Page 1 ® Summit WM User Guide Software Version 5.3 Extreme Networks, Inc. 3585 Monroe Street Santa Clara, California 95051 (888) 257-3000 (408) 579-2800 http://www.extremenetworks.com Published: January 2009 Part number: 120481-00 Rev 02...
Page 2 Extreme Networks logo, the Alpine logo, the BlackDiamond logo, the Extreme Turbodrive logo, the Summit logos, and the Powered by ExtremeXOS logo are trademarks or registered trademarks of Extreme Networks, Inc. or its subsidiaries in the United States and/or other countries.
Page 3: Table Of Contents
System Configuration Overview ....................25 Chapter 2: Configuring the Summit WM Controller................27 System configuration overview....................28 Performing the first time setup of the Summit WM Controller ............31 Accessing the Summit WM Controller..................31 Connecting the Summit WM Controller to your enterprise network ..........35 Applying the product license key ..................36...
Page 4 WM-AD global settings......................149 Defining RADIUS servers for Global Settings................149 Defining Admission Control Thresholds for Global Settings ............150 Defining inter-Summit WM Wireless Controller shared secret for Global Settings .....151 Creating Bandwidth Control profiles ..................152 Setting up a new WM-AD ......................153 Chapter 5: WM Access Domain Services configuration..............155 WM-AD Types .........................156...
Page 5 Availability ..........................231 Events and actions in availability ..................232 Availability prerequisites ....................233 Session availability........................237 Events and actions in session availability................240 Configuring session availability ...................241 Viewing the Altitude AP availability display ................251 Viewing SLP activity ........................251 Summit WM User Guide, Software Version 5.3...
Page 6 Step 3 - Define authentication by Captive Portal and RAD policy for the third-party AP WM-AD 261 Step 4 - Define filtering rules for the third-party APs ............261 Chapter 9: Working with the Summit WM series Spy ..............263 Summit WM series Spy overview....................263 Enabling the Analysis and data collector engines................264...
Page 7 Table of Contents Controller, Access Points, and WM software terms and abbreviations..........324 Appendix A: Summit WM Controller's physical description ............327 Summit WM1000 Controller front panel..................327 Summit WM1000 Controller back panel..................327 Summit WM100 Controller front panel..................329 Summit WM100 Controller back panel..................329 Summit WM200/2000 Controller front panel ................330...
Page 8 Table of Contents Summit WM User Guide, Software Version 5.3...
Page 9: About This Guide
Chapter 2, "Configuring the Summit WM Controller," describes how to perform the installation, first ● time setup and configuration of the Summit WM Controller, as well as configuring the data ports and defining routing. Chapter 3, "Configuring the Altitude AP,"...
Page 10: Formatting Conventions
Altitude AP client management, defining management users, configuring the network time, and configuring Web session timeouts. "Glossary" contains a list of terms and definitions for the Summit WM Controller and the Wireless ● AP as well as standard industry terms used in this guide.
Page 11: Documentation Feedback
In the case of unit failure of one of the power supply modules, the module can be replaced without interruption of power to the Summit WM Controller. However, this procedure must be carried out with caution. Wear gloves to avoid contact with the module, which will be extremely hot.
Page 12 Schlages zu vermeiden, sollten Sie vor Durchführung von Servicearbeiten alle Netzkabel trennen. Falls eines der Stromversorgungsmodule ausfällt, kann es ausgetauscht werden, ohne die Stromversorgung zum Summit WM Controller zu unterbrechen. Bei dieser Prozedur ist jedoch mit Vorsicht vorzugehen. Das Modul kann extrem heiß sein. Tragen Sie Handschuhe, um Verbrennungen zu vermeiden.
Page 13 à la maintenance.En cas de panne d'un des modules d'alimentation, le module défectueux peut être changé sans éteindre le Summit WM Controller. Toutefois, ce remplacement doit être effectué avec précautions. Portez des gants pour éviter de toucher le module qui peut être très chaud.
Page 14 Acheminez les câbles de manière à ce qu'ils ne puissent pas être endommagés et qu'ils ne constituent ● pas une source de danger (par exemple, en provoquant la chute de personnes). Summit WM User Guide, Software Version 5.3...
Page 15: Chapter 1: Overview Of The Controller, Access Points, And Wm Software Solution
Overview of the Controller, Access Points, and WM software solution This chapter describes Summit WM Controller, Access Points, and WM software concepts, including: "Conventional wireless LANS" on page 15 "Elements of the Controller, Access Points, and WM software solution" on page 16 "Controller, Access Points, and WM software and your network"...
Page 16: Elements Of The Controller, Access Points, And Wm Software Solution
There can be several Summit WM Controllers in the network, each with a set of registered Wireless APs. The Summit WM Controllers can also act as backups to each other, providing stable network availability.
Page 17 DHCP Server (Dynamic Host Configuration Protocol) If you do not have a DHCP Server on your network, you can enable the local DHCP Server on the Summit WM Controller. The local DHCP Server is useful as a general purpose DHCP Server for small subnets. For more information, see "Setting up the data ports"...
Page 18 Access Domains with defined authentication and billing services, access policies, and privileges. Supports seamless mobility and roaming - Supports seamless roaming of a wireless device from one Wireless AP to another on the same Summit WM Controller or on a different Summit WM Controller.
Page 19: Controller, Access Points, And Wm Software And Your Network
DHCP server internal to the Summit WM Controller, or by existing servers using DHCP relay. It is also used by the Wireless APs to discover the location of the Summit WM Controller during the initial registration process. For SLP, DHCP should have Option 78 enabled. Option 78 specifies the location of one or more SLP Directory Agents.
Page 20: Network Traffic Flow
A RADIUS server on the network provides authentication, and a DHCP server is used by the Wireless APs to discover the location of the Summit WM Controller during the initial registration process. Network inter-connectivity is provided by the infrastructure routing and switching devices.
Page 21: Network Security
Summit WM Controller. The Summit WM Controller decapsulates the packets and routes these to destinations on the network. The Summit WM Controller functions like a standard router, except that it is configured to route only network traffic associated with wireless connected users. The Summit WM Controller can also be configured to simply forward traffic to a default or static route if dynamic routing is not preferred.
Page 22 WEP keys (called per-session WEP keys in 802.11). Or in the case of WPA, the Summit WM Controller is not involved in key assignment. Instead, the controller is involved in the path between RADIUS server and the user to negotiate the appropriate set of keys. With WPA2 the material exchange produces a Pairwise Master Key which is used by the AP and the user to derive their temporal keys.
Page 23: Wm Access Domain Services
Summit WM Controller to use one of the following routing techniques: Static routes - Use static routes to set the default route of a Summit WM Controller so that legitimate wireless device traffic can be forwarded to the default gateway.
Page 24: Mobility And Roaming
WM-AD. In the Summit WM Controller user interface, you set up a packet filtering policy by defining a set of hierarchical rules that allow or deny traffic to specific IP addresses, IP address ranges, or service ports.
Page 25: Quality Of Service (Qos)
To set up and configure the Summit WM Controller and Wireless APs, follow these steps: 1 First time Setup - Perform "First Time Setup" of the Summit WM Controller on the physical network to modify the Management Port IP address for the enterprise network.
Page 26 Filtering - Define filtering rules to control network access Multicast - Define groups of IP addresses for multicast traffic Privacy - Select and configure the wireless security method on the WM-AD. QoS Policy - Configure the Qos Policy. Summit WM User Guide, Software Version 5.3...
Page 27: Chapter 2: Configuring The Summit Wm Controller
"Ongoing Operations of the Controller, Access Points, and WM software" on page 58 The Summit WM Controller is a network device designed to integrate with an existing wired Local Area Network (LAN). The rack-mountable Summit WM Controller provides centralized management, network access, and routing to wireless devices that use Altitude APs to access the network.
Page 28: System Configuration Overview
Configuring the Summit WM Controller Table 1: Summit WM Controller product families (Continued) Summit WM Controller Model Number Specifications WM20 Two Data ports (10/100/1000 BaseT) One Management port (10/100 BaseT) One USB Control (console) port One USB Server port (future use)
Page 29 Summit WM20 Installation Guide Summit WM100/WM1000 Installation Guide NOTE The connection of a separate protective earth wire at the terminal on the rear side of the Summit WM Controller WM20 is optional. Step 4 - Performing the first time setup...
Page 30 Configuring the Summit WM Controller Configuring the data interfaces. Set up the Summit WM Controller on the network by configuring the physical data ports and their function as "host port", "router port", or "3rd party AP port". Configure the routing table.
Page 31: Performing The First Time Setup Of The Summit Wm Controller
Performing the first time setup of the Summit WM Controller Before you can connect the Summit WM Controller to the enterprise network, you must change the IP address of the Summit WM Controller management port from its factory default to the IP address suitable for your enterprise network.
Page 32 - If you reset the Summit WM Controller, the login user name and the password will also reset to the factory defaults (admin and abc123).
Page 33 The F icon represents the flash drive status: green if the flash drive is mounted, and red if the flash drive is not mounted. - For the Summit WM Controller WM100, the footer of the Summit WM GUI does not include the link status of the physical interfaces.
Page 34 Configuring the Summit WM Controller 8 In the left pane, click IP Addresses. The Interfaces page is displayed. 9 Click the Management Port tab. The Management Port page is displayed. Summit WM User Guide, Software Version 5.3...
Page 35: Connecting The Summit Wm Controller To Your Enterprise Network
Secondary DNS - Specifies the secondary DNS server used by the network 11 To save your changes, click OK. NOTE The Web connection between the computer and the Summit WM Controller is now lost. The IP addresses are now set to the network you defined. Changing the administrator password It is recommended to change your default administrator password once your system is installed.
Page 36: Applying The Product License Key
The next step in the initial setup of the Summit WM Controller is to configure the physical data ports. A new Summit WM Controller is shipped from the factory with all its data ports set up as host ports. Support of management traffic is disabled on all data ports. Port configuration allows for the explicit state of the administration state for each interface.
Page 37 Use a router port definition for a port that you want to connect to a OSPF area to exchange routes to other OSPF routers. Altitude APs can be attached to a router port. The Summit WM Controller will create a virtual WM- AD port and handle wireless device traffic in the same manner as a host port.
Page 38 Summit WM200/2000 Controller - Four Ethernet ports Summit WM20 Controller - Two Ethernet ports NOTE For the Summit WM100 Controller, the footer of the Summit WM GUI does not include the link status of the physical interfaces. NOTE All images of the Summit WM GUI in this User Guide represent the Summit WM200/2000 Controller.
Page 39 Summit WM Controller and AP both participate in MTU discovery to automatically learn the correct MTU and adjust their settings accordingly. At the Summit WM Controller, MTU adjustments are tracked on a per AP basis. 5 In the Function drop-down list, click one of the following: Host Port - Specifies a port that will not participate in OSPF routing.
Page 40 Use the Exclusion button to exclude the IP addresses from allocation by the DHCP Server. The Summit WM Controller automatically includes the IP addresses of the Interfaces (Ports), and the default gateway in the exclusion list. You can not remove these IP addresses from the exclusion list.
Page 41 In the Gateway box, type the IP address of the default gateway. NOTE Since the Summit WM Controller is not allowed to be the gateway for the Altitude APs, you cannot use the Interface IP address as the gateway address.
Page 42: Setting Up Internal Vlan Id And Multi-Cast Support For The Ports
You can configure Internal VLAN ID, and enable multicast support for any of the data ports. To configure the Internal VLAN ID and enable multicast support: 1 From the main menu, click Wireless Controller Configuration. The Summit WM Controller Configuration page is displayed.
Page 43: Setting Up Static Routes
It is recommended that you define a default route to your enterprise network, either with a static route or by using OSPF protocol. A default route enables the Summit WM Controller to forward packets to destinations that do not match a more specific route definition.
Page 44 5 In the Gateway box, type the IP address of the specific router port or gateway on the same subnet as the Summit WM Controller to which to forward these packets. This is the IP address of the next hop between the Summit WM Controller and the packet's ultimate destination.
Page 45: Setting Up Ospf Routing
Enable (or disable) OSPF on the port that you defined as a router port Ensure that the OSPF parameters defined here for the Summit WM Controller are consistent with the adjacent routers in the OSPF area. This consistency includes the following: If the peer router has different timer settings, the protocol timer settings in the Summit WM Controller must be changed to match, in order to achieve OSPF adjacency.
