Samsung WLAN Admin Course. Part 1. WE-WLAN - Day 1 - Oct. 2016

Transcription

1 Samsung WLAN Admin Course Part 1

2 Part 1 Outline 1. Course Outline & Classroom Setup 1.1 WLAN Information Sheet 1.2 Classroom Setup 2. WLAN Product Overview 2.1 Deployment Scenarios 2.2 Access Point Controller 2.3 AP (Access Point) Specifications 2.4 WEM (Wireless Enterprise Manager) 3. Installation 3.1 Hardware Mounting 4. Basic Installation Section 4.1 Site Information 4.2 Connecting to the APC 4.3 Basic Installation Wizard 4.4 Network Setup / VLANs 4.5 Software Management 4.6 License Setup 4.7 General Configuration 4.8 Configure Radios 4.9 Configure WLANs 4.10 Set Up Access Points 4.11 AP Groups 5. Maintenance 5.1 Backup the APC 5.2 Downloading the Backup 5.3 Upgrade the APC 5.4 Upgrade the AP 5.5 Default the APC 5.6 Disaster Recovery for APC 5.7 APC Redundancy

3 1. Course Outline & Classroom Setup 1. Course Outline & Classroom Setup 1.1 WLAN Information Sheet 1.2 Classroom Setup

4 1.1 WLAN Information Sheet You should have been given a WLAN information sheet. You will use this form all week for APC Configuration, AP Setup etc. As the course develops, the information in this form will begin to make more sense

5 1.2 Classroom Setup 2 WEA AP s 1 WEC8500 or WEC8050 APC Access Point Controller 1 Switch (Layer 2) 1 Router(Layer 3)

6 2. WLAN Product Overview 2. WLAN Product Overview 2.1 Deployment Scenarios 2.2 Access Point Controller s 2.3 AP (Access Point) 2.4 WEM (Wireless Enterprise Manager)

7 2.1 Deployment Scenario #1

8 2.1 Deployment Scenario #2 PSTN

9 2.2 APC (Access Point Controller) Introduction to the Samsung Wireless Enterprise Solution Samsung Wireless Enterprise (WE) solution provides a variety of telecommunication services required by clients in the wireless environment. It allows collaboration of applications such as telephone, message, communicator, etc. that have been used in the conventional wired environment to be used on a wireless terminal such as smart phone, tablet PC, or laptop. Samsung APC and WE WLAN AP are the core equipment to provide various services including user authentication, wireless management, voice and data services in the based Wi-Fi environment. WE WLAN AP provides the telecommunication environment based on Wi-Fi and APC offers user authentication, quality of service (QoS), handover and security by overall integrating WE WLAN APs.

10 2.2 Access Point Controller WEC8500 System LED Management 10 Giga Ethernet * 2 Console 1 Giga Ethernet * 8 USB Interface Description Status LED It indicates the status of APC by the color of the LED Console Port It is used to check for the operating state of WEC8500 or command by CLI Ethernet Port It supports 100 Megabit Ethernet (Management) 1 Giga Ethernet * 8 It supports 1 Gigabit Ethernet (SFP) other side must match 1 gig setup 10 Giga Ethernet * 2 It supports 10 Gigabit Ethernet (SFP+) USB It supports USB interface

11 2.2 Access Point Controller

12 2.2 Access Point Controller WEC8050 Interface Status LED Console Port Ethernet Port Description It indicates the status of APC by the color of the LED It is used to check for the operating state of WEC8050 or command by CLI It supports 4 10/100/1000 Base-T ports.

13 2.2 Access Point Controller

14 2.2 APC (Access Point Controller) Specifications Scalability H/W, Interface Network Security RF Manager Handover Management Index WEC8050 WEC8500 Maximum # of APs (Centralized), 3000 (Distributed) # of Client ,000 Network I/F 4 X 10/100/1000 mbps, 1 Console 2 10GE(SFP+), 8 GE(SFP), 1 Console USB No 1 System Redundancy Yes Yes Redundant Power No Yes, Optional Form Factor 1 RU 1 RU Routing Yes Yes VLANs VLANs per SSID DHCP Server, Relay Server, Relay QoS System Redundancy Shaping, Policing, 802.1p, Voice Quality Monitoring Stateless type (Active-Active, Active-Standby) Shaping, Policing, 802.1p, Voice Quality Monitoring Stateless type (Active-Active, Active-Standby) Firewall Yes, License required Yes, License required Authentication 802.1x 802.1x MAC Filtering, ACL Yes Yes Encryption DTLS DTLS AAA Radius Server and Internal Radius Server Radius Server and Internal Radius Server RRM Power, Channel, Coverage Hole Power, Channel, Coverage Hole RF Spectrum Analysis Yes Yes L2 Inter/Intra Controller Inter/Intra Controller L3 Inter/Intra Controller Inter/Intra Controller CLI Yes Yes GUI Yes Yes SNMP Yes Yes Syslog Yes Yes

15 2.2 APC (Access Point Controller) Specifications Item Maximum processing capacity under system configuration Specifications Use of 1000 BASE-T 4 Ports: 1.5 Gbps - When using the 10 GBASE-SR/LR 2 port: 20 Gbps - When using the 1000 BASE-SX/LX 8 port: 8 Gbps Maximum number of AP Groups Maximum number of APs per AP Group Maximum number of WLANs Maximum number of stations (clients) per AP Maximum number of SSID Maximum Number of SSID (WLAN) per AP Maximum Number of MAC Addresses 12K 12K Maximum Number of IPv4 Unicast Routers 10K 10K Maximum Number of System BSSIDs 2,400 16K Firewall Throughput 1.5 Gbps 20 Gbps

16 2.3 AP (Access Point) Model Attributes 1 WEA302i Internal use only 2 WEA303i Internal use only 3 WEA303e 4 WEA403i Internal use only 5 WEA412i Internal use only For outdoor use with specified enclosures, can attach an external antenna 6 WEA453e Outdoor Access Point 7 WEA463e Mesh Access Point 8 WEA504i Internal use only (WAVE2) 9 WEA514i Internal use only (WAVE2) i -> Internal Antenna e -> External Antenna

17 2.3 AP (Access Point) Front View Back View Internal AP WEA302i / WEA303i Note: You cannot use a console cable longer than 10 meters for AP connection External AP WEA303e Status LED DC input Ethernet Port Console Port Reset Switch Interface Description Status LED Ethernet Port Console Port DC input Reset switch It indicates the status of WEA302i by the color of the LED It supports1000 BASE-T Gigabit Ethernet and PoE IEEE 802.3af It is used to check for the operating state of WEA302i or command by CLI It is used when power supplied from AC adaptor Reboot WEA302i

18 2.3 AP (Access Point) Note: For detailed information on AP hardware and Radiation patterns, please refer to the WLAN System Description document. (Chapter 6)

19 2.3 AP (Access Point) The new WEA 453e Outdoor Access Point

20 2.3 AP (Access Point) Outdoor AP with Dipole Antennas Outdoor AP with a Patch Antenna Please note that the External Antennas do not come with the Outdoor Access Point.

21 2.3 AP (Access Point) Model: WEA463e 5 GHz Antennas only ANT4 ANT5 ANT6 Ground Terminal ANT1 CONSOLE LAN ANT2 PoE_IN DC48V 2.4 GHz Antennas only ANT3

22 2.3 AP (Access Point) WEA 463E Features Outdoor Mesh Access Point Connects to the existing APC8050 or 8500 Supports scalable Mesh network topology Supports wireless bridge Backhauls LED to show the radio connectivity status Allows client access to the backhaul radio Auto path optimization for self-healing and self-configuration Alarm notification on the Mesh network (link, SNR, parent node change, etc.) Provides maximum 6 child AP per one Mesh node Provides maximum 19 Mesh AP per one Root AP Provides maximum 8 Hop (suggest 3 hop) 1 hop 652Mbps, 2 hop 306Mbps, 3 hop 193Mbps (8dBi Dipole Antenna, 80M / Lab.)

