ProSAFE Wireless Controller WC7600 Reference Manual June, 2014 202-11414-01 350 East Plumeria Drive San Jose, CA 95134 USA
ProSAFE Wireless Controller WC7600 Support Thank you for selecting NETGEAR products. After installing your device, locate the serial number on the label of your product and use it to register your product at https://my.netgear.com. You must register your product before you can use NETGEAR telephone support. NETGEAR recommends registering your product through the NETGEAR website. For product updates and web support, visit http://support.netgear.com. Phone (US & Canada only): 1-888-NETGEAR.
ProSAFE Wireless Controller WC7600 Chapter 1 Introduction Key Features and Capabilities . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10 Package Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12 Hardware Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12 Front Panel Ports, Slots, and LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
ProSAFE Wireless Controller WC7600 Chapter 5 Configure the System and Network Settings and Register the Licenses Configure the General Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Manage the Time Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Manage the IP, VLAN, and Link Aggregation Settings . . . . . . . . . . . . . . . . . . . . . Management VLAN Concepts. . . . . . . . . . . . . . . . . . . . . . . . . . . .
ProSAFE Wireless Controller WC7600 Manage MAC Authentication and MAC Authentication Groups. . . . . . . . . . . . 109 Guidelines for External MAC Authentication. . . . . . . . . . . . . . . . . . . . . . . . . . . . 110 Configure Basic Local MAC Authentication Settings . . . . . . . . . . . . . . . . . . . 110 Remove a MAC Address from a Wireless Client List . . . . . . . . . . . . . . . . . . . 112 Import a MAC List from a File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
ProSAFE Wireless Controller WC7600 Chapter 9 Configure Wireless and QoS Settings Basic and Advanced Wireless and QoS Configuration Concepts . . . . . . . . . . . 162 Configure the Radio . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 162 Configure the Radio for the Basic Profile Group . . . . . . . . . . . . . . . . . . . . . . 162 Configure the Radio for an Advanced Profile Group . . . . . . . . . . . . . . . . . . . 164 Configure Wireless Settings. . . . .
ProSAFE Wireless Controller WC7600 Clear the System Logs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 212 View Alerts and Events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 213 View System Alerts. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 213 View Radio Frequency Events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
ProSAFE Wireless Controller WC7600 View Captive Portal Users on Access Points That the Wireless Controller Manages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 283 Monitor the SSIDs on the Wireless Controller . . . . . . . . . . . . . . . . . . . . . . . . . . 285 Monitor Local Clients in the Network. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 290 Chapter 13 Troubleshooting Troubleshoot Basic Functioning. . . . . . . . . . . . . . . . . . . . . . . . .
1. 1 Introduction This chapter includes the following sections: • Key Features and Capabilities • Package Contents • Hardware Features • WC7600 Wireless Controller System Components • NETGEAR ProSAFE Access Points • What Can You Do with the WC7600 Wireless Controller? • Licenses • Maintenance and Support Note: For more information about the topics covered in this manual, visit the support website at support.netgear.com.
ProSAFE Wireless Controller WC7600 Key Features and Capabilities The NETGEAR ProSAFE Wireless Controller WC7600 is a high-capacity, secured wireless controller intended for medium- to large-sized businesses, higher education institutions, hospitals, and hotels. One wireless controller with the appropriate licenses can support up to 50 access points (APs) with up to 2,000 users. In a stacked configuration, a stack of three wireless controllers can support up to 6,000 users.
ProSAFE Wireless Controller WC7600 • • • • Security - Identity-based security authentication with an external RADIUS or LDAP (Active Directory) server, or with an internal authentication server. - Support for nine access point profile groups (one basic and eight advanced) on one wireless controller. - Support for up to 8 profiles per access point profile group and 8 profiles per radio (therefore, dual-band access points can support up to 16 profiles in one access point profile group).
ProSAFE Wireless Controller WC7600 Package Contents The ProSAFE Wireless Controller WC7600 product package contains the following items: • ProSAFE Wireless Controller WC7600 appliance • One AC power cable • Rubber feet (four) with adhesive backing • One rack-mount kit • Straight-through Category 5 Ethernet cable • ProSAFE Wireless Controller WC7600 Installation Guide If any of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer.
ProSAFE Wireless Controller WC7600 From left to right, the wireless controller’s front panel shows the following counter, LEDs, button, ports, and slots: • Digital counter. Displays the number of connected access points that are in a healthy state. • From top to bottom: - Power LED - Status LED - Fan LED - Stack Master LED These LEDs are described in Table 1 on page 13. • Reset button.
ProSAFE Wireless Controller WC7600 Table 1. LED functions (continued) LED Status Description Status LED (continued) Off The wireless controller does not have power. Blinking yellow Firmware is being upgraded. Fan LED Green The fans are functioning correctly. Yellow One or more fans are not functioning correctly. Green The wireless controller functions as the master controller in a stack. Yellow The wireless controller functions as a slave controller in a stack.
ProSAFE Wireless Controller WC7600 From left to right, the wireless controller’s back panel components are: • • Power supply. 100–240V, 5A, 47–63 Hz power supply, which includes the following external components: - AC power socket. Attach the power cord to this socket. (The wireless controller does not have a separate on/off power switch.) - Handle. The handle allows for easy removal and insertion. - LED. The LED is lit green when the power supply functions correctly.
ProSAFE Wireless Controller WC7600 The WC7600 wireless controller system supports the following NETGEAR ProSAFE access point models: • WNAP210v2 ProSAFE Wireless-N Access Point • WNAP320 ProSAFE Wireless-N Access Point • WNDAP350 ProSAFE Dual Band Wireless-N Access Point • WNDAP360 ProSAFE Dual Band Wireless-N Access Point • WNDAP380R ProSAFE Dual Band Wireless-N Access Point with RFID support • WNDAP620 Premium 3x3 Dual Band Wireless-N Access Point • WNDAP660 Premium 3x3 Dual Band Concurrent
ProSAFE Wireless Controller WC7600 For product documentation and firmware, visit http://support.netgear.com/product/WNAP210. Note: The WNAP210v1 cannot function in a WC7600 wireless controller system, but the WNAP210v2 can. • WNAP320 ProSAFE Wireless-N Access Point - Supports 802.11b, 802.11g, and 802.11n network devices. - Supports Power over Ethernet (PoE) with a power consumption of up to 5.8W. - Accepts optional antennas. For product documentation and firmware, visit http://support.netgear.
ProSAFE Wireless Controller WC7600 - Supports Power over Ethernet (PoE) with a power consumption that complies with the 802.3af standard. - Operates in either the 2.4 GHz or 5 GHz radio band. - Accepts optional antennas. For product documentation and firmware, visit http://support.netgear.com/product/WNDAP620. • WNDAP660 ProSAFE Premium 3x3 Dual Band Concurrent Wireless-N Access Point - Supports 802.11a, 802.11b, 802.11g, and 802.11n network devices.
ProSAFE Wireless Controller WC7600 - Create access point profile groups. Organize access point profiles in access point profile groups to differentiate between buildings, floors, businesses, business divisions, and so on. Easily assign access points to profile groups or change assignments. For more information, see Chapter 6, Manage Security Profiles and Profile Groups. • Discover Access Points in the Network and Provision IP Addresses and Firmware - Discover access points in the network.
ProSAFE Wireless Controller WC7600 • Manage Other Wireless Controllers in the Network - Manage stacking. Specify the master and slave wireless controllers in a stack and synchronize information between the wireless controller. For more information, see Chapter 11, Manage Stacking and Redundancy. • Monitor the Network and Its Components - Monitor the status of all wireless devices.
2.
ProSAFE Wireless Controller WC7600 Basic and Advanced Setting Concepts You can deploy the wireless controller in a small wireless network with 10 access points or in a large wireless network with up to 150 access points. Small networks require a basic configuration, but large networks can become complex and require you to configure the advanced features of the wireless controller.