Page 46 4 From the OSPF Status drop-down list, click On to enable OSPF. 5 In the Router ID box, type the IP address of the Summit WM Controller. This ID must be unique across the OSPF area. If left blank, the OSPF daemon automatically picks a router ID from one of the Summit WM Controller's interface IP addresses.
Page 47: Filtering At The Interface Level
NOTE If more than one port is enabled for OSPF, it is important to prevent the Summit WM Controller from serving as a router for other network traffic (other than the traffic from wireless device users controlled by the Summit WM Controller).
Page 48: Built-In Port-Based Exception Filters
(WM-AD). Only traffic specifically allowed by the interface's exception filter is allowed to reach the Summit WM Controller itself. All other traffic is dropped. Exception filters are dynamically configured and regenerated whenever the system's interface topology changes (for example, a change of IP address for any interface).
Page 49: User Defined Port-Based Exception Filters
If defined improperly, user exception rules may seriously compromise the systems normal security enforcement rules. They may also disrupt the system's normal operation and even prevent system functionality altogether. It is advised to only augment the exception-filtering mechanism if absolutely necessary. Summit WM User Guide, Software Version 5.3...
Page 50: Configuring The Login Authentication Mode
While the local login authentication mode uses locally configured login and passwords, the RADIUS login authentication mode uses the RADIUS Server to authenticate the users' login attempts. Summit WM User Guide, Software Version 5.3...
Page 51: Configuring The Local Login Authentication Mode And Adding New Users
NOTE The Summit WM software enables you to recover the Summit WM Controller via the Rescue mode if you have lost its login password. For more information, see the Summit WM Maintenance Guide. Configuring the local login authentication mode and adding new users The local login authentication mode is enabled by default.
Page 52: Configuring The Radius Login Authentication Mode
You can configure a RADIUS key on the client and server. If you configure a key on the client, it must be the same as the one configured on the RADIUS servers. The RADIUS clients and servers use the key Summit WM User Guide, Software Version 5.3...
Page 53 Before you configure the system to use RADIUS-based login authentication, you must configure the Service-Type RADIUS attribute on the RADIUS server. For more information, see the RADIUS-based login authentication section in the Summit WM Technical Reference Guide. To configure the RADIUS login authentication mode: 1 From the main menu, click Wireless Controller Configuration.
Page 54 You can add up to three RADIUS servers to the list of login authentication servers. When you add two or more RADIUS Servers to the list, you must designate one of them as the Primary server. The Summit WM Controller first attempts to connect to the Primary Server.
Page 55 Server as explained in Step 6 and 7. If you do not test the RADIUS Server connectivity, and you have made some error in configuring the RADIUS-based login authentication mode, you will be locked out of the Summit WM Controller.
Page 56: Configuring Network Time
NOTE If the Summit WM Controller is left powered-down for more than 78 hours, its capacitor dies down and is unable to keep the system clock working. In such a case, you must synchronize the network time, using the NTP server. If the NTP server is not reachable, you must first manually set the system to the correct time, and then use the system time to synchronize the network time.
Page 57 5 In the Time Server 1 box, type the IP address or FQDN of a standard NTP Time Server. You can repeat this step for the Time Server 2 and Time Server 3 boxes. Summit WM User Guide, Software Version 5.3...
Page 58: Completing The System Configuration
NOTE If any of the Time Servers is not accessible, you can use the Summit WM Controller as the Time Server. To use the Summit WM Controller as the Time Server, select the Run local NTP Server checkbox. When you select the Run local NTP Server checkbox, the time on the network elements is synchronized on the basis of the Summit WM Controller's system clock.
Page 59: Chapter 3: Configuring The Altitude Ap
The Altitude AP physically connects to a LAN infrastructure and establishes an IP connection to the Summit WM Controller. The Altitude AP has no user interface - instead the Altitude AP is managed through the Summit WM GUI. The Altitude AP's configuration is centrally managed and applied from the Summit WM Controller.
Page 60: Altitude Ap
The Altitude AP is equipped with two radios - radio 11a and radio 11b/g. The following is a block diagram of the Altitude AP equipped with external antennas. Figure 4: Altitude AP block diagram Summit WM User Guide, Software Version 5.3...
Page 61: Outdoor Ap
11 Mbps. Since 802.11g uses the same communication frequency range as 802.11b (2.4 GHz), 802.11g devices can co-exist with 802.11b devices on the same network. The radios are enabled or disabled through the Summit WM GUI. Both radios can be enabled to offer service simultaneously. For more information, see "Topology of a WM-AD"...
Page 62: Altitude 802.11N Ap
The Wireless 802.11n AP can achieve link rates of up to 300 Mbps. To achieve this high link rate, specific items need to be configured through the Summit WM Graphical User Interface. For more information, "Achieving high throughput with the Wireless 802.11n AP" on page 102.
Page 63 MIMO should not be confused with the Diversity feature. While Diversity is the use of two antennas to increase the odds that a better radio stream is received on either of the antennas, MIMO antennas radiate and receive multi- Summit WM User Guide, Software Version 5.3...
Page 64 Altitude 802.11n AP's radios The Altitude 802.11n AP is equipped with two radios - radio a/n and radio b/g/n. The following is a block diagram of the Altitude 802.11n AP equipped with external antennas. Summit WM User Guide, Software Version 5.3...
Page 65 The 11b/g/n radio supports 2.4 GHz radio 5 GHz radio supporting the 802.11a/n standard - When in legacy 802.11a mode, the Altitude 450/451 AP supports data rates up to 54Mbps identical to the Altitude 350-2i/350-2d AP. The modulation used Summit WM User Guide, Software Version 5.3...
Page 66: Altitude Ap Default Ip Address And First-Time Configuration
IP address if the Altitude AP is not successful in its discovery process, which determines the IP address of the Altitude AP and of the Summit WM Controller. Altitude AP behavior ensures that only one Altitude AP at a time on a subnet can use the default IP address. For more information, see "Discovery and registration overview"...
Page 67: Assigning Static Ip Address To Altitude Ap
To assign the static IP address to the Altitude AP: 1 Connect the Altitude AP to network. 2 Ping the Altitude AP's IP address. 3 When the ping is successful, telnet the Altitude AP. Summit WM User Guide, Software Version 5.3...
Page 68 After you run these commands, you must reboot the Altitude AP for the configuration to take effect. CLI commands to configure static IP address in the Altitude 802.11n AP: Syntax. cset <dhcp disable> cset <ipaddr> cset <ipmask> cset <gateway> capply csave Summit WM User Guide, Software Version 5.3...
Page 69 To enable/disable telnet access: 1 From the main menu, click Altitude AP Configuration. The Altitude AP Configuration screen appears. 2 In the Altitude AP list, click the Altitude AP for which you want to enable/disable telnet. Summit WM User Guide, Software Version 5.3...
Page 70 To set up a new Telnet Access Password: 1 From the main menu, click Altitude AP Configuration. The Altitude AP Configuration screen appears. 2 From the left pane, click AP Registration. The Altitude AP Registration screen appears. Summit WM User Guide, Software Version 5.3...
Page 71: Discovery And Registration Overview
Step 2 - Use the predefined static IP addresses for the Summit WM Controllers on the network (if configured). You can specify a list of static IP addresses of the Summit WM Controllers on your network. On the Static Configuration tab, add the addresses to the Wireless Controller Search List.
Page 72: Registration After Discovery
SLP User Agent then queries the DAs for a list of Extreme Networks SAs. Option 78 must be set for the subnets connected to the ports of the Summit WM Controller and the subnets connected to the Altitude APs. These subnets must contain an identical list of DA IP addresses.
Page 73: Understanding The Altitude Ap Led Status
Red - Indicates the error state. Blinking - Indicates that the state, such as initialization, or discovery is in progress. Steady - Indicates that the state is stable/completed. For example, initialization finished, or discovery completed. Summit WM User Guide, Software Version 5.3...
Page 74 Network Discovery: Attempting to obtain IP address via DHCP Solid Green Network Discovery: Discovered Summit WM Controller Solid Green Connecting to Summit WM Controller: Attempting to register with the Summit WM Controller Blinking Green Connecting to Summit WM Controller: Upgrading to higher version...
Page 75 Blinking Red Discovery failed Blinking Green / Connecting with Summit WM Controller: Registration Orange Blinking Red Registration failed Blinking Green / Connecting with Summit WM Controller: Image upgrade Blinking Orange Green Blinking Red Image upgrade failed Solid Blinking Green /...
Page 76 Configuring the Altitude AP The Altitude AP can be reset to its factory default settings. For more information, see the Summit WM Maintenance Guide. Outdoor AP LED status The following figure depicts the location of the LEDs on the Outdoor AP.
Page 77 LEDs on the Altitude 802.11n AP. Figure 9: Altitude 802.11n AP LEDs The LEDs, L1, L3 and L4 work in conjunction to indicate the general, high-level, and detailed state respectively. Summit WM User Guide, Software Version 5.3...
Page 78 Configuring the Altitude AP After initialization and discovery is completed and the 802.11n AP is connected to the Summit WM Controller, the LEDs L3 and L4 indicate the state of the corresponding radio - L3 for Radio 5 GHz, and L4 for Radio 2.4 GHz.
Page 79 Blink Red Image upgrade failed After initialization and discovery is completed and the 802.11n AP is connected to the Summit WM Controller, the LEDs L3 and L4 indicate the state of the corresponding radio - L3 for Radio 5 GHz, and L4 for Radio 2.4 GHz.
Page 80: Configuring The Altitude Aps For The First Time
Adding a Altitude AP manually option An alternative to the automatic discovery and registration process of the Altitude AP is to manually add and register a Altitude AP to the Summit WM Controller. For more information, see "Adding and registering an Altitude AP manually" on page Defining properties for the discovery process Before an Altitude AP is configured, you must define properties for the discovery process.
Page 81 During the initial setup of the network, it is recommended to select the Allow all Altitude APs to connect option. This option is the most efficient way to get a large number of Altitude APs registered with the Summit WM Controller.
Page 82 Connecting the Altitude AP to a power source and initiating the discovery and registration process When an Altitude AP is powered on, it automatically begins the discovery and registration process with the Summit WM Controller. Summit WM User Guide, Software Version 5.3...
Page 83: Adding And Registering An Altitude Ap Manually
Adding and registering an Altitude AP manually An alternative to the automatic discovery and registration process of the Altitude AP is to manually add and register an Altitude AP to the Summit WM Controller. The Altitude AP is added with default settings. For more information, see "Configuring Altitude AP settings"...
Page 84: Configuring Altitude Ap Settings
Altitude APs, then click Approve to approve all selected Altitude APs. Configuring Altitude AP settings can include the following processes: Modifying an Altitude AP's status Modifying an Altitude AP's properties Modifying Altitude AP radio properties Setting up the Altitude AP using static configuration Summit WM User Guide, Software Version 5.3...
Page 85: Modifying An Altitude Ap's Status
135. Modifying an Altitude AP's status If during the discovery process, the Summit WM Controller security mode was Allow only approved Altitude APs to connect, then the status of the Altitude AP is Pending. You must modify the security mode to Allow all Altitude APs to connect. For more information, see "Security mode"...
Page 86: Modifying An Altitude Ap's Properties
Availability functionality. For more information, see Chapter 6, "Availability and session availability." Delete - Releases the Altitude AP from the Summit WM Controller and deletes the Altitude AP's entry in the Summit WM Controller's management database. Modifying an Altitude AP's properties Once an Altitude AP has successfully registered, you can then modify its properties.
Page 87 Poll Timeout - Type the timeout value, in seconds, for the Altitude AP to re-establish the link with the Summit WM Controller if it (Altitude AP) does not get an answer to its polling. The default value is 15 seconds.
Page 88: Modifying Altitude Ap Radio Properties
AD) to ensure the Altitude APs' radios continue providing service if the Altitude AP's connection to the Summit WM Controller is lost. If this option is enabled, it allows the Altitude AP to start a bridged at AP WM-AD even in the absence of a Summit WM Controller Use broadcast for disassociation - Select if you want the Altitude AP to use broadcast disassociation when disconnecting all clients, instead of disassociating each client one by one.
Page 89 When you modify an Altitude AP's radio properties, the Dynamic Radio Management (DRM) functionality of the Summit WM Controller is used to help establish the optimum radio configuration for your Altitude APs. DRM is enabled by default. The Summit WM Controller's DRM: Adjusts transmit power levels to balance coverage between Altitude APs assigned to the same RF domain and operating on the same channel.
Page 90 35xx which uses radio channel spacings that are only 20MHz wide, the Altitude 802.11n AP can use two channels at the same time to create a 40MHz wide channel. To achieve a 40MHz channel width, the Altitude 802.11n AP employs channel bonding - two 20MHz channels at the same time. Summit WM User Guide, Software Version 5.3...