23 2.3 AP (Access Point) Items Functions Support Mesh Group configuring function General Support Mesh Network topology (secure/scalable) Support P2P(point-to-point) Wireless Bridging mode topology Support P2MP(point-to-multipoint) Wireless Bridging mode topology Operator can allow/disallow client access on backhaul Radio (option) Radio Operation DFS channel can be used in backhaul radio Operator can select channel of RAP backhaul radio User can see uplink radio status through LED notification MAP actively solicits neighbor MAP (request/response) MAP learns all of the available neighbors back to a RAP MAP determines which neighbor offers the best path Path Selection (Routing protocol) Path decisions are based on the link quality(snr) and the number of hops Support smoothing function(to remove moment-to-moment fluctuations) Support Loop Prevention Provide parent maintenance feature(continuously check parent status by sending/receiving neighbor request) Provide parent optimization and refresh feature (Optimize and refresh path by changing parent, Check every neighbor Continuously)

24 2.3 AP (Access Point) Items Functions MAC authentication is supported on the controller Security PSK/EAP Authentication is supported on the controller. AES encryption is supported Mesh access points can be internally authorized using a RADIUS server Operator can manage Mesh network using CLI (AP/APC) Operator can manage Mesh network using APC Web I/F Operator can manage Mesh network using Management server(wem) Operation Bridging statistics between mesh nodes is supported Security statistics between mesh nodes is supported Provide alarm notification on mesh network (Link SNR, Parent change) Operator can view parent-child relationship (the mesh network hierarchy) Operator can easily navigate mesh network Provide maximum 8 Hop (suggest 3 hop) Provide maximum 6 child AP per one Mesh node Performance Provide maximum 19 Mesh AP per one Root AP Multi Hop Mesh Backhaul: 1 hop 652Mbps, 2 hop 306Mbps, 3 hop 193Mbps (8dBi Dipole Antenna, 80M / Lab.) 1 Hop Mesh Backhaul: 400m 394Mbps, 900m 396Mbps (12dBi Patch Antenna, 80M / Outdoor)

25 2.3 AP (Access Point) Mesh AP (WEA 463E) Advantages of having a Mesh Network No Ethernet connection Idea sites are where Ethernet wall connections are lacking. Self Configuration Mesh networks are "self configuring;" the network automatically incorporates a new node into the existing structure without needing any adjustments by a network administrator. Self Healing Mesh networks are "self healing," since the network automatically finds the fastest and most reliable paths to send data, even if nodes are blocked or lose their signal.

26 2.3 AP (Access Point) WiFi Network APC AP AP AP Mesh Network MAP MAP APC RAP 26 MAP MAP

27 2.3 AP (Access Point) RAP (Root AP) Mesh AP with wired connection to APC. MAP (Mesh AP) AP with wireless connection through root AP to APC.

28 2.3 AP (Access Point) Parent Node (PN) Within 2 APs, PN is a RAP or nearest AP to RAP. Ex. C s PN is B, B s PN is A. Child Node (CN) Within 2 APs, CN is farther AP to RAP. CN chooses PN. A s CN is B, B s CN is C. Neighbor Node Any AP within the RF range of non-connecting APs. B s neighbor nodes are D and E. Hop Depth of wireless relay connection. B s hop count is 2. C s hop count is 3.

29 2.3 AP (Access Point) Recommended hop count is less than 3 Root AP 0 hop MAP 1 1 hops MAP 2 2 hops MAP 3 3 hops (Recommended) MAP 4 4 hops MAP 5 5 hops MAP 6 6 hops MAP 7 7 hops Map 8 8 hops (Maximum)

30 2.3 AP (Access Point) When the number of Hop increase, throughput decrease as 1/(Hop Count)

31 2.3 AP (Access Point) Max one Root AP + 19 Mesh APs (default 10) Root AP 1 Mesh AP 2 Mesh AP 3 Mesh AP 4 Mesh AP 5 Mesh AP 6 Mesh AP 7.. Mesh AP 10 Total Max. 20 APs

32 2.3 AP (Access Point) Max 6 children per node (AP) Root AP 1 (6 children) 1 hop 1. Mesh AP 1 (6 children) 2 hops 1. Mesh AP hops 2. Mesh AP hops 3. Mesh AP Mesh AP Mesh AP Mesh AP Mesh AP 2 (2 child) 1. Mesh AP Mesh AP Mesh AP 3 (1 child) 1. Mesh AP Mesh AP 4 1. Mesh AP Mesh AP 5 1. Mesh AP Mesh AP 6 1. Mesh AP 6.1 Max. 20 APs

33 2.3 AP (Access Point) Maximum SSID (WLAN) count is 14. Maximum general AP SSID count is16. Two are reserved for the backhaul radio. 5 GHz for Backhaul (by default) Recommended no station access 2.4 GHz for Station Access (by default) Backhaul radio can be changed to 2.4 GHz and access radios can be changed to 5 GHz.

34 2.3 AP (Access Point) Specifications WEA302i WEA303i WEA303e Standard a/b/g/n a/b/g/n a/b/g/n # of radio Dual Concurrent Radio Dual Concurrent Radio Dual Concurrent Radio Wireless Frequency 2.4 GHz, 5 GHz 2.4 GHz, 5 GHz 2.4 GHz, 5 GHz Antennas Internal Type Internal Type Internal/External Type MIMO 2 X 2 MIMO, 2 Spatial Streams 3 X 3 MIMO, 3 Spatial Streams 3 X 3 MIMO, 3 Spatial Streams PHY Rate 300 Mbps 450 Mbps 450 Mbps Network I/F 1 GE (RJ45), 1 Console (RJ45) 1 GE (RJ45), 1 Console (RJ45) 1 GE (RJ45), 1 Console (RJ45) H/W PoE 802.3af/802.3at 802.3af/802.3at 802.3af/802.3at Environment Class Indoor Indoor Indoor/Outdoor Dimension Diameter / Height 174 mm / 34.1 mm 174 mm / 34.1 mm 174 mm / 34.1 mm Weight 560 g 640 g 640 g Standard i, WPA/WPA i, WPA/WPA i, WPA/WPA2 Security Multi SSID Maximum 16 Maximum 16 Maximum 16 # of Multi VLAN over SSID Maximum 1,024 Maximum 1,024 Maximum 1,024 Encryption DTLS DTLS DTLS QoS Standard e e e WMM Yes Yes Yes Management Operation Controller Based Controller Based Controller Based Certification Wi-Fi Certified WPA/WPA2, WMM, WMM-PS WPA/WPA2, WMM, WMM-PS WPA/WPA2, WMM, WMM-PS KC Yes Yes Yes

35 2.3 AP (Access Point) Specifications WEA412i WEA403i Standard a/b/g/n/ac a/b/g/n/ac # of radio Dual Concurrent Radio Dual Concurrent Radio Wireless Frequency 2.4 GHz, 5 GHz 2.4 GHz, 5 GHz Antennas Internal Type Internal Type MIMO 2 X 2 MIMO, 2 Spatial Streams 3 X 3 MIMO, 3 Spatial Streams PHY Rate 867 Mbps 1.3 Gbps Network I/F 2 GE (RJ45), 1 Console (RJ45) 2 GE (RJ45), 1 Console (RJ45) H/W PoE 802.3af/802.3at 802.3af/802.3at Environment Class Indoor Indoor Dimension Diameter / Height 205 mm / 45 mm 206 mm / 45 mm Weight 820 g 920 g Standard i, WPA/WPA i, WPA/WPA2 Security Multi SSID Maximum 16 Maximum 16 # of Multi VLAN over SSID Maximum 1,024 Maximum 1,024 Encryption DTLS DTLS QoS Standard e e WMM Yes Yes Management Operation Controller Based Controller Based Certification Wi-Fi Certified WPA/WPA2, WMM, WMM-PS WPA/WPA2, WMM, WMM-PS KC Yes Yes

36 2.3 AP (Access Point) Specifications WEA453e WEA463e Standard a/b/g/n/ac a/b/g/n/ac # of radio Dual Concurrent Radio Dual Concurrent Radio Wireless Frequency 2.4GHz, 5GHz 2.4GHz, 5GHz Antennas External Type External Type MIMO 3x3 MIMO, 3 Spatial Streams 3x3 MIMO, 3 Spatial Streams PHY Rate 1.3Gbps 1.3Gbps Network I/F 2 GbE (RJ45), 1 Console (RJ45) 2 GbE (RJ45), 1 Console (RJ45) H/W PoE 802.3at 802.3at Environment Class IP66, IP67 IP66, IP67 Dimension Diameter / Height 267 x 184 x 58mm 267 x 184 x 58mm Weight 2.6Kg 2.8kg Standard i, WPA/WPA i, WPA/WPA2 Security QoS Management Certification Multi SSID Maximum 16 Maximum 16 # of Multi VLAN over SSID Maximum Maximum Encryption DTLS DTLS Standard e e WMM Yes Yes Operation Controlled Mode, Controlled Mode, Stand-alone Mode, Stand-alone Mode Mesh Mode Wi-Fi Certified WPA/WPA2, WMM, WMM-PS WPA/WPA2, WMM, WMM-PS KC Yes Yes

