User Manual

6. CSE-200 Configurator
WPA2-Enterprise re lies on a server (using RADIUS) to authenticate e ach individual client on the network. To do this, authe ntication
802.1x is us ed (also known as po rt-based Network Access Control). 802.1x encapsulates the Extensible Authentication P rotocol
(EAP) for use on local area networks. This is also known as “EAP ove r LAN” or EAPoL. Using RA DIUS, these EAPoL m essages
are routed through the network in order to authenticate the client device on the network – whic h, in the case of ClickShare, are the
Buttons.
The 802.11i (WPA2) standard defines a n umber of required EAP methods. However, not all of them are used ex tensively in the field,
and so me o ther ones (which ar e not in the standard) are used much more often. Therefore, we have selected the most widely used
EAP m ethods. The list of EA P methods supported in the ClickShare system is:
•EAP-TLS
•PEAP
•EAP-TTLS
Considerations
When you choo se to integrate the ClickShare system into your corporate network, there are a few things to consider up front. First
of all, make s ure that all y our Base Units c an be connected to yo ur network via the wired Ethernet interface. Also, take into account
the amount of bandwidth that each B utton needs to stream the captured screen content to the Bas e Unit – this is usually somewhe re
between 5 and 15 M bps. S o, prevent bottlenecks in your network (e.g. 100 Mbps switches) that could potentially degrade your
ClickShare experience due to a lack of bandwidth.
Prerequisites
Before rolling out C lickS hare Net wo rk Integration, mak e sure your infrastructure meets
the following prerequisites.
Network
Once you enable t he corporate network, the internal Wi-Fi ac cess point of the ClickShare Base Unit is disabled. Make sure your
Base Unit is connected to the corporate network via its wired Ethernet interface.
Firewall
To ensure that you can suc cessfully share c ontent via the ClickShare
Button, or from m obile devices, to the Base Unit, m ake sure
the ports mentioned in "Ports used by the ClickShare B ase Unit", page 11are open on your network:
VLAN
A lot of corporate networks are divided into multiple VLANs – for example, to separate BYOD (Bring Your O wn Device ) trafficfromthe
“core” corporate network. Take this into con sideration when integrating ClickShare into your network. C lickShare B uttons connecting
to your wireless infrastructure should be able to connect to the Base Units. Furthermore, if y ou want to use the m obile apps, these
should also be able to reach the Base Units. It is advisable to put all ClickShare Units into a separate VLAN so they are easily
manageable.
DNS
For the Buttons to be able to stream their c ontent to the B ase Unit, they must be able to resolve the Bas e Unit’s hostname w ithin
the ne twork. If no DNS is available Buttons will fall back to the IP of the Base Unit at the moment of USB pairing. Be cause o f this
we strongly advise to reserve IP addresses in you
r DHCP server for each Base Unit to prevent issues when the hostname is not
resolva ble.
NTP
When using EA P-TLS , you m ust also configure NT P on the Bas e U nit. This can be done via the B ase Unit WebUI. The Base U nit
must have the correct time to handle the certificates required for EAP -TLS. Preferably, you should use an NTP server with high
availability on the local corporate network. Be adv ised that, when using an N TP server on the internet, the Base Unit c annot c onnect
throug h a proxy server.
Advice
To ch eck if a button could reach the Base Unit please connect a PC in the sam e way a Button would connect (same user name,
pw, certificates) and ping the Base Unit’s hostnam e, you c an find the hostname in the B ased Units Configurator. If the ping fails try
pinging the IP adjus t your network setup so pinging the hostname is successful.
We strongly ad vise to reserve IP addresses in your DHCP server for each Base Unit to prevent issues when the hostname is not
resolva ble.
Start up
Due to the complexity of the ClickShare N etwork Integration feature, y ou m ust activate it first. To activate, go to the Network inte-
gration and click Change configuration button.
The Corporate Network Integration feature is provided “AS IS”, without any liability or obligation of or on be-
half of Barco . Barco cannot guarantee that the feature w orks in your corpo rate network. The reliability, q uality
and stability when sharing using the Corporate Network Integration depends on yo ur network infrastructure.
R5900023 CLICKSHARE CSE-200 24/05/2017 43