User's Manual
SS‐300‐AT‐C‐60InstallationGuide
Chapter4 InstallingSS‐300‐AT‐C60
WhentheSS‐300‐AT‐C‐60functionsasaWIPSsensor,itmonitorsyournetworkandcommunicateswiththeServertoguard
yourcorporatenetworkagainstover‐the‐airattacks.
WhentheSS‐300‐AT‐C‐60functionsasanaccesspoint(AP),clientscanconnecttoyourcorporatenetworkin
wirelessmode
throughtheAPs.
TheSS‐300‐AT‐C‐60mustbepluggedtoyourcorporatenetworktoperformtheaboveoperations.
AsaWIPSsensor,SS‐300‐AT‐C‐60canbeconfiguredinoneofthefollowingtwomodes:
• SensorMode:Thisisthedefaultmode.In
thismode,theSensorshouldbeconnectedintoatrunkport(802.1Q
capable)onaswitch.ItthenmonitorsmultipleVLANsthatar e configuredonthattrunkportandarechosenbythe
userusingtheNDCLI.ThewirelessinterfaceoftheSensorisenabled.Similarly,aSS‐300‐
AT‐C‐60canmonitorupto
16VLANs.
• NetworkDetector(ND)Mode:Thismodeneedstobeexplicitlyconfigured.Inthismode,theNDshouldbe
connectedintoatrunkport(802.1Qcapable)onaswitch.ItthenmonitorsmultipleVLANsthatareconfiguredon
thattrunkportand
arechosenbytheuserusingtheNDCLI.ThewirelessinterfaceoftheNDisdisabled.ASS‐300‐
AT‐C‐60canmonitorupto100VLANs.
Important:TopreventabuseandintrusionbyNon‐authorizedpersonnel,itisextremelyimportanttoinstalltheSensorsuchthatitis
difficulttounplugthedevicefromthenetworkorfromthepoweroutlet.
4.1 ZeroConfigurationofSS‐300‐AT‐C‐60asSensor
Zeroconfigurationissupportedifthefollowingconditionsaresatisfied:
• Thedeviceisin‘Sensor’mode.
• ADNSentry‘wifi‐security‐server’issetuponallDNSServers.ThisentryshouldpointtotheIPaddressoftheServer.
Bydefault,thedevicelooksfortheServerDNSentry
‘wifi‐security‐server’.
SensorisplacedonasubnetthatisDHCPenabled.
Important:IfaSensorisplacedonanetworksegmentthatisseparatedfr omtheServerbyafirewall,youmustfirstopenport3851for
UserDatagramProtocol(UDP)andTransportControlProtocol(TCP)bidirectionaltrafficonthatfirewall.Thisportnumberisassigned
toAirTight
®
Networks.IfmultipleSensorsaresetuptoconnecttomultipleServers,zeroconfigurationisnotpossible.Inthiscasemanual
configurationofSensorsisneede d.RefertoManuallyConfiguringtheSensor
fordetails.
ThestepstoinstalltheSensorwithnoconfiguration(zeroconfiguration)areasfollows.
•
MounttheSensor
• PoweruptheSensor
• ConnecttheSensortothenetwork
4.2 ConnectingSS‐300‐AT‐C‐60
ThisinvolvesmountingtheSensor/APCombo,poweringitup,andconnectingittothenetwork.
4.2.1 MountSS‐300‐AT‐C ‐60
TakeaconfiguredSS‐300‐AT‐C‐60,thatis,makesurethatthedeviceisgivenastaticIPorthesettingshavebeenchangedfor
DHCP.NotetheMACaddressandtheIPaddressofthedeviceinasafeplacebeforeitisinstalledinahard‐to
‐reachlocation.
TheMACaddressofthedeviceisprintedonalabelatthebottomoftheproduct.
Recommended:YoushouldlabelthedevicesusingMACaddressesoratleastyourownconvention.Forexample,useserialnumbe rs,so
thatyoucaneasilyidentifythedevices.
4.2.1. 1 Ceilin gMounting
UsethemountingbrackettoinstalltheSS‐300‐AT‐C‐60ontheceiling.
Tomountthedevice: