User's Manual

ManualsBrandsAccton Technology ManualsElectronics802.11 abg AP



BAP120





Summary of content (306 pages)

PAGE 1
Powered by Accton BAP120
PAGE 2
PAGE 3
User Guide *+] *+] :LUHOHVV $FFHVV 3RLQW ,((( J DQG D 'XDO EDQG $FFHVV 3RLQW ZLWK %$6( 7; 5- 3RUW
PAGE 4
BAP120 ! " #
PAGE 5
COMPLIANCES Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation.
PAGE 6
COMPLIANCES High power radars are allocated as primary users (meaning they have priority) of the 5250-5350 MHz and 5650-5850 MHz bands. These radars could cause interference and /or damage to the access point when used in Canada. The term “IC” before the radio certification number only signifies that Industry Canada technical specifications were met.
PAGE 7
COMPLIANCES EC Conformance Declaration Marking by the above symbol indicates compliance with the Essential Requirements of the R&TTE Directive of the European Union (1999/5/ EC). This equipment meets the following conformance standards: • • • • EN 60950-1 (IEC 60950-1) - Product Safety EN 301 893 - Technical requirements for 5 GHz radio equipment EN 300 328 - Technical requirements for 2.
PAGE 8
COMPLIANCES • The 5 GHz Turbo Mode feature is not allowed for operation in any European Community country. The current setting for this feature is found in the 5 GHz 802.11a Radio Settings Window as described in the user guide. • The 5 GHz radio's Auto Channel Select setting described in the user guide must always remain enabled to ensure that automatic 5 GHz channel selection complies with European requirements. The current setting for this feature is found in the 5 GHz 802.
PAGE 9
COMPLIANCES Operation Using 5 GHz Channels in the European Community The user/installer must use the provided configuration utility to check the current channel of operation and make necessary configuration changes to ensure operation occurs in conformance with European National spectrum usage laws as described below and elsewhere in this document. Allowed 5GHz Channels in Each European Community Country Allowed Frequency Bands Allowed Channel Numbers Countries 5.15 - 5.
PAGE 10
COMPLIANCES Declaration of Conformity in Languages of the European Community English Hereby, Edgecore, declares that this Radio LAN device is in compliance with the essential requirements and other relevant provisions of Directive 1999/5/EC. Finnish Valmistaja Edgecore vakuuttaa täten että Radio LAN device tyyppinen laite on direktiivin 1999/5/EY oleellisten vaatimusten ja sitä koskevien direktiivin muiden ehtojen mukainen.
PAGE 11
COMPLIANCES Spanish Por medio de la presente Manufacturer declara que el Radio LAN device cumple con los requisitos esenciales y cualesquiera otras disposiciones aplicables o exigibles de la Directiva 1999/5/CE Portuguese Manufacturer declara que este Radio LAN device está conforme com os requisitos essenciais e outras disposições da Directiva 1999/5/CE.
PAGE 12
COMPLIANCES Important! Before making connections, make sure you have the correct cord set. Check it (read the label on the cable) against the following: Power Cord Set U.S.A. and Canada The cord set must be UL-approved and CSA certified. The minimum specifications for the flexible cord are: - No. 18 AWG - not longer than 2 meters, or 16 AWG.
PAGE 13
COMPLIANCES Veuillez lire à fond l'information de la sécurité suivante avant d'installer le access point: AVERTISSEMENT: L’installation et la dépose de ce groupe doivent être confiés à un personnel qualifié. • Ne branchez pas votre appareil sur une prise secteur (alimentation électrique) lorsqu'il n'y a pas de connexion de mise à la terre (mise à la masse). • Vous devez raccorder ce groupe à une sortie mise à la terre (mise à la masse) afin de respecter les normes internationales de sécurité.
PAGE 14
COMPLIANCES &RUGRQ pOHFWULTXH & ' $( )) $ *$+ , $ Suisse: La prise mâle d’alimentation doit respecter la norme SEV/ ASE 1011. Europe La prise secteur doit être conforme aux normes CEE 7/7 (“SCHUKO”) LE cordon secteur doit porter la mention ou et doit être de type HO3VVF3GO.75 (minimum).
PAGE 15
COMPLIANCES Stromkabel. Dies muss von dem Land, in dem es benutzt wird geprüft werden: U.S.A und Kanada Der Cord muß das UL gepruft und war das CSA beglaubigt. Das Minimum spezifikation fur der Cord sind: - Nu. 18 AWG - nicht mehr als 2 meter, oder 16 AWG. - Der typ SV oder SJ - 3-Leiter Der Cord muß haben eine strombelastbarkeit aus wenigstens 10 A Dieser Stromstecker muß hat einer erdschluss mit der typ NEMA 5-15P (15A, 125V) oder NEMA 6-15P (15A, 250V) konfiguration.
PAGE 16
COMPLIANCES xii
PAGE 17
Table of Contents &KDSWHU ,QWURGXFWLRQ $ .$( /3 . $ 4$ 5 * / 6* 5 * $ $ 7 8 9+ 6 5 8$ &KDSWHU +DUGZDUH ,QVWDOODWLRQ &KDSWHU ([WHUQDO $QWHQQDV & $ $ &KDSWHU 1HWZRUN &RQILJXUDWLRQ : 4 .
PAGE 18
&RQWHQWV C< : 59 9 ( D$ $( 6 6 $ 9+ 6 < ( 9:D / 8 ( ( 9:D $ ; $* D $( $ $6 / 8 ( ( 9:D % / 8 ( ( 9:D % ; $* / 8 ( ( 9:D % ;$ ( "$ & 8$ "$ 9 ( =E $> "$ 9 ( =E (> 9 + 9 $ & 8 6$ 9 $ 9 $ 9 $ % < ( 9; 9 $ &KDSWHU &RPPDQG /LQH ,QWHUIDFH ( 3 / 66$ < & 8$ ( 3 /<& / / ; / ( / 66$
PAGE 19
&RQWHQWV 3 4 3 + 3 4 9+ 6 D$ $( 6 / 66$ + * 6* + 6 $6 $6 *$ 4 * 3 % $F * 3 % * * % $F * 3 * * * 3 * % * 3 * 6 * 3 * * * 3 * % 4 F 6(6 & 6(6 & 3 4 $*6$ $( 6 3 4 + 6 3 4 % 3 4 8 ( 3 4 3$ 4$ 9+ 6 < (( ( / 66$ (( ( (( ( 3 (( ( (( ( % (( ( 8$ + +* (( ( $ 3 4 (( ( 3 4 %
PAGE 20
&RQWHQWV 6* % 66 + 6* % $ 6* % $ 6* % $F % 6* % 3 6* % $* 6* % ( 6* % 6* % $ ( 6* % 8 6* % 8 $ ( 6 3 4 6* ( * 3 4 6* 3 4 6* ( * $ ( 6 3 4 6* $ ( 3 4 6* 8 3 4 6* 8 $ ( 6 3 4 6* $ 3 / 66$ F 8 *+ 3 4 F 8 " 5& 9 / $ % $ $ % * $
PAGE 21
&RQWHQWV $ 8 + $ 8 6$ $ 3 $ % 6$ $ 3 $ 6 ( / 66$ 8 $ F ( 8 $* 6$ $( 8 * . $F 8 * . 8 3 +* $F 8 3 +* * 3 4 8 59 7 ( / 66$ F ( = 59> F ( 3$ $ + F ( . *$ F ( . 3 F ( + $6 + $( 6 3 4 F ( $( ( 6 3 4 F ( 8 + 3 4 F ( .
PAGE 22
&RQWHQWV $ 6 * 4 $ 6 * $6F $ $ $ $ $ $ $ F $ %$ 6 * 8 $(6 $ ( 3 3 3 * $ * ( * + 6 6$- $ $ $ 6 %$ $ 3 6 %$ 3 4 3 4 8$ 4 3 4 $ " ( 5 / 66$ ( $* $F ( $* $ 3 $ ( $* $ ( $* %$ ( $* $ 3 4 ( $* 9 + / 66$ $ 3 +* .
PAGE 23
&RQWHQWV & / 66$ $** C< : / 66$ % $ 6$ $( 6 % $ % $ DD / 66$ 466 466 $ .
PAGE 24
&RQWHQWV --
PAGE 25
Chapter 1: Introduction ;3 $ & E $ ( $ * 3$ * % $ *$ J 4 3 (3 * $ $ 66 $ F 4 3 4 < : $ 8 - 6 F % ? ** 4 3 $ E $J E FJ E ( 4 $ $* ;3 88 8$ J $F 4 % + 4 3 $F $% ( % 4 < : =43 3 ( 6 6$ $ % 3 $ 8 $F (> ( E $ $ E ( 3 (+J 3 $ * $ $ + * $
PAGE 26
,QWURGXFWLRQ Package Checklist ;3 L L L L L L *$ .$( K I I /$ ( + 4 . $F I "9 $F I / * 4 $ $* $ * 4 FF 8 /5 & 8 6 + $ 8 3 $ $ + J 6 ( $6$( *$ &8 * F J $ 3 $ J ( 3 ( $ *$ . ( 6$ $ 3 6 $($ *$ .
PAGE 27
+DUGZDUH 'HVFULSWLRQ 5HDU 3DQHO Lock 9 + 9 DC 5V C5/ 4 9 . POE In Reset Console / " 7 "S J / &RPSRQHQW 'HVFULSWLRQ $QWHQQDV ;3 $ * $ 3$F % + $ $ 8 4 66 $ % + $ $ + 6 4 $ $ $ % $ $ 6 ( $ J 3 * ( $% 6 *$ 3 8$ ( 88 3 % (J 3 $ * 3 .
PAGE 28
,QWURGXFWLRQ /(' 6WDWXV 'HVFULSWLRQ 3:5 2Q ,QGLFDWHV WKDW WKH V\VWHP LV ZRUNLQJ QRUPDOO\ /LQN D J )ODVKLQJ ,QGLFDWHV UXQQLQJ D VHOI WHVW RU ORDGLQJ WKH VRIWZDUH SURJUDP )ODVKLQJ 3URORQJHG ,QGLFDWHV V\VWHP HUURUV 2Q ,QGLFDWHV D YDOLG 0ESV (WKHUQHW FDEOH OLQN )ODVKLQJ ,QGLFDWHV WKDW WKH DFFHVV SRLQW LV WUDQVPLWWLQJ RU UHFHLYLQJ GDWD RQ D 0ESV (WKHUQHW /$1 )ODVKLQJ UDWH LV SURSRUWLRQDO WR QHWZRUN DFWLYLW\ 2Q ,QGLFDWHV WKDW WKH D UDGLR LV HQDEOHG )ODVKLQJ
PAGE 29
)HDWXUHV DQG %HQHILWV 1RWH ;3 "S * $ ** 4 % 3 = > F$ 3 & E $8 $ $ " 8 3 * 8 3 N 4 / O 8 8 6$ ** + ( * 4 3 $ * , 4 . * 8 6 $ 4 .
PAGE 30
,QWURGXFWLRQ System Defaults ;3 8 4 ( $F 6 8 3 $ * , F$ + 6 8$ ; 3 $ * 8$ J 3 /<& 66$ N 8 ( $ O 8 6 3 - % * 6* 7DEOH 6\VWHP 'HIDXOWV )HDWXUH 3DUDPHWHU 'HIDXOW ,GHQWLILFDWLRQ 6\VWHP 1DPH (QWHUSULVH :LUHOHVV $3 $GPLQLVWUDWLRQ 8VHU 1DPH DGPLQ 3DVVZRUG 1XOO QR SDVVRZUG +773 6HUYHU (QDEOHG +773 6HUYHU 3RUW +7736 6HUYHU (QDEOHG +7736 6HUYHU 3RUW *HQHUDO 7&3 ,3 :HE 5HGLUHFW
PAGE 31
6\VWHP 'HIDXOWV 7DEOH 6\VWHP 'HIDXOWV )HDWXUH 3DUDPHWHU 'HIDXOW 0$& $XWKHQWLFDWLRQ 0$& 'LVDEOHG $XWKHQWLFDWLRQ 6HVVLRQ 7LPHRXW PLQXWHV GLVDEOHG /RFDO 0$& 6\VWHP 'HIDXOW $OORZHG ; $XWKHQWLFDWLRQ 9/$1 4R6 )LOWHU &RQWURO 6103 /RFDO 0$& 3HUPLVVLRQ $OORZHG 6WDWXV 'LVDEOHG %URDGFDVW .H\ 5HIUHVK PLQXWHV GLVDEOHG 6HVVLRQ .H\ 5HIUHVK PLQXWHV GLVDEOHG 5HDXWKHQWLFDWLRQ 5HIUHVK 5DWH VHFRQGV GLVDEOHG 6XSSOLFDQW 'LVDEOHG 0DQDJHPHQW 9/$1 ,' 9/$1 ,' 9$3 ,QWHUIDFH
PAGE 32
,QWURGXFWLRQ 7DEOH 6\VWHP 'HIDXOWV )HDWXUH 3DUDPHWHU 'HIDXOW 6\VWHP /RJJLQJ 6\VORJ 'LVDEOHG /RJJLQJ +RVW 'LVDEOHG /RJJLQJ &RQVROH 'LVDEOHG 6\VWHP &ORFN (WKHUQHW ,QWHUIDFH ,3 $GGUHVV +RVW 1DPH /RJJLQJ /HYHO ,QIRUPDWLRQDO /RJJLQJ )DFLOLW\ 7\SH 6173 6HUYHU 6WDWXV (QDEOHG 6173 6HUYHU ,3 6173 6HUYHU ,3 'DWH DQG 7LPH -DQ ZKHQ WKHUH LV QR WLPH VHUYHU 'D\OLJKW 6DYLQJ 7LPH 'LVDEOHG 7LPH =RQH *07 (DVWHUQ 7LPH
PAGE 33
6\VWHP 'HIDXOWV 7DEOH 6\VWHP 'HIDXOWV )HDWXUH 3DUDPHWHU 'HIDXOW :LUHOHVV ,QWHUIDFH D ,$33 (QDEOHG 66,' 9$3B7(67B $ > @ 7XUER 0RGH 'LVDEOHG :LUHOHVV 6HFXULW\ D 6WDWXV 'LVDEOHG $XWR &KDQQHO 6HOHFW (QDEOHG &ORVHG 6\VWHP 'LVDEOHG 7UDQVPLW 3RZHU )XOO 0D[ 6WDWLRQ 'DWD 5DWH 0ESV 0XOWLFDVW 'DWD 5DWH 0ESV %HDFRQ ,QWHUYDO 78V 'DWD %HDFRQ 5DWH '7,0 ,QWHUYDO EHDFRQ 576 7KUHVKROG E\WHV $VVRFLDWLRQ 7LPHRXW ,QWHUYDO PLQXWHV $XWKHQWLFDWLRQ 7LPHR
PAGE 34
,QWURGXFWLRQ 7DEOH 6\VWHP 'HIDXOWV )HDWXUH 3DUDPHWHU 'HIDXOW :LUHOHVV ,QWHUIDFH E J ,$33 (QDEOHG 66,' 9$3B7(67B * > @ 5DGLR 0RGH E J :LUHOHVV 6HFXULW\ E J 6WDWXV 'LVDEOHG $XWR &KDQQHO 6HOHFW (QDEOHG &ORVHG 6\VWHP 'LVDEOHG 7UDQVPLW 3RZHU )XOO 0D[ 6WDWLRQ 'DWD 5DWH 0ESV 0XOWLFDVW 'DWD 5DWH 0ESV 3UHDPEOH /HQJWK /RQJ %HDFRQ ,QWHUYDO 78V 'DWD %HDFRQ 5DWH '7,0 ,QWHUYDO EHDFRQ 576 7KUHVKROG E\WHV $VVRFLDWLRQ 7LPHRXW ,QWHUYDO PLQ
PAGE 35
6\VWHP 'HIDXOWV 7DEOH 6\VWHP 'HIDXOWV )HDWXUH 3DUDPHWHU 'HIDXOW /LQN ,QWHJULW\ 6WDWXV 'LVDEOHG 3LQJ ,QWHUYDO VHFRQGV )DLO 5HWU\ &RXQW
PAGE 36
,QWURGXFWLRQ
PAGE 37
Chapter 2: Hardware Installation 6HOHFW D 6LWH ± &KRRVH D SURSHU SODFH IRU WKH DFFHVV SRLQW ,Q JHQHUDO WKH EHVW ORFDWLRQ LV DW WKH FHQWHU RI \RXU ZLUHOHVV FRYHUDJH DUHD ZLWKLQ OLQH RI VLJKW RI DOO ZLUHOHVV GHYLFHV 7U\ WR SODFH WKH DFFHVV SRLQW LQ D SRVLWLRQ WKDW FDQ EHVW FRYHU LWV %DVLF 6HUYLFH 6HW UHIHU WR ³,QIUDVWUXFWXUH :LUHOHVV /$1´ RQ SDJH )RU RSWLPXP SHUIRUPDQFH FRQVLGHU WKHVH SRLQWV 0RXQW WKH DFFHVV SRLQW DV KLJK DV SRVVLEOH DERYH DQ\ REVWUXFWLRQV LQ WKH FRYHUDJH DUHD $YRLG
PAGE 38
+DUGZDUH ,QVWDOODWLRQ 2EVHUYH WKH 6HOI 7HVW ± :KHQ \RX SRZHU RQ WKH DFFHVV SRLQW YHULI\ WKDW WKH 3:5 LQGLFDWRU VWRSV IODVKLQJ DQG UHPDLQV RQ DQG WKDW WKH RWKHU LQGLFDWRUV VWDUW IXQFWLRQLQJ DV GHVFULEHG XQGHU ³/(' ,QGLFDWRUV´ RQ SDJH ,I WKH 3:5 /(' GRHV QRW VWRS IODVKLQJ WKH VHOI WHVW KDV QRW FRPSOHWHG FRUUHFWO\ 5HIHU WR ³7URXEOHVKRRWLQJ´ RQ SDJH $ &RQQHFW WKH (WKHUQHW &DEOH ± 7KH DFFHVV SRLQW FDQ EH ZLUHG WR D 0ESV (WKHUQHW WKURXJK D QHWZRUN GHYLFH VXFK DV D KXE RU D VZL
PAGE 39
Chapter 3: External Antennas 7KH DFFHVV SRLQW SURYLGHV D YDULHW\ RI H[WHUQDO DQWHQQD RSWLRQV IRU H[WHQGLQJ WKH UDGLR UDQJH DQG VKDSLQJ WKH FRYHUJH DUHD 7KHVH DQWHQQDV RIIHU D QXPEHU RI GLIIHUHQW PRXQWLQJ ORFDWLRQV LQFOXGLQJ LQGRRU RU RXWGRRU ZDOO FHLOLQJ RU UDGLR PDVW 7KLV FKDSWHU VKRZV \RX KRZ WR LQVWDOO DQ H[WHUQDO DQWHQQD IRU \RXU DFFHVW SRLQW 1RWH 7KH XVH RI H[WHUQDO DQWHQQDV ZLWK WKH DFFHVV SRLQW UHTXLUHV SURIHVVLRQDO SHUVRQQHO WKDW DUH WUDLQHG LQ WKH LQVWDOODWLRQ RI UDGLR WUDQVPLWWLQJ HTXLS
PAGE 40
([WHUQDO $QWHQQDV 2PQLGLUHFWLRQDO $QWHQQDV &RQVLGHU WKHVH IDFWRUV ZKHQ VHOHFWLQJ D ORFDWLRQ IRU WKHVH DQWHQQDV $OZD\V PRXQW WKH DQWHQQD LQ D YHUWLFDO RULHQWDWLRQ VR WKDW WKH UDGLR FRYHUDJH SDWWHUQ ILOOV WKH LQWHQGHG KRUL]RQWDO VSDFH )RU RSWLPXP FRYHUDJH PRXQW WKH DQWHQQD DW WKH FHQWHU RI WKH DUHD ZLWK D OLQH RI VLJKW SDWK WR DOO SRLQWV ZLWKLQ WKH DUHD $YRLG PRXQWLQJ QH[W WR RU QHDU EXLOGLQJ VXSSRUW FROXPQV RU RWKHU REVWUXFWLRQV WKDW PD\ FDXVH UHGXFHG VLJQDO RU QXOO ]RQHV LQ SDUWV
PAGE 41
,QVWDOODWLRQ 3URFHGXUHV 7R FRQQHFW SLJWDLO FDEOHV WR WKH DFFHVV SRLQW IROORZ WKHVH VWHSV 'LVDEOH WKH DFFHVV SRLQW UDGLR XVLQJ WKH ZHE EURZVHU LQWHUIDFH &/, RU 6103 5HPRYH SRZHU WR WKH DFFHVV SRLQW 5HPRYH ERWK RI WKH DFFHVV SRLQW¶V DQWHQQDV E\ XQVFUHZLQJ WKHP DW WKHLU EDVH Unscrew antenna to remove )RU GLYHUVLW\ DQWHQQDV FRQQHFW WKH DQWHQQD SLJWDLO FDEOHV WR WKH H[SRVHG 5HYHUVH 60$ FRQQHFWRUV RQ ERWK VLGHV RI WKH DFFHVV SRLQW )RU QRQ GLYHUVLW\ DQWHQQDV EH VXUH WR FRQQHFW WK
PAGE 42
([WHUQDO $QWHQQDV 1RWH %HIRUH HQDEOLQJ WKH UDGLR ZLWK DQ H[WHUQDO DQWHQQD DWWDFKHG EH VXUH WR ILUVW FRQILJXUH WKH DFFHVV SRLQW¶V DQWHQQD PRGH
PAGE 43
Chapter 4: Network Configuration :LUHOHVV QHWZRUNV VXSSRUW D VWDQG DORQH FRQILJXUDWLRQ DV ZHOO DV DQ LQWHJUDWHG FRQILJXUDWLRQ ZLWK 0ESV (WKHUQHW /$1V 7KH *+] *+] :LUHOHVV $FFHVV 3RLQW DOVR SURYLGHV UHSHDWHU DQG EULGJLQJ VHUYLFHV WKDW FDQ EH FRQILJXUHG LQGHSHQGHQWO\ RQ HLWKHU WKH *+] RU *+] UDGLR LQWHUIDFHV $FFHVV SRLQWV FDQ EH GHSOR\HG WR VXSSRUW ZLUHOHVV FOLHQWV DQG FRQQHFW ZLUHG /$1V LQ WKH IROORZLQJ FRQILJXUDWLRQV $G KRF IRU GHSDUWPHQWDO 62+2 RU HQWHUSULVH /$1V ,QIUD
PAGE 44
1HWZRUN &RQILJXUDWLRQ Network Topologies $G +RF :LUHOHVV /$1 QR $FFHVV 3RLQW $Q DG KRF ZLUHOHVV /$1 FRQVLVWV RI D JURXS RI FRPSXWHUV HDFK HTXLSSHG ZLWK D ZLUHOHVV DGDSWHU FRQQHFWHG YLD UDGLR VLJQDOV DV DQ LQGHSHQGHQW ZLUHOHVV /$1 &RPSXWHUV LQ D VSHFLILF DG KRF ZLUHOHVV /$1 PXVW WKHUHIRUH EH FRQILJXUHG WR WKH VDPH UDGLR FKDQQHO $Q DG KRF ZLUHOHVV /$1 FDQ EH XVHG IRU D EUDQFK RIILFH RU 62+2 RSHUDWLRQ Ad Hoc Wireless LAN Notebook with Wireless USB Adapter Notebook with Wireless PC Card PC with
PAGE 45
1HWZRUN 7RSRORJLHV ,QIUDVWUXFWXUH :LUHOHVV /$1 7KH DFFHVV SRLQW DOVR SURYLGHV DFFHVV WR D ZLUHG /$1 IRU ZLUHOHVV ZRUNVWDWLRQV $Q LQWHJUDWHG ZLUHG ZLUHOHVV /$1 LV FDOOHG DQ ,QIUDVWUXFWXUH FRQILJXUDWLRQ $ %DVLF 6HUYLFH 6HW %66 FRQVLVWV RI D JURXS RI ZLUHOHVV 3& XVHUV DQG DQ DFFHVV SRLQW WKDW LV GLUHFWO\ FRQQHFWHG WR WKH ZLUHG /$1 (DFK ZLUHOHVV 3& LQ WKLV %66 FDQ WDON WR DQ\ FRPSXWHU LQ LWV ZLUHOHVV JURXS YLD D UDGLR OLQN RU DFFHVV RWKHU FRPSXWHUV RU QHWZRUN UHVRXUFHV LQ WKH ZLUHG /$1 LQIUDVWUX
PAGE 46
1HWZRUN &RQILJXUDWLRQ ,QIUDVWUXFWXUH :LUHOHVV /$1 IRU 5RDPLQJ :LUHOHVV 3&V 7KH %DVLF 6HUYLFH 6HW %66 GHILQHV WKH FRPPXQLFDWLRQV GRPDLQ IRU HDFK DFFHVV SRLQW DQG LWV DVVRFLDWHG ZLUHOHVV FOLHQWV 7KH %66 ,' LV D ELW ELQDU\ QXPEHU EDVHG RQ WKH DFFHVV SRLQW¶V ZLUHOHVV 0$& DGGUHVV DQG LV VHW DXWRPDWLFDOO\ DQG WUDQVSDUHQWO\ DV FOLHQWV DVVRFLDWH ZLWK WKH DFFHVV SRLQW 7KH %66 ,' LV XVHG LQ IUDPHV VHQW EHWZHHQ WKH DFFHVV SRLQW DQG LWV FOLHQWV WR LGHQWLI\ WUDIILF LQ WKH VHUYLFH DUHD 7KH %66 ,' LV RQ
PAGE 47
1HWZRUN 7RSRORJLHV ,QIUDVWUXFWXUH :LUHOHVV %ULGJH 7KH ,((( VWDQGDUG GHILQHV D :,UHOHVV 'LVWULEXWLRQ 6\VWHP :'6 IRU EULGJH FRQQHFWLRQV EHWZHHQ %66 DUHDV DFFHVV SRLQWV 7KH DFFHVV SRLQW XVHV :'6 WR IRUZDUG WUDIILF RQ OLQNV EHWZHHQ XQLWV 7KH DFFHVV SRLQW VXSSRUWV :'6 EULGJH OLQNV RQ HLWKHU WKH *+] D RU *+] E J EDQGV DQG FDQ EH XVHG ZLWK YDULRXV H[WHUQDO DQWHQQDV WR RIIHU IOH[LEOH GHSOR\PHQW RSWLRQV 8S WR VL[ :'6 EULGJH OLQNV FDQ EH VSHFLILHG IRU HDFK XQLW LQ WKH ZLUH
PAGE 48
1HWZRUN &RQILJXUDWLRQ ,QIUDVWUXFWXUH :LUHOHVV 5HSHDWHU 7KH DFFHVV SRLQW FDQ DOVR RSHUDWH LQ D EULGJH ³UHSHDWHU´ PRGH WR H[WHQG WKH UDQJH RI OLQNV WR ZLUHOHVV FOLHQWV 7KH DFFHVV SRLQW XVHV :'6 WR IRUZDUG WUDIILF EHWZHHQ WKH UHSHDWHU EULGJH DQG WKH URRW EULGJH 7KH DFFHVV SRLQW VXSSRUWV XS WR VL[ :'6 UHSHDWHU OLQNV ,Q UHSHDWHU PRGH WKH DFFHVV SRLQW GRHV QRW VXSSRUW DQ (WKHUQHW OLQN WR D ZLUHG /$1 1RWH WKDW ZKHQ WKH DFFHVV SRLQW RSHUDWHV LQ WKLV PRGH RQO\ KDOI WKH QRUPDO WKURXJKSXW LV SRVVLEOH 7K
PAGE 49
Chapter 5: Initial Configuration 7KH *+] *+] :LUHOHVV $FFHVV 3RLQW RIIHUV D YDULHW\ RI PDQDJHPHQW RSWLRQV LQFOXGLQJ D ZHE EDVHG LQWHUIDFH D GLUHFW FRQQHFWLRQ WR WKH FRQVROH SRUW 7HOQHW 6HFXUH 6KHOO 66+ RU XVLQJ 6103 VRIWZDUH 7KH LQLWLDO FRQILJXUDWLRQ VWHSV FDQ EH PDGH WKURXJK WKH ZHE EURZVHU LQWHUIDFH RU &/, 7KH DFFHVV SRLQW UHTXHVWV DQ ,3 DGGUHVV YLD '+&3 E\ GHIDXOW ,I QR UHVSRQVH LV UHFHLYHG IURP WKH '+&3 VHUYHU WKHQ WKH DFFHVV SRLQW XVHV WKH GHIDXOW DGGUHVV ,I WKLV DGGU
PAGE 50
,QLWLDO &RQILJXUDWLRQ 2QFH \RX KDYH VHW XS WKH WHUPLQDO FRUUHFWO\ SUHVV WKH >(QWHU@ NH\ WR LQLWLDWH WKH FRQVROH FRQQHFWLRQ 7KH FRQVROH ORJLQ VFUHHQ ZLOO EH GLVSOD\HG )RU D GHVFULSWLRQ RI KRZ WR XVH WKH &/, VHH ³8VLQJ WKH &RPPDQG /LQH ,QWHUIDFH´ RQ SDJH )RU D OLVW RI DOO WKH &/, FRPPDQGV DQG GHWDLOHG LQIRUPDWLRQ RQ XVLQJ WKH &/, UHIHU WR ³&RPPDQG *URXSV´ RQ SDJH ,QLWLDO &RQILJXUDWLRQ 6WHSV /RJJLQJ ,Q ± (QWHU ³DGPLQ´ IRU WKH XVHU QDPH 7KHUH LV QR GHIDXOW SDVVZRUG 7KH &/, SURPSW
PAGE 51
7KH KRPH SDJH GLVSOD\V WKH 0DLQ 0HQX
PAGE 52
Chapter 6: System Configuration %HIRUH FRQWLQXLQJ ZLWK DGYDQFHG FRQILJXUDWLRQ ILUVW FRPSOHWH WKH LQLWLDO FRQILJXUDWLRQ VWHSV GHVFULEHG LQ &KDSWHU WR VHW XS DQ ,3 DGGUHVV IRU WKH DFFHVV SRLQW 7KH DFFHVV SRLQW FDQ EH PDQDJHG E\ DQ\ FRPSXWHU XVLQJ D ZHE EURZVHU ,QWHUQHW ([SORUHU RU DERYH RU 1HWVFDSH RU DERYH (QWHU WKH FRQILJXUHG ,3 DGGUHVV RI WKH DFFHVV SRLQW RU XVH WKH GHIDXOW DGGUHVV KWWS 7R ORJ LQWR WKH DFFHVV SRLQW HQWHU WKH GHIDXOW XVHU QDPH ³DGPLQ´ DQG WKHQ SUHVV ³/2*
PAGE 53
Advanced Configuration 7KH $GYDQFHG &RQILJXUDWLRQ SDJHV LQFOXGH WKH IROORZLQJ RSWLRQV 7DEOH 0HQX 0HQX 'HVFULSWLRQ 3DJH ! " # " " $ %$ & $ '() * '() * & + , (
PAGE 54
( 7DEOH 0HQX 0HQX 'HVFULSWLRQ 3DJH 3 4(" $ )$ & 9 ) & - (" ) & - & & & -9 3 5 & 9 6\VWHP ,GHQWLILFDWLRQ 7KH V\VWH
PAGE 55
&/, &RPPDQGV IRU 6\VWHP ,GHQWLILFDWLRQ ± (QWHU WKH JOREDO FRQILJXUDWLRQ PRGH DQG XVH WKH V\VWHP QDPH FRPPDQG WR VSHFLI\ D QHZ V\VWHP QDPH 7KHQ UHWXUQ WR WKH ([HF PRGH DQG XVH WKH VKRZ V\VWHP FRPPDQG WR GLVSOD\ WKH FKDQJHV WR WKH V\VWHP LGHQWLILFDWLRQ VHWWLQJV Enterprise AP#config Enter configuration commands, one per line.
