Nortel WLAN - Security Switch 2300 Series Quick Start Guide Nortel WLAN—Security Switch 2300 Series Document number: NN47250-300 Document status: Standard Document version: 02.
Copyright © 2007 Nortel Networks. All rights reserved. The information in this document is subject to change without notice. The statements, configurations, technical data, and recommendations in this document are believed to be accurate and reliable, but are presented without express or implied warranty. Users must take full responsibility for their applications of any products specified in this document. The information in this document is proprietary to Nortel Networks.
Attention: Ceci est un produit de Classe A. Dans un environnement domestique, ce produit risque de créer des interférences radioélectriques, il appartiendra alors à l’utilisateur de prendre les mesures spécifiques appropriées. EN 55024 statement This is to certify that the Nortel WLAN Security Switch 2300 Series switches are shielded against the susceptibility to radio interference in accordance with the application of Council Directive 89/336/EEC.
National Safety Statements of Compliance EN 60950 statement This is to certify that the Nortel WLAN Security Switch 2300 Series switches are in compliance with the requirements of EN 60950 in accordance with the Low Voltage Directive. Additional national differences for all European Union countries have been evaluated for compliance.
Importador: Nortel Networks de México, S.A. de C.V. Avenida Insurgentes Sur #1605 Piso 30, Oficina Col. San Jose Insurgentes Deleg-Benito Juarez México D.F.
NN47250-300 (320655-E Version 02.
Contents This document contains the following information: • Introduction (page 9) — Audience (page 9) — How to get help (page 9) — Precautions (page 10) • Preventing electrostatic damage in new cable installations (page 11) — Planning a WLAN installation (page 13) — Gathering required information (page 14) — Preventing electrostatic discharge damage (page 10) • Quick Start — Physical Installation (page 15) — Installing the Nortel WLAN Security Switch (page 15) — Installing a new power supply (page
NN47250-300 (320655-E Version 02.
Introduction This Quickstart Guide provides basic instructions on how to install the hardware and perform basic configuration of a Nortel WLAN Security Switch (WSS). Audience The Quickstart Guide is intended for experienced installers. How to get help This section explains how to get help for Nortel products and services. Finding the latest updates on the Nortel web site The content of this documentation was current at the time the product was released.
Precautions WARNING Installation must be performed by qualified service personnel only. Read and follow all warning notices and instructions marked on the product or included in the documentation. Before installing the product, read Translated caution statements, warning conventions and warning messages (page 36). Protecting cables and connectors • Support cables in order to prevent any stress on the connectors.
Preventing electrostatic damage in new cable installations With new cable installations, Nortel recommends to use ESD discharge cable to reduce the potential for damage from static that can build up in cables. An example of such a cable is illustrated below. Figure 1: ESD Cable example Step - Action 1 Connect the ground lug on the ESD discharge cable to a safe and suitable earth ground.
NN47250-300 (320655-E Version 02.
Before you begin Before installing and configuring the WSS, the following basic planning steps must be completed. Planning a WLAN installation The WLAN Management Software (WMS) can only be installed on a single computer. You must decide which computer will be used to manage the WSS, and ensure that computer is accessible during the installation and configuration process. The WMS installation CD is distributed with a license certificate to specify the serial number and Nortel Support email address.
Gathering required information Before installing or configuring the WSS, print a copy of this page and ensure that all value fields in Table 1 have been filled in correctly. Keep this information close by during the configuration process. Table 1: Required information Information Description Computer name Each WMS license is limited to a single computer. WMS serial number The WMS serial number and instructions for obtaining a license key are included on a sheet of paper inside the WSS box.
Quick Start — Physical Installation This section describes how to physically install a WSS. For more information about physical installation, see Nortel WLAN—Security Switch 2300 Series Installation and Basic Configuration Guide. Installing the Nortel WLAN Security Switch Estimated timing: 10 minutes A WSS can be installed on either a tabletop surface or in an equipment rack. Table 2 outlines which installation methods are available for each WSS model.
Figure 2: 2380 Installation—Center-Mount Equipment Rack First, attach brackets to chassis. nsole Co Rst le nso Co 840-9502-0057 Rst Then, install chassis into rack. 3 Reinsert the screws to secure the brackets to the WSS. 4 Repeat for the other bracket. CAUTION Nortel recommends that you ask someone to assist you with the remaining steps. If you accidentally drop the WSS, you can be injured and the switch can be damaged. 5 Lift the WSS into position in the equipment rack.
Installing a new power supply Estimated timing: 5 minutes Some WSS models support secondary power supplies. To install a secondary power supply, complete the following steps: Step Action 1 Loosen the thumbscrew in an unused slot with a #2 Phillips-head screwdriver, and remove the cover plate. 2 Remove the new power supply from its packaging and lift the supply by grasping the front handle with one hand and supporting the supply from the bottom with the other hand.
