Motorola Solutions WiNG 5.2.6 Reference guide

Motorola Solutions

WiNG 5.2.6

Access Point

System Reference Guide

Chapter 1 Overview

1.1 About the Motorola Solutions WiNG 5 Access Point Software ............................................................................................. 1-3

Chapter 2 Web UI Features

2.1 Accessing the Web UI ............................................................................................................................................................. 2-2

2.1.1 Browser and System Requirements .............................................................................................................................. 2-2

2.1.2 Connecting to the Web UI ............................................................................................................................................. 2-2

2.2 Icon Glossary ........................................................................................................................................................................... 2-4

2.2.1 Global Icons ................................................................................................................................................................... 2-4

2.2.2 Dialog Box Icons ............................................................................................................................................................ 2-5

2.2.3 Table Icons .................................................................................................................................................................... 2-5

2.2.4 Status Icons ................................................................................................................................................................... 2-6

2.2.5 Configurable Objects ..................................................................................................................................................... 2-6

2.2.6 Configuration Objects ................................................................................................................................................... 2-8

2.2.7 Configuration Operation Icons ...................................................................................................................................... 2-9

2.2.8 Access Type Icons .........................................................................................................................................................2-9

2.2.9 Administrative Role Icons ........................................................................................................................................... 2-10

2.2.10 Device Icons .............................................................................................................................................................. 2-11

Chapter 3 Quick Start

3.1 Using the Initial Setup Wizard ................................................................................................................................................ 3-2

Chapter 4 Dashboard

4.1 Dashboard ................................................................................................................................................................................ 4-2

4.1.1 Dashboard Conventions ................................................................................................................................................ 4-2

4.1.1.1 Health .................................................................................................................................................................. 4-3

4.1.1.2 Inventory ............................................................................................................................................................. 4-7

4.2 Network View ........................................................................................................................................................................ 4-10

4.2.1 Network View Display Options .................................................................................................................................. 4-11

4.2.2 Device Specific Information ........................................................................................................................................4-12

TABLE OF CONTENTS

ii WiNG 5.2.6 Access Point System Reference Guide

Chapter 5 Device Configuration

5.1 RF Domain Configuration .........................................................................................................................................................5-2

5.2 RF Domain Sensor Configuration .............................................................................................................................................5-5

5.3 System Profile Configuration ...................................................................................................................................................5-7

5.3.1 General Profile Configuration ........................................................................................................................................5-7

5.3.2 Profile Radio Power .......................................................................................................................................................5-9

5.3.3 Profile Adoption (Auto Provisioning) Configuration ....................................................................................................5-11

5.3.4 Profile Interface Configuration ....................................................................................................................................5-14

5.3.4.1 Ethernet Port Configuration ..............................................................................................................................5-15

5.3.4.2 Virtual Interface Configuration .........................................................................................................................5-21

5.3.4.3 Port Channel Configuration ...............................................................................................................................5-25

5.3.4.4 Access Point Radio Configuration .....................................................................................................................5-32

5.3.4.5 WAN Backhaul Configuration ...........................................................................................................................5-43

5.3.5 Profile Network Configuration ....................................................................................................................................5-45

5.3.5.1 DNS Configuration ............................................................................................................................................5-46

5.3.5.2 ARP ....................................................................................................................................................................5-48

5.3.5.3 Quality of Service (QoS) ....................................................................................................................................5-50

5.3.5.4 Static Routes ....................................................................................................................................................5-52

5.3.5.5 Forwarding Database ........................................................................................................................................5-53

5.3.5.6 Bridge VLAN ......................................................................................................................................................5-55

5.3.5.7 Miscellaneous Network Configuration .............................................................................................................5-59

5.3.5.8 Profile Network Configuration and Deployment Considerations .....................................................................5-60

5.3.6 Profile Security Configuration .....................................................................................................................................5-60

5.3.6.1 Defining Profile Security Settings .....................................................................................................................5-61

5.3.6.2 Setting the Certificate Revocation List (CRL) Configuration .............................................................................5-62