PAGE 56
( 7&3 ,3 6HWWLQJV &RQILJXULQJ WKH DFFHVV SRLQW ZLWK DQ ,3 DGGUHVV H[SDQGV \RXU DELOLW\ WR PDQDJH WKH DFFHVV SRLQW $ QXPEHU RI DFFHVV SRLQW IHDWXUHV GHSHQG RQ ,3 DGGUHVVLQJ WR RSHUDWH 1RWH
PAGE 57
6XEQHW 0DVN 7KH PDVN WKDW LGHQWLILHV WKH KRVW DGGUHVV ELWV XVHG IRU URXWLQJ WR VSHFLILF VXEQHWV 'HIDXOW *DWHZD\ 7KH GHIDXOW JDWHZD\ LV WKH ,3 DGGUHVV RI WKH URXWHU IRU WKH DFFHVV SRLQW ZKLFK LV XVHG LI WKH UHTXHVWHG GHVWLQDWLRQ DGGUHVV LV QRW RQ WKH ORFDO VXEQHW ,I \RX KDYH PDQDJHPHQW VWDWLRQV '16 5$',86 RU RWKHU QHWZRUN VHUYHUV ORFDWHG RQ DQRWKHU VXEQHW W\SH WKH ,3 DGGUHVV RI WKH GHIDXOW JDWHZD\ URXWHU LQ WKH WH[W ILHOG SURYLGHG 2WKHUZLVH OHDYH WKH DGGUHVV DV DOO
PAGE 58
( 5$',86 5HPRWH $XWKHQWLFDWLRQ 'LDO LQ 8VHU 6HUYLFH 5$',86 LV DQ DXWKHQWLFDWLRQ SURWRFRO WKDW XVHV VRIWZDUH UXQQLQJ RQ D FHQWUDO VHUYHU WR FRQWURO DFFHVV WR 5$',86 DZDUH GHYLFHV RQ WKH QHWZRUN $Q DXWKHQWLFDWLRQ VHUYHU FRQWDLQV D GDWDEDVH RI XVHU FUHGHQWLDOV IRU HDFK XVHU WKDW UHTXLUHV DFFHVV WR WKH QHWZRUN $ SULPDU\ 5$',86 VHUYHU PXVW EH VSHFLILHG IRU WKH DFFHVV SRLQW WR LPSOHPHQW ,((( ; QHWZRUN DFFHVV FRQWURO DQG :L )L 3URWHFWHG $FFHVV :3$ ZLUHOHVV VHFXULW\ $ VHFRQG
PAGE 59
-
PAGE 60
( 0$& $GGUHVV )RUPDW ± 0$& DGGUHVVHV FDQ EH VSHFLILHG LQ RQH RI IRXU IRUPDWV XVLQJ QR GHOLPHWHU ZLWK D VLQJOH GDVK GHOLPHWHU ZLWK PXOWLSOH GDVK GHOLPHWHUV DQG ZLWK PXOWLSOH FRORQ GHOLPHWHUV 9/$1 ,' )RUPDW ± $ 9/$1 ,' D QXPEHU EHWZHHQ DQG FDQ EH DVVLJQHG WR HDFK FOLHQW DIWHU VXFFHVVIXO DXWKHQWLFDWLRQ XVLQJ ,((( ; DQG D FHQWUDO 5$',86 VHUYHU 7KH XVHU 9/$1 ,'V PXVW EH FRQILJXUHG RQ WKH 5$',86 VHUYHU IRU HDFK XVHU DXWKRUL]HG WR DFFHVV WKH QHWZRUN 9/$1 ,'V FDQ EH
PAGE 61
&/, &RPPDQGV IRU 5$',86 ± )URP WKH JOREDO FRQILJXUDWLRQ PRGH XVH WKH UDGLXV VHUYHU DGGUHVV FRPPDQG WR VSHFLI\ WKH DGGUHVV RI WKH SULPDU\ RU VHFRQGDU\ 5$',86 VHUYHUV 7KH IROORZLQJ H[DPSOH FRQILJXUHV WKH VHWWLQJV IRU WKH SULPDU\ 5$',86 VHUYHU &RQILJXUH WKH RWKHU SDUDPHWHUV IRU WKH 5$',86 VHUYHU 7KHQ XVH WKH VKRZ VKRZ UDGLXV FRPPDQG IURP WKH ([HF PRGH WR GLVSOD\ WKH FXUUHQW VHWWLQJV IRU WKH SULPDU\ DQG VHFRQGDU\ 5$',86 VHUYHUV Enterprise Enterprise Enterprise Enterprise Ente
PAGE 62
( 66+ 6HWWLQJV 7HOQHW LV D UHPRWH PDQDJHPHQW WRRO WKDW FDQ EH XVHG WR FRQILJXUH WKH DFFHVV SRLQW IURP DQ\ZKHUH LQ WKH QHWZRUN +RZHYHU 7HOQHW LV QRW VHFXUH IURP KRVWLOH DWWDFNV 7KH 6HFXUH 6KHOO 66+ FDQ DFW DV D VHFXUH UHSODFHPHQW IRU 7HOQHW 7KH 66+ SURWRFRO XVHV JHQHUDWHG SXEOLF NH\V WR HQFU\SW DOO GDWD WUDQVIHUV SDVVLQJ EHWZHHQ WKH DFFHVV SRLQW DQG 66+ HQDEOHG PDQDJHPHQW VWDWLRQ FOLHQWV DQG HQVXUHV WKDW GDWD WUDYHOLQJ RYHU WKH QHWZRUN DUULYHV XQDOWHUHG &OLHQWV FDQ WKHQ VH
PAGE 63
&/, &RPPDQGV IRU 66+ ± 7R HQDEOH WKH 66+ VHUYHU XVH WKH LS VVK VHUYHU HQDEOH FRPPDQG IURP WKH &/, (WKHUQHW LQWHUIDFH FRQILJXUDWLRQ PRGH 7R VHW WKH 66+ VHUYHU 8'3 SRUW XVH WKH LS VVK VHUYHU SRUW FRPPDQG 7R YLHZ WKH FXUUHQW VHWWLQJV XVH WKH VKRZ V\VWHP FRPPDQG IURP WKH &/, ([HF PRGH QRW VKRZQ LQ WKH IROORZLQJ H[DPSOH Enterprise Enterprise Enterprise Enterprise Enterprise AP(if-ethernet)#no ip telnet-server AP(if-ethernet)#ip ssh-server enable AP(if-ethernet)#ip ssh-server
PAGE 64
( 0$& $XWKHQWLFDWLRQ ±
PAGE 65
; 6XSSOLFDQW ± 7KH DFFHVV SRLQW FDQ DOVR RSHUDWH LQ D ; VXSSOLFDQW PRGH 7KLV HQDEOHV WKH DFFHVV SRLQW LWVHOI WR EH DXWKHQWLFDWHG ZLWK D 5$',86 VHUYHU XVLQJ D FRQILJXUHG 0' XVHU QDPH DQG SDVVZRUG 7KLV SUHYHQWV URJXH DFFHVV SRLQWV IURP JDLQLQJ DFFHVV WR WKH QHWZRUN /RFDO 0$& $XWKHQWLFDWLRQ ± &RQILJXUHV WKH ORFDO 0$& DXWKHQWLFDWLRQ GDWDEDVH 7KH 0$& GDWDEDVH SURYLGHV D PHFKDQLVP WR WDNH FHUWDLQ DFWLRQV EDVHG RQ D ZLUHOHVV FOLHQW¶V 0$& DGGUHVV 7KH 0$& OLVW FDQ EH FRQI
PAGE 66
( &/, &RPPDQGV IRU /RFDO 0$& $XWKHQWLFDWLRQ ± 8VH WKH PDF DXWKHQWLFDWLRQ VHUYHU FRPPDQG IURP WKH JOREDO FRQILJXUDWLRQ PRGH WR HQDEOH ORFDO 0$& DXWKHQWLFDWLRQ 8VH WKH PDF DXWKHQWLFDWLRQ VHVVLRQ WLPHRXW FRPPDQG WR VHW WKH DXWKHQWLFDWLRQ LQWHUYDO DQG ZHE UHGLUHFW FRPPDQG WR HQDEOH ZHE EDVHG DXWKHQWLFDWLRQ IRU VHUYLFH ELOOLQJ 6HW WKH GHIDXOW DFWLRQ IRU 0$& DGGUHVVHV QRW LQ WKH ORFDO WDEOH XVLQJ WKH DGGUHVV ILOWHU GHIDXOW FRPPDQG WKHQ HQWHU 0$& DGGUHVVHV LQ WKH ORFDO WDEOH XVLQJ
PAGE 67
&/, &RPPDQGV IRU 5$',86 0$& $XWKHQWLFDWLRQ ± 8VH WKH PDF DXWKHQWLFDWLRQ VHUYHU FRPPDQG IURP WKH JOREDO FRQILJXUDWLRQ PRGH WR HQDEOH UHPRWH 0$& DXWKHQWLFDWLRQ 6HW WKH WLPHRXW YDOXH IRU UH DXWKHQWLFDWLRQ XVLQJ WKH PDF DXWKHQWLFDWLRQ VHVVLRQ WLPHRXW FRPPDQG %H VXUH WR DOVR FRQILJXUH FRQQHFWLRQ VHWWLQJV IRU WKH 5$',86 VHUYHU QRW VKRZQ LQ WKH IROORZLQJ H[DPSOH 7R GLVSOD\ WKH FXUUHQW VHWWLQJV XVH WKH VKRZ DXWKHQWLFDWLRQ FRPPDQG IURP WKH ([HF PRGH Enterprise AP(config)#mac-aut
PAGE 68
( )LOWHU &RQWURO 7KH DFFHVV SRLQW FDQ HPSOR\ QHWZRUN WUDIILF IUDPH ILOWHULQJ WR FRQWURO DFFHVV WR QHWZRUN UHVRXUFHV DQG LQFUHDVH VHFXULW\
PAGE 69
3UHYHQW ,QWHU DQG ,QWUD 9$3 FOLHQW FRPPXQLFDWLRQ :KHQ HQDEOHG FOLHQWV FDQQRW HVWDEOLVK ZLUHOHVV FRPPXQLFDWLRQV ZLWK DQ\ RWKHU FOLHQW HLWKHU WKRVH DVVRFLDWHG WR WKH VDPH 9$3 LQWHUIDFH RU DQ\ RWKHU 9$3 LQWHUIDFH $3 0DQDJHPHQW )LOWHU ± &RQWUROV PDQDJHPHQW DFFHVV WR WKH DFFHVV SRLQW IURP ZLUHOHVV FOLHQWV 0DQDJHPHQW LQWHUIDFHV LQFOXGH WKH ZHE 7HOQHW RU 6103 'HIDXOW 'LVDEOHG 'LVDEOHG $OORZV PDQDJHPHQW DFFHVV IURP ZLUHOHVV FOLHQWV (QDEOHG %ORFNV PDQDJHPHQW DFFHVV IURP
PAGE 70
( SURWRFRO FRPPDQG WR GHILQH WKH SURWRFROV WKDW \RX ZDQW WR ILOWHU 7R UHPRYH DQ HQWU\ IURP WKH WDEOH XVH WKH DGGUHVV ILOWHU GHOHWH FRPPDQG 7R GLVSOD\ WKH FXUUHQW VHWWLQJV XVH WKH VKRZ ILOWHUV FRPPDQG IURP WKH ([HF PRGH Enterprise Enterprise Enterprise Enterprise Enterprise Enterprise Enterprise Enterprise AP(config)#filter AP(config)#filter AP(config)#filter AP(config)#filter AP(config)#filter AP(config)#filter AP(config)#exit AP#show filters local-bridge ap-manage uplink en
PAGE 71
9/$1 7KH DFFHVV SRLQW FDQ HPSOR\ 9/$1 WDJJLQJ VXSSRUW WR FRQWURO DFFHVV WR QHWZRUN UHVRXUFHV DQG LQFUHDVH VHFXULW\ 9/$1V VHSDUDWH WUDIILF SDVVLQJ EHWZHHQ WKH DFFHVV SRLQW DVVRFLDWHG FOLHQWV DQG WKH ZLUHG QHWZRUN 7KHUH FDQ EH D 9/$1 DVVLJQHG WR HDFK DVVRFLDWHG FOLHQW D GHIDXOW 9/$1 IRU HDFK 9$3 9LUWXDO $FFHVV 3RLQW LQWHUIDFH DQG D PDQDJHPHQW 9/$1 IRU WKH DFFHVV SRLQW 1RWH WKH IROORZLQJ SRLQWV DERXW WKH DFFHVV SRLQW¶V 9/$1 VXSSRUW 7KH PDQDJHPHQW 9/$1 LV IRU PDQDJLQJ WKH
PAGE 72
( :KHQ VHWWLQJ XS 9/$1 ,'V IRU HDFK XVHU RQ WKH 5$',86 VHUYHU EH VXUH WR XVH WKH 5$',86 DWWULEXWHV DQG YDOXHV DV LQGLFDWHG LQ WKH IROORZLQJ WDEOH 1XPEHU 5$',86 $WWULEXWH 9DOXH ! ! 45(6 : ; ! 1 ! -. - ! " < ) 45(6 ) : .
PAGE 73
:'6 6HWWLQJV (DFK DFFHVV SRLQW UDGLR LQWHUIDFH FDQ EH FRQILJXUHG WR RSHUDWH LQ D EULGJH RU UHSHDWHU PRGH ZKLFK DOORZV LW WR IRUZDUG WUDIILF GLUHFWO\ WR RWKHU DFFHVV SRLQW XQLWV 7R VHW XS EULGJH OLQNV EHWZHHQ DFFHVV SRLQW XQLWV \RX PXVW FRQILJXUH WKH ZLUHOHVV 'LVWULEXWLRQ 6\VWHP :'6 IRUZDUGLQJ WDEOH E\ VSHFLI\LQJ WKH ZLUHOHVV 0$& DGGUHVV RI DOO XQLWV WR ZKLFK \RX ZDQW WR IRUZDUG WUDIILF 8S WR VL[ :'6 EULGJH RU UHSHDWHU OLQNV FDQ EH VSHFLILHG IRU HDFK XQLW LQ WKH ZLUHOHVV EU
PAGE 74
( %ULGJH 2SHUDWHV DV D EULGJH WR RWKHU DFFHVV SRLQWV 7KH ³3DUHQW´ OLQN WR WKH URRW EULGJH PXVW EH FRQILJXUHG 8S WR ILYH RWKHU ´&KLOG´ OLQNV DUH DYDLODEOH WR RWKHU EULGJHV 5HSHDWHU 2SHUDWHV DV D ZLUHOHVV UHSHDWHU H[WHQGLQJ WKH UDQJH IRU UHPRWH ZLUHOHVV FOLHQWV DQG FRQQHFWLQJ WKHP WR WKH URRW EULGJH 7KH ³3DUHQW´ OLQN WR WKH URRW EULGJH PXVW EH FRQILJXUHG ,Q WKLV PRGH WUDIILF LV QRW IRUZDUGHG WR WKH (WKHUQHW SRUW IURP WKH UDGLR LQWHUIDFH 5RRW %ULGJH 2SHUDWHV DV WKH
PAGE 75
6SDQQLQJ 7UHH 3URWRFRO ± 673 XVHV D GLVWULEXWHG DOJRULWKP WR VHOHFW D EULGJLQJ GHYLFH 673 FRPSOLDQW VZLWFK EULGJH RU URXWHU WKDW VHUYHV DV WKH URRW RI WKH VSDQQLQJ WUHH QHWZRUN ,W VHOHFWV D URRW SRUW RQ HDFK EULGJLQJ GHYLFH H[FHSW IRU WKH URRW GHYLFH ZKLFK LQFXUV WKH ORZHVW SDWK FRVW ZKHQ IRUZDUGLQJ D SDFNHW IURP WKDW GHYLFH WR WKH URRW GHYLFH 7KHQ LW VHOHFWV D GHVLJQDWHG EULGJLQJ GHYLFH IURP HDFK /$1 ZKLFK LQFXUV WKH ORZHVW SDWK FRVW ZKHQ IRUZDUGLQJ D SDFNHW IURP WKDW /$
PAGE 76
( GHVLJQDWHG SRUWV $IWHU GHWHUPLQLQJ WKH ORZHVW FRVW VSDQQLQJ WUHH LW HQDEOHV DOO URRW SRUWV DQG GHVLJQDWHG SRUWV DQG GLVDEOHV DOO RWKHU SRUWV 1HWZRUN SDFNHWV DUH WKHUHIRUH RQO\ IRUZDUGHG EHWZHHQ URRW SRUWV DQG GHVLJQDWHG SRUWV HOLPLQDWLQJ DQ\ SRVVLEOH QHWZRUN ORRSV 2QFH D VWDEOH QHWZRUN WRSRORJ\ KDV EHHQ HVWDEOLVKHG DOO EULGJHV OLVWHQ IRU +HOOR %3'8V %ULGJH 3URWRFRO 'DWD 8QLWV WUDQVPLWWHG IURP WKH URRW EULGJH ,I D EULGJH GRHV QRW JHW D +HOOR %3'8 DIWHU D SUHGHILQHG LQ
PAGE 77
/LQN 3DWK &RVW ± 7KLV SDUDPHWHU LV XVHG E\ WKH 673 WR GHWHUPLQH WKH EHVW SDWK EHWZHHQ GHYLFHV 7KHUHIRUH ORZHU YDOXHV VKRXOG EH DVVLJQHG WR SRUWV DWWDFKHG WR IDVWHU PHGLD DQG KLJKHU YDOXHV DVVLJQHG WR SRUWV ZLWK VORZHU PHGLD 3DWK FRVW WDNHV SUHFHGHQFH RYHU SRUW SULRULW\ 5DQJH 'HIDXOW (WKHUQHW LQWHUIDFH :LUHOHVV LQWHUIDFH /LQN 3RUW 3ULRULW\ ± 'HILQHV WKH SULRULW\ XVHG IRU WKLV SRUW LQ WKH 6SDQQLQJ 7UHH 3URWRFRO ,I WKH SDWK FRVW IRU DOO SRUWV RQ D
PAGE 78
( &/, &RPPDQGV IRU 673 6HWWLQJV ± ,I WKH UROH RI D UDGLR LQWHUIDFH LV VHW WR 5HSHDWHU %ULGJH RU 5RRW %ULGJH 673 FDQ EH HQDEOHG RQ WKH DFFHVV SRLQW WR PDLQWDLQ D YDOLG QHWZRUN WRSRORJ\ 7R JOREDOO\ HQDEOH 673 XVH WKH EULGJH VWS HQDEOH FRPPDQG IURP WKH &/, FRQILJXUDWLRQ PRGH 7KHQ FRQILJXUH WKH RWKHU JOREDO 673 SDUDPHWHUV IRU WKH EULGJH 7KH SDWK FRVW DQG SULRULW\ IRU HDFK EULGJH OLQN FDQ EH VHW XVLQJ WKH EULGJH OLQN SDWK FRVW DQG EULGJH OLQN SRUW SULRULW\ FRPPDQG IURP WKH :LUH
PAGE 79
$3 0DQDJHPHQW 7KH :HE 7HOQHW DQG 6103 PDQDJHPHQW LQWHUIDFHV DUH HQDEOHG DQG RSHQ WR DOO ,3 DGGUHVVHV E\ GHIDXOW 7R SURYLGH PRUH VHFXULW\ IRU PDQDJHPHQW DFFHVV WR WKH DFFHVV SRLQW VSHFLILF LQWHUIDFHV FDQ EH GLVDEOHG DQG PDQDJHPHQW UHVWULFWHG WR D VLQJOH ,3 DGGUHVV RU D OLPLWHG UDQJH RI ,3 DGGUHVVHV 2QFH \RX VSHFLI\ DQ ,3 DGGUHVV RU UDQJH RI DGGUHVVHV DFFHVV WR PDQDJHPHQW LQWHUIDFHV LV UHVWULFWHG WR WKH VSHFLILHG DGGUHVVHV ,I DQ\RQH WULHV WR DFFHVV D PDQDJHPHQW LQWHUIDFH IU
PAGE 80
( &/, &RPPDQGV IRU $3 0DQDJHPHQW IHDWXUHV Enterprise AP(config)#apmgmtip multiple 192.168.1.50 255.255.255.0 Enterprise AP(config)#apmgmtui SNMP enable 7-21 7-22 $GPLQLVWUDWLRQ &KDQJLQJ WKH 3DVVZRUG 0DQDJHPHQW DFFHVV WR WKH ZHE DQG &/, LQWHUIDFH RQ WKH DFFHVV SRLQW LV FRQWUROOHG WKURXJK D VLQJOH XVHU QDPH DQG SDVVZRUG
PAGE 81
6HWWLQJ WKH 7LPHRXW ,QWHUYDO
PAGE 82
( %HIRUH XSJUDGLQJ QHZ VRIWZDUH YHULI\ WKDW WKH DFFHVV SRLQW LV FRQQHFWHG WR WKH QHWZRUN DQG KDV EHHQ FRQILJXUHG ZLWK D FRPSDWLEOH ,3 DGGUHVV DQG VXEQHW PDVN ,I \RX QHHG WR GRZQORDG IURP DQ )73 RU 7)73 VHUYHU WDNH WKH IROORZLQJ DGGLWLRQDO VWHSV 2EWDLQ WKH ,3 DGGUHVV RI WKH )73 RU 7)73 VHUYHU ZKHUH WKH DFFHVV SRLQW VRIWZDUH LV VWRUHG ,I XSJUDGLQJ IURP DQ )73 VHUYHU EH VXUH WKDW \RX KDYH DQ DFFRXQW FRQILJXUHG RQ WKH VHUYHU ZLWK D XVHU QDPH DQG SDVVZRUG ,I 9/$1V DUH FRQ
PAGE 83
)LUPZDUH 8SJUDGH /RFDO ± 'RZQORDGV DQ RSHUDWLRQ FRGH LPDJH ILOH IURP WKH ZHE PDQDJHPHQW VWDWLRQ WR WKH DFFHVV SRLQW XVLQJ +773 8VH WKH %URZVH EXWWRQ WR ORFDWH WKH LPDJH ILOH ORFDOO\ RQ WKH PDQDJHPHQW VWDWLRQ DQG FOLFN 6WDUW 8SJUDGH WR SURFHHG 1HZ ILUPZDUH ILOH 6SHFLILHV WKH QDPH RI WKH FRGH ILOH RQ WKH VHUYHU 7KH QHZ ILUPZDUH ILOH QDPH VKRXOG QRW FRQWDLQ VODVKHV ? RU WKH OHDGLQJ OHWWHU RI WKH ILOH QDPH VKRXOG QRW EH D SHULRG DQG WKH PD[LPXP OHQJWK IRU ILOH QDPHV
PAGE 84
( 8SRQ XSORDGLQJ D QHZ FRQILJXUDWLRQ ILOH \RX ZLOO EH SURPSWHG WR HLWKHU UHVWRUH IDFWRU\ VHWWLQJV RU UHERRW WKH XQLW &/, &RPPDQGV IRU 'RZQORDGLQJ 6RIWZDUH IURP D 7)73 6HUYHU ± 8VH WKH FRS\ WIWS ILOH FRPPDQG IURP WKH ([HF PRGH DQG WKHQ VSHFLI\ WKH ILOH W\SH QDPH DQG ,3 DGGUHVV RI WKH 7)73 VHUYHU :KHQ WKH GRZQORDG LV FRPSOHWH WKH GLU FRPPDQG FDQ EH XVHG WR FKHFN WKDW WKH QHZ ILOH LV SUHVHQW LQ WKH DFFHVV SRLQW ILOH V\VWHP 7R UXQ WKH QHZ VRIWZDUH XVH WKH UHVHW ERDUG FRPPDQ
PAGE 85
6\VWHP /RJ 7KH DFFHVV SRLQW FDQ EH FRQILJXUHG WR VHQG HYHQW DQG HUURU PHVVDJHV WR D 6\VWHP /RJ 6HUYHU 7KH V\VWHP FORFN FDQ DOVR EH V\QFKURQL]HG ZLWK D WLPH VHUYHU VR WKDW DOO WKH PHVVDJHV VHQW WR WKH 6\VORJ VHUYHU DUH VWDPSHG ZLWK WKH FRUUHFW WLPH DQG GDWH (QDEOLQJ 6\VWHP /RJJLQJ 7KH DFFHVV SRLQW VXSSRUWV D ORJJLQJ SURFHVV WKDW FDQ FRQWURO HUURU PHVVDJHV VDYHG WR PHPRU\ RU VHQW WR D 6\VORJ VHUYHU 7KH ORJJHG PHVVDJHV VHUYH DV D YDOXDEOH WRRO IRU LVRODWLQJ DFFHVV SRLQW DQG Q
PAGE 86
( /RJJLQJ /HYHO ± 6HWV WKH PLQLPXP VHYHULW\ OHYHO IRU HYHQW ORJJLQJ 'HIDXOW ,QIRUPDWLRQDO 7KH V\VWHP DOORZV \RX WR OLPLW WKH PHVVDJHV WKDW DUH ORJJHG E\ VSHFLI\LQJ D PLQLPXP VHYHULW\ OHYHO 7KH IROORZLQJ WDEOH OLVWV WKH HUURU PHVVDJH OHYHOV IURP WKH PRVW VHYHUH (PHUJHQF\ WR OHDVW VHYHUH 'HEXJ 7KH PHVVDJH OHYHOV WKDW DUH ORJJHG LQFOXGH WKH VSHFLILHG PLQLPXP OHYHO XS WR WKH (PHUJHQF\ OHYHO (UURU /HYHO 'HVFULSWLRQ 3 (
PAGE 87
&/, &RPPDQGV IRU 6\VWHP /RJJLQJ ± 7R HQDEOH ORJJLQJ RQ WKH DFFHVV SRLQW XVH WKH ORJJLQJ RQ FRPPDQG IURP WKH JOREDO FRQILJXUDWLRQ PRGH 7KH ORJJLQJ OHYHO FRPPDQG VHWV WKH PLQLPXP OHYHO RI PHVVDJH WR ORJ 8VH WKH ORJJLQJ FRQVROH FRPPDQG WR HQDEOH ORJJLQJ WR WKH FRQVROH 8VH WKH ORJJLQJ KRVW FRPPDQG WR VSHFLI\ XS WR IRXU 6\VORJ VHUYHUV 7KH &/, DOVR DOORZV WKH ORJJLQJ IDFLOLW\ W\SH FRPPDQG WR VHW WKH IDFLOLW\ W\SH QXPEHU WR XVH RQ WKH 6\VORJ VHUYHU 7R YLHZ WKH FXUUHQW ORJJLQJ VH
PAGE 88
( 1RWH 7KH DFFHVV SRLQW DOVR DOORZV \RX WR GLVDEOH 6173 DQG VHW WKH V\VWHP FORFN PDQXDOO\ 6HW 7LPH =RQH ± 6173 XVHV &RRUGLQDWHG 8QLYHUVDO 7LPH RU 87& IRUPHUO\ *UHHQZLFK 0HDQ 7LPH RU *07 EDVHG RQ WKH WLPH DW WKH (DUWK¶V SULPH PHULGLDQ ]HUR GHJUHHV ORQJLWXGH 7R GLVSOD\ D WLPH FRUUHVSRQGLQJ WR \RXU ORFDO WLPH \RX PXVW LQGLFDWH WKH QXPEHU RI KRXUV \RXU WLPH ]RQH LV ORFDWHG EHIRUH HDVW RU DIWHU ZHVW 87& (QDEOH 'D\OLJKW 6DYLQJ ± 7KH DFFHVV SRLQW SURYLGHV D ZD\ WR DXWRP
PAGE 89
&/, &RPPDQGV IRU WKH 6\VWHP &ORFN ± 7KH IROORZLQJ H[DPSOH VKRZV KRZ WR PDQXDOO\ VHW WKH V\VWHP WLPH ZKHQ 6173 VHUYHU VXSSRUW LV GLVDEOHG RQ WKH DFFHVV SRLQW Enterprise AP(config)#no sntp-server enable Enterprise AP(config)#sntp-server date-time Enter Year<1970-2100>: 2003 Enter Month<1-12>: 10 Enter Day<1-31>: 10 Enter Hour<0-23>: 18 Enter Min<0-59>: 35 Enterprise AP(config)# 7-35 7-36 SNMP 6LPSOH 1HWZRUN 0DQDJHPHQW 3URWRFRO 6103 LV D FRPPXQLFDWLRQ SURWRFRO GHVLJQHG VSHFLILFD
PAGE 90
61" &RQILJXULQJ 6103 DQG 7UDS 0HVVDJH 3DUDPHWHUV 7KH DFFHVV SRLQW 6103 DJHQW PXVW EH HQDEOHG WR IXQFWLRQ IRU YHUVLRQV F DQG FOLHQWV 0DQDJHPHQW DFFHVV XVLQJ 6103 Y DQG Y F DOVR UHTXLUHV FRPPXQLW\ VWULQJV WR EH FRQILJXUHG IRU DXWKHQWLFDWLRQ 7UDS QRWLILFDWLRQV FDQ EH HQDEOHG DQG VHQW WR XS WR IRXU PDQDJHPHQW VWDWLRQV 6103 ± (QDEOHV RU GLVDEOHV 6103 PDQDJHPHQW DFFHVV DQG DOVR HQDEOHV WKH DFFHVV SRLQW WR VHQG 6103 WUDSV QRWLILFDWLRQV 'HIDXOW 'LVDEOH /RFDWLRQ ± $ WH[W VWULQJ WKDW GHVF
PAGE 91
&RPPXQLW\ 1DPH 5HDG :ULWH ± 'HILQHV WKH 6103 FRPPXQLW\ DFFHVV VWULQJ WKDW KDV UHDG ZULWH DFFHVV $XWKRUL]HG PDQDJHPHQW VWDWLRQV DUH DEOH WR ERWK UHWULHYH DQG PRGLI\ 0,% REMHFWV 0D[LPXP OHQJWK FKDUDFWHUV FDVH VHQVLWLYH 'HIDXOW SULYDWH 7UDS 'HVWLQDWLRQ WR ± (QDEOHV UHFLSLHQWV XS WR IRXU RI 6103 QRWLILFDWLRQV 7UDS 'HVWLQDWLRQ ,3 $GGUHVV ± 6SHFLILHV WKH UHFLSLHQW RI 6103 QRWLILFDWLRQV (QWHU WKH ,3 DGGUHVV RU WKH KRVW QDPH +RVW 1DPH WR FKDUDFWHUV FDVH
PAGE 92
61" 7UDS &RQILJXUDWLRQ ± $OORZV VHOHFWLRQ RI VSHFLILF 6103 QRWLILFDWLRQV WR VHQG 7KH IROORZLQJ LWHPV DUH DYDLODEOH V\V6\VWHP8S 7KH DFFHVV SRLQW LV XS DQG UXQQLQJ V\V6\VWHP'RZQ 7KH DFFHVV SRLQW LV DERXW WR VKXWGRZQ DQG UHERRW V\V5DGLXV6HUYHU&KDQJHG 7KH DFFHVV SRLQW KDV FKDQJHG IURP WKH SULPDU\ 5$',86 VHUYHU WR WKH VHFRQGDU\ RU IURP WKH VHFRQGDU\ WR WKH SULPDU\ V\V&RQILJ)LOH9HUVLRQ&KDQJHG 7KH DFFHVV SRLQW¶V FRQILJXUDWLRQ ILOH KDV EHHQ FKDQJHG GRW 6WDWLRQ$VVRFLDWLRQ $ FOLHQW
PAGE 93
GRW 6WDWLRQ'LVDVVRFLDWH $ FOLHQW VWDWLRQ QR ORQJHU DVVRFLDWHV ZLWK WKH QHWZRUN GRW 6WDWLRQ$XWKHQWLFDWH)DLO $ FOLHQW VWDWLRQ KDV WULHG DQG IDLOHG WR DXWKHQWLFDWH WR WKH QHWZRUN (QDEOH $OO 7UDSV &OLFN WKH EXWWRQ WR HQDEOH DOO WKH DYDLODEOH WUDSV 'LVDEOH $OO 7UDSV &OLFN WKH EXWWRQ WR GLVDEOH DOO WKH DYDLODEOH WUDSV &/, &RPPDQGV IRU 6103 DQG 7UDS &RQILJXUDWLRQ ± 8VH WKH VQPS VHUYHU HQDEOH VHUYHU FRPPDQG IURP WKH JOREDO FRQILJXUDWLRQ PRGH WR HQDEOH WKH 6103 DJHQW
PAGE 94
61" 7R YLHZ WKH FXUUHQW 6103 VHWWLQJV XVH WKH VKRZ VQPS FRPPDQG 7-55 Enterprise AP#show snmp SNMP Information ============================================== Service State : Enable Community (ro) : ***** Community (rw) : ***** Location : WC-19 Contact : Paul EngineId :80:00:07:e5:80:00:00:2e:62:00:00:00:18 EngineBoots:1 Trap Destinations: 1: 192.168.1.9, 2: 0.0.0.0, 3: 0.0.0.0, 4: 0.0.0.
