WC7520 Wireless Controller System Components ....12 NETGEAR ProSafe Access Points: WNAP210 and WNDAP350 ..13 What Can You Do With the WC7520 Wireless Controller? ... . 13 Licenses .
Page 4
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Chapter 4 Access Point Discovery and Management Access Point Discovery ........46 Requirements for Auto Discovery.
Introduction and Overview This chapter includes the following sections: • Key Features and Capabilities on this page • Package Contents on page 9 • Hardware Features on page 10 • WC7520 Wireless Controller System Components on page 12 • What Can You Do With the WC7520 Wireless Controller? on page 13 •...
ProSafe 20-AP Wireless Controller WC7520 Reference Manual The wireless controller provides the following key features and capabilities: • Scalable architecture with stacking and redundancy Support for 20 access points on a single wireless controller with no additional license Purchased licenses (WC7510L) in increments of 10 access points allow for support of up to a maximum number of 50 access points on a single wireless controller A maximum of three stacked wireless controllers allows for up to 150 access points in a single network...
WC7520 ProSafe Wireless Controller Installation Guide • Resource CD If any of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer. Keep the carton, including the original packing materials, in case you need to return the product for repair.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Hardware Features The front panel ports and LEDs, rear panel components, and bottom label of the wireless controller are described in this section. Front Panel Ports and LEDs The following figure shows the front panel ports and status LEDs of the wireless controller. Figure 1.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Table 1. LED Functions (Continued) Status Description Left LAN The port has no physical link, that is, no Ethernet cable is plugged into the port LED wireless controller (see also LAN Port LEDs Not On on page 145).
The WC7520 wireless controller system supports the following access point models: • NETGEAR WNAP210 ProSafe wireless-N access point • NETGEAR WNDAP350 ProSafe dual band wireless-N access point Future releases will support additional access point models. Chapter 1: Introduction and Overview | 12...
ProSafe 20-AP Wireless Controller WC7520 Reference Manual NETGEAR ProSafe Access Points: WNAP210 and WNDAP350 You can connect access points to the wireless controller either directly with an Ethernet cable through a router, or switch or remotely through an IP network. After you have used the...
Page 14
ProSafe 20-AP Wireless Controller WC7520 Reference Manual • Upgrade access point firmware. Update and synchronize new firmware versions to all managed access points in the network. For more information, see Chapter 4, Access Point Discovery and Management. Centrally Manage the Wireless Settings for the Network •...
802.11n mode on all the access points that support 802.11n mode. Licenses are tied to the serial number of the wireless controller. For more information, see the License Configuration section in the datasheet at http://www.netgear.com/products/service-providers/access-points-wireless-controllers/wirele ss-management/WC7520.aspx. For information about how to manage your licenses, see Managing Licenses on page 115.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Maintenance and Support NETGEAR offers technical support seven days a week, 24 hours a day. Information about support is available on the NETGEAR ProSupport website at http://kb.netgear.com/app/answers/detail/a_id/212. Understanding the Web Management Interface Menu Layout The following figure shows the menu at the top and the left of the wireless controller’s Web...
Follow the steps in this section to set up the wireless controller. For additional information, see the WC7520 ProSafe Wireless Controller Installation Guide at http://kb.netgear.com/app/products/model/a_id/13060. To set up, configure, and deploy the wireless controller: Connect the wireless controller to your computer: a.
Page 18
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Log in to the wireless controller: a. Open your browser and enter http://192.168.0.250 in the browser’s address field. Note: You must use a Web browser such as Microsoft Internet Explorer 5.1 or later or Mozilla Firefox l.x or later with JavaScript, cookies, and SSL enabled.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual For information about the layout and general characteristics of the Web management interface, see Understanding the Web Management Interface Menu Layout page 16. Configure the wireless controller and your network: a. RF planning. Follow instructions in Chapter 3, RF Planning to plan the number and location of the access points.
Page 20
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Figure 7. One of the advanced features of the wireless controller is the capability to create multiple access point profile groups. Each access point operates using one profile group. The default profile group is called ‘basic.’ A profile group includes all the features that you can configure for an individual access point, including up to 8 SSIDs, security, QoS, load balancing, and so on.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Choosing a Location for the Wireless Controller The wireless controller is suitable for use in an office environment where it can be freestanding on its runner feet or mounted into a standard 19-inch equipment rack. Alternatively, you can rack-mount the wireless controller in a wiring closet or equipment room.
Number of wireless controllers required • 802.11 frequency band and the channels that are optimal for Wi-Fi usage NETGEAR recommends that you perform a site survey: • Run a spectrum analysis of channels of the site to determine the current RF behavior and detect both 802.11 and non-802.11 noise.
For information about how to deploy the wireless controller in your network, see the WC7520 ProSafe Wireless Controller Installation Guide at http://kb.netgear.com/app/products/model/a_id/13060. For many configurations, you can use the wireless default settings. The IP address, VLAN, DHCP server, client authentication and data encryption settings are specific to your environment.
