Motorola Solutions. Spectralink VIEW Certified Configuration Guide

Transcription

1 Spectralink VIEW Certified Configuration Guide Motorola Solutions Access Points AP650, AP7131, AP8132 with WLAN controllers RFS40X0, RFS60X0, RFS70X0, and NX9XX Rev: A February 2015

2 Copyright Notice 2015 Spectralink Corporation All rights reserved. Spectralink TM, the Spectralink logo and the names and marks associated with Spectralink s products are trademarks and/or service marks of Spectralink Corporation and are common law marks in the United States and various other countries. All other trademarks are property of their respective owners. No portion hereof may be reproduced or transmitted in any form or by any means, for any purpose other than the recipient s personal use, without the express written permission of Spectralink. All rights reserved under the International and pan-american Copyright Conventions. No part of this manual, or the software described herein, may be reproduced or transmitted in any form or by any means, or translated into another language or format, in whole or in part, without the express written permission of Spectralink Corporation. Do not remove (or allow any third party to remove) any product identification, copyright or other notices. Notice Spectralink Corporation has prepared this document for use by Spectralink personnel and customers. The drawings and specifications contained herein are the property of Spectralink and shall be neither reproduced in whole or in part without the prior written approval of Spectralink, nor be implied to grant any license to make, use, or sell equipment manufactured in accordance herewith. Spectralink reserves the right to make changes in specifications and other information contained in this document without prior notice, and the reader should in all cases consult Spectralink to determine whether any such changes have been made. NO REPRESENTATION OR OTHER AFFIRMATION OF FACT CONTAINED IN THIS DOCUMENT INCLUDING BUT NOT LIMITED TO STATEMENTS REGARDING CAPACITY, RESPONSE-TIME PERFORMANCE, SUITABILITY FOR USE, OR PERFORMANCE OF PRODUCTS DESCRIBED HEREIN SHALL BE DEEMED TO BE A WARRANTY BY SPECTRALINK FOR ANY PURPOSE, OR GIVE RISE TO ANY LIABILITY OF SPECTRALINK WHATSOEVER. Contact Information US Location European Location Spectralink Corporation Spectralink Europe ApS th Street Langmarksvej 34 Boulder, CO Horsens, Denmark info@spectralink.com infodk@spectralink.com February

3 Contents Introduction... 4 Certified Product Summary... 4 Known Limitations... 5 Spectralink References... 6 Specific Documents... 6 Product Support... 7 Motorola Solutions Support Center... 7 Customer Support Web Site... 8 Chapter 1: Overview... 9 Chapter 2: Connecting to a Controller for the First Time Connecting to the Controller via CLI for the First Time...10 Configuring Controller IP address through CLI...10 Connecting to the Controller via the Web UI for the First Time...11 Using the Initial Setup Wizard...11 Using a DHCP Server...11 Logging in from GUI for the First Time:...12 Configuring Controller IP address through the GUI...13 Adopting APs...16 Adopting APs through the CLI for a controller...16 Adopting APs through the Web interface...17 Installing a New Image...19 Installing controller firmware through the controller CLI...19 Installing firmware through the Web interface...20 Upgrading controller-managed AP firmware through the Controller CLI...21 Upgrading controller-managed AP firmware through the Web interface...22 Chapter 3: Configuring the Controller and Access Point from Default Configuration SSID, QoS and Security Settings...24 Configuring SSID, QoS and security settings through the CLI...24 Configuring SSID, QoS, and security settings through the Web interface...28 AP and Radio Settings...47 Configuring radio and AP settings through the CLI...47 Configuring radio and AP settings through the Web interface...49 February