37 2.3 AP (Access Point) Specifications WEA504i WEA514i Standard a/b/g/n/ac a/b/g/n/ac # of radio Dual Concurrent Radio Dual Concurrent Radio Frequency 2.4GHz, 5GHz 2.4GHz, 5GHz Wireless Antennas Internal Type Internal Type 4x4 MIMO, 4 Spatial Streams, 4 4x4 MIMO, 4 Spatial Streams, 4 MIMO Multiuser MIMO Multiuser MIMO PHY Rate 1.7Gbps 1.7Gbps H/W Dimension Network I/F 2 GbE (RJ45), 1 Console (RJ45) 2 GbE (RJ45), 1 Console (RJ45) PoE 802.3at 802.3at Diameter / Height 205 x 45mm 205 x 45mm Weight 860g 840g Standard i, WPA/WPA i, WPA/WPA2 Security QoS Multi SSID Maximum 16 Maximum 16 # of Multi VLAN over SSID Maximum Maximum Encryption DTLS DTLS Standard e e WMM Yes Yes Management Operation Controlled Mode, Stand-alone Mode Controlled Mode, Stand-alone Mode Certification Wi-Fi Certified WPA/WPA2, WMM, WMM-PS WPA/WPA2, WMM, WMM-PS KC Yes Yes

38 2.3 AP (Access Point) Specifications mm Item Specification 2.4GHz (2,400~2,483.5MHz) Operating frequency 5GHz (5,150 ~ 5,350MHz, 5,725 ~ 5,825MHz) Radio Technology DSSS / OFDM Channel Bandwidth 20/40/80MHz BW RF Chain 3 3:3 (2.4G, 5G) RF Output Power 750mW (250mW/path) Operating Temperature -40 ~ 55 C Operating Humidity 5~100% Size 267 x 184 x 58mm Weight / Volume 2.8 kg / 2.8L Cooling Natural Environmental Class IP66 & IP67 Mounting Vertical installation: Pole Mount, Wall Mount Power Draw PoE W (802.3at) Adaptor 48V/1A (Option)

39 2.4 Wireless Enterprise Manager WEM is a server system which manages APCs, APs, Switches and stations. Category Monitor Configuration Operation Tools General Troubleshooting Reporting Alarms Descriptions. Real time alarm, traffic, resource usage and history. General status and detail information of APCs, APs, and Stations. AP and station location, Coverage from RF Map. Dashboard. Configuration of APC and AP including Template. Managing Login accounts with several privileges. Alarm setting, License management center. Signal strength and channel utilization by spectrum analyzer. Interference Detector. Traffic analyzing by Packet capture through wireless and wired. Monitoring for WEM status ( resources, process, database, etc) Ease to analyze root cause of troubles step by step Reporting Resource, station, AP, Rogue AP, Interferer, Traffic usage each Interface Quick responses from trouble by real time alarm

40 2.4 Wireless Enterprise Manager http(80), snmp(161), trap(11162), ftp(21), telnet(23) SNMP WEM Client 15000~15030 HTTP(s) Switch WEC WEC WEC APC APC APC APs... APs... APs...

41 2.4 Wireless Enterprise Manager Specifications for a Server Level Minimum Server Spec. Client PC Spec. Managed Devices Descriptions OS : Linux(Red Hat Enterprise ES 5.5 or higher) DATABASE : MySQL 5.5 Low-End Server 250 Devices (AP, APC, Switch) Intel Xeon E GHz, 16GB RAM, 300GB HDD Mid-Range Server 1500 Devices (AP, APC, Switch) Intel Xeon E GHz, 32GB RAM, 500GB HDD High-End Server 3000 Devices (AP, APC, Switch) Intel Xeon X GHz, 32GB RAM, 1TB HDD CPU : 3.0 GHz (Pentium Core2 duo processor) RAM : 2GBytes or higher Browser : Internet Explorer 8.0, 9.0, 10.0 JRE : 1.6.0_20 Flash Player Samsung Wireless Enterprise Controllers Samsung Access Points Samsung ies4200 Series Switches

42 2.4 Wireless Enterprise Manager Samsung will be holding a separate course for WEM training. Please contact customer service to schedule a date to attend the class.

43 3. Installation 3. Installation 3.1 Hardware Mounting APC AP

44 3.1.1 Installation of APC APC installation scenarios Installation - 4 Types 1. 4-Post Rack 2. 2-Post Rack (Flush-Mount) Not Recommended 3. 2-Post Rack (Mid-Mount) 4. On a Desktop

45 3.1.2 Installation AP (1) AP installation on suspended ceiling grids 1. Assembly bracket 2. Mount Bracket T-bar Place a ceiling bracket by making its convex part upward and align a ceiling clip to the groove of the ceiling bracket and insert the clip to the position that is shown in the figure. After inserting the ceiling clip that is fixed with a screw (A in the figure) to the T-bar, push and move the ceiling clip (B in the figure) on the other side according to the T-bar size. 3. Installation on a ceiling After tightening screw for the ceiling clip, draw out a LAN cable and connect it to the Ethernet port and fix the product by turning it clockwise.

46 3.1.2 Installation AP (2) AP wall mount installation Insert 4 plastic anchors into hole using a hammer

47 4. Basic Configuration Section 4. Basic Installation Section 4.1 Site Information 4.2 Connecting to the APC 4.3 Basic Installation Wizard 4.4 Network Setup / VLANs 4.5 Software Management 4.6 License Setup 4.7 General Configuration 4.8 Configure Radios 4.9 Configure WLANs 4.10 Set Up Access Points 4.11 AP Groups

48 4.1 Site Information Before configuration of the AP Controller and APs, specific information should be collected from the customer. Obtain the WLAN Pre-Installation Checklist. Provide this to file to your customer so they can fill in the required information. For classroom setup, you have been given a custom made sheet just for training purposes only. Please use the Student_Site_Info form given by the instructor

49 4.2 Connecting to APC 4.2 Connecting to APC WEC8050 Connection WEC8500 Connection

50 4.2.1 WEC8050 Connection Note: You must always change the default password first via CLI using console port before getting into the GUI. Console Connection settings Also, the WEC8050 does not have a default management port. We will setup interface ge4 as our management port

51 4.2.1 WEC8050 Connection Connecting to APC using CLI is as follows: Direct connection to the system console port When the booting of APC is completed, log into the system as follows: 1. For the first connection, log in using ID: samsung and Password: samsung. USERNAME : samsung PASSWORD : samsung THIS IS YOUR FIRST LOGIN AFTER USER ACCOUNT HAS BEEN CREATED. YOU MUST CHANGE YOUR PASSWORD ENTER LOGIN PASSWORD : samsung ENTER NEW PASSWORD : ******** CONFIRM NEW PASSWORD : ******** PASSWORD SUCCESSFULLY CHANGED WEC8050 # 2. After the first login, you must change the password. Default Credentials: ID: samsung Password: samsung Password Restrictions: Password must be any combination of alphabetic, numeric and special character. Password length: 8 ~ 25

52 4.2.1 WEC8050 Connection Connect your LAN cable from PC to the ge4 port and browse to the IP address you set in the previous step. Login Screen Enter default login credentials. The recommended browser for GUI is Internet Explorer.

53 4.3 Basic Installation Wizard Once logged in on the GUI, you will be forced to change the default password. Password Restrictions: Password must be any combination of alphabetic, numeric and special character. Password length: 8 ~ 25

54 4.2.2 WEC8500 Connection If you want to use network for management, then you must first change the management port IP to a different network via console access The MGMT port is going to give you access to the GUI. After you have configure your interfaces, you will no longer need to access through the MGMT port Console Connection settings You will need to set a static IP on your PC to connect

55 4.2.2 WEC8500 Connection Connecting to APC using CLI is as follows: Direct connection to the system console port When the booting of APC is completed, log into the system as follows: 1. For the first connection, log in using ID: samsung and Password: samsung. USERNAME : samsung PASSWORD : samsung THIS IS YOUR FIRST LOGIN AFTER USER ACCOUNT HAS BEEN CREATED. YOU MUST CHANGE YOUR PASSWORD ENTER LOGIN PASSWORD : samsung ENTER NEW PASSWORD : ******** CONFIRM NEW PASSWORD : ******** PASSWORD SUCCESSFULLY CHANGED WEC8500 # 2. After the first login, you must change the password. Default Credentials: ID: samsung Password: samsung Password Restrictions: Password must be any combination of alphabetic, numeric and special character. Password length: 8 ~ 25

56 4.2.1 WEC8050 Connection Connect your LAN cable from PC to the ge4 port and browse to the IP address you set in the previous step. Login Screen Enter default login credentials. The recommended browser for GUI is Internet Explorer.

