Instruction/ maintenance manual of the product 1725-36082-001 Polycom
Go to page of 37
June 2008 Edition 1725-36082-001 Version G VIEW Certified Configuration Guide Nortel WLAN Security Switch 2300 Series with AP-2330.
Configuration Guide PN: 1725-36082-001_G.doc 2 Trademark Information Polycom® and t he logo design s SpectraLink® LinkPlus Link NetLink SVP Are trademarks and registe red trademarks of Polycom, Inc. in the Un ited States of Am erica and various c ountries.
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_G.doc 3 Introduction Polycom’s Voice Interoperability for Enterprise Wireless (VIEW) Certification Program is designed to ensure interoperability and high performance between SpectraLink Wireless Telephones and wireless LAN (WLAN) infrastructure products.
Configuration Guide PN: 1725-36082-001_G.doc 4 Contacting Nortel Technical Support If you purchased a service contract for your Nortel product from a distributor or authorized reseller, contact the technical support staff for that distributor or reseller for assistance.
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_G.doc 5 Network Topology The following topology was tested during VIEW Certification. It is important to note that these do not necessarily represent all “Certified” configurations.
Configuration Guide PN: 1725-36082-001_G.doc 6 Access Point Capacity and Positioning Please refer to the Polycom Deploying Enterprise-Grade Wi-Fi Telephony white paper. This document covers the security, coverage, capacity and QoS considerations necessary for ensuring excellent voice quality with enterprise Wi-Fi networks.
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_G.doc 7 Configuring a New WLAN Security Switch Starting from Factory Defaults 1. Using the supplied DB-9 male to DB-9 female standard RS-232 cable, connect the WLAN Security Switch to the serial port of a terminal or PC.
Configuration Guide PN: 1725-36082-001_G.doc 8 Connecting APs To configure the WLAN Security Sw itch (WSS) to support an AP, you must first determine how the AP will connect to the switch. There are two types of AP-to-WSS connection: direct and distributed.
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_G.doc 9 Command, comment, and screen text key In the sections below you will find commands, comments and system responses or other screen-displayed information involved in the configuration process.
Configuration Guide PN: 1725-36082-001_G.doc 10 Configuration Example – CLI AP configuration To add a directly connected AP-2330 attached to port 1 on a WSS using CLI: set port ty pe ap 1 mo del 2330 poe enable # Defines t he port nu mber on the switch tha t the AP is connecte d to, the model number of the AP and enables PoE on the sw itch port.
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_G.doc 11 Service profile / SSID configuration To create a SSID named Voice using WPA-PSK that will be advertised on 802.11a/b/g radios using CLI: set service -profile V oice ssid-na me Voice # Creates a new servi ce profile a nd SSID na med Voice.
Configuration Guide PN: 1725-36082-001_G.doc 12 # Enables p re-shared- key authenti cation. set service -profile V oice auth-do t1x disabl e # Disables 802. 1x authentica tion. set service -profile V oice attr vl an-name Vo ice # Specifies the VLAN name to map the voice handsets traffic to.
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_G.doc 13 set security ac l map SpectraLin k vlan Voice in set security ac l map SpectraLin k vlan Voice out # Applies t he ACL to the Voice VL AN for ing ress and egress traf fic.
Configuration Guide PN: 1725-36082-001_G.doc 14 Configuration Example – WLAN Management Software Adding a WLAN Security Switch to the Network Plan Before WLAN Management Software can be used to configure a WLAN Security Switch, the WSS must be added to the WMS server.
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_G.doc 15 4. In the IP Address field, type the IP address for the WLAN Security Switch. 5. In the Enable Password field, type the enable password for the WLAN Security Switch. The enable password must match the enable password that was defined in the Quick Start Wizard.
Configuration Guide PN: 1725-36082-001_G.doc 16 5. For directly connected APs, select an available port on the switch from the Available Ports drop-down list. Click the Ne xt button. 6. For distributed APs, enter the Name and Serial Number of the AP. Click the Next button.
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_G.doc 1 7 7. Specify the model of the Nortel AP you are configuring. Valid models include 2330, 2330A and 2330B . Click the Next button. 8. To configure the 802.11g Radio : a. Select default for the Radio Profile .
Configuration Guide PN: 1725-36082-001_G.doc 18 9. To configure the 802.11a Radio , a. Select default for the Radio Profile . b. Specify the Channel Number and Transmit Power the radio should use, as determined by the site survey performed on the facility.
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_G.doc 19 VLAN configuration For security and flexibility it is recommended that voice and data be on separate VLANs. For this example, a new VLAN named Voice with a VLAN ID 2 will be created and tagged to the uplink port 8 .
Configuration Guide PN: 1725-36082-001_G.doc 20 4. For VLAN Name enter Voice . 5. For VLAN ID specify 2 . Click the Next button. 6. In the Port/Port Group list, select the 802.1Q tagged uplink port (P08) and click the Add button. 7. Click the Tag check box and specify the 802.
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_G.doc 21 9. The Voice VLAN 2 is now 802.1Q tagged to the uplink port P08. a. Highlight the Voice VLAN. b. In the Network Plan Tasks panel, select IGMP. 10. In the VLAN Properties window, disab le IGMP by clearing the Enabled check box.
