D-Link DWS-4026 User Manual page 413

Software User Manual
12/10/09
Field
WLAN Switch
Disable Reason
IP Address
AP MAC Validation
Method
Require Authentication
Passphrase
Document 34CSFP6XXUWS-SWUM100-D7
Table 257: Basic Wireless Global Configuration
Description
If the status is disabled, this field appears and one of the following reasons is listed:
• None: The cause for the disabled status is unknown.
• Administrator disabled: The Enable WLAN Switch check box has been cleared.
• No IP Address: The WLAN interface does not have an IP address.
• No SSL Files: The Unified Switch communicates with the APs it manages by using Secure
Sockets Layer (SSL) connections. The first time you power on the Unified Switch, it
automatically generates a server certificate that will be used to set up the SSL connections.
The SSL certificate and key generation can take up to an hour to complete.
If routing is enabled on the switch, the operational status might be disabled due to one of the
following reasons:
• No Loopback Interface: The switch does not have a loopback interface.
• Global Routing Disabled: Even if the routing mode is enabled on the WLAN switch interface,
it must also be enabled globally for the operational status to be enabled.
This field shows the IP address of the WLAN interface on the switch. If the switch does not
have the Routing Package installed, or if routing is disabled, the IP address is the network
interface. If the routing package is installed and enabled, this is the IP address of the routing
or loopback interface you configure for the Unified Switch features.
If routing is enabled, it is strongly recommend that you define a loopback interface on the
switch. By creating a loopback interface, you can control which routing interface the wireless
function uses for its IP address when multiple routing interfaces exist. This can avoid
discovery problems for the discovery modes where the AP knows the IP address of the Unified
Switch. With the loopback interface, the IP address of the wireless function is always the
same.
In this context, the loopback interface does not refer to the loopback interface with the
127.0.0.1 IP address. When you configure a loopback interface for the wireless interface on
the switch, it is essentially a permanent logical interface and cannot have an IP address of
127.0.0.1. You must create a dedicated subnet for the loopback interface, and other devices
on the network must be able to contact the IP address of the loopback interface.
For a Unified Switch to manage an AP, you must add the MAC address of the AP to the Valid
AP database, which can be kept locally on the switch or in an external RADIUS server. When
the switch discovers an AP that is not managed by another Unified Switch, it looks up the MAC
address of the AP in the Valid AP database. If it finds the MAC address in the database, the
switch validates the AP and assumes management.
Select the database to use for AP validation and, optionally, for authentication if the Require
Authentication Passphrase option is selected.
• Local: If you select this option, you must add the MAC address of each AP to the local Valid
AP database.
• RADIUS: If you select this option, you must configure the MAC address of each AP in an
external RADIUS server.
Select this option to require APs to be authenticated before they can associate with the switch.
If you select this option, you must configure the passphrase on the AP while it is in standalone
mode as well as in the Valid AP database. To configure the pass phrase on a standalone AP,
log onto the AP Administration Web UI and go to the Managed Access Point page, or log
onto the AP CLI and use the set managed-ap pass-phrase command.
To configure the passphrase for an AP in the local Valid AP database, click the Valid AP tab
from the Basic Setup page. Then, click the MAC address of the AP and enter the passphrase
in the Authentication Password field.
If you enable authentication, it takes place immediately after the switch validates the AP.
RADIUS Server Configuration
D-Link Unified Access System
AP Validation
Basic Setup Page 413