5.3.6.3 Setting the Profile’s NAT Configuration ...........................................................................................................5-63

5.3.6.4 Profile Security Configuration and Deployment Considerations ......................................................................5-71

5.3.7 Profile Services Configuration .....................................................................................................................................5-71

5.3.7.1 Profile Services Configuration and Deployment Considerations ......................................................................5-72

5.3.8 Profile Management Configuration .............................................................................................................................5-73

5.3.8.1 Upgrading AP-6532 Firmware from 5.1 to 5.2 ..................................................................................................5-79

5.3.8.2 Profile Management Configuration and Deployment Considerations ..............................................................5-80

5.3.9 Advanced Profile Configuration ..................................................................................................................................5-80

5.3.9.1 Advanced Profile Client Load Balancing ..........................................................................................................5-81

5.3.9.2 Configuring MINT ..............................................................................................................................................5-86

5.3.9.3 Advanced Profile Miscellaneous Configuration ...............................................................................................5-92

5.4 Managing Virtual Controllers ................................................................................................................................................5-94

5.5 Overriding a Device Configuration .........................................................................................................................................5-96

5.5.1 Basic Configuration .....................................................................................................................................................5-96

5.6 Assigning Certificates ............................................................................................................................................................5-99

5.6.1 Certificate Management ...........................................................................................................................................5-101

5.6.2 RSA Key Management ..............................................................................................................................................5-109

5.6.3 Certificate Creation ...................................................................................................................................................5-113

5.6.4 Generating a Certificate Signing Request ................................................................................................................5-115

5.7 RF Domain Overrides ...........................................................................................................................................................5-118

5.8 Profile Overrides ..................................................................................................................................................................5-121

5.9 Radio Power Overrides ........................................................................................................................................................5-124

5.10 Adoption Overrides ............................................................................................................................................................5-126

5.10.1 Profile Interface Override Configuration .................................................................................................................5-129

5.10.1.1 Ethernet Port Override Configuration ............................................................................................................5-130

5.10.1.2 Virtual Interface Override Configuration .......................................................................................................5-137

Table of Contents iii

5.10.1.3 Radio Override Configuration ....................................................................................................................... 5-142

5.10.1.4 WAN Backhaul Overrides ............................................................................................................................ 5-154

5.10.2 Overriding the Network Configuration .................................................................................................................... 5-156

5.10.2.1 Overriding the DNS Configuration ................................................................................................................ 5-157

5.10.2.2 Overriding an ARP Configuration .................................................................................................................. 5-159

5.10.2.3 Overriding a Quality of Service (QoS) Configuration .................................................................................... 5-161

5.10.2.4 Overriding a Static Route Configuration ..................................................................................................... 5-163

5.10.2.5 Overriding a Forwarding Database Configuration ........................................................................................ 5-165

5.10.2.6 Overriding a Bridge VLAN Configuration ...................................................................................................... 5-167

5.10.2.7 Overriding a Miscellaneous Network Configuration .................................................................................... 5-171

5.10.3 Overriding a Security Configuration ........................................................................................................................ 5-172

5.10.3.1 Overriding General Security Settings ........................................................................................................... 5-173

5.10.3.2 Overriding a Certificate Revocation List (CRL) Configuration ...................................................................... 5-174

5.10.3.3 Overriding a Profile’s NAT Configuration ..................................................................................................... 5-176

5.10.4 Overriding a Services Configuration ....................................................................................................................... 5-185

5.10.5 Overriding a Management Configuration ............................................................................................................... 5-186

5.10.6 Overriding an Advanced Configuration ...................................................................................................................5-191

5.11 Critical Resources .............................................................................................................................................................. 5-199

5.12 Managing an Event Policy ................................................................................................................................................. 5-201

Chapter 6 Wireless Configuration

6.1 Wireless LANs ......................................................................................................................................................................... 6-3

6.1.1 Basic WLAN Configuration ........................................................................................................................................... 6-4

6.1.1.1 WLAN Basic Configuration Deployment Considerations ................................................................................... 6-7