PAGE 95
&RQILJXULQJ 6103Y 8VHUV 7KH DFFHVV SRLQW DOORZV XS WR 6103 Y XVHUV WR EH FRQILJXUHG (DFK XVHU PXVW EH GHILQHG E\ D XQLTXH QDPH DVVLJQHG WR RQH RI WKUHH SUH GHILQHG VHFXULW\ JURXSV DQG FRQILJXUHG ZLWK VSHFLILF DXWKHQWLFDWLRQ DQG HQFU\SWLRQ VHWWLQJV 8VHU ± 7KH 6103Y XVHU QDPH FKDUDFWHUV PD[LPXP *URXS ± 7KH 6103Y JURXS QDPH 2SWLRQV 52 5:$XWK RU 5:3ULY 'HIDXOW 52 52 ± 5HDG RQO\ DFFHVV 5:$XWK ± 5HDG ZULWH DFFHVV ZLWK XVHU DXWKHQWLFDWLRQ 5:3ULY ± 5HDG ZULW
PAGE 96
61" &/, &RPPDQGV IRU &RQILJXULQJ 6103Y 8VHUV ± 8VH WKH VQPS VHUYHU HQJLQH LG FRPPDQG WR GHILQH WKH 6103 Y HQJLQH EHIRUH DVVLJQLQJ XVHUV WR JURXSV 8VH WKH VQPS VHUYHU XVHU FRPPDQG WR DVVLJQ XVHUV WR RQH RI WKH WKUHH JURXSV DQG VHW WKH DSSURSULDWH DXWKHQWLFDWLRQ DQG HQFU\SWLRQ W\SHV WR EH XVHG 7R YLHZ WKH FXUUHQW 6103 Y HQJLQH ,' XVH WKH VKRZ VQPS FRPPDQG 7R YLHZ 6103 XVHUV DQG JURXS VHWWLQJV XVH WKH VKRZ VQPS XVHUV RU VKRZ VQPS JURXS DVVLJQPHQWV FRPPDQGV Enterprise AP(config)#snmp-server
PAGE 97
&RQILJXULQJ 6103Y 7UDS )LOWHUV 6103 Y XVHUV FDQ EH FRQILJXUHG WR UHFHLYH QRWLILFDWLRQ PHVVDJHV IURP WKH DFFHVV SRLQW $Q 6103 7DUJHW ,' LV FUHDWHG WKDW VSHFLILHV WKH 6103 Y XVHU ,3 DGGUHVV DQG 8'3 SRUW $ XVHU GHILQHG QRWLILFDWLRQ ILOWHU FDQ EH FUHDWHG VR WKDW VSHFLILF QRWLILFDWLRQV FDQ EH SUHYHQWHG IURP EHLQJ VHQW WR SDUWLFXODU WDUJHWV 7KH DFFHVV SRLQW DOORZV XS WR QRWLILFDWLRQ ILOWHUV WR EH FUHDWHG (DFK ILOWHU FDQ EH GHILQHG E\ XS WR 0,% VXEWUHH ,' HQWULHV 7R FRQI
PAGE 98
61" 1RWH 2QO\ WKH 1HZ )LOWHU SDJH DOORZV WKH )LOWHU ,' WR EH FRQILJXUHG )LOWHU ,' ± $ XVHU GHILQHG QDPH WKDW LGHQWLILHV WKH ILOWHU 0D[LPXP OHQJWK FKDUDFWHUV 6XEWUHH 2,' ± 6SHFLILHV 0,% VXEWUHH WR EH ILOWHUHG 7KH 0,% VXEWUHH PXVW EH GHILQHG LQ WKH IRUP ³ ´ DQG DOZD\V VWDUW ZLWK D ³ ´ )LOWHU 7\SH ± ,QGLFDWHV LI WKH ILOWHU LV WR ³LQFOXGH´ RU ³H[FOXGH´ WKH 0,% VXEWUHH REMHFWV IURP WKH ILOWHU 1RWH WKDW 0,% REMHFWV LQFOXGHG LQ WKH ILOWHU DUH QRW VHQW WR WKH UHFHLYLQJ WDUJHW DQG REMHFWV
PAGE 99
&RQILJXULQJ 6103Y 7DUJHWV $Q 6103 Y QRWLILFDWLRQ 7DUJHW ,' LV VSHFLILHG E\ WKH 6103 Y XVHU ,3 DGGUHVV DQG 8'3 SRUW $ XVHU GHILQHG ILOWHU FDQ DOVR EH DVVLJQHG WR VSHFLILF WDUJHWV WR OLPLW WKH QRWLILFDWLRQV UHFHLYHG WR VSHFLILF 0,% REMHFWV 1RWH WKDW WKH ILOWHU PXVW ILUVW EH FRQILJXUHG VHH ³&RQILJXULQJ 6103Y 7UDS )LOWHUV´ RQ SDJH 7R FRQILJXUH D QHZ QRWLILFDWLRQ UHFHLYHU WDUJHW FOLFN WKH 1HZ EXWWRQ $ QHZ SDJH RSHQV WR FRQILJXUH WKH VHWWLQJV VHH EHORZ 7R HGLW DQ H[
PAGE 100
61" 7DUJHW ,' ± $ XVHU GHILQHG QDPH WKDW LGHQWLILHV D UHFHLYHU RI QRWLILFDWLRQV 7KH DFFHVV SRLQW VXSSRUWV XS WR WDUJHW ,'V 0D[LPXP OHQJWK FKDUDFWHUV ,3 $GGUHVV ± 6SHFLILHV WKH ,3 DGGUHVV RI WKH UHFHLYLQJ PDQDJHPHQW VWDWLRQ 8'3 3RUW ± 7KH 8'3 SRUW WKDW LV XVHG RQ WKH UHFHLYLQJ PDQDJHPHQW VWDWLRQ IRU QRWLILFDWLRQ PHVVDJHV 6103 8VHU ± 7KH GHILQHG 6103 Y XVHU WKDW LV WR UHFHLYH QRWLILFDWLRQ PHVVDJHV $VVLJQHG )LOWHU ± 7KH QDPH RI D XVHU GHILQHG QRWLILFDWLRQ ILOWHU WKDW LV DSSOLHG WR WKH WDU
PAGE 101
Enterprise AP(config)#snmp-server targets mytraps 192.168.1.33 chris Enterprise AP(config)#snmp-server filter-assignment mytraps trapfilter Enterprise AP(config)#exit Enterprise AP#show snmp target Host ID : mytraps User : chris IP Address : 192.168.1.
PAGE 102
' 5DGLR 6HWWLQJV $ D 7KH ,((( D LQWHUIDFH RSHUDWHV ZLWKLQ WKH *+] EDQG DW XS WR 0ESV LQ QRUPDO PRGH RU XS WR 0ESV LQ 7XUER PRGH )LUVW FRQILJXUH WKH UDGLR VHWWLQJV WKDW DSSO\ WR WKH LQGLYLGXDO 9$3V 9LUWXDO $FFHVV 3RLQW DQG WKH FRPPRQ UDGLR VHWWLQJV WKDW DSSO\ WR WKH RYHUDOO V\VWHP $IWHU \RX KDYH FRQILJXUHG WKH UDGLR VHWWLQJV JR WR WKH 6HFXULW\ SDJH XQGHU WKH D ,QWHUIDFH VHH ³6HFXULW\´ RQ SDJH HQDEOH WKH UDGLR VHUYLFH IRU DQ\ RI WKH 9$3 LQWHUIDFHV
PAGE 103
'HIDXOW 9/$1 ,' ± 7KH 9/$1 ,' DVVLJQHG WR ZLUHOHVV FOLHQWV DVVRFLDWHG WR WKH 9$3 LQWHUIDFH WKDW DUH QRW DVVLJQHG WR D VSHFLILF 9/$1 E\ 5$',86 VHUYHU FRQILJXUDWLRQ 'HIDXOW &ORVHG 6\VWHP ± :KHQ HQDEOHG WKH 9$3 LQWHUIDFH GRHV QRW LQFOXGH LWV 66,' LQ EHDFRQ PHVVDJHV 1RU GRHV LW UHVSRQG WR SUREH UHTXHVWV IURP FOLHQWV WKDW GR QRW LQFOXGH D IL[HG 66,' 'HIDXOW 'LVDEOH $XWKHQWLFDWLRQ 7LPHRXW ,QWHUYDO ± 7KH WLPH ZLWKLQ ZKLFK WKH FOLHQW VKRXOG ILQLVK DXWKHQWLFDWLRQ EHIRUH DXWKHQWL
PAGE 104
' &/, &RPPDQGV IRU WKH &RQILJXULQJ WKH 9$3V ± )URP WKH JOREDO FRQILJXUDWLRQ PRGH HQWHU WKH LQWHUIDFH ZLUHOHVV D FRPPDQG WR DFFHVV WKH D UDGLR LQWHUIDFH )URP WKH D LQWHUIDFH PRGH \RX FDQ DFFHVV UDGLR VHWWLQJV WKDW DSSO\ WR DOO 9$3 LQWHUIDFHV 7R DFFHVV D VSHFLILF 9$3 LQWHUIDFH QXPEHUHG WR XVH WKH YDS FRPPDQG
PAGE 105
7KH DFFHVV SRLQW FDQ EH FRQILJXUHG WR SHULRGLFDOO\ VFDQ DOO UDGLR FKDQQHOV DQG ILQG RWKHU DFFHVV SRLQWV ZLWKLQ UDQJH $ GDWDEDVH RI QHDUE\ DFFHVV SRLQWV LV PDLQWDLQHG ZKHUH DQ\ URJXH $3V FDQ EH LGHQWLILHG 'XULQJ D VFDQ 6\VORJ PHVVDJHV VHH ³(QDEOLQJ 6\VWHP /RJJLQJ´ RQ SDJH DUH VHQW IRU HDFK DFFHVV SRLQW GHWHFWHG 5RJXH DFFHVV SRLQWV FDQ EH LGHQWLILHG E\ XQNQRZQ %66,' 0$& DGGUHVV RU 66,' FRQILJXUDWLRQ $3 'HWHFWLRQ ± (QDEOHV WKH SHULRGLF VFDQQLQJ IRU RWKHU DFFHVV SRLQ
PAGE 106
' XVLQJ WKH URJXH DS VFDQ FRPPDQG 7R YLHZ WKH GDWDEDVH RI GHWHFWHG DFFHVV SRLQWV XVH WKH VKRZ URJXH DS FRPPDQG IURP WKH ([HF OHYHO Enterprise AP(config)#interface wireless g 7-90 Enter Wireless configuration commands, one per line. Enterprise AP(if-wireless g)#rogue-ap enable 7-115 configure either syslog or trap or both to receive the rogue APs detected.
PAGE 107
&RQILJXULQJ &RPPRQ 5DGLR 6HWWLQJV 7R FRQILJXUH FRPPRQ UDGLR VHWWLQJV VHOHFW WKH 5DGLR 6HWWLQJV SDJH DQG VFUROO GRZQ WR EHORZ WKH 9$3 UDGLR VHWWLQJV 7XUER 0RGH ± 7KH QRUPDO D ZLUHOHVV RSHUDWLRQ PRGH SURYLGHV FRQQHFWLRQV XS WR 0ESV 7XUER 0RGH LV DQ HQKDQFHG PRGH QRW UHJXODWHG LQ ,((( D WKDW SURYLGHV D KLJKHU GDWD UDWH RI XS WR 0ESV (QDEOLQJ 7XUER 0RGH DOORZV WKH DFFHVV SRLQW WR SURYLGH FRQQHFWLRQV XS WR 0ESV 'HIDXOW 'LVDEOHG 1RWH ,Q QRUPDO PRGH W
PAGE 108
' 5DGLR &KDQQHO ± 7KH UDGLR FKDQQHO WKDW WKH DFFHVV SRLQW XVHV Normal Mode WR FRPPXQLFDWH ZLWK ZLUHOHVV FOLHQWV :KHQ PXOWLSOH DFFHVV SRLQWV DUH GHSOR\HG LQ WKH VDPH DUHD VHW WKH FKDQQHO RQ QHLJKERULQJ DFFHVV SRLQWV DW OHDVW IRXU FKDQQHOV DSDUW WR DYRLG LQWHUIHUHQFH ZLWK HDFK RWKHU )RU H[DPSOH LQ WKH 8QLWHG 6WDWHV \RX FDQ GHSOR\ XS WR IRXU DFFHVV SRLQWV LQ WKH VDPH DUHD H J FKDQQHOV $OVR QRWH WKDW WKH FKDQQHO IRU ZLUHOHVV FOLHQWV LV DXWRPDWLFDOO\ VHW WR WKH
PAGE 109
$QWHQQD &RQWURO 0HWKRG 6HOHFWV WKH XVH RI ERWK IL[HG DQWHQQDV RSHUDWLQJ LQ GLYHUVLW\ PRGH RU D VLQJOH DQWHQQD 'HIDXOW 'LYHUVLW\ 'LYHUVLW\ 7KH UDGLR XVHV ERWK DQWHQQDV LQ D GLYHUVLW\ V\VWHP 6HOHFW WKLV PHWKRG ZKHQ WKH $QWHQQD ,' LV VHW WR 'HIDXOW $QWHQQD WR XVH WKH DFFHVV SRLQW V LQWHJUDWHG DQWHQQDV 5LJKW 7KH UDGLR RQO\ XVHV WKH DQWHQQD RQ WKH ULJKW VLGH WKH VLGH FORVHVW WR WKH DFFHVV SRLQW /('V 6HOHFW WKLV PHWKRG ZKHQ XVLQJ DQ RSWLRQDO H[WHUQDO DQWHQQD WKDW LV
PAGE 110
' 3RZHU 6DYH PRGH WR ZDNH XS PRUH RIWHQ DQG GUDLQ SRZHU IDVWHU 8VLQJ KLJKHU '7,0 YDOXHV UHGXFHV WKH SRZHU XVHG E\ VWDWLRQV LQ 3RZHU 6DYH PRGH EXW GHOD\V WKH WUDQVPLVVLRQ RI EURDGFDVW PXOWLFDVW IUDPHV 5DQJH EHDFRQV 'HIDXOW EHDFRQ 0XOWLFDVW 'DWD 5DWH ± 7KH PD[LPXP GDWD UDWH DW ZKLFK WKH DFFHVV SRLQW WUDQVPLWV PXOWLFDVW DQG EURDGFDVW SDFNHWV RQ WKH ZLUHOHVV LQWHUIDFH 2SWLRQV 0ESV 'HIDXOW 0ESV )UDJPHQWDWLRQ /HQJWK ± &RQILJXUHV WKH PLQLPXP SDFNHW VL]H WKDW FDQ
PAGE 111
&/, &RPPDQGV IRU WKH &RPPRQ 5DGLR 6HWWLQJV ± )URP WKH JOREDO FRQILJXUDWLRQ PRGH HQWHU WKH LQWHUIDFH ZLUHOHVV D FRPPDQG WR DFFHVV WKH D UDGLR LQWHUIDFH )URP WKH D LQWHUIDFH PRGH \RX FDQ DFFHVV UDGLR VHWWLQJV WKDW DSSO\ WR DOO 9$3 LQWHUIDFHV 8VH WKH WXUER FRPPDQG WR HQDEOH WKLV IHDWXUH EHIRUH VHWWLQJ WKH UDGLR FKDQQHO ZLWK WKH FKDQQHO FRPPDQG 6HW DQ\ RWKHU UDGLR VHWWLQJ DV UHTXLUHG EHIRUH HQDEOLQJ WKH 9$3 LQWHUIDFH ZLWK WKH QR VKXWGRZQ FRPPDQG 7R YLHZ WKH FXU
PAGE 112
' W\SHV RI WUDIILF :00 DOORZV WKH SULRULW\ OHYHOV WR EH FRQILJXUHG WR PDWFK DQ\ QHWZRUN ZLGH 4R6 SROLF\ :00 DOVR VSHFLILHV D SURWRFRO WKDW DFFHVV SRLQWV FDQ XVH WR FRPPXQLFDWH WKH FRQILJXUHG WUDIILF SULRULW\ OHYHOV WR 4R6 HQDEOHG ZLUHOHVV FOLHQWV 7DEOH :00 $FFHVV &DWHJRULHV $FFHVV &DWHJRU\ :00 'HVLJQDWLRQ 'HVFULSWLRQ ' 7DJV ( >4? :( ; 4 , $ / ! +$ 4 " :4 "; / ( >4 :( ; 4 , $
PAGE 113
Tim CWMin riority CWMax AIFS Random Backoff Minimum Wait Time Random Wait Time CWMin riority C AIFS Random Backoff Minimum Wait Time Random Wait Time )LJXUH :00 %DFNRII :DLW 7LPHV )RU KLJK SULRULW\ WUDIILF WKH $,)61 DQG &: YDOXHV DUH VPDOOHU 7KH VPDOOHU YDOXHV HTXDWH WR OHVV EDFNRII DQG ZDLW WLPH DQG WKHUHIRUH PRUH WUDQVPLW RSSRUWXQLWLHV 7R FRQILJXUH :00 VHOHFW WKH 5DGLR 6HWWLQJV SDJH DQG VFUROO GRZQ WR WKH :00 FRQILJXUDWLRQ VHWWLQJV
PAGE 114
' :00 ± 6HWV WKH :00 RSHUDWLRQDO PRGH RQ WKH DFFHVV SRLQW :KHQ HQDEOHG WKH SDUDPHWHUV IRU HDFK $& TXHXH ZLOO EH HPSOR\HG RQ WKH DFFHVV SRLQW DQG 4R6 FDSDELOLWLHV DUH DGYHUWLVHG WR :00 HQDEOHG FOLHQWV 'HIDXOW 6XSSRUW 'LVDEOH :00 LV GLVDEOHG 6XSSRUW :00 ZLOO EH XVHG IRU DQ\ DVVRFLDWHG GHYLFH WKDW VXSSRUWV WKLV IHDWXUH 'HYLFHV WKDW GR QRW VXSSRUW WKLV IHDWXUH PD\ VWLOO DVVRFLDWH ZLWK WKH DFFHVV SRLQW 5HTXLUHG :00 PXVW EH VXSSRUWHG RQ DQ\ GHYLFH WU\LQJ WR DVVRFLDWHG ZLWK WK
PAGE 115
&/, &RPPDQGV IRU :00 ± (QWHU LQWHUIDFH ZLUHOHVV PRGH DQG W\SH ZPP UHTXLUHG IRU FOLHQWV WKDW ZDQW WR DVVRFLDWH ZLWK WKH DFFHVV SRLQW 7KH ZPP DFNQRZOHGJH SROLF\ FRPPDQG LV XVHG WR HQDEOH RU GLVDEOH D SROLF\ IRU HDFK DFFHVV FDWHJRU\ 7KH ZPPSDUPV FRPPDQG GHILQHV GHWDLOHG :00 SDUDPHWHUV Enterprise AP(if-wireless a)#wmm required 7-137 Enterprise AP(if-wireless a)#wmm-acknowledge-policy 0 noack 7-137 Enterprise AP(if-wireless a)#wmmparams ap 0 4 6 3 1 1 7-138
PAGE 116
' 7R YLHZ WKH FXUUHQW D UDGLR VHWWLQJV IRU WKH 9$3 LQWHUIDFH XVH WKH VKRZ LQWHUIDFH ZLUHOHVV D > @ FRPPDQG Enterprise AP#show interface wireless a 0 7-112 Wireless Interface Information ============================================================= --------------------Identification--------------------------Description : Enterprise 802.
PAGE 117
----------------Quality of Service--------------------------WMM Mode : SUPPORTED WMM Acknowledge Policy AC0(Best Effort) : Ack AC1(Background) : Acknowledge AC2(Video) : Acknowledge AC3(Voice) : Acknowledge WMM BSS Parameters AC0(Best Effort) : logCwMin: 4 logCwMax: 10 AIFSN: Admission Control: No TXOP Limit: 0.000 ms AC1(Background) : logCwMin: 4 logCwMax: 10 AIFSN: Admission Control: No TXOP Limit: 0.