4 Introduction Spectralink s Voice Interoperability for Enterprise Wireless (VIEW) Certification Program is designed to ensure interoperability and high performance between Spectralink Wireless Handsets and wireless LAN (WLAN) infrastructure products. The products listed below have been tested in Spectralink s lab using the VIEW Certification Test Plan. This document details how to configure the Motorola controllers RFS40X0, RFS60X0, RFS70X0, and NX9XX0 to work with the AP8132. The configurations are chosen to best support Spectralink wireless telephones. Certified Product Summary Manufacturer: Approved products: RF technology Radio: Security : QoS: AP/controller software version tested: Network topology Motorola Solutions, Inc. AP650, AP7131, AP8132 with: RFS40X0, RFS60X0, RFS70X0, and NX9XX abgn 2.4 GHz (802.11bgn), 5 GHz (802.11an) None, WPA-PSK, WPA2-PSK, WPA2-Enterprise (EAP-FAST and PEAPv0/MSCHAPv2 and EAP-TLS) Wi-Fi Standard R Tunneled Handset* models tested: Spectralink 8741/8753 Wireless Telephone (PIVOT) Handset radio mode: b/g/n a/n Meets VIEW minimum call capacity per AP:** 8 10 Handset* models tested: Spectralink 8440/8441/8450/8452/8453 Wireless Telephone Handset radio mode: b/g/n a/n Meets VIEW minimum call capacity per AP:** 8 10 February

5 Handset models tested: Spectralink 8020/8030 Wireless Telephone* Handset radio mode: b/g/n a/n Meets VIEW minimum call capacity per AP:** 6 (Wi-Fi Standard QoS)*** 8 (Wi-Fi Standard QoS)*** * Spectralink handset models and their OEM derivates are verified compatible with the WLAN hardware and software identified in the table. Throughout the remainder of this document they will be referred to collectively as Spectralink wireless telephones, phones or handsets. ** Maximum calls tested per the VIEW Certification Test Plan. The certified product may actually support a higher number of maximum calls. *** WPA2-Enterprise and Wi-Fi Standard QoS are not available for Spectralink 8020/8030 handsets connecting to traditional PBXs. Known Limitations The following limitations were discovered during VIEW testing of this product: The 87-Series handsets (PIVOT) have not yet implemented admission control using TSPECs. Admission control must be disabled on network where the 87-Series handsets are present. Fast BSS Transition (802.11r) is not supported by the handsets but they will operate in a network where the feature is advertised. 1Mb/s and 2Mb/s data rates must be disabled to meet maximum call capacity. The SIP server/pbx must send a control class message to the phone within every minute to keep the TSPEC bandwidth from thinking that it is idle and forcing the phone to disassociate. In a SIP server based on an Asterisk model, this involves setting qualify=yes and qualifyfreq=30. Similar settings exists on other SIP server models. If an SSID with open security is used, there must be an unused SSID following it in the list before an Enterprise SSID is advertised. Otherwise, poor multicast/broadcast behavior may exist on the Enterprise SSID. This is a workaround: the issue is scheduled to be fixed in the next releases of all active software chains. The 650 AP may have degraded call quality with heavy ftp background traffic. This document does not cover the steps involved to configure a RADIUS server required for using WPA2-Enterprise. February

6 Spectralink References All Spectralink documents are available at To go to a specific product page: Select the Product Category and Product Type from the dropdown lists and then select the product from the next page. All resources for that particular product are displayed by default under the All tab. Documents, downloads and other resources are sorted by the date they were created so the most recently created resource is at the top of the list. You can further sort the list by the tabs across the top of the list to find exactly what you are looking for. Click the title to open the link. Specific Documents For the Spectralink 87-Series Wireless Handsets, please refer to Best Practices Guide for Deploying Spectralink 87-Series Wireless Handsets for detailed information on wireless LAN layout, network infrastructure, QoS, security and subnets. For the Spectralink 84-Series Wireless Handsets, please refer to Best Practices Guide for Deploying Spectralink 84-Series Wireless Handsets for detailed information on wireless LAN layout, network infrastructure, QoS, security and subnets. For the Spectralink 8020/8030 Wireless Handsets, please refer to Best Practices Guide for Deploying Spectralink 8020/8030 Wireless Handsets. This white paper covers the security, coverage, capacity and QoS considerations necessary for ensuring excellent voice quality with enterprise Wi-Fi networks. February