6.1.2 Configuring WLAN Security ..........................................................................................................................................6-7

6.1.2.1 802.1x EAP, EAP PSK and EAP MAC ............................................................................................... ................... 6-9

6.1.2.2 MAC Authentication ......................................................................................................................................... 6-11

6.1.2.3 PSK / None ........................................................................................................................................................ 6-12

6.1.2.4 Captive Portal .................................................................................................................................................... 6-13

6.1.2.5 WPA/WPA2-TKIP .............................................................................................................................................. 6-14

6.1.2.6 WPA2-CCMP ..................................................................................................................................................... 6-18

6.1.2.7 WEP 64.............................................................................................................................................................. 6-22

6.1.2.8 WEP 128 and KeyGuard.................................................................................................................................... 6-24

6.1.3 Configuring WLAN Firewall Support .......................................................................................................................... 6-26

6.1.4 Configuring Client Settings .........................................................................................................................................6-32

6.1.5 Configuring WLAN Accounting Settings .................................................................................................................... 6-35

6.1.5.1 Accounting Deployment Considerations .......................................................................................................... 6-37

6.1.6 Configuring Client Load Balancing .............................................................................................................................. 6-38

6.1.7 Configuring Advanced WLAN Settings ....................................................................................................................... 6-39

6.2 Configuring WLAN QoS Policies ........................................................................................................................................... 6-43

6.2.1 Configuring a WLAN’s QoS WMM Settings .............................................................................................................. 6-46

6.2.2 Configuring a WLAN’s QoS Rate Limit Settings ........................................................................................................ 6-51

6.3 Radio QoS Policy .................................................................................................................................................................... 6-60

6.3.1 Configuring a Radio’s QoS Policy ................................................................................................................................ 6-62

6.3.2 Radio QoS Configuration and Deployment Considerations ........................................................................................6-70

6.4 AAA Policy ............................................................................................................................................................................. 6-71

6.5 Association ACL .................................................................................................................................................................... 6-83

6.5.1 Association ACL Deployment Considerations ............................................................................................................ 6-85

6.6 Smart RF ................................................................................................................................................................................ 6-86

6.6.1 Smart RF Configuration and Deployment Considerations .......................................................................................... 6-98

iv WiNG 5.2.6 Access Point System Reference Guide

Chapter 7 Security Configuration

7.1 Wireless Firewall .....................................................................................................................................................................7-2

7.1.1 Defining a Firewall Configuration ............................................................................................ .....................................7-2

7.1.2 Configuring IP Firewall Rules ......................................................................................................................................7-13

7.1.3 Configuring MAC Firewall Rules .................................................................................................................................7-16

7.2 Wireless IPS (WIPS) ...............................................................................................................................................................7-20

7.3 Device Categorization ............................................................................................................................................................7-29

7.4 Security Deployment Considerations ....................................................................................................................................7-31

Chapter 8 Services Configuration

8.1 Configuring Captive Portal Policies .........................................................................................................................................8-2

8.1.1 Configuring a Captive Portal Policy ...............................................................................................................................8-2

8.2 Setting the Whitelist Configuration ......................................................................................................................................8-14

8.3 Setting the DHCP Server Configuration .................................................................................................................................8-16

8.3.1 Defining DHCP Pools ...................................................................................................................................................8-16

8.3.2 Defining DHCP Server Global Settings .......................................................................................................................8-24

8.3.3 DHCP Class Policy Configuration ................................................................................................................................8-26

8.4 Setting the RADIUS Configuration ........................................................................................................................................8-28

8.4.1 Creating RADIUS Groups .............................................................................................................................................8-28

8.4.1.1 Creating RADIUS Groups ..................................................................................................................................8-31

8.4.2 Defining User Pools .....................................................................................................................................................8-33

8.4.3 Configuring the RADIUS Server ..................................................................................................................................8-36

8.5 Services Deployment Considerations ....................................................................................................................................8-45

Chapter 9 Management Access

9.1 Creating Administrators and Roles .............................................................................................. ...........................................9-2