Powering on a 2360/2361 Step ActionStep 1 Attach the approved AC power cord to each Power port on the 2360 or 2361 (2 power ports). 2 Plug the power cord (s) into the AC power source (s). The 2360 or 2361 begins booting as soon as you plug in the power cord(s). 3 On the 2360 ensure that the power supply LED turns green to verify that the power supply is operating normally. On the 2361 observe each power supply. LED to verify that both power supplies are operating normally.
Connecting to a Serial Management Console Estimated timing: 5 minutes Step Action 1 Insert the serial cable into the PC port. 2 Insert the other end of the cable into the serial console port on the WSS. 3 Start a standard VT100 terminal emulation application on the PC, and configure the modem settings listed in Table 3.
• If connecting the AP to an ethernet device other than the WSS, observe the appearance of the AP LED for the port. Table 4 describes the AP LED appearance and associated meaning. Table 4: AP LED indicator status AP LED Appearance Meaning Solid green For an AP active link, with PoE enabled, the following are true: • AP has booted. AP has received a valid configuration from the WSS. • Management link with an AP is operational. • For an AP’s secondary link, the link is present.
3 Observe the appearance of the Link LED for the port to determine link status. Table 5 describes the LED appearance, and what each appearance means. If the Link LED is unlit, check the cable connection and verify that the device at the other end of the link is operating. Table 5: Link LED indicator status Link LED Appearance Meaning Solid green 100-Mbps link is operational. Solid amber 10-Mbps link is operational. Blinking green Traffic is active on the 100-Mbps link.
Connecting to copper gigabit devices (WSS 2380 and WSS 2382 only) Complete the following procedure to install a GBIC. Step Action 1 Insert a Cat-5 cable with a standard RJ-45 connector into the port’s copper interface. The Cat-5 cable can use straight-through or crossover signaling. 2 Access the WSS CLI using the serial console port, as described in “Powering on a 2380” on page 18. 3 Enter enable to access the configuration level of the CLI.
Quick Start — Basic Configuration This section describes how to configure the WSS. For additional information about configuring your WSS, see the following documents: Nortel WLAN—Security Switch 2300 Series Installation and Basic Configuration Guide Nortel WLAN Security Switch 2300 Series Configuration Guide. WSS startup algorithm Figure 4 shows how the WSS Startup Algorithm process is followed when a WSS is powered on.
WSS sample network configuration Figure 5 shows a sample network configuration using a WSS and two APs.
Creating a scope on the DHCP server Estimated timing: 10 minutes If required, create a scope on the DHCP server that will lease addresses to the AP and the mobiles, as shown in Figure 6. Figure 6: Creating a DHCP scope No special scope options need to be configured when the WSS is deployed in layer 2 environments, as the AP will find the WSS automatically using broadcast.
Figure 7: Adding option 43 to the DHCP scope You can use an IP address list or a hostname list, but not both. If the list contains both types of values, the AP does not attempt to use the list. Note: Be sure to removed the default leading period before entering an ASCII IP address. The DHCP configuration will not work correctly if this period remains in front of the IP address.
3 Enter quickstart to access the quickstart wizard. The quickstart wizard asks a series of questions, as shown in Figure 8 on page 27. You can enter ? at any time for more help, or press Ctrl+C to quit. Note: When the script asks: “Do you wish to configure wireless?”, enter n to skip this process. Wireless configuration will be completed using WMS. 4 Enter save config to save the updated configuration file. 5 Reboot the WSS.
Installing and using WMS Estimated timing: 15 minutes WLAN Management Software (WMS) allows users to view and manage WSS configuration settings from a remote computer. The installation files for WMS are available from two sources: • The software CD included with the WSS. • The Nortel web site (see “Finding the latest updates on the Nortel web site” on page 9) Installing WMS To install the WMS, complete the following steps: Step Action 1 Locate the WMS installation file.
13 Click Done. End Opening WMS To open a new installation of WMS for the first time, complete the following steps: Step Action 1 Double-click the WMS icon on your desktop. The License Information dialog appears, asking for the Serial Number and License key. See “Gathering required information” on page 14 for more information about these fields. 2 Specify the WMS serial number and license key. 3 Click OK.
7 Click Accept to open the WMS. Figure 9 shows the WMS configuration screen. End Figure 9: WMS configuration screen Configuring WMS users Step Action 1 Select Tools > WMS Services Setup from the menu. The WMS Services Setup dialog box appears. 2 Make the following changes: • Under Access Control, deselect the Allow all users option. You are automatically prompted to create the Administrator user. Specify and confirm a password, and click OK to continue.
Configuring WSS using WMS Estimated timing: 15 minutes With WMS installed and configured, it is time to finish the required WSS configuration. Creating a new network plan Begin by creating a new network plan using the following steps: Step Action 1 Double-click the WMS icon on your desktop to open WMS. The WMS Services Connection dialog box appears, requesting a username and password.