Page 24
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Client VLANs Each authenticated wireless user is placed into a VLAN that determines the user’s DHCP server, IP address, and layer 2 connection. Although you could place all authenticated wireless users into the single VLAN that is specified in the basic security profile, the wireless controller allows you to group wireless users into separate VLANs based on the wireless SSID to differentiate access to network resources.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual For information about how to configure authentication servers, see Managing Authentication Servers and Authentication Server Groups on page 95. Single Controller Configuration with Basic Profile Group A basic configuration consists of a single wireless controller that controls a collection of access points that are organized into the basic default group.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Single Controller Configuration with Access Point Groups A more complex configuration consists of a single wireless controller that controls a collection of access points that are organized in access point profile groups and might use several profiles in each access point profile group.
Management VLAN and Data VLAN Strategies If your network includes 10 or more access points, NETGEAR recommends that you set up at least 2 VLAN groups: a management VLAN group and a data VLAN group. If your network is large, you should create a number of data VLAN groups. Setting up data VLANs for clients allows you to: •...
Page 28
ProSafe 20-AP Wireless Controller WC7520 Reference Manual The following illustration shows a simplified view of how you can use VLANs to segregate traffic by category of user. Management VLAN 100 Ethernet traffic Internet Finance VLAN 10 Ethernet traffic Printer Employees VLAN 20 Ethernet traffic Backend L3 switch or router Deploy the...
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Deployment Scenarios This section provides three deployment scenarios to illustrate how the wireless controller can function in a variety of network configurations: • Scenario Example 1: Basic Network with Single VLAN on this page •...
Page 30
ProSafe 20-AP Wireless Controller WC7520 Reference Manual The access points and wireless controller are connected in the same subnet and use the same IP address range that is assigned for that subnet. There are no routers in between the access points and the wireless controller. The access points are connected to a PoE switch, which, in turn, is connected to the wireless controller.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Scenario Example 2: Advanced Network with VLANs and SSIDs This sample scenario consists of an advanced network with a wireless controller, PoE switch, layer 3 switch or router, access points, and several VLANs and SSIDs. These are the VLANs in the wireless controller system: •...
Page 32
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Provisioning the Wireless Controller Step Configuration Web Management Interface Path For initial discovery and configuration of the access points, temporarily configure management VLAN 100 as an untagged Configuration > System > IP/VLAN management VLAN on both the wireless controller and the PoE switch.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Step Configuration Web Management Interface Path For each access point on the managed list, clear the Untagged Vlan check box and configure VLAN 100 as the management VLAN. Doing so causes the access points to lose connectivity with the wireless controller.
Page 34
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Figure 12. The access points and wireless controllers are connected in the same subnet and same VLAN and use the same IP address range that is assigned for that subnet. The core switch is located in between the wireless controllers and the PoE switches, to which the access points are connected.
Page 35
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Provisioning the Wireless Controller Step Configuration Web Management Interface Path Configure the basic system settings: 1. Configure the country code of operation. Configuration > System > General 2. Configure the IP address of wireless controller. Configuration >...
RF Planning This chapter includes the following sections: • RF Planning Overview on this page • Defining and Editing Buildings and Floors on page 38 • Specifying Access Point Requirements on page 40 • Viewing and Managing Heat Maps for Deployed Plans on page 42 RF Planning Overview You can do the following with RF planning:...
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Planning Requirements Collect the following information before using RF planning to expedite your planning efforts. • Building dimensions • Number of floors • Distance between floors • Total number of users and number of users per access point •...
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Defining and Editing Buildings and Floors This section explains how you can define your buildings and floors, and make modifications after you have defined them. You can add a maximum of three buildings. To define a building: Select Plans >...
Page 39
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Define the floors as explained in Table Table 4. Building Name and Floors Setting Description Building Building Name You can modify the previously defined building name, which is an alphanumeric string up to 64 characters in length. Floors Floor Names The floor name is an alphanumeric string up to 64 characters in length.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual To delete a building: Select the check box that corresponds to the building that you want to delete, or select the check box at the top row of the table to delete all buildings. Click Delete.
Page 41
ProSafe 20-AP Wireless Controller WC7520 Reference Manual The Planning Buildings screen shows a tab for each building that you previously defined. For each building, the screens shows the floors that you previously defined. Select the building and floor that you want to configure by clicking on the corresponding tabs.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Note that the planning tool only provides default placement and shows the coverage area for each access point. Move the access points to optimize coverage in desired areas and avoid coverage in unwanted areas based on the floor plan. Colored circles around the access point symbols indicate the expected approximate coverage of the individual access point, and the color of the circle represents the expected quality of the signal strength: a darker color indicates signal overlap with nearby...
Page 43
ProSafe 20-AP Wireless Controller WC7520 Reference Manual • Location of rogue access points • Location of clients associated with the access points • Location of blacklisted clients To view the heat map for a building floor and to adjust access points: Select Plans >...