PAGE 118
' 0RVW RI WKH J FRPPDQGV DUH LGHQWLFDO WR WKRVH XVHG E\ WKH D LQWHUIDFH )RU LQIRUPDWLRQ RQ WKH WKHVH FRPPDQGV UHIHU WR WKH IROORZLQJ VHFWLRQV ³&RQILJXULQJ 9$3 5DGLR 6HWWLQJV´ RQ SDJH ³&RQILJXULQJ 5RJXH $3 'HWHFWLRQ´ RQ SDJH ³&RQILJXULQJ &RPPRQ 5DGLR 6HWWLQJV´ RQ SDJH ³&RQILJXULQJ :L )L 0XOWLPHGLD´ RQ SDJH 2QO\ WKH UDGLR VHWWLQJV VSHFLILF WR WKH J LQWHUIDFH DUH LQFOXGHG LQ WKLV VHFWLRQ 7R FRQILJXUH WKH J UDGLR VHWWLQJV VHOHFW WKH
PAGE 119
5DGLR &KDQQHO ± 7KH UDGLR FKDQQHO WKDW WKH DFFHVV SRLQW XVHV WR FRPPXQLFDWH ZLWK ZLUHOHVV FOLHQWV :KHQ PXOWLSOH DFFHVV SRLQWV DUH GHSOR\HG LQ WKH VDPH DUHD VHW WKH FKDQQHO RQ QHLJKERULQJ DFFHVV SRLQWV DW OHDVW ILYH FKDQQHOV DSDUW WR DYRLG LQWHUIHUHQFH ZLWK HDFK RWKHU )RU H[DPSOH LQ WKH 8QLWHG 6WDWHV \RX FDQ GHSOR\ XS WR WKUHH DFFHVV SRLQWV LQ WKH VDPH DUHD H J FKDQQHOV $OVR QRWH WKDW WKH FKDQQHO IRU ZLUHOHVV FOLHQWV LV DXWRPDWLFDOO\ VHW WR WKH VDPH DV WKDW XVHG
PAGE 120
' &/, &RPPDQGV IRU WKH J :LUHOHVV ,QWHUIDFH ± )URP WKH JOREDO FRQILJXUDWLRQ PRGH HQWHU WKH LQWHUIDFH ZLUHOHVV J FRPPDQG WR DFFHVV WKH J UDGLR LQWHUIDFH 7KH J UDGLR FDQ EH IRUFHG WR DQ J RQO\ E RQO\ RU PL[HG E J RSHUDWLQJ PRGH XVLQJ WKH UDGLR PRGH FRPPDQG
PAGE 121
$ VXPPDU\ RI ZLUHOHVV VHFXULW\ FRQVLGHUDWLRQV LV OLVWHG LQ WKH IROORZLQJ WDEOH 7DEOH :LUHOHVV 6HFXULW\ &RQVLGHUDWLRQV 6HFXULW\ 0HFKDQLVP &OLHQW 6XSSRUW ,PSOHPHQWDWLRQ &RQVLGHUDWLRQV 73" @ -. / -. / D " & % D ' C % 73" -. / 0 ' C -.
PAGE 122
' 7KH DFFHVV SRLQW FDQ VLPXOWDQHRXVO\ VXSSRUW FOLHQWV XVLQJ YDULRXV GLIIHUHQW VHFXULW\ PHFKDQLVPV 7KH FRQILJXUDWLRQ IRU WKHVH VHFXULW\ FRPELQDWLRQV DUH RXWOLQHG LQ WKH IROORZLQJ WDEOH 1RWH WKDW 0$& DGGUHVV DXWKHQWLFDWLRQ FDQ EH FRQILJXUHG LQGHSHQGHQWO\ WR ZRUN ZLWK DOO VHFXULW\ PHFKDQLVPV DQG LV LQGLFDWHG VHSDUDWHO\ LQ WKH WDEOH 5HTXLUHG 5$',86 VHUYHU VXSSRUW LV DOVR OLVWHG 7DEOH 6HFXULW\ &RPELQDWLRQV &OLHQW 6HFXULW\ &RPELQDWLRQ &RQILJXUDWLRQ 6XPPDU\D 0$& 5$',86 $XWKHQWLFDWL
PAGE 123
7DEOH 6HFXULW\ &RPELQDWLRQV &OLHQW 6HFXULW\ &RPELQDWLRQ &RQILJXUDWLRQ 6XPPDU\D 0$& 5$',86 $XWKHQWLFDWLRQE 6HUYHU ) 73" -. / = 7"( ) F ( F 7"( 3 F 3 7"( F F 73" -. / =F ' C -. / = % 5 ) G :-. / =; 73" % -.
PAGE 124
' D 7KH FRQILJXUDWLRQ VXPPDU\ GRHV QRW LQFOXGH WKH VHW XS IRU 0$& DXWKHQWLFDWLRQ VHH SDJH RU 5$',86 VHUYHU VHH SDJH E 7KH FRQILJXUDWLRQ RI 5$',86 0$& DXWKHQWLFDWLRQ WRJHWKHU ZLWK [ :3$ RU :3$ 3UH VKDUHG .H\ LV QRW VXSSRUWHG F 5$',86 VHUYHU UHTXLUHG RQO\ ZKHQ 5$',86 0$& DXWKHQWLFDWLRQ LV FRQILJXUHG 1RWH ,I \RX FKRRVH WR FRQILJXUH 5$',86 0$& DXWKHQWLFDWLRQ WRJHWKHU ZLWK ; WKH 5$',86 0$& DGGUHVV DXWKHQWLFDWLRQ RFFXUV SULRU WR ; DXWKHQWLFDWLRQ 2QO\ ZKHQ
PAGE 125
(QDEOH ± (QDEOHV UDGLR FRPPXQLFDWLRQV RQ WKH 9$3 LQWHUIDFH 'HIDXOW 'LVDEOHG 1RWH
PAGE 126
' $OSKDQXPHULF (QWHU NH\V DV DOSKDQXPHULF FKDUDFWHUV IRU ELW NH\V DOSKDQXPHULF FKDUDFWHUV IRU ELW NH\V RU DOSKDQXPHULF FKDUDFWHUV IRU ELW NH\V D UDGLR RQO\ .H\ 1XPEHU ± 6HOHFWV WKH NH\ QXPEHU WR XVH IRU HQFU\SWLRQ IRU HDFK 9$3 LQWHUIDFH ,I WKH FOLHQWV KDYH DOO IRXU NH\V FRQILJXUHG WR WKH VDPH YDOXHV \RX FDQ FKDQJH WKH HQFU\SWLRQ NH\ WR DQ\ RI WKH IRXU VHWWLQJV ZLWKRXW KDYLQJ WR XSGDWH WKH FOLHQW NH\V 'HIDXOW .H\ 6KDUHG .H\ 6HWXS ± 6HOHFW %LW
PAGE 127
1RWH 7R XVH ; RQ ZLUHOHVV FOLHQWV UHTXLUHV D QHWZRUN FDUG GULYHU DQG ; FOLHQW VRIWZDUH WKDW VXSSRUWV WKH ($3 DXWKHQWLFDWLRQ W\SH WKDW \RX ZDQW WR XVH :LQGRZV 63 RU ODWHU DQG :LQGRZV ;3 SURYLGH ; FOLHQW VXSSRUW :LQGRZV ;3 DOVR SURYLGHV QDWLYH :3$ VXSSRUW 2WKHU V\VWHPV UHTXLUH DGGLWLRQDO FOLHQW VRIWZDUH WR VXSSRUW ; DQG :3$ (QFU\SWLRQ ± (QDEOH RU GLVDEOH WKH DFFHVV SRLQW WR XVH GDWD HQFU\SWLRQ :(3 7.
PAGE 128
' Enterprise AP(config)#interface wireless g 7-90 Enter Wireless configuration commands, one per line. Enterprise AP(if-wireless g)#key 1 128 ascii abcdeabcdeabc 7-123 Enterprise AP(if-wireless g)#vap 0 7-97 Enterprise AP(if-wireless g: VAP[0])#auth shared-key 7-123 Data Encryption is set to enabled. Remember to set the share key using "key" command.
PAGE 129
----------------Antenna------------------------------------------------Antenna Control method : Diversity Antenna ID : 0x0000(Default Antenna) Antenna Location : Indoor ----------------Quality of Service--------------------------------------WMM Mode : SUPPORTED WMM Acknowledge Policy AC0(Best Effort) : Acknowledge AC1(Background) : Acknowledge AC2(Video) : Acknowledge AC3(Voice) : Acknowledge WMM BSS Parameters AC0(Best Effort) : logCwMin: 4 logCwMax: 10 AIFSN: 3 Admission Control: N
PAGE 130
' WR HQDEOH GDWD HQFU\SWLRQ 7R YLHZ WKH FXUUHQW VHFXULW\ VHWWLQJV XVH WKH VKRZ LQWHUIDFH ZLUHOHVV D > @ RU VKRZ LQWHUIDFH ZLUHOHVV J > @ FRPPDQG QRW VKRZQ LQ H[DPSOH Enterprise AP(if-wireless g)#vap 0 Enterprise AP(if-wireless g: VAP[0])#802.1X required Enterprise AP(if-wireless g: VAP[0])#802.1X broadcast-key-refresh-rate 5 Enterprise AP(if-wireless g: VAP[0])#802.1X session-key-refresh-rate 5 Enterprise AP(if-wireless g: VAP[0])#802.
PAGE 131
WKH DFFHVV SRLQW DQG DOO ZLUHOHVV FOLHQWV 7KH 36. PRGH XVHV WKH VDPH 7.,3 SDFNHW HQFU\SWLRQ DQG NH\ PDQDJHPHQW DV :3$ LQ WKH HQWHUSULVH SURYLGLQJ D UREXVW DQG PDQDJHDEOH DOWHUQDWLYH IRU VPDOO QHWZRUNV 0L[HG :3$ DQG :(3 &OLHQW 6XSSRUW :3$ HQDEOHV WKH DFFHVV SRLQW WR LQGLFDWH LWV VXSSRUWHG HQFU\SWLRQ DQG DXWKHQWLFDWLRQ PHFKDQLVPV WR FOLHQWV XVLQJ LWV EHDFRQ VLJQDO :3$ FRPSDWLEOH FOLHQWV FDQ OLNHZLVH UHVSRQG WR LQGLFDWH WKHLU :3$ VXSSRUW 7KLV HQDEOHV WKH DFFHVV SRLQW WR GHWHU
PAGE 132
' LQIRUPDWLRQ IRUP D 6HFXULW\ $VVRFLDWLRQ WKDW WKH DFFHVV SRLQW QDPHV DQG KROGV LQ D FDFKH 3UHDXWKHQWLFDWLRQ (DFK WLPH D FOLHQW URDPV WR DQRWKHU DFFHVV SRLQW LW KDV WR EH IXOO\ UH DXWKHQWLFDWHG 7KLV DXWKHQWLFDWLRQ SURFHVV LV WLPH FRQVXPLQJ DQG FDQ GLVUXSW DSSOLFDWLRQV UXQQLQJ RYHU WKH QHWZRUN :3$ LQFOXGHV D PHFKDQLVP NQRZQ DV SUH DXWKHQWLFDWLRQ WKDW DOORZV FOLHQWV WR URDP WR D QHZ DFFHVV SRLQW DQG EH TXLFNO\ DVVRFLDWHG 7KH ILUVW WLPH D FOLHQW LV DXWKHQWLFDWHG WR D ZLUHOHVV
PAGE 133
7KH :3$ FRQILJXUDWLRQ SDUDPHWHUV DUH GHVFULEHG EHORZ (QFU\SWLRQ ±
PAGE 134
' 7KH FRQILJXUDWLRQ VHWWLQJV IRU :3$ DUH VXPPDUL]HG EHORZ 7DEOH :3$ &RQILJXUDWLRQ 6HWWLQJV :3$ DQG :3$ SUH VKDUHG NH\ RQO\ :3$ DQG :3$ RYHU ; 3 F 3 ( F 7"( " B$ 7"( " B$ 7"( 7"( = F 73"#!B "#(3 1" 7"( " B ! F , =#( 3 F 3 ( F 7"($ 7"( $ 7"( 7"( = F 73"#!B "#(3 1" : C '() * ; F G
PAGE 135
&/, &RPPDQGV IRU :3$ 2YHU ; 6HFXULW\ ± )URP WKH 9$3 LQWHUIDFH FRQILJXUDWLRQ PRGH XVH WKH DXWK ZSD UHTXLUHG FRPPDQG WR VHOHFW :3$ RYHU ; VHFXULW\ 7KHQ VHW WKH ; NH\ UHIUHVK UDWHV 7R YLHZ WKH FXUUHQW VHFXULW\ VHWWLQJV XVH WKH VKRZ LQWHUIDFH ZLUHOHVV D > @ RU VKRZ LQWHUIDFH ZLUHOHVV J > @ FRPPDQG QRW VKRZQ LQ H[DPSOH Enterprise AP(config)#interface wireless g 7-90 Enter Wireless configuration commands, one per line.
PAGE 136
' 2SHQ WKH 6HFXULW\ SDJH DQG FOLFN 0RUH IRU RQH RI WKH 9$3 LQWHUIDFHV
PAGE 137
; 5HDXWKHQWLFDWLRQ 5HIUHVK 5DWH 7KH WLPH SHULRG DIWHU ZKLFK D FRQQHFWHG FOLHQW PXVW EH UH DXWKHQWLFDWHG 'XULQJ WKH UH DXWKHQWLFDWLRQ SURFHVV RI YHULI\LQJ WKH FOLHQW¶V FUHGHQWLDOV RQ WKH 5$',86 VHUYHU WKH FOLHQW UHPDLQV FRQQHFWHG WKH QHWZRUN 2QO\ LI UH DXWKHQWLFDWLRQ IDLOV LV QHWZRUN DFFHVV EORFNHG 5DQJH VHFRQGV 'HIDXOW PHDQV GLVDEOHG &/, &RPPDQGV IRU ; $XWKHQWLFDWLRQ ± 8VH WKH ; VXSSRUWHG FRPPDQG IURP WKH 9$3 LQWHUIDFH PRGH WR HQDEOH ; DX
PAGE 138
$3 6\VWHP &RQILJXUDWLRQ ± 7KH $3 6\VWHP &RQILJXUDWLRQ WDEOH GLVSOD\V WKH EDVLF V\VWHP FRQILJXUDWLRQ VHWWLQJV 6\VWHP 8S 7LPH /HQJWK RI WLPH WKH PDQDJHPHQW DJHQW KDV EHHQ XS (WKHUQHW 0$& 7KH SK\VLFDO OD\HU DGGUHVV IRU WKH (WKHUQHW SRUW 5DGLR $ 0$& 7KH SK\VLFDO OD\HU DGGUHVV IRU WKH D LQWHUIDFH 5DGLR * 0$& 7KH SK\VLFDO OD\HU DGGUHVV IRU WKH E J LQWHUIDFH 6\VWHP 1DPH 1DPH DVVLJQHG WR WKLV V\VWHP 6\VWHP &RQWDFW $GPLQLVWUDWRU UHVSRQVLEOH IRU WKH V\VW
PAGE 139
%RRWURP 9HUVLRQ 6KRZ WKH ERRWURP YHUVLRQ QXPEHU +DUGZDUH 9HUVLRQ 6KRZV WKH KDUGZDUH YHUVLRQ QXPEHU $3 :LUHOHVV &RQILJXUDWLRQ ± 7KH $3 :LUHOHVV &RQILJXUDWLRQ WDEOHV GLVSOD\ WKH UDGLR DQG 9$3 LQWHUIDFH VHWWLQJV OLVWHG EHORZ 1RWH WKDW ,QWHUIDFH :LUHOHVV $ UHIHUV WR WKH D UDGLR DQG ,QWHUIDFH :LUHOHVV * UHIHUV WKH E J UDGLR 66,' 7KH VHUYLFH VHW LGHQWLILHU IRU WKH 9$3 LQWHUIDFH 5DGLR &KDQQHO 7KH UDGLR FKDQQHO WKURXJK ZKLFK WKH DFFHVV SRLQW FRPPXQLFDWHV ZLWK
PAGE 140
6WDWLRQ 6WDWXV 7KH 6WDWLRQ 6WDWXV ZLQGRZ VKRZV WKH ZLUHOHVV FOLHQWV FXUUHQWO\ DVVRFLDWHG ZLWK WKH DFFHVV SRLQW 7KH 6WDWLRQ &RQILJXUDWLRQ SDJH GLVSOD\V EDVLF FRQQHFWLRQ LQIRUPDWLRQ IRU DOO DVVRFLDWHG VWDWLRQV DV GHVFULEHG EHORZ 1RWH WKDW WKLV SDJH LV DXWRPDWLFDOO\ UHIUHVKHG HYHU\ ILYH VHFRQGV 6WDWLRQ $GGUHVV 7KH 0$& DGGUHVV RI WKH ZLUHOHVV FOLHQW $XWKHQWLFDWHG 6KRZV LI WKH VWDWLRQ KDV EHHQ DXWKHQWLFDWHG 7KH WZR EDVLF PHWKRGV RI DXWKHQWLFDWLRQ VXSSRUWHG IRU ZLUHOH
PAGE 141
&/, &RPPDQGV IRU 'LVSOD\LQJ 6WDWLRQ 6WDWXV ± 7R YLHZ VWDWXV RI FOLHQWV FXUUHQWO\ DVVRFLDWHG ZLWK WKH DFFHVV SRLQW XVH WKH VKRZ VWDWLRQ FRPPDQG IURP WKH ([HF PRGH Enterprise AP#show station Station Table Information =========================================================== if-wireless A VAP [0] : 802.11a Channel : Auto No 802.11a Channel Stations. if-wireless A VAP [1] 802.11a Channel : Auto : No 802.11a Channel Stations. .... No 802.11a Channel Stations.
PAGE 142
(YHQW /RJV 7KH (YHQW /RJV ZLQGRZ VKRZV WKH ORJ PHVVDJHV JHQHUDWHG E\ WKH DFFHVV SRLQW DQG VWRUHG LQ PHPRU\ 7KH (YHQW /RJV WDEOH GLVSOD\V WKH IROORZLQJ LQIRUPDWLRQ /RJ 7LPH 7KH WLPH WKH ORJ PHVVDJH ZDV JHQHUDWHG (YHQW /HYHO 7KH ORJJLQJ OHYHO DVVRFLDWHG ZLWK WKLV PHVVDJH )RU D GHVFULSWLRQ RI WKH YDULRXV OHYHOV VHH ³ORJJLQJ OHYHO´ RQ SDJH (YHQW 0HVVDJH 7KH FRQWHQW RI WKH ORJ PHVVDJH (UURU 0HVVDJHV ± $Q H[DPSOH RI D ORJJHG HUURU PHVVDJH LV ³6WDWLRQ )DLOHG WR DXWKH
PAGE 143
&/, &RPPDQGV IRU 'LVSOD\LQJ WKH /RJJLQJ 6WDWXV ± )URP WKH JOREDO FRQILJXUDWLRQ PRGH XVH WKH VKRZ ORJJLQJ FRPPDQG 7-33 Enterprise AP#show loggging Logging Information ============================================ Syslog State : Enabled Logging Console State : Enabled Logging Level : Alert Logging Facility Type : 16 Servers 1: 192.168.1.19, UDP Port: 514, State: Enabled 2: 0.0.0.0, UDP Port: 514, State: Disabled 3: 0.0.0.0, UDP Port: 514, State: Disabled 4: 0.0.0.
PAGE 144
673 6WDWXV 7KH 673 6WDWXV ZLQGRZ VKRZV WKH 673 VWDWXV IRU HDFK SRUW ,' 'LVSOD\V WKH SRUW ,' QXPEHU 3ULRULW\ 7KH SULRULW\ GHVLJQDWHG WR WKH VSHFLILHG SRUW 3DWK &RVW 'LVSOD\V WKH SDWK FRVW YDOXH IRU WKH VSHFLILHG SRUW 6WDWXV 'LVSOD\V LI 673 LV HQDEOHG RU GLVDEOHG IRU WKH VSHFLILHG SRUW 6WDWH 'LVSOD\ WKH 673 VWDWH IRU WKH VSHFLILHG SRUW 9
PAGE 145
9
PAGE 146
Chapter 7: Command Line Interface Using the Command Line Interface $FFHVVLQJ WKH &/, :KHQ DFFHVVLQJ WKH PDQDJHPHQW LQWHUIDFH IRU WKH RYHU D GLUHFW FRQQHFWLRQ WR WKH FRQVROH SRUW RU YLD D 7HOQHW FRQQHFWLRQ WKH DFFHVV SRLQW FDQ EH PDQDJHG E\ HQWHULQJ FRPPDQG NH\ZRUGV DQG SDUDPHWHUV DW WKH SURPSW 8VLQJ WKH DFFHVV SRLQW¶V FRPPDQG OLQH LQWHUIDFH &/, LV YHU\ VLPLODU WR HQWHULQJ FRPPDQGV RQ D 81,; V\VWHP &RQVROH &RQQHFWLRQ 7R DFFHVV WKH DFFHVV SRLQW WKURXJK WKH FRQVROH SRUW SHUIRUP WKHVH VWHSV $W
PAGE 147
5 ,I \RXU FRUSRUDWH QHWZRUN LV FRQQHFWHG WR DQRWKHU QHWZRUN RXWVLGH \RXU RIILFH RU WR WKH ,QWHUQHW \RX QHHG WR DSSO\ IRU D UHJLVWHUHG ,3 DGGUHVV +RZHYHU LI \RX DUH DWWDFKHG WR DQ LVRODWHG QHWZRUN WKHQ \RX FDQ XVH DQ\ ,3 DGGUHVV WKDW PDWFKHV WKH QHWZRUN VHJPHQW WR ZKLFK \RX DUH DWWDFKHG $IWHU \RX FRQILJXUH WKH DFFHVV SRLQW ZLWK DQ ,3 DGGUHVV \RX FDQ RSHQ D 7HOQHW VHVVLRQ E\ SHUIRUPLQJ WKHVH VWHSV )URP WKH UHPRWH KRVW HQWHU WKH 7HOQHW FRPPDQG DQG WKH ,3 DGGUHVV RI WKH G
PAGE 148
3 &RPPDQG &RPSOHWLRQ ,I \RX WHUPLQDWH LQSXW ZLWK D 7DE NH\ WKH &/, ZLOO SULQW WKH UHPDLQLQJ FKDUDFWHUV RI D SDUWLDO NH\ZRUG XS WR WKH SRLQW RI DPELJXLW\ ,Q WKH ³FRQILJXUH´ H[DPSOH W\SLQJ FRQ IROORZHG E\ D WDE ZLOO UHVXOW LQ SULQWLQJ WKH FRPPDQG XS WR ³FRQILJXUH ´ *HWWLQJ +HOS RQ &RPPDQGV
PAGE 149
5 3DUWLDO .H\ZRUG /RRNXS ,I \RX WHUPLQDWH D SDUWLDO NH\ZRUG ZLWK D TXHVWLRQ PDUN DOWHUQDWLYHV WKDW PDWFK WKH LQLWLDO OHWWHUV DUH SURYLGHG 5HPHPEHU QRW WR OHDYH D VSDFH EHWZHHQ WKH FRPPDQG DQG TXHVWLRQ PDUN )RU H[DPSOH ³V"´ VKRZV DOO WKH NH\ZRUGV VWDUWLQJ ZLWK ³V ´ Enterprise AP#show s? snmp sntp station Enterprise AP#show s system 1HJDWLQJ WKH (IIHFW RI &RPPDQGV )RU PDQ\ FRQILJXUDWLRQ FRPPDQGV \RX FDQ HQWHU WKH SUHIL[ NH\ZRUG ³QR´ WR FDQFHO WKH HIIHFW RI D FRPPDQG RU UHVHW W
PAGE 150
3 ([HF &RPPDQGV :KHQ \RX RSHQ D QHZ FRQVROH VHVVLRQ RQ DQ DFFHVV SRLQW WKH V\VWHP HQWHUV ([HF FRPPDQG PRGH 2QO\ D OLPLWHG QXPEHU RI WKH FRPPDQGV DUH DYDLODEOH LQ WKLV PRGH
PAGE 151
5 &RPPDQG /LQH 3URFHVVLQJ &RPPDQGV DUH QRW FDVH VHQVLWLYH
PAGE 152
< 7DEOH &RPPDQG *URXSV &RPPDQG *URXS 'HVFULSWLRQ 61" 2 #2 3DJH + 1 + '() * '() * & -. / 0 -. / 0 ( -.