ProSAFE Wireless Controller WC7600 Before you start the configuration of your wireless controller, decide whether you can use a basic configuration (that is, follow the Basic submenus) or need to use an advanced configuration (that is, follow the Advanced submenus). Once you have made your choice, configuring the wireless controller should be fairly easy if you consistently follow either the Basic submenus or the Advanced submenus.
ProSAFE Wireless Controller WC7600 Group-2 Group-3 Group-1 Group-4 2 3 4 5 6 7 Group-7 Group-8 5 GHz radio 2.4 GHz radio 1 Group-6 Group-5 8 1 Security profiles 2 3 4 5 6 7 8 Security profiles Figure 6. Advanced profile group architecture The following figure shows an example of three access point profile groups, in which the first profile group (Group-1) has five security profiles.
ProSAFE Wireless Controller WC7600 System Planning Concepts This section includes the following subsections: • Preinstallation Planning • Before You Configure a Wireless Controller Preinstallation Planning Before you install any wireless controllers, determine the following: • Number of access points required to provide seamless coverage • Number of licenses required to cover all access points that must be managed • Number of wireless controllers required • 802.
ProSAFE Wireless Controller WC7600 untagged packets that are sent to the wireless controller are treated as management VLAN traffic. Note: Use a tagged VLAN or change the tagged VLAN ID only if the hubs and switches on your LAN support 802.1Q. If they do not, and you have not configured a tagged VLAN with the same VLAN ID on the hubs and switches in your network, IP connectivity might be lost. The wireless controller must have IP connectivity with the access points through the management VLAN.
ProSAFE Wireless Controller WC7600 The encryption option that you can select depends upon the authentication method that you have selected. The following table lists the authentication methods available, with their corresponding encryption options: Table 3.
ProSAFE Wireless Controller WC7600 High-Level Configuration Examples This section includes the following subsections: • Single Controller Configuration with Basic Profile Group • Single Controller Configuration with Advanced Profile Groups • Stacked Controller Configuration Single Controller Configuration with Basic Profile Group A basic configuration consists of a single wireless controller that controls a collection of access points that are organized into the basic default group.
ProSAFE Wireless Controller WC7600 Single Controller Configuration with Advanced Profile Groups A more complex configuration consists of a single wireless controller that controls a collection of access points that are organized in access point profile groups and might use several profiles in each access point profile group. To set up a single wireless controller system with advanced profile groups: Step Configuration Web Management Interface Path 1.
ProSAFE Wireless Controller WC7600 Stacked Controller Configuration A stacked controller configuration can consist of up to three wireless controllers and up to 150 access points. Note: If the stack members are on different floors or in different buildings, you could configure a separate access point profile group for each building or floor. To set up a stacked controller configuration: Step Configuration Web management interface path 1.
ProSAFE Wireless Controller WC7600 Step Configuration Web management interface path 3. Configure the slave wireless controllers and deploy them in the network. For each slave wireless controller, configure up to eight access point profile groups, and for each access point profile in a group, do at least the following: 1. Configure an SSID for wireless access. Configuration > Profile > Advanced 2. Configure the network authentication and data encryption. 3. Assign the VLAN. 4.
ProSAFE Wireless Controller WC7600 The following illustration shows a simplified view of how you can use VLANs to segregate traffic by user category: Management VLAN 100 Ethernet traffic Internet Finance VLAN 10 Ethernet traffic Employee VLAN 20 Ethernet traffic Network printer Backend L3 switch or router Deploy the wireless controller on a trunk port if you use the internal DHCP server PoE switch Access point WNDAP360 Wireless controller WC7600 Finance computer Finance computer Employee computer
ProSAFE Wireless Controller WC7600 High-Level Deployment Scenarios This section provides three deployment scenarios to illustrate how the wireless controller can function in various network configurations: • Scenario Example 1: Network with Single VLAN • Scenario Example 2: Advanced Network with VLANs and SSIDs • Scenario Example 3: Advanced Network Scenario Example 1: Network with Single VLAN The following sample scenario consists of a simple network with a wireless controller, PoE switch, Layer 3 s
ProSAFE Wireless Controller WC7600 The access points and wireless controller are connected in the same subnet and use the same IP address range that is assigned for that subnet. The configuration does not include any routers between the access points and the wireless controller. The access points are connected to a PoE switch, which, in turn, is connected to the wireless controller. The uplink of the PoE switch connects to a Layer 3 switch or router that provides Internet access.
ProSAFE Wireless Controller WC7600 Step Configuration Web Management Interface Path 5. When the access points are operating, open the Discovery Wizard to do the following: Access Point > Discovery Wizard 1. Specify the state of the access points. The state can be either factory default in a Layer 2 network or already installed and functioning in standalone mode. 2. Run the Discovery Wizard. 3. Select the access points that you want the wireless controller to manage and add them to the managed list.
ProSAFE Wireless Controller WC7600 The access points and wireless controller are connected in the same subnet and same VLAN and use the same IP address range that is assigned for that subnet. The configuration does not include any routers between the access points and the wireless controller. The access points are connected to a PoE switch, which, in turn, is connected to the Layer 3 switch or router that provides Internet access.
ProSAFE Wireless Controller WC7600 Step Configuration Web management interface path 4. Configure the following profiles, and configure network authentication and data encryption for these profiles: 1. A profile with SSID 1 and VLAN 10. Configuration > Profile > Basic 2. A profile with SSID 2 and VLAN 20. 3. If necessary for the selected network authentication options, configure one or more authentication servers. 5. Connect the wireless controller to the PoE switch. 6.
ProSAFE Wireless Controller WC7600 • Four VLANs: VLAN 10, VLAN 20, VLAN 30, and VLAN 40 • Three SSIDs: SSID 1, SSID 2, and SSID 3 In this scenario, the VLANs and SSIDs are used to accommodate traffic for different user groups in a school that is spread out over two buildings.
ProSAFE Wireless Controller WC7600 This network configuration has the following prerequisites: • VLAN 1 is configured on the wireless controllers, core switch, and PoE switches. This VLAN is untagged. • VLANs 10, 20, and 30 are configured on the wireless controllers, core switch, and the PoE switch in Building 1. These VLANs are tagged. • VLANs 1, 10, 20, 30, and 40 are configured on the wireless controllers, core switch, and PoE switches. Except for VLAN 1, these VLANs are tagged.
ProSAFE Wireless Controller WC7600 Step Configuration Web management interface path 5. When the access points are operating, open the Discovery Wizard to do the following: Access Point > Discovery Wizard 1. Specify the state of the access points, which is factory default in a Layer 2 network. 2. Run the Discovery Wizard. 3. Select and add the access points that you want to be managed by the wireless controller to the managed list. Note: By default, all access points are added to the basic group. 6.
3. 3 RF Planning This chapter includes the following sections: • RF Planning Overview • Define and Edit Buildings and Floors • Specify Access Point Requirements • View and Manage Heat Maps for Deployed Plans RF Planning Overview You can do the following with RF planning: • Define WLAN coverage. • Estimate the number of access points required based on signal quality and number of clients per access point. • Optimize the placement of access points for the best coverage.
ProSAFE Wireless Controller WC7600 • Radio type or types. • Desired data rates for access points. • Identify areas where you do not necessarily want coverage. • Identify areas where you cannot deploy an access point. Use a worksheet similar to the following to collect your information. Table 4. Building planning worksheet Building dimensions Height Width Number of floors User information Number of users Users per access point Radio types Access point desired signal rate 802.11b/bg/ng 802.
ProSAFE Wireless Controller WC7600 . Figure 12. 2. The Buildings table shows the names of the previously defined buildings and their number of floors. 3. To add a building, click Add. The Add Building pop-up window displays. 4. Enter a name for your building in the Building Name field, and then click Add. The new building is added to the Buildings table. The name is an alphanumeric string up to 64 characters in length. 5.
ProSAFE Wireless Controller WC7600 6. Define the floors as explained in the following table: Table 5. Building name and floors Setting Description Building Building Name You can modify the previously defined building name, which is an alphanumeric string up to 64 characters in length. Floors Floor Names The floor name is an alphanumeric string up to 64 characters in length. Floor Dimensions Enter the floor length in meters in the Length field; enter the floor width in meters in Width field.