7 These white papers identify issues and solutions based on Spectralink s extensive experience in enterprise-class Wi-Fi telephony. It provides recommendations for ensuring that a network environment is adequately optimized for use with Spectralink Wireless Handsets. Spectralink 87-Series Wireless Telephone Deployment Guide The Deployment Guide provides sequential information for provisioning and deploying the handsets. It covers deployment using the SLIC tool and CMS as well as manual deployment. Spectralink 87-Series Wireless Telephone Administration Guide The Admin Guide provides detailed information about every setting and option available to the administrator on both the CMS and handset menus. Time-Saving shortcuts, troubleshooting tips and other important maintenance instructions are also found in this document. Spectralink 87-Series Wi-Fi Security Implementation Guide Wi-Fi security prevents unauthorized over-the-air access to network components and the sensitive data that resides there. This Guide discusses the various method and explains how to implement each of them. The Spectralink 84-Series Wireless Handset Administration Guide provides a comprehensive list of every parameter available on Spectralink 84-Series Wireless Handsets. The Spectralink 84-Series Deployment Guide is your essential reference for provisioning and deploying Spectralink 84-Series handsets in any environment. The Web Configuration Utility User Guide explains how to use a web browser to configure the Spectralink 84-Series handsets on a per handset basis. The Spectralink 8020/8030 Wireless Handset Administration Tool document explains how to use a software interface to configure the handsets. Product Support Motorola Solutions Support Center If you have a problem with your equipment, contact Enterprise Mobility support for your region. Support and issue resolution is provided for products under warranty or that are covered by an Enterprise Mobility Services agreement. Contact information and web self-service is available by visiting When contacting Motorola Solutions support, please provide the following information: Serial number of the unit Model number or product name Software type and version number February

8 Motorola Solutions responds to calls by or telephone within the time limits set forth in support agreements. If you purchased your Enterprise Mobility business product from a Motorola business partner, contact that business partner for support. Customer Support Web Site Motorola Solutions Support Center site, located at provides information and online assistance including developer tools, software downloads, product manuals, support contact information and online repair requests. February

9 Chapter 1: Overview The following topology was used during VIEW Certification testing. Note: Example configuration shown It is important to note that this configuration is not necessarily applicable to all customer environments. February

10 Chapter 2: Connecting to a Controller for the First Time The controller can be accessed via SSH for CLI access, or via HTTPS for GUI access. Configurations can be performed by either CLI or GUI, both of which will be explained in this document. In CLI, use the command commit write memory after changes are made to save the entry. In GUI, click the commit and save button located on the upper-right side of the screen to save changes. Connecting to the Controller via CLI for the First Time Connect to the console port on the front of the controller using bits per second, 8 data bits, no parity, no stop bit, and no flow control. The default login credentials are admin and motorola. The user will be prompted to change the password when logging in for the first time. Enter the new password twice for verification purposes. The AP s IP address can be displayed using the following commands. rfs ec66>enable rfs ec66#config terminal rfs ec66(config)# show ip interface brief INTERFACE IP-ADDRESS/MASK TYPE STATUS PROTOCOL vlan /24(DCHP) primary UP up Configuring Controller IP address through CLI To use a static IP for the device, follow these steps: rfs ec66#configure terminal Enter configuration commands, one per line. End with CNTL/Z. rfs ec66(config)#self rfs ec66(config-device dc)#interface vlan 1 rfs ec66(config-device dc-if-vlan1)#ip address <desired IP address>/24 rfs ec66(config-device dc-if-vlan1)#exit February

11 rfs ec66(config-device dc)#ip default-gateway <gateway IP address> rfs ec66(config-device dc-if-vlan1)#commit write memory Connecting to the Controller via the Web UI for the First Time The controllers utilize an initial setup wizard to streamline getting on the network for the first time. This wizard configures location, network and WLAN settings and assists in the discovery of Access Points and their connected clients. See the System Reference Guide for the appropriate controller model on the site more detailed directions. Using the Initial Setup Wizard Every controller is given the default address of A PC or laptop may be reconfigured with an IP that can access this address. Using a DHCP Server By default, a controller is set to be a DHCP client. Connect its GEx port to a DHCP server and it will obtain an IP address. From the DHCP server, find the DHCP address lease using the MAC address, which can be found on the back side of the device. February

