Network Traffic Flow - Extreme Networks Summit WM20 User Manual

DHCP Server (Dynamic Host Configuration Protocol) (RFC2131) – A server that assigns IP
●
addresses, gateways, and subnet masks dynamically. IP address assignment for clients can be done
by the DHCP server internal to the Summit WM Controller, or by existing servers using DHCP
relay. It is also used by the Wireless APs to discover the location of the Summit WM Controller
during the initial registration process. For SLP, DHCP should have Option 78 enabled. Option 78
specifies the location of one or more SLP Directory Agents.
Service Location Protocol (SLP) (SLP RFC2608) – Client applications are User Agents and services
●
that are advertised by a Service Agent. In larger installations, a Directory Agent collects information
from Service Agents and creates a central repository. The Extreme Networks solution relies on
registering "extreme" as an SLP Service Agent.
Domain Name Server (DNS) – A server used as an alternate mechanism (if present on the
●
enterprise network) for the automatic discovery process. The Summit WM Controller, Access Points
and Software relies on the DNS for Layer 3 deployments and for static configuration of Wireless
APs. The Summit WM Controller can be registered in DNS, to provide DNS assisted AP discovery.
Web Authentication Server – A server that can be used for external Captive Portal and external
●
authentication. The Summit WM Controller has an internal Captive portal presentation page, which
allows Web authentication (Web redirection) to take place without the need for an external Captive
Portal server.
RADIUS Accounting Server (Remote Access Dial-In User Service) (RFC2866) – A server that is
●
required if RADIUS Accounting is enabled.
Simple Network Management Protocol (SNMP) – A Manager Server that is required if forwarding
●
SNMP messages is enabled.
Check Point Server (Check Point Event Logging API) – A server for security event logging that is
●
required if a firewall application is enabled. Checkpoint ELA certification for OPSEC is provided.
Network infrastructure – The Ethernet switches and routers must be configured to allow routing
●
between the various services noted above. Routing must also be enabled between multiple Summit
WM Controllers for the following features to operate successfully:
Availability
●
Mobility
●
Summit WM series Spy for detection of rogue access points
●
Some features also require the definition of static routes.
Web browser – A browser provides access to the Summit WM Controller Management user
●
interface to configure the Summit WM Controller, Access Points and Software.
SSH Enabled Device – A device that supports Secure Shell (SSH) is used for remote (IP) shell access
●
to the system.
Zone Integrity – The Zone integrity server enhances network security by ensuring clients accessing
●
your network are compliant with your security policies before gaining access. Zone Integrity Release
5 is supported.

Network Traffic Flow

Figure 3 illustrates a simple configuration with a single Summit WM Controller and two Wireless APs,
each supporting a wireless device. A RADIUS server on the network provides authentication, and a
DHCP server is used by the Wireless APs to discover the location of the Summit WM Controller during
the initial registration process. Network inter-connectivity is provided by the infrastructure routing and
switching devices.
Summit WM20 User Guide, Software Release 4.2
Summit WM Controller, Access Points and Software and Your Network
25