Abstract. Avaya Solution & Interoperability Test Lab

Transcription

1 Avaya Solution & Interoperability Test Lab Configuring Avaya W310 Mobility Gateway with the Avaya W110 Light Access Point for Avaya Wireless IP Telephones and Avaya IP Softphone in an Avaya IP Telephony Environment - Issue 1.0 Abstract These Application Notes present a sample configuration for an Avaya W310 Mobility Gateway with an Avaya W110 Light Access Point working with Avaya S8300 Media Server, Avaya G700 Media Gateway, Avaya Wireless IP Telephones and Avaya IP Softphone. The configuration of Quality of Service (QoS) and Wired Equivalent Privacy (WEP) encryption are also covered in these Application Notes. 1 of 17

2 1. Introduction The Avaya W310 is a Converged Mobility Gateway plus Light Access Point (W110) that provides a standards-based infrastructure to support wireless IP endpoints and wireless applications. Instead of adding functionality to the Access Point, the W310 serves as a Converged Mobility Gateway that centralizes many of the Access Point features. The W310 provides a richer feature set in the security, mobility and web based management interface. Some of the major features provided by the W310 are: LAN services -- Multiple VLANs per port Q tagging -- RADIUS protocol for security w Rapid Spanning Tree Protocol X PBNAC (Port Based Network Access Control) af Power over Ethernet Wireless Services -- IEEE a, b and g -- WEP encryption -- Seamless Roaming -- Multiple SSIDs -- QoS (CoS and DiffServ) IP Multicast filtering MAC Access Control List Policy Management Terminal and modem interface These Application Notes focus on the configuration of the W310 working with Avaya Wireless IP Telephones and IP Softphone. QoS, WEP encryption and 802.1x authentication configuration are also covered. For configuration of the Avaya S8300 Media Server, Avaya G700 Media Gateway, Avaya 3616 Wireless IP Telephone and RADIUS server configuration, please refer to the Application Notes listed in the Appendix. 2 of 17

3 Figure 1 displays the network infrastructure used for verification. VLAN /24 Avaya Wireless Softphone on Windows XP (Laptop 1) Avaya 3616 Wireless Telephone Avaya Wireless Softphone on Windows 2000 (Laptop 2) Avaya 3626 Wireless Avaya W110 LAP b Avaya W110 LAP a Avaya W310 Media Gateway 1000 MB link Avaya C363T-PWR Layer 2/3 Switch Radius Server Avaya 4620 IP Telephone x47001 Avaya Voice Priority Processor (Avaya VPP) VLAN Avaya S8300/G700 Avaya 6408D Digital Telephone X47002 Figure 1: Avaya W310/W110 Wireless Network Configuration 3 of 17

4 Table 1 shows the devices VLAN and IP network assignment. Switches Interface/port VLAN, IP Address Default Gateway W310 Inband V103, C363T-PWR VLAN100 VLAN103 V100, V103, N/A N/A S8300/G700 ICC MGP VOIP V100, V100, V100, Avaya VPP Network interface V100, Table 1: VLAN and IP network assignment Table 2 lists the equipment and software used for the verification. Equipment Software Avaya S8300 Media Server R012x Avaya G700 Media Gateway Firmware Version Avaya W310 Media Gateway R Avaya W110 Light Access Point R1.1.1 Avaya 4620 IP Telephone R2.0 Avaya 3616/3626 Wireless IP Telephones with CCMS firmware Avaya IP Softphone V Avaya C363T-PWR Switch R4.3.8 Avaya Wireless Voice Priority Processor R32/21 Dell Laptop with Windows 2000 Professional with SP4 D-Link DWL-AG650 Wireless Card V Dell Laptop with Windows XP Professional with SP1 Intel PRO/Wireless LAN A Mini PCI Adapter V2002 V Cisco Access Control Server (Radius) R3.2 (2) Table 2: Hardware and Software Used for Verification 2. Configure the Avaya W310 Media Gateway The Avaya W310 Mobility Gateway has 16 10/100BaseT RJ-45 PoE switch ports and two Gigabit ports for uplink. The W110 Light Access Point (LAP) can be connected to any of these 16 RJ-45 ports and be powered by the W310. Both the Layer 2 switch and wireless code, are 4 of 17

5 stored in the W310. There is no configuration required on the W110. The LAP image and configuration are pushed to the W110 from the W310 automatically upon the W110 powering up. The W310 Media Gateway supports IEEE a, b and g wireless protocols. The configuration of the W310 can be accomplished by using either the web interface, or the command line interface (CLI). These Application Notes demonstrate the configuration using a CLI via the console port. To access the W310 switch via its console port, configure the terminal emulator with the following settings: Bits per second 9600 Data bits 8 Parity None Stop bits 1 Flow control None Log in to the W310 with the appropriate login ID and password. Follow the steps below to configure the device. Steps 1. This section displays the Layer 2 switch port, VLAN and in-band management interface configuration. LAP 1 and LAP 2 are connected to the W310 switch port 15 and 16 respectively, and the uplink to C363T is connected via Gigabit port. Configure VLAN, Inband interface and assign ports to VLAN W310-1(super)# configure W310-1# set VLAN 103 name V103 W310-1# set interface inband W310-1# set port VLAN 103 1/15-16 W310-1# set port VLAN 103 1/51 W310-1# set trunk 1/51 dot1q W310-1# set ip route Assign IP address for wireless-domain-server and enable spectralink-support for spectralink IP telephone W310-1# wireless-domain-servers W310-1# spectralink-support 3. Create SSID ioplab for this wireless domain and allow access for VLAN 103. Enable broadcast. W310-1# ssid ioplab W310-1/SSID ioplab# VLAN 103 accessible W310-1/SSID ioplab# no closed-system W310-1/SSID ioplab# broadcast 5 of 17