12 Logging in from GUI for the First Time: Open a browser and enter in the address bar the address assigned using the wizard or by using the cli and assigned to VLAN1. 1 Be sure that the browser has the latest Adobe Flash Player installed, which is required for GUI access. 2 Enter default username and password of admin and motorola. The GUI will prompt to enter a new password. 3 A confirmation window appears after password change. Click OK to proceed. Now you are connected to the AP via GUI. 4 A Wizard window pops up when you connect for the first time. The wizard is intended for quick configuration, which does not cover some of VIEW Certification configurations. February

13 Configuring Controller IP address through the GUI From factory defaults, only the CLI can be used to initially configure a static address for vlan1. Thereafter, the static address may be changed using the GUI. 1 To assign a static IP address, navigate to Configuration> Devices on a controller. Select the Controller and click Edit located on the lower-right side of the screen. 2 Under Profile Overrides> Interfaces> Virtual Interfaces, select Vlan1 and click Edit. February

14 3 Uncheck Use DHCP to Obtain IP, and manually enter an IP address. Click OK to accept the change. February

15 4 Enter the default gateway address. Select Network> Static Routes from the Device Panel. Click Add Row. February

16 5 Enter a Network Address of /0 and enter the desired Default Gateway address for the network. Use the down arrow by the network address to change the network mask if necessary. Adopting APs For APs to be found by the controller, proper adoption settings must be supplied. Adopting APs through the CLI for a controller These directions define a generic adopt all policy. Facilities may want to use a more limited policy to prevent rogue APs from joining the network. rfs ec66(config)#auto-provisioning-policy <name of policy, eg VIEW> rfs ec66(config-auto-provisioning-policy-view)#defaultadoption Apply the auto-provisioning policy to the desired default controller policy. rfs ec66(config-auto-provisioning-policy-view)#exit rfs ec66(config)#profile rfs6000 default-rfs6000 rfs ec66(config-profile-default-rfs6000)#use autoprovisioning-policy VIEW February

17 Adopting APs through the Web interface 1 Navigate to Configuration> Profiles and Click the row containing the profile for the desired model of controller, eg default-rfs From Profile Overrides> Adoption, a specific adoption policy may be defined for all controllers of this model. These directions define a generic adopt all policy. 3 Ensure that Access Points is checked by Controller Adoption Settings> Allow Adoption of Devices. February

18 4 Click the Create icon by Auto-Provisioning Policy. Enter a name and Click Continue. February

19 5 Click the Default tab, check the radio box Adopt if No Rules Match, and Click OK. 6 Click OK on the Profile Overrides> Adoption menu and Commit and Save. Installing a New Image The VIEW Certified firmware release can be obtained from the support portal by searching for the proper product at It is necessary to have an appropriate maintenance contract or recent purchase. Upgrading to the new firmware can be done through the Web interface or through the command line interface (CLI). Place the image on the FTP server or TFTP server depending on the file transfer mechanism chosen. Installing controller firmware through the controller CLI 1 Enter your username and password to log into the CLI. 2 Connect the FTP/TFTP server to subnet 1. 3 For TFTP, issue the following commands: rfs ec66>en February

20 rfs ec66#upgrade tftp://<tftp_server_ip_addr>/<firmware_filename> 4 For FTP, issue the following commands: rfs ec66>en rfs ec66#upgrade ftp://<ftp_username>:<ftp_passwd>@<ftp_server_ip_addr>/ <FIRMWARE_FILENAME> 5 After the upgrade is successful issue the following command: rfs ec66#reload Installing firmware through the Web interface 1 Open the GUI by entering the IP address: Error! Hyperlink reference not valid. 2 Navigate to Operations> Devices. On the left pane, click System to expand the tree, and Default, then select the desired controller. February

21 3 On the lower-right screen, click Firmware Upgrade. The Firmware Upgrade screen pops up. 4 Select protocol, enter host IP, and specify path/file name. Click Apply to start firmware upgrade. 5 When finished, close the firmware upgrade screen. 6 Click Reload to reboot the device with new firmware. Upgrading controller-managed AP firmware through the Controller CLI 1 First, load any necessary firmware images onto the controller. The images for advanced AP models are not shipped with the controller and must be uploaded separately into the controller. rfs ec66#device-upgrade load-image ap<xxxx where xxxx is the model number><image-url>(image-url is a tftp or ftp definition as described above for installing controller firmware) 2 Enable automatic adopted device firmware upgrade if desired in the controller model profile\. This will cause APs to upgrade their image when they connect to the controller. rfs ec66#config terminal rfs ec66 config#profile rfs6000 default-rfs6000 rfs ec66 config-profile-default-rfs6000#device-upgrade addauto (apxxx apxxx ) 3 Alternatively, upgrade APs on demand. February

