Wireless/Redundant Edge Services xl Module Management and Configuration Guide WS.02.xx and greater

ManualsBrandsHP ManualsComputer AccessoriesHP ProCurve Switch xl Access Controller Module

571

572

573

574

575

576

577

578

579

580

Table Of Contents

ProCurve Wireless Edge Services xl Module and ProCurve Redundant Wireless Services xl Module
Title Page
Copyright and Disclaimer Notices
Table of Contents
1. Introduction
- Contents
- ProCurve Wireless Edge Services xl Module
- Radio Ports
- Redundancy Groups
- Layer 2 and Layer 3 Roaming Between RPs and Modules
2. Configuring the ProCurve Wireless Edge Services xl Module
- Contents
- Management Interfaces
- Radio Port Adoption
- System Maintenance
- SNMP Traps and Error Reporting
- Radio Port Licenses
- Setting System Information-Name, Time, and Country Code
- Enabling Secure Network Time Protocol (NTP)
- Digital Certificates
3. Radio Port Configuration
- Contents
- Overview
- Country-Code and Regulatory Procedures
- Configuring Radio Settings
  - Creating a Radio Adoption Default Configuration
  - Creating a Radio Configuration for a Particular Radio
- Considerations for Enabling Client Roaming
- Quality of Service (QoS) on RP Radios
  - WMM
  - SpectraLink Voice Priority (SVP)
4. Wireless Local Area Networks (WLANs)
- Contents
- Overview
- Configuration Options: Normal Versus Advanced Mode
  - Normal Mode Configuration
  - Advanced Mode Configuration
- Configuring a WLAN
- VLAN Assignment
  - WLAN-Based VLAN Assignment
    - Considerations for WLAN-Based VLAN Assignment
  - Identity-Based, or Dynamic, VLAN Assignment
- Traffic Management (QoS)
5. Web Authentication for Mobile Users
- Contents
- Overview
- Configuring Web-Auth
- Copying Logo Files to the Module’s Flash
- Configuring Custom Web-Auth Pages
  - Configuring the CGI Commands for the Login Page
  - Configuring the CGI Commands for the Welcome Page
6. IP Services-IP Settings, DHCP, and DNS
- Contents
- IP Settings
- IP Routing
- DNS Client
- DHCP Server
7. Access Control Lists (ACLs)
- Contents
- Overview
- Configuring ACLs
8. Configuring Network Address Translation (NAT)
- Contents
- Overview
- Planning the NAT Configuration
  - Consider Your Company’s Requirements for NAT
  - Record Necessary IP Addresses and Select the NAT Implementation Method
    - Planning the Configuration for Dynamic NAT
    - Planning the Configuration for Static NAT
- Configuring Standard ACLs for Dynamic NAT
- Configuring NAT
9. Fast Layer 2 Roaming and Layer 3 Mobility
- Contents
- Overview
- Configuring Fast Layer 2 Roaming for WPA/WPA2 with 802.1X
- Configuring Layer 3 Mobility
- Verifying and Managing Layer 3 Mobility
  - Monitoring Peers
  - Viewing a Station’s Status
10. Redundancy Groups
- Contents
- High Availability for Wireless Services
- Configuring a Redundancy Group
11. RADIUS Server
- Contents
- Overview
- RADIUS Authentication
  - Configuring the Internal RADIUS Server
  - Enabling Authentication to the Internal Server on a WLAN
- RADIUS Accounting
  - Enabling Accounting to the Internal RADIUS Server on a WLAN
  - Viewing the Internal RADIUS Server’s Accounting Logs
12. Configuring Tunnels with Generic Routing Encapsulation
- Contents
- Overview
- Configuring GRE Tunnels
- Viewing GRE Tunnels and WLAN Mappings
13. Wireless Network Management
- Contents
- Overview
- Monitoring the Wireless Network
- AP Detection
- Configuring Station Intrusion Detection
- Logging and Alarms
  - Configuring Logging
  - Managing the Alarm Log
- MAC Filters (Local MAC Authentication)
- Network Self Healing
  - Neighbor Recovery
  - Interference Avoidance
14. sFlow Agent
- Contents
- Overview
- Configuring sFlow Using the Web Browser Interface
Appendix A - ProCurve Wireless Services xl Module Command Line Reference
- Contents
- Overview
- Manager Commands
- Global Commands
- Interface Commands
- Wireless Commands
- Show Commands
- Show Commands (All Contexts)
- Show Commands (Wireless)
- Support Commands
- Support Commands (All Contexts)
- Support Commands (Wireless)
Index
Back Cover

7-28

Access Control Lists (ACLs)

Configuring ACLs

3. From the Interface drop-down menu, select one of the following

interfaces:

• uplink—the module’s internal uplink port

• downlink—the module’s internal downlink port

• an uplink VLAN configured on the module

4. Select the ACL to control incoming traffic on the selected interface. The

options available depend on the type of interface:

• For VLAN interfaces, select an IP-type ACL from the IP ACL drop-down

menu.

• For an uplink or downlink port, you can select ACLs from either the

IP ACL drop-down menu, the MAC ACL drop-down menu, or both.

When you apply both types of ACLs, the Wireless Edge Services xl

Module processes the MAC extended ACL first, so a rule in the MAC

ACL always takes precedence over a rule in the IP ACL. However, if

a frame is not selected by any of a MAC extended ACL’s explicit rules,

the module sends the frame to be processed by the IP ACL.

5. Click the OK button to apply the ACL.

6. Click the Save link to preserve your configuration.

Using ACLs with DHCP Services

An ACL filters all traffic as soon as it arrives on the interface to which the ACL

is applied. Remember that most wireless stations have no IP address until they

receive one through DHCP. If you have applied an ACL to the VLAN (or tunnel)

associated with a WLAN, the module might drop stations’ DHCP requests

before they have the chance to receive a valid address.

To avoid problems, check all ACLs that filter traffic on a interface on which

DHCP requests might arrive: these ACLs must include a rule that permits those

requests. The best way to meet this requirement is to create an extended IP

ACL for the VLAN (or tunnel) in question and add a rule that permits any UDP

traffic destined to the DHCP server port (67).

Viewing ACL Statistics

You should check ACLs and verify that they are selecting traffic as they should.

To view statistics for your ACLs, select Security > ACLs and click the Statistics

tab. You can alternatively select Security > ACL Statistics.