Page 44
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Figure 18. The first time you view the heat map, the access points must be manually placed on the heat map to closely match their actual physical locations. Click Apply to save the locations. Doing so regenerates the complete heat map of the floor. The spectrum bar at the top of the screen indicates how the colors correspond to the signal strength and wireless coverage.
Page 45
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Click Apply to view how your changes affect the heat map. Depending on the size of your WLAN, it might take several minutes before the heat map is updated. If you do not want to apply the changes, click Close to return to the Deployment Building screen.
You must run the Discovery Wizard for the wireless controller to discover supported NETGEAR access points on the LAN. The wireless controller can discover access points that are still in their factory default state and access points that are deployed and running.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual • An access point must run at least its initial firmware release or a newer version. There are no other firmware requirements for the access point to function with the wireless controller. In addition, for the auto discovery process to work across layer 3 networks, enable either one of the following options: •...
Page 48
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Figure 20. Discovery Wizard: Choose Network Layout Select the radio button that specifies the network layout of the access points and click Next. • Same L2 network. Discover all access points on the LAN that are in the same IP subnet and are connected to the wireless controller either directly or through a backend layer 2 switch.
After you choose the network layout and specify the ranges (if prompted), when you click Next the following occurs: The wireless controller searches for NETGEAR products on the LAN based on MAC • address, and then identifies which products are supported access point models.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual • If more than one access point has the same IP address, then only one of them is discovered at a time. (This is not applicable to access points in factory default state that are in the same layer 2 network.) Add one access point to the managed list, change its IP address, and then run discovery again to discover the next access point with the same IP address.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual The Managed AP List shows the following entries for each access point that you added to list. Table 6. Managed AP List Fields Field Description The IP address of the access point. The MAC address of the access point. Model The model of the access point.
Page 52
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Figure 25. Configure the settings as explained in Table 7. Some fields are masked out and cannot be edited. Table 7. Edit Access Point Settings Setting Description Access Point Info Name A unique value that the indicates the access point name. By default, the name is netgearxxxxxx, where xxxxxx represents the last six hexadecimal digits of access points MAC address.
Page 53
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Table 7. Edit Access Point Settings (Continued) Setting Description Default Gateway The default gateway of the access point. This field is populated during the access point discovery process. VLAN Settings Untagged VLAN By default, the untagged VLAN is 1 and the Untagged VLAN check box is selected. When the wireless controller sends frames associated with the untagged VLAN to the LAN (Ethernet) interface, those frames are untagged.
If your location is not listed, check with your local government agency or check the NETGEAR website for more information about which channels to use. The General Settings screen lets you configure the basic settings of your wireless controller.
Page 55
Field Description Name This unique value indicates the wireless controller name. NETGEAR recommends changing the name as soon as possible after setting up. The name must contain only alphabetical characters, numbers, and hyphens, and must be 31 characters or less.
NTP server Use Custom NTP Server Select this check box if you want to use an alternate NTP server. By default, the NETGEAR NTP server is used. Hostname/IP Address Provide the host name or IP address of the NTP server, if you are using a custom...
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Configuring IP and VLAN Settings The IP Settings screen lets you configure the management IP address settings of the wireless controller. To configure IP/VLAN settings: Select Configuration > System > IP/VLAN. The IP Settings screen displays. Figure 28.
Management VLANs are used for all SNMP and HTTP traffic to and from the wireless controller and managed access points. For large deployments, NETGEAR recommends that the wireless controller and access points are in separate VLANs to ensure uninterrupted connectivity between the wireless controller and the access points.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Managing the DHCP Server Note: If you already have a DHCP server on your network, do not enable the DHCP server on the wireless controller. The wireless controller can function as a DHCP server. Multiple DHCP server pools can be added for different VLANs.
There is a default self-signed server certificate installed on the wireless controller. However, NETGEAR strongly recommends that you replace this default certificate with a custom certificate issued for your site or domain by a trusted certificate authority (CA).
ProSafe 20-AP Wireless Controller WC7520 Reference Manual To add certificates: Select Configuration > System > Certificates. The Add Certificates screen displays. Figure 31. Configure the settings as explained in Table 12, Certificates Settings. Click Apply to save your settings. Table 12. Certificates Settings Field Description Password...
ProSafe 20-AP Wireless Controller WC7520 Reference Manual To configure Syslog settings: Select Configuration > System > Alerts > Syslog. The Syslog Settings screen displays: Figure 32. Configure the settings as explained in Table 13, Syslog Settings. Click Apply to save your settings. Table 13.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual To configure alarm actions: Select Configuration > System > Alerts > Alarms. The Alarm Actions screen displays: Figure 33. Specify which alarm severity should be included in the Syslog. Select Minor, Normal, Major, or Critical.
