Instruction/ maintenance manual of the product 2300 Polycom
Go to page of 39
January 2008 Edition 1725-36082-001 Version F VIEW Certified Configuration Guide Nortel WLAN Security Switch 2300 Series with AP-2330.
Configuration Guide PN: 1725-36082-001_F .doc 2 Trademark Information Polycom® and t he logo design s SpectraLink® LinkPlus Link NetLink SVP Are trademarks and registe red trademarks of Polycom, Inc. in the Un ited States of Am erica and various c ountries.
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_F .doc 3 Introduction Polycom’s Voice Interoperability for Enterprise Wireless (VIEW) Certification Program is designed to ensure interoperability and high performance between SpectraLink 8000 Wireless Telephones and wireless LAN (WLAN) infrastructure products.
Configuration Guide PN: 1725-36082-001_F .doc 4 Contacting Nortel Technical Support If you purchased a service contract for your Nortel product from a distributor or authorized reseller, contact the technical support staff for that distributor or reseller for assistance.
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_F .doc 5 Network Topology The following topology was tested during VIEW Certification. It is important to note that these do not necessarily represent all “Certified” configurations.
Configuration Guide PN: 1725-36082-001_F .doc 6 Access Point Capacity and Positioning Each site is unique in its AP requirements. Therefore, please take the following points into account wh en determi.
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_F .doc 7 the available bandwidth per call for 1 Mb/s operation, approximately 10 % of the available bandwidth per call for 2 Mb/s operation, approximately 7 % of the available bandwidth per call for 5.
Configuration Guide PN: 1725-36082-001_F .doc 8 Configuring a New WLAN Security Switch Starting from Factory Defaults 1. Using the supplied DB-9 male to DB-9 female standard RS-232 cable, connect the WLAN Security Switch to the serial port of a terminal or PC.
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_F .doc 9 Connecting APs To configure the WLAN Security Sw itch (WSS) to support an AP, you must first determine how the AP will connect to the switch. There are two types of AP-to-WSS connection: direct and distributed.
Configuration Guide PN: 1725-36082-001_F .doc 10 Command, comment, and screen text key In the sections below you will find commands, comments and system responses or other screen-displayed information involved in the configuration process. This key expl ains the text styles an d symbols used to denote them.
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_F .doc 11 Configuration Example – CLI AP configuration To add a directly connected AP-2330 attached to port 1 on a WSS using .
Configuration Guide PN: 1725-36082-001_F .doc 12 Service profile / SSID configuration To create a SSID named Voice using WPA-PSK that will be advertised on 802.11a/b/g radios using CLI: set service -profile V oice ssid-na me Voice # Creates a new servi ce profile a nd SSID name d Voice.
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_F .doc 13 set service -profile V oice auth-do t1x disable # Disables 802. 1x authentica tion. set service -profile V oice attr vl an-name Voic e # Specifies the VLAN name to map the voice ha ndsets traffic to.
Configuration Guide PN: 1725-36082-001_F .doc 14 # Applies t he ACL to the Voice VL AN for ingre ss and egress traf fic. To create an ACL that allows and prioritizes IP protocol 119 (SVP) with a Class of Service (CoS) 7 and denies all other IP traffic on the Voice VLAN using CLI: set securit y acl ip S pectraLink p ermit cos 7 119 0.
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_F .doc 15 Configuration Example – WLAN Management Software Adding a WLAN Security Switch to the Network Plan Before WLAN Management Software can be used to configure a WLAN Security Switch, the WSS must be added to the WMS server.
Configuration Guide PN: 1725-36082-001_F .doc 16 5. In the Enable Password field, type the enable password for the WLAN Security Switch. The enable password must match the enable password that was defined in the Quick Start Wizard. For more information, see the Nortel WLAN Security Switch 2300 Series Configuration Guide .
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_F .doc 1 7 5. For directly connected APs, select an available port on the switch from the Available Ports drop-down list. Click the Ne xt button. 6. For distributed APs, enter the Name and Serial Number of the AP.
Configuration Guide PN: 1725-36082-001_F .doc 18 7. Specify the model of the Nortel AP you are configuring. Valid models include 2330, 2330A and 2330B . Click the Next button. 8. To configure the 802.11g Radio : a. Select default for the Radio Profile .
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_F .doc 19 9. To configure the 802.11a Radio , a. Select default for the Radio Profile . b. Specify the Channel Number and Transmit Power the radio should use, as determined by the site survey performed on the facility.
Configuration Guide PN: 1725-36082-001_F .doc 20 VLAN configuration For security and flexibility it is recommended that voice and data be on separate VLANs. For this example, a new VLAN named Voice with a VLAN ID 2 will be created and tagged to the uplink port 8 .
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_F .doc 21 4. For VLAN Name enter Voice . 5. For VLAN ID specify 2 . Click the Next button. 6. In the Port/Port Group list, select the 802.1Q tagged uplink port (P08) and click the Add button.
Configuration Guide PN: 1725-36082-001_F .doc 22 9. The Voice VLAN 2 is now 802.1Q tagged to the uplink port P08. a. Highlight the Voice VLAN. b. In the Network Plan Tasks panel, select IGMP. 10. In the VLAN Properties window, disab le IGMP by clearing the Enabled check box.
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_F .doc 23 Service Profile / SSID configuration To create a SSID named Voice using WPA-PSK or WPA2-PSK that will be advertised on 802.11a/b/g radios using WMS: 1. In WMS click Configuration on the tool bar.
Configuration Guide PN: 1725-36082-001_F .doc 24 6. Set the SSID Type to Encrypted and use the default Vend or type SpectraLink . Click the Next button. Selecting the vendor SpectraLink tells WMS what ACLs to create to prioritize the voice traffic later in the wizard.
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_F .doc 25 8. Settings for Wireless Security : a. To support handsets using WPA-PSK security, select the WPA check box. b. To support handsets using WPA2-PSK, select the RSN (WPA2) check box.
Configuration Guide PN: 1725-36082-001_F .doc 26 9. Click the Next button. 10. Settings for Wireless Encryption Cipher Suite : a. To support handsets using WPA-PSK with TKIP, select the TKIP check box.
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_F .doc 2 7 b. To support handsets using WPA2-PSK with AES/CCMP, select the AES (CCMP) check box.
Configuration Guide PN: 1725-36082-001_F .doc 28 12. Enter a hexadecimal pre-shared key or passphrase. a. If a passphrase is entered, click the Generate button to generate the hexadecimal pre-shared key.
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_F .doc 29 15. A default ACL will be generated which will allow and prioritize IP protocol 119 ( SVP ) traffic with the Class of Service level 7 and pass all other IP traffic on the Voice VLAN.
Configuration Guide PN: 1725-36082-001_F .doc 30 16. Assign the Voice Service Profile to the default Radio Profile. This will determine which 802.1 1a and 802.11g radios will advertise the Voice SSID. For this example the default Radio Profile will be used which is assigned to all 802.
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_F .doc 31 Radio Profile configuration The default Radio Profile needs to be modified to disable certain features to support the handsets. To modify the default Radio Profile using WMS: 1.
Configuration Guide PN: 1725-36082-001_F .doc 32 4. In the Radio Profile Properties window, click the Radio Profile tab. 5. Clear the Enable Active Scan check box. This disables active scanning, which prevents the ra dios from going off-channel and disrupting voice services.
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_F .doc 33 6. Click the Auto Tune tab. 7. Clear the Tune Channel and Tune Transmit Power check boxes. This disables automatic channel assignme nt for radios assigned to the radio profile.
Configuration Guide PN: 1725-36082-001_F .doc 34 8. Click the Voice Configuration tab. Verify that the QoS Mode is set to SVP . WMM support is not currently available on the SpectraLink 8000 Wireless Telephones.
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_F .doc 35 Deploying changes Deploying the changes in WMS will upload and save the configuration to the WSS. To deploy the changes in WMS: 1. In WMS click Devices on the tool bar.
Configuration Guide PN: 1725-36082-001_F .doc 36 3. When the Deploy option is selected, WMS will send, apply and save the configuration changes to the WSS.
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_F .doc 3 7 Example Configuration Files (For Reference Only) The following configuration file provides an example configuration to support SpectraLink 8000 Wireless Telephones using WPA-PSK: # Configura tion nvgen 'd at 2007-7 -26 22:51:55 # Image 5.
Configuration Guide PN: 1725-36082-001_F .doc 38 set vlan 2 port 8 tag 2 set igmp di sable vlan Voice set interfa ce 1 ip 19 2.168.1.50 2 55.255.255.0 set securit y acl ip S pectraLink p ermit cos 7 119 0.0.0. 0 255.255.255 .255 0.0.0 .0 255.255.2 55.
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_F .doc 39 set ap 1 na me WAP-233 0-1 set ap 1 ra dio 1 tx-p ower 10 mode enable set ap 1 ra dio 2 chan nel 44 tx-po wer 10 mode.
An important point after buying a device Polycom 2300 (or even before the purchase) is to read its user manual. We should do this for several simple reasons:
If you have not bought Polycom 2300 yet, this is a good time to familiarize yourself with the basic data on the product. First of all view first pages of the manual, you can find above. You should find there the most important technical data Polycom 2300 - thus you can check whether the hardware meets your expectations. When delving into next pages of the user manual, Polycom 2300 you will learn all the available features of the product, as well as information on its operation. The information that you get Polycom 2300 will certainly help you make a decision on the purchase.
If you already are a holder of Polycom 2300, but have not read the manual yet, you should do it for the reasons described above. You will learn then if you properly used the available features, and whether you have not made any mistakes, which can shorten the lifetime Polycom 2300.
However, one of the most important roles played by the user manual is to help in solving problems with Polycom 2300. Almost always you will find there Troubleshooting, which are the most frequently occurring failures and malfunctions of the device Polycom 2300 along with tips on how to solve them. Even if you fail to solve the problem, the manual will show you a further procedure – contact to the customer service center or the nearest service center