Page 91 The Altitude 802.11n AP provides aggregate Mac Service Data Unit (MSDU) and aggregate Mac Protocol Data Unit (MPDU) functionality, which combines multiple frames together into one larger frame for a single delivery. This aggregation reduces the overhead of the transmission and results in Summit WM User Guide, Software Version 5.3...
Page 92 Radio is reset - The radio is reset causing client connections on this radio to be lost. To modify Altitude 802.11n AP radio properties: 1 From the main menu, click Altitude AP Configuration. The Altitude APs page is displayed. 2 Click the appropriate Altitude 802.11n AP in the list. Summit WM User Guide, Software Version 5.3...
Page 93 Each tab displays the radio settings for each radio on the Altitude AP. If the radio has been assigned to a WM-AD, the WM-AD names and MAC addresses are displayed in the Base Settings section. The Summit WM Controller can support the following: WM200/2000 - Up to 64 WM-ADs...
Page 94 Guard Interval - Click a guard interval, Long or Short, when a 40MHz channel is used. It is recommended to use a short guard interval in small rooms (for example, a small office space) and a long guard interval in large rooms (for example, a conference hall). Summit WM User Guide, Software Version 5.3...
Page 95 Custom - If you want to configure individual channels from which the ACS will select an operating channel, click Configure. The Add Channels dialog is displayed. Click the individual channels you want to add to the channel plan while pressing the CTRL key, and then click OK. Summit WM User Guide, Software Version 5.3...
Page 96 It takes approximately 30 seconds for the change to the Current Tx Power Level value to be reflected in the Summit WM GUI. Also, the radio is reset; the radio is reset causing client connections on this radio to be lost.
Page 97 ADDBA Support - Click an ADDBA support mode: Enabled or Disabled. ADDBA, or block acknowledgement, provides acknowledgement of a group of frames instead of a single frame. ADDBA Support must be enabled if Aggregate APDU is enable. Summit WM User Guide, Software Version 5.3...
Page 98 For example, 5. Use a small number to minimize broadcast and multicast delay. The default value is 5. Beacon Period - Type the desired time, in milliseconds, between beacon transmissions. The default value is 100 milliseconds. Summit WM User Guide, Software Version 5.3...
Page 99 Auto Tx Power Ctrl (ATPC) - Select to enable ATPC. ATPC automatically adapts transmission power signals according to the coverage provided by the Altitude APs. After a period of time, the system will stabilize itself based on the RF coverage of your Altitude APs. Summit WM User Guide, Software Version 5.3...
Page 100 Altitude AP to operate on. DCS Noise Threshold - Type the noise interference level, measured in dBms, after which ACS will scan for a new operating channel for the Altitude AP if the threshold is exceeded. Summit WM User Guide, Software Version 5.3...
Page 101 ADDBA Support - Click an ADDBA support mode: Enabled or Disabled. ADDBA, or block acknowledgement, provides acknowledgement of a group of frames instead of a single frame. ADDBA Support must be enabled if Aggregate APDU is enable. 13 To save your changes, click Save. Summit WM User Guide, Software Version 5.3...
Page 102 Some client devices do not support 40MHz in b/g/n mode. To accommodate these clients, you must enable a/n mode on the 802.11a/n tab. Otherwise, the client device will connect at only 130Mbps. In the Guard Interval drop-down list, click Short. Summit WM User Guide, Software Version 5.3...
Page 103 Aggregate MSDU Max Length - Type 4096. Aggregate MPDU - Click Enabled. Aggregate MPDU Max Length - Click 65535. Agg. MPDU Max # of Sub-frames - Type 64. ADDBA Support - Click Enabled. Summit WM User Guide, Software Version 5.3...
Page 104 5 From the main menu, click WM Access Domain. The WM Access Domain Configuration page is displayed. 6 In the left pane WM Access Domains list, click the WM-AD you want to configure. The Topology tab is displayed. Summit WM User Guide, Software Version 5.3...
Page 105 In the Encryption drop-down list, click AES only. 8 Click the QoS Policy tab. 9 In the Wireless QoS section, select the WMM option. Some 802.11n client devices will remain at 54Mbps unless WMM is enabled. Summit WM User Guide, Software Version 5.3...
Page 106 Each tab displays the radio settings for each radio on the Altitude AP. If the radio has been assigned to a WM-AD, the WM-AD names and MAC addresses appear in the Base Settings section. The Summit WM Controller can support the following: WM200/2000 - Up to 64 WM-ADs...
Page 107 RTS/CTS Threshold - Type the packet size threshold, in bytes, above which the packet will be preceded by an RTS/CTS (Request to Send/Clear to Send) handshake. The default value is 2346, which means all packets are sent without RTS/CTS. Reduce this value only if necessary. Summit WM User Guide, Software Version 5.3...
Page 108 3 Channel Plan - ACS will scan the following channels: 1, 6, and 11 in the US, and 1, 7, and 13 in Europe. 4 Channel Plan - ACS will scan the following channels: 1, 4, 7, and 11 in the US, and 1, 5, 9, and 13 in Europe. Summit WM User Guide, Software Version 5.3...
Page 109 2, 5.5, or 11 Mbps for 11b and 11b+11g modes. Click 1, 2, 5.5, 6, 11, 12, or 24 Mbps for 11g-only mode. If necessary, the Max Basic Rate choices adjust automatically to be higher or equal to the Summit WM User Guide, Software Version 5.3...
Page 110 11g on these APs) and disable 11b on all other APs. The difficulty with this method is that the number of APs must be increased to ensure coverage separately for 11b and 11g clients. Summit WM User Guide, Software Version 5.3...
Page 111 Altitude AP radio. The Current Channel value and the Requested Channel value may be different because the ACS automatically assigns the best available channel to the Altitude AP, ensuring that an Altitude AP's radio is always operating on the best available channel. Summit WM User Guide, Software Version 5.3...
Page 112 Custom - If you want to configure individual channels from which the ACS will select an operating channel, click Configure. The Add Channels dialog is displayed. Click the individual channels you want to add to the channel plan while pressing the CTRL key, and then click OK. Summit WM User Guide, Software Version 5.3...
Page 113 Min Basic Rate - Click the minimum data rate that must be supported by all stations in a BSS: 6, 12, or 24 Mbps. If necessary, the Max Basic Rate choices adjust automatically to be higher or equal to the Min Basic Rate. Summit WM User Guide, Software Version 5.3...
Page 114: Setting Up The Altitude Ap Using Static Configuration
If an Altitude AP with a statically configured IP address (without a statically configured Wireless Controller Search List) cannot register with the Summit WM Controller within the specified number of retries, the Altitude AP will use SLP, DNS, and SLP multicast as a backup mechanism.
Page 115 AP will be lost. To configure the AP VLAN, do the following: - Connect the AP to the Summit WM Controller or to the network point that does not require AP VLAN tagging. - Use Static Configuration to enable VLAN and define the VLAN ID.
Page 116: Setting Up 802.1X Authentication For An Altitude Ap
Access Point would be blocked by the switch port. In such cases the Access point can only tunnel the client traffic to the Summit WM controller but will not be able to bridge it at the AP.
Page 117 Uses certificates for authentication of access points Summit WM Controller can operate in either proxy mode or pass through mode. Proxy mode - The Summit WM Controller generates the public and private key pair used in the certificate. Pass through mode - The certificate and private key is created by the third-party Certificate Authentication application.
Page 118 6 To save your changes, click Save. The 802.1X PEAP authentication configuration is assigned to the Altitude AP. The Altitude AP can now be deployed to a 802.1X enabled switch port. Summit WM User Guide, Software Version 5.3...
Page 119 When an Altitude AP configured with 802.1X EAP-TLS authentication is connected to a Summit WM Controller, the Altitude AP begins submitting logs to the Summit WM Controller 30 days before the certificate expires to provide administrators with a warning of the impending expiry date.
Page 120 4 Click Browse. The Choose file window is displayed. 5 Navigate to the location of the certificate file (.pfx) and click Open. The name of the certificate file is displayed in the X509 DER / PKCS#12 file box. Summit WM User Guide, Software Version 5.3...
Page 121 NOTE You can only view the 802.1X credentials of Altitude APs that have an active session with the Summit WM Controller. If you attempt to view the credentials of an Altitude AP that does not have an active session, the Altitude AP Credentials window displays the following message: Unable to query Altitude AP: not connected.
Page 122: Setting Up 802.1X Authentication For Altitude Aps Using Multi-Edit
If you attempt to delete the 802.1X credentials of an Altitude AP that currently does not have an active session with the Summit WM Controller, the credentials are only deleted after the Altitude AP connects with the Summit WM Controller.
Page 123 5 Click Set PEAP credentials. The AP 802.1X Multi-edit progress window is displayed, which provides the status of the configuration process. Once complete, the Settings updated message is displayed in the footer of the Summit WM GUI. The 802.1X PEAP authentication configuration is assigned to the Altitude APs. The Altitude APs can now be deployed to 802.1X enabled switch ports.
Page 124 Use the Common name value (either Name, Serial, or MAC) of the Altitude AP to name each generated certificate. Use a common password for each generated certificate. All .pfx files created by the third-party Certificate Authentication application must be zipped into one file. Summit WM User Guide, Software Version 5.3...
Page 125: Configuring The Default Altitude Ap Settings
11n AP Defaults - Configure the default Altitude AP settings for only the Altitude 802.11n AP 450/ 451. To configure the default AP settings: 1 From the main menu, click Altitude AP Configuration. The Altitude APs page is displayed. 2 In the left pane, click WAP Default Settings. Summit WM User Guide, Software Version 5.3...
Page 126 To specify a common WM Search List for all Altitude APs, clear the Learn WM Search List from AP checkbox, and then do the following: a In the Add box, type the IP address of the Summit WM Controller that will control this Altitude b Click Add. The IP address is added to the list.
Page 127 AD) to ensure the Altitude APs' radios continue providing service if the Altitude AP's connection to the Summit WM Controller is lost. If this option is enabled, it allows the Altitude AP to start a bridged at AP WM-AD even in the absence of a Summit WM Controller.
Page 128 ATPC power levels that the system has assigned. It is recommended to use 0 dBm during your initial configuration. If you have an RF plan that recommended Tx power levels for each Altitude AP, compare the actual Tx power levels your system has assigned against Summit WM User Guide, Software Version 5.3...
Page 129 Right to choose either of the two diversity receiving antennas. The default selection is Alternate that maximizes performance for most clients. However, some clients may behave oddly with Tx Diversity set to Alternate. Under those circumstances, it is recommended to use either Left or Summit WM User Guide, Software Version 5.3...
Page 130 Turbo Voice TVO - For each radio, click the number of retries for the Turbo Voice transmission queue. The default value is 1. The recommended setting is adaptive (multi-rate). 10 To configure default Altitude AP settings for only the Altitude 802.11n AP 450/451, click the 11n WAP Defaults tab. Summit WM User Guide, Software Version 5.3...
Page 131 Poll Timeout - Type the timeout value, in seconds. The Altitude AP uses this value to trigger re- establishing the link with the Summit WM Controller if it (Altitude AP) does not get an answer to its polling. The default value is 10 seconds.
Page 132 AP. Defining a channel plan allows you to limit which channels are available for use during an ACS scan. For example, you may want to avoid using specific channels because of low power, regulatory domain, or radar interference. For radio b/g/n, click one of the following: Summit WM User Guide, Software Version 5.3...
Page 133 40MHz Protection Mode - Click a protection type, CTS Only or RTS- CTS, or None, when a 40MHz channel is used. This protects high throughput transmissions on extension channels from interference from non-11n APs and clients. Summit WM User Guide, Software Version 5.3...
Page 134: Modifying An Altitude Ap's Properties Based On A Default Ap Configuration
You can modify the system's default AP settings by using the Copy to Defaults feature on the WAP Properties tab. This feature allows the properties of an already configured AP to become the system's default AP settings. Summit WM User Guide, Software Version 5.3...
Page 135: Configuring Altitude Aps Simultaneously
When you configure multiple Altitude APs using the AP Multi-edit page, it is important to note that for some Altitude AP settings to be available for configuration, other Altitude AP settings must be enabled or configured first. Summit WM User Guide, Software Version 5.3...
Page 136 "Setting up the Altitude AP using static configuration" on page 114. 5 In the WAP Properties, Radio Settings, and Static Configuration sections of the page, select and type the attributes you want to edit for all selected APs. Summit WM User Guide, Software Version 5.3...
Page 137: Performing Altitude Ap Software Maintenance
AP software is installed from the Summit WM Controller. The software for each Altitude AP can be uploaded either immediately, or the next time the Altitude AP connects. Part of the Altitude AP boot sequence is to seek and install its software from the Summit WM Controller.
Page 138 3 In the WAP Images for Platform drop-down list, click the appropriate platform. 4 In the WAP Images list, click the image you want to delete. 5 Click Delete. The image is deleted. Summit WM User Guide, Software Version 5.3...
Page 139 1 From the main menu, click Altitude AP Configuration. The Altitude APs page is displayed. 2 From the left pane, click WAP Maintenance. The WAP Software Maintenance tab is displayed. 3 Click the Controlled Upgrade tab. Summit WM User Guide, Software Version 5.3...