Page 64
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Table 14. Email Configuration Field Description Server Address The server from which email notifications are sent. Port The port of the server from which email notifications are sent. Sender E-Mail Address The email address from which email notifications are sent. User Name The user name associated with this email address.
Managing Access Point Groups This chapter includes the following sections: • Configuring Access Point Groups on this page • Managing Access Point Groups in the WLAN on page 66 Not all networks need access point groups. Access point groups are useful if completely separate networks share a single LAN.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Click the + button to add another group. To specify profile definition settings, select a group tab and click the Edit button. The Edit Profile screen displays: Some selections here cause the Authentication Server field to display.
Page 67
ProSafe 20-AP Wireless Controller WC7520 Reference Manual To configure WLAN group assignments: Select Configuration > WLAN Network. The WLAN Group Assignment screen displays: Figure 37. The displayed settings are explained in Table 15, WLAN Group Assignment on page 67. To assign an access point to a group, select the correct group from the Group Name drop-down list.
When you are ready to configure your access points, NETGEAR recommends using the default settings as they are unless you have specific reasons to change them.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Configuring the Radio Radio On/Off is a green feature that can be used during scheduled vacations, plant shut downs, on evenings, or on weekends. Basic Radio Configuration To schedule the radio: Select Configuration > Wireless > Basic > Radio On/Off. The Schedule screen displays: Figure 38.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual To schedule the radio for access point groups: Select Configuration > Wireless > Advanced > Radio On/Off. The Schedule screen displays: Figure 39. Click a tab to select an access point group. Configure the settings as explained in Table 16, Schedule Radio On/Off.
The default is Auto. Advanced Wireless Configuration for Access Point Groups NETGEAR recommends using the default settings as they are to configure your access points unless you have specific reasons to change them. You can configure wireless settings...
ProSafe 20-AP Wireless Controller WC7520 Reference Manual To configure wireless settings for access point groups: Select Configuration > Wireless > Advanced > Wireless. The Advanced Wireless Settings screen displays: Figure 41. Click a tab to select the group that you want to configure. Configure the settings as explained in Table 17, Wireless Settings on page 71.
Page 74
You can use the Run Now button to immediately allocate channels when circumstances warrant, such as when you add a new access point or change your network. In order to adhere to best practices, when adjusting channel allocation, NETGEAR recommends the following: •...
Schedule channel allocation Specify the Run channel allocation at and Run channel allocation every settings. NETGEAR recommends that you schedule channel allocation once a day at times when the least number of clients are expected to be connected. Run Now button Run the channel allocation immediately and apply the selected channels to connected managed access points.
Specifying RF Management on page 75. When configuring self healing, NETGEAR recommends the following: • Configure self healing wait time to a value greater than access point reboot time, usually a minute. This allows for fluctuations in the power of nearby access points when access points are rebooted.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Table 19. RF Management Setting Description Maximum Neighbors to Participate The maximum number of neighboring access points that increase or in Self-healing decrease power to cover for a failing access point. Selecting 0 (zero) disables this feature.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Configuring QoS for Access Point Groups QoS works by default. Only change this if there is a reason, such as device vendor specifications that require you to use different settings. Using QoS Wi-Fi MultiMedia (WMM) ensures that the applications that require better throughput and performance are provided special queues with higher priority.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual This screen lets you modify the QoS control of parameter per managed access point group for upstream traffic flowing from the station to managed access point and the downstream traffic flowing from managed access point to the client station. These settings are applied only to managed access points supporting these settings.
Page 80
ProSafe 20-AP Wireless Controller WC7520 Reference Manual The controller supports balancing of load on the access points it manages. This is based on the number of clients connected to access points as well as signal quality of clients. At the time a client discovers access points (using probe requests) or sends association frames, the access point decides whether to accept a client or not based on the number of clients already connected or the signal strength of the clients.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Configuring Rate Limiting Rate limiting per profile adds up to a maximum of 100%. It can be less than 100%. Tabs are per radio. Rate limiting can be configured differently for each Basic Service Set ID (BSSID) in a security profile group.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Advanced Rate Limiting for Access Point Groups Rate limiting per profile adds up to a maximum of 100%. It can be less than 100%. Tabs are per radio. To configure the rate limit: Select Configuration >...
Configuring Security and Wireless Security Profiles This chapter includes the following sections: • Managing Wireless Security Profiles on this page • Managing Rogue Access Points on page 89 • Managing MAC Authentication and MAC Authentication Groups on page 92 • Managing Authentication Servers and Authentication Server Groups on page 95 •...
ProSafe 20-AP Wireless Controller WC7520 Reference Manual points. When the access points connect to the controller, the profile configurations are pushed onto the access points. When developing profiles, take the following into consideration: • Configuration templates for authentication server settings in case of LDAP/RADIUS and MAC ACL lists need to be done separately in their respective screens.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Configuring Basic Security Profiles This screen lets you edit up to eight security profiles per managed access point, depending on the number of profiles each access point supports. Separate profiles are applied to 802.11 b/bg/ng and 802.11a/na mode radios.