ProSAFE Wireless Controller WC7600 To delete a building: 1. Select the check box that corresponds to the building that you want to delete, or select the check box at the top row of the table to delete all buildings. 2. Click Delete. Specify Access Point Requirements After you have defined the buildings and floors, you need to specify the following RF requirements for each floor and each supported access point model (WNAP210v2, WNAP320, WNDAP350, and WNDAP360): • Frequency band.
ProSAFE Wireless Controller WC7600 . Figure 14. The Planning Buildings screen shows a tab for each building that you previously defined. For each building, the screen shows the floors that you previously defined. 2. Select the building and floor that you want to configure by clicking the corresponding tabs. 3. Specify the WLAN requirements for the floor as explained in the following table: Table 6.
ProSAFE Wireless Controller WC7600 want to deploy in sentry mode are not included in this number. (For information about sentry mode, see Change Access Point Information on the Managed AP List on page 133.) After you have closed the pop-up window, the Estimated Access Points row is added to the Planning Buildings screen. 5. Click View Map to view and optimize the suggested approximate access point locations for the settings that you entered: Figure 15.
ProSAFE Wireless Controller WC7600 7. Click Save to save the location map, or click Back to return to the Planning Buildings screen without savings changes to the location map. Note: For each floor, you can save one location map only. When you modify and save the location map, the previously saved location map is overwritten. View and Manage Heat Maps for Deployed Plans A heat map lets you view in real time, by wireless frequency band, the signal strength and wireless coverage for a building floor.
ProSAFE Wireless Controller WC7600 . Figure 16. The Deployed Buildings screen shows a tab for each building that you previously defined. For each building, the screens shows the floors that you previously defined. 2. Select the building and floor for which you want to view the heat map by clicking the corresponding tabs. 3. Click Heat Map. The heat map for the selected floor displays: Figure 17. 4.
ProSAFE Wireless Controller WC7600 The spectrum bar at the top of the screen indicates how the colors correspond to the signal strength and wireless coverage. To view information about an access point or client on the heat map, place your pointer over the icon.
4.
ProSAFE Wireless Controller WC7600 Connect Your Computer to the Wireless Controller To connect to the wireless controller for initial configuration, follow the steps in this section. You can also access the ProSAFE Wireless Controller WC7600 Installation Guide that you can download from http://support.netgear.com/product/WC7600. To connect your computer to the wireless controller: 1. Configure the computer with a static IP address of 192.168.0.210 and 255.255.255.0 as the subnet mask. 2.
ProSAFE Wireless Controller WC7600 The wireless controller’s login screen displays: 2. When prompted, enter admin for the user name and password for the password, both in lowercase letters. 3. Click the Login button.
ProSAFE Wireless Controller WC7600 Roadmap for Initial Configuration After you have connected and logged in to the wireless controller, perform the initial configuration. If you are not sure how you are going to deploy the wireless controller in your network, NETGEAR recommends that you read Chapter 2, System Planning and Deployment Scenarios.
ProSAFE Wireless Controller WC7600 Note: A management VLAN is used for all SNMP and HTTP traffic to and from the wireless controller and managed access points. Note: Clear the Untagged VLAN check box only if the hubs and switches in your network support the VLAN (802.1Q) standard. Likewise, change the untagged VLAN value only if the hubs and switches in your network support the VLAN (802.1Q) standard. For more information, see Manage the IP, VLAN, and Link Aggregation Settings on page 62. 12.
ProSAFE Wireless Controller WC7600 If you have not yet personalized your user name and password, enter admin for the user name and password for the password, both in lowercase letters. 3. Click the Login button. The wireless controller’s web management interface opens and displays the Summary screen. 4. Register the licenses. For more information, see Register Your Licenses on page 70. 5.
ProSAFE Wireless Controller WC7600 c. (Optional) Assign access points to advanced profile groups: For more information, see Assign Access Points to Advanced Profile Groups on page 137. 9. (Optional) Configure rogue access point detection. For more information, see Manage Rogue Access Points on page 141. 10. (Optional) Configure a guest portal or captive portal. For more information, see Manage Guest Network Access on page 145. 11. (Optional) Configure user accounts and portal accounts.
ProSAFE Wireless Controller WC7600 Deploy the Wireless Controller After you have followed the steps in the Roadmap for Initial Configuration on page 54 and the Roadmap for Configuring Management of Your Wireless Network on page 55, you are ready to deploy the wireless controller in your network. To deploy the wireless controller: 1. Disconnect the wireless controller from the computer that you used for configuration. 2. (Optional) Reconfigure the computer back to its original TCP/IP settings. 3.
5.
ProSAFE Wireless Controller WC7600 Configure the General Settings Note: You must select the correct country or region of operation. It might not be legal to operate the access points in a country or region not shown here. If your location is not listed, check with your local government agency or check the NETGEAR website for more information about which channels to use. The General Settings screen lets you configure the basic settings of your wireless controller. To configure general settings: 1.
ProSAFE Wireless Controller WC7600 5. Configure the settings as described in the following table: Setting Description Name Enter a unique value as the wireless controller name. NETGEAR recommends changing the name as soon as possible after setting up. The name must contain only alphabetical characters, numbers, and hyphens, and must be 31 characters or less.
ProSAFE Wireless Controller WC7600 The Time Settings screen displays: 5. Configure the settings as described in the following table: Setting Description Time Zone From the menu, select the local time zone for your country or region. Current Time This field is a nonconfigurable field that displays the current time at your location. NTP Client Select the Enable radio button to use a Network Time Protocol (NTP) server to synchronize the clock of the wireless controller and managed access points.
ProSAFE Wireless Controller WC7600 Untagged VLAN Concepts When the Untagged VLAN check box is selected on the IP Settings screen, one VLAN can be configured as an untagged VLAN: • When the wireless controller sends frames associated with the untagged VLAN to the LAN (Ethernet) interface, those frames do not carry an 802.1Q VLAN header. • When the wireless controller receives untagged traffic from the LAN (Ethernet) interface, those frames are assigned to the untagged VLAN.
ProSAFE Wireless Controller WC7600 The wireless controller’s login screen displays. 2. Enter your user name and password. If you have not yet personalized your user name and password, enter admin for the user name and password for the password, both in lowercase letters. 3. Click the Login button. The wireless controller’s web management interface opens and displays the Summary screen. 4. Select Configuration > System > IP/VLAN. The IP Settings screen displays: 5.
ProSAFE Wireless Controller WC7600 Setting Description Primary DNS Server Enter the IP address of the primary Domain Name Server (DNS) that you want to use. Secondary DNS Server Enter the IP address of the secondary DNS that you want to use. WINS Server Enter the IP address of the Windows Internet Name Service (WINS) that you want to use. Management VLAN Settings section Management VLAN Enter the management VLAN. For more information, see Management VLAN Concepts on page 62.
ProSAFE Wireless Controller WC7600 To add a DHCP server and configure its settings: 1. Open a web browser. In the browser’s address field, type the http:// followed by the IP address that you assigned to the wireless controller. By default, the IP address is 192.168.0.250. If you have not yet assigned another IP address to the wireless controller, type http://192.168.0.250. The wireless controller’s login screen displays. 2. Enter your user name and password.
ProSAFE Wireless Controller WC7600 The DHCP Server List shows the DHCP servers that are already configured on the wireless controller. 5. Click the Add button. The Add DHCP Server pop-up screen displays: 6. Configure the settings as described in the following table: Setting Description Enabled Select the Enabled check box to enable the DHCP server. When the check box is cleared, the DHCP server is disabled.
ProSAFE Wireless Controller WC7600 Setting Description Use Default DNS Server Select the Use Default DNS Server check box to allow the DHCP server to use the wireless controller’s default DNS servers. The Primary DNS Server and Secondary DNS Server fields are masked out. Primary DNS Server Enter the IP address of the primary DNS server for the network. Secondary DNS Server Enter the IP address of the secondary DNS server for the network.