57 4.3 Basic Installation Wizard Once logged in on the GUI, you will be forced to change the default password. Password Restrictions: Password must be any combination of alphabetic, numeric and special character. Password length: 8 ~ 25

58 Connecting to APC Lab 1 Lab 1 - Connect to the Management Port of the APC 1. Connect to the Management Port of the APC 2. Login using default login credentials: username: samsung password: samsung 3. Change the default password.

59 4.3 Basic Installation Wizard Once you login, you will reach the Basic Installation Wizard screen. We will now go through the 11 steps of the wizard to have a basic setup.

60 4.3 Basic Installation Wizard Radios and Auto Registration will be temporarily disabled during the Configuration Wizard. They will be enabled again after the wizard.

61 4.3 Basic Installation Wizard Setup your Controller Name and Location, Country Code to North America and System time. Once set, hit Apply. You can use PC Time if your PC is on the same Time Zone as your Customer. Once you click on it, the Manual Time fields get auto-populated with your PC time.

62 4.3 Basic Installation Wizard Next, we need to add Interfaces. We will first create our AP Management Interface. We want the AP s to use this VLAN to register to the APC You will want to set the port used as a Trunk port. This port will uplink to your Layer 2 device. PLEASE NOTE: Your layer2 device port should be setup as a trunk port with the correct VLANs tagged

63 4.3 Basic Installation Wizard This IP address will be used to access the APC. For the Management VLAN, this will also be the CAPWAP IP address DHCP Setup: For now, please check this box. We will later setup DHCP for the AP-Management network. Next, hit Apply.

64 4.3 Basic Installation Wizard The CAPWAP IP Address is going to be the address of your AP Management VLAN. APs will use this address to register to the APC We can see our Interface that we created listed here. Since we want to make this interface our Management interface, we need to check its box and click on AP Management. By doing this, the interface IP address of becomes my CAPWAP IP address.

65 4.3 Basic Installation Wizard Next, hit add to create our remaining two interfaces. PLEASE NOTE: For Company and Guest interface, use External DHCP service by unchecking Global use and pointing to a External DHCP Server IP address. (Training Purpose only)

66 4.3 Basic Installation Wizard We can see all our 3 interfaces listed. We can also see that our AP-Management interface (vlan1.72) is marked with (m) sign indicating that it is a Management Interface.

67 4.3 Basic Installation Wizard Every Interface needs to belong to a Interface Group. Hit Apply! Here you will name your Group and give it a Group Description Hit Apply.

68 4.3 Basic Installation Wizard Select what VLAN or VLANS should belong to the group Use the ^ arrow sign to move the VLANS to the selected side.

69 4.3 Basic Installation Wizard Hit Apply to create this Interface Group and then back to create the remaining two Interface Groups.

70 4.3 Basic Installation Wizard Next, create remaining two Interface Groups and add the corresponding interfaces to their respective Interface Groups. Once created, your Interface Group list should look similar to this.

71 4.3 Basic Installation Wizard We need to create a static route to our default gateway for all AP- Management and untagged traffic Note: This must be added and routable in order to use remote AP s

72 4.3 Basic Installation Wizard Note: Profile name and SSID cannot be changed once applied. Next, we will create our WLANs using the Site Information sheet. We will add security to our WLAN be selecting the security type as WPA+WPA2. Set Auth Key Mgmt as PSK and enter your PSK key that will be used to access this WLAN. Hit Apply.

73 4.3 Basic Installation Wizard Hit Add to create the second WLAN. You should be having two WLANs as follows in your WLANs list.

74 4.3 Basic Installation Wizard Choose Proxy or Relay Global Parameter should be set to if you are planning on using the internal DHCP server built into the APC. Hit Apply.

75 4.3 Basic Installation Wizard You will now be asked to add the internal DHCP pool. Hit OK. We will now be creating the Internal DHCP pool for our AP-Management network.

76 4.3 Basic Installation Wizard Fill in your DHCP Pool information for your Internal DHCP server and hit Apply. Only when you hit Apply here, you get to configure advanced settings for your Internal DHCP server such as Option 138 IP address and DHCP Pool range.

77 4.3 Basic Installation Wizard If you using the Internal DHCP for your APC and APs, then you will need to add the IP address of your APC into Option 138. Remember the APs will use this Option 138 IP address to register to the APC. Input your CAPWAP IP address and hit Apply. Define the range of IP addresses for your DHCP pool and hit add.

78 4.3 Basic Installation Wizard Lastly, hit Apply.

79 4.3 Basic Installation Wizard Enable the DHCP service and hit Apply.

80 4.3 Basic Installation Wizard 1. Enable the DNS Client service. 2. Enter the DNS server IP address. 3. Hit Apply.

81 4.3 Basic Installation Wizard Over here, we are telling our APC where to get the time from. 1. Input your NTP server Domain Name and hit Add. 2. Enable the NTP Client service. 3. Hit Apply.

82 4.3 Basic Installation Wizard Disable secure mode and hit apply. You can use secure mode if you want to allow only specific IP addresses for GUI and Telnet access.

83 4.3 Basic Installation Wizard The Basic Installation Wizard is now complete. Simply hit OK to go to the GUI home screen.

84 4.3 Basic Installation Wizard Once you have the Secure mode disabled during the wizard, you will get a notification message requesting you to enable it. You can hit Cancel and go ahead unless you want to enable Secure mode.

85 4.3 Basic Installation Wizard Main Menus across the top Sub Menus on the left

86 4.3 Basic Installation Wizard Note: We will now review through all the steps we covered in the Basic Installation Wizard by navigating to the appropriate section in the GUI. In this way, we would know where to go in the GUI to make any future changes in our configuration. We will also look at some more additional setup.

87 4.4 Network Setup & VLANs 4.4 Network Setup & VLANs Setup Interfaces/VLANs Setup Interface Groups CAPWAP IP Address Static Route ARP Table System Name

88 4.4.1 Setup Interfaces Configuration > Controller > General Before adding Interfaces, make sure AP Registration is enabled. If not, select enable and hit Apply.

89 4.4.1 Setup Interfaces Configuration > Controller > Interfaces Click Add to setup your VLAN

90 4.4.1 Setup Interfaces Be sure to enable the VLAN PLEASE NOTE: Your layer2 device port should be setup as a trunk port with the correct VLANs tagged You will want to set the port used as a Trunk port This port will uplink to your Layer 2 device

91 4.4.1 Setup Interfaces Put in the Interface IP address and DHCP information just like how we did during the wizard.

92 4.4.1 Setup Interfaces Make sure to Hit Apply after you have setup your interface!

93 4.4.2 Setup Interface Groups Configuration > Controller > Interface Groups Every Interface needs to belong to a Interface Group Click Add to get started

94 4.4.2 Setup Interface Groups Hit Apply! Here you will name your Group Then select what VLAN or VLANS should belong to the group Use the to move the VLANS to the selected side

95 4.4.3 CAPWAP IP Address Configuration > Controller > General The CAPWAP IP Address is going to be the address of your AP Management VLAN APs will use this address to register to the APC Hit Apply Hit Select Interface

96 4.4.4 Static Route Configuration > Controller > Network > Static Route We need to create a static route for all AP-Management and untagged traffic This must be added and routable in order to use remote AP s

97 4.4.4 Static Route Entering in the correct information here

98 4.4.6 System Name Administration > SNMP > System Info Enter the Name and Location of your APC and hit Apply.

