properties check box. This disables active Enable Active Scan Configuration Guide tab. Radio Profile PN: 1725-36082-001_F.doc...
  • Page 33 A static channel configuration is recommended to provide a stable and optimum RF environment for the handsets. PN: 1725-36082-001_F.doc Nortel: WLAN Security Switch 2300 Series with AP-2330 tab. Auto Tune Tune Channel Tune Transmit Power check boxes.
  • Page 34 8. Click the 8000 Wireless Telephones. 9. Click the tab. Verify that the Voice Configuration . WMM support is not currently available on the SpectraLink button. Configuration Guide is set to QoS Mode PN: 1725-36082-001_F.doc...

  • Page 35: Deploying Changes

    1. In WMS click 2. In the save the configuration changes to the WSS. You may also Task List panel. PN: 1725-36082-001_F.doc Nortel: WLAN Security Switch 2300 Series with AP-2330 on the tool bar. Devices Task List panel, select Local Changes Review...
  • Page 36 Configuration Guide 3. When the option is selected, WMS will send, apply and Deploy save the configuration changes to the WSS. PN: 1725-36082-001_F.doc...
  • Page 37 1 radio 2 channel 44 tx-power 10 mode enable set ip https server enable set port poe 1 enable set vlan 1 name Data set vlan 1 port 8 tag 1 set vlan 2 name Voice PN: 1725-36082-001_F.doc Nortel: WLAN Security Switch 2300 Series with AP-2330...
  • Page 38 Configuration Guide set vlan 2 port 8 tag 2 set igmp disable vlan Voice set interface 1 ip 192.168.1.50 255.255.255.0 set security acl ip SpectraLink permit cos 7 119 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 set security acl ip SpectraLink permit 0.0.0.0 255.255.255.255 commit security acl SpectraLink set security acl map SpectraLink vlan Voice in...
  • Page 39 Nortel: WLAN Security Switch 2300 Series with AP-2330 set ap 1 name WAP-2330-1 set ap 1 radio 1 tx-power 10 mode enable set ap 1 radio 2 channel 44 tx-power 10 mode enable set ip https server enable set port poe 1 enable...

This manual is also suitable for:

233023802361236023502330a ... Show all

Table of Contents