ProSAFE Wireless Controller WC7600 The Edit DHCP Server pop-up screen displays: 7. Change the settings. 8. Click the Apply button. Remove a DHCP Server You can remove a DHCP server. To remove a DHCP server: 1. Open a web browser. In the browser’s address field, type the http:// followed by the IP address that you assigned to the wireless controller. By default, the IP address is 192.168.0.250. If you have not yet assigned another IP address to the wireless controller, type http://192.168.0.250.
ProSAFE Wireless Controller WC7600 Register Your Licenses Make sure that your licenses cover the number of access points in your network. Before you can register your licenses, you must configure the license server settings. Note: When you install your licenses, they replace the default trial license for five access points. For more information about licenses, see Licenses on page 20 and Manage Licenses on page 219.
ProSAFE Wireless Controller WC7600 The Server Settings screen displays: 6. Configure the settings as described in the following table: Setting Description Update From Select one of the following radio buttons to specify the license update server: • Default Update Server. The default license update server is used. • Specify Update Server. You must specify the license update server. Fill in the Server Address field.
ProSAFE Wireless Controller WC7600 Register Your Licenses with the License Server You must have purchased licenses before you can register them. For more information, see Licenses on page 20) To register your licenses: 1. Open a web browser. In the browser’s address field, type the http:// followed by the IP address that you assigned to the wireless controller. By default, the IP address is 192.168.0.250. If you have not yet assigned another IP address to the wireless controller, type http://192.168.0.
ProSAFE Wireless Controller WC7600 7. Complete the fields in the Customer Information section with the customer information that is associated with the key that you want to add and register. These fields are self-explanatory. 8. Complete the fields in the VAR Information section with the value-added reseller (VAR) information that is associated with the key that you want to add and register. These fields are self-explanatory. 9.
ProSAFE Wireless Controller WC7600 Manage Certificates The internal authentication server for certificate-based authentication requires you to install a certificate on the wireless controller. A default self-signed server certificate is installed on the wireless controller. However, NETGEAR strongly recommends that you replace this default certificate with a custom certificate issued for your site or domain by a trusted certificate authority (CA).
ProSAFE Wireless Controller WC7600 The Add Certificates screen displays: 5. Configure the settings as described in the following table: Setting Description Password Enter the password for wireless controller certificates. Controller Key Click the Browse button, and select the controller key. Controller Certificate Click the Browse button, and select the controller certificate. CA Certificate Click the Browse button, and select the CA certificate. 6. Click the Apply button.
ProSAFE Wireless Controller WC7600 To configure the log settings and view the logs: 1. Open a web browser. In the browser’s address field, type the http:// followed by the IP address that you assigned to the wireless controller. By default, the IP address is 192.168.0.250. If you have not yet assigned another IP address to the wireless controller, type http://192.168.0.250. The wireless controller’s login screen displays. 2. Enter your user name and password.
ProSAFE Wireless Controller WC7600 - LOG_LEVEL_NOTICE. Notifications, warnings, noncritical errors, and critical errors are logged. - LOG_LEVEL_INFO. Informational messages, notifications, warnings, noncritical errors, and critical errors are logged. 6. Click the Apply button. For information about saving the logs, see Save the System Logs on page 212. For information about clearing the logs, see Clear the System Logs on page 212.
ProSAFE Wireless Controller WC7600 The Log Settings screen displays: 5. In the Syslog Settings section of the screen, configure the settings as described in the following table: Setting Description Enable Syslog Enable the syslog settings, if you have a syslog server on your network. Syslog Server IP Address Enter the IP address to which the wireless controller and managed access points send all syslogs, if the Enable Syslog check box is selected.
ProSAFE Wireless Controller WC7600 Configure Alarm Notification Settings You can classify certain events as critical, major, normal, or minor. Some events you can classify only as critical or major. For example, on the RF Management screen, you can specify whether a coverage hole should be classified as critical or major (see Configure Radio Frequency Management for the Basic Profile Group on page 181). To configure alarm actions: 1. Open a web browser.
ProSAFE Wireless Controller WC7600 6. For each alarm severity for which you have selected the Send Email option in the previous step, enter an email address. 7. Click the Apply button. Configure the Email Notification Server The email notification server is the location from which the email alerts originate. To configure email settings: 1. Open a web browser. In the browser’s address field, type the http:// followed by the IP address that you assigned to the wireless controller.
ProSAFE Wireless Controller WC7600 Setting Description Sender Email Address Enter the email address from which email notifications are sent. Authentication Required Select the Authentication Required check box if the email server requires authentication, and complete the User Name and Password fields. User Name Enter the user name that is associated with the email server. Password Enter the password that is associated with the email server. 6. Click the Apply button.
6.
ProSAFE Wireless Controller WC7600 Wireless Security Profile Concepts Profiles are sets of configurations that you can apply to an access point. The configuration includes radio parameters, load-balancing parameters, and rate-limit parameters. Each wireless radio on an access point can support 8 profiles. For example, the dual-band WNDAP660 access point can support a total of 16 profiles.
ProSAFE Wireless Controller WC7600 Large WLAN Networks For large network deployments that consist of different sets of WLAN networks, consider using the advanced configuration to create multiple profile groups. The access points that belong to the same profile group use the same wireless, security, and QoS configurations. The wireless controller supports up to eight profile groups. Each profile group can have its own wireless, security, and QoS configurations.
ProSAFE Wireless Controller WC7600 Note: You can configure profiles to function with different authentication servers. For example, you could set up a guest profile with no authentication, an engineering profile that uses external RADIUS authentication, and a marketing profile that uses external LDAP authentication. You can also use additional external RADIUS servers in other profiles. • MAC authentication.
ProSAFE Wireless Controller WC7600 Manage Security Profiles for the Basic Profile Group The basic profile group works well for small-scale WLAN networks. NETGEAR recommends that you read the information in the previous section, Wireless Security Profile Concepts, before you configure any profiles.
ProSAFE Wireless Controller WC7600 The Edit Profile (Basic) screen displays: Click + to add another profile. Your selection from the Network Authentication menu determines the information that is displayed onscreen. Select the Local radio button to display the Local MAC ACL Group menu. Select the External radio button to display the External Radius Server menu. By default, an NG_11g-01 profile and an NG_11a-01 profile are present in the basic profile group. 5.
ProSAFE Wireless Controller WC7600 b. Select a profile from the Profiles menu. 8. Click the Add button. The newly created profile displays onscreen, and the tab for the new profile is automatically selected to let you configure the new profile. Note: The authentication server settings that you specify on the Authentication Server screen affect the selections that are available from the Network Authentication menu.
ProSAFE Wireless Controller WC7600 Setting Description Authentication Settings section Note: The options that display onscreen depend on the selection from Network Authentication menu. Note: The MAC ACL MAC ACL button displays only when you select Open System, Shared Key, WPA-PSK, WPA2-PSK, or WPA-PSK & WPA2-PSK from the Network Authentication menu. Select one of the following radio buttons: • Local. Use local MAC authentication. The Local MAC ACL Group menu displays so you can select a group.
ProSAFE Wireless Controller WC7600 Setting Description Wireless QoS section Wi-Fi Multimedia (WMM) To enable Wi-Fi Multimedia (WMM), select the Enable radio button, which is the default setting. Select the Disable button to disable the feature. For more information, see Manage Quality of Service for an Advanced Profile Group on page 188. WMM Powersave The WMM Powersave feature saves power for battery-powered equipment by increasing the efficiency and flexibility of data transmission.
ProSAFE Wireless Controller WC7600 Remove a Profile From the Basic Profile Group You can remove a profile from the basic profile group. To remove an existing profile: 1. Open a web browser. In the browser’s address field, type the http:// followed by the IP address that you assigned to the wireless controller. By default, the IP address is 192.168.0.250. If you have not yet assigned another IP address to the wireless controller, type http://192.168.0.250. The wireless controller’s login screen displays.