Page 86
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Note: The selections available In the Network Authentication field are affected by the authentication server settings that you specify in the Authentication Server screen. See Configuring Basic MAC Authentication Settings on page 93. If the selection in the Network Authentication field requires authentication, an additional field, the corresponding Authentication Server field displays.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Either select the Clone an existing Profile check box or select a profile from the Profiles drop-down list. Click Add, and the Edit Profile screen displays (Figure 49, Editing Basic Security Profiles page 85). The new tab for the group you added is selected. Change the settings described in Table 22, Basic Security Profile Definition on page 86.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual To set up a server to detect rogue access points: Select Configuration > Security > Basic > Rogue AP. The Basic Rogue AP screen displays: Figure 52. The wireless controller can support up to 512 total rogue access points from the known and unknown lists combined.
Page 91
ProSafe 20-AP Wireless Controller WC7520 Reference Manual To configure advanced rogue access point detection: Select Configuration > Security > Advanced > Rogue AP. The Advanced Rogue AP screen displays: Figure 53. You can import a list of known access points from a file or choose access points as known from a list of neighbor or rogue access points.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Importing a List of Known Access Points from a File You can import a list of known access points from a saved file. To do this, create a text file that includes the MAC address of each access point. This file must be a simple text file with one MAC address per line.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Configuring Basic MAC Authentication Settings To set up MAC authentication: Select Configuration > Security > Basic > MAC ACL. The Basic MAC ACL screen displays: Figure 54. A maximum of 512 MAC addresses can be supported. To add a wireless client to the Selected Wireless Clients list, Enter a MAC address and click Add or select it in the Available Wireless Clients list and click Move.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Importing a MAC List from a File You can import a pre-compiled list of approved MAC address from a saved file. This file must be a simple text file with one MAC address per line. To import a MAC list from a file: Create a text file that includes a list of approved MAC addresses.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual To set up MAC authentication for only the selected access point group: Select Configuration > Security >Advanced > MAC Authentication. The Advanced MAC Authentication screen displays: Figure 55. Click a tab to select the access point group that will use access control. Configure the settings as explained in Table 27, MAC Authentication on page 93.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual • External LDAP. You can define only one LDAP server, which applies to the basic group. You must specify its configuration on the Authentication Server screen (see the next section) so that you will be able to select this option for profiles that use this authentication method.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Table 28. Authentication Server Settings (Continued) Setting Description Secondary Authentication Specify the IP address, Port (default 1812), and shared secret. Server Primary Accounting Server Specify the IP address, Port (default 1813), and shared secret. Secondary Accounting Server Specify the IP address, Port (default 1813), and shared secret.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual To configure an authentication server: Select Configuration > Security >Advanced > Authentication Server. The Advanced Authentication Server screen displays: Figure 57. Change the settings described in Table 28, Authentication Server Settings on page 96. Click Apply.
Page 99
ProSafe 20-AP Wireless Controller WC7520 Reference Manual To configure a captive portal: Select Configuration > Captive Portal. The Captive Portal screen displays: Figure 58. Note: You can preview the end user license agreement (EULA) and then apply it. Configure the settings as explained in Table 29, Captive Portal.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Managing Users and Passwords There are three types of users: administrators, license management users, and read-only guests. Management (administrative) users can provision guests by creating captive portal users. An administrative user could be a receptionist or hotel clerk. To add or edit users: Select Maintenance >...
Maintaining the Controller This chapter includes the following sections: • Managing the Configuration File on this page • Rebooting or Resetting the Wireless Controller on page 105 • Rebooting Access Points on page 107 • Managing External Storage on page 107 •...
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Backing Up and Restoring the Configuration File To display the Backup/Restore screen, select Maintenance > Backup/Restore. Figure 60. The Backup/Restore screen lets you: • Back up and save a copy of the current settings •...
TFTP or FTP server. If you intend use a local file for the upgrade, download the firmware from the NETGEAR support page for the WC7520 wireless controller and save it to your computer. Select Maintenance > Upgrade. The Firmware Upgrade screen displays.
Page 104
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Configure the settings as explained in Table Table 30. Firmware Upgrade Settings Setting Description TFTP, FTP, or Local File Select one of the following radio buttons to specify from which location the upgrade must occur. The screen adjusts to display the fields that are required for each upgrade location.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual WARNING! During a firmware upgrade, do not try to go online, turn off the wireless controller, shutdown the computer, or do anything else to the wireless controller until the wireless controller finishes rebooting! When the Test light turns off, wait a few more seconds before you do anything.