Configuration Guide PN: 1725-36082-001_G.doc 22 Service Profile / SSID configuration To create a SSID named Voice using WPA-PSK or WPA2-PSK that will be advertised on 802.11a/b/g radios using WMS: 1. In WMS click Configuration on the tool bar. 2. In the Organizer panel expand the WSS and select Wireless Services .
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_G.doc 23 4. In the New Voice Service Profile introduction screen click the Next button. 5. Specify a Name and SSID for the Voice Service Profile. 6. Set the SSID Type to Encrypted and use the default Vend or type SpectraLink .
Configuration Guide PN: 1725-36082-001_G.doc 24 7. Select the Open Access check box. Click the Next bu tton. MAC authentication may optionally be selected but will require that the MAC addresses for each handset be defined in the local AAA database on the WSS.
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_G.doc 25 b. To support handsets using WPA2-PSK, select the RSN (WPA2) check box. 9. Click the Next button. 10. Settings for Wireless Encryption Cipher Suite : a. To support handsets using WPA-PSK with TKIP, select the TKIP check box.
Configuration Guide PN: 1725-36082-001_G.doc 26 b. To support handsets using WPA2-PSK with AES/CCMP, select the AES (CCMP) check box and click the Next button. 11. Enter a hexadecimal pre-shared key or passphrase. a. If a passphrase is entered, click the Generate button to generate the hexadecimal pre-shared key.
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_G.doc 2 7 12. Click the Next button. 13. Specify the VLAN named Voice . This determines the VLAN that the WSS will map the handset traffic to.
Configuration Guide PN: 1725-36082-001_G.doc 28 a. (Optional) Modify the default ACL by removing the last statement, which will allow and prioritize IP protocol 119 (SVP) but deny all other IP traffic on the Voice VLAN.
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_G.doc 29 17. Assign the Voice Service Profile to the default Radio Profile. This will determine which 802.1 1a and 802.11g radios will advertise the Voice SSID. For this example the default Radio Profile will be used which is assigned to all 802.
Configuration Guide PN: 1725-36082-001_G.doc 30 Radio Profile configuration The default Radio Profile needs to be modified to disable certain features to support the handsets. To modify the default Radio Profile using WMS: 1. In WMS click Configuration on the tool bar.
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_G.doc 31 4. In the Radio Profile Properties window, click the Radio Profile tab. 5. Clear the Enable Active Scan check box. This disables active scanning, which prevents the ra dios from going off-channel and disrupting voice services.
Configuration Guide PN: 1725-36082-001_G.doc 32 8. Click the Voice Configuration tab. Verify that the QoS Mode is set to SVP . WMM support is not currently available on the SpectraLink Wireless Telephones.
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_G.doc 33 Deploying changes Deploying the changes in WMS will upload and save the configuration to the WSS. To deploy the changes in WMS: 1. In WMS click Devices on the tool bar. 2.
Configuration Guide PN: 1725-36082-001_G.doc 34 3. When the Deploy option is selected, WMS will send, apply and save the configuration changes to the WSS.
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_G.doc 35 Example Configuration Files (For Reference Only) The following configuration file provides an example configuration to support SpectraLink Wireless Telephones using WPA-PSK: # Configura tion nvgen 'd at 2007-7 -26 22:51: 55 # Image 5.
Configuration Guide PN: 1725-36082-001_G.doc 36 set vlan 2 name Voice set vlan 2 port 8 tag 2 set igmp di sable vlan Voice set interfa ce 1 ip 19 2.168.1.50 2 55.255.255 .0 set securit y acl ip S pectraLink p ermit cos 7 119 0.0.0. 0 255.255.255 .255 0.
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_G.doc 3 7 set dap 1 r adio 2 cha nnel 40 tx-p ower 10 mo de enable set port ty pe ap 1 mo del 2330 poe enable set ap 1 na me WA.
An important point after buying a device Polycom 1725-36082-001 (or even before the purchase) is to read its user manual. We should do this for several simple reasons:
If you have not bought Polycom 1725-36082-001 yet, this is a good time to familiarize yourself with the basic data on the product. First of all view first pages of the manual, you can find above. You should find there the most important technical data Polycom 1725-36082-001 - thus you can check whether the hardware meets your expectations. When delving into next pages of the user manual, Polycom 1725-36082-001 you will learn all the available features of the product, as well as information on its operation. The information that you get Polycom 1725-36082-001 will certainly help you make a decision on the purchase.
If you already are a holder of Polycom 1725-36082-001, but have not read the manual yet, you should do it for the reasons described above. You will learn then if you properly used the available features, and whether you have not made any mistakes, which can shorten the lifetime Polycom 1725-36082-001.
However, one of the most important roles played by the user manual is to help in solving problems with Polycom 1725-36082-001. Almost always you will find there Troubleshooting, which are the most frequently occurring failures and malfunctions of the device Polycom 1725-36082-001 along with tips on how to solve them. Even if you fail to solve the problem, the manual will show you a further procedure – contact to the customer service center or the nearest service center