PAGE 153
5 FRQILJXUH 7KLV FRPPDQG DFWLYDWHV *OREDO &RQILJXUDWLRQ PRGH
PAGE 154
< ([DPSOH 7KLV H[DPSOH VKRZV KRZ WR UHWXUQ WR WKH ([HF PRGH IURP WKH ,QWHUIDFH &RQILJXUDWLRQ PRGH DQG WKHQ TXLW WKH &/, VHVVLRQ Enterprise AP(if-ethernet)#exit Enterprise AP#exit CLI session with the Access Point is now closed Username: SLQJ 7KLV FRPPDQG VHQGV ,&03 HFKR UHTXHVW SDFNHWV WR DQRWKHU QRGH RQ WKH QHWZRUN 6\QWD[ SLQJ KRVWBQDPH _ LSBDGGUHVV! KRVWBQDPH $OLDV RI WKH KRVW LSBDGGUHVV ,3 DGGUHVV RI WKH KRVW 'HIDXOW 6HWWLQJ 1RQH &RPPDQG 0RGH ([HF &RPPDQG 8VDJH
PAGE 155
5 UHVHW 7KLV FRPPDQG UHVWDUWV WKH V\VWHP RU UHVWRUHV WKH IDFWRU\ GHIDXOW VHWWLQJV 6\QWD[ UHVHW ERDUG _ FRQILJXUDWLRQ! ERDUG 5HERRWV WKH V\VWHP FRQILJXUDWLRQ 5HVHWV WKH FRQILJXUDWLRQ VHWWLQJV WR WKH IDFWRU\ GHIDXOWV DQG WKHQ UHERRWV WKH V\VWHP 'HIDXOW 6HWWLQJ 1RQH &RPPDQG 0RGH ([HF &RPPDQG 8VDJH :KHQ WKH V\VWHP LV UHVWDUWHG LW ZLOO DOZD\V UXQ WKH 3RZHU 2Q 6HOI 7HVW ([DPSOH 7KLV H[DPSOH VKRZV KRZ WR UHVHW WKH V\VWHP Enterprise AP#reset board Reboot system now? <
PAGE 156
1 VKRZ OLQH 7KLV FRPPDQG GLVSOD\V WKH FRQVROH SRUW¶V FRQILJXUDWLRQ VHWWLQJV &RPPDQG 0RGH ([HF ([DPSOH 7KH FRQVROH SRUW VHWWLQJV DUH IL[HG DW WKH YDOXHV VKRZQ EHORZ Enterprise AP#show line Console Line Information ====================================================== databits : 8 parity : none speed : 9600 stop bits : 1 ====================================================== Enterprise AP# System Management Commands 7KHVH FRPPDQGV DUH XVHG WR FRQILJXUH WKH XVHU QDPH SDVVZRUG
PAGE 157
1 &RPPDQG 0RGH *OREDO &RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#system name AP Enterprise AP(config)# XVHUQDPH 7KLV FRPPDQG FRQILJXUHV WKH XVHU QDPH IRU PDQDJHPHQW DFFHVV 6\QWD[ XVHUQDPH QDPH! QDPH 7KH QDPH RI WKH XVHU /HQJWK FKDUDFWHUV FDVH VHQVLWLYH 'HIDXOW 6HWWLQJ DGPLQ &RPPDQG 0RGH *OREDO &RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#username bob Enterprise AP(config)# SDVVZRUG $IWHU LQLWLDOO\ ORJJLQJ RQWR WKH V\VWHP \RX VKRXOG VHW WKH SDVVZRUG 5HPHPEHU
PAGE 158
5 LS VVK VHUYHU HQDEOH 7KLV FRPPDQG HQDEOHV WKH 6HFXUH 6KHOO VHUYHU 8VH WKH QR IRUP WR GLVDEOH WKH VHUYHU 6\QWD[ LS VVK VHUYHU HQDEOH QR LS VVK VHUYHU 'HIDXOW 6HWWLQJ ,QWHUIDFH HQDEOHG &RPPDQG 0RGH ,QWHUIDFH &RQILJXUDWLRQ (WKHUQHW &RPPDQG 8VDJH 7KH DFFHVV SRLQW VXSSRUWV 6HFXUH 6KHOO YHUVLRQ RQO\ $IWHU ERRW XS WKH 66+ VHUYHU QHHGV DERXW WZR PLQXWHV WR JHQHUDWH KRVW HQFU\SWLRQ NH\V 7KH 66+ VHUYHU LV GLVDEOHG ZKLOH WKH NH\V DUH EHLQJ JHQHUDWHG 7KH VKRZ V\VWHP FRPPD
PAGE 159
1 LS WHOQHW VHUYHU HQDEOH 7KLV FRPPDQG HQDEOHV WKH 7HOQHW VHUYHU 8VH WKH QR IRUP WR GLVDEOH WKH VHUYHU 6\QWD[ LS WHOQHW VHUYHU HQDEOH QR LS WHOQHW VHUYHU 'HIDXOW 6HWWLQJ ,QWHUIDFH HQDEOHG &RPPDQG 0RGH ,QWHUIDFH &RQILJXUDWLRQ (WKHUQHW ([DPSOH Enterprise AP(if-ethernet)#ip telnet-server enable Enterprise AP(if-ethernet)# LS KWWS SRUW 7KLV FRPPDQG VSHFLILHV WKH 7&3 SRUW QXPEHU XVHG E\ WKH ZHE EURZVHU LQWHUIDFH 8VH WKH QR IRUP WR XVH WKH GHIDXOW SRUW 6\QWD[ LS KWWS SRUW
PAGE 160
5 LS KWWS VHUYHU 7KLV FRPPDQG DOORZV WKLV GHYLFH WR EH PRQLWRUHG RU FRQILJXUHG IURP D EURZVHU 8VH WKH QR IRUP WR GLVDEOH WKLV IXQFWLRQ 6\QWD[ LS KWWS VHUYHU QR LS KWWS VHUYHU 'HIDXOW 6HWWLQJ (QDEOHG &RPPDQG 0RGH *OREDO &RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#ip http server Enterprise AP(config)# 5HODWHG &RPPDQGV LS KWWS SRUW LS KWWS VHVVLRQ WLPHRXW 7KLV FRPPDQG VHWV WKH WLPH OLPLW IRU DQ LGOH ZHE LQWHUIDFH VHVVLRQ 6\QWD[ LS KWWS VHVVLRQ WLPHRXW WLPH! WLPH 6HWV
PAGE 161
1 LS KWWSV SRUW 8VH WKLV FRPPDQG WR VSHFLI\ WKH 8'3 SRUW QXPEHU XVHG IRU +7736 66/ FRQQHFWLRQ WR WKH DFFHVV SRLQW¶V :HE LQWHUIDFH 8VH WKH QR IRUP WR UHVWRUH WKH GHIDXOW SRUW 6\QWD[ LS KWWSV SRUW SRUWBQXPEHU! QR LS KWWSV SRUW SRUWBQXPEHU ± 7KH 8'3 SRUW XVHG IRU +7736 66/ 5DQJH 'HIDXOW 6HWWLQJ &RPPDQG 0RGH *OREDO &RQILJXUDWLRQ &RPPDQG 8VDJH
PAGE 162
5 6\QWD[ LS KWWSV VHUYHU QR LS KWWSV VHUYHU 'HIDXOW 6HWWLQJ (QDEOHG &RPPDQG 0RGH *OREDO &RQILJXUDWLRQ &RPPDQG 8VDJH %RWK +773 DQG +7736 VHUYLFH FDQ EH HQDEOHG LQGHSHQGHQWO\ ,I \RX HQDEOH +7736 \RX PXVW LQGLFDWH WKLV LQ WKH 85/ KWWSV GHYLFH SRUWBQXPEHU@ :KHQ \RX VWDUW +7736 WKH FRQQHFWLRQ LV HVWDEOLVKHG LQ WKLV ZD\ 7KH FOLHQW DXWKHQWLFDWHV WKH VHUYHU XVLQJ WKH VHUYHU¶V GLJLWDO FHUWLILFDWH 7KH FOLHQW DQG VHUYHU QHJRWLDWH D VHW RI VHFXULW\ SURWRFROV WR XVH IRU WKH
PAGE 163
1 DWWHPSWHG 7KH FOLHQW LV WKHQ DXWKHQWLFDWHG E\ HQWHULQJ D XVHU QDPH DQG SDVVZRUG RQ WKH ZHE SDJH 7KLV SURFHVV DOORZV FRQWUROOHG DFFHVV IRU FOLHQWV ZLWKRXW UHTXLULQJ ; RU 0$& DXWKHQWLFDWLRQ :HE UHGLUHFW UHTXLUHV D 5$',86 VHUYHU RQ WKH ZLUHG QHWZRUN ZLWK FRQILJXUHG XVHU QDPHV DQG SDVVZRUGV IRU DXWKHQWLFDWLRQ 7KH 5$',86 VHUYHU GHWDLOV PXVW DOVR EH FRQILJXUHG RQ WKH DFFHVV SRLQW 6HH ³VKRZ ERRWILOH´ RQ SDJH 8VH WKH VKRZ V\VWHP FRPPDQG WR GLVSOD\ WKH FXUUHQW
PAGE 164
5 WKH DFFHVV SRLQW ZLOO QRW DFFHSW RYHUODSSLQJ DGGUHVV UDQJHV :KHQ HQWHULQJ DGGUHVVHV IRU GLIIHUHQW JURXSV WKH DFFHVV SRLQW ZLOO DFFHSW RYHUODSSLQJ DGGUHVV UDQJHV
PAGE 165
1 &RPPDQG 0RGH ([HF ([DPSOH Enterprise AP#show apmanagement Management AP Information ================================= AP Management IP Mode: Any IP Telnet UI: Enable WEB UI : Enable SNMP UI : Enable ================================== Enterprise AP# + 0
PAGE 166
5 VKRZ V\VWHP 7KLV FRPPDQG GLVSOD\V EDVLF V\VWHP FRQILJXUDWLRQ VHWWLQJV 'HIDXOW 6HWWLQJ 1RQH &RPPDQG 0RGH ([HF ([DPSOH Enterprise AP#show system System Information ========================================================== Serial Number : A123456789 System Up time : 0 days, 4 hours, 33 minutes, 29 seconds System Name : Enterprise Wireless AP System Location : System Contact : System Country Code : US - UNITED STATES MAC Address : 00-30-F1-F0-9A-9C IP Address : 192.168.1.
PAGE 167
1 VKRZ YHUVLRQ 7KLV FRPPDQG GLVSOD\V WKH VRIWZDUH YHUVLRQ IRU WKH V\VWHP &RPPDQG 0RGH ([HF ([DPSOH Enterprise AP#show version Version Information ========================================= Version: v4.3.2.2 Date : Dec 20 2005, 18:38:12 ========================================= Enterprise AP# VKRZ FRQILJ 7KLV FRPPDQG GLVSOD\V GHWDLOHG FRQILJXUDWLRQ LQIRUPDWLRQ IRU WKH V\VWHP &RPPDQG 0RGH ([HF ([DPSOH Enterprise AP#show config Authentication Information =====================
PAGE 168
5 Hardware Version Information =========================================== Hardware version R01A =========================================== Ethernet Interface Information ======================================== IP Address : 192.168.0.151 Subnet Mask : 255.255.255.0 Default Gateway : 192.168.0.1 Primary DNS : 210.200.211.225 Secondary DNS : 210.200.211.
PAGE 169
1 Logging Information ===================================================== Syslog State : Disabled Logging Console State : Disabled Logging Level : Informational Logging Facility Type : 16 Servers 1: 0.0.0.0 , UDP Port: 514, State: Disabled 2: 0.0.0.0 , UDP Port: 514, State: Disabled 3: 0.0.0.0 , UDP Port: 514, State: Disabled 4: 0.0.0.
PAGE 170
5 dot11InterfaceAGFail dot11StationAssociation dot11StationReAssociation dot1xAuthFail dot1xAuthSuccess dot1xMacAddrAuthSuccess iappStationRoamedFrom localMacAddrAuthFail pppLogonFail configFileVersionChanged systemDown Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled dot11InterfaceBFail dot11StationAuthentication dot11StationRequestFail dot1xAuthNotInitiated dot1xMacAddrAuthFail iappContextDataSent iappStationRoamedTo localMacAddrAuthSuccess sn
PAGE 171
5 SSH Server : ENABLED SSH Server Port : 22 Telnet Server : ENABLED WEB Redirect : DISABLED DHCP Relay : DISABLED ============================================================== Version Information ========================================= Version: v4.3.2.2 Date : Dec 20 2005, 18:38:12 ========================================= Enterprise AP# VKRZ KDUGZDUH 7KLV FRPPDQG GLVSOD\V WKH KDUGZDUH YHUVLRQ RI WKH V\VWHP &RPPDQG 0RGH ([HF ([DPSOH Enterprise AP#show hardware Hardware Versio
PAGE 172
5 ORJJLQJ RQ 7KLV FRPPDQG FRQWUROV ORJJLQJ RI HUURU PHVVDJHV L H VHQGLQJ GHEXJ RU HUURU PHVVDJHV WR PHPRU\ 7KH QR IRUP GLVDEOHV WKH ORJJLQJ SURFHVV 6\QWD[ >QR@ ORJJLQJ RQ 'HIDXOW 6HWWLQJ 'LVDEOHG &RPPDQG 0RGH *OREDO &RQILJXUDWLRQ &RPPDQG 8VDJH 7KH ORJJLQJ SURFHVV FRQWUROV HUURU PHVVDJHV VDYHG WR PHPRU\
PAGE 173
5 ([DPSOH Enterprise AP(config)#logging host 1 10.1.0.3 Enterprise AP(config)# ORJJLQJ FRQVROH 7KLV FRPPDQG LQLWLDWHV ORJJLQJ RI HUURU PHVVDJHV WR WKH FRQVROH 8VH WKH QR IRUP WR GLVDEOH ORJJLQJ WR WKH FRQVROH 6\QWD[ ORJJLQJ FRQVROH QR ORJJLQJ FRQVROH 'HIDXOW 6HWWLQJ 'LVDEOHG &RPPDQG 0RGH *OREDO &RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#logging console Enterprise AP(config)# ORJJLQJ OHYHO 7KLV FRPPDQG VHWV WKH PLQLPXP VHYHULW\ OHYHO IRU HYHQW ORJJLQJ 6\QWD[ ORJJLQJ OHYHO
PAGE 174
5 &RPPDQG 8VDJH 0HVVDJHV VHQW LQFOXGH WKH VHOHFWHG OHYHO GRZQ WR (PHUJHQF\ OHYHO /HYHO $UJXPHQW 'HVFULSWLRQ 3 ( : / /$ $ = ; 3 3 : / /$ $ ; 7 7 : / /$ $ = ; 6 6 $
PAGE 175
5 &RPPDQG 8VDJH 7KH FRPPDQG VSHFLILHV WKH IDFLOLW\ W\SH WDJ VHQW LQ V\VORJ PHVVDJHV 6HH 5)& 7KLV W\SH KDV QR HIIHFW RQ WKH NLQG RI PHVVDJHV UHSRUWHG E\ WKH DFFHVV SRLQW +RZHYHU LW PD\ EH XVHG E\ WKH V\VORJ VHUYHU WR VRUW PHVVDJHV RU WR VWRUH PHVVDJHV LQ WKH FRUUHVSRQGLQJ GDWDEDVH ([DPSOH Enterprise AP(config)#logging facility 19 Enterprise AP(config)# ORJJLQJ FOHDU 7KLV FRPPDQG FOHDUV DOO ORJ PHVVDJHV VWRUHG LQ WKH DFFHVV SRLQW¶V PHPRU\ 6\QWD[ ORJJLQJ FOHDU &RPPDQ
PAGE 176
5 VKRZ HYHQW ORJ 7KLV FRPPDQG GLVSOD\V ORJ PHVVDJHV VWRUHG LQ WKH DFFHVV SRLQW¶V PHPRU\ 6\QWD[ VKRZ HYHQW ORJ &RPPDQG 0RGH ([HF ([DPSOH Enterprise AP#show event-log Mar 09 11:57:55 Information: Mar 09 11:57:55 Information: Mar 09 11:57:34 Information: Mar 09 11:57:18 Information: Mar 09 11:56:35 Information: Mar 09 11:55:52 Information: Mar 09 11:55:52 Information: Mar 09 11:55:52 Information: Mar 09 11:55:40 Information: Mar 09 11:55:40 Information: Press next.
previous.
PAGE 177
% VQWS VHUYHU LS 7KLV FRPPDQG VHWV WKH ,3 DGGUHVV RI WKH VHUYHUV WR ZKLFK 6173 WLPH UHTXHVWV DUH LVVXHG 8VH WKH WKLV FRPPDQG ZLWK QR DUJXPHQWV WR FOHDU DOO WLPH VHUYHUV IURP WKH FXUUHQW OLVW 6\QWD[ VQWS VHUYHU LS _ ! LS! )LUVW WLPH VHUYHU 6HFRQG WLPH VHUYHU LS ,3 DGGUHVV RI DQ WLPH VHUYHU 173 RU 6173 'HIDXOW 6HWWLQJ &RPPDQG 0RGH *OREDO &RQILJXUDWLRQ &RPPDQG 8VDJH :KHQ 6173 FOLHQW PRGH LV HQDEOHG XVLQJ WKH VQWS VHUYHU HQDEO
PAGE 178
5 &RPPDQG 0RGH *OREDO &RQILJXUDWLRQ &RPPDQG 8VDJH 7KH WLPH DFTXLUHG IURP WLPH VHUYHUV LV XVHG WR UHFRUG DFFXUDWH GDWHV DQG WLPHV IRU ORJ HYHQWV :LWKRXW 6173 WKH DFFHVV SRLQW RQO\ UHFRUGV WKH WLPH VWDUWLQJ IURP WKH IDFWRU\ GHIDXOW VHW DW WKH ODVW ERRWXS L H -DQXDU\ ([DPSOH Enterprise AP(config)#sntp-server enable Enterprise AP(config)# 5HODWHG &RPPDQGV VQWS VHUYHU LS VKRZ VQWS VQWS VHUYHU GDWH WLPH 7KLV FRPPDQG VHWV WKH V\VWHP FORFN 'HIDXOW
PAGE 179
% VQWS VHUYHU GD\OLJKW VDYLQJ 7KLV FRPPDQG VHWV WKH VWDUW DQG HQG GDWHV IRU GD\OLJKW VDYLQJV WLPH 8VH WKH QR IRUP WR GLVDEOH GD\OLJKW VDYLQJV WLPH 6\QWD[ VQWS VHUYHU GD\OLJKW VDYLQJ QR VQWS VHUYHU GD\OLJKW VDYLQJ 'HIDXOW 6HWWLQJ 'LVDEOHG &RPPDQG 0RGH *OREDO &RQILJXUDWLRQ &RPPDQG 8VDJH 7KH FRPPDQG VHWV WKH V\VWHP FORFN EDFN RQH KRXU GXULQJ WKH VSHFLILHG SHULRG ([DPSOH 7KLV VHWV GD\OLJKW VDYLQJV WLPH WR EH XVHG IURP -XO\ VW WR 6HSWHPEHU VW Enterprise AP(config)#sntp-serve
PAGE 180
5 &RPPDQG 8VDJH 7KLV FRPPDQG VHWV WKH ORFDO WLPH ]RQH UHODWLYH WR WKH &RRUGLQDWHG 8QLYHUVDO 7LPH 87& IRUPHUO\ *UHHQZLFK 0HDQ 7LPH RU *07 EDVHG RQ WKH HDUWK¶V SULPH PHULGLDQ ]HUR GHJUHHV ORQJLWXGH 7R GLVSOD\ D WLPH FRUUHVSRQGLQJ WR \RXU ORFDO WLPH \RX PXVW LQGLFDWH WKH QXPEHU RI KRXUV DQG PLQXWHV \RXU WLPH ]RQH LV HDVW EHIRUH RU ZHVW DIWHU RI 87& ([DPSOH Enterprise AP(config)#sntp-server timezone +8 Enterprise AP(config)# VKRZ VQWS 7KLV FRPPDQG GLVSOD\V WKH FXUUHQW W
PAGE 181
), " ' DHCP Relay Commands '\QDPLF +RVW &RQILJXUDWLRQ 3URWRFRO '+&3 FDQ G\QDPLFDOO\ DOORFDWH DQ ,3 DGGUHVV DQG RWKHU FRQILJXUDWLRQ LQIRUPDWLRQ WR QHWZRUN FOLHQWV WKDW EURDGFDVW D UHTXHVW 7R UHFHLYH WKH EURDGFDVW UHTXHVW WKH '+&3 VHUYHU ZRXOG QRUPDOO\ KDYH WR EH RQ WKH VDPH VXEQHW DV WKH FOLHQW +RZHYHU ZKHQ WKH DFFHVV SRLQW¶V '+&3 UHOD\ DJHQW LV HQDEOHG UHFHLYHG FOLHQW UHTXHVWV FDQ EH IRUZDUGHG GLUHFWO\ E\ WKH DFFHVV SRLQW WR D NQRZQ '+&3 VHUYHU RQ DQRWKHU VXEQHW 5HVSRQVHV IURP
PAGE 182
5 GKFS UHOD\ 7KLV FRPPDQG FRQILJXUHV WKH SULPDU\ DQG VHFRQGDU\ '+&3 VHUYHU DGGUHVVHV 6\QWD[ GKFS UHOD\ SULPDU\ _ VHFRQGDU\! LSBDGGUHVV! SULPDU\ 7KH SULPDU\ '+&3 VHUYHU VHFRQGDU\ 7KH VHFRQGDU\ '+&3 VHUYHU LSBDGGUHVV ,3 DGGUHVV RI WKH VHUYHU 'HIDXOW 6HWWLQJ 3ULPDU\ DQG VHFRQGDU\ &RPPDQG 0RGH *OREDO &RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#dhcp-relay primary 192.168.1.10 Enterprise AP(config)# VKRZ GKFS UHOD\ 7KLV FRPPDQG GLVSOD\V WKH FXUUHQW '+&3 UHOD\
PAGE 183
61" SNMP Commands &RQWUROV DFFHVV WR WKLV DFFHVV SRLQW IURP PDQDJHPHQW VWDWLRQV XVLQJ WKH 6LPSOH 1HWZRUN 0DQDJHPHQW 3URWRFRO 6103 DV ZHOO DV WKH KRVWV WKDW ZLOO UHFHLYH WUDS PHVVDJHV 7DEOH 6103 &RPPDQGV &RPPDQG )XQFWLRQ 0RGH 3DJH < 61" + < + < +
PAGE 184
5 VQPS VHUYHU FRPPXQLW\ 7KLV FRPPDQG GHILQHV WKH FRPPXQLW\ DFFHVV VWULQJ IRU WKH 6LPSOH 1HWZRUN 0DQDJHPHQW 3URWRFRO 8VH WKH QR IRUP WR UHPRYH WKH VSHFLILHG FRPPXQLW\ VWULQJ 6\QWD[ VQPS VHUYHU FRPPXQLW\ VWULQJ >UR _ UZ@ QR VQPS VHUYHU FRPPXQLW\ VWULQJ VWULQJ &RPPXQLW\ VWULQJ WKDW DFWV OLNH D SDVVZRUG DQG SHUPLWV DFFHVV WR WKH 6103 SURWRFRO 0D[LPXP OHQJWK FKDUDFWHUV FDVH VHQVLWLYH UR 6SHFLILHV UHDG RQO\ DFFHVV $XWKRUL]HG PDQDJHPHQW VWDWLRQV DUH RQO\ DEOH WR UHWULHYH
PAGE 185
61" &RPPDQG 0RGH *OREDO &RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#snmp-server contact Paul Enterprise AP(config)# 5HODWHG &RPPDQGV VQPS VHUYHU ORFDWLRQ VQPS VHUYHU ORFDWLRQ 7KLV FRPPDQG VHWV WKH V\VWHP ORFDWLRQ VWULQJ 8VH WKH QR IRUP WR UHPRYH WKH ORFDWLRQ VWULQJ 6\QWD[ VQPS VHUYHU ORFDWLRQ WH[W! QR VQPS VHUYHU ORFDWLRQ WH[W 6WULQJ WKDW GHVFULEHV WKH V\VWHP ORFDWLRQ 0D[LPXP OHQJWK FKDUDFWHUV 'HIDXOW 6HWWLQJ 1RQH &RPPDQG 0RGH *OREDO &RQILJXUDWLRQ ([DPSOH Enterprise A
PAGE 186
5 &RPPDQG 0RGH *OREDO &RQILJXUDWLRQ &RPPDQG 8VDJH 7KLV FRPPDQG HQDEOHV ERWK DXWKHQWLFDWLRQ IDLOXUH QRWLILFDWLRQV DQG OLQN XS GRZQ QRWLILFDWLRQV 7KH VQPS VHUYHU KRVW FRPPDQG VSHFLILHV WKH KRVW GHYLFH WKDW ZLOO UHFHLYH 6103 QRWLILFDWLRQV ([DPSOH Enterprise AP(config)#snmp-server enable server Enterprise AP(config)# 5HODWHG &RPPDQGV VQPS VHUYHU KRVW VQPS VHUYHU KRVW 7KLV FRPPDQG VSHFLILHV WKH UHFLSLHQW RI DQ 6103 QRWLILFDWLRQ 8VH WKH QR IRUP WR UHPRYH WKH VSHFLILH
PAGE 187
61" &RPPDQG 8VDJH 7KH VQPS VHUYHU KRVW FRPPDQG LV XVHG LQ FRQMXQFWLRQ ZLWK WKH VQPS VHUYHU HQDEOH VHUYHU FRPPDQG WR HQDEOH 6103 QRWLILFDWLRQV ([DPSOH Enterprise AP(config)#snmp-server host 1 10.1.19.23 batman Enterprise AP(config)# 5HODWHG &RPPDQGV VQPS VHUYHU HQDEOH VHUYHU VQPS VHUYHU WUDS 7KLV FRPPDQG HQDEOHV WKH DFFHVV SRLQW WR VHQG VSHFLILF 6103 WUDSV L H QRWLILFDWLRQV 8VH WKH QR IRUP WR GLVDEOH VSHFLILF WUDS PHVVDJHV 6\QWD[ VQPS VHUYHU WUDS WUDS! QR VQPS VHUYHU WUDS W
PAGE 188
5 LDSS6WDWLRQ5RDPHG7R $ FOLHQW VWDWLRQ KDV URDPHG WR DQRWKHU DFFHVV SRLQW LGHQWLILHG E\ LWV ,3 DGGUHVV ORFDO0DF$GGU$XWK)DLO $ FOLHQW VWDWLRQ KDV IDLOHG DXWKHQWLFDWLRQ ZLWK WKH ORFDO 0$& DGGUHVV GDWDEDVH RQ WKH DFFHVV SRLQW ORFDO0DF$GGU$XWK6XFFHVV $ FOLHQW VWDWLRQ KDV VXFFHVVIXOO\ DXWKHQWLFDWHG LWV 0$& DGGUHVV ZLWK WKH ORFDO GDWDEDVH RQ WKH DFFHVV SRLQW SSS/RJRQ)DLO 7KH DFFHVV SRLQW KDV IDLOHG WR ORJ RQWR WKH 333R( VHUYHU XVLQJ WKH FRQILJXUHG XVHU QDPH DQG SDVV
PAGE 189
61" &RPPDQG 0RGH *OREDO &RQILJXUDWLRQ &RPPDQG 8VDJH 7KLV FRPPDQG LV XVHG LQ FRQMXQFWLRQ ZLWK WKH VQPS VHUYHU XVHU FRPPDQG (QWHULQJ WKLV FRPPDQG LQYDOLGDWHV DOO HQJLQH ,'V WKDW KDYH EHHQ SUHYLRXVO\ FRQILJXUHG ,I WKH HQJLQH,' LV GHOHWHG RU FKDQJHG DOO 6103 XVHUV ZLOO EH FOHDUHG
PAGE 190
5 5:$XWK $ UHDG ZULWH JURXS XVLQJ DXWKHQWLFDWLRQ EXW QR GDWD HQFU\SWLRQ 8VHUV LQ WKLV JURXS VHQG 6103 PHVVDJHV WKDW XVH DQ 0' NH\ SDVVZRUG IRU DXWKHQWLFDWLRQ EXW QRW D '(6 NH\ SDVVZRUG IRU HQFU\SWLRQ 5:3ULY $ UHDG ZULWH JURXS XVLQJ DXWKHQWLFDWLRQ DQG GDWD HQFU\SWLRQ 8VHUV LQ WKLV JURXS VHQG 6103 PHVVDJHV WKDW XVH DQ 0' NH\ SDVVZRUG IRU DXWKHQWLFDWLRQ DQG D '(6 NH\ SDVVZRUG IRU HQFU\SWLRQ %RWK WKH 0' DQG '(6 NH\ SDVVZRUGV PXVW EH GHILQHG 7KH FRPPDQG S
PAGE 191
61" VQPS VHUYHU WDUJHWV 7KLV FRPPDQG FRQILJXUHV 6103 Y QRWLILFDWLRQ WDUJHWV 8VH WKH QR IRUP WR GHOHWH DQ 6103 Y WDUJHW 6\QWD[ VQPS VHUYHU WDUJHWV WDUJHW LG! LS DGGU! VHF QDPH! >YHUVLRQ ^ `@ >XGS SRUW ^SRUW QXPEHU`@ >QRWLILFDWLRQ W\SH ^75$3`@ QR VQPS VHUYHU WDUJHWV WDUJHW LG! WDUJHW LG $ XVHU GHILQHG QDPH WKDW LGHQWLILHV D UHFHLYHU RI 6103 QRWLILFDWLRQV 0D[LPXP OHQJWK FKDUDFWHUV LS DGGU 6SHFLILHV WKH ,3 DGGUHVV RI WKH PDQDJHPHQW VWDWLRQ WR UHFHLYH QRWLILFDWLRQV
PAGE 192
5 VQPS VHUYHU ILOWHU 7KLV FRPPDQG FRQILJXUHV 6103 Y QRWLILFDWLRQ ILOWHUV 8VH WKH QR IRUP WR GHOHWH DQ 6103 Y ILOWHU RU UHPRYH D VXEWUHH IURP D ILOWHU 6\QWD[ VQPS VHUYHU ILOWHU ILOWHU LG! LQFOXGH _ H[FOXGH! VXEWUHH! >PDVN ^PDVN`@ QR VQPS VHUYHU ILOWHU ILOWHU LG! >VXEWUHH@ ILOWHU LG $ XVHU GHILQHG QDPH WKDW LGHQWLILHV DQ 6103 Y QRWLILFDWLRQ ILOWHU 0D[LPXP OHQJWK FKDUDFWHUV LQFOXGH 'HILQHV D ILOWHU W\SH WKDW LQFOXGHV REMHFWV LQ WKH 0,% VXEWUHH H[FOXGH 'HIL
PAGE 193
61" VQPS VHUYHU ILOWHU DVVLJQPHQWV 7KLV FRPPDQG DVVLJQV 6103 Y QRWLILFDWLRQ ILOWHUV WR WDUJHWV 8VH WKH QR IRUP WR UHPRYH DQ 6103 Y ILOWHU DVVLJQPHQW 6\QWD[ VQPS VHUYHU ILOWHU DVVLJQPHQWV WDUJHW LG! ILOWHU LG! QR VQPS VHUYHU ILOWHU DVVLJQPHQWV WDUJHW LG! WDUJHW LG $ XVHU GHILQHG QDPH WKDW LGHQWLILHV D UHFHLYHU RI 6103 QRWLILFDWLRQV 0D[LPXP OHQJWK FKDUDFWHUV ILOWHU LG $ XVHU GHILQHG QDPH WKDW LGHQWLILHV DQ 6103 Y QRWLILFDWLRQ ILOWHU 0D[LPXP OHQJWK FKDUDFWHUV 'HIDX
PAGE 194
5 ([DPSOH Enterprise AP#show snmp groups GroupName :RO SecurityModel :USM SecurityLevel :NoAuthNoPriv GroupName :RWAuth SecurityModel :USM SecurityLevel :AuthNoPriv GroupName :RWPriv SecurityModel :USM SecurityLevel :AuthPriv Enterprise AP# VKRZ VQPS XVHUV 7KLV FRPPDQG GLVSOD\V WKH 6103 Y XVHUV DQG VHWWLQJV 6\QWD[ VKRZ VQPS XVHUV &RPPDQG 0RGH ([HF ([DPSOH Enterprise AP#show snmp users ============================================= UserName :chris GroupName :RWPriv AuthType :MD5
PAGE 195
61" ([DPSOH Enterprise AP#show snmp group-assignments GroupName :RWPriv UserName :chris Enterprise AP# Enterprise AP# VKRZ VQPS WDUJHW 7KLV FRPPDQG GLVSOD\V WKH 6103 Y QRWLILFDWLRQ WDUJHW VHWWLQJV 6\QWD[ VKRZ VQPS WDUJHW &RPPDQG 0RGH ([HF ([DPSOH Enterprise AP#show snmp target Host ID : mytraps User : chris IP Address : 192.168.1.33 UDP Port : 162 ============================= Enterprise AP# VKRZ VQPS ILOWHU 7KLV FRPPDQG GLVSOD\V WKH 6103 Y QRWLILFDWLRQ ILOWHU VHWWLQJV 6\QWD[ VKRZ VQ
PAGE 196
5 VKRZ VQPS ILOWHU DVVLJQPHQWV 7KLV FRPPDQG GLVSOD\V WKH 6103 Y QRWLILFDWLRQ ILOWHU DVVLJQPHQWV 6\QWD[ VKRZ VQPS ILOWHU DVVLJQPHQWV &RPPDQG 0RGH ([HF ([DPSOH Enterprise AP#show snmp filter-assignments HostID mytraps Enterprise AP# + 1 FilterID trapfilter
PAGE 197
61" VKRZ VQPS 7KLV FRPPDQG GLVSOD\V WKH 6103 FRQILJXUDWLRQ VHWWLQJV &RPPDQG 0RGH ([HF ([DPSOH Enterprise AP#show snmp SNMP Information ============================================== Service State : Enable Community (ro) : ***** Community (rw) : ***** Location : WC-19 Contact : Paul EngineId :80:00:07:e5:80:00:00:2e:62:00:00:00:18 EngineBoots:1 Trap Destinations: 1: 192.168.1.9, 2: 0.0.0.0, 3: 0.0.0.0, 4: 0.0.0.