Page 140 9 To run the software upgrade immediately, click Upgrade Now. The selected Altitude AP reboots, and the new software version is loaded. NOTE The Always upgrade AP to default image checkbox on the WAP Software Maintenance tab overrides the Controlled Upgrade settings. Summit WM User Guide, Software Version 5.3...
Page 141: Chapter 4: Wm Access Domain Services
IP address prefix - the part of the IP address that identifies the network and subnet. NOTE If the WM-AD is in branch mode, the Summit WM Controller's DHCP server will not assign IP addresses to the wireless devices. For a routed WM-AD, you can allow the enterprise network's DHCP server to provide the IP addresses for the WM-AD by enabling DHCP Relay.
Page 142: Setting Up A Wm-Ad Checklist
WM-AD provides a versatile means of mapping wireless networks to the topology of an existing wired network. When you set up a WM-AD on the Summit WM Controller, you are defining a subnet for a group of wireless device users. The WM-AD definition creates a virtual IP subnet where the Summit WM Controller acts as a default gateway to wireless devices.
Page 143: Topology Of A Wm-Ad
Requires filtering rules for group filter IDs after authentication. A default filter applies if a more specific filter is not indicated by the RADIUS Access-Accept response. Used for a WM-AD supporting wireless voice traffic (QoS) Summit WM User Guide, Software Version 5.3...
Page 144 Has WEP and WPA privacy Summit WM Controller is involved in authenticating users. 802.1X packets for AAA assignment are forwarded by the Wireless AP to the Summit WM Controller through to the RADIUS server. Traffic behavior types There are 4 traffic types available when setting up your WM-AD:...
Page 145: Rf Assignment For A Wm-Ad
Internal Captive Portal - The controller's own Captive Portal authentication page (configured as an editable form) is used to request user credentials. External Captive Portal - An entity outside of the Summit WM Controller is responsible for handling the user authentication process, presenting the credentials request forms and performing user authentication procedures.
Page 146: Authentication With Aaa (802.1X) Network Assignment
RADIUS server on the enterprise network. You can identify and prioritize up to three RADIUS servers on the Summit WM Controller - in the event of a failover of the active RADIUS server, the Summit WM Controller will poll the other servers in the list for a response. Once an alternate RADIUS server is found, it becomes the active RADIUS server, until it either also fails, or the administrator redefines another.
Page 147: Final Filter Rule
The filter ID group is an optional behavior specification. If a filter ID is not returned, or an invalid one is returned, the default filter group is applied. Authentication by AAA (802.1X) Summit WM User Guide, Software Version 5.3...
Page 148: Data Protection On A Wm-Ad - Wep And Wpa
The following is a high-level description of how a Summit WM Controller filters traffic: Step One - The Summit WM Controller attempts to match each packet of a WM-AD to the filtering rules that apply to the wireless device user.
Page 149: Wm-Ad Global Settings
WM-AD. Defining the shared secret used to encrypt the Pairwise Master Key (PMK) for WPA2 v.2 pre- authentication between Summit WM Controllers on the network. Enabling Dynamic Authorization Server (DAS) configuration support.
Page 150: Defining Admission Control Thresholds For Global Settings
1 From the main menu, click WM Access Domain Configuration. The WM Access Domains list is displayed. 2 In the left pane, click Global Settings. The Authentication tab is displayed. 3 Click the Wireless QoS tab. Summit WM User Guide, Software Version 5.3...
Page 151: Defining Inter-Summit Wm Wireless Controller Shared Secret For Global Settings
5 To save your changes, click Save. Defining inter-Summit WM Wireless Controller shared secret for Global Settings To define inter-Summit WM Controller shared secret for WM-AD global settings: 1 From the main menu, click WM Access Domain Configuration. The WM Access Domains list is displayed.
Page 152: Creating Bandwidth Control Profiles
Committed Information Rate (CIR) - Rate at which the network supports data transfer under normal operations. It is measured in kilobytes per second (Kbps). Committed Burst Size (CBS) - Number of bits that the Summit WM Controller can transmit over the WM-AD when congestion is occurring.
Page 153: Setting Up A New Wm-Ad
Now that you are familiar with the WM-AD concepts, you can now set up a new WM-AD. Setting up a new WM-AD involves the following general steps: Step one - Create a WM-AD name Summit WM User Guide, Software Version 5.3...
Page 154 WM Access Domain Services Step two - Define the topology parameters Step three - Configure the WM-AD For information on setting up a new WM-AD, see Chapter 5, "WM Access Domain Services configuration." Summit WM User Guide, Software Version 5.3...
Page 155: Chapter 5: Wm Access Domain Services Configuration
Save on any WM-AD tab to save your complete WM-AD configuration. NOTE If you navigate away from the WM-AD tabs without saving your WM-AD changes, your WM-AD configuration changes will be lost. Summit WM User Guide, Software Version 5.3...
Page 156: Wm-Ad Types
The WM-AD topologies are classified on the basis of the following WM-AD types: Routed WM-AD - User traffic is tunneled to the Summit WM Controller. (This is the default setup.) Bridged at the AP WM-AD - User traffic is directly bridged to a VLAN at the AP network point of access (switch port).
Page 157: Configuring Topology For A Wm-Ad For Captive Portal
The section describes how to set up a WM-AD for Captive Portal. The RF tab, where you assign APs to WM-ADs, is not accessible until the topology for the WM-AD has been configured and saved. Summit WM User Guide, Software Version 5.3...
Page 158 3 From the Assignment by drop-down list, click SSID. Defining session timeout parameters The Summit WM Controller allows a client to associate to the AP and exist on the network without having authentication. Every associated user has a user session tracked by the Summit WM Controller from the time of association with the AP.
Page 159 Also, third-party AP devices must be defined in bridge mode so that user traffic is directly transposed to the third-party AP subnet and picked up by the Summit WM Controller for forwarding and policy enforcement.
Page 160 2 In the left pane WM Access Domains list, click the WM-AD you want to define the IP address for. The Topology tab is displayed. 3 In the Gateway box, type the Summit WM Controller's own IP address in that WM-AD. This IP address is the default gateway for the WM-AD. The Summit WM Controller advertises this address to the wireless devices when they sign on.
Page 161 (MUs target the Summit WM Controller's interface in their effort to route packets to an external host). For a VLAN bridged WM-AD, the IP address corresponds to the Summit WM Controller's own point of presence on the VLAN. In this case, the controller's interface is typically not the gateway for the subnet.
Page 162 Although this procedure could also apply to any WM-AD type, normally these settings are defined in the context of DHCP definitions and therefor these values are not available for configurations if DHCP service is not defined. Summit WM User Guide, Software Version 5.3...
Page 163: Configuring Topology For A Wm-Ad For Aaa
6 In the DHCP Server box, type the IP address of the DHCP server to which DHCP discover and request messages will be forwarded for clients on this WM-AD. In the case of relay, the Summit WM Controller does not handle DHCP requests from users, but instead forwards the requests to the indicated DHCP server.
Page 164: Saving Your Topology Properties
Summit WM Controller's registered Altitude APs will appear as foreign in the list of available Altitude APs on the other Summit WM Controller. Once you have assigned an Altitude AP radio to eight WM-ADs, it will not appear in the list for another WM-AD setup.
Page 165 APs - 11b/g radios - Click to assign only the foreign APs' 11b/g radios. clear all selections - Click to clear all of the AP radio assignments. original selections - Click to return to the AP radio selections prior to the most recent save. Summit WM User Guide, Software Version 5.3...
Page 166: Deleting A Wm-Ad
MAC-based authentication enables network access to be restricted to specific devices by MAC address. In addition to the other types of authentication, when MAC-based authentication is employed the Summit WM Controller queries a RADIUS server to determine if the wireless client's MAC address is authorized to access the network.
Page 167: Defining Authentication For A Wm-Ad For Captive Portal
Web login page - the Captive Portal. The wireless device user must input an ID and a password. This request for authentication is sent by the Summit WM Controller to a RADIUS server or other authentication server. Based on the permissions returned from the authentication server, the Summit WM Controller implements policy and allows the appropriate network access.
Page 168 3 Click the Auth & Acct tab. On the Auth & Acct tab, there are three options: Auth - Use to define authentication servers. MAC - Use to define servers for MAC-based authentication. Acct - Use to define accounting servers. 4 Click Auth. The Authentication fields are displayed. Summit WM User Guide, Software Version 5.3...
Page 169 6 In the Port box, type the port used to access the RADIUS server. The default is 1812. 7 In the # of Retries box, type the number of times the Summit WM Controller will attempt to access the RADIUS server.
Page 170 The Topology tab is displayed. 3 Click the Auth & Acct tab. 4 From the drop-down list, click the servers group you want to prioritize: Configured Servers Authentication Servers MAC Servers Summit WM User Guide, Software Version 5.3...
Page 171 5 In the server list, click the RADIUS server and then click Up or Down to arrange the order. The first server in the list is the active one. 6 To test the Summit WM Controller's connection to all configured RADIUS servers, click Test. The Test RADIUS servers page displays the message transaction with the RADIUS server, which allows you to visually verify the state of the server connection and user authentication.
Page 172 10 In the Message box, type the message that will appear above the Login box to greet the user. For example, the message could explain why the Captive Portal page is appearing, and instructions for the user. Summit WM User Guide, Software Version 5.3...
Page 173 4 Click Configure Captive Portal Settings. The Captive Portal Configurations page is displayed. 5 Select the External Captive Portal option. 6 In the WM Connection drop-down list, click the IP address. 7 Type the port of the Summit WM Controller. Summit WM User Guide, Software Version 5.3...
Page 174: Defining Authentication For A Wm-Ad For Aaa
Summit WM Controller to continue with the RADIUS authentication and filtering. In the Shared Secret box, type the password common to both the Summit WM Controller and the external Web server if you want to encrypt the information passed between the Summit WM Controller and the external Web server.
Page 175 5 From the RADIUS drop-down list, click the server you want to use for Captive Portal authentication, and then click Use. The server's default information is displayed. The RADIUS servers are defined on the Global Settings page. For more information, see "WM-AD global settings" on page 149. Summit WM User Guide, Software Version 5.3...
Page 176 6 In the Port box, type the port used to access the RADIUS server. The default is 1812. 7 In the # of Retries box, type the number of times the Summit WM Controller will attempt to access the RADIUS server.
Page 177: Defining Mac-Based Authentication For A Wm-Ad
Defining MAC-based authentication for a WM-AD MAC-based authentication enables network access to be restricted to specific devices by MAC address. The Summit WM Controller queries a RADIUS server for a MAC address when a wireless client attempts to connect to the network.
Page 178 7 In the Port box, type the port used to access the RADIUS server. The default is 1812. 8 In the # of Retries box, type the number of times the Summit WM Controller will attempt to access the RADIUS server.
Page 179: Defining Accounting Methods For A Wm-Ad
7 In the Port box, type the port used to access the RADIUS server. The default is 1812. 8 In the # of Retries box, type the number of times the Summit WM Controller will attempt to access the RADIUS server.
Page 180: Defining Radius Filter Policy For Wm-Ads And Wm-Ad Groups
1 From the main menu, click WM Access Domain Configuration. The WM Access Domain Configuration page is displayed. 2 In the left pane WM Access Domains list, click the WM-AD you want to define filter ID values for. The Topology tab is displayed. Summit WM User Guide, Software Version 5.3...
Page 181: Configuring Filtering Rules For A Wm-Ad
AD can have a sub-group with Login-LAT-group ID that has its own filtering rules. If no filter ID matches are found, then the default filter is applied. WM-AD Policy is also applicable for Captive Portal and MAC-based authorization. Summit WM User Guide, Software Version 5.3...
Page 182: Filtering Rules For An Exception Filter
Configuration page is displayed. 2 In the left pane WM Access Domains list, click the WM-AD you want to define filter ID values for. The Topology tab is displayed. 3 Click the Filtering tab. Summit WM User Guide, Software Version 5.3...
Page 183: Defining Non-Authenticated Filters
For external Captive Portal, you need to add an external server to a non-authentication filter. Defining non-authenticated filters Defining non-authenticated filters allows administrators to identify destinations to which a user is allowed to access without incurring an authentication redirection. Typically, the recommended default Summit WM User Guide, Software Version 5.3...
Page 184 Any traffic other than HTTP that the filter does not explicitly allow will be discarded by the controller. The non-authenticated filter is applied by the Summit WM Controller to sessions until they successfully complete authentication. The authentication procedure results in an adjustment to the user's applicable filters for access policy.
Page 185 9 To edit the order of filters, click the filter, and then click the Up and Down buttons. The filtering rules are executed in the order you define here. 10 To save your changes, click Save. Summit WM User Guide, Software Version 5.3...
Page 186 [a specific IP address, or Deny all traffic to a specific IP address, or to a specific address plus range] IP address range (such as:0/24). *.*.*.*:80 Allow all port 80 (HTTP) traffic. *.*.*.* Deny everything else. Summit WM User Guide, Software Version 5.3...
Page 187: Filtering Rules For A Filter Id Group
ID value to the wireless device user. If no filter ID is returned by the authentication server, or no match is found on the Summit WM Controller, the filtering rules in the default filter will apply to the wireless device user.
Page 188 9 To save your changes, click Save. Filtering rules by filter ID examples Below are two examples of possible filtering rules for a filter ID. The first example disallows some specific access before allowing everything else. Summit WM User Guide, Software Version 5.3...
Page 189: Filtering Rules For A Default Filter
No filter ID attribute value is returned by the authentication server for this user. No match is found on the Summit WM Controller for a filter ID value. The final rule in the default filter should be a catch-all rule for any traffic that did not match a filter. A final Allow All rule in a default filter will ensure that a packet is not dropped entirely if no other match can be found.
Page 190 Deny all traffic from the network to the wireless devices on the port range, such as TELNET (port 23) or FTP (port 21) Intranet IP 10.3.0.20 Allow all other traffic from the wireless devices to the Intranet network Summit WM User Guide, Software Version 5.3...
Page 191: Enabling Multicast For A Wm-Ad
Traffic from two wireless devices that are on the same WM-AD and are connected to the same Altitude AP will pass through the Summit WM Controller and therefore be subject to filtering policy. You can set up filtering rules that allow each wireless device access to the default gateway, but also prevent each device from communicating with each other.
Page 192 7 To enable the wireless multicast replication for this group, select the corresponding Wireless Replication checkbox. 8 To modify the priority of the multicast groups, click the group row, and then click the Up or Down buttons. Summit WM User Guide, Software Version 5.3...
Page 193: Configuring Privacy For A Wm-Ad
If WPA v.1 is enabled, the Altitude 802.11n AP will advertise TKIP as an available encryption protocol. NOTE If WPA v.2 is enabled, the Wireless 802.11n AP does not support the Auto option. Summit WM User Guide, Software Version 5.3...
Page 194 6 Select one of the following input methods: Input Hex - If you select Input Hex, type the WEP key input in the WEP Key box. The key is generated automatically, based on the input. Summit WM User Guide, Software Version 5.3...
Page 195 AES (Advanced Encryption Standard). Auto is the default. AES only - If you click AES, the Altitude AP advertises CCMP as an available encryption protocol. It will not advertise TKIP. Summit WM User Guide, Software Version 5.3...
Page 196: Privacy For A Wm-Ad For Aaa
Wi-Fi Protected Access (WPA) version 1, with encryption by Temporal Key Integrity Protocol (TKIP) Wi-Fi Protected Access (WPA) version 2, with encryption by Advanced Encryption Standard with Counter-Mode/CBC-MAC Protocol (AES-CCMP) NOTE In order to use WPA with 802.1X authentication, network assignment must be AAA. Summit WM User Guide, Software Version 5.3...
Page 197 2 In the left pane WM Access Domains list, click the AAA WM-AD you want to configure privacy by WPA-PSK for a Captive Portal. The Topology tab is displayed. 3 Click the Privacy tab. 4 Select Static Keys (WEP). Summit WM User Guide, Software Version 5.3...
Page 198 (unicast key) or after the specified re-key time interval (broadcast key) expires An extended WEP key length of 256-bits An enhanced Initialization Vector (IV) of 48 bits, instead of 24 bits, making it more difficult to compromise Summit WM User Guide, Software Version 5.3...
Page 199 (the Summit WM Controller sends the authentication request to the RADIUS authentication server). Step three - The wireless client provides credentials that are forwarded by the Summit WM Controller to the authentication server. Step four - If the wireless device client is not authenticated, the wireless client stays blocked from network access.
Page 200 2 In the left pane WM Access Domains list, click the AAA WM-AD you want to configure privacy by WPA-PSK for a Captive Portal. The Topology tab is displayed. 3 Click the Privacy tab. 4 Select WPA. Summit WM User Guide, Software Version 5.3...
Page 201 "Opportunistic Keying" on page 200. Pre-authentication - Enables seamless roaming. For more information, see "Pre-authentication" on page 200. Opportunistic Keying & Pre-auth - For more information, see "Opportunistic Keying & Pre- auth" on page 200. Summit WM User Guide, Software Version 5.3...
Page 202: Defining A Wm-Ad With No Authentication
These rules should be very restrictive and the final rule should be a Deny All rule. The non- authenticated filter for a WM-AD with no authentication will not have a Captive Portal page for login. 11 To save your changes, click Save. Summit WM User Guide, Software Version 5.3...
Page 203: Defining Priority Level And Service Class For Wm-Ad Traffic
Gold (4) Silver (3) Bronze (2) Best Effort (1) Background (0) 0 (lowest priority) The service class is equivalent to the 802.1D UP (user priority) with the exception that its scale is linear: Summit WM User Guide, Software Version 5.3...
Page 204: Configuring The Priority Override
WMM - If enabled, the AP will accept WMM client associations, and will classify and prioritize the downlink traffic for all WMM clients. WMM clients will also classify and prioritize the uplink traffic. Summit WM User Guide, Software Version 5.3...
Page 205 AC_TVO Turbo Voice The Summit WM Controller supports the definition of 8 levels of user priority (UP). These priority levels are mapped at the AP to the best appropriate access class. Of the 8 levels of user priority, 6 are considered low priority levels and 2 are considered high priority levels.
Page 206: Configuring The Qos Policy On A Wm-Ad
If Turbo Voice is enabled, together with QoS modes Legacy, WMM, or 802.11e, DL voice traffic is sent via Turbo Voice queue instead of voice queue. A separate turbo voice queue allows for some Summit WM User Guide, Software Version 5.3...
Page 207 Works in conjunction with WMM and/or 802.11e, and it is automatically disabled if both WMM and 802.11e are disabled Step 6 - Configure Global Admission Control: Enable admission control. Admission control protects admitted traffic against new bandwidth demands. Admission control is available for Voice and Video. Summit WM User Guide, Software Version 5.3...
Page 208 WMM - Select to enable the AP to accept WMM client associations, and classify and prioritize the downlink traffic for all WMM clients. Note that WMM clients will also classify and prioritize the Summit WM User Guide, Software Version 5.3...
Page 209 Voice. Select to enable admission control for Video. With admission control, clients are forced to request admission in order to use the high priority access categories in both downlink and uplink direction. Admission control protects admitted traffic against new bandwidth demands. Summit WM User Guide, Software Version 5.3...
Page 210: Bridging Traffic Locally
3 Click Add subnet. The name is displayed in the WM Access Domain list. The Topology tab is displayed. 4 In the WM-AD Mode drop-down list, click Bridge Traffic Locally at AP to enable branch office mode. 5 To define the VLAN Setting, select one of the following: Tagged Untagged Summit WM User Guide, Software Version 5.3...
Page 211 WM-ADs need to have unique VLAN ID. You must have VLAN aware L2 switches to support this feature. NOTE When a WM-AD is setup for bridged mode, it cannot be switched to tunneled mode. The administrator must delete and re-add the WM-AD. Summit WM User Guide, Software Version 5.3...
Page 212: Wireless Distribution System
In a typical configuration, the Altitude APs are connected to the distribution system via an Ethernet network, which provides connectivity to the Summit WM Controller. However, when an Altitude AP is installed in a remote location and can't be wired to the distribution system, an intermediate Altitude AP is connected to the distribution system via the Ethernet link.
Page 213: Wireless Repeater Configuration
Root AP Controller LAN Segment 1 LAN Segment 2 When you are configuring the Wireless Bridge configuration, you must specify on the user interface that the Satellite AP is connected to the wired LAN. Summit WM User Guide, Software Version 5.3...
Page 214: Examples Of Deployment
The WM-AD on which the Altitude APs establish the WDS link is called the WDS WM-AD. A WDS can be setup either by using either a single WDS WM-AD or multiple WDS WM-ADs. The following figures illustrate the point. Summit WM User Guide, Software Version 5.3...
Page 215 Preferred Parents. The dotted arrows point towards Backup Parents. WDS setup with a single WDS WM-AD Deploying the WDS for the above example using a single WDS WM-AD results in the following structure. Summit WM User Guide, Software Version 5.3...
Page 216 You can also deploy the same WDS in Figure 14 using two WDS WM-ADs. The Two WDS WM-ADs will create two independent WDS trees. Both the trees will operate on separate SSIDs and use separate pre-shared keys. Summit WM User Guide, Software Version 5.3...
Page 217: Key Features Of Wds
Altitude APs in the downstream direction is a parent. The Altitude APs that establish a link with the Altitude AP in the upstream direction for WDS service are children. Summit WM User Guide, Software Version 5.3...
Page 218 The WDS system enables you to configure the Altitude AP's role - parent, child or both - from the Summit WM Controller's interface. If the WDS Altitude AP will be serving as a parent and a child in a given topology, its role is configured as both.
Page 219 NOTE If an Altitude AP is configured to serve as a scanner in Summit WM series Spy, it cannot be used in a WDS tree. For more information, see Chapter 9, "Working with the Summit WM series Spy."...
Page 220: Deploying The Wds System
Deploying the WDS system Before you start configuring the WDS Altitude APs, you must ensure the following: The Altitude APs that are part of the wired Summit WLAN are connected to the wired network. Summit WM User Guide, Software Version 5.3...
Page 221 During the WDS deployment process, the WDS Altitude APs are connected to the enterprise network on two occasions - first to enable them to discover and register with the Summit WM Controller, and then the second time to enable them to obtain the provisioning from the Summit WM Controller.
Page 222 Before you connect the WDS Altitude APs to the enterprise network for discovery and registration, you must ensure that the Security mode property of the Summit WM Controller is defined according to your security needs. The Security mode property dictates how the Summit WM Controller behaves when registering new and unknown devices.
Page 223 SSID and a separate Pre-shared key. For more information, see "WDS WM-AD" on page 214. To configure the WDS Altitude APs through the Summit WM Controller: NOTE You must identify and mark the Preferred Parents, Backup Parents and the Child Altitude APs in the proposed WDS topology before starting the configuration process.
Page 224 WM Access Domain Services configuration 4 From the WM-AD Mode drop-down list, click WDS. The WDS Topology tab is displayed. 5 To save your changes, click Save. The Topology tab is displayed. Summit WM User Guide, Software Version 5.3...
Page 225 6 Click the RF tab. 7 In the SSID box, type a name that will identify the new WDS SSID. 8 In the Pre-shared Key box, type the key. Summit WM User Guide, Software Version 5.3...
Page 226 Since the Root Altitude APs - Ardal, Arthur, Athens and Auberon - are the highest entities in the tree structure, they do not have parents. Therefore, the Preferred Parent and Backup Parent drop-down lists of the Root Altitude APs do not display any Altitude AP. You must leave these two fields blank. Summit WM User Guide, Software Version 5.3...
Page 227 From the Preferred Parent drop-down list of other Altitude APs, click the parents according to Table e From the Backup Parent drop-down list of other Altitude APs, click the backup parents according to Table 10 To save your changes, click Save. Summit WM User Guide, Software Version 5.3...
Page 228 If you want the Root Altitude AP and the Repeater Altitude APs to service the client devices, you must select their radios in addition to the radios of the Satellite Altitude APs. 5 To save your changes, click Save. 6 Log out from the Summit WM Controller. Summit WM User Guide, Software Version 5.3...
Page 229: Changing The Pre-Shared Key In Wds Wm-Ad
- Changing the Preferred Parent of the WDS Altitude AP However, the Summit WM Controller will display your changes, as these changes will be saved in the database. To enable the WDS Altitude AP to obtain your changes, you must remove it from the WDS location and then connect it to the Summit WM Controller via the wired network.
Page 230 WM Access Domain Services configuration Summit WM User Guide, Software Version 5.3...
Page 231: Chapter 6: Availability And Session Availability
Altitude APs to any WM-AD), the APs will not be assigned to any WM-AD during the failover. A Summit WM Controller will not accept a connection by a foreign AP if the Summit WM Controller believes its availability partner controller is in service.
Page 232: Events And Actions In Availability
Summit WM Controller. After the Altitude AP on the failed Summit WM Controller loses its connection, it will try to connect to all enabled interfaces on both controllers without rebooting. If the Altitude AP is successful, it will begin the discovery process.
Page 233: Availability Prerequisites
1 On the AP Registration page, set up each Summit WM Controller in Stand-alone Mode. 2 On the Topology tab, define a WM-AD on each Summit WM Controller with the same SSID. The IP addresses must be unique. For more information, see "Topology of a WM-AD"...
Page 234 Manually defined APs will inherit the default AP configuration settings. CAUTION If two Summit WM Controllers are paired and one has the Allow All option set for Altitude AP registration, all APs will register with that Summit WM Controller. To set the primary or secondary Summit WM Controllers for availability: 1 From the main menu, click Altitude AP Configuration.
Page 235 You must ensure that the Detect link failure value on both the controllers must be identical. 7 To set the security mode for the Summit WM Controller, select one of the following options: Allow all Altitude APs to connect - If the Summit WM Controller does not recognize the serial number, it sends a default configuration to the Altitude AP.
Page 236 During the initial setup of the network, it is recommended to select the Allow all Altitude APs to connect option. This option is the most efficient way to get a large number of Altitude APs registered with the Summit WM Controller.
Page 237: Session Availability
Session availability The session availability feature enables the Altitude APs to switch over to a standby (secondary) Summit WM Controller fast enough to maintain the session availability (user session) in the following scenarios: The primary Summit WM Controller goes down...
Page 238 Availability and session availability Figure 20: The Altitude AP fails over to the secondary controller when the primary controller goes down The Altitude APs' network connectivity to the primary Summit WM Controller fails. Summit WM User Guide, Software Version 5.3...
Page 239 Figure 21: The Altitude AP fails over the secondary controller when the network connectivity to he primary controller fails The secondary Summit WM Controller does not have to detect its link failure with the primary Summit WM Controller for the session availability to kick in. If the Altitude AP looses five consecutive polls to the primary controller either due to the controller outage or connectivity failure, it fails over to the secondary controller fast enough to maintain the user session.
Page 240: Events And Actions In Session Availability
WM Controller via the "active" tunnel. Events and actions in session availability In the event of the primary Summit WM Controller outage, or the network connectivity failure to the primary controller, the Altitude AP: Sends 'tunnel-active-req' request message to the secondary Summit WM Controller.
Page 241: Configuring Session Availability
APs supported by the hardware platform and the license. When the failed Summit WM Controller recovers, each Summit WM Controller in the pair goes back to normal mode. They exchange information that includes the latest lists of registered Altitude APs. The administrator must release the Altitude APs manually on the second Summit WM Controller, so that they may re-register with their home Summit WM Controller.
Page 242 Session availability is not supported in a WM-AD that uses Captive Portal (CP) authentication. NOTE Session availability does not support user-specific filters as these filters are not shared between the primary and secondary Summit WM Controllers. Summit WM User Guide, Software Version 5.3...
Page 243 The primary and secondary Summit WM Controllers are properly configured in 'availability' mode. For more information, see "Availability" on page 231. The pair of Summit WM Controllers in availability mode is formed by one of the following combinations: WM200/2000 and WM200/2000 WM20 and WM20...
Page 244 1.5 to 2 times of Detect link failure value. For example, if you have set the Detect link failure value to 2 seconds, the Poll Timeout value should be set to 3 or 4 seconds. Summit WM User Guide, Software Version 5.3...
Page 245 6 Set the Altitude APs Poll Timeout value for fast failover. To set the Poll Timeout value for fast failover: a From the main menu of the primary Summit WM Controller, click Altitude AP Configuration. The AP Properties page is displayed.
Page 246 9 Set the Detect link failure value and the Poll Timeout value as explained in Step 5. NOTE The fast failover configuration must be identical on both the primary and secondary Summit WM Controllers. Logs are generated if the configuration is not identical. For more information, see the Summit WM Controller, Access Points and Convergence Software Maintenance Guide.
Page 247 If you are using Bridge Traffic Locally at WM WM-AD, you must select None from the DHCP Option drop-down menu on the Topology page. NOTE The Bridge Traffic Locally at WM must be mapped to the same VLAN on both the primary and secondary Summit WM Controllers. To enable session availability: 1 Log on both the primary Summit WM Controller and secondary Summit WM Controller.
Page 248 If you are using Bridge Traffic Locally at WM WM-AD, the WM-AD must have the DHCP Option configured as None. 5 If the same WM-AD (WM-AD peer) is not configured on the secondary Summit WM Controller, click Synchronize. The following page is displayed.
Page 249 6 In the Interface IP addr box, type the secondary Summit WM Controller's interface IP address. 7 From the Interface drop-down menu, select the secondary Summit WM Controller's physical port. 8 Click Create. The system creates a WM-AD peer on the secondary Summit WM Controller by copying the WM-AD parameters.
Page 250 Check the statement at the top of the page (as marked in the above screen shot). 10 If the statement reads Availability link is up, the availability feature is configured correctly. If the statement reads Availability link is down, check the configuration error in logs. For more Summit WM User Guide, Software Version 5.3...
Page 251: Viewing The Altitude Ap Availability Display
In normal operations, the primary Summit WM Controller registers as an SLP service called ac_manager. The controller service directs the Altitude APs to the appropriate Summit WM Controller. During an outage, if the remaining Summit WM Controller is the secondary controller, It registers as the SLP service ru_manager.
Page 252 Availability and session availability Summit WM User Guide, Software Version 5.3...
Page 253: Chapter 7: Mobility
"Configuring mobility domain" on page 256 Mobility overview The Summit WM Software system allows multiple Summit WM Controllers (up to 12) on a network to discover each other and exchange information about a client session. This technique enables a wireless device user to roam seamlessly between different Altitude APs on different Summit WM Controllers.
Page 254: Mobility Domain Topologies
Roaming to another controller resets session NOTE The mobility network that includes all the Summit WM Controllers and the Altitude APs is called Mobility Domain. NOTE The mobility feature is not backward compatible. This means that all the Summit WM Controllers in the mobility domain must be running Summit WM Software V5R3 release.
Page 255 Mobility domain with session availability NOTE If you are configuring mobility, you must synchronize time on all the Summit WM Controllers that are part of the mobility domain. For more information, see "Configuring network time" on page Figure 23: Mobility Domain with fast failover and session availability features...
Page 256: Configuring Mobility Domain
Wireless AP 1 establishes active session with WM 2. Wireless AP 2 is not impacted by the failover. NOTE The mobility feature is not backward compatible. This means that all the Summit WM Controllers in the mobility domain must be running Summit WM Software V5R3 release.
Page 257 10 To save your changes, click Save. NOTE If you set up one Summit WM Controller on the network as a mobility manager, all other Summit WM Controllers must be set up as mobility agents. To designate a mobility agent: 1 From the main menu, click Wireless Controller Configuration.
Page 258: Displays For The Mobility Manager
Mobility 5 From the Port drop-down list, click the port on the Summit WM Controller to be used for the mobility agent process. Ensure that the port selected is routable on the network. 6 In the Heartbeat box, type the time interval (in seconds) to wait for a connection establishment response before trying again.
Page 259: Chapter 8: Working With Third-Party Aps
Step 4 - Define filtering rules for the third-party APs CAUTION The Outdoor AP is not a third party AP. The Outdoor AP is fully managed by the Summit WM controller just like an Altitude AP. Setting up third-party APs Step 1 - Define a data port as a third party AP port 1 From the main menu, click Summit Controller Configuration.
Page 260: Step 2 - Define A Wm-Ad For The Third-Party Ap Port
5 Continue configuring your WM-AD, as described in "Configuring topology for a WM-AD for Captive Portal" on page 157. NOTE Bridge Traffic at AP and MAC-based authentication are not available for third-party WM-ADs. Summit WM User Guide, Software Version 5.3...
Page 261: Step 3 - Define Authentication By Captive Portal And Rad Policy For The Third-Party Ap Wm-Ad
Disable the access point's DHCP server, so that the IP address assignment for any wireless device on the AP is from the DHCP server at the Summit WM Controller with WM-AD information. Disable the third-party access point's layer-3 IP routing capability and set the access point to work as a layer-2 bridge.
Page 262 Working with third-party APs Summit WM User Guide, Software Version 5.3...
Page 263: Chapter 9: Working With The Summit Wm Series Spy
NOTE If a Wireless AP is part of a WDS link you cannot configure it to act as a scanner in Summit WM series Spy. Summit WM Controller: Runs a data collector application that receives and manages the RF scan messages sent by the Wireless AP.
Page 264: Enabling The Analysis And Data Collector Engines
Working with the Summit WM series Spy Enabling the Analysis and data collector engines Before using the Summit WM series Spy, you must enable and define the Analysis and data collector engines. To enable the Analysis engine: 1 From the main menu, click Summit Controller Configuration. The Summit Controller Configuration page is displayed.
Page 265: Running Summit Wm Series Spy Scans
For each remote RF Data Collection Engine defined here, you must: - Enable it by selecting the Enable Summit Spy Analysis Engine checkbox on the remote Summit WM Controller - Ensure that the controllers are routable by whatever means you use (for example, static routes, or OSPF).
Page 266 Working with the Summit WM series Spy To run the Summit WM series Spy scan task mechanism: 1 From the main menu, click Summit Spy. The Summit Spy page is displayed. 2 Click the Scan Groups tab. 3 In the Scan Group Name box, type a unique name for this scan group.
Page 267: Analysis Engine Overview
Analysis Engine on this Summit WM Controller. Third-party APs - Defined and assigned to a WM-AD. Friendly APs - A list created in the Summit WM series Spy user interface as potential rogue access points are designated by the administrator as Friendly.
Page 268: Working With Summit Wm Series Spy Scan Results
Working with Summit WM series Spy scan results When viewing the Summit WM series Spy scan results, you can delete individual or all of the access points from the scan results. You can also add access points from the scan results to the Friendly AP list.
Page 269 6 To clear all detected rogue devices from the list, click Clear Detected Rogues. NOTE To avoid the Summit WM series Spy's database becoming too large, it is recommended that you either delete Rogue APs or add them to the Friendly APs list, rather than leaving them in the Rogue list.
Page 270: Working With Friendly Aps
Working with the Summit WM series Spy Working with friendly APs To view the friendly APs: 1 From the main menu, click Summit Spy. The Summit Spy page is displayed. 2 Click the Friendly APs tab. To add friendly APs manually: 1 From the main menu, click Summit Spy.
Page 271: Maintaining The Summit Wm Series Spy List Of Aps
4 Modify the access point by making the appropriate changes. 5 To save your changes, click Save. Maintaining the Summit WM series Spy list of APs To maintain the Altitude APs: 1 From the main menu, click Summit Spy. The Summit Spy page is displayed.
Page 272: Viewing The Scanner Status Report
WM-AD has been deleted from the WM-AD list. Viewing the Scanner Status report When the Summit WM series Spy is enabled, you can view a report on the connection status of the RF Data Collector Engines with the Analysis Engine.
Page 273: Chapter 10: Working With Reports And Displays
Working with reports and displays This chapter describes the various reports and displays available in the Summit WM Controller, Access Points, and WM software system, including: "Viewing the displays" on page 273 "Viewing reports" on page 285 "Call Detail Records (CDRs)" on page 288...
Page 274 Statistics are expressed in relation to the AP. Therefore, Packets Sent means the AP has sent that data to a client and Packets Rec'd means the AP has received packets from a client. Summit WM User Guide, Software Version 5.3...
Page 275: Viewing The Wireless Ap Availability Display
Red - Wireless AP is not connected. In the report, each Altitude AP is represented by a box. The label, Foreign or Local, indicates whether the Altitude AP is local or foreign on the Summit WM Controller. Summit WM 200/2000 In session availability, the Wireless Availability report displays the state of both the tunnels - active tunnel and backup tunnel - on both the primary and secondary Summit WM Controllers.
Page 276 Red - Altitude AP is not connected. In the report, each Altitude AP is represented by a box. The label, Foreign or Local, indicates whether the Altitude AP is local or foreign on the Summit WM Controller. The color in the upper pane of the box represents the state of the tunnel that is established to the current Summit WM Controller.
Page 277: Viewing Statistics For Wireless Aps
2 Click the Wired Ethernet Statistics by Altitude AP display option. The Wired Ethernet Statistics by Altitude APs display opens in a new browser window. 3 In the Wired Ethernet Statistics by Altitude APs display, click a registered Wireless AP to display its information. Summit WM User Guide, Software Version 5.3...
Page 278 4 Click the appropriate tab to display information for each radio on the Wireless AP. 5 To view information on the associated clients, click View Client. The Associated Clients display opens in a new browser window. Summit WM User Guide, Software Version 5.3...
Page 279 AP to another, the session stays, therefore Time Conn does not reset. A client is displayed as soon as the client connects (or after refresh of page). The client disappears as soon as it times out. Summit WM User Guide, Software Version 5.3...
Page 280 1 From the main menu, click Reports & Displays. The Reports & Displays page is displayed. 2 Click the Admission Control Statistics by Wireless AP display option. The Admission Control Statistics by Wireless AP display opens in a new browser window. Summit WM User Guide, Software Version 5.3...
Page 281: Viewing The System Information And Manufacturing Information Displays
Viewing the System Information and Manufacturing Information displays System Information - Displays system information including memory usage and CPU and board temperatures. Manufacturing Information - Displays manufacturing information including the card serial number and CPU type and frequency. Summit WM User Guide, Software Version 5.3...
Page 282 1 From the main menu, click Reports & Displays. The Reports & Displays page is displayed. 2 Click the Manufacturing Information display option. The Manufacturing Information display opens in a new browser window. Summit WM User Guide, Software Version 5.3...
Page 283: Viewing Displays For The Mobility Manager
NOTE In the latest models of the Summit WM 200/2000 Controller, the IXP2800 Network Processor in the NPE Card has been replaced by the new IXP2805 Network Processor. Consequently, the Manufacturing Information in all such latest models displays CPU Type as 2805.
Page 284 Local controller loading Mobility membership list A Summit WM Controller is only removed from the mobility matrix if it is explicitly removed by the administrator from the Mobility permission list. If a particular link between controllers, or the controller is down, the corresponding matrix connections are identified in red color to identify the link.
Page 285: Viewing Reports
Viewing reports The following reports are available in the Summit WM Controller, Access Points, and WM software system: Forwarding Table (routes defined on the Routing Protocols pages) OSPF Neighbor (if OSPF is enabled on the Routing Protocols pages) OSPF Linkstate (if OSPF is enabled on the Routing Protocols pages)
Page 286 MxBR - Maximum Basic Rate MxOR - Maximum Operational Rate RxDV - Receive Diversity TxDV - Tx Diversity Pmb - Preamble (long, short) PM - Protection Mode PR - Protection Rate PT - Protection Type Summit WM User Guide, Software Version 5.3...
Page 287 BSS: MAC - Also called BSSID, this is the MAC address of a (virtual) wireless interface on which the Wireless AP serves a BSS/WM-AD. There could be 8 per radio. Port - Ethernet Port and associated IP address of the interface on the Summit WM Controller through which the Wireless AP communicates.
Page 288: Call Detail Records (Cdrs)
NOTE The CDR directory on the Summit WM Controller only has two files - a .work file and a .dat file. When the .work file attains its maximum size of 16 MB, or it has been open for 12 hours, it is saved as a .dat file. This new .dat file overwrites the existing .dat file.
Page 289: Cdr File Format
CDRs' file format and file types in the Summit WM20 Controller are identical to the Summit WM100/1000 Controller. For more information, see the Summit WM User Guide. The CDR directory in the Summit WM100/1000 Controller contains eight subdirectories - one directory for each day of the week and an additional working directory.
Page 290 April 21 2008 14:50:24 Disassociation_time Indicates the time at which the client was disassociated from the Altitude AP. The time is in the following format: Date hh:mm:ss. For example, April 21 2008 14:57:20. Summit WM User Guide, Software Version 5.3...
Page 291: Viewing Cdrs
You can unzip this file from the remote server to extract the eight CDR files. You can back up and upload the files on the remote server either via the Summit WM GUI or CLI. This section describes how to back up and copy the CDR files to a remote server via the Summit WM GUI.
Page 292 3 Click the Backup tab. The Backup page is displayed. 4 From the Select what to backup drop-down menu, click CDRs only, and then click Backup Now. The following window displays the backup status. Summit WM User Guide, Software Version 5.3...
Page 293 The .work and .dat files are zipped into a single file.The eight CDR files - one for each day of the week, and an additional working file - are zipped into a single .zip file. 6 In the Upload Backup section, type the following: Summit WM User Guide, Software Version 5.3...
Page 294 - one for each day of the week, and an additional working file - are visible on the FTP server's GUI. 9 To view CDRs, download the files. NOTE The following is the screenshot of a .dat file. Summit WM User Guide, Software Version 5.3...
Page 295 Summit WM User Guide, Software Version 5.3...
Page 296 Working with reports and displays Summit WM User Guide, Software Version 5.3...
Page 297: Chapter 11: Performing System Administration
Add a selected wireless device's MAC address to a blacklist of wireless clients that will not be allowed to associate with the Altitude AP. Backup and restore the Summit WM Controller database. For more information, see the Summit WM Maintenance Guide.
Page 298: Blacklisting A Client
The Blacklist tab displays the current list of MAC addresses that are not allowed to associate. A client is added to the blacklist by selecting it from a list of associated APs or by typing its MAC address. Summit WM User Guide, Software Version 5.3...
Page 299 To blacklist a wireless device client using its MAC address: 1 From the main menu, click Altitude AP Configuration. The Altitude AP Configuration page is displayed. 2 From the left pane, click Client Management. The Disassociate tab is displayed. Summit WM User Guide, Software Version 5.3...
Page 300 5 Click Remove Selected. The selected client is removed from the list. NOTE You can use the Select All or Clear All buttons to help you select multiple clients. 6 To save your changes, click Save. Summit WM User Guide, Software Version 5.3...
Page 301: Defining Management Users
5 Click Export. The saved blacklist file is exported. Defining management users You can define the login user names that have access to the Summit WM GUI, either for Summit WM Software administrators with read/write privileges, or users with read only privileges. For each user added, you can also define and modify a user ID and password.
Page 302 5 In the Confirm Password, retype the new password. 6 To change the Password, click Change Password. To remove a Summit WM Controller management user: 1 From the main menu, click Summit Controller Configuration. The Summit Controller Configuration page is displayed.
Page 303: Configuring The Network Time
NOTE The normal operation of the Summit WM Controller will not be affected if you do not synchronize the clock. The clock synchronization is necessary to ensure that the logs bear the accurate time stamps. In addition, the clock...
Page 304: Configuring The Network Time Using The Ntp
The date is in mm-dd-yyyy format and the time is in hh:mm format. 9 Click Apply. 10 Reboot the Summit WM Controller. The WLAN network time is synchronized in accordance with the Summit WM Controller's time. Configuring the network time using the NTP...
Page 305: Configuring Web Session Timeouts
NOTE If you want to use the Summit WM Controller as the NTP Server, select the Run local NTP Server checkbox, and then skip to Step 5. 3 In the Time Server 1 text box, type the IP address or FQDN (Full Qualified Domain Name) of a NTP Time Server that is accessible on the enterprise network.
Page 306 WM-ADs to appear in the SSID list for Altitude APs. 5 To save your settings, click Save. NOTE Pages that auto-refresh will time-out unless a manual action takes place prior to the end of the timeout period. Summit WM User Guide, Software Version 5.3...
Page 307: Glossary
A variable time interval can exist between characters. ATM is the preferred technology for the transfer of images. Summit WM User GuideSoftware Version 5.3...
Page 308 Device Server A specialized, network-based hardware device designed to perform a single or specialized set of server functions. Print servers, terminal servers, remote access servers and network time servers are examples of device servers. Summit WM User Guide, Software Version 5.3...
Page 309 (Compare FHSS) DTIM delivery traffic indication message (in 802.11 standard) DTIM Summit WM User Guide, Software Version 5.3...
Page 310 "hops" in a random but predictable sequence from frequency to frequency as a function of time over a wide band of frequencies. This technique reduces interference. If synchronized properly, a single logical channel is maintained. (Compare DSSS) Summit WM User Guide, Software Version 5.3...
Page 311 World Wide Web. A Web browser makes use of HTTP. HTTP is an application protocol that runs on top of the TCP/IP suite of protocols. (RFC2616: Hypertext Transfer Protocol -- HTTP/1.1) Summit WM User Guide, Software Version 5.3...
Page 312 Most networks combine IP with a higher-level protocol called Transmission Control Protocol (TCP), which establishes a virtual connection between a destination and a source. Summit WM User Guide, Software Version 5.3...
Page 313 Media Access Control layer. One of two sublayers that make up the Data Link Layer of the OSI model. The MAC layer is responsible for moving data packets to and from one Network Interface Card (NIC) to another across a shared channel. Summit WM User Guide, Software Version 5.3...
Page 314 Network Management System. The system responsible for managing a network or a portion of a network. The NMS talks to network management agents, which reside in the managed nodes. Summit WM User Guide, Software Version 5.3...
Page 315 Routing and forwarding are functions of this layer, as well as addressing, internetworking, error handling, congestion control and packet sequencing. Summit WM User Guide, Software Version 5.3...
Page 316 POST Power On Self Test, a diagnostic testing sequence performed by a computer to determine if its hardware elements are present and powered on. If so, the computer begins its boot sequence. Summit WM User Guide, Software Version 5.3...
Page 317 Robust Security Network. A new standard within IEEE 802.11 to provide security and privacy mechanisms. The RSN (and related TSN) both specify IEEE 802.1X authentication with Extensible Authentication Protocol (EAP). RSSI RSSI received signal strength indication (in 802.11 standard) Summit WM User Guide, Software Version 5.3...
Page 318 Get, GetNext or Set. SNMP trap An event notification sent by the SNMP managed agent to the management system to identify the occurrence of conditions (such as a threshold that exceeds a predetermined value). Summit WM User Guide, Software Version 5.3...
Page 319 SpectraLink Voice Protocol, a protocol developed by SpectraLink to be implemented on access points in order to facilitate voice prioritization over an 802.11 wireless LAN that will carry voice packets from SpectraLink wireless telephones. Summit WM User Guide, Software Version 5.3...
Page 320 Quality of Service (QoS) for each frame. The level of service is determined by a set of service parameters which provide a three way trade-off between low-delay, high-reliability, and high-throughput. The use of service parameters may increase the cost of service. Summit WM User Guide, Software Version 5.3...
Page 321 Virtual Private Network. A private network that is constructed by using public wires to connect nodes. These systems use encryption and other security mechanisms to ensure that only authorized users can access the network and that the data cannot be intercepted. Summit WM User Guide, Software Version 5.3...
Page 322 IP addresses. WLAN Wireless Local Area Network. WM-AD WM Access Domain Services (WM-AD). A Extreme Networks specific technique that provides a means of mapping wireless networks to a wired topology. Wi-Fi Multimedia (WMM), a Wi-Fi Alliance certified standard that provides multimedia enhancements for Wi-Fi networks that improve the user experience for audio, video, and voice applications.
Page 323 (numbers 0-9 and letters A-F) at least 24 hexadecimal digits long. After the initial shared secret, the Temporal Key Integrity Protocol (TKIP) handles the encryption and automatic rekeying. Summit WM User Guide, Software Version 5.3...
Page 324: Controller, Access Points, And Wm Software Terms And Abbreviations
Data Collector The Data Collector is an application on the Summit WM Controller that receives and manages the Radio Frequency (RF) scan messages sent by the Wireless AP. This application is part of the Summit WM series Spy technique, working in conjunction with the scanner mechanism and the Analysis Engine to assist in detecting rogue access points.
Page 325 When a WM-AD is set up on the Summit WM Controller, one or more Wireless APs (by radio) are associated with it. A range of IP addresses is set aside for the Summit WM Controller's DHCP server to assign to wireless devices.
Page 326 Glossary Summit WM User Guide, Software Version 5.3...
Page 327: Appendix A: Summit Wm Controller's Physical Description
Controller back panel" on page 327. These two LED lights are also located on the back panel of the Summit WM Controller WM1000. Summit WM1000 Controller back panel The following figure identifies the main components on the back panel of Summit WM Controller WM1000.
Page 328 This LED is located only on the back panel of the Summit WM Controller WM1000. STATUS LED - Indicates the normal state of the Summit WM Controller as seen by the system's software. This LED covers all stages of the Summit WM Controller, ranging from restarting, to shutting-down.
Page 329: Summit Wm100 Controller Front Panel
"Summit WM1000 Controller back panel" on page 327. The STATUS LED is located on the back panel as well as the front panel of the Summit WM Controller WM100. Summit WM100 Controller back panel The following figure identifies the main components on the back panel of Summit WM Controller WM100.
Page 330: Summit Wm200/2000 Controller Front Panel
This appendix describes the physical description and LEDs, SSD codes and their description of the following models of the Summit WM Controller: Summit WM Controller WM200/2000 Summit WM Controller WM20...
Page 331: Led States And Seven Segment Display (Ssd) Codes
Green The system is initializing load device. Note: If the SSD code is stuck at 6 for more than a minute, it implies that the Network Processor Card is installed in wrong slot. Summit WM User Guide, Software Version 5.3...
Page 332 May be the result of the fan tray removal of one of the power supplies. Green Yellow FDD low sector count (40 backup sectors remaining). Green Yellow FDD extremely low sector count (20 backup sectors remaining) Summit WM User Guide, Software Version 5.3...
Page 333: Summit Wm200/2000 Controller Back Panel
The following figure identifies the main components on the back panel of Summit WM200/2000 Controller. Figure 29: Summit WM200/2000 Controller back panel Redundant power supplies Power switches NOTE The hardware for the Summit WM200 Controller and the Summit WM2000 Controller are identical. Summit WM User Guide, Software Version 5.3...
Page 334: Summit Wm20 Controller