9.2 Setting the Access Control Configuration ...............................................................................................................................9-5

9.3 Setting the Authentication Configuration ...............................................................................................................................9-9

9.4 Setting the SNMP Configuration ...........................................................................................................................................9-11

9.5 SNMP Trap Configuration ......................................................................................................................................................9-14

9.6 Management Access Deployment Considerations ...............................................................................................................9-16

Chapter 10 Diagnostics

10.1 Fault Management ...............................................................................................................................................................10-2

10.2 Crash Files ............................................................................................................................................................................10-6

10.3 Advanced .............................................................................................................................................................................10-7

10.3.1 UI Debugging .............................................................................................................................................................10-7

10.3.2 Schema Browser .......................................................................................................................................................10-8

Chapter 11 Operations

11.1 Device Operations ................................................................................................................................................................11-2

11.1.1 Managing Firmware and Config Files .......................................................................................................................11-3

11.1.1.1 Upgrading Device Firmware ............................................................................................................................11-5

11.1.2 Managing File Transfers ...........................................................................................................................................11-7

11.1.3 Using the File Browser ...................................................................................................... ........................................11-9

11.1.4 AP Upgrades ............................................................................................................................................................11-10

11.2 Certificates .........................................................................................................................................................................11-15

Table of Contents v

11.2.1 Certificate Management .........................................................................................................................................11-15

11.2.2 RSA Key Management ............................................................................................................................................11-25

11.2.3 Certificate Creation .................................................................................................................................................11-30

11.2.4 Generating a Certificate Signing Request (CSR) .................................................................................................... 11-33

11.3 Smart RF ............................................................................................................................................................................ 11-36

11.3.1 Managing Smart RF for a RF Domain ..................................................................................................................... 11-36

11.4 Operations Deployment Considerations ........................................................................................................................... 11-40

Chapter 12 Statistics

12.1 System Statistics ................................................................................................................................................................ 12-2

12.1.1 Health ........................................................................................................................................................................12-2

12.1.2 Inventory .................................................................................................................................................................... 12-5

12.1.3 Adopted Devices ....................................................................................................................................................... 12-6

12.1.4 Pending Adoptions .................................................................................................................................................... 12-8

12.1.5 Offline Devices ..........................................................................................................................................................12-9

12.2 RF Domain Statistics ......................................................................................................................................................... 12-11

12.2.1 Health ......................................................................................................................................................................12-11

12.2.2 Inventory .................................................................................................................................................................. 12-15

12.2.3 Access Points .......................................................................................................................................................... 12-17

12.2.4 AP Detection ........................................................................................................................................................... 12-18

12.2.5 Wireless Clients ......................................................................................................................................................12-20

12.2.6 Wireless LANs ........................................................................................................................................................ 12-21

12.2.7 Radios ...................................................................................................................................................................... 12-23

12.2.7.1 Status ............................................................................................................................................................ 12-23

12.2.7.2 RF Statistics .................................................................................................................................................. 12-25

12.2.7.3 Traffic Statistics ........................................................................................................................................... 12-26

12.2.8 Mesh ....................................................................................................................................................................... 12-28

12.2.9 SMART RF ............................................................................................................................................................... 12-29

12.2.10 WIPS ...................................................................................................................................................................... 12-32

12.2.10.1 WIPS Client Blacklist .................................................................................................................................. 12-32

12.2.10.2 WIPS Events ................................................................................................................................................ 12-33

12.2.11 Captive Portal ........................................................................................................................................................12-34

12.2.12 Historical Data ...................................................................................................................................................... 12-35

12.2.12.1 Viewing Smart RF History ........................................................................................................................... 12-36

12.3 Access Point Statistics ...................................................................................................................................................... 12-37

12.3.1 Health ......................................................................................................................................................................12-37

12.3.2 Device ...................................................................................................................................................................... 12-40

12.3.3 AP Upgrade ............................................................................................................................................................. 12-43

12.3.4 Adoption ..................................................................................................................................................................12-44

12.3.4.1 Adopted APs ................................................................................................................................................. 12-45