6 Steps 4. Configure port 15 for Light Access Point 1. Define operational-mode as b and assign SSID to this LAP. Note that once the operational mode for radio-card is defined, the system adds g on the same radio-card slot automatically. W310-1# lap port-15 W310-1/LAP port-15# operational-mode b W310-1/LAP port-15# radio-card b first-slot W310-1/LAP port-15# ssid ioplab W310-1/LAP port-15# exit 5. Configure port 16 for Light Access Point 2. Define operational-mode as a and assign SSID to this LAP W310-1# lap port-16 W310-1/LAP port-16# operational-mode a W310-1/LAP port-16# radio-card a first-slot W310-1/LAP port-16# ssid ioplab 6. Create an IP qos-list to mark the incoming packets from LAP port to dscp 46 W310-1# ip qos-list 406 W310-1/QoS 406# name "list #406" W310-1/QoS 406# composite-operation 14 W310-1/QoS 406/CompOp 14# name "dscp46" W310-1/QoS 406/CompOp 14# dscp Create an AP-group interface and attach the ip qos-list to this interface. Add ports 15 and 16 in this interface. W310-1# interface AP-Group qos-dscp W310-1/AP-Group qos-dscp# ip qos-group 406 in W310-1/AP-Group qos-dscp# add-ports 15,16 8. Create a user-group, define home-gateway IP address, VLAN and add interface qos-dscp to user-group W310-1# user-group wireless-user W310-1/User group wireless-user# home-gateway W310-1/User group wireless-user# VLAN 103 W310-1/User group wireless-user# allowed-ap-list add qos-dscp 6 of 17

7 Steps 9. This portion of the configuration shows how to enable security mode and set up encryption key under SSID ioplab. The W310 supports the keys with octet string 5, or 13 or 16. In this example, the 5 string key avaya is used. W310-1# ssid ioplab W310-1/SSID ioplab# security-mode wep W310-1/SSID ioplab# wep-encryption-key 1 wep-encryption-key 1 avaya W310-1/SSID ioplab# wep-encryption-key-effective To use 802.1x authentication, a RADIUS is required as well. W310 supports two RADIUS servers. Here only one primary is used. For RADIUS server configuration, refer to the Application Notes in the Appendix. W310-1# ssid ioplab W310-1/SSID ioplab# security-mode dot1x W310-1/SSID ioplab# set radius authentication enable W310-1/SSID ioplab# set radius authentication server primary 3. Configure the Avaya Wireless Voice Priority Processor The Avaya Wireless Voice Priority Processor (Avaya VPP) functions as a wireless VoIP gateway and provides voice priority service for wireless IP end points. The following steps describe the configuration. Note that each IP network requires one Avaya VPP. Steps 1 Using a console cable, connect the Avaya VPP to the PC. 2 Start a HyperTerminal session to the Avaya VPP. Bits per second 9600 Data bits 8 Parity None Stop bits 1 Flow control None 7 of 17

8 Steps 3 Provide the User Name and Password to access the Avaya VPP The NetLink SVP-II System window will be displayed. NetLink SVP-II System Hostname: [slnk_00d07e], Address: System Status SVP-II Configuration Network Configuration Change Password Exit Enter=Select X=Exit Use Arrow Keys to Move Cursor Select Network Configuration and press Enter. 4 The Network Configuration window will be displayed. Provide the following information: o IP Address = o Subnet Mask = o Default Gateway = Network Configuration Hostname: [slnk_00d07e], Address: Ethernet Address (fixed): 00:90:7A:00:D0:7E IP Address: Hostname: slnk_00d07e Subnet Mask: Default Gateway: SVP-II TFTP Download Master: NONE Primary DNS Server: NONE Secondary DNS Server: NONE DNS Domain: NONE WINS Server: NONE Workgroup: WORKGROUP Syslog Server: NONE Maintenance Lock: N Enter=Change Esc=Exit Use Arrow Keys to Move Cursor 8 of 17