Page 106
ProSafe 20-AP Wireless Controller WC7520 Reference Manual To reboot the wireless controller: Select the reboot radio button. Click Apply. The wireless controller reboots. The reboot process is complete after several minutes when the Test LED on the front panel goes off. To reset the wireless controller: Select the reset radio button.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Rebooting Access Points Select Maintenance > Reboot/Reset > Access Points. The Reboot Access Points screen displays. Figure 63. As an optional step, enter the IP address, MAC address or name of an access point in the Search Access Point by IP/MAC/Name field, and click Search.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual To mount an external storage device and view information about the device: Select Maintenance > Extended Storage. The Extended Storage screen displays. As an example, the screen shows information about an attached USB memory stick. Figure 64.
Page 109
ProSafe 20-AP Wireless Controller WC7520 Reference Manual To enable and configure SNMP: Select Maintenance > Remote Management > SNMP. The SNMP screen displays. Figure 65. Enable SNMP and configure the settings as explained in Table Table 31. SNMP Settings Setting Description SNMP Select this check box to enable SNMP for the wireless controller.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Specifying Session Timeouts If an HTTP session times out, the user is redirected to the login window for password verification. To specify the length of the HTTP session timeout for the wireless controller: Select Maintenance >...
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Saving Logs To save access point logs: Select Maintenance > Logs and Alerts > Save Logs > AP Logs. The Access Points screen displays. Figure 67. Select an access point from the drop-down list. Click Save, and follow the directions of you browser to save the logs to the selected access point.
Page 112
ProSafe 20-AP Wireless Controller WC7520 Reference Manual • RF Events. Radio frequency events such as detected coverage holes. • Load Balancing. Load balancing events such as a bad RSSI for a client. • Rate Limit. Rate limit events. • Redundancy. Redundancy events such as the redundant wireless controller coming up or going down, and failover events.
Page 113
ProSafe 20-AP Wireless Controller WC7520 Reference Manual To view RF events: Select Maintenance > Logs and Alerts > RF Events. The RF Events screen displays. Figure 70. To view load balancing events: Select Maintenance > Logs and Alerts > Load Balancing. The Load Balancing screen displays.
Page 114
ProSafe 20-AP Wireless Controller WC7520 Reference Manual To view rate limit events: Select Maintenance > Logs and Alerts > Rate Limit. The Rate Limit screen displays. Figure 72. To view redundancy events: Select Maintenance > Logs and Alerts > Redundancy. The Redundancy screen displays (see Figure 73).
ProSafe 20-AP Wireless Controller WC7520 Reference Manual To view stacking events: Select Maintenance > Logs and Alerts > Stacking. The Stacking screen displays. Figure 74. Managing Licenses The License menu allows you to import, register, and view the licenses that you require for your network.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Viewing Your Licenses To view your licenses: Select Maintenance > License, and then click the Inventory tab. The Inventory screen displays. Figure 75. Table 32 explains the fields of the screen. Table 32. License Inventory Settings Setting Description Summary...
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Configuring the License Server Settings To configure the license server settings: Select Maintenance > License, and then click the Server Settings tab. The Server Settings screen displays (see Figure 76). Figure 76. Configure the settings as explained in Table Table 33.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Registering Your Licenses To register your licenses: Select Maintenance > License, and then click the Registration tab. The Registration screen displays (see Figure 77). Figure 77. Complete the Customer Information fields with the customer information that is associated with the key that you want to add and register.
Managing Stacking and Redundancy This chapter includes the following sections: • Managing Stacking on this page • Managing Redundancy on page 121 Managing Stacking The wireless controller supports stacking of up to three units for management of up to 150 access points through purchased licensing (see Licenses on page 15).
ProSafe 20-AP Wireless Controller WC7520 Reference Manual The master controller can push all configuration changes to the individual access points through the secondary controllers. For ease of management, you can configure location-based profiles on the master controller and assign a location to each secondary controller.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Click Add to add a wireless controller to the stack. The Add Settings screen displays (see Figure 80). Figure 80. Configure the settings as explained in Table Table 34. Stacking Settings Setting Description Controller IP Enter the IP address of the controller (see Configuring IP and VLAN Settings...
ProSafe 20-AP Wireless Controller WC7520 Reference Manual automatic failover to the secondary controller occurs. The secondary controller then takes over all functions of the primary controller. You can configure both redundancy and stacking, but in a system with three stacked controllers, you can add only one redundant controller, which is the fourth controller in the system.
Page 123
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Configure the settings as explained in Table Table 35. Redundancy Settings Setting Description Enable Redundancy Select this check box to enable the redundancy feature and to unmask the configuration fields that enable you to configure this wireless controller to become part of a redundancy group.
Monitoring the Wireless Network and Components This chapter includes the following sections: • Monitoring the Network on page 124 • Monitoring the Wireless Controller on page 134 • Monitoring the SSIDs on page 141 • Monitoring the Clients on page 142 The monitoring screens display read-only status information of the network and its various components.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Table 36. Network Summary Screen Information (Continued) Setting Description WPA2 The number of wireless clients that are connected to managed access points using security profiles configured with WPA2. Rogue Access Points Rogue AP current The total number of unique rogue and unmanaged neighboring access points that are detected now in the network.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Viewing Wireless Controllers in the Network Figure 85. The Network Controller screen lets you monitor the stacking configuration of the wireless controllers in the network. Table 37 explains the fields of the Controller table on the Network Access Point screen. Table 37.