99 Setup Interfaces Lab 2 Lab 2 - Create two new Interface/VLANs (Company and Guest) that will be used in your WLAN service 1. Go to Configuration Controller Interfaces Add 2. Create a VLAN with the following parameters 3. Interface Name CompanyX were x is your student number 4. For the CompanyX we will use VLAN ID XX See Student Info 5. Enable your VLAN and add it to interface "ge1" in Trunk" mode 6. Configure the VLAN IP address to x.10/24 7. Under the DHCP section uncheck Global Use and add the parameters per DHCP on the See Student Info 8. Primary DHCP Server = x.1 9. Apply 10. Repeat steps 1 8 for the Interface/VLAN Guestxx on the See Student Info

100 Interface Groups Lab 3 Lab 3 - Create two new Interface Groups that will be used with your Company and Guest VLANs 1. Go to Configuration Controller Interface Groups Add 2. Define your interface group CompanyX were x is your student number 3. Add your newly created VLAN to the create interface group and apply 4. Repeat steps 1 2 for the Guest Interface/VLAN

101 SAVE CONFIGURATION SAVE CONFIGURATION

102 4.5 Software Management 4.5 Software Management Verify Installed Version Activate FTP/SFTP Upload Software

103 Current Released Software WEC8500 WEC8050 WEA302i WEA303i WEA303e 4.X 4.X 4.X 4.X 4.X WEA403i WEA412i WEA453e WEA463e WEA504i WEA514i 4.X 4.X 4.X 4.X 4.X 4.X

104 4.5.1 Verify Installed Version Click on Monitor to go to the Monitor Screen that will show the current software version in use. In your case, you should see 4.2.7R

105 4.5.2 Activate FTP/SFTP Administration > FTP-SFTP Enable both FTP and SFTP for software upgrades You can also view/set different ports in Configuration>Controller> General

106 4.5.2 Activate Telnet Telnet service is disabled by default. Go to Administration>Telnet-SSH and enable it.

107 4.5.3 Uploading APC Software Administration > File Management > APC-Local PC Note: wec is the APC software The package folder is for APC software

108 4.5.3 Uploading APC Software Uploading APC software Hit upload and choose the file to upload After you have chosen the file, press upload here

109 4.5.3 Uploading AP Software Uploading AP software Note: wea is the AP software The ap folder is for AP software

110 4.5.3 Uploading AP Software Uploading AP software Note: wea is the AP software Hit upload and choose the file to upload After you have chosen the file, press upload here

111 Software Upload on APC & AP Lab 4 Lab 4 - Enable FTP and STFP on the APC and upload software on APC and AP. 1. Go to Administration FTP-SFTP 2. Set both to Enable 3. Hit Apply 4. (APC Software) Go to Administration -> File Management -> APC-Local PC 5. Under the disk folder, find the package folder and hit upload 6. Choose the APC software and hit upload 7. (AP Software) Go to Administration -> File Management -> APC-Local PC 8. Find the AP folder under disk -> package and then hit upload 9. Choose the AP software and hit upload

112 4.6 License Setup APC 8500 comes by default with a license for 2 APs APC 8050 comes by default with a license for 5 APs You will need to add your purchased license before moving forward

113 4.6 License Setup 4.6 License Setup Activation Key File Verify License Installed

114 4.6.1 Activation Key File Go to Administration>License to upload the license file you received. Hit Activation.

115 4.6.1 Activation Key File Here you can check what features and how many Aps your License key supports.

116 4.7 General Configuration 4.7 General Configuration DNS Server NTP Server (Internal / External) DHCP Server (Internal / External) APC Country Code User Accounts Radius Authentication Adding a RADIUS Server

117 4.7.1 DNS Server Configuration > DNS Click Enable Enter IP address of DNS Server

118 4.7.2 NTP: APC There are two ways of setting NTP on APC. 1. Internal NTP: APC acts as NTP server 2. External NTP: APC acts as NTP client

119 4.7.2 NTP: APC Internal NTP Administration > Time > Manual Time Set Select Hours and Minutes You can use PC Time if your PC is on the same Time Zone as your Customer Select Local Time Zone

120 4.7.2 NTP: APC Internal NTP Configuration > NTP > APC If you want the APC to act as a NTP server enable that here Enable the Server and hit Apply.

121 4.7.2 NTP: APC External NTP To add an External NTP server start by adding a remote server

122 4.7.2 NTP: APC External NTP If using IP setup like this OR If using domain setup like this

123 4.7.2 NTP: APC External NTP Enable the Client

124 4.7.2 NTP: AP Configuration > NTP > AP Select mode as NTP Then hit Apply 3 2 Input the CAPWAP IP address Then hit Add 1 Here we will tell the AP s where to get their time from by adding the APC as the NTP server

125 Time Set Lab 6 Lab 6 - Manually set the time on your APC and Enable the NTP service for the APC and APs 1. Go to Administration Time Manual Time Set 2. Select PC Time Hit Apply 3. Set Time Zone to CST Hit Apply 4. Go to Configuration NTP APC 5. Set NTP Server to Enable Hit Apply 6. Go to Configuration NTP AP 7. Input CAPWAP IP address 8. Hit Add

126 4.7.3 DHCP Server There are two ways for clients to get an IP address. INTERNAL use the DHCP server in the APC OR EXTERNAL - use a remote DHCP server The following slides will show how to do both Please Note: When you connect AP s they will have to be on the Management VLAN, the DHCP server for that VLAN must have a user option added. Example = user_option 138 ipaddress (CAPWAP IP) active

127 4.7.3 DHCP Server (Internal) We showed you this option back in under interfaces. When you check use Global Use, this will allow you to use the Global DHCP for Internal DHCP

128 4.7.3 DHCP Server (Internal) Configuration > DHCP > Proxy Choose Proxy or Relay Global Parameter should be set to if you are planning on using the internal DHCP server built into the APC.

129 4.7.3 DHCP Server (Internal) Configuration > DHCP > Internal Server Lets build our Internal DHCP pool

130 4.7.3 DHCP Server (Internal) Enabling the Internal DHCP Server Fill in your DHCP Pool information and hit Apply.

131 4.7.3 DHCP Server (Internal) Remember the APs will use this Option 138 to register to the APC A Range must be defined

132 4.7.3 DHCP Server (Internal) Enabling the Internal DHCP Server Enable the DHCP service and hit Apply.

133 DHCP Server (Internal) Lab 7 Lab 7 - Setup the DHCP Pool for the AP_MGMT Interface 1. Go to Configuration DHCP Proxy 2. Set Primary Server to Hit Apply 3. Go to Configuration DHCP Internal Server 4. Click Add Input DHCP pool info See Student Info 5. Hit Apply 6. Set Option 138 to the CAPWAP IP of xx.10 Hit Add 7. Set the Range to xx xx Hit Add 9. Set the DHCP Server Service to Enable Hit Apply

134 4.7.3 DHCP Server (External) Please Note If you are using a remote/external DHCP server, you must setup a relay rule on your DHCP server to the interface IP address of the WLAN

135 4.7.3 DHCP Server (External) External DHCP Choose Proxy or Relay Configuration > DHCP > Proxy/Relay Put external DHCP server IP

136 4.7.3 DHCP Server (External) External DHCP There are two more optional locations you specify the IP address of your DHCP server. Location #1 = Interfaces Section Interface Setup Uncheck this box and Enter the IP of your DHCP Server

137 4.7.3 DHCP Server (External) External DHCP There are two more optional locations you specify the IP address of your DHCP server. Location #2 = WLAN Section Here we can set the WLAN to use a remote DHCP server Hit Apply for this section!

138 4.7.4 APC Country Code Configuration > Radio > a/n/ac or b/g/n > General 1 2 We must disable the Radios in order to change the Country Code to North America

139 4.7.4 APC Country Code Configuration > Controller > Country Select your Country

140 APC Country Code Lab 8 Lab 8 - Change the country code on your APC 1. Go to Configuration Radio a/n General 2. Set service to Disable Hit Apply 3. Go to Configuration Radio b/g/n General 4. Set service to Disable Hit Apply 5. Go to Configuration Controller Country 6. Change the Country Code to United States 7. Hit Apply 8. Go back and enable the Radio Service

141 4.7.5 Set up User Accounts Let us go to Administration > Local Management Users > APC and hit Add to add a user

142 4.7.5 Set up User Accounts Note: User Names & Passwords are case sensitive. Password Restrictions: Password must be any combination of alphabetic, numeric and special character. Password length: 8 ~ 25 Enter ID & Password Select user level

143 4.7.5 Set up User Accounts Logout and log back in as your created ID Please Note: Only one ID can be used at a time. If sharing the APC, you must create a login for each person

144 4.5.5 Set up User Accounts Changing Password: Via CLI Use the password command as shown below. Next, type your current password. Type your new password. Confirm your new password.