22 rfs ec66#device-upgrade rf-domain all [all apxxx] {reboot-time <TIME>} {staggered-reboot} Upgrading controller-managed AP firmware through the Web interface 1 First, load any necessary firmware images onto the controller. The images for advanced AP models are not shipped with the controller and must be uploaded separately into the controller. a Navigate to Operations> Devices and Click the name of the controller. b Select Adopted Device Upgrade in the right hand pane. c From the Device Image Type dropdown, select the model of AP. d Enter the parameters for Protocol, Host, Path/File and Click Load Image. e Repeat for all models of AP in the controller s network. 2 Enable automatic adopted device firmware upgrade if desired. This will cause APs to upgrade their image when they connect to the controller. a Navigate to Configuration> Profiles and Click the default profile for the controller, e.g. default-rfs6000. b Expand the arrow by Management and Click Firmware. c Check the radio box ALL by Automatic Adopted Device Firmware Upgrade. d Click OK and Commit and Save. February

23 3 Alternatively, upgrade APs on demand. a Navigate to Operations> Devices and select the tab Adopted Device Upgrade in the right hand pane. b Enter parameters as appropriate for Device Type List, time of upgrade, No Reboot, Staggered Reboot, and Force Upgrade. c Check the radio box by each AP to be upgraded or by All. d Click Update Firmware. February

24 Chapter 3: Configuring the Controller and Access Point from Default Configuration SSID, QoS and Security Settings Configuring SSID, QoS and security settings through the CLI 1 Set up Radius server policies. rfs ec66(config)#aaa-policy <aaa policy name> rfs ec66(config-aaa-policy-<aaa policy name>)#authentication server 1 host Secret <shared secret> rfs ec66(config-aaa-policy-<aaa policy name>)#authentication protocol chap rfs ec66 (config-aaa-policy-<aaa policy name>)#authentication server 1 proxy-mode through-controller 2 Create a WLAN QoS policy: rfs ec66(config)#wlan-qos-policy default rfs ec66(config-wlan-qos-default)#classification non-unicast normal rfs ec66(config-wlan-qos-default)#voice-prioritization rfs ec66(config-wlan-qos-default)#qos trust dscp rfs ec66(config-wlan-qos-default)#qos trust wmm 3 Set up admission control to control network loading. The percentage of bandwidth entered for maximum airtime varies whether the network is using 2.4 GHz or 5 GHz, whether 8020/8030 handsets or 84-Series handsets are in use, and which codec is selected. On the 8400, the high definition codecs G711 Mu, G711-A, G722 use more bandwidth and the low definition codec G729AB uses less bandwidth. rfs ec66(config)#radio-qos-policy <radio qos policy name> The 87-Series handsets (PIVOT) have not yet implemented admission control using TSPECs. Admission control must be disabled on network where the 87-Series handsets are present. a 2.4 GHz settings (allows 8 84-Series handsets if low definition codecs are in use on the 84-Series): rfs ec66(config-radio-qos-8400bld)#admission-control voice max-airtime-percent 45 February