Page 128
ProSafe 20-AP Wireless Controller WC7520 Reference Manual The Network Access Point screen lets you monitor all managed access points in the network. Table 38 explains the fields of the Access Point table on the Network Access Point screen. Table 38. Network Access Point Information Setting Description Select...
Page 130
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Table 39 explains the fields of the AP Details screen. Table 39. Network Access Point Details Information Setting Description AP Info This information is self-explanatory. Profile Info For each security profile that is configured on the selected access point, the following information is displayed: Type The wireless mode for the security profile (802.11b/bg/ng or 802.11a/na).
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Viewing Clients in the Network Figure 89. The Network Clients screen lets you monitor all clients that are connected to the network. Table 40 explains the fields of the Clients table on the Network Clients screen. Table 40.
Page 132
ProSafe 20-AP Wireless Controller WC7520 Reference Manual To see details about a client, select its corresponding radio button in the Select column of the Client table, and then click the Details button to display the Client Details screen (see Figure 90 on page 132).
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Table 41. Network Client Details Information (Continued) Setting Description The association ID od the client. RSSI Received Signal Strength Indicator (RSSI) of the wireless client. Tx Power The transmit power of the wireless client Tx Rate The transmit rate in Mbps of the wireless client.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Table 42 explains the fields of the Profiles table on the Network Profiles screen. Table 42. Network Security Profiles Information Setting Description SSID The wireless network SSID for the security profile. Security The security mode (Open, WEP, WPA, WPA2, or WPA/WPA2) for the security profile.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Viewing the Wireless Controller Summary Screens Figure 92. Table 43 explains the fields of the Network Status, Wireless Clients, and Rogue Access Points, and Network Info tables on the Controller Summary screen. Table 43. Controller Summary Screen Information Setting Description Network Status...
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Table 43. Controller Summary Screen Information (Continued) Setting Description WPA2 The number of wireless clients that are connected to managed access points using security profiles configured with WPA2. Rogue Access Points Rogue AP current The total number of unique rogue and unmanaged neighboring access points that are detected now by the wireless controller.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual • 5 GHz Band Usage. Displays combined 802.11a- and 802.11na-mode usage. • Network Usage. Displays Ethernet usage. Viewing Access Points Managed by the Wireless Controller Figure 94. The Controller Access Point screen lets you monitor all access points that are managed by the wireless controller.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual To see details about a client, select its corresponding radio button in the Select column of the Client table, and then click the Details button to display the Client Details screen. Because this screen is identical to the Client Details screen that you can access from the Network Clients screen, see Table 41 on page 132 for information about the fields.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Table 44. Controller Rogue AP Information (Continued) Setting Description Category The category that that the rogue access point belongs to. Known/Unknown The status of the rogue access point (Known or Unknown). Name The name of the rogue access point, if any. To see the location of the rogue access point on a floor map, select the access point’s radio button (in the Select column), and then click the Locate button.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Viewing DHCP Leases Provided by the Wireless Controller Figure 98. The DHCP Lease screen displays the current DHCP clients that have been allocated IP addresses by the DHCP server on the wireless controller. Table 45 explains the fields of the DHCP Leases table on the Controller DHCP Lease screen.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Viewing Captive Portal Users Managed by the Wireless Controller Figure 99. The Controller Captive Portal Users screen displays the current guests that are logged in to a captive portal on the access points that are managed by the wireless controller. The Guest List table shows the IP address and email address of the logged-in guests.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual The Active SSID table on the WLAN SSID Mapping screen lets you monitor all access points that function in an SSID. Because this table is almost identical to the Access Point table on the Network Access Point screen, see Table 38 on page 128 for information about the fields.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Viewing Blacklisted Clients Figure 103. The Blacklisted Clients screen lets you monitor all clients for which authentication failed or that were denied access because their MAC address is not defined in a MAC ACL. Table 46 explains the fields of the Blacklisted Clients table on the Blacklisted Clients screen.
Troubleshooting This chapter includes the following sections: • Troubleshooting Basic Functioning on this page • Troubleshooting the Web Management Interface on page 145 • When You Enter a URL or IP Address a Time-out Error Occurs on page 147 • Troubleshooting a TCP/IP Network Using the Ping Utility on page 147 •...