ProSAFE Wireless Controller WC7600 To add an advanced profile group: 1. Open a web browser. In the browser’s address field, type the http:// followed by the IP address that you assigned to the wireless controller. By default, the IP address is 192.168.0.250. If you have not yet assigned another IP address to the wireless controller, type http://192.168.0.250. The wireless controller’s login screen displays. 2. Enter your user name and password.
ProSAFE Wireless Controller WC7600 The following table describes the fields that are shown for each profile in a profile group. Setting Description Name The unique profile name. Radio The wireless radio in which the profile is operating. Authentication The authentication setting under which the profile is operating. Remove an Advanced Profile Group You can remove an advanced profile group To remove an advanced profile group: 1. Open a web browser.
ProSAFE Wireless Controller WC7600 To add a security profile to an advanced profile group and configure the security profile: 1. Open a web browser. In the browser’s address field, type the http:// followed by the IP address that you assigned to the wireless controller. By default, the IP address is 192.168.0.250. If you have not yet assigned another IP address to the wireless controller, type http://192.168.0.250. The wireless controller’s login screen displays. 2. Enter your user name and password.
ProSAFE Wireless Controller WC7600 Note: The authentication server settings that you specify on the Authentication Server screen affect the selections that are available from the Network Authentication menu. For more information, see Manage Authentication Servers and Authentication Server Groups on page 104. If your selection from the Network Authentication menu requires authentication, a corresponding Authentication Server field displays. Click + to add another profile.
ProSAFE Wireless Controller WC7600 10. Configure the settings as described in the following table: Setting Description Profile Definition section Name Enter a unique name to identify the profile. This value can be up to 32 alphanumeric characters. Use meaningful profile names instead of the default names. The default profile names are Profile1, Profile2, and so on, through Profile8. Wireless Network Name (SSID) Enter a unique name for the wireless network associated with this profile.
ProSAFE Wireless Controller WC7600 Setting Description Authentication Settings section Note: The options that display onscreen depend on the selection from Network Authentication menu. Note: The MAC ACL MAC ACL buttons displays only when you select Open System, Shared Key, WPA-PSK, WPA2-PSK, or WPA-PSK & WPA2-PSK from the Network Authentication menu. Select one of the following radio buttons: • Local. Use local MAC authentication. The Local MAC ACL Group menu displays so you can select a group.
ProSAFE Wireless Controller WC7600 Setting Description Wireless QoS section Wi-Fi Multimedia (WMM) To enable Wi-Fi Multimedia (WMM), select the Enable radio button, which is the default setting. Select the Disable button to disable the feature. For more information, see Manage Quality of Service for an Advanced Profile Group on page 188. WMM Powersave The WMM Powersave feature saves power for battery-powered equipment by increasing the efficiency and flexibility of data transmission.
ProSAFE Wireless Controller WC7600 For information about how to change the settings, see Configure a Profile in an Advanced Profile Group on page 93. 10. Click the Apply button. Remove a Profile From an Advanced Profile Group You can remove a profile from an advanced profile group. To remove an existing profile from an advanced profile group: 1. Open a web browser. In the browser’s address field, type the http:// followed by the IP address that you assigned to the wireless controller.
ProSAFE Wireless Controller WC7600 Note: On the Edit Profile (Basic) or Edit Profile (Group-X) screen, for any selection from the Network Authentication menu that requires a RADIUS server, authentication is not restricted to a RADIUS server; you can also use an internal authentication server or an external LDAP server. Note: You can configure either MAC authentication with an external RADIUS server or network authentication with an external RADIUS server, but not both.
ProSAFE Wireless Controller WC7600 Table 7. Network authentication and data encryption settings (continued) Network Authentication Selection Data Encryption Options Configuration Steps Legacy 802.1x None To configure legacy 802.1x authentication: 1. Set up and enable an internal or external (RADIUS or LDAP) authentication server. For information, see Manage Authentication Servers and Authentication Server Groups on page 104. 2. Select the Local or External radio button. 3.
ProSAFE Wireless Controller WC7600 Table 7. Network authentication and data encryption settings (continued) Network Authentication Selection Data Encryption Options Configuration Steps WPA & WPA2 with Radius TKIP + AES To configure WPA & WPA2 authentication with a RADIUS server: Note: Use this option if the network includes both WPA and WPA2 clients. 1. Set up and enable an internal or external (RADIUS or LDAP) authentication server.
ProSAFE Wireless Controller WC7600 Table 7. Network authentication and data encryption settings (continued) Network Authentication Selection Data Encryption Options Configuration Steps WPA2-PSK AES TKIP + AES To configure WPA2-PSK authentication: 1. From the Data Encryption menu, select the type of encryption: - AES. Supports AES only. - TKIP + AES. Supports both TKIP and AES. 2. (Optional) Select the Show Passphrase check box to display the characters in the WPA Passphrase (Network Key) field. 3.
ProSAFE Wireless Controller WC7600 Manage Authentication Servers and Authentication Server Groups You can set up internal and external authentication servers and server groups that the wireless controller can use for authentication. Authentication Server Concepts You can specify three types of authentication servers: internal, external RADIUS, and external LDAP: • Internal authentication server. The wireless controller handles authentication.
ProSAFE Wireless Controller WC7600 for the advanced authentication groups. You can assign the basic-LDAP server to both the basic profile group and to advanced profile groups. All three servers can be active so that the profiles that you set up can be configured to work with different authentication servers. For example, you could set up a guest profile with no authentication, an engineering profile that uses external RADIUS authentication, and a marketing profile that uses external LDAP authentication.
ProSAFE Wireless Controller WC7600 The basic Authentication Server screen displays. The following figure shows the fields for an external LDAP server: 5. Select the radio button that corresponds to the authentication server that you want to set up: • External RADIUS Server • Internal Authentication Server • External LDAP Server 6.
ProSAFE Wireless Controller WC7600 Setting Description Internal Reauthentication Time Authentication (seconds) Server Update Global Key Every (seconds) Specify the time (in seconds) after which reauthentication occurs for all wireless clients. To enable update of the global key: 1. Select the Update Global Key Every (Seconds) check box. 2. Specify the interval (in seconds) after which the global key is updated for all wireless clients.
ProSAFE Wireless Controller WC7600 2. Enter your user name and password. If you have not yet personalized your user name and password, enter admin for the user name and password for the password, both in lowercase letters. 3. Click the Login button. The wireless controller’s web management interface opens and displays the Summary screen. 4. Select Configuration > Security > Advanced > Authentication Server. The advanced Authentication Server screen displays: Click + to add another authentication group.
ProSAFE Wireless Controller WC7600 For information about how to add a RADIUS authentication group to a security profile in the basic profile group, see Configure a Profile in the Basic Profile Group on page 86. For information about how to add a RADIUS authentication group to a security profile in an advanced profile group, see Configure a Profile in an Advanced Profile Group on page 93. Remove a RADIUS Authentication Server Group You can remove a RADIUS authentication server group.
ProSAFE Wireless Controller WC7600 Guidelines for External MAC Authentication Note the following external RADIUS server guidelines: • For each MAC authentication client, you must configure a policy on the RADIUS server. • During MAC authentication, the wireless controller sends the following information to the RADIUS server: - MAC address in the format xx:xx:xx:xx:xx:xx - User name - Calling station ID • The wireless controller uses CHAP as the authentication protocol with the RADIUS server.
ProSAFE Wireless Controller WC7600 4. Select Configuration > Security > Basic > MAC ACL. The basic MAC Authentication screen displays: Note: As an option, you can import a list of MAC addresses from a file. For more information, see the next section. 5. Next to Treat ACL as, select one of the following radio buttons: • Allow. Network access is granted to the clients for which the MAC addresses are listed in the Selected Wireless Clients list. • Deny.