PAGE 198
5 Flash/File Commands 7KHVH FRPPDQGV DUH XVHG WR PDQDJH WKH V\VWHP FRGH RU FRQILJXUDWLRQ ILOHV 7DEOH )ODVK )LOH &RPPDQGV &RPPDQG )XQFWLRQ 0RGH 3DJH < + & 2!"#!2!" 3= + + ) 3= + - ) 3= + 9 & )
PAGE 199
2 #2 FRS\ 7KLV FRPPDQG FRSLHV D ERRW ILOH FRGH LPDJH RU FRQILJXUDWLRQ ILOH EHWZHHQ WKH DFFHVV SRLQW¶V IODVK PHPRU\ DQG D )73 7)73 VHUYHU :KHQ \RX VDYH WKH FRQILJXUDWLRQ VHWWLQJV WR D ILOH RQ D )73 7)73 VHUYHU WKDW ILOH FDQ ODWHU EH GRZQORDGHG WR WKH DFFHVV SRLQW WR UHVWRUH V\VWHP RSHUDWLRQ 7KH VXFFHVV RI WKH ILOH WUDQVIHU GHSHQGV RQ WKH DFFHVVLELOLW\ RI WKH )73 7)73 VHUYHU DQG WKH TXDOLW\ RI WKH QHWZRUN FRQQHFWLRQ 6\QWD[ FRS\ IWS _ WIWS! ILOH FRS\ FRQILJ IWS _ WIWS!
PAGE 200
5 7KH IROORZLQJ H[DPSOH VKRZV KRZ WR GRZQORDG D FRQILJXUDWLRQ ILOH Enterprise AP#copy tftp file 1. Application image 2. Config file 3. Boot block image Select the type of download<1,2,3>: TFTP Source file name:syscfg TFTP Server IP:192.168.1.19 Enterprise AP# [1]:2 GHOHWH 7KLV FRPPDQG GHOHWHV D ILOH RU LPDJH 6\QWD[ GHOHWH ILOHQDPH! ILOHQDPH 1DPH RI WKH FRQILJXUDWLRQ ILOH RU LPDJH QDPH 'HIDXOW 6HWWLQJ 1RQH &RPPDQG 0RGH ([HF &DXWLRQ %HZDUH RI GHOHWLQJ DSSOLFDWLRQ LPDJHV IUR
PAGE 201
2 #2 GLU 7KLV FRPPDQG GLVSOD\V D OLVW RI ILOHV LQ IODVK PHPRU\ &RPPDQG 0RGH ([HF &RPPDQG 8VDJH )LOH LQIRUPDWLRQ LV VKRZQ EHORZ &ROXPQ +HDGLQJ 'HVFULSWLRQ 2 6 ! / ! : ; ? 2 E ! / : ; ([DPSOH 7KH IROORZLQJ H[DPSOH VKRZV KRZ WR GLVSOD\ DOO ILOH LQIRUPDWLRQ Enterprise AP#dir File Name -------------------------dflt-img.bin syscfg syscfg_bak zz-img.
PAGE 202
5 RADIUS Client 5HPRWH $XWKHQWLFDWLRQ 'LDO LQ 8VHU 6HUYLFH 5$',86 LV D ORJRQ DXWKHQWLFDWLRQ SURWRFRO WKDW XVHV VRIWZDUH UXQQLQJ RQ D FHQWUDO VHUYHU WR FRQWURO DFFHVV IRU 5$',86 DZDUH GHYLFHV WR WKH QHWZRUN $Q DXWKHQWLFDWLRQ VHUYHU FRQWDLQV D GDWDEDVH RI FUHGHQWLDOV VXFK DV XVHUV QDPHV DQG SDVVZRUGV IRU HDFK ZLUHOHVV FOLHQW WKDW UHTXLUHV DFFHVV WR WKH DFFHVV SRLQW 7DEOH 5$',86 &OLHQW &RPPDQG )XQFWLRQ 0RGH '() * < + .
PAGE 203
'() * &RPPDQG 0RGH *OREDO &RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#radius-server address 192.168.1.25 Enterprise AP(config)# UDGLXV VHUYHU SRUW 7KLV FRPPDQG VHWV WKH 5$',86 VHUYHU QHWZRUN SRUW 6\QWD[ UDGLXV VHUYHU >VHFRQGDU\@ SRUW SRUWBQXPEHU! VHFRQGDU\ 6HFRQGDU\ VHUYHU SRUWBQXPEHU 5$',86 VHUYHU 8'3 SRUW XVHG IRU DXWKHQWLFDWLRQ PHVVDJHV 5DQJH 'HIDXOW 6HWWLQJ &RPPDQG 0RGH *OREDO &RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#radius-server port 181 Enterprise A
PAGE 204
5 UDGLXV VHUYHU UHWUDQVPLW 7KLV FRPPDQG VHWV WKH QXPEHU RI UHWULHV 6\QWD[ UDGLXV VHUYHU >VHFRQGDU\@ UHWUDQVPLW QXPEHUBRIBUHWULHV VHFRQGDU\ 6HFRQGDU\ VHUYHU QXPEHUBRIBUHWULHV 1XPEHU RI WLPHV WKH DFFHVV SRLQW ZLOO WU\ WR DXWKHQWLFDWH ORJRQ DFFHVV YLD WKH 5$',86 VHUYHU 5DQJH 'HIDXOW 6HWWLQJ &RPPDQG 0RGH *OREDO &RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#radius-server retransmit 5 Enterprise AP(config)# UDGLXV VHUYHU WLPHRXW 7KLV FRPPDQG VHWV WKH LQWHUYDO EHWZH
PAGE 205
'() * UDGLXV VHUYHU SRUW DFFRXQWLQJ 7KLV FRPPDQG VHWV WKH 5$',86 $FFRXQWLQJ VHUYHU QHWZRUN SRUW 6\QWD[ UDGLXV VHUYHU >VHFRQGDU\@ SRUW DFFRXQWLQJ SRUWBQXPEHU! VHFRQGDU\ 6HFRQGDU\ VHUYHU ,I VHFRQGDU\ LV QRW VSHFLILHG WKHQ WKH DFFHVV SRLQW DVVXPHV \RX DUH FRQILJXULQJ WKH SULPDU\ 5$',86 VHUYHU SRUWBQXPEHU 5$',86 $FFRXQWLQJ VHUYHU 8'3 SRUW XVHG IRU DFFRXQWLQJ PHVVDJHV 5DQJH RU 'HIDXOW 6HWWLQJ GLVDEOHG &RPPDQG 0RGH *OREDO &RQILJXUDWLRQ &RPPDQG 8VDJH :KHQ WKH 5$'
PAGE 206
5 ([DPSOH Enterprise AP(config)#radius-server timeout-interim 500 Enterprise AP(config)# UDGLXV VHUYHU UDGLXV PDF IRUPDW 7KLV FRPPDQG VHWV WKH IRUPDW IRU VSHFLI\LQJ 0$& DGGUHVVHV RQ WKH 5$',86 VHUYHU 6\QWD[ UDGLXV VHUYHU UDGLXV PDF IRUPDW PXOWL FRORQ _ PXOWL GDVK _ QR GHOLPLWHU _ VLQJOH GDVK! PXOWL FRORQ (QWHU 0$& DGGUHVVHV LQ WKH IRUP [[ [[ [[ [[ [[ [[ PXOWL GDVK (QWHU 0$& DGGUHVVHV LQ WKH IRUP [[ [[ [[ [[ [[ [[ QR GHOLPLWHU (QWHU 0$& DGGUHVVHV LQ WKH IRUP [[[[[
PAGE 207
'() * VKRZ UDGLXV 7KLV FRPPDQG GLVSOD\V WKH FXUUHQW VHWWLQJV IRU WKH 5$',86 VHUYHU 'HIDXOW 6HWWLQJ 1RQH &RPPDQG 0RGH ([HF ([DPSOH Enterprise AP#show radius Radius Server Information ======================================== IP : 0.0.0.0 Port : 1812 Key : ***** Retransmit : 3 Timeout : 5 Radius MAC format : no-delimiter Radius VLAN format : HEX ======================================== Radius Secondary Server Information ======================================== IP : 0.0.0.
PAGE 208
5 802.1X Authentication 7KH DFFHVV SRLQW VXSSRUWV ,((( ; DFFHVV FRQWURO IRU ZLUHOHVV FOLHQWV 7KLV FRQWURO IHDWXUH SUHYHQWV XQDXWKRUL]HG DFFHVV WR WKH QHWZRUN E\ UHTXLULQJ DQ ; FOLHQW DSSOLFDWLRQ WR VXEPLW XVHU FUHGHQWLDOV IRU DXWKHQWLFDWLRQ &OLHQW DXWKHQWLFDWLRQ LV WKHQ YHULILHG E\ D 5$',86 VHUYHU XVLQJ ($3 ([WHQVLEOH $XWKHQWLFDWLRQ 3URWRFRO EHIRUH WKH DFFHVV SRLQW JUDQWV FOLHQW DFFHVV WR WKH QHWZRUN 7KH ; ($3 SDFNHWV DUH DOVR XVHG WR SDVV G\QDPLF XQLFDVW VHVV
PAGE 209
-. / 0 ( &RPPDQG 0RGH *OREDO &RQILJXUDWLRQ &RPPDQG 8VDJH :KHQ ; LV GLVDEOHG WKH DFFHVV SRLQW GRHV QRW VXSSRUW ; DXWKHQWLFDWLRQ IRU DQ\ VWDWLRQ $IWHU VXFFHVVIXO DVVRFLDWLRQ HDFK FOLHQW LV DOORZHG WR DFFHVV WKH QHWZRUN :KHQ ; LV VXSSRUWHG WKH DFFHVV SRLQW VXSSRUWV ; DXWKHQWLFDWLRQ RQO\ IRU FOLHQWV LQLWLDWLQJ WKH ; DXWKHQWLFDWLRQ SURFHVV L H WKH DFFHVV SRLQW GRHV 127 LQLWLDWH ; DXWKHQWLFDWLRQ )RU VWDWLRQV LQLWLDWLQJ ; RQO\ WKRVH VWDW
PAGE 210
5 FRPPDQG VSHFLILHV WKH LQWHUYDO DIWHU ZKLFK XQLFDVW VHVVLRQ NH\V DUH FKDQJHG '\QDPLF EURDGFDVW NH\ URWDWLRQ DOORZV WKH DFFHVV SRLQW WR JHQHUDWH D UDQGRP JURXS NH\ DQG SHULRGLFDOO\ XSGDWH DOO NH\ PDQDJHPHQW FDSDEOH ZLUHOHVV FOLHQWV ([DPSOH Enterprise AP(config)#802.1X broadcast-key-refresh-rate 5 Enterprise AP(config)# [ VHVVLRQ NH\ UHIUHVK UDWH 7KLV FRPPDQG VHWV WKH LQWHUYDO DW ZKLFK XQLFDVW VHVVLRQ NH\V DUH UHIUHVKHG IRU DVVRFLDWHG VWDWLRQV XVLQJ G\QDPLF NH\LQJ 6\QWD[
PAGE 211
-. / 0 ( &RPPDQG 0RGH *OREDO &RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#802.1x session-timeout 300 Enterprise AP(config)# [ VXSSOLFDQW HQDEOH 7KLV FRPPDQG HQDEOHV WKH DFFHVV SRLQW WR RSHUDWH DV DQ ; VXSSOLFDQW IRU DXWKHQWLFDWLRQ 8VH WKH QR IRUP WR GLVDEOH ; DXWKHQWLFDWLRQ RI WKH DFFHVV SRLQW 6\QWD[ [ VXSSOLFDQW HQDEOH QR [ VXSSOLFDQW 'HIDXOW 'LVDEOHG &RPPDQG 0RGH *OREDO &RQILJXUDWLRQ &RPPDQG 8VDJH $ XVHU QDPH DQG SDVVZRUG PXVW EH FRQILJXUHG ILUVW EHIRUH WKH
PAGE 212
5 &RPPDQG 0RGH *OREDO &RQILJXUDWLRQ &RPPDQG 8VDJH 7KH DFFHVV SRLQW FXUUHQWO\ RQO\ VXSSRUWV ($3 0' &+$3 IRU ; VXSSOLFDQW DXWKHQWLFDWLRQ ([DPSOH Enterprise AP(config)#802.
PAGE 213
1( ( ( MAC Address Authentication 8VH WKHVH FRPPDQGV WR GHILQH 0$& DXWKHQWLFDWLRQ RQ WKH DFFHVV SRLQW )RU ORFDO 0$& DXWKHQWLFDWLRQ ILUVW GHILQH WKH GHIDXOW ILOWHULQJ SROLF\ XVLQJ WKH DGGUHVV ILOWHU GHIDXOW FRPPDQG 7KHQ HQWHU WKH 0$& DGGUHVVHV WR EH ILOWHUHG LQGLFDWLQJ LI WKH\ DUH DOORZHG RU GHQLHG )RU 5$',86 0$& DXWKHQWLFDWLRQ WKH 0$& DGGUHVVHV DQG ILOWHULQJ SROLF\ PXVW EH FRQILJXUHG RQ WKH 5$',86 VHUYHU 7DEOH 0$& $GGUHVV $XWKHQWLFDWLRQ &RPPDQG )XQFWLRQ 0RGH
PAGE 214
5 5HODWHG &RPPDQGV DGGUHVV ILOWHU HQWU\ [ VXSSOLFDQW XVHU DGGUHVV ILOWHU HQWU\ 7KLV FRPPDQG HQWHUV D 0$& DGGUHVV LQ WKH ILOWHU WDEOH 6\QWD[ DGGUHVV ILOWHU HQWU\ PDF DGGUHVV! DOORZHG _ GHQLHG! PDF DGGUHVV 3K\VLFDO DGGUHVV RI FOLHQW (QWHU VL[ SDLUV RI KH[DGHFLPDO GLJLWV VHSDUDWHG E\ K\SKHQV H J ' $% DOORZHG (QWU\ LV DOORZHG DFFHVV GHQLHG (QWU\ LV GHQLHG DFFHVV 'HIDXOW 1RQH &RPPDQG 0RGH *OREDO &RQILJXUDWLRQ &RPPDQG 0RGH 7KH DFFHVV
PAGE 215
1( ( ( &RPPDQG 0RGH *OREDO &RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#address filter delete 00-70-50-cc-99-1b Enterprise AP(config)# 5HODWHG &RPPDQGV [ VXSSOLFDQW XVHU PDF DXWKHQWLFDWLRQ VHUYHU 7KLV FRPPDQG VHWV DGGUHVV ILOWHULQJ WR EH SHUIRUPHG ZLWK ORFDO RU UHPRWH RSWLRQV 8VH WKH QR IRUP WR GLVDEOH 0$& DGGUHVV DXWKHQWLFDWLRQ 6\QWD[ PDF DXWKHQWLFDWLRQ VHUYHU >ORFDO _ UHPRWH@ ORFDO $XWKHQWLFDWH WKH 0$& DGGUHVV RI ZLUHOHVV FOLHQWV ZLWK WKH ORFDO DXWKHQWLFDWLRQ GD
PAGE 216
5 'HIDXOW GLVDEOHG &RPPDQG 0RGH *OREDO &RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#mac-authentication session-timeout 1 Enterprise AP(config)# Filtering Commands 7KH FRPPDQGV GHVFULEHG LQ WKLV VHFWLRQ DUH XVHG WR ILOWHU FRPPXQLFDWLRQV EHWZHHQ ZLUHOHVV FOLHQWV FRQWURO DFFHVV WR WKH PDQDJHPHQW LQWHUIDFH IURP ZLUHOHVV FOLHQWV DQG ILOWHU WUDIILF XVLQJ VSHFLILF (WKHUQHW SURWRFRO W\SHV 7DEOH )LOWHULQJ &RPPDQGV &RPPDQG )XQFWLRQ 0RGH )
PAGE 217
2 ILOWHU ORFDO EULGJH 7KLV FRPPDQG GLVDEOHV FRPPXQLFDWLRQ EHWZHHQ ZLUHOHVV FOLHQWV 8VH WKH QR IRUP WR GLVDEOH WKLV ILOWHULQJ 6\QWD[ ILOWHU ORFDO EULGJH DOO 9$3 _ LQWUD 9$3! QR ILOWHU ORFDO EULGJH DOO 9$3 :KHQ HQDEOHG FOLHQWV FDQQRW HVWDEOLVK ZLUHOHVV FRPPXQLFDWLRQV ZLWK DQ\ RWKHU FOLHQW HLWKHU WKRVH DVVRFLDWHG WR WKH VDPH 9$3 LQWHUIDFH RU DQ\ RWKHU 9$3 LQWHUIDFH LQWUD 9$3 :KHQ HQDEOHG FOLHQWV DVVRFLDWHG ZLWK D VSHFLILF 9$3 LQWHUIDFH FDQQRW HVWDEOLVK ZLUHOHVV FRPPXQLFDWLRQ
PAGE 218
5 ILOWHU XSOLQN HQDEOH 7KLV FRPPDQG HQDEOHV ILOWHULQJ RI 0$& DGGUHVVHV IURP WKH (WKHUQHW SRUW 6\QWD[ >QR@ ILOWHU XSOLQN HQDEOH 'HIDXOW 'LVDEOHG &RPPDQG 0RGH *OREDO &RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#filter uplink enable Enterprise AP(config)# ILOWHU XSOLQN 7KLV FRPPDQG DGGV RU GHOHWHV 0$& DGGUHVVHV IURP WKH XSOLQN ILOWHULQJ WDEOH 6\QWD[ ILOWHU XSOLQN DGG _ GHOHWH! 0$& DGGUHVV 0$& DGGUHVV 6SHFLILHV D 0$& DGGUHVV LQ WKH IRUP [[ [[ [[ [[ [[ [[ $ PD[LPXP RI IRXU DGGUHVVHV
PAGE 219
2 *OREDO &RQILJXUDWLRQ &RPPDQG 8VDJH 7KLV FRPPDQG LV XVHG LQ FRQMXQFWLRQ ZLWK WKH ILOWHU HWKHUQHW W\SH SURWRFRO FRPPDQG WR GHWHUPLQH ZKLFK (WKHUQHW SURWRFRO W\SHV DUH WR EH ILOWHUHG ([DPSOH Enterprise AP(config)#filter ethernet-type enable Enterprise AP(config)# 5HODWHG &RPPDQGV ILOWHU HWKHUQHW W\SH SURWRFRO ILOWHU HWKHUQHW W\SH SURWRFRO 7KLV FRPPDQG VHWV D ILOWHU IRU D VSHFLILF (WKHUQHW W\SH 8VH WKH QR IRUP WR GLVDEOH ILOWHULQJ IRU D VSHFLILF (WKHUQHW W\SH 6\QWD[ ILOWHU HW
PAGE 220
5 VKRZ ILOWHUV 7KLV FRPPDQG VKRZV WKH ILOWHU RSWLRQV DQG SURWRFRO HQWULHV LQ WKH ILOWHU WDEOH &RPPDQG 0RGH ([HF ([DPSOH Enterprise AP#show filters Protocol Filter Information ======================================================================= Local Bridge :Traffic among all client STAs blocked AP Management :ENABLED Ethernet Type Filter :DISABLED UPlink Access Table ----------------------------------------------------------------------UPlink access control:Enabled UPlink MAC acc
PAGE 221
7) @ EULGJH UROH :'6 7KLV FRPPDQG VHOHFWV WKH EULGJH RSHUDWLRQ PRGH IRU WKH UDGLR LQWHUIDFH 6\QWD[ EULGJH UROH DS _ UHSHDWHU _ EULGJH _ URRW EULGJH ! DS 2SHUDWHV RQO\ DV DQ DFFHVV SRLQW IRU ZLUHOHVV FOLHQWV UHSHDWHU 2SHUDWHV DV D ZLUHOHVV UHSHDWHU H[WHQGLQJ WKH UDQJH IRU UHPRWH ZLUHOHVV FOLHQWV DQG FRQQHFWLQJ WKHP WR WKH URRW EULGJH 7KH ³3DUHQW´ OLQN WR WKH URRW EULGJH PXVW EH FRQILJXUHG ,Q WKLV PRGH WUDIILF LV QRW IRUZDUGHG WR WKH (WKHUQHW SRUW IURP WKH UDGLR LQWHUIDFH
PAGE 222
5 EULGJH FKDQQHO DXWR V\QF 7KLV FRPPDQG DOORZV D FKLOG EULGJH WR DXWRPDWLFDOO\ ILQG WKH RSHUDWLQJ FKDQQHO RI LWV SDUHQW EULGJH 6\QWD[ EULGJH FKDQQHO DXWR V\QF HQDEOH _ GLVDEOH! HQDEOH 7KH EULGJH ZLOO DXWRPDWLFDOO\ VHDUFK DQG ILQG WKH RSHUDWLQJ FKDQQHO RI LWV SDUHQW GLVDEOH 7KH EULGJH PXVW KDYH WKH RSHUDWLQJ FKDQQHO PDQXDOO\ VHW WR WKH RSHUDWLQJ FKDQQHO RI LWV SDUHQW EULGJH 'HIDXOW 6HWWLQJ 'LVDEOHG &RPPDQG 0RGH ,QWHUIDFH &RQILJXUDWLRQ :LUHOHVV ([DPSOH Enterprise AP(i
PAGE 223
7) @ EULGJH OLQN FKLOG 7KLV FRPPDQG FRQILJXUHV WKH 0$& DGGUHVVHV RI FKLOG EULGJH QRGHV 6\QWD[ EULGJH OLQN FKLOG LQGH[! PDF DGGUHVV! LQGH[ 7KH OLQN LQGH[ QXPEHU RI WKH FKLOG QRGH 5DQJH PDF DGGUHVV 7KH ZLUHOHVV 0$& DGGUHVV RI D FKLOG EULGJH XQLW KH[DGHFLPDO GLJLWV LQ WKH IRUP ³[[ [[ [[ [[ [[ [[´ 'HIDXOW 6HWWLQJ 1RQH &RPPDQG 0RGH ,QWHUIDFH &RQILJXUDWLRQ :LUHOHVV &RPPDQG 8VDJH ,Q URRW EULGJH PRGH XS WR VL[ FKLOG EULGJH OLQNV FDQ EH VSHFLILHG XVLQJ OLQN LQGH[
PAGE 224
5 &RPPDQG 8VDJH ,I WKH 0$& DGGUHVV RI DQ HQWU\ LQ WKH DGGUHVV WDEOH LV QRW VHHQ RQ WKH DVVRFLDWHG LQWHUIDFH IRU ORQJHU WKDQ WKH DJLQJ WLPH WKH HQWU\ LV GLVFDUGHG ([DPSOH Enterprise AP(config)#bridge dynamic-entry age-time 100 Enterprise AP(config)# VKRZ EULGJH DJLQJ WLPH 7KLV FRPPDQG GLVSOD\V WKH FXUUHQW :'6 IRUZDUGLQJ WDEOH DJLQJ WLPH VHWWLQJ &RPPDQG 0RGH ([HF ([DPSOH Enterprise AP#show bridge aging-time Aging time: 300 Enterprise AP# VKRZ EULGJH ILOWHU HQWU\ 7KLV FRPPDQG G
PAGE 225
7) @ VKRZ EULGJH OLQN 7KLV FRPPDQG GLVSOD\V :'6 EULGJH OLQN DQG VSDQQLQJ WUHH VHWWLQJV IRU VSHFLILHG LQWHUIDFHV 6\QWD[ VKRZ EULGJH OLQN HWKHUQHW _ ZLUHOHVV D _ J! >LQGH[@! HWKHUQHW 6SHFLILHV WKH (WKHUQHW LQWHUIDFH ZLUHOHVV 6SHFLILHV D ZLUHOHVV LQWHUIDFH D 7KH D UDGLR LQWHUIDFH J 7KH J UDGLR LQWHUIDFH LQGH[ 7KH LQGH[ QXPEHU RI D EULGJH OLQN 5DQJH &RPPDQG 0RGH ([HF ([DPSOH Enterprise AP#show bridge link wireless a Interface Wireless A WDS I
PAGE 226
5 Enterprise AP#show bridge link ethernet status : Enabled state : Forwarding priority : 0 path cost : 19 message age Timer : Inactive message age : 4346 designated-root : priority = 32768, MAC = 00:30:F1:F0:9A:9C designated-cost : 0 designated-bridge : priority = 32768, MAC = 00:30:F1:F0:9A:9C designated-port : priority = 0, port No = 1 forward-transitions : 1 Enterprise AP# Spanning Tree Commands 7KH FRPPDQGV GHVFULEHG LQ WKLV VHFWLRQ DUH XVHG WR VHW WKH 0$& DGGUHVV WDEOH DJLQJ WL
PAGE 227
! ([DPSOH 7KLV H[DPSOH JOREDOO\ HQDEOHV WKH 6SDQQLQJ 7UHH 3URWRFRO Enterprise AP(config)bridge stp enable Enterprise AP(config) EULGJH VWS IRUZDUGLQJ GHOD\ 8VH WKLV FRPPDQG WR FRQILJXUH WKH VSDQQLQJ WUHH EULGJH IRUZDUG WLPH JOREDOO\ IRU WKH ZLUHOHVV EULGJH 8VH WKH QR IRUP WR UHVWRUH WKH GHIDXOW 6\QWD[ EULGJH VWS IRUZDUGLQJ GHOD\ VHFRQGV! QR EULGJH VWS IRUZDUGLQJ GHOD\ VHFRQGV 7LPH LQ VHFRQGV 5DQJH VHFRQGV 7KH PLQLPXP YDOXH LV WKH KLJKHU RI RU > PD[ DJH
PAGE 228
5 &RPPDQG 0RGH *OREDO &RQILJXUDWLRQ &RPPDQG 8VDJH 7KLV FRPPDQG VHWV WKH WLPH LQWHUYDO LQ VHFRQGV DW ZKLFK WKH URRW GHYLFH WUDQVPLWV D FRQILJXUDWLRQ PHVVDJH ([DPSOH Enterprise AP(config)#bridge stp hello-time 5 Enterprise AP(config)# EULGJH VWS PD[ DJH 8VH WKLV FRPPDQG WR FRQILJXUH WKH VSDQQLQJ WUHH EULGJH PD[LPXP DJH JOREDOO\ IRU WKH ZLUHOHVV EULGJH 8VH WKH QR IRUP WR UHVWRUH WKH GHIDXOW 6\QWD[ EULGJH VWS PD[ DJH VHFRQGV! QR EULGJH VWS PD[ DJH VHFRQGV 7LPH LQ VHFRQGV
PAGE 229
! QR EULGJH VWS SULRULW\ SULRULW\ 3ULRULW\ RI WKH EULGJH 5DQJH 'HIDXOW 6HWWLQJ &RPPDQG 0RGH *OREDO &RQILJXUDWLRQ &RPPDQG 8VDJH %ULGJH SULRULW\ LV XVHG LQ VHOHFWLQJ WKH URRW GHYLFH URRW SRUW DQG GHVLJQDWHG SRUW 7KH GHYLFH ZLWK WKH KLJKHVW SULRULW\ EHFRPHV WKH 673 URRW GHYLFH +RZHYHU LI DOO GHYLFHV KDYH WKH VDPH SULRULW\ WKH GHYLFH ZLWK WKH ORZHVW 0$& DGGUHVV ZLOO WKHQ EHFRPH WKH URRW GHYLFH ([DPSOH Enterprise AP(config)#bridge stp-bridge priority
PAGE 230
5 6\QWD[ EULGJH OLQN SRUW SULRULW\ LQGH[! SULRULW\! LQGH[ 6SHFLILHV WKH EULGJH OLQN QXPEHU RQ WKH ZLUHOHVV EULGJH 5DQJH UHTXLUHG RQ ZLUHOHVV LQWHUIDFH RQO\ SULRULW\ 7KH SULRULW\ IRU D SRUW 5DQJH 'HIDXOW 6HWWLQJ &RPPDQG 0RGH ,QWHUIDFH &RQILJXUDWLRQ &RPPDQG 8VDJH 7KLV FRPPDQG GHILQHV WKH SULRULW\ IRU WKH XVH RI D SRUW LQ WKH 6SDQQLQJ 7UHH 3URWRFRO ,I WKH SDWK FRVW IRU DOO SRUWV RQ D ZLUHOHVV EULGJH DUH WKH VDPH WKH SRUW ZLWK WKH KLJKHVW SULRULW\
PAGE 231
! ([DPSOH Enterprise AP#show bridge stp Bridge MAC : 00:12:CF:05:B7:84 Status : Disabled priority : 0 designated-root : priority = 0, MAC = 00:00:00:00:00:00 root-path-cost : 0 root-Port-no : 0 Hold Time : 1 Seconds Hello Time : 2 Seconds Maximum Age : 20 Seconds Forward Delay : 15 Seconds bridge Hello Time : 2 Seconds bridge Maximum Age : 20 Seconds bridge Forward Delay : 15 Seconds time-since-top-change: 89185 Seconds topology-change-count: 0 Enterprise AP# + -6
PAGE 232
5 Ethernet Interface Commands 7KH FRPPDQGV GHVFULEHG LQ WKLV VHFWLRQ FRQILJXUH FRQQHFWLRQ SDUDPHWHUV IRU WKH (WKHUQHW SRUW DQG ZLUHOHVV LQWHUIDFH 7DEOH (WKHUQHW ,QWHUIDFH &RPPDQGV &RPPDQG )XQFWLRQ 0RGH 3DJH 3 3 < + 9.