ProSafe 20-AP Wireless Controller WC7520 Reference Manual If the error persists, you have a hardware problem and should contact NETGEAR Technical Support. Test LED Never Turns Off When the wireless controller is powered on, the Test LED turns on for approximately 2 minutes and then turns off when the wireless controller has completed its initialization.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Note: If your PC’s IP address is shown as 169.254.x.x: Windows and Mac operating systems generate and assign an IP address if the computer cannot reach a DHCP server. These auto-generated addresses are in the range of 169.254.x.x. If your IP address is in this range, check the connection from the PC to the wireless controller and reboot your PC.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual When You Enter a URL or IP Address a Time-out Error Occurs A number of things could be causing this. Try the following troubleshooting steps. • Check whether other computers on the LAN work properly. If they do, ensure that your computer’s TCP/IP settings are correct.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual If the path is not functioning correctly, you could have one of the following problems: • Wrong physical connections Make sure the LAN LED is on. If the LED is off, follow the instructions in LAN Port LEDs Not On on page 145.
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Problems With Access Points If the wireless controller does not discover any or all access points, check the following: • Make sure the wireless controller is connected to the LAN (see LAN Port LEDs Not On page 145).
Page 150
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Figure 104. In the Ping Count field, enter the number of ping packets to be sent. (The default number is 10.) From the Access Point drop-down list, select the access point to be pinged. After you have made your selection, the IP address of the access point is displayed in the IP Address field.
Factory Default Settings and Technical Specifications You can restore the wireless controller to its factory default settings on the Reboot/Reset Controllers screen (see Rebooting or Resetting the Wireless Controller on page 105) or by using the reset button on the rear panel (see Using the Reset Button to Restore Factory Default Settings on page 148).
Page 153
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Table 48. Technical and Physical Specifications (Continued) Feature Default Setting Weight kb: 2.912 lb: 6.4 Operating temperatures and humidity 0°-45° C (32°-113° F) 90% maximum relative humidity Storage temperatures and humidity -20°-70° C (-4°-158° F) 95% maximum relative humidity Major regulatory compliance FCC Class A, CE, WEEE, RoHS...
Notification of Compliance N ETG E A R Wi re d P ro d uct s Certificate of the Manufacturer/Importer It is hereby certified that the ProSafe™ 20-AP Wireless Controller WC7520 has been suppressed in accordance with the conditions set out in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. The operation of some equipment (for example, test transmitters) in accordance with the regulations may, however, be subject to certain restrictions.
Page 155
Hereby, NETGEAR Inc., declares that this Radiolan is in compliance with the essential requirements and other relevant provisions of Directive 1999/5/EC. Español Por medio de la presente NETGEAR Inc. declara que el Radiolan cumple con los [Spanish] requisitos esenciales y cualesquiera otras disposiciones aplicables o exigibles de la Directiva 1999/5/CE.
Page 156
This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter. FCC Declaration Of Conformity We, NETGEAR, Inc., 350 East Plumeria Drive, Santa Clara, CA 95134, declare under our sole responsibility that the ProSafe™ 20-AP Wireless Controller WC7520 complies with Part 15 of FCC Rules. Operation is subject to the following two conditions: •...
Page 157
FCC Standards FOR HOME OR OFFICE USE PY306100037 Modifications made to the product, unless expressly approved by NETGEAR, Inc., could void the user's right to operate the equipment. Canadian Department of Communications Radio Interference Regulations This digital apparatus, (ProSafe™ 20-AP Wireless Controller WC7520), does not exceed the Class B limits for radio-noise emissions from digital apparatus as set out in the Radio Interference Regulations of the Canadian Department of Communications.
Index Numerics statistics VLAN settings 2.4 GHz and 5 GHz channels access, remotely 802.11 wireless modes active SSIDs, viewing 802.1Q VLAN header advanced settings, description aggregation length AC power socket AIFS (Arbitration Inter-Frame Space) access point groups alarms assignment settings authentication servers viewing in the network basic (or default)
Page 159
ProSafe 20-AP Wireless Controller WC7520 Reference Manual channel allocation external RADIUS server channel width external storage client separation client VLANs clients, maximum number factory default settings, wireless controller clients, viewing factory default state, access points blacklisted in the network failover, redundancy in the network on the acess point features, overview...
Page 160
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Kensington lock package contents keys, licenses partition, memory password, restoring default passwords, users physical specifications label, bottom pinging, access points LAN path, troubleshooting PoE (Power over Ethernet), access points LAN port LEDs ports LAN ports console layer 2 and 3 networks, auto discovery...
Page 161
VAR information, licenses subnet masks video QoS queue access point VLANs DHCP server client wireless controller DHCP server support, NETGEAR management syslog server security profiles system alerts, viewing settings, access points untagged system logs, saving voice QoS queue VRRP (Virtual Router Redundancy Protocol)
Page 162
ProSafe 20-AP Wireless Controller WC7520 Reference Manual Web management interface description troubleshooting WEP encryption WINS servers wired connection, stacking wireless band usage, viewing in the network on the wireless controller wireless client separation wireless clients, maximum number wireless clients, viewing blacklisted in the network in the network on the acess point...
Need help?
Do you have a question about the WC7520 - ProSafe 20-AP Wireless Controller and is the answer not in the manual?
Questions and answers