ProSAFE Wireless Controller WC7600 Remove a MAC Address from a Wireless Client List You can remove a MAC address from a wireless clients list. To remove a MAC address from a wireless clients list: 1. Open a web browser. In the browser’s address field, type the http:// followed by the IP address that you assigned to the wireless controller. By default, the IP address is 192.168.0.250. If you have not yet assigned another IP address to the wireless controller, type http://192.168.0.250.
ProSAFE Wireless Controller WC7600 00:00:11:11:22:26 00:00:11:11:22:25 2. Open a web browser. In the browser’s address field, type the http:// followed by the IP address that you assigned to the wireless controller. By default, the IP address is 192.168.0.250. If you have not yet assigned another IP address to the wireless controller, type http://192.168.0.250. The wireless controller’s login screen displays. 3. Enter your user name and password.
ProSAFE Wireless Controller WC7600 To set up a MAC authentication group: 1. Open a web browser. In the browser’s address field, type the http:// followed by the IP address that you assigned to the wireless controller. By default, the IP address is 192.168.0.250. If you have not yet assigned another IP address to the wireless controller, type http://192.168.0.250. The wireless controller’s login screen displays. 2. Enter your user name and password.
ProSAFE Wireless Controller WC7600 9. Click the Apply button. For information about how to add a MAC authentication group to a security profile in the basic profile group, see Configure a Profile in the Basic Profile Group on page 86. For information about how to add a MAC authentication group to a security profile in an advanced profile group, see Configure a Profile in an Advanced Profile Group on page 93. Remove a Local MAC Authentication Group You can remove a local ACL group.
ProSAFE Wireless Controller WC7600 2. Open a web browser. In the browser’s address field, type the http:// followed by the IP address that you assigned to the wireless controller. By default, the IP address is 192.168.0.250. If you have not yet assigned another IP address to the wireless controller, type http://192.168.0.250. The wireless controller’s login screen displays. 3. Enter your user name and password.
ProSAFE Wireless Controller WC7600 Select an ACL for a Profile in an Advanced Profile Group MAC authentication either allows or denies network access to clients on access point that are managed through a select profile in the advanced profile group. To select a local or external MAC ACL for a profile in an advanced profile group: 1. Configure a local MAC ACL or an external MAC ACL on an external RADIUS server.
ProSAFE Wireless Controller WC7600 a. Select the External radio button. b. From the External Radius Server menu, select the external RADIUS server on which the external MAC ACL is configured. 11. Click the Apply button. At initial client authentication, the wireless controller consults the external MAC ACL. While a client roams, the wireless controller uses cached authentication information.
7. Discover and Manage Access Points 7 This chapter includes the following sections: • Access Point Discovery Guidelines • Discover Access Points with the Discovery Wizard • Manage the Managed AP List • Assign Access Points to Advanced Profile Groups IMPORTANT: Before you use the wireless controller to discover your access points and push the configurations to the access points: 1. Make sure that you have registered sufficient licenses. 2. Determine which profiles and security you require. 3.
ProSAFE Wireless Controller WC7600 Access Point Discovery Guidelines You must run the Discovery Wizard for the wireless controller to discover supported NETGEAR access points on the LAN or WAN. The wireless controller can discover access points that are still in their factory default state and access points that are already deployed in a standalone configuration. Both access points in factory default state and deployed standalone access points run standalone firmware.
ProSAFE Wireless Controller WC7600 How you need to configure DHCP option 43 depends on the type of external DHCP server: - Layer 3 switch as a DHCP server. If you use a Layer 3 switch as a DHCP server, specify the wireless controller’s IP address in hexadecimal format to allow the access points to receive the wireless controller’s IP address and to allow the DHCP server to assign IP addresses to the access points. The vendor-specific octets must precede the hexadecimal address. Table 8.
ProSAFE Wireless Controller WC7600 • Enable DHCP option 43 (vendor-specific information) on the DHCP server. Specify the wireless controller’s IP address to allow the access points to receive the wireless controller’s IP address and the DHCP server to assign IP addresses to the access points. The DHCP server on the wireless controller automatically enables DHCP option 43 with its own IP address.
ProSAFE Wireless Controller WC7600 After the connection with the wireless controller is reestablished, the remote access point functions once again as a managed access point. Discover Access Points with the Discovery Wizard The Discovery Wizard provides two methods to find access points that are not yet on the managed access point list.
ProSAFE Wireless Controller WC7600 If you have not yet personalized your user name and password, enter admin for the user name and password for the password, both in lowercase letters. 3. Click the Login button. The wireless controller’s web management interface opens and displays the Summary screen. 4. Select Access Point > Discovery Wizard. The Discovery Wizard Step 1 of 2 : Choose state of Access Points screen displays: 5. Select the Out of Factory and L2 Subnet APs radio button.
ProSAFE Wireless Controller WC7600 The wireless controller searches for NETGEAR products on the LAN based on MAC address and identifies which products are supported access point models. Progress bars show the progress of the discovery process. When the discovery process is finished, the total number of access points is displayed and the table shows the access points that were discovered. For each access point, the table includes the model number, IP address, MAC address, and site. 7.
ProSAFE Wireless Controller WC7600 11. Either select individual access points to be added to the managed list or select all access points to be added to the managed list: • Select individual check boxes for discovered access points that you want to add to the managed list. • Select the check box in the upper right of the table heading to add all discovered access points to the managed list. 12. Click the Add button.
ProSAFE Wireless Controller WC7600 By default, the access point upgrade process uses multicast. If you need to configure a specific multicast IP address range for the upgrade process or disable multicast, see Configure Multicast Firmware Upgrade for Access Points on page 224. If one or more access points do not transition to the Connected state (see the Status column in the Managed AP List), see Resolve Problems with Access Points on page 300.
ProSAFE Wireless Controller WC7600 The Discovery Wizard Step 1 of 3 : Choose state of Access Points screen displays: 5. Select the Installed and working in Standalone Mode radio button. Note: The I am not sure radio button directs you to the product documentation. 6. Click the Next button. The Discovery Wizard Step 2 of 3 : Specify IP Range screen displays: 7. In the Range 1 section, fill in the Start IP and End IP fields.
ProSAFE Wireless Controller WC7600 The screen adjusts to display a third set of Start IP and End IP fields. d. In the Range 3 section, fill in the Start IP and End IP fields. 9. Click the Next button. The Discovery Wizard Step 3 of 3 : Select Access Points to manage screen displays. The wireless controller searches for NETGEAR products on the LAN based on MAC address and then identifies which products are supported access point models. A progress bar show the progress of the discovery process.
ProSAFE Wireless Controller WC7600 You must add the access point to the managed list, change its IP address, and run discovery again to discover the next access point with that IP address. • For more information, see Resolve Problems with Access Points on page 300. 12. To run the discovery process again, click the Restart button. 13. To designate an access point as a remote access point, from the Site menu, select Remote. By default, all discovered access points are designated as Local.
ProSAFE Wireless Controller WC7600 After the access points are added to the Managed AP List, the wireless controller upgrades the firmware of the access points to the latest firmware that is loaded on the wireless controller, and the access points become managed access points. Depending on the number of access points that you add to the Managed AP List, this process might take several minutes. By default, the access point upgrade process uses multicast.
ProSAFE Wireless Controller WC7600 2. Enter your user name and password. If you have not yet personalized your user name and password, enter admin for the user name and password for the password, both in lowercase letters. 3. Click the Login button. The wireless controller’s web management interface opens and displays the Summary screen. 4. Select Access Point > Managed AP List. The Managed AP List screen displays.
ProSAFE Wireless Controller WC7600 Item Description Name The name of the access point. Status Shows one of the following status options: • Authentication in progress. This status can last several minutes. • Applying configurations. • Firmware upgrade. • AP is rebooting. • Connecting. Make sure that a DHCP server is enabled in the network; otherwise, the managed access points remain in the Connecting state and do not enter the Connected state. • Connected. This status indicates normal operation.
ProSAFE Wireless Controller WC7600 If you have not yet personalized your user name and password, enter admin for the user name and password for the password, both in lowercase letters. 3. Click the Login button. The wireless controller’s web management interface opens and displays the Summary screen. 4. Select Access Point > Managed AP List. The Managed AP List screen displays. 5. Select the access point that you want to change by selecting its radio button in the Edit column of the Managed AP List. 6.