PAGE 233
3 GQV VHUYHU 7KLV FRPPDQG VSHFLILHV WKH DGGUHVV IRU WKH SULPDU\ RU VHFRQGDU\ GRPDLQ QDPH VHUYHU WR EH XVHG IRU QDPH WR DGGUHVV UHVROXWLRQ 6\QWD[ GQV SULPDU\ VHUYHU VHUYHU DGGUHVV! GQV VHFRQGDU\ VHUYHU VHUYHU DGGUHVV! SULPDU\ VHUYHU 3ULPDU\ VHUYHU XVHG IRU QDPH UHVROXWLRQ VHFRQGDU\ VHUYHU 6HFRQGDU\ VHUYHU XVHG IRU QDPH UHVROXWLRQ VHUYHU DGGUHVV ,3 DGGUHVV RI GRPDLQ QDPH VHUYHU 'HIDXOW 6HWWLQJ 1RQH &RPPDQG 0RGH *OREDO &RQILJXUDWLRQ &RPPDQG 8VDJH 7KH SULPDU\
PAGE 234
5 &RPPDQG 0RGH ,QWHUIDFH &RQILJXUDWLRQ (WKHUQHW &RPPDQG 8VDJH '+&3 LV HQDEOHG E\ GHIDXOW 7R PDQXDOO\ FRQILJXUH D QHZ ,3 DGGUHVV \RX PXVW ILUVW GLVDEOH WKH '+&3 FOLHQW ZLWK WKH QR LS GKFS FRPPDQG
PAGE 235
3 :KHQ \RX XVH WKLV FRPPDQG WKH DFFHVV SRLQW ZLOO EHJLQ EURDGFDVWLQJ '+&3 FOLHQW UHTXHVWV 7KH FXUUHQW ,3 DGGUHVV L H GHIDXOW RU PDQXDOO\ FRQILJXUHG DGGUHVV ZLOO FRQWLQXH WR EH HIIHFWLYH XQWLO D '+&3 UHSO\ LV UHFHLYHG 5HTXHVWV ZLOO EH EURDGFDVW SHULRGLFDOO\ E\ WKLV GHYLFH LQ DQ HIIRUW WR OHDUQ LWV ,3 DGGUHVV '+&3 YDOXHV FDQ LQFOXGH WKH ,3 DGGUHVV VXEQHW PDVN DQG GHIDXOW JDWHZD\ ([DPSOH Enterprise AP(config)#interface ethernet Enter Ethernet configuration com
PAGE 236
5 VKXWGRZQ 7KLV FRPPDQG GLVDEOHV WKH (WKHUQHW LQWHUIDFH 7R UHVWDUW D GLVDEOHG LQWHUIDFH XVH WKH QR IRUP 6\QWD[ VKXWGRZQ QR VKXWGRZQ 'HIDXOW 6HWWLQJ ,QWHUIDFH HQDEOHG &RPPDQG 0RGH ,QWHUIDFH &RQILJXUDWLRQ (WKHUQHW &RPPDQG 8VDJH 7KLV FRPPDQG DOORZV \RX WR GLVDEOH WKH (WKHUQHW SRUW GXH WR DEQRUPDO EHKDYLRU H J H[FHVVLYH FROOLVLRQV DQG UHHQDEOH LW DIWHU WKH SUREOHP KDV EHHQ UHVROYHG
PAGE 237
7 ([DPSOH Enterprise AP#show interface ethernet Ethernet Interface Information ======================================== IP Address : 192.168.1.1 Subnet Mask : 255.255.255.0 Default Gateway : 192.168.1.253 Primary DNS : 192.168.1.55 Secondary DNS : 10.1.0.
PAGE 238
5 7DEOH :LUHOHVV ,QWHUIDFH &RPPDQGV &RPPDQG )XQFWLRQ 0RGH 3DJH & 7 + . & & % # 7 + . % E 7 + .
PAGE 239
7 LQWHUIDFH ZLUHOHVV 7KLV FRPPDQG HQWHUV ZLUHOHVV LQWHUIDFH FRQILJXUDWLRQ PRGH 6\QWD[ LQWHUIDFH ZLUHOHVV D _ J! D D UDGLR LQWHUIDFH J J UDGLR LQWHUIDFH 'HIDXOW 6HWWLQJ 1RQH &RPPDQG 0RGH *OREDO &RQILJXUDWLRQ ([DPSOH 7R VSHFLI\ WKH D LQWHUIDFH HQWHU WKH IROORZLQJ FRPPDQG Enterprise AP(config)#interface wireless a Enterprise AP(if-wireless a)# YDS 7KLV FRPPDQG SURYLGHV DFFHVV WR WKH 9$3 9LUWXDO $FFHVV 3RLQW LQWHUIDFH FRQILJXUDWLRQ PRGH 6\QW
PAGE 240
5 VSHHG 7KLV FRPPDQG FRQILJXUHV WKH PD[LPXP GDWD UDWH DW ZKLFK WKH DFFHVV SRLQW WUDQVPLWV XQLFDVW SDFNHWV 6\QWD[ VSHHG VSHHG! VSHHG 0D[LPXP DFFHVV VSHHG DOORZHG IRU ZLUHOHVV FOLHQWV 2SWLRQV IRU D 0ESV 2SWLRQV IRU E J 0ESV 'HIDXOW 6HWWLQJ 0ESV &RPPDQG 0RGH ,QWHUIDFH &RQILJXUDWLRQ :LUHOHVV &RPPDQG 8VDJH 7KH PD[LPXP WUDQVPLVVLRQ GLVWDQFH LV DIIHFWHG E\ WKH GDWD UDWH 7KH ORZHU WKH
PAGE 241
7 &RPPDQG 8VDJH 7KH QRUPDO D ZLUHOHVV RSHUDWLRQ PRGH SURYLGHV FRQQHFWLRQV XS WR 0ESV 7XUER 0RGH LV DQ HQKDQFHG PRGH QRW UHJXODWHG LQ ,((( D WKDW SURYLGHV D KLJKHU GDWD UDWH RI XS WR 0ESV (QDEOLQJ 7XUER 0RGH DOORZV WKH DFFHVV SRLQW WR SURYLGH FRQQHFWLRQV XS WR 0ESV ,Q QRUPDO PRGH WKH DFFHVV SRLQW SURYLGHV D FKDQQHO EDQGZLGWK RI 0+] DQG VXSSRUWV WKH PD[LPXP QXPEHU RI FKDQQHOV SHUPLWWHG E\ ORFDO UHJXODWLRQV H J FKDQQHOV IRU WKH 8QLW
PAGE 242
5 FKDQQHO 7KLV FRPPDQG FRQILJXUHV WKH UDGLR FKDQQHO WKURXJK ZKLFK WKH DFFHVV SRLQW FRPPXQLFDWHV ZLWK ZLUHOHVV FOLHQWV 6\QWD[ FKDQQHO FKDQQHO _ DXWR! FKDQQHO 0DQXDOO\ VHWV WKH UDGLR FKDQQHO XVHG IRU FRPPXQLFDWLRQV ZLWK ZLUHOHVV FOLHQWV 5DQJH IRU D IRU QRUPDO PRGH DQG IRU WXUER PRGH 5DQJH IRU E J WR DXWR $XWRPDWLFDOO\ VHOHFWV DQ XQRFFXSLHG FKDQQHO LI DYDLODEOH 2WKHUZLVH
PAGE 243
7 'HIDXOW 6HWWLQJ IXOO &RPPDQG 0RGH ,QWHUIDFH &RQILJXUDWLRQ :LUHOHVV &RPPDQG 8VDJH 7KH ³PLQ´ NH\ZRUG LQGLFDWHV PLQLPXP SRZHU 7KH ORQJHU WKH WUDQVPLVVLRQ GLVWDQFH WKH KLJKHU WKH WUDQVPLVVLRQ SRZHU UHTXLUHG %XW WR VXSSRUW WKH PD[LPXP QXPEHU RI XVHUV LQ DQ DUHD \RX PXVW NHHS WKH SRZHU DV ORZ DV SRVVLEOH 3RZHU VHOHFWLRQ LV QRW MXVW D WUDGH RII EHWZHHQ FRYHUDJH DUHD DQG PD[LPXP VXSSRUWHG FOLHQWV
PAGE 244
5 ([DPSOH Enterprise AP(if-wireless g)#radio-mode g Enterprise AP(if-wireless g)# SUHDPEOH 7KLV FRPPDQG VHWV WKH OHQJWK RI WKH VLJQDO SUHDPEOH WKDW LV XVHG DW WKH VWDUW RI D E J GDWD WUDQVPLVVLRQ 6\QWD[ SUHDPEOH >ORQJ _ VKRUW RU ORQJ@ ORQJ 6HWV WKH SUHDPEOH WR ORQJ PLFURVHFRQGV VKRUW RU ORQJ 6HWV WKH SUHDPEOH WR VKRUW LI QR E FOLHQWV DUH GHWHFWHG PLFURVHFRQGV 'HIDXOW 6HWWLQJ 6KRUW RU /RQJ &RPPDQG 0RGH ,QWHUIDFH &RQILJXUDWLRQ :LUHOHVV E J &
PAGE 245
7 ULJKW 7KH UDGLR RQO\ XVHV WKH DQWHQQD RQ WKH ULJKW VLGH WKH VLGH FORVHVW WR WKH DFFHVV SRLQW /('V 6HOHFW WKLV PHWKRG ZKHQ XVLQJ DQ RSWLRQDO H[WHUQDO DQWHQQD WKDW LV FRQQHFWHG WR WKH ULJKW DQWHQQD FRQQHFWRU 'HIDXOW 6HWWLQJ 'LYHUVLW\ &RPPDQG 0RGH ,QWHUIDFH &RQILJXUDWLRQ :LUHOHVV &RPPDQG 8VDJH 7KH DQWHQQD ,' PXVW EH VHOHFWHG LQ FRQMXQFWLRQ ZLWK WKH DQWHQQD FRQWURO PHWKRG WR FRQILJXUH SURSHU XVH RI DQ\ RI WKH DQWHQQD RSWLRQV ([DPSOH Enterprise AP(if-wireless g)#ante
PAGE 246
5 DQWHQQD ORFDWLRQ 7KLV FRPPDQG VHOHFWV WKH DQWHQQD PRXQWLQJ ORFDWLRQ IRU WKH UDGLR LQWHUIDFH 6\QWD[ DQWHQQD ORFDWLRQ LQGRRU _ RXWGRRU! LQGRRU 7KH DQWHQQD LV PRXQWHG LQGRRUV RXWGRRU 7KH DQWHQQD LV PRXQWHG RXWGRRUV 'HIDXOW 6HWWLQJ ,QGRRU &RPPDQG 0RGH ,QWHUIDFH &RQILJXUDWLRQ :LUHOHVV &RPPDQG 8VDJH :KHQ DQ H[WHUQDO DQWHQQD LV VHOHFWHG WKH DQWHQQD FRQWURO PXVW EH VHW WR ³ULJKW ´ 6HOHFWLQJ WKH FRUUHFW ORFDWLRQ HQVXUHV WKDW WKH DFFHVV SRLQW RQO\ XVHV UDGLR FKDQQHOV WKDW
PAGE 247
7 ([DPSOH Enterprise AP(if-wireless g)#beacon-interval 150 Enterprise AP(if-wireless g)# GWLP SHULRG 7KLV FRPPDQG FRQILJXUHV WKH UDWH DW ZKLFK VWDWLRQV LQ VOHHS PRGH PXVW ZDNH XS WR UHFHLYH EURDGFDVW PXOWLFDVW WUDQVPLVVLRQV 6\QWD[ GWLP SHULRG LQWHUYDO! LQWHUYDO ,QWHUYDO EHWZHHQ WKH EHDFRQ IUDPHV WKDW WUDQVPLW EURDGFDVW RU PXOWLFDVW WUDIILF 5DQJH EHDFRQ IUDPHV 'HIDXOW 6HWWLQJ &RPPDQG 0RGH ,QWHUIDFH &RQILJXUDWLRQ :LUHOHVV &RPPDQG 8VDJH 7KH 'HOLYHU\ 7UDII
PAGE 248
5 IUDJPHQWDWLRQ OHQJWK 7KLV FRPPDQG FRQILJXUHV WKH PLQLPXP SDFNHW VL]H WKDW FDQ EH IUDJPHQWHG ZKHQ SDVVLQJ WKURXJK WKH DFFHVV SRLQW 6\QWD[ IUDJPHQWDWLRQ OHQJWK OHQJWK! OHQJWK 0LQLPXP SDFNHW VL]H IRU ZKLFK IUDJPHQWDWLRQ LV DOORZHG 5DQJH E\WHV 'HIDXOW 6HWWLQJ &RPPDQG 0RGH ,QWHUIDFH &RQILJXUDWLRQ :LUHOHVV &RPPDQG 8VDJH ,I WKH SDFNHW VL]H LV VPDOOHU WKDQ WKH SUHVHW )UDJPHQW VL]H WKH SDFNHW ZLOO QRW EH VHJPHQWHG )UDJPHQWDWLRQ RI WKH 3'8V 3DFNDJH 'DWD 8QL
PAGE 249
7 'HIDXOW 6HWWLQJ &RPPDQG 0RGH ,QWHUIDFH &RQILJXUDWLRQ :LUHOHVV &RPPDQG 8VDJH ,I WKH WKUHVKROG LV VHW WR WKH DFFHVV SRLQW DOZD\V VHQGV 576 VLJQDOV ,I VHW WR WKH DFFHVV SRLQW QHYHU VHQGV 576 VLJQDOV ,I VHW WR DQ\ RWKHU YDOXH DQG WKH SDFNHW VL]H HTXDOV RU H[FHHGV WKH 576 WKUHVKROG WKH 576 &76 5HTXHVW WR 6HQG &OHDU WR 6HQG PHFKDQLVP ZLOO EH HQDEOHG 7KH DFFHVV SRLQW VHQGV 576 IUDPHV WR D UHFHLYLQJ VWDWLRQ WR QHJRWLDWH WKH VHQGLQJ RI D GDWD IUDPH $
PAGE 250
5 VXSHU J 7KLV FRPPDQG HQDEOHV $WKHURV SURSULHWDU\ 6XSHU * SHUIRUPDQFH HQKDQFHPHQWV 8VH WKH QR IRUP WR GLVDEOH WKLV IXQFWLRQ 6\QWD[ >QR@ VXSHU J 'HIDXOW 6HWWLQJ 'LVDEOHG &RPPDQG 0RGH ,QWHUIDFH &RQILJXUDWLRQ :LUHOHVV J &RPPDQG 8VDJH 7KHVH HQKDQFHPHQWV LQFOXGH EXUVWLQJ FRPSUHVVLRQ IDVW IUDPHV DQG G\QDPLF WXUER 0D[LPXP WKURXJKSXW UDQJHV EHWZHHQ WR 0ESV IRU FRQQHFWLRQV WR $WKHURV FRPSDWLEOH FOLHQWV ([DPSOH Enterprise AP(if-wireless a)#super g Enterprise AP(if-
PAGE 251
7 VVLG 7KLV FRPPDQG FRQILJXUHV WKH VHUYLFH VHW LGHQWLILHU 66,' 6\QWD[ VVLG VWULQJ! VWULQJ 7KH QDPH RI D EDVLF VHUYLFH VHW VXSSRUWHG E\ WKH DFFHVV SRLQW 5DQJH FKDUDFWHUV 'HIDXOW 6HWWLQJ D 5DGLR 9$3B7(67B $ WR J 5DGLR 9$3B7(67B * WR &RPPDQG 0RGH ,QWHUIDFH &RQILJXUDWLRQ :LUHOHVV 9$3 &RPPDQG 8VDJH &OLHQWV WKDW ZDQW WR FRQQHFW WR WKH ZLUHOHVV QHWZRUN YLD DQ DFFHVV SRLQW PXVW VHW WKHLU 66,'V WR WKH VDPH DV WKDW RI WKH DFFHVV SRLQW ([DPS
PAGE 252
5 PD[ DVVRFLDWLRQ 7KLV FRPPDQG FRQILJXUHV WKH PD[LPXP QXPEHU RI FOLHQWV WKDW FDQ EH DVVRFLDWHG ZLWK WKH DFFHVV SRLQW DW WKH VDPH WLPH 6\QWD[ PD[ DVVRFLDWLRQ FRXQW! FRXQW 0D[LPXP QXPEHU RI DVVRFLDWHG VWDWLRQV 5DQJH 'HIDXOW 6HWWLQJ &RPPDQG 0RGH ,QWHUIDFH &RQILJXUDWLRQ :LUHOHVV 9$3 ([DPSOH Enterprise AP(if-wireless g: VAP[0])#max-association 32 Enterprise AP(if-wireless g)# DVVRF WLPHRXW LQWHUYDO 7KLV FRPPDQG FRQILJXUHV WKH LGOH WLPH LQWHUYDO ZKHQ QR IUDPHV DUH VHQ
PAGE 253
7 'HIDXOW 6HWWLQJ &RPPDQG 0RGH ,QWHUIDFH &RQILJXUDWLRQ :LUHOHVV 9$3 ([DPSOH Enterprise AP(if-wireless g: VAP[0])#auth-timeout-value 40 Enterprise AP(if-wireless g: VAP[0])# VKXWGRZQ 7KLV FRPPDQG GLVDEOHV WKH ZLUHOHVV LQWHUIDFH 8VH WKH QR IRUP WR UHVWDUW WKH LQWHUIDFH 6\QWD[ VKXWGRZQ QR VKXWGRZQ 'HIDXOW 6HWWLQJ ,QWHUIDFH HQDEOHG &RPPDQG 0RGH ,QWHUIDFH &RQILJXUDWLRQ :LUHOHVV 9$3 &RPPDQG 8VDJH
PAGE 254
5 VKRZ LQWHUIDFH ZLUHOHVV 7KLV FRPPDQG GLVSOD\V WKH VWDWXV IRU WKH ZLUHOHVV LQWHUIDFH 6\QWD[ VKRZ LQWHUIDFH ZLUHOHVV D _ J! YDS LG D D UDGLR LQWHUIDFH J J UDGLR LQWHUIDFH YDS LG 7KH QXPEHU WKDW LGHQWLILHV WKH 9$3 LQWHUIDFH 2SWLRQV a &RPPDQG 0RGH ([HF ([DPSOH Enterprise AP#show interface wireless g 0 Wireless Interface Information ========================================================================= ----------------Identification------------------
PAGE 255
7 ----------------802.1x--------------------------------------------------802.1x : DISABLED Broadcast Key Refresh Rate : 30 min Session Key Refresh Rate : 30 min 802.
PAGE 256
5 VKRZ VWDWLRQ 7KLV FRPPDQG VKRZV WKH ZLUHOHVV FOLHQWV DVVRFLDWHG ZLWK WKH DFFHVV SRLQW &RPPDQG 0RGH ([HF ([DPSOH Enterprise AP#show station Station Table Information ======================================================== if-wireless A VAP [0] : 802.11a Channel : 60 No 802.11a Channel Stations. . . . if-wireless G VAP [0] : 802.11g Channel : 1 802.
PAGE 257
' (" ) Rogue AP Detection Commands $ ³URJXH $3´ LV HLWKHU DQ DFFHVV SRLQW WKDW LV QRW DXWKRUL]HG WR SDUWLFLSDWH LQ WKH ZLUHOHVV QHWZRUN RU DQ DFFHVV SRLQW WKDW GRHV QRW KDYH WKH FRUUHFW VHFXULW\ FRQILJXUDWLRQ 5RJXH $3V FDQ SRWHQWLDOO\ DOORZ XQDXWKRUL]HG XVHUV DFFHVV WR WKH QHWZRUN $OWHUQDWLYHO\ FOLHQW VWDWLRQV PD\ PLVWDNHQO\ DVVRFLDWH WR D URJXH $3 DQG EH SUHYHQWHG IURP DFFHVVLQJ QHWZRUN UHVRXUFHV 5RJXH $3V PD\ DOVR FDXVH UDGLR LQWHUIHUHQFH DQG GHJUDGH WKH ZLUHOHVV /$1 SHUI
PAGE 258
5 $ ³URJXH $3´ LV HLWKHU DQ DFFHVV SRLQW WKDW LV QRW DXWKRUL]HG WR SDUWLFLSDWH LQ WKH ZLUHOHVV QHWZRUN RU DQ DFFHVV SRLQW WKDW GRHV QRW KDYH WKH FRUUHFW VHFXULW\ FRQILJXUDWLRQ 5RJXH DFFHVV SRLQWV FDQ EH LGHQWLILHG E\ XQNQRZQ %66,' 0$& DGGUHVV RU 66,' FRQILJXUDWLRQ $ GDWDEDVH RI QHDUE\ DFFHVV SRLQWV VKRXOG WKHUHIRUH EH PDLQWDLQHG RQ D 5$',86 VHUYHU DOORZLQJ DQ\ URJXH $3V WR EH LGHQWLILHG VHH ³URJXH DS DXWKHQWLFDWH´ RQ SDJH 7KH URJXH $3 GDWDEDVH FDQ EH YLHZHG XVLQJ
PAGE 259
' (" ) URJXH DS GXUDWLRQ 7KLV FRPPDQG VHWV WKH VFDQ GXUDWLRQ IRU GHWHFWLQJ DFFHVV SRLQWV 6\QWD[ URJXH DS GXUDWLRQ PLOOLVHFRQGV! PLOOLVHFRQGV 7KH GXUDWLRQ RI WKH VFDQ 5DQJH PLOOLVHFRQGV 'HIDXOW 6HWWLQJ PLOOLVHFRQGV &RPPDQG 0RGH ,QWHUIDFH &RQILJXUDWLRQ :LUHOHVV &RPPDQG 8VDJH 'XULQJ D VFDQ FOLHQW DFFHVV PD\ EH GLVUXSWHG DQG QHZ FOLHQWV PD\ QRW EH DEOH WR DVVRFLDWH WR WKH DFFHVV SRLQW ,I FOLHQWV H[SHULHQFH VHYHUH GLVUXSWLRQ UHGXFH WKH VFDQ GXUDWLRQ WLPH $
PAGE 260
5 ([DPSOH Enterprise AP(if-wireless g)#rogue-ap interval 120 Enterprise AP(if-wireless g)# 5HODWHG &RPPDQGV URJXH DS GXUDWLRQ URJXH DS VFDQ 7KLV FRPPDQG VWDUWV DQ LPPHGLDWH VFDQ IRU DFFHVV SRLQWV RQ WKH UDGLR LQWHUIDFH 'HIDXOW 6HWWLQJ 'LVDEOHG &RPPDQG 0RGH ,QWHUIDFH &RQILJXUDWLRQ :LUHOHVV &RPPDQG 8VDJH :KLOH WKH DFFHVV SRLQW VFDQV D FKDQQHO IRU URJXH $3V ZLUHOHVV FOLHQWV ZLOO QRW EH DEOH WR FRQQHFW WR WKH DFFHVV SRLQW 7KHUHIRUH DYRLG IUHTXHQW VFDQQLQJ RU VFDQV RI D
PAGE 261
7 VKRZ URJXH DS 7KLV FRPPDQG GLVSOD\V WKH FXUUHQW URJXH $3 GDWDEDVH &RPPDQG 0RGH ([HF ([DPSOH Enterprise AP#show rogue-ap 802.11a Channel : Rogue AP Status AP Address(BSSID) SSID Channel(MHz) RSSI Type Privacy RSN ====================================================================== 802.
PAGE 262
5 7DEOH :LUHOHVV 6HFXULW\ &RPPDQGV &RPPDQG )XQFWLRQ 0RGH 3DJH % "1B 7 4(" + + 3 7"( 7 4(" + - DXWK 7KLV FRPPDQG FRQILJXUHV DXWKHQWLFDWLRQ IRU WKH 9$3 LQWHUIDFH 6\QWD[ DXWK RSHQ V\VWHP _ VKDUHG NH\ _ ZSD _ ZSD SVN _ ZSD _ ZSD SVN _ ZSD ZSD PL[HG _ ZSD ZSD SVN PL[HG _ ! UHTXLUHG _ VXSSRUWHG! RSHQ V\VWHP $FFHSWV WKH FOLHQW ZLWKRXW YHULI
PAGE 263
7 7R XVH :(3 VKDUHG NH\ DXWKHQWLFDWLRQ VHW WKH DXWKHQWLFDWLRQ W\SH WR ³VKDUHG NH\´ DQG GHILQH DW OHDVW RQH VWDWLF :(3 NH\ ZLWK WKH NH\ FRPPDQG (QFU\SWLRQ LV DXWRPDWLFDOO\ HQDEOHG E\ WKH FRPPDQG 7R XVH :(3 HQFU\SWLRQ RQO\ QR DXWKHQWLFDWLRQ VHW WKH DXWKHQWLFDWLRQ W\SH WR ³RSHQ V\VWHP ´ 7KHQ HQDEOH :(3 ZLWK WKH HQFU\SWLRQ FRPPDQG DQG GHILQH DW OHDVW RQH VWDWLF :(3 NH\ ZLWK WKH NH\ FRPPDQG :KHQ DQ\ :3$ RU :3$ RSWLRQ LV VHOHFWHG FOLHQWV DUH DXWKHQWLFDWHG XVLQJ
PAGE 264
5 ([DPSOH Enterprise AP(if-wireless g: VAP[0])#auth shared-key Enterprise AP(if-wireless g)# 5HODWHG &RPPDQGV HQFU\SWLRQ NH\ HQFU\SWLRQ 7KLV FRPPDQG HQDEOHV GDWD HQFU\SWLRQ IRU ZLUHOHVV FRPPXQLFDWLRQV 8VH WKH QR IRUP WR GLVDEOH GDWD HQFU\SWLRQ 6\QWD[ HQFU\SWLRQ QR HQFU\SWLRQ 'HIDXOW 6HWWLQJ GLVDEOHG &RPPDQG 0RGH ,QWHUIDFH &RQILJXUDWLRQ :LUHOHVV 9$3 &RPPDQG 8VDJH :LUHG (TXLYDOHQW 3ULYDF\ :(3 LV LPSOHPHQWHG LQ WKLV GHYLFH WR SUHYHQW XQDXWKRUL]HG DFFHVV WR \R
PAGE 265
7 NH\ 7KLV FRPPDQG VHWV WKH NH\V XVHG IRU :(3 HQFU\SWLRQ 8VH WKH QR IRUP WR GHOHWH D FRQILJXUHG NH\ 6\QWD[ NH\ LQGH[! VL]H! W\SH! YDOXH! QR NH\ LQGH[ LQGH[ .H\ LQGH[ 5DQJH VL]H .H\ VL]H 2SWLRQV RU ELWV W\SH ,QSXW IRUPDW 2SWLRQV $6&,, +(; YDOXH 7KH NH\ VWULQJ )RU ELW NH\V XVH DOSKDQXPHULF FKDUDFWHUV RU KH[DGHFLPDO GLJLWV )RU ELW NH\V XVH DOSKDQXPHULF FKDUDFWHUV RU KH[DGHFLPDO GLJLWV )RU ELW NH\V
PAGE 266
5 WUDQVPLW NH\ 7KLV FRPPDQG VHWV WKH LQGH[ RI WKH NH\ WR EH XVHG IRU HQFU\SWLQJ GDWD IUDPHV IRU EURDGFDVW RU PXOWLFDVW WUDIILF WUDQVPLWWHG IURP WKH 9$3 WR ZLUHOHVV FOLHQWV 6\QWD[ WUDQVPLW NH\ LQGH[! LQGH[ .H\ LQGH[ 5DQJH 'HIDXOW 6HWWLQJ &RPPDQG 0RGH ,QWHUIDFH &RQILJXUDWLRQ :LUHOHVV 9$3 &RPPDQG 8VDJH ,I \RX XVH :(3 NH\ HQFU\SWLRQ RSWLRQ WKH DFFHVV SRLQW XVHV WKH WUDQVPLW NH\ WR HQFU\SW PXOWLFDVW DQG EURDGFDVW GDWD VLJQDOV WKDW LW VHQGV WR FOLHQW GHYLFHV 2WKHU NH
PAGE 267
7 FLSKHU VXLWH 7KLV FRPPDQG GHILQHV WKH FLSKHU DOJRULWKP XVHG WR HQFU\SW WKH JOREDO NH\ IRU EURDGFDVW DQG PXOWLFDVW WUDIILF ZKHQ XVLQJ :L )L 3URWHFWHG $FFHVV :3$ VHFXULW\ 6\QWD[ PXOWLFDVW FLSKHU DHV FFPS _ WNLS _ ZHS! DHV FFPS 8VH $(6 &&03 HQFU\SWLRQ IRU WKH XQLFDVW DQG PXOWLFDVW FLSKHU WNLS 8VH 7.,3 HQFU\SWLRQ IRU WKH PXOWLFDVW FLSKHU 7.,3 RU $(6 &&03 FDQ EH XVHG IRU WKH XQLFDVW FLSKHU GHSHQGLQJ RQ WKH FDSDELOLW\ RI WKH FOLHQW ZHS 8VH :(3 HQFU\SWLRQ IRU
PAGE 268
5 $(6 &&03 $GYDQFHG (QFU\SWLRQ 6WDQGDUG &RXQWHU 0RGH &%&0$& 3URWRFRO :3$ LV EDFNZDUG FRPSDWLEOH ZLWK :3$ LQFOXGLQJ WKH VDPH ; DQG 36. PRGHV RI RSHUDWLRQ DQG VXSSRUW IRU 7.,3 HQFU\SWLRQ 7KH PDLQ HQKDQFHPHQW LV LWV XVH RI $(6 &RXQWHU 0RGH HQFU\SWLRQ ZLWK &LSKHU %ORFN &KDLQLQJ 0HVVDJH $XWKHQWLFDWLRQ &RGH &%& 0$& IRU PHVVDJH LQWHJULW\ 7KH $(6 &RXQWHU 0RGH &%&0$& 3URWRFRO $(6 &&03 SURYLGHV H[WUHPHO\ UREXVW GDWD FRQILGHQWLDOLW\ XVLQJ D ELW NH\ 7KH $(6 &&03 HQFU\
PAGE 269
7 ([DPSOH Enterprise AP(if-wireless a)#mic_mode hardware Enterprise AP(if-wireless g)# ZSD SUH VKDUHG NH\ 7KLV FRPPDQG GHILQHV D :L )L 3URWHFWHG $FFHVV :3$ :3$ 3UH VKDUHG NH\ 6\QWD[ ZSD SUH VKDUHG NH\ KH[ _ SDVVSKUDVH NH\! YDOXH! KH[ 6SHFLILHV KH[DGHFLPDO GLJLWV DV WKH NH\ LQSXW IRUPDW SDVVSKUDVH NH\ 6SHFLILHV DQ $6&,, SDVV SKUDVH VWULQJ DV WKH NH\ LQSXW IRUPDW YDOXH 7KH NH\ VWULQJ )RU $6&,, LQSXW VSHFLI\ D VWULQJ EHWZHHQ DQG FKDUDFWHUV )RU +(; L
PAGE 270
5 &RPPDQG 0RGH ,QWHUIDFH &RQILJXUDWLRQ :LUHOHVV 9$3 &RPPDQG 8VDJH :3$ SURYLGHV IDVW URDPLQJ IRU DXWKHQWLFDWHG FOLHQWV E\ UHWDLQLQJ NH\V DQG RWKHU VHFXULW\ LQIRUPDWLRQ LQ D FDFKH VR WKDW LI D FOLHQW URDPV DZD\ IURP DQ DFFHVV SRLQW DQG WKHQ UHWXUQV UHDXWKHQWLFDWLRQ LV QRW UHTXLUHG :KHQ D :3$ FOLHQW LV ILUVW DXWKHQWLFDWHG LW UHFHLYHV D 3DLUZLVH 0DVWHU .H\ 30. WKDW LV XVHG WR JHQHUDWH RWKHU NH\V IRU XQLFDVW GDWD HQFU\SWLRQ 7KLV NH\ DQG RWKHU FOLHQW LQIRUPDWLRQ IRUP D 6H
PAGE 271
5 % NQRZQ WR EH DOUHDG\ DXWKHQWLFDWHG VR LW SURFHHGV GLUHFWO\ WR NH\ H[FKDQJH DQG DVVRFLDWLRQ 7R VXSSRUW SUH DXWKHQWLFDWLRQ ERWK FOLHQWV DQG DFFHVV SRLQWV LQ WKH QHWZRUN PXVW EH :3$ HQDEOHG 3UH DXWKHQWLFDWLRQ UHTXLUHV DOO DFFHVV SRLQWV LQ WKH QHWZRUN WR EH RQ WKH VDPH ,3 VXEQHW ([DPSOH Enterprise AP(if-wireless g: VAP[0])#wpa-pre-shared-key ASCII agoodsecret Enterprise AP(if-wireless g: VAP[0])# Link Integrity Commands 7KH DFFHVV SRLQW SURYLGHV D OLQN LQWHJULW\ IHDWXUH
PAGE 272
5 OLQN LQWHJULW\ SLQJ GHWHFW 7KLV FRPPDQG HQDEOHV OLQN LQWHJULW\ GHWHFWLRQ 8VH WKH QR IRUP WR GLVDEOH OLQN LQWHJULW\ GHWHFWLRQ 6\QWD[ >QR@ OLQN LQWHJULW\ SLQJ GHWHFW 'HIDXOW 6HWWLQJ 'LVDEOHG &RPPDQG 0RGH *OREDO &RQILJXUDWLRQ &RPPDQG 8VDJH :KHQ OLQN LQWHJULW\ LV HQDEOHG WKH ,3 DGGUHVV RI D KRVW GHYLFH LQ WKH ZLUHG QHWZRUN PXVW EH VSHFLILHG 7KH DFFHVV SRLQW SHULRGLFDOO\ VHQGV DQ ,&03 HFKR UHTXHVW 3LQJ SDFNHW WR WKH OLQN KRVW ,3 DGGUHVV :KHQ WKH QXPEHU RI IDLOHG UHVSRQVHV
PAGE 273
5 % OLQN LQWHJULW\ SLQJ LQWHUYDO 7KLV FRPPDQG FRQILJXUHV WKH WLPH EHWZHHQ HDFK 3LQJ VHQW WR WKH OLQN KRVW 6\QWD[ OLQN LQWHJULW\ SLQJ LQWHUYDO LQWHUYDO! LQWHUYDO 7KH WLPH EHWZHHQ 3LQJV 5DQJH VHFRQGV 'HIDXOW 6HWWLQJ VHFRQGV &RPPDQG 0RGH *OREDO &RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#link-integrity ping-interval 20 Enterprise AP(config)# OLQN LQWHJULW\ SLQJ IDLO UHWU\ 7KLV FRPPDQG FRQILJXUHV WKH QXPEHU RI FRQVHFXWLYH IDLOHG 3LQJ FRXQWV EHIRUH WKH OLQN LV GHWHUP
PAGE 274
5 &RPPDQG 0RGH *OREDO &RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#link-integrity ethernet-detect Notification : Ethernet Link Detect SUCCESS - RADIO(S) ENABLED Enterprise AP(config)# VKRZ OLQN LQWHJULW\ 7KLV FRPPDQG GLVSOD\V WKH FXUUHQW OLQN LQWHJULW\ FRQILJXUDWLRQ &RPPDQG 0RGH ([HF ([DPSOH Enterprise AP#show link-integrity Link Integrity Information =========================================================== Ethernet Detect : Enabled Ping Detect : Enabled Target IP/Name : 192.
PAGE 275
("" IAPP Commands 7KH FRPPDQG GHVFULEHG LQ WKLV VHFWLRQ HQDEOHV WKH SURWRFRO VLJQDOLQJ UHTXLUHG WR HQVXUH WKH VXFFHVVIXO KDQGRYHU RI ZLUHOHVV FOLHQWV URDPLQJ EHWZHHQ GLIIHUHQW I FRPSOLDQW DFFHVV SRLQWV ,Q RWKHU ZRUGV WKH I SURWRFRO FDQ HQVXUH VXFFHVVIXO URDPLQJ EHWZHHQ DFFHVV SRLQWV LQ D PXOWL YHQGRU HQYLURQPHQW LDSS 7KLV FRPPDQG HQDEOHV WKH SURWRFRO VLJQDOLQJ UHTXLUHG WR KDQG RYHU ZLUHOHVV FOLHQWV URDPLQJ EHWZHHQ GLIIHUHQW I FRPSOLDQW DFFHVV SRLQWV 8VH WKH QR IRUP W
PAGE 276
5 VLAN Commands 7KH DFFHVV SRLQW FDQ HQDEOH WKH VXSSRUW RI 9/$1 WDJJHG WUDIILF SDVVLQJ EHWZHHQ ZLUHOHVV FOLHQWV DQG WKH ZLUHG QHWZRUN 8S WR 9/$1 ,'V FDQ EH PDSSHG WR VSHFLILF ZLUHOHVV FOLHQWV DOORZLQJ XVHUV WR UHPDLQ ZLWKLQ WKH VDPH 9/$1 DV WKH\ PRYH DURXQG D FDPSXV VLWH :KHQ 9/$1 LV HQDEOHG RQ WKH DFFHVV SRLQW D 9/$1 ,' D QXPEHU EHWZHHQ DQG FDQ EH DVVLJQHG WR HDFK FOLHQW DIWHU VXFFHVVIXO DXWKHQWLFDWLRQ XVLQJ ,((( ; DQG D FHQWUDO 5$',86 VHUYHU 7KH XVHU 9/$1
PAGE 277
45(6 7UDIILF HQWHULQJ WKH (WKHUQHW SRUW PXVW EH WDJJHG ZLWK D 9/$1 ,' WKDW PDWFKHV WKH DFFHVV SRLQW¶V QDWLYH 9/$1 ,' RU ZLWK D 9/$1 WDJ WKDW PDWFKHV RQH RI WKH ZLUHOHVV FOLHQWV FXUUHQWO\ DVVRFLDWHG ZLWK WKH DFFHVV SRLQW ([DPSOH Enterprise AP(config)#vlan enable Reboot system now? : y 5HODWHG &RPPDQGV PDQDJHPHQW YODQLG PDQDJHPHQW YODQLG 7KLV FRPPDQG FRQILJXUHV WKH PDQDJHPHQW 9/$1 ,' IRU WKH DFFHVV SRLQW 6\QWD[ PDQDJHPHQW YODQLG YODQ LG! YODQ LG 0DQDJHPHQW 9/$1 ,' 5DQ
PAGE 278
5 'HIDXOW 6HWWLQJ &RPPDQG 0RGH ,QWHUIDFH &RQILJXUDWLRQ :LUHOHVV 9$3 &RPPDQG 8VDJH 7R LPSOHPHQW WKH GHIDXOW 9/$1 ,' VHWWLQJ IRU 9$3 LQWHUIDFH WKH DFFHVV SRLQW PXVW HQDEOH 9/$1 VXSSRUW XVLQJ WKH YODQ FRPPDQG :KHQ 9/$1V DUH HQDEOHG WKH DFFHVV SRLQW WDJV IUDPHV UHFHLYHG IURP ZLUHOHVV FOLHQWV ZLWK WKH GHIDXOW 9/$1 ,' IRU WKH 9$3 LQWHUIDFH ,I ,((( ; LV EHLQJ XVHG WR DXWKHQWLFDWH ZLUHOHVV FOLHQWV VSHFLILF 9/$1 ,'V FDQ EH FRQILJXUHG RQ WKH 5$',86 VHUYHU WR EH DVVLJQHG
PAGE 279
711 ZPP 7KLV FRPPDQG VHWV WKH :00 RSHUDWLRQDO PRGH RQ WKH DFFHVV SRLQW 8VH WKH QR IRUP WR GLVDEOH :00 6\QWD[ >QR@ ZPP VXSSRUWHG _ UHTXLUHG! VXSSRUWHG :00 ZLOO EH XVHG IRU DQ\ DVVRFLDWHG GHYLFH WKDW VXSSRUWV WKLV IHDWXUH 'HYLFHV WKDW GR QRW VXSSRUW WKLV IHDWXUH PD\ VWLOO DVVRFLDWH ZLWK WKH DFFHVV SRLQW UHTXLUHG :00 PXVW EH VXSSRUWHG RQ DQ\ GHYLFH WU\LQJ WR DVVRFLDWHG ZLWK WKH DFFHVV SRLQW 'HYLFHV WKDW GR QRW VXSSRUW WKLV IHDWXUH ZLOO QRW EH DOORZHG WR DVVRFLDWH ZLWK WKH DFFH
PAGE 280
5 LQWHUSUHWDELOLW\ ZLWK RWKHU ZLUHG QHWZRUN 4R6 SROLFLHV :KLOH WKH IRXU $&V DUH VSHFLILHG IRU VSHFLILF W\SHV RI WUDIILF :00 DOORZV WKH SULRULW\ OHYHOV WR EH FRQILJXUHG WR PDWFK DQ\ QHWZRUN ZLGH 4R6 SROLF\ :00 DOVR VSHFLILHV D SURWRFRO WKDW DFFHVV SRLQWV FDQ XVH WR FRPPXQLFDWH WKH FRQILJXUHG WUDIILF SULRULW\ OHYHOV WR 4R6 HQDEOHG ZLUHOHVV FOLHQWV $OWKRXJK WXUQLQJ RII WKH UHTXLUHPHQW IRU WKH VHQGHU WR ZDLW IRU DQ DFNQRZOHGJHPHQW FDQ LQFUHDVHV GDWD WKURXJKSXW LW FDQ DOVR UHVXO
PAGE 281
711 DGPLVVLRQBFRQWURO 7KH DGPLVVLRQ FRQWURO PRGH IRU WKH DFFHVV FDWHJRU\ :KHQ HQDEOHG FOLHQWV DUH EORFNHG IURP XVLQJ WKH DFFHVV FDWHJRU\ 2SWLRQV WR GLVDEOH WR HQDEOH 'HIDXOW $3 3DUDPHWHUV :00 3DUDPHWHUV $& %HVW (IIRUW $& %DFNJURXQG $& 9LGHR $& 9RLFH 5 &1 5 &1 = . . ( 2 + !0?" 5 . .
PAGE 282
+ 37 5
PAGE 283
Appendix A: Troubleshooting &KHFN WKH IROORZLQJ LWHPV EHIRUH \RX FRQWDFW ORFDO 7HFKQLFDO 6XSSRUW ,I ZLUHOHVV FOLHQWV FDQQRW DFFHVV WKH QHWZRUN FKHFN WKH IROORZLQJ %H VXUH WKH DFFHVV SRLQW DQG WKH ZLUHOHVV FOLHQWV DUH FRQILJXUHG ZLWK WKH VDPH 6HUYLFH 6HW ,' 66,' ,I DXWKHQWLFDWLRQ RU HQFU\SWLRQ DUH HQDEOHG HQVXUH WKDW WKH ZLUHOHVV FOLHQWV DUH SURSHUO\ FRQILJXUHG ZLWK WKH DSSURSULDWH DXWKHQWLFDWLRQ RU HQFU\SWLRQ NH\V ,I DXWKHQWLFDWLRQ LV EHLQJ SHUIRUPHG WKURXJK D 5$',86 VHUYHU HQVXUH WKDW
PAGE 284
$ ! ,I \RX FDQQRW DFFHVV WKH RQ ERDUG FRQILJXUDWLRQ SURJUDP YLD D VHULDO SRUW FRQQHFWLRQ %H VXUH \RX KDYH VHW WKH WHUPLQDO HPXODWRU SURJUDP WR 97 FRPSDWLEOH GDWD ELWV VWRS ELW QR SDULW\ DQG ESV &KHFN WKDW WKH QXOO PRGHP VHULDO FDEOH FRQIRUPV WR WKH SLQ RXW FRQQHFWLRQV SURYLGHG RQ SDJH % ,I \RX IRUJRW RU ORVW WKH SDVVZRUG 6HW WKH DFFHVV SRLQW WR LWV GHIDXOW FRQILJXUDWLRQ E\ SUHVVLQJ WKH UHVHW EXWWRQ RQ WKH EDFN SDQHO IRU VHFRQGV RU PRUH 7KHQ XVH WKH GHI
PAGE 285
Appendix B: Cables and Pinouts Twisted-Pair Cable Assignments )RU %$6( 7; FRQQHFWLRQV D WZLVWHG SDLU FDEOH PXVW KDYH WZR SDLUV RI ZLUHV (DFK ZLUH SDLU LV LGHQWLILHG E\ WZR GLIIHUHQW FRORUV )RU H[DPSOH RQH ZLUH PLJKW EH JUHHQ DQG WKH RWKHU JUHHQ ZLWK ZKLWH VWULSHV $OVR DQ 5- FRQQHFWRU PXVW EH DWWDFKHG WR ERWK HQGV RI WKH FDEOH &DXWLRQ (DFK ZLUH SDLU PXVW EH DWWDFKHG WR WKH 5- FRQQHFWRUV LQ D VSHFLILF RULHQWDWLRQ 6HH ³6WUDLJKW 7KURXJK :LULQJ´ RQ SDJH % DQG ³&URVVRYHU :LULQJ´ RQ
PAGE 286
% " 7DEOH % %$6( 7; 0', 3RUW 3LQRXWV 3LQ 0', 6LJQDO 1DPH ! ) :!)T; ! ) :!) ; ' ) :')T; <6) :" 4 ; <6) :" 4 ; ' ) :') ; + -4 & :6 4 ; - -4 & :6 4 ; 1RWH ! UTV U V & % & / 6WUDLJKW 7KURXJK :LULQJ %HFDXVH WKH 0ESV SRUW RQ WKH DFFHVV SRLQW XVHV DQ 0',
PAGE 287
" " ( % &URVVRYHU :LULQJ %HFDXVH WKH 0ESV SRUW RQ WKH DFFHVV SRLQW XVHV DQ 0', SLQ FRQILJXUDWLRQ \RX PXVW XVH ³FURVVRYHU´ FDEOH IRU QHWZRUN FRQQHFWLRQV WR 3&V VHUYHUV RU RWKHU HQG QRGHV WKDW RQO\ KDYH 0', SRUWV +RZHYHU LI WKH GHYLFH WR ZKLFK \RX DUH FRQQHFWLQJ VXSSRUWV DXWR 0',; RSHUDWLRQ \RX FDQ XVH HLWKHU ³VWUDLJKW WKURXJK´ RU ³FURVVRYHU´ FDEOH EIA/TIA 568B RJ-45 Wiring Standard 10/100BASE-TX Crossover Cable White/Orange Stripe Orange End A White/Green Stripe 1 2
PAGE 288
% " :LULQJ 0DS IRU 6HULDO &DEOH 7DEOH % :LULQJ 0DS IRU 6HULDO &DEOH '% 0DOH $3 &RQVROH '% 0DOH 3& '7( 3LQ )XQFWLRQ 3LQ )XQFWLRQ <6) : ; <6) : ; * * '0) : ; !0) : ; !0) : ; '0) : ; * * * 9 * + '! : C ; - ! : ; - ! : ; + '! : C ; * 9 * 1RWHF !
PAGE 289
Appendix C: Specifications General Specifications 0D[LPXP &KDQQHOV D 86 &DQDGD QRUPDO PRGH WXUER PRGH -DSDQ QRUPDO PRGH WXUER PRGH (76, FKDQQHOV QRUPDO PRGH WXUER PRGH 7DLZDQ QRUPDO PRGH WXUER PRGH E J )&& ,& (76, )UDQFH 0..
PAGE 290
& 2SHUDWLQJ )UHTXHQF\ D a *+] ORZHU EDQG 86 &DQDGD -DSDQ a *+] PLGGOH EDQG 86 &DQDGD a *+] XSSHU EDQG 86 &DQDGD a *+] (XURSH a *+] PLGGOH EDQG 7DLZDQ a *+] KLJK EDQG 7DLZDQ E a *+] 86 &DQDGD (76, a *+] -DSDQ a *+] 7DLZDQ $& 3RZHU $GDSWHU ,QSXW $& +] 2XWSXW 9'& $ 3RZHU FRQVXPSWLRQ ZDWWV 8QLW 3RZHU 6XSSO\ '& ,QSXW 9'& $ PD[LPXP 3R( L
PAGE 291
< & &RPSOLDQFHV )&& &ODVV % 86 ,&(6 &DQDGD 577(' (& 9&&, -DSDQ 5&5 67' $ 5DGLR 6LJQDO &HUWLILFDWLRQ )&& 3DUW & *+] )&& SDUW ( *+] 566 &DQDGD (1 (1 (1 (1 037 5&5 VWG ' a &KDQQHO 7 &KDQQHO 6DIHW\ F&6$XV &6$ 1R 8/ (1 7h9 *6 ,(& &% 6WDQGDUGV ,((( %$6( 7 ,((( X %$6( 7; ,((( D E J
PAGE 292
& Sensitivity ,((( D 6HQVLWLYLW\ *+] G%P 0RGXODWLRQ 5DWHV @" B : 1 ; -- -- -- -- @" B :9 1 ; -+ -+ -+ -+ A" B : 1 ; - - - - A" B : - 1 ; - - - - A(1 : 1 ; - - - - A(1 : 1 ; -. +9 +- +- A(1 : - 1 ; + + + + A(1: 1 ; +. +. 9 + ,((( J 'DWD 5DWH 6HQVLWLYLW\ G%P 1 -- 9 1 -+ 1 -
PAGE 293
! " & & Transmit Power ,((( D 0D[LPXP 2XWSXW 3RZHU *+] G%P 'DWD 5DWH 1 + + + + 9 1 + + + + 1 + + + + - 1 + + + + 1 + + + + 1 + + + + - 1 + + + + 1 + + ,((( J 0D[LPXP 2XWSXW 3RZHU *+] G%P 'DWD 5DWH a 1 . . - 9 1 . . - 1 . . - - 1 . .
PAGE 294
& 2SHUDWLQJ 5DQJH ,PSRUWDQW 1RWLFH 7KH RSHUDWLQJ UDQJH GLVWDQFHV OLVWHG LQ WKH IROORZLQJ WDEOHV DUH IRU W\SLFDO HQYLURQPHQWV RQO\ 2SHUDWLQJ UDQJHV FDQ YDU\ FRQVLGHUDEO\ GHSHQGLQJ RQ IDFWRUV VXFK DV ORFDO LQWHUIHUHQFH DQG EDUULHU FRPSRVLWLRQ ,W LV UHFRPPHQGHG WR GR D VLWH VXUYH\ WR GHWHUPLQH WKH PD[LPXP UDQJHV IRU VSHFLILF DFFHVV SRLQW ORFDWLRQV LQ \RXU HQYLURQPHQW 7DEOH & D :LUHOHVV 'LVWDQFH 7DEOH 6SHHG DQG 'LVWDQFH 5DQJHV 3 .
PAGE 295
Glossary 10BASE-T ,((( VSHFLILFDWLRQ IRU 0ESV (WKHUQHW RYHU WZR SDLUV RI &DWHJRU\ RU EHWWHU 873 FDEOH 100BASE-TX !"# $ Access Point % & ' ($ ' ' &) ( $ $ ' ' $ & % ( $ $ ' $$ $ Ad Hoc % ( ' ' ' $
PAGE 296
< Broadcast Key 1 ' & 2 ' ( & 3 ( ' & ' $$ ' ( & ' ' $$ ' $$ & /( ( $ $ $ CSMA/CA * $ $ % $$ % ' Dynamic Host Configuration Protocol (DHCP) # ' ( & ( " #4 # & 35 # ' 1 # $ 6177"#8) '' $
PAGE 297
< IEEE 802.11b % $ ' ' 3 * - * ' * ) ' $ (( ? 05= ' ( 63***8 " ' ' ' ' ) ) IEEE 802.11g % $ ' ' $ (( ? 05= ' 7 $ - 3 $ $ 9 67 3 8 " ' ' ' ' >) @) ) ) ) ?) >) ? ) ? $ & ' ( $ IEEE 802.
PAGE 298
< Power over Ethernet (PoE) % ' ' ' $ / & ' $ $ # ' $ 9 $ $ C ' & ' ) ' $ ' ' $$ RADIUS % $ $ & $ $ Roaming % $ A%B ( $ ( ' ** ' (
PAGE 299
< Temporal Key Integrity Protocol (TKIP) % ' ( ' ' ' $ ( , # "+ # ' $ ( , # & ' ( $$ ' & Trivial File Transfer Protocol (TFTP) % " #4 # $ (( $ ' ' $ ' Virtual Access Point (VAP) F $ %# $ ( $ $ ( % # : $ $ ' , F $ %# $ ) ,A%B ' C
PAGE 300
< 0$ />
PAGE 301
Index Numerics 802.
PAGE 302
= filter 6-17, 7-71 address 6-12, 7-71 between wireless clients 7-75 local bridge 7-75 local or remote 6-12, 7-73 management access 6-18, 7-75 protocol types 6-18, 7-76 VLANs 6-52, 7-134 firmware displaying version 6-31, 7-25 upgrading 6-30, 6-32, 7-57 fragmentation 7-106 G gateway address 5-2, 6-6, 7-1, 7-91 H hardware version, displaying 7-25 HTTP, secure server 7-20 HTTPS 7-19 I IAPP 7-133 IEEE 802.
PAGE 303
= PoE 1-5 specifications C-2 port priority STA 7-87 power connection 2-1 Power over Ethernet See PoE power supply, specifications C-2 PSK 6-79 R radio channel 802.11a interface 7-100 802.
PAGE 304
= V VLAN configuration 6-52, 7-134 native ID 6-52 W WEP 6-74 configuring 6-74 shared key 6-75, 7-123 ' 9/? Wi-Fi Multimedia See WMM Wi-Fi Protected Access See WPA Wired Equivalent Protection See WEP WPA 6-79 pre-shared key 6-82, 7-127 WPA, pre-shared key See PSK
PAGE 305
PAGE 306
BAP120 >/ +/: ?@