145 4.7.5 Set up User Accounts Changing Password: Via GUI Click on the account username on top right corner of your screen Enter your current and new password and hit Apply. Password Restrictions: Password must be any combination of alphabetic, numeric and special character. Password length: 8 ~ 25

146 4.7.5 Set up User Accounts Account Levels 1. Administrator: Administrator privilege that allows to execute all the commands. 2. Operator: Can change system configuration. 3. Monitor: Can retrieve system status. 4. Lobby Ambassador: This user can create accounts for Guest Access

147 Create a User Account Lab 9 Lab 9 - Create a User Account for yourself 1. Go to Administration Local Management Users 2. Click Add and create a user account for yourself 3. Level should be equal to Administrator 4. Save Configuration 5. Logout of the APC 6. Login with your new User Account

148 4.7.6 Radius Authentication Radius Authentication

149 4.7.6 Radius Authentication The Flow of Authentication of WLAN Station

150 4.7.7 Adding a RADIUS Server Configuration > Security > AAA > RADIUS Add the RADIUS Server here

151 4.7.7 Adding a RADIUS Server Select Type Enter IP address Enter Shared Secret (password) and confirm Note: The shared secret should match the shared secret on the RADIUS server

152 4.7.7 Adding a RADIUS Server Here you can determine the type of Radius Please note the default ports for AUTH and ACCT

153 4.8 Radio Resource Management 4.8 Radio Resource Management Setup and Enable a/b/g/n/ac Delayed Channel Change Coverage Hole Detection Control a/b/g/n/ac MCS rate

154 4.8 Radio Resource Management Purpose RRM performs automatic setup function of channel and Tx Power for the Access Points. RRM is functionally divided into Dynamic Channel Selection (DCS), Dynamic Power control (DPC), and Coverage Hole Detection and Control (CHDC). The DCS automatically sets the channels of the APs. The DPC automatically sets the Tx Power of the AP. The CHDC adjusts the Tx Power when Coverage Hole occurs.

155 4.8 Radio Resource Management Example of RRM DPC(Dynamic Power Control) RSSI(3 rd ) RSSI(Threshold) >= 3dBm * RSSI(3 rd ) : 3 rd strongest RSSI of adjacent APs * RSSI(Threshold) : RSSI Threshold (default : -70dBm) -60dBm -60dBm -60dBm -78dBm AP -63dBm -78dBm AP -63dBm -78dBm AP -63dBm -74dBm (3 rd Strongest RSSI) -68dBm (3 rd Strongest RSSI) -65dBm (3 rd Strongest RSSI) AP will increase 3dBm AP will not change TxPower AP will decrease 3dBm

156 4.8.1 Setup and Enable a/b/g/n/ac Enabling RRM 1 Configuration > Radio > a/n/ac or b/g/n > RRM 2 Enabling RRM 1 First you will need to enable RRM for b/g/n 2

157 4.8.1 Setup and Enable a/b/g/n/ac Enabling Dynamic TX Power Control 1 Adjusting Power 2 TX Power Range: 3 ~ 30 (Default)

158 4.8.1 Setup and Enable a/b/g/n/ac Enabling Dynamic Channel Selection (802.11a/n/ac) Select what channels available for use

159 4.8.1 Setup and Enable a/b/g/n/ac Enabling Dynamic Channel Selection (802.11b/g/n) Select what channels available for use

160 4.8.2 Delayed Channel Change Here we can setup Delayed Channel Change After the Radio scans it will determine the best channel to use from the list of channels below With this Enabled, we can determine when the Radio is allowed to switch channels

161 4.8.3 Coverage Hole Detection Control 1 2

162 a/b/g/n/ac MCS rate To set MCS rate, use Configuration > Radio checkbox.

163 Check RRM Setup Lab 10 Lab 10 - Verify that the RRM is Enabled for a/n/ac AND b/g/n 1. Go to Configuration Radio a/n/ac RRM 2. Check that the following are set to Enable Radio Resource Management Dynamic TX Power Control Dynamic Channel Selection Delayed Channel Change (Also select the channels and set the Anchor start and end time) Coverage Hole Detection Control 3. If not, set to Enable and hit Apply for each section 4. Repeat steps 1 3 for b/g/n 5. Save Configuration

164 4.9 Configure WLANs 4.9 Configure WLANs Creating a WLAN General Options Security Setup Advanced Options Selecting Radius Server Enabling the WLAN

165 4.9.1 Creating a WLAN Configuration > WLANs > WLAN 1 Select Add Note: By default, if your WLAN ID is less than or equal to 16, the WLAN is automatically added to the default AP group. But, if the WLAN ID is greater than 16, the WLAN is not automatically added to the default AP group. So, it won t be broadcasted. If you wish to broadcast this WLAN, you must manually add that WLAN in the AP group. This is a security feature. AP Groups will be discussed later on.

166 4.9.1 Creating a WLAN Note: Profile name and SSID cannot be changed once applied 3 2 Set Profile name and SSID. Select the interface group that belongs to this WLAN You will be asked to enter your GUI password for security.

167 4.9.1 Creating a WLAN Choose your type of Radio Area 4

168 4.9.1 Creating a WLAN Click here to open options for this WLAN You can see here that we still need to setup our security policies After do so, we can come back on enable the admin status

169 4.9.2 General Options Hit Apply if any changes made If needed you can change your radio area setting here. Choose enable to hide the SSID from being broadcasted. Enable AAA OVERRIDE if you are using RADIUS authentication.

170 4.9.3 Security Setup Choose your Security Type Fill out your security settings. Make sure WPA2 is selected with CCMP and hit apply Note: CCMP is Samsung s recommended encryption type WLAN. If you want to use RADIUS Authentication, set Auth Key MGMT field as 802.1x

171 4.9.5 Selecting Radius Server If you have chosen to use a radius server for connection, here is where you would select that radius server added earlier for this WLAN. Hit Apply when your done!

172 4.9.4 Advanced Options Location #2: Advanced tab Here we can set the WLAN to use a remote DHCP server Please note: If you are using an external DHCP server, you must setup a relay rule on your DHCP server to the interface IP of this WLAN If using 2.4GHz/5GHz, you can determine here what the preferred connection should be. Hit Apply once selected for this section

173 4.9.6 Enabling the WLAN Hit Enable Check the WLAN Type in your GUI password

174 Setting up WLANs Lab 11 Lab 11 (1/2) Setup a second WLAN called Company_X0 See Student Info 1. Go to Configuration WLANs WLANs 2. Click Add and fill in the following according to the Student Info 1. Profile Name 2. SSID 3. Interface Group 4. Radio Area 5. Guest Service 3. Hit Apply 4. Go back to the Company WLAN 5. Go to the security tab and setup the L2 Security Type See Student Info 6. Hit Apply

175 Setting up WLANs Lab 11 Lab 11 (2/2) Setup a second WLAN called guest_x1 See Student Info 1. Go to Configuration WLANs WLANs 2. Click Add and fill in the following according to the Student Info 1. Profile Name 2. SSID 3. Interface Group 4. Radio Area 5. Guest Service 3. Hit Apply 4. Go back to the guest WLAN 5. Go to the security tab and setup the L2 Security Type See Student Info 6. Hit Apply 7. Go to Configuration WLANs WLANs 8. Check all WLANs Enable WLAN

176 4.10 Set Up Access Points 4.10 Set Up Access Points Connect all APs to the network Check List of Access Points Configure Access Points Hard setting a channel Advanced Settings Mesh AP Configuration

177 Connect APs to Network At this point in the WLAN configuration the LED on the Access Points will go through the following sequence as soon as they are plugged in. 1. System Start > Steady White LED 2. Initializing the AP > Steady Blue LED 3. Provisioning > Repeat Red > Green Make sure all of the APs are plugged in and connected to the switch ports with the Management VLAN designated in the APC setup.

178 Connect the APs Lab 12 Lab 12 - Connect the Aps to the PoE Switch 1. Plug in the APs to a port in this range Go to Configuration Access Points 3. Confirm that all APs show in the table

179 Connect APs to Network Status Description LED System Start White Initial LED status Provisioning Blue Red Repeating red and green Blinking green Device reset and diagnostic test in progress Booting failure (device reset failure) Connecting APC (network link normal) Connecting CAPWAP (APC server connection status normal) Normal Operations Green No wireless UE connected Blue Wireless UE connected Upgrade Blinking blue Upgrading software Failure Blinking red Network connection failure (physical) Blinking orange Blinking violet Blinking bluish green Repeating Red and Blue IP address conflict Dynamic IP address allocation failure Network connection failure (logical) Wireless interface failure, sniffing state

180 List of Access Points All Access Points that are plugged in and registered will show up in Configuration > Access Points.