25 rfs ec66(config-radio-qos-8400bld)#admission-control voice rfs ec66(config-radio-qos-8400bld)#admission-control video max-airtime-percent 15 rfs ec66(config-radio-qos-8400bld)#admission-control video b 2.4 GHz settings (allows 8 84-Series handsets if high definition codecs are in use on the 84-Series): rfs ec66(config-radio-qos-8400bhd)#admission-control voice max-airtime-percent 55 rfs ec66(config-radio-qos-8400bhd)#admission-control voice rfs ec66(config-radio-qos-8400bhd)#admission-control video max-airtime-percent 15 rfs ec66(config-radio-qos-8400bhd)#admission-control video c 2.4 GHz settings (allows /8030 handsets): rfs ec66(config-radio-qos-8020b>)#admission-control voice max-airtime-percent 35 rfs ec66(config-radio-qos-8020b>)#admission-control voice rfs ec66(config-radio-qos-8020b>)#admission-control video max-airtime-percent 15 rfs ec66(config-radio-qos-8020b>)#admission-control video d 5 GHz settings for a network with 84-Series handsets (allows Series handsets if low definition codecs are in use on the 84-Series): rfs ec66(config-radio-qos-8400ald>)#admission-control voice max-airtime-percent 50 rfs ec66(config-radio-qos-8400ald>)#admission-control voice rfs ec66(config-radio-qos8400ald)#admission-control video max-airtime-percent 15 rfs ec66(config-radio-qos8400ald)#admission-control video e 5 GHz settings for a network with 84-Series handsets (allows Series handsets if high definition codecs are in use on the 84-Series): rfs ec66(config-radio-qos-8400ald>)#admission-control voice max-airtime-percent 55 rfs ec66(config-radio-qos-8400ald>)#admission-control voice February

26 rfs ec66(config-radio-qos8400ald)#admission-control video max-airtime-percent 15 rfs ec66(config-radio-qos8400ald)#admission-control video f 5 GHz settings for a network with 8020/8030 handsets (allows 8 handsets): rfs ec66(config-radio-qos-8020a)#admission-control voice max-airtime-percent 20 rfs ec66(config-radio-qos-8020a)#admission-control voice rfs ec66(config-radio-qos-8020a)#admission-control video max-airtime-percent 15 rfs ec66(config-radio-qos-8020a)#admission-control video g 5 GHz settings for a network with 87-Settings (no WMM AC): rfs ec66(config)#radio-qos-policy none If both 84-Series and 8020/8030 Series handsets are in use on the same 5 GHz network, use the smaller max-airtime percent. The 87-Series cannot be on the same radio with the other handsets. 4 Configure a WLAN. Specify SSID, bridging mode, syslog host, and security settings using following commands: rfs (config)#wlan <WLAN Name> rfs (config-wlan-<wlan NAME>)#ssid <SSID name> rfs (config-wlan-<wlan NAME>)#bridging-mode tunnel rfs (config-wlan-<wlan NAME>)#accounting syslog host <syslog server IP> rfs (config-wlan-<wlan NAME>)#ip arp trust rfs (config-wlan-<wlan NAME>)#ip dhcp trust a For WPA2-Enterprise security (PEAP, EAP-FAST, or TLS) rfs (config-wlan-<wlan NAME>)#use aaa-policy <aaapolicy name> rfs (config-wlan-<wlan NAME>)#encryption-type ccmp rfs (config-wlan-<wlan NAME>)#authentication-type eap rfs (config-wlan-<wlan NAME>)#fast-bss-transition (Has no effect but does no harm if other clients need it) b WPA2-PSK security: rfs ec66(config-wlan-<wlan NAME>)#encryption-type ccmp rfs ec66(config-wlan-<wlan NAME>)#authentication-type none rfs ec66(config-wlan-<wlan NAME>)#wpa-wpa2 psk February

27 c WPA-PSK security tkip: rfs ec66(config-wlan-<wlan NAME>)#encryption-type tkipccmp rfs ec66(config-wlan-<wlan NAME>)#authentication-type none rfs ec66(config-wlan-<wlan NAME>)#wpa-wpa2 psk d WEP: The 8020/30 and 84-Series handsets must use the Authentication: Open System setting with WEP on the Motorola products. (The 87-Series detect the Open/Shared settings automatically.) For 128 bit key (called 104 bit on 8020/8030) rfs ec66(config-wlan-<wlan NAME>)#authentication-type none rfs ec66(config-wlan-<wlan NAME>)#encryption-type wep128 rfs ec66(config-wlan-<wlan NAME>)#wep128 key <1-4>hex or for 64 bit key (called 40 bit on 8020/8030) rfs ec66(config-wlan-<wlan NAME>)#encryption-type wep64 rfs ec66(config-wlan-<wlan NAME>)#wep64 key <1-4>hex rfs ec66(config-wlan-<wlan NAME>)#authentication-type none An Open security SSID must be followed by an unused SSID to work around an issue that is disruptive to multicast and broadcast traffic. The issue is scheduled for correction in future software releases. February