ProSAFE Wireless Controller WC7600 7. Configure the settings as described in the following table. Setting Description Access Point Info section Name Enter a unique value that indicates the access point name. By default, the name is netgearxxxxxx, where xxxxxx represents the last six hexadecimal digits of the access point’s MAC address. You can change the name to one that is meaningful to you. Model The model of the access point.
ProSAFE Wireless Controller WC7600 Setting Description Wireless Settings section Antenna You can specify which antenna the access point uses by making a selection from the menu: • Internal. The access point uses its internal antenna. • External. The access point uses its external antenna or antennas. External antennas are optional antennas that do not come standard with an access point. Plan Settings section Site The site designation is always Local.
ProSAFE Wireless Controller WC7600 The wireless controller’s web management interface opens and displays the Summary screen. 4. Select Access Point > Managed AP List. The Managed AP List screen displays. 5. Select the radio button to the right of the access point that you want to remove. 6. Click the Remove button. Assign Access Points to Advanced Profile Groups By default, all access points are automatically assigned to the basic profile group.
ProSAFE Wireless Controller WC7600 4. Select Configuration > WLAN Network. The settings are explained in the following table: Setting Description IP The IP address of the access point. MAC The MAC address of the access point. Model The model of the access point. Name The name that you specified for the access point. Building The building designation is always Building-1. Floor The floor designation is always Floor-1. Status • • • • • • • Authentication in progress.
ProSAFE Wireless Controller WC7600 5. Take one of the following actions: • Assign a single access point to another group by selecting the check box to the right of the access point. • Assign a selection of access points to another group by selecting the check boxes to the right of the access points. • Assign all access points to another group by selecting the check box in the upper right of the table heading. 6. Select the group name from the Group Name menu in the table heading. 7.
8.
ProSAFE Wireless Controller WC7600 Manage Rogue Access Points The wireless controller can detect rogue access points in your network, you can classify the detected rogue access points, and you can import a list of known access points. Rogue Access Point Concepts Rogue access point detection is disabled by default on the wireless controller. If you want to detect rogue access points, you must enable rogue access point detection.
ProSAFE Wireless Controller WC7600 If you have not yet personalized your user name and password, enter admin for the user name and password for the password, both in lowercase letters. 3. Click the Login button. The wireless controller’s web management interface opens and displays the Summary screen. 4. Select Configuration > Security > Basic > Rogue AP. The basic Rogue AP screen displays: The wireless controller can support a total of up to 512 access points from the known and unknown lists combined. 5.
ProSAFE Wireless Controller WC7600 To view and classify rogue access points: 1. Open a web browser. In the browser’s address field, type the http:// followed by the IP address that you assigned to the wireless controller. By default, the IP address is 192.168.0.250. If you have not yet assigned another IP address to the wireless controller, type http://192.168.0.250. The wireless controller’s login screen displays. 2. Enter your user name and password.
ProSAFE Wireless Controller WC7600 5. Classify the access points in the Rogue List: a. Do one of the following: • Select one or more check boxes that correspond to the access points. • Select all access points in the Rogue List by selecting the check box at the top of the table. b. Click one of the following two buttons, both of which are located below the Rogue List: • Known. Moves the selected access points to the known list. • Unknown. Moves the selected access points to the unknown list. 6.
ProSAFE Wireless Controller WC7600 The advanced Rogue AP screen displays. 6. Click the Browse button, navigate to the file containing the list of known access points, and select it. 7. Next to Import Known List, select one of the following radio buttons: • Merge. Merges the list of access points that you intend to import with the access points that are already present in the Rogue List. • Replace.
ProSAFE Wireless Controller WC7600 Note: If the network authentication uses an external RADIUS server, you cannot configure captive portal authentication. That is, if you configure an external RADIUS server with WPA, WPA2, or WPA & WPA2 (or if you use legacy 802.1X), you cannot configure captive portal authentication; the network authentication must be Open System, Shared Key, WPA-PSK, WPA2-PSK, or WPA-PSK & WPA2-PSK (see Network Authentication and Data Encryption Options on page 99).
ProSAFE Wireless Controller WC7600 By default, the IP address is 192.168.0.250. If you have not yet assigned another IP address to the wireless controller, type http://192.168.0.250. The wireless controller’s login screen displays. 2. Enter your user name and password. If you have not yet personalized your user name and password, enter admin for the user name and password for the password, both in lowercase letters. 3. Click the Login button.
ProSAFE Wireless Controller WC7600 5. Configure the settings as described in the following table. Setting Description Portal Settings section Portal Type Select one of the following radio buttons: • Guest. A guest portal with a field for entering an email address. Guests do not need to provide a password and can have unlimited access to the network. You do not need to configure guest accounts. • Captive. A captive portal with a field for entering a login user name and a field for entering a password.
ProSAFE Wireless Controller WC7600 8. Assign the captive portal or guest portal to a security profile in the basic profile group, in an advanced profile group, or in both: • Basic profile group. Assign the captive portal or guest portal to a security profile in the basic profile group: a. Select Configuration > Profile > Basic > Radio. The Edit Profile (Basic) screen displays. b. Click the tab for the radio for which you want to assign the portal. c.
ProSAFE Wireless Controller WC7600 Manage Users, Accounts, and Passwords The wireless controller supports different types of users and accounts. You can add, change, and remove users and accounts. User and Account Concepts The wireless controller supports three types of users: management users, WiFi users (WiFi clients), and captive portal users.
ProSAFE Wireless Controller WC7600 Add a Management User You can add an administrator, a user who has read-only access to the wireless controller’s web management interface, a user who can provision captive portal users only, and a user who can manage licenses only. To add a management user: 1. Open a web browser. In the browser’s address field, type the http:// followed by the IP address that you assigned to the wireless controller. By default, the IP address is 192.168.0.250.
ProSAFE Wireless Controller WC7600 The Add User pop-up screen displays. 6. Configure the user settings as described in the following table. Setting Description User Name Enter a unique user name. Only alphanumerical characters and underscore characters (_) are supported. User Type From the menu, select the type of user, which determines the users’s access to the wireless controller’s web management interface. • Administrator. Full access with read and write capabilities. • Read Only.
ProSAFE Wireless Controller WC7600 If you have not yet personalized your user name and password, enter admin for the user name and password for the password, both in lowercase letters. 3. Click the Login button. The wireless controller’s web management interface opens and displays the Summary screen. 4. Select Maintenance > User Management. The User Management screen displays with the Management tab and associated screen in view. 5. Click the WiFi Clients tab. The WiFi Client screen displays.
ProSAFE Wireless Controller WC7600 7. Configure the client settings as described in the following table. Setting Description User Name Enter a unique user name. Only alphanumerical characters and underscore characters (_) are supported. Password Enter a password in the Password field. Confirm the password in the Confirm Password field. Authentication Type From the menu, select one of the following protocols: • EAP. Extensible Authentication Protocol. • PEAP. Protected EAP. 8.
ProSAFE Wireless Controller WC7600 The Captive Portal Account screen displays. The following figure contains some account examples. 6. Click the Add button. The Add Account pop-up screen displays. 7. Configure the account settings as described in the following table. Setting Description Account Name Enter a unique account name. Only alphanumerical characters and underscore characters (_) are supported. Amount Enter the total amount that is charged for the period during which access is available.
ProSAFE Wireless Controller WC7600 Setting Description Expiry From the menu, select one of the following periods, and enter a valid number in the field to the left of the menu: • Hour(s). The expiration period is measured in one or more hours. • Day(s). The expiration period is measured in one or more days. • Week(s). The expiration period is measured in one or more weeks. • Month(s). The expiration period is measured in one or more months.
ProSAFE Wireless Controller WC7600 The Captive Portal Users screen displays. The following figure contains some account examples. 6. Click the Add button. The Add User pop-up screen displays. 7. Configure the user settings as described in the following table. Setting Description User Name Enter a unique user name. Only alphanumerical characters and underscore characters (_) are supported.