181 Configure Access Points To configure an AP, click on the AP Profile Name

182 Configure Access Points 1 3 Enter or change the AP name 2 AP Mode // Default: General AP

183 Hard setting a channel Here you can hard set a channel that you would like this AP to use 1 Select Enable after picking the channel 2 Here you can hard set a channel that you would like this AP to use 1 Select Enable after picking the channel 2

184 Advanced Settings Hit Apply 2 1 Here is where you can enable the ability to telnet, SSH or console access into a AP. When AP gets registered, all types of access get disabled for security reasons. Here you can turn off the LED lights on your AP during a set time

185 Advanced Settings Hit Apply 2 If you have set the country code on the APC, it will carry over to the AP once they have connected to the APC Set the correct time zone based on your location. 1

186 Mesh AP Configuration

187 Mesh AP Configuration APC configuration Use the software version that support Mesh AP Enable repeater service Create Mesh AP group Connect a general AP then change it to root AP Connect Mesh AP wirelessly Root AP configuration Root AP is the AP with wired connection back to APC All WEA463 AP come with default Mesh AP mode Require to use serial cable to connect to the AP console port to change it to the local AP mode Mesh AP configuration Mesh AP is the AP without wired connection back to APC. Auto connect to root AP wirelessly upon power up 187

188 Mesh AP Configuration 1. Enable Repeater feature 1. Configuration Controller Repeater Service Service 188

189 Mesh AP Configuration Create Mesh AP group Configuration AP Groups Add that is same as normal AP group creation. The Mesh check box must be checked. 189

190 Mesh AP Configuration Mesh AP Group Configuration Configuration AP Groups select Group Mesh Enable to allow Mesh AP connection and disable after finished Enable to allow station access for backhaul radio if needed Enable to allow bridge service on the AP Ethernet port if needed 190

191 Mesh AP Configuration Configure security for the backhaul radio Configuration Controller Repeater Service Security 191

192 Mesh AP Configuration Root AP Configuration Overview Root AP is the AP that connects to the APC via wired. It is the top node in the mesh network. One mesh group can have multiple root APs. Root AP Configuration: You will need to use serial port to connect to the console port of the Mesh AP to change the AP mode to local (general) AP because all Mesh AP come with default Mesh AP mode operating. APC Configuration: After this AP connected to the APC as a general AP, you will need to change its mode to the root AP mode. 192

193 Mesh AP Configuration Root AP Configuration Connecting to AP Use serial port connection to the console port of AP with baud rate and no Flow Control id/pw: root/sweap12~ Change Mesh AP mode to local AP AP# system apmode local Reboot AP AP# system reboot Optional To check current AP operating mode AP# show system apmode AP Mode: Local 193

194 Mesh AP Configuration Root AP Configuration Add AP to the Mesh Group Add this registered AP to the Mesh group. Configuration AP Groups Select Group APs 194

195 Mesh AP Configuration Root AP Configuration Change mode to Root AP Change it to the root AP. Configuration Access Points General AP Mode 195

196 Mesh AP Configuration Mesh AP can be automatically registered to the APC through the Root AP. The Automatic Access Allowed must be enabled in the APC. Configuration AP Groups Select Group Mesh Automatic Access Allowed When powering up a Mesh AP, it will auto search for a Root AP wirelessly and receive the mesh configuration from the APC. The Mesh AP will reboot by itself to become operational. 196

197 Mesh AP Configuration You can manually connect the Mesh AP to a root AP in a Mesh group. Optional Assuming the mesh group name is Mesh _West, AP# system apgroupname Mesh_West Assuimg APC IP address is AP# config capwap apcip Reboot AP AP# system reboot Make sure AP mode is Mesh AP#show system apmode AP Mode: Mesh If it is not, change it to Mesh mode AP#system apmode relay To check the mesh group name AP# show system apgroupname AP Group Name: Mesh_Group 197

198 Mesh AP Operations 198

199 Status LED Root AP uses Status LED only. Backhaul LED is not used and remains off. Operation LED Status System Booting White On The first status (booting) Blue On Device initializing & testing Red On Booting fail (Device initialization fail) Provisioning Red, Green, Off Repetition APC Connecting (Normal Network Link) Green Blink CAPWAP Link Connecting (Normal APC server connection) Normal Green On If there is no connected station Blue On If there is connected station Upgrade Blue Blink Progressing software upgrade Service Failure Red Blink Physical error occurred on network connection Yellow Blink Duplicate IP address Purple Blink Assign Dynamic IP address fail Cyan Blink Logical error occurred on network connection Red, Blue, Off Repetition Problem occurred on Wireless interface 199

200 Backhaul LED Used by Mesh AP only LED Connection Ready Connection Complete Backhaul LED Color Red White Green Blue White LED On Stuatus and description If connected with a parent AP, LED blinks red, white, green or bl ue according to backhaul signal strength. (Backhaul signal stren gth: red < white < green < blue) RSSI signal strength RSSI <= -72 dbm RSSI <= -67 dbm RSSI <= -61 dbm RSSI >= -60 dbm 200

201 Mesh AP Operation Overview Mesh AP in the Mesh network will perform the following steps to optimize the operations. Discovery Path selection Association Share information with APC Path optimization 201

202 Discovery Process to Compose the Neighboring List Active discovery If there is no PN or CN, it will active scan on all channels of the channel list. It will scan 5 times for all channels to compose a neighbor list. 40 ms scan for each channel or 200 ms for DFS channels. Update the neighbor list Update the RSSI (Radio Signal Strength Indication) and WMB (Wireless Mesh Backhaul ID) neighbor table for the exiting one. Add new ones and delete the old ones. Passive discovery If there is a PN or a CN which has access to RAP, it will stay on the same channel and not scan all channels. 202

203 Path Selection If there are several nodes to access, Select the node with the same WMBID, or If there is no same WMBID, select the one with diagnostic mode connection enabled. If more than one, select the best node by calculating the path metric Allow to add new node Current hop count less than max. count (8) Current number of CN less than max. CN (6) Node can calculate the link metric WMB is the mesh network consist with one RAP and several MAPs. WMBID is the identification for a WMB. Diagnostic mode allows new node be added with different WMBID. 203

204 Association The CN will associate to the PN. The PN will authenticate to APC by using CAPWAP tunnel. After successful authentication, CN established the CAPWAP tunnel with APC. The normal DHCP and data traffic can flow between CN and APC. 204

205 Share Information with APC After successful association, CN sends mesh info to PN. PN will update its mesh topology. 205

206 Path Management Link monitoring Mesh AP performs passive scan every 30 seconds continuously to update Average value of data RSSI sent by PN Path metric of the current link A beacon is send every 1 second. If there is no answer for 5 seconds, the status turns into disconnect and start path recovery. 206

207 Path Recovery to Look for another PN If there is a connected CN, it perform passive scan for max. 5 times until the same WMBID PN is found. If the above process failed or there is no connected CN, it start active scan to find a new PN. 207

208 Path Optimization to Find a better PN Once Mesh AP connects to an APC, a timer for path optimization starts. Initial timeout value is 30s. Whenever the timer is expired, the Mesh AP performs the followings. passive scan for connected channels and gathering the results searching candidate APs which can be connected. Comparing path metrics for the candidate AP and the parent AP. If the path metric for the candidate AP is better than the parent AP subsequently 3 times, the AP disconnects with the parent AP and tries to connect to the candidate AP. The path metric for parent AP is weighted in order to avoid frequent reconnection. 208

209 Mesh Service Operations Mesh Status Check mesh operating status Monitor -> Access Points -> Mesh Mesh Groups Root APs in a mesh group 209

210 Mesh Service Operations Mesh Status: Tree Info Check mesh operating status Monitor -> Access Points -> Mesh -> Root AP -> Tree 210

211 Mesh Service Operations Mesh Status: Neighbors Check mesh operating status Monitor -> Access Points -> Mesh -> Root AP -> Tree 211

212 Mesh Service Operations - 5GHz Channel Root AP 5 GHz channel is recommended for backhaul connection Since it is outdoor application, it is recommended to use high Tx power channel like channel 149 to 161. Mesh AP Mesh AP uses the channel set by Root AP automatically. 212

213 Mesh Service Operations NAC List Network Access Control (NAC) allows administrator to set the connection priority list for Mesh network. Some Mesh AP can have priority connection over others. The NAC list required the MAC address of the Mesh AP. Level can be set to High Intermediate Low Not Connect (Black list or not allow to connect) 213

214 Mesh Service Operations NAC List Configuration Access Points Select AP Mesh NAC list 214

215 4.11 AP Groups 4.11 AP Groups Creating an AP Group Setup the AP Group General Tab Adding AP s WLANs Hard setting a channel Confirm AP Groups

216 Creating an AP Group 1 AP Group is a feature where we can organize APs and WLANs in one group. Each AP Group is independent of the other. An AP can only belong to one AP Group at a time. But the same WLAN can belong to multiple AP Groups at the same time.