9 Steps 5 On the NetLink SVP-II System window: Select SVP-II Configuration, and press Enter. NetLink SVP-II System Hostname: [slnk_00d07e], Address: System Status SVP-II Configuration Network Configuration Change Password Exit Enter=Select X=Exit Use Arrow Keys to Move Cursor 6 On the SVP-II Configuration window: Select Reset System, and press Enter. This will reconfigure the Avaya VPP with the current settings. SVP-II Configuration Hostname: [slnk_00d07e], Address: Phones per Access Point: 5 SVP-II Mode: Netlink IP System Locked: N Maintenance Lock: N Reset System Enter=Change Esc=Exit Use Arrow Keys to Move Cursor 4. Configure the Wireless Client on Windows 2000 for Avaya IP Softphone This section describes the steps to configure a wireless client on a Dell Latitude C810 Laptop running Windows 2000 with a D-Link DWL-AG650 wireless adaptor. The D-Link wireless 9 of 17

10 client software and the Avaya IP Softphone have been pre-installed on this computer. For the Avaya IP Softphone configuration, refer to the Application Notes in the Appendix. Steps Launch the D-Link AirXpert Utility program by selecting Start Program AirXpert Tri-Mode Dualband G AirXpert Configuration Utility from the Dell Laptop. Click Configuration on the left panel as shown in the diagram below. Enter ioplab in the SSID field. Select Infrastructure in the Wireless Mode field. Select boxes 11B, 11G and 11A in the Support Band area. Note that the actual band used for the client will be determined by the LAP operation mode configured on the W310. Leave the other fields with their default as shown in the diagram below. Click the Apply button when done. 10 of 17

11 Steps 3 Click Encryption on the left panel to configure data encryption parameters as shown in diagram below. Select WEP in the Encryption field. Select Open Authentication in the Auth. Mode field. Click 1 as Default Key and enter avaya in the Network Key field. Select 64 bits in the Key Length field. Select ASCII in the Key Format field. Click Apply button when done. 11 of 17

12 Steps 4 Click Site Survey on the left panel. Select the network SSID ioplab under the Available Network area. Click the Connect button in the Available Network area to connect to the W310 Gateway. 12 of 17

13 Steps 5 Click Link Info on the left panel to verify the connection status as shown in diagram below. 13 of 17

14 5. Verification Steps The following verification steps were used to verify correct system operation: Connect Laptop 1 and Laptop 2 to network and verify that they can ping each other via their wireless connection. Power up both 3616 and 3626 Wireless IP Telephones and verify that both phones can register with the S8300 Media Server. Launch Avaya IP Softphone from both Laptop 1 and Laptop 2 and verify that both Softphones can register with the S8300 Media Server. Make a call between the 3616 and the 3626 wireless IP Telephones and verify that voice quality is good. Make a call between the IP Softphone 1 and the IP Softphone 2 and verify that voice quality is good. Make an IP-direct call between the 3616 Wireless IP Telephone and the IP Softphone 2 and verify that voice quality is good. Enable QoS on W310 to mark DSCP 46 for Wireless IP Telephones. Make a call between the 3616 and 3626 Telephones and verify that VoIP traffic has been tagged with DSCP 46 by packet decode from a protocol analyzer. Enable WEP encryption on the W310 and IP Softphone 1. Make a call between IP Softphone 1 and IP Telephone 1 and verify that voice quality is good. While the call is up, display the Link Info from the D-Link AirXpert Utility to verify that the WEP encryption is enabled and active. Make a call between the IP Softphone 1 and IP Telephone 1. While the call is up, conference the Wireless IP Telephone 3616 in. Verify that all three parties are in conference and the voice quality is good. 6. Conclusion The Avaya W310 Mobility Gateway with W110 Light Access Point provides a standards-based infrastructure and a new solution for wireless applications. The built-in Layer 2 switch features with 802.3af PoE capabilities, as well as the web-enabled management interface, make it easy to be configured and deployed in IP network infrastructures. 14 of 17

15 7. Glossary Technical Term LAN WAN RADIUS SSID WLAN VPN IPSec WEP DiffServ Definition as it pertains to this document Local Area Network Wide Area Network Remote Authentication Dial In User Service Service Set Identifier Wireless Local-Area Network Virtual Private Network IP Security Wired Equivalent Privacy Differentiated Services 15 of 17

16 Appendix Use this URL to access these Application Notes. [1] Sample Configuration: Avaya MultiVantage Software with Avaya S8300 Media Server Local Survivable Processor and an Avaya G700 Media Gateway - Issue 1.0 [2] Configuring the Avaya 3606 Wireless Telephone with Compatible b Access Points from Avaya and Other Vendors - Issue 1.0 [3] Configuring 802.1x Authentication for Avaya wireless IP telephones and IP Softphones using Cisco Access Control Server as a RADIUS - Issue of 17

17 Avaya and the Avaya Logo are trademarks of Avaya Inc. All trademarks identified by and are registered trademarks or trademarks, respectively, of Avaya Inc. All other trademarks are the property of their respective owners. The information provided in these Application Notes is subject to change without notice. The configurations, technical data, and recommendations provided in these Application Notes are believed to be accurate and dependable, but are presented without express or implied warranty. Users are responsible for their application of any products specified in these Application Notes. Please any questions or comments pertaining to these Application Notes along with the full title name and filename, located in the lower right corner, directly to the Avaya Solution & Interoperability Test Lab at 17 of 17