ProSAFE Wireless Controller WC7600 Setting Description Password Use one of the following methods to populate the password fields. Method one: 1. Enter a password in the Password field. 2. Confirm the password in the Confirm Password field. Method two: Click the Generate button. A password is generated automatically. Expiry Select one of the following radio buttons, all of which are mutually exclusive: • Account. Select a captive portal account from the menu.
ProSAFE Wireless Controller WC7600 The User Management screen displays with the Management tab and associated screen in view. 5. Click one of the following tabs: • Management • WiFi Clients • Captive Portal Account • Captive Portal Users 6. Select the radio button that corresponds to the user or account that you want to change. 7. Click the Edit button. A pop-up screen displays. 8. Change the user or account settings. 9. Click the Apply button.
ProSAFE Wireless Controller WC7600 • Captive Portal Account • Captive Portal Users 6. Select the radio button that corresponds to the user or account that you want to remove. 7. Click the Remove button. The user or account is removed from the user table. Export a List of Users or Accounts You can export a list of users or account as a comma-separated values (CSV) file. To export a list of users or accounts: 1. Open a web browser.
9.
ProSAFE Wireless Controller WC7600 Basic and Advanced Wireless and QoS Configuration Concepts It is important to know how to configure your network and decide which configuration model better fits your needs, basic or advanced. Once you follow one, it is easy to use the same configuration model for the wireless and Quality of Service (QoS) settings. Before you configure the wireless settings, read Basic and Advanced Setting Concepts on page 22. • • • Basic wireless settings.
ProSAFE Wireless Controller WC7600 By default, the IP address is 192.168.0.250. If you have not yet assigned another IP address to the wireless controller, type http://192.168.0.250. The wireless controller’s login screen displays. 2. Enter your user name and password. If you have not yet personalized your user name and password, enter admin for the user name and password for the password, both in lowercase letters. 3. Click the Login button.
ProSAFE Wireless Controller WC7600 Configure the Radio for an Advanced Profile Group You can schedule the radio for specific groups to match their network usage. For example, during registration, a school could leave the radios on for the main office or administration building, and turn off radios in buildings that contain only classrooms that are not in use. To schedule the radio for an advanced profile group: 1. Open a web browser.
ProSAFE Wireless Controller WC7600 6. Configure the settings as described in the following table: Setting Description Current Time This field is a nonconfigurable field that displays the current time for the wireless controller. Schedule Radio On/Off You can specify either when the radio is on by selecting the On radio button or when it is off by selecting the Off radio button. Schedule at From the menus, specify the time (hours and minutes) when you want to turn the radio either on or off.
ProSAFE Wireless Controller WC7600 To configure wireless settings for the basic profile group: 1. Open a web browser. In the browser’s address field, type the http:// followed by the IP address that you assigned to the wireless controller. By default, the IP address is 192.168.0.250. If you have not yet assigned another IP address to the wireless controller, type http://192.168.0.250. The wireless controller’s login screen displays. 2. Enter your user name and password.
ProSAFE Wireless Controller WC7600 5. Click the tab for the radio for which you want to configure the wireless settings. 6. Select the Turn Radio On check box. The wireless settings become accessible and you can configure them. If you cannot select the Turn Radio On check box, see the requirements are the beginning of this section. 7. Configure the settings as described in the following table: Setting Description Wireless Mode The selections that are available depend on the selected radio mode.
ProSAFE Wireless Controller WC7600 Setting Description Beacon Interval (100-1000) Enter the time interval for each beacon transmission that allows the access point to synchronize the wireless network. Aggregation Length (1024-65535) Enter the maximum length of aggregated MAC protocol data unit (AMPDU) packets. (802.11n only) Larger aggregation lengths could lead to better network performance. Aggregation is a mechanism used to achieve higher throughput. AMPDU (802.
ProSAFE Wireless Controller WC7600 Setting Description ARP Suppression Select the enable radio button to enable Address Resolution Protocol (ARP) suppression. ARP suppression decreases the management traffic that the wireless controller must handle. ARP suppression is enabled by default and applies to the wired interface only.
ProSAFE Wireless Controller WC7600 If you have not yet personalized your user name and password, enter admin for the user name and password for the password, both in lowercase letters. 3. Click the Login button. The wireless controller’s web management interface opens and displays the Summary screen. 4. Select Configuration > Wireless > Basic > Wireless. The Basic Wireless Settings screen displays. 5. Click the tab for the radio for which you want to configure the wireless settings.
ProSAFE Wireless Controller WC7600 6. Configure the settings in the table at the bottom of the screen as described in the following table: Setting Description AP Name The name of the access point. Access Point Channel Override these settings only if you have a specific need. From the menu, select a channel and frequency for the access point to operate in. Note: Changing a channel might temporarily affect the traffic on the access point.
ProSAFE Wireless Controller WC7600 4. Select Configuration > Wireless > Advanced > Wireless. The Advanced Wireless Settings screen displays: 5. Click the tab for the profile group for which you want to configure the wireless settings. 6. Click the tab for the radio for which you want to configure the wireless settings. 7. Select the Turn Radio On check box. The wireless settings become accessible and you can configure them.
ProSAFE Wireless Controller WC7600 Setting Description Wireless Mode The selections that are available depend on the selected radio mode. From the menu select the wireless mode: • 802.11b/bg/ng mode: - 802.11b. - 802.11bg. - 802.11ng. This is the default setting. • 802.11a/na mode: - 802.1a. - 802.11na. This is the default setting. Note: If you select 802.11bg or 802.11b mode, both 802.11n- and 802.11g-compliant devices can connect to the access points. However, if you select 802.11ng mode, 802.
ProSAFE Wireless Controller WC7600 Setting Description AMPDU (802.11n only) Select the enable radio button to allow the aggregation of several MAC frames into a single large frame to achieve higher throughput. Enabled is the default setting. Enabling AMPDU could lead to better network performance. Select the disable radio button to disable this option. RIFS Transmission (802.
ProSAFE Wireless Controller WC7600 Setting Description ARP Suppression Select the enable radio button to enable Address Resolution Protocol (ARP) suppression. ARP suppression decreases the wireless broadcast traffic over the air and improves the airtime. ARP suppression is enabled by default and applies to the wireless interface.
ProSAFE Wireless Controller WC7600 If you have not yet personalized your user name and password, enter admin for the user name and password for the password, both in lowercase letters. 3. Click the Login button. The wireless controller’s web management interface opens and displays the Summary screen. 4. Select Configuration > Wireless > Advanced > Wireless. The Advanced Wireless Settings screen displays. 5. Click the tab for the profile group for which you want to configure the wireless settings. 6.
ProSAFE Wireless Controller WC7600 7. Configure the settings in the table at the bottom of the screen as described in the following table. Setting Description AP Name The name of the access point. Access Point Channel Override these settings only if you have a specific need. From the menu, select a channel and frequency for the access point to operate in. Note: Changing a channel might temporarily affect the traffic on the access point.
ProSAFE Wireless Controller WC7600 Channel allocation is a global feature that applies to all access points. (If you disable channel allocation, it is globally disabled for all access points.) The allocated channels also apply to all access points, irrespective of whether they are managed in profiles of the basic profile group or profiles of an advanced profile group.
ProSAFE Wireless Controller WC7600 The Channel Allocation screen displays: 5. Configure the settings as described in the following table: Setting Description Automatic channel allocation Ensure that the enable radio button is selected during normal operation. Automatic channel allocation distributes channels across the managed access points to reduce interference. To disable automatic channel allocation, select the disable radio button.
ProSAFE Wireless Controller WC7600 Setting Description Prevent channel change during Active voice call Note: If the wireless controller is prevented from reallocating a channel because it is in use, the wireless controller checks again at the next scheduled channel allocation.
ProSAFE Wireless Controller WC7600 coverage hole. In such a situation, the other access