5 Click Next. The Verification Progress dialog box appears. Note: SNMP is not enabled by default, and the Enable password has not been set in the WSS. Ignore the errors these settings generate during the verification process for now. 6 Click Finish. The WSS is now imported into WMS under the selected plan name. This finishes the initial configuration of WMS. End Creating a Service Profile With the base setup in place, you are now ready to start provisioning.
Add the last resort user To add the last resort user to the local AAA user database, complete the following steps: Step Action 1 Select WSS_model > AAA > Local User Database from the navigation tree. 2 Click Create > User from the smart menu. The User Information screen appears. 3 Specify the user settings, as described in Table 9. Table 9: User Information fields Field Description Name Specifies the username.
• For a distributed AP, the AP Identifier screen appears. Complete the AP Identifier fields, as described in Table 10. Table 10: AP Identifier fields Field Description Name Specifies a unique name for the AP. AP Number Specifies the unique key for the AP. Serial Number Specifies the serial number of the AP. The serial number and fingerprint of an AP are printed on the bottom of the Access Point. Fingerprint Specifies the fingerprint of the AP.
2 Click WSS_model Changes > Deploy from the smart menu. The Deploy Configurations screen appears, and configuration changes are automatically applies to the WSS. Note: To view the list of pending changes, select Review from the smart menu before deploying the configuration. 3 Click Close. End Test the solution Estimated timing: 10 minutes Use a wireless NIC card to see if you can obtain an IP address and reach the Internet.
Translated caution statements, warning conventions and warning messages Not all of these warnings apply to every Nortel product. The warnings that apply to a specific product appear in the installation guide for that product. The installation guides containing these warnings are located on the documentation CD. Caution statements Caution! This device is a Class A product.
Lithium Battery Caution The Nortel Wireless Security Switches contain a lithium battery. If you need to replace the battery, make sure you dispose of the battery properly according to local regulations and replace the battery only with another comparable lithium battery. Caution! Risk of explosion if battery is replaced by an incorrect type. Dispose of used batteries according to the instructions. Attention! Risque d'explosion si la batterie est remplacée par un type de batterie incorrect.
Radio safety advisories for Access Points Caution! The AP-2330/2330A/2330B and Series 2332 radios are disabled by default and can be enabled only by a system administrator using the WSS. Attention! Les communications radios du AP-2330/2330A/2330B and Series 2332 sont désactivées par défaut et peuvent être activées uniquement par un administrateur système utilisant le WSS.
Warning conventions Warning! This situation or condition can cause injury. Avertissement! Cette situation ou condition peut entraîner un risque de blessure. Warnung! Diese Situation oder dieser Umstand kann zu Verletzungen führen. Advertencia! Esta situación o condición puede causar lesiones. Aviso! Esta situação ou condição pode causar ferimentos. Avviso! Situazione o condizione che può causare ferite. Warning! High voltage. This situation or condition can cause injury due to electric shock.
Qualified service personnel warning Warning! Only qualified service personnel must perform installation. Read and follow all warning notices and instructions marked on the product or included in the documentation. Avertissement! L'installation doit être effectuée exclusivement par un personnel qualifié. Lisez et conformez-vous à tous les avis et instructions d'avertissement indiqués sur le produit ou dans la documentation. Warnung! Nur qualifiziertes Wartungspersonal darf die Installation vornehmen.
Laser warning Warning! The gigabit Ethernet fiber-optic interfaces use Class 1 lasers. To reduce the risk of eye injury, do not stare into the interface or otherwise direct the laser beam into your eye. 8769EB Avertissement! Les interfaces des fibres optiques Ethernet gigabit utilisent des produits laser de classe 1. Pour réduire le risque de blessure oculaire, ne regardez pas fixement l'interface ou ne dirigez pas le rayon laser dans votre œil.
Earth ground warning Warning! Earth grounding is required for a WSS installed in a rack. If you are relying on the rack to provide ground, the rack itself must be grounded with a ground strap to the earth ground. Metal screws attaching the switch to the rack provide ground attachment to the rack. Avertissement! La mise à la terre est requise pour l'installation du WSS dans un support.
Overcurrent warning Warning! The WSS relies on the building’s installation for overcurrent protection. Ensure that a fuse or circuit breaker no larger than 120 VAC, 15A U.S. (240 VAC, 10 A international) is used on the phase conductors. Avertissement! Ce WSS repose sur les installations de protection contre la surtension du bâtiment. Assurez-vous de ne pas utiliser un fusible ou un disjoncteur de plus de 120 Vca, 15 A U.S.
Nortel WLAN - Security Switch 2300 Series Quick Start Guide Nortel WLAN—Security Switch 2300 Series Release 6.0 Document Number: NN47250-300 Document Status: Standard Document Version: 02.01 Part Code: 320655-E Release Date: October 2007 Copyright © Nortel Networks Limited 2007 Alll Rights Reserved The information in this document is subject to change without notice.