12.3.4.2 AP Adoption History ..................................................................................................................................... 12-47

12.3.4.3 Pending Adoptions ........................................................................................................................................ 12-48

12.3.5 AP Detection ........................................................................................................................................................... 12-49

12.3.6 Wireless Client ........................................................................................................................................................ 12-50

12.3.7 Wireless LANs ........................................................................................................................................................ 12-52

12.3.8 Critical Resources ................................................................................................................................................... 12-53

12.3.9 Radios ...................................................................................................................................................................... 12-54

12.3.9.1 Status ............................................................................................................................................................ 12-56

12.3.9.2 RF Statistics .................................................................................................................................................. 12-58

12.3.9.3 Traffic Statistics ........................................................................................................................................... 12-60

vi WiNG 5.2.6 Access Point System Reference Guide

12.3.10 Mesh ......................................................................................................................................................................12-61

12.3.11 Interfaces ...............................................................................................................................................................12-63

12.3.11.1 General Statistics ........................................................................................................................................12-64

12.3.11.2 Viewing Interface Statistics Graph .............................................................................................................12-69

12.3.12 Network .................................................................................................................................................................12-69

12.3.12.1 ARP Entries ..................................................................................................................................................12-70

12.3.12.2 Route Entries ...............................................................................................................................................12-71

12.3.12.3 Bridge ..........................................................................................................................................................12-72

12.3.12.4 DHCP Options .............................................................................................................................................12-75

12.3.12.5 Cisco Discovery Protocol ............................................................................................................................12-77

12.3.12.6 Link Layer Discovery Protocol ....................................................................................................................12-78

12.3.13 DHCP Server ..........................................................................................................................................................12-79

12.3.13.1 DHCP Bindings ............................................................................................................................................12-81

12.3.13.2 DHCP Networks ...........................................................................................................................................12-82

12.3.14 Firewall ..................................................................................................................................................................12-82

12.3.14.1 Packet Flows ...............................................................................................................................................12-83

12.3.14.2 Denial of Service .........................................................................................................................................12-84

12.3.14.3 IP Firewall Rules .........................................................................................................................................12-86

12.3.14.4 MAC Firewall Rules ...................................................................................................................................12-88

12.3.14.5 NAT Translations ........................................................................................................................................12-90

12.3.14.6 DHCP Snooping ...........................................................................................................................................12-92

12.3.15 Certificates ............................................................................................................................................................12-93

12.3.15.1 Trustpoints ..................................................................................................................................................12-94

12.3.15.2 RSA Keys ....................................................................................................................................................12-97

12.3.16 WIPS ......................................................................................................................................................................12-98

12.3.16.1 WIPS Client Blacklist ..................................................................................................................................12-99

12.3.16.2 WIPS Events ..............................................................................................................................................12-100

12.3.17 Sensor Servers ....................................................................................................................................................12-101

12.3.18 Captive Portal ......................................................................................................................................................12-102

12.3.19 Network Time ......................................................................................................................................................12-104

12.3.19.1 NTP Status ................................................................................................................................................12-105

12.3.19.2 NTP Association ........................................................................................................................................12-107

12.3.20 Load Balancing ....................................................................................................................................................12-108

12.4 Wireless Client Statistics ................................................................................................................................................12-110

12.4.1 Health ....................................................................................................................................................................12-110

12.4.2 Details ....................................................................................................................................................................12-113

12.4.3 Traffic .....................................................................................................................................................................12-116

12.4.4 WMM TSPEC .........................................................................................................................................................12-119

12.4.5 Association History ...............................................................................................................................................12-121

12.4.6 Graph 12-123

This guide provides information on using the Motorola Solutions WiNG access point software to manage supported

Motorola Solutions access points (AP-6511, AP-6521, AP-6532, AP-7131, AP-7161 and AP-8132) in either Standalone AP

or Virtual Controller AP mode.

Documentation Set

The documentation set is partitioned into the following guides to provide information for specific user needs.