28 Configuring SSID, QoS, and security settings through the Web interface 1 Create a WLAN QoS Policy: Navigate to Configuration> Wireless> WLAN QoS Policy, double-click the default policy to edit it. February

29 2 Check Enable Voice Prioritization, set Non-Unicast Classification to Normal. Ensure that the other settings shown in the picture below are as shown. February

30 3 Navigate to Configuration> Wireless> Radio QoS Policy, and click Add. February

31 4 Set up admission control to control network loading. The percentage of bandwidth entered for maximum airtime varies whether the network is using 2.4 GHz or 5 GHz, whether 8020/8030 handsets or 84-Series handsets are in use, and which codec is selected. On the 8400, the high definition codecs G711 Mu, G711-A, G722 use more bandwidth and the low definition codec G729AB uses less bandwidth. Click the Admission Control tab and enter a name for the profile. a 2.4 GHz settings (allows eight 84-Series handsets if low definition codecs are not in use on the 84-Series). Enter 45 for Maximum Airtime for Voice and 15 for Video. February

32 b 2.4 GHz settings (allows eight 84-Series handsets if high definition codecs are in use on the 84-Series). Enter 55 for Maximum Airtime for Voice and 15 for Video. February

33 c 2.4 GHz settings (allows /8030 handsets). Enter 35 for Maximum Airtime for Voice and 15 for Video. February

34 d 5 GHz settings for a network with 84-Series handsets (allows ten 84-Series handsets if low definition codecs are in use on the 84-Series). Enter 35 for Maximum Airtime for Voice and 15 for Video. February

35 e 5 GHz settings for a network with 84-Series handsets (allows Series handsets if high definition codecs are in use on the 84-Series). Enter 35 for Maximum Airtime for Voice and 15 for Video. February

36 f 5 GHz settings for a network with 8020/8030 handsets (allows eight handsets). Enter 20 for Maximum Airtime for Voice and 15 for Video. February

37 5 WLAN configuration: Under Configuration> Wireless> Wireless LANs, click Add to create a new WLAN. An Open security SSID must be followed by an unused SSID to work around an issue that is disruptive to multicast and broadcast traffic. The issue is scheduled for correction in future software releases. February

38 6 Enter WLAN name, SSID. 7 Define a syslog server if desired. Select Accounting under the WLAN <WLAN name> panel. Check Enable Syslog Accounting. Enter the Syslog Host IP address or DNS name. February

39 8 Set WLAN security. a For WPA2 Enterprise (PEAP, EAP-FAST, or TLS), under Security in the WLAN <WLAN Name>panel, choose EAP as the authentication type, select the previously defined AAA Policy <AAA Policy Name>. Use WPA2-CCMP as encryption type. February

40 b For WPA2-PSK under Security in the WLAN <WLAN Name> panel, choose PSK/None as the authentication type. Use WPA2-CCMP as encryption type. Enter the pre-shared key. Ensure that Exclude WPA2 TKIP is checked and that both Key Rotation items are unchecked. February

41 February

42 c For WPA-PSK under Security in the WLAN <WLAN Name> panel, choose PSK/None as the authentication type. Use TKIP-CCMP as encryption type. Enter the pre-shared key. Ensure that Exclude WPA2 TKIP is checked and that both Key Rotation items are unchecked. February

43 February

44 d For WEP under Security in the WLAN <WLAN Name> panel, choose PSK/None as the authentication type. Use WEP64 or WEP128 as encryption type. Enter the WEP key. The handsets must use the Authentication: Open System setting with WEP on the Motorola products. February

45 February

46 9 Click Advanced in the WLAN <WLAN Name> panel. If this WLAN is intended for Spectralink handset association, and uses b radio, set up a custom rate definition that does not supply 1Mbps and 2 Mbps. 10 Create another WLAN following the same steps for background FTP/multicast traffic use. No need to change default data rates for this WLAN. Radio Settings February

