Extreme Networks Summit WM User Manual page 81

Security mode
Security mode is a Summit WM Controller property. It defines how the controller behaves when
registering new, unknown devices. During the registration process, the Summit WM Controller's
approval of the Altitude AP's serial number depends on the security mode that has been set:
Allow all Altitude APs to connect
If the Summit WM Controller does not recognize the registering serial number, a new registration
record is automatically created for the AP (if within software license limit). The AP receives a
default configuration. The default configuration can be the default template assignment.
If the Summit WM Controller recognizes the serial number, it indicates that the registering device
is pre-registered with the controller. The controller uses the existing registration record to
authenticate the AP and the existing configuration record to configure the AP.
Allow only approved Altitude APs to connect (this is also known as secure mode)
If Summit WM Controller does not recognize the AP, the AP's registration record is created in
pending state (if within software license limits). The administrator is required to manually
approve a pending AP for it to provide active service. The pending AP receives minimum
configuration, which only allows it to maintain an active link with the controller for future state
change. The AP's radios are not configured or enabled. Pending APs are not eligible for
configuration operations (WM-AD Assignment, default template, Radio parameters) until
approved.
If the Summit WM Controller recognizes the serial number, the controller uses the existing
registration record to authenticate the AP. Following successful authentication, the AP is
configured according to its stored configuration record.
NOTE
During the initial setup of the network, it is recommended to select the Allow all Altitude APs to connect option.
This option is the most efficient way to get a large number of Altitude APs registered with the Summit WM
Controller.
Once the initial setup is complete, it is recommended that the security mode is reset to the Allow only approved
Altitude APs to connect option. This option ensures that no unapproved Altitude APs are allowed to connect. For
more information, see "Configuring Altitude AP settings" on page
Discovery timers
The discovery timer parameters dictate the number of retry attempts and the time delay between each
attempt.
Summit WM User Guide, Software Version 5.3
84.
81