• Installation Guides - Each controller and access point has a unique Installation Guide which describes the basic

hardware setup and configuration required to transition to a more advanced configuration.

• Motorola Solutions WiNG 5.2.6 Access Point System Reference Guide (this guide) - Describes the configuration of

either a Standalone AP or Virtual Controller AP using the access point’s initial setup wizard and resident WiNG access

point software.

• Motorola Solutions WiNG 5.2.6 Controller System Reference Guide - Describes the configuration of dependent mode

access points using the WiNG 5.2.6 controller software. For information on managing a dependent mode AP in a

controller managed network, go to

http://supportcentral.motorola.com/support/product/manuals.do.

• Motorola Solutions Wireless Controller CLI Reference - Describes the Command Line Interface (CLI) and Management

Information Base (MIB) commands used to configure Motorola Solutions Wireless Services Controllers.

About this Guide

2 WiNG 5.2.6 Access Point System Reference Guide

Document Conventions

The following conventions are used in this document to draw your attention to important information:

Notational Conventions

The following additional notational conventions are used in this document:

• GUI text is used to highlight the following:

• Screen names

• Menu items

• Button names on a screen.

• Bullets (•) indicate:

• Action items

• Lists of alternatives

• Lists of required steps that are not necessarily sequential

• Sequential lists (e.g., those that describe step-by-step procedures) appear as numbered lists.

NOTE: Indicate tips or special requirements.

CAUTION: Indicates conditions that can cause equipment damage or data loss.

WARNING! Indicates a condition or procedure that could result in personal injury or

equipment damage.

!

CHAPTER 1 OVERVIEW

Motorola Solutions’ family of WING 5 supported access points enable high performance with secure and resilient wireless

voice and data services to remote locations with the scalability required to meet the needs of large distributed enterprises.

AP-6511, AP-6521, AP-6532, AP-7131, AP-7161 and AP-8132 model access points can use WING 5 software as its onboard

operating system. The access point’s unique WING 5 software enables the access point to function as a Standalone

“thick” access point, or a Virtual Controller AP capable of adopting and managing up to 24 access points of the same

model.

When deploying an access point as a pure Virtual Controller AP, with no RFS Series controllers available anywhere on the

network, the access point itself is a controller supporting other access points of the same model. The Virtual Controller AP

can:

• Provide firmware upgrades for connected access points

• Aggregate statistics for the group of access points the Virtual Controller is managing

• Be the single point of configuration for that deployment location

The WiNG 5 architecture is a solution designed for 802.11n networking. It leverages the best aspects of independent and

dependent architectures to create a smart network that meets the connectivity, quality and security needs of each user

and their applications, based on the availability of network resources including wired networks. By distributing

intelligence and control amongst access points, a WiNG 5 network can route directly via the best path, as determined by

factors including the user, location, the application and available wireless and wired resources. WiNG 5 extends the

differentiation Motorola Solutions access points offer to the next level, by making available services and security at every

point in the network. Access point managed traffic flow is optimized to prevent wired congestion and wireless congestion.

Traffic flows dynamically, based on user and application, and finds alternate routes to work around network choke points.

NOTE: The recommended way to administer a network populated by numerous access

points is to configure them directly from the Virtual Controller AP. If a single access point

configuration requires an update from the Virtual Controller AP’s assigned profile

configuration, the administrator should apply a Device Override to change just that

access point’s configuration. For more information on applying an override to an access

point’s Virtual Controller AP assigned configuration and profile, see Profile Overrides on

page 5-123.

1 - 2 WiNG 5.2.6 Access Point System Reference Guide

NOTE: This guide describes the installation and use of the WING 5 software designed

specifically for AP-6511, AP-6521, AP-6532, AP-7131, AP-7161 and AP-8132 model

access. It does not describe the version of the WING 5 software designed for use with the

RFS4000, RFS6000, RFS7000 and NX9000 Series models. For information on using WING

5 within a controller managed network, go to

http://supportcentral.motorola.com/support/product/manuals.do.

Overview 1 - 3

1.1 About the Motorola Solutions WiNG 5 Access Point Software