Hot Swap LED The functional definitions of the Summit WM20 Controller's LEDs are provided below: ACTIVITY LED - Indicates the CPU activity, including the amount of traffic carried to and from the Altitude APs. Summit WM User Guide, Software Version 5.3...
Page 335 HDD Activity LED - Is hardware controlled to report Hard Drive Device (HDD) activity. Hot Swap LED - Indicates that the hot swap lever on the Summit WM Controller is pulled out. Summit WM20 Controller's LED states The description of the Summit WM20 Controller's LED states is provided below.
Page 336: Summit Wm20 Controller Back Panel
Summit WM Controller's physical description Summit WM20 Controller back panel Figure 33: Summit WM20 Controller back panel Power Supply Summit WM User Guide, Software Version 5.3...
Page 337: Appendix B: Regulatory Information
WARNING! Changes or modifications made to the Summit WM Controller or the Altitude APs which are not expressly approved by Extreme Networks could void the user's authority to operate the equipment.
Page 338: Summit Wm Controller Wm100/Wm1000/Wm20/Wm200/2000
EN 61000-3-2 (Harmonics) EN 61000-3-3 (Flicker) IEC/CISPR 22 Class A (International Emissions) IEC/CISPR 24 includes IEC/EN 61000-4-2,3,4,5,6,11 (International Immunity) Australia/New Zealand AS/NZS 3548 via EU standards (ACMA) RoHS RoHS 6 compliant China RoHS compliant Summit WM User Guide, Software Version 5.3...
Page 339: Altitude 350-2 And Altitude 450/451
China Colombia Costa Rica Czech Republic Denmark El Salvador Estonia Finland France Germany Greece Guatemala Guinea Guyana Honduras Hong Kong Hungary Iceland India Ireland Italy Japan 50/60 Korea 110/220 50/60 Latvia Liechtenstein Lithuania Summit WM User Guide, Software Version 5.3...
Page 340: Wi-Fi Certification
802.11a/b/g/draft n standards. Altitude 451 AP comes with RP-SMA connectors for use with external antennas. It is shipped with three paddle antennas. Altitude 350-2/450/451 Access Points are designed and intended to be used indoors. Summit WM User Guide, Software Version 5.3...
Page 341: Altitude 350-2D External Antenna Ap
This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: This device may not cause harmful interference. This device must accept any interference received, including interference that may cause undesired operation. Summit WM User Guide, Software Version 5.3...
Page 342 FCC Part 15 regulations. Operation of the Altitude AP is restricted for indoor use only, specifically in the UNII 5.15 - 5.25 GHz band in accordance with 47 CFR 15.407(e). Summit WM User Guide, Software Version 5.3...
Page 343 This Part 15 radio device operates on a non-interference basis with other devices operating at the same frequency when using antennas provided or other Extreme Networks certified antennas. Any changes or modification to the product not expressly approved by Extreme Networks could void the user's authority to operate this device.
Page 344 120 degree 2400- 3 feet / RPSMA sector 2500 19AWG directional CMP(ETL) 4900- C(ETL) 5900 9700851 S24493TS indoor omni, 3 2400- 3 feet / RPSMA, inputs 2500 19AWG 3ea. CMP(ETL) 4900- C(ETL) 5990 9700851 Summit WM User Guide, Software Version 5.3...
Page 345 If one of the above antennas is used, you must select an operating channel (on the Altitude APs configuration pages) and the corresponding allowed max power from the values listed in Table 36 Table 37. DO NOT select a higher power than the values listed in Table 36 Table Summit WM User Guide, Software Version 5.3...
Page 346 Antenna SR249120D S24493TS SL24513WP S24497Pxxx HG2458CUxxx PTxxx Frequency Power range Channel Power limit limit Power limit Power limit Power limit Power limit (MHz) range (dBm) (dBm) (dBm) (dBm) (dBm) (dBm) 2400- 1-11 2500 Summit WM User Guide, Software Version 5.3...
Page 347 149- 5850 5725- 149- 5850 5725- 149- 5850 CAUTION Altitude 350-2d/Altitude 451 channels designated as N/S are not supported by the antenna and must not be selected from the Altitude APs configuration pages. Summit WM User Guide, Software Version 5.3...
Page 348 For both Altitude 350-2d/Altitude 451, if you select the Auto channel selection (on the Altitude APs configuration pages), you must also select the power values listed in Table 38 Table 39. DO NOT select a higher power than the value listed in Table 38 Table 39 Summit WM User Guide, Software Version 5.3...
Page 349: Canada
The maximum antenna gain permitted for the AP45X operating in the 5725-5825 MHz band to comply with the e.i.r.p. limits specified for point-to-point and non point-to-point operation as appropriate is 6 dBi for the internal antenna and 5 dBi for the external antenna. Summit WM User Guide, Software Version 5.3...
Page 350 The device cannot be sold retail to the general public or by mail order. It must be sold to dealers. Installation must be controlled. Installation must be carried out by licensed professionals (equipment sold to dealers who hire installers) Installation requires special training (special programming and antenna and cable installations) Summit WM User Guide, Software Version 5.3...
Page 351 Gain Frequency Coax Cable Connector required Model Application Shape (dBi) (MHz) Length/Type Type antennas Cushcraft SR249120D indoor 120 degree 2400- 3 feet / RPSMA sector 2500 19AWG directional CMP(ETL) 4900- C(ETL) 5900 9700851 Summit WM User Guide, Software Version 5.3...
Page 352 If one of the above antennas is used, you must select an operating channel (on the Altitude APs configuration pages) and the corresponding allowed max power from the values listed in Table 42 Table 43. DO NOT select a higher power than the value listed in Table 42 Table Summit WM User Guide, Software Version 5.3...
Page 353 Antenna S24493TS S24497Pxxx HG2458CUxxx Frequency Power Power range Channel Power limit limit Power limit Power limit Power limit (MHz) range limit (dBm) (dBm) (dBm) (dBm) (dBm) (dBm) 2400- 1-11 2500 2400- 1-11 2500 Summit WM User Guide, Software Version 5.3...
Page 354 149- 5850 5725- 149- 5850 5725- 149- 5850 CAUTION Altitude 350-2d/Altitude 451 channels designated as N/S are not supported by the antenna and must not be selected from the Altitude APs configuration pages. Summit WM User Guide, Software Version 5.3...
Page 355 The antennas used for this transmitter must be installed to provide a separation distance of at least 25 cm from all persons and must not be co-located or operating in conjunction with another antenna or transmitter. Summit WM User Guide, Software Version 5.3...
Page 356: European Community
Extreme Networks. Declaration of Conformity with R&TTE Directive of the European Union 1999/5/EC The following symbol indicates compliance with the Essential Requirements of the R&TTE Directive of the European Union (1999/5/EC). Summit WM User Guide, Software Version 5.3...
Page 357 Declaration of Conformity in Languages of the European Community Summit WM User Guide, Software Version 5.3...
Page 358 EN 61000-3-2 and -3-3 (Harmonics and Flicker) EN 60601-1-2 (EMC immunity for medical equipment) EN 50385 (EMF) ETSI/EN 301 489-1 & -17 Radio transceiver R&TTE Directive 1999/5/EC ETSI/EN 300 328 (2.4 GHz) ETSI/EN 301 893 (5 GHz) Summit WM User Guide, Software Version 5.3...
Page 359 Table 46: List of ETSI approved antennas - Altitude 350-2d and Altitude 451 Model Location Type Gain (dBi) Frequency (MHz) Huber+Suhner outdoor-capable omni 2400-2500 2454/360/7/20/DF 4900-5875 outdoor-capable planar 2400-2500 2456/75/9/0/DF 2 or 1 inputs 5150-5875 outdoor-capable planar 2300-2500 2400/80/9/0/DS 2 inputs Summit WM User Guide, Software Version 5.3...
Page 360 Power Power Power Power Power Power (MHz) limit limit limit limit limit limit limit range (dBm) (dBm) (dBm) (dBm) (dBm) (dBm) (dBm) 2400- 1-13 2500 2400- 1-13 2500 5150- 5350 5470- 100- 5725 Summit WM User Guide, Software Version 5.3...
Page 361 If you select the Auto channel selection (on the Altitude APs configuration pages), you must also select the power values listed in Table 49 Table 50. DO NOT select a higher power than the value listed in Table 49 Table Summit WM User Guide, Software Version 5.3...
Page 362 The antennas used for this transmitter must be installed to provide a separation distance of at least 25 cm from all persons and must not be co-located or operating in conjunction with another antenna or transmitter. Summit WM User Guide, Software Version 5.3...
Page 363 / outdoor restrictions, license requirements, and within power level limits for the current country of operation. A configuration utility has been provided with the Summit WM Controller to allow the end user to check the configuration and make necessary configuration changes to ensure proper operation in accordance with the spectrum usage rules for compliance with the European R&TTE directive 1999/5/EC.
Page 364 Poland Indoor only Indoor only Indoor or outdoor Indoor or outdoor Portugal Indoor only Indoor only Indoor or outdoor Indoor or outdoor Romania Indoor only Indoor only Indoor or outdoor Indoor or outdoor Summit WM User Guide, Software Version 5.3...
Page 365: Certifications Of Other Countries
The Altitude APs have been certified for use in various other countries. When the Altitude AP is connected to the Extreme Networks Summit WM controller, the user is prompted to select a country code. Once the correct country code is selected, the controller automatically sets up the Altitude AP with the proper frequencies and power outputs for that country code.
Page 366 Regulatory information EN 301 893 (5 GHz) EN 301 489-1 & -17 (RLAN) IEEE 802.11a (5 GHz) IEEE 802.11b/g (2.4 GHz) IEEE 802.11n (AP45X) IEEE 802.3af (PoE) Summit WM User Guide, Software Version 5.3...
Page 367: Appendix C: Spectralink Wireless Telephones
SpectraLink Wireless Telephones The Summit WM LAN Solution, consisting of the Summit WM Controller, Altitude APs, and the Summit WM Software, seamlessly integrates with SpectraLink Wireless Telephones to serve mobile voice and data requirements. The standards-based architecture of Summit WM LAN provides an exceptional infrastructure for voice quality and handset-reliability to the SpectraLink telephones.
Page 368: Network Topology
SpectraLink Telephones. Other topologies are supported and can be used as required. NOTE For a successful deployment, all the network elements in the SpectraLink network should be provisioned to prioritize voice data. Summit WM User Guide, Software Version 5.3...
Page 369: Configuring Summit Wm Controller For Spectralink Telephones
This section describes how to configure the Summit WM Controller and Altitude APs for use with SpectraLink Wireless Telephones. You have to configure the following features in the Summit WM Controller to set it up for SpectraLink telephones: Radio properties...
Page 370 9 From the Assignment Type drop-down menu, select SSID. 10 Under Timeout section, type 2 in the pre and post boxes. 11 Under Next Hop Routing section, type 50000 in the OSPF Route Cost box. 12 Click Save. Summit WM User Guide, Software Version 5.3...
Page 371: Configuring Filters
You must ensure that all the filtering rules, including the ones for SVP/Gateway and other network elements, are moved up, before the filtering rule for the Default filter. 9 Select the Allow option of the Default filter. Summit WM User Guide, Software Version 5.3...
Page 372: Setting Up Multicast Configuration
Configuration screen is displayed. 2 On the WM Access Domain Configuration screen, click the Multicast tab. 3 Select Enable Multicast Support. 4 From the Defined groups drop-down list, select Spectralink SVP (224.0.1.116) and then click Add. Summit WM User Guide, Software Version 5.3...
Page 373: Setting Up Security
To set up the security: 1 From the main menu, click WM Access Domain Configuration. The WM Access Domain Configuration screen is displayed. 2 On the WM Access Domain Configuration screen, click the Privacy tab. Summit WM User Guide, Software Version 5.3...
Page 374: Setting Up Quality Of Service (Qos)
SpectraLink telephones. Turbo Voice QoS does not have any effect on Altitude 802.11n APs as these APs provide best voice quality regardless of whether Turbo Voice QoS is selected or not. Summit WM User Guide, Software Version 5.3...
Page 375: Setting Up Radio Properties
5 Under Basic Radio Settings, set the following parameters: Tx Diversity: Set the Tx Diversity to either Left or Right. Total # of retries for Voice VO: Set the Total # of retries for Voice VO to adaptive (multi-rate). Summit WM User Guide, Software Version 5.3...
Page 376 3 On the Altitude AP Configuration screen, click 802.11b/g/n or 802.11a/g/n, depending upon the radio that is being used for Voice WLAN. 4 Under Base Settings, set the DTIM Period to 3. 5 Retain the default values for all other parameters. 6 Click Save. Summit WM User Guide, Software Version 5.3...
Page 377: Index
Option 78 in discovery, 71 relay on a WM-AD, 162 back panel, Summit WM Controller WM200/ required as part of solution, 17 2000, 333 branch office, static configuration of Altitude AP, exception filters Summit WM User Guide, Software Version 5.3...
Page 378 WEP for an AAA WM-AD, 197 LED sequence WPA v1 and WPA v2 on a WM-AD for AAA, 198 in discovery, 73 protocols LED states and seven segment display (SSD) for authentication by Captive Portal, 169 codes, 331 Summit WM User Guide, Software Version 5.3...
Page 379 44 wireless bridge configuration, 213 wireless repeater configuration, 213 WM-AD, 214 WDS - Wireless Distribution System, 212 scan results, Summit WM series Spy feature, 268 Wi-Fi Multimedia (WMM) service class, 203 on a WM-AD, 203 Service Location Protocol (SLP)
Page 380 181 defined, 141 for third-party APs, 260 global settings, 149 multicast, 191 network assignment overview, 143 privacy for AAA, 196 privacy overview, 193 set up for VoIP, 203 topology for Captive Portal, 157 Summit WM User Guide, Software Version 5.3...

Extreme Networks Summit WM User Manual

Chapter 1: Overview of the Controller, Access Points, and WM Software Solution

Chapter 2: Configuring the Summit WM Controller

Chapter 3: Configuring the Altitude AP

Chapter 4: WM Access Domain Services

Chapter 5: WM Access Domain Services Configuration

Chapter 6: Availability and Session Availability

Chapter 7: Mobility

Chapter 8: Working with Third-Party Aps

Chapter 9: Working with the Summit WM Series Spy

Chapter 10: Working with Reports and Displays

Chapter 11: Performing System Administration

Appendix A: Summit WM Controller's Physical Description

Appendix B: Regulatory Information

Appendix C: Spectralink Wireless Telephones

Quick Links

Related Manuals for Extreme Networks Summit WM

Summary of Contents for Extreme Networks Summit WM