Wireless/Redundant Edge Services xl Module Management and Configuration Guide WS.02.xx and greater

ManualsBrandsHP ManualsComputer AccessoriesHP ProCurve Switch xl Access Controller Module

401

402

403

404

405

406

407

408

409

410

Table Of Contents

ProCurve Wireless Edge Services xl Module and ProCurve Redundant Wireless Services xl Module
Title Page
Copyright and Disclaimer Notices
Table of Contents
1. Introduction
- Contents
- ProCurve Wireless Edge Services xl Module
- Radio Ports
- Redundancy Groups
- Layer 2 and Layer 3 Roaming Between RPs and Modules
2. Configuring the ProCurve Wireless Edge Services xl Module
- Contents
- Management Interfaces
- Radio Port Adoption
- System Maintenance
- SNMP Traps and Error Reporting
- Radio Port Licenses
- Setting System Information-Name, Time, and Country Code
- Enabling Secure Network Time Protocol (NTP)
- Digital Certificates
3. Radio Port Configuration
- Contents
- Overview
- Country-Code and Regulatory Procedures
- Configuring Radio Settings
  - Creating a Radio Adoption Default Configuration
  - Creating a Radio Configuration for a Particular Radio
- Considerations for Enabling Client Roaming
- Quality of Service (QoS) on RP Radios
  - WMM
  - SpectraLink Voice Priority (SVP)
4. Wireless Local Area Networks (WLANs)
- Contents
- Overview
- Configuration Options: Normal Versus Advanced Mode
  - Normal Mode Configuration
  - Advanced Mode Configuration
- Configuring a WLAN
- VLAN Assignment
  - WLAN-Based VLAN Assignment
    - Considerations for WLAN-Based VLAN Assignment
  - Identity-Based, or Dynamic, VLAN Assignment
- Traffic Management (QoS)
5. Web Authentication for Mobile Users
- Contents
- Overview
- Configuring Web-Auth
- Copying Logo Files to the Module’s Flash
- Configuring Custom Web-Auth Pages
  - Configuring the CGI Commands for the Login Page
  - Configuring the CGI Commands for the Welcome Page
6. IP Services-IP Settings, DHCP, and DNS
- Contents
- IP Settings
- IP Routing
- DNS Client
- DHCP Server
7. Access Control Lists (ACLs)
- Contents
- Overview
- Configuring ACLs
8. Configuring Network Address Translation (NAT)
- Contents
- Overview
- Planning the NAT Configuration
  - Consider Your Company’s Requirements for NAT
  - Record Necessary IP Addresses and Select the NAT Implementation Method
    - Planning the Configuration for Dynamic NAT
    - Planning the Configuration for Static NAT
- Configuring Standard ACLs for Dynamic NAT
- Configuring NAT
9. Fast Layer 2 Roaming and Layer 3 Mobility
- Contents
- Overview
- Configuring Fast Layer 2 Roaming for WPA/WPA2 with 802.1X
- Configuring Layer 3 Mobility
- Verifying and Managing Layer 3 Mobility
  - Monitoring Peers
  - Viewing a Station’s Status
10. Redundancy Groups
- Contents
- High Availability for Wireless Services
- Configuring a Redundancy Group
11. RADIUS Server
- Contents
- Overview
- RADIUS Authentication
  - Configuring the Internal RADIUS Server
  - Enabling Authentication to the Internal Server on a WLAN
- RADIUS Accounting
  - Enabling Accounting to the Internal RADIUS Server on a WLAN
  - Viewing the Internal RADIUS Server’s Accounting Logs
12. Configuring Tunnels with Generic Routing Encapsulation
- Contents
- Overview
- Configuring GRE Tunnels
- Viewing GRE Tunnels and WLAN Mappings
13. Wireless Network Management
- Contents
- Overview
- Monitoring the Wireless Network
- AP Detection
- Configuring Station Intrusion Detection
- Logging and Alarms
  - Configuring Logging
  - Managing the Alarm Log
- MAC Filters (Local MAC Authentication)
- Network Self Healing
  - Neighbor Recovery
  - Interference Avoidance
14. sFlow Agent
- Contents
- Overview
- Configuring sFlow Using the Web Browser Interface
Appendix A - ProCurve Wireless Services xl Module Command Line Reference
- Contents
- Overview
- Manager Commands
- Global Commands
- Interface Commands
- Wireless Commands
- Show Commands
- Show Commands (All Contexts)
- Show Commands (Wireless)
- Support Commands
- Support Commands (All Contexts)
- Support Commands (Wireless)
Index
Back Cover

4-57

Wireless Local Area Networks (WLANs)

Configuring a WLAN

Table 4-4. Options for WPA/WPA2

Note that WPA2-enabled stations can connect to a WLAN that uses any of these

options. By default, WPA2 stations can use TKIP to associate to a WLAN. You

can turn off this option in the CLI, but typically should not.

WPA-enabled stations can only connect to a WPA2 AES WLAN if they have

software to support AES encryption.

To configure WPA/WPA2 encryption, complete these steps:

1. Access the Edit screen for the WLAN that is to use WPA/WPA2 with 802.1X:

a. Select Network Setup > WLAN Setup and click the Configuration tab.

b. Select the WLAN and click the Edit button. The Edit screen is displayed.

(See Figure 4-30.)

2. Under Authentication, select 802.1X EAP.

3. Under Encryption, select your encryption protocol:

• To use TKIP, check the WPA/WPA2-TKIP box.

The Wireless Edge Services xl Module and wireless stations will use

TKIP for all encryption. Note that both WPA and WPA2 stations can

connect, but WPA2 stations will use TKIP.

• To use AES, check the WPA2-AES box.

This option forces all wireless stations to use AES, the most secure

algorithm used for wireless encryption.

• To allow both protocols (mixed-mode), check both boxes.

4. If you want, you can also configure advanced options.

a. Click the Config button in the WPA section of the Edit screen. The WPA/

WPA2 screen is displayed.

Encryption Option Multicast and Broadcast

Keys

Per-Session Keys Supported Stations

WPA/WPA2 TKIP TKIP TKIP • WPA-enabled stations

• WPA2-enabled stations

WPA2 AES AES AES • WPA-enabled stations with

support for AES

• WPA2-enabled stations

WPA/WPA2 TKIP and

WPA2 AES

TKIP TKIP or AES • WPA-enabled stations

• WPA2-enabled stations