47 AP and Radio Settings Configuring radio and AP settings through the CLI CLI Commands on controller Set up rf-domain general parameters. rfs (config)#rf-domain default rfs (config)#timezone America/Denver rfs (config-rf-domain-default)#country-code <country> rfs (config-rf-domain-default)#control-vlan 1 rfs (config-rf-domain-default)#controller-managed rfs (config-rf-domain-default)#exit Set up AP model profile parameters that apply to all APs of that model type. Assign previously created radio-profiles and WLANs. (Note: this example is from an AP that has 3 dual-band radios.) rfs (config)#profile <ap model>default-<ap model> rfs (config)#no ip igmp snooping (necessary for PTT operation) rfs (config)#no ip igmp snooping forward-unknown-multicast rfs (config-profile-default-<ap model>)#interface radio 1 rfs (config-profile-default-<ap model>-if-radio1)#datarates custom basic-5.5 basic mcs-1s mcs-2s mcs-3s rfs (config-profile-default-<ap model>-if-radio1)#wlan <WLAN NAME1>bss 1 primary rfs (config-profile-default-<ap model>-if-radio1)#wlan <WLAN NAME2>bss 1 primary rfs (config-profile-default-<ap model>-if-radio1)#use radio-qos-policy <radio policy name> rfs (config-profile-default-<ap model>-if-radio1)#exit rfs (config-profile-default-<ap model>)#interface radio 2 rfs (config-profile-default-<ap model>-if-radio2)#datarates custom basic-5.5 basic mcs-1s mcs-2s mcs-3s rfs (config-profile-default-<ap model>-if-radio2)#wlan <WLAN NAME1>bss 1 primary rfs (config-profile-default-<ap model>-if-radio2)#wlan <WLAN NAME2>bss 1 primary rfs (config-profile-default-<ap model>-if-radio3)#use radio-qos-policy <radio policy name> rfs (config-profile-default-<ap model>-if-radio2)#exit rfs (config-profile-default-<ap model>)#interface radio 3 shutdown (this example is not using the monitor radio not tested) February

48 rfs (config-profile-default-<ap model>)#exit Set up parameters specific to a given AP. These should be determined from the results of a site design. Automatic changes in channel may cause phone audio dropouts. rfs (config)#ap<ap model><mac address of AP model as XX- XX-XX-XX-XX-XX> rfs (config-device-xx )#use profile default-<ap model> rfs (config-device-xx )#use rf-domain default rfs (config-device-xx )#interface radio 1 rfs (config-device-xx -if-radio1)#no shutdown (enables radio) rfs (config-device-xx -if-radio1)#channel 36w (w means 11n channel of 40 MHz: 80Mhz channel is encoded as 36ww) rfs (config-device-xx -if-radio1)#power 30 rfs (config-device-xx -if-radio1)#exit rfs (config-device-xx )#exit rfs (config)#exit rfs #commit write February

49 Configuring radio and AP settings through the Web interface 1 Set up rf-domain general parameters. a Navigate to Configuration> RF Domains and double Click default. b Select a Time Zone, Country, VLAN for Control Traffic, and check Controller Managed. 2 Set up AP model profile parameters that apply to all APs of that model type. Assign previously created radio-profiles and WLANs. (Note: this example is from an AP that has 3 dual-band radios.) a Navigate to Configuration> Profiles and select each AP model in the network. b Navigate to Network> IGMP Snooping. Uncheck Enable IGMP Snooping and Forward Unknown Multicast Packets. (Necessary for proper PTT phone paging operation.). Click OK. February

50 c Click OK. February

51 3 Set up parameters specific to a given AP. These should be determined from the results of a site design. Automatic changes in channel may cause phone audio dropouts. a Under Configuration> Devices, double click the AP. b Under Device> Interface> Radios, select the radio you would like to configure and click Edit. February

52 c On the Radio Settings tab, set Enabled for Admin Status, choose the appropriate Radio QoS Policy from the dropdown box, and ensure the DTIM Interval is set to 2. Set the value determined by the site design for the channel and power for this AP. The quality of phone calls may be affected by dynamic channel changes. February

53 d Click Select by the Data Rates selection. Define a custom selection that disables 1Mbps and 2 Mbps. February

54 e On the WLAN Mapping/Mesh Mapping tab, use the arrows to activate the desired WLANs on this radio. f Click OK. g Click Commit and Save. ****END OF DOCUMENT**** February