217 Creating an AP Group 2 Enter the Name 3

218 Setup the AP Group Now we can assign which APs, WLANs (SSID) will be used in this AP Group Group Added Lets Setup the Group now Click on the name of the Group 1

219 General Tab Set the AP Group Description here if you like. 1 2

220 Adding APs Select the APs to be used in this group 1 2 Use this up arrow to move the APs into this group

221 Adding APs Selected APs added. At this point, your AP LED will blink red and blue because they are not broadcasting any WLANs. Once we add the WLANs in this AP Group, their LED will turn green again.

222 WLANs Select the WLANs to be used in this group 1 2 Use this up arrow to move the WLANs into this group

223 WLANs Selected WLANs added

224 Hard setting a channel 1 Here you can hard set a channel that you would like this AP Group to use Select Enable after picking the channel 2 1 Here you can hard set a channel that you would like this AP Group to use Select Enable after picking the channel 2

225 Selecting the PoE type Select your PoE type as per your PoE switch. Default type: Auto

226 Confirm AP Groups After configuring AP Groups, all of the APs that are plugged in and connected should have the following LED status. Normal Operation > Steady Green LED Operational - with no clients currently connected. Normal Operation > Steady Blue LED Operational - with one or more clients connected.

227 Setting up AP Groups Lab 14 Lab 14 (1/2) Setup and Configure a AP Group Main_AP_Group 1. Go to Configuration AP Groups 2. Select Add Name this AP Group Main_AP_Group 3. Hit Apply 4. Give this AP a Group Description of Main_AP_Group 5. Hit Apply 6. Click on Main_AP_Group 7. Go to the APs tab Add the AP named Company_AP 8. Click OK when prompted 9. Go to the WLANs tab Add the WLAN names company_x0 10. Click OK when prompted 11. Verify by connecting a cell phone or laptop to the SSID company_x0

228 Setting up AP Groups Lab 14 Lab 14 (2/2) Setup and Configure a AP Group Main_AP_Group 1. Go to Configuration AP Groups 2. Select Add Name this AP Group Main_AP_Group 3. Hit Apply 4. Give this AP a Group Description of Main_AP_Group 5. Hit Apply 6. Click on Main_AP_Group 7. Go to the APs tab Add the AP named Guest_AP 8. Click OK when prompted 9. Go to the WLANs tab Add the WLAN names guest_x1 10. Click OK when prompted 11. Verify by connecting a cell phone or laptop to the SSID guest_x1

229 5. Maintenance 5. Maintenance 5.1 Backup the APC 5.2 Downloading the Backup 5.3 Upgrading the APC 5.4 AP Upgrade 5.5 Default the APC 5.6 How to Restore the APC

230 5.1 Backup the APC 2 1 Start by entering the name for your backup

231 5.1 Backup the APC Enter the GUI password, then hit Apply 3 Complete

232 5.1 Backup the APC Periodic Backup You can also schedule a periodic backup and send the backup files to a remote FTP server.

233 5.2 Downloading the Backup The backup is stored under /disk/etc/config. Not available when doing periodic backup as the backup files are stored on a remote FTP server in that case. Then Click Download To download, simply check the backup

234 5.3 Upgrading the APC Here you will select the package you wish to upgrade to. Under Saving Control, select Save & Package Upgrade which will upgrade your system and at the same time save your current database at the current software version.

235 5.4 AP Upgrade Select Global to upgrade all APs at the same time or select individual.

236 5.4 AP Upgrade Select the Scope of your upgrade. Quick Upgrade: This will send the new software to your AP and upgrade the AP. Pre-download: This will only send the new software to your AP. You can then upgrade the AP after hours by rebooting it. Select the Package and then hit Apply. Note : weafama is for 3xx APs weafamb is for 4xx APs weafamc is for IoT Sensor If you try and upgrade an AP with a package that is not intended for the said AP, the system will alert you.

237 5.4 AP Upgrade After hitting Apply you will be able to watch the progress below

238 Upgrading the APC and AP Lab 15 Lab 15 - Upgrading the APC and AP 1. Go to Administration Package Upgrade APC 2. Select the package 3. Select Save and Package upgrade 4. Select Restore Backup Configuration 5. Hit Apply 6. Verify the new version by clicking on Monitor 7. Go to Administration Package Upgrade AP 8. Select Global Settings 9. Select the scope as Quick Upgrade 10. Select the AP Package 11. Hit Apply 12. Verify new version by going back to Administration Package Upgrade AP

239 5.5 Default the APC 1 Check the type of Factory Reset you would like to use 2 Reset all Configurations: This will wipe out your database. Reset all Configurations and delete user files: This will wipe out your database and any software or database files you had previously uploaded. 3 Enter the password, then hit Apply

240 5.6 Disaster Recovery for APC 2 Press Upload In the event of disaster/database restore, the new APC must first be upgraded to the same version as that of the Backup database 1 Upload the back to the /disk/etc/config folder 3 5 4

241 5.6 Disaster Recovery for APC 1 Using the dropdown, select the file name to be uploaded 2 Optional: Choose if you want the User Accounts uploaded from the backup

242 5.7 APC Redundancy An operator can add backup APCs to an AP to make the backup APCs provide the service even when an APC fault occurs. The maximum number of backup APCs that can be registered to one AP per model is as follows APC Model WEC8500 WEC8050 If a fault occurs to the primary APC while an AP is connected to the primary APC, the AP is connected to the secondary APC. If a fault also occurs to the secondary APC, the AP is connected to the tertiary APC. For reference, the WEC8050 model does not support a tertiary APC. Operator can also configure fallback to return to the original APC from the backup APC during the service. If the fallback operation is configured, the AP periodically performs health check to check whether the primary APC can be connected. When the connection is required, it can immediately perform fallback according to the fallback option or can perform fallback on a specified time. The reason why configuring fallback time zone is to minimize the service interruption due to fallback by making it happens when the load is low. In an APC, operator can configure the primary and backup APCs of an AP in the following steps. 1. Register APCs to the APC list. 2. Add the APCs in the APC list to redundancy. 3. Configure redundant APC servers per AP or AP Group APC list is being used for RRM functionality or clustering as well. The maximum number of APC systems that can be registered 3 (Primary Server, Secondary Server, Tertiary Server) 2 (Primary Server, Secondary Server)

243 5.7 APC Redundancy 1. AP setting & CAPWAP joining - Setting Ethernet IP address & CAPWAP IP of AP - AP gets all APC s IP Lists by provisioning 2. Primary APC failure 3. AP discovers APCs except Primary - Once AP detects the failure of Primary APC, AP sends Discovery Request to whole APCs except Primary. 4. AP joins APC - If AP receives Response from Secondary, AP tries immediately CAPWAP join to Secondary. If not, AP collect Response from all APCs during Discovery Interval and AP joins CAPWAP to APC of the highest priority.

244 5.7 APC Redundancy Prerequisites 1. To configure redundancy, candidate APCs have to be added in APC List. Add the APCs in the APC list to redundancy 1. Add APCs to Redundancy

245 5.7 APC Redundancy Configure redundant APC servers per AP 1. Set DISCOVERY TYPE of AP as APC Referral 2. Set PRIMARY CONTROLLER NAME or SECONDARY CONTROLLER NAME [NOTICE] All APC s must have the same setup, a mirror image of one another. The interfaces will have different IP s, but should belong to the same vlan. Naming should match for groups, wlans etc. Security should be setup the same on both APC s

246 5.7 APC Redundancy Configure redundant APC servers per AP Group 1. Enable OVERWRITE AP CONFIG for Redundancy configuration. It makes APC copy AP group profile of redundancy to APs in the AP group. 2. Set DISCOVERY TYPE of AP Group as APC Referral 3. Set PRIMARY CONTROLLER NAME or SECONDARY CONTROLLER NAME

247 5.7 APC Redundancy Here is where you setup the Fall Back Feature and hit Apply TYPE TIME Fallback Parameter Description Select fallback type(now/at-time) - now: Initiates fallback as soon as failover occurs. - at-time: Initiates fallback only at the set time. Sets operating time when the TYPE is at-time - hh:mm-hh:mm (start hour:start minute-end hour:end minute)