User Guide

ManualsBrandsNETGEAR ManualsOtherWFS709TP-100NAS

Table Of Contents

WFS709TP ProSafe Smart Wireless Switch Software Administration Manual
Contents
About This Manual
- Conventions, Formats, and Scope
- How to Use This Manual
- How to Print this Manual
- Revision History
Chapter 1 Overview of the WFS709TP
- WFS709TP System Components
- Basic WLAN Configuration
- Wireless Client Access to the WLAN
- Configuring and Managing the WFS709TP
  - Tools
Chapter 2 Deploying a Basic WFS709TP System
- Configuration Overview
- Configuring the WFS709TP
- Deploying APs
- Additional Configuration
Chapter 3 Configuring Network Parameters
- Configuring VLANs
  - Assigning a Static Address to a VLAN
  - Configuring a VLAN to Receive a Dynamic Address
- Configuring Static Routes
- Configuring the Loopback IP Address
Chapter 4 RF Plan
- RF Plan Overview
- Before You Begin
  - Task Overview
  - Planning Requirements
- Using RF Plan
- RF Plan Example
Chapter 5 Configuring WLANS
- Before You Begin
  - Determine the Authentication Method
  - Determine the Default VLAN
- Basic WLAN Configuration in the Browser Interface
  - Example Configuration
- Advanced WLAN Configuration in the Browser Interface
- IntelliFi RF Management
Chapter 6 Configuring AAA Servers
- Configuring an External RADIUS Server
- Adding Users to the Internal Database
- Configuring Authentication Timers
Chapter 7 Configuring 802.1x Authentication
- 802.1x Authentication
  - Authentication with a RADIUS Server
  - Authentication Terminated on WFS709TP
- Configuring 802.1x Authentication
  - 802.1x Authentication Page
- Advanced Configuration Options for 802.1x
Chapter 8 Configuring the Captive Portal
- Overview of Captive Portal Functions
- Configuring Captive Portal
- Configuring Advanced Captive Portal Options
- Configuring the AAA Server for Captive Portal
  - Changing the Protocol to HTTP
- Personalizing the Captive Portal Page
Chapter 9 Configuring MAC-Based Authentication
- Configuring the WFS709TP
- Configuring Users
Chapter 10 Adding Local WFS709TPs
- Moving to a Multi-Switch Environment
- Configuring Local WFS709TPs
Chapter 11 Configuring Redundancy
- Virtual Router Redundancy Protocol
- Redundancy Configuration
Chapter 12 Configuring Wireless Intrusion Protection
- Rogue/Interfering AP Detection
- Misconfigured AP Detection
  - Configuring Misconfigured AP Protection
Chapter 13 Configuring Management Utilities
- Configuring Management Users
- Configuring SNMP
- Creating Guest Accounts
- Managing Files on the WFS709TP
- Installing a Server Certificate
Chapter 14 Configuring WFS709TP for Voice
- Voice over IP Proxy ARP
- Battery Boost
- Limiting the Number of Active Voice Calls
- WPA Fast Handover
Appendix A Configuring DHCP with Vendor-Specific Options
- Overview
- Windows-Based DHCP Servers
  - Configuring Option 60
  - Configuring Option 43
- Linux DHCP Servers
Appendix B Windows Client Example Configuration for 802.1x
- Window XP Wireless Client Example Configuration
Appendix C Internal Captive Portal
- Creating a New Internal Web Page
  - Basic HTML Example
- Installing a New Captive Portal Page
- Displaying Authentication Error Message
- Language Customization
- Customizing the Welcome Page
- Customizing the Pop-Up Box
- Customizing the Logged Out Box
Appendix D Related Documents
Index

WFS709TP ProSafe Smart Wireless Switch Software Administration Manual

Overview of the WFS709TP 1-5

v1.0, June 2007

You can also enable WFS709TPs to detect coverage holes, or areas where a good RF signal is not

adequately reaching wireless clients.

RF Monitoring

An AP can function as either a dedicated or shared Air Monitor (AM) to monitor the RF spectrum

to detect intrusions, denial of service (DoS) attacks, and other vulnerabilities. A dedicated AM

performs monitoring functions exclusively and does not service wireless clients or advertise

SSIDs. A shared AM performs monitoring functions in addition to servicing wireless clients.

Every AP automatically monitors the channel on which it services wireless clients. You can

configure the AP to perform off-channel scanning, where the AP spends brief time intervals

scanning other channels. However, the more clients an AP services, the less time it has to perform

off-channel scanning. If air monitoring functions are critical to your network, designate a few APs

as dedicated AMs.

You can configure dedicated AMs to perform the following functions:

• Detect, locate, and disable rogue APs (APs that are not authorized or sanctioned by network

administrators)

• Detect and disable ad-hoc networks

• Detect and disable honeypot APs

• Detect wireless bridges

• Capture remote packets

If you only need air monitoring functions periodically, you can configure APs to operate

temporarily as AMs. You can also configure dedicated AMs to automatically convert into APs if

an AP failure occurs or when there is a high level of traffic on the network.

WFS709TP ProSafe Switches

All APs are connected either directly or remotely through an IP network to the WFS709TP

ProSafe Smart Wireless Switch. The WFS709TP is an enterprise-class switch that bridges wireless

client traffic to and from traditional wired networks and performs high-speed Layer 2 or Layer 3

packet forwarding between Ethernet ports. While APs provide radio services only, the WFS709TP

performs upper-layer media access control (MAC) processing, such as encryption and

authentication, as well as centralized configuration and management of SSIDs and RF

characteristics for the APs. This allows you to deploy APs with little or no physical change to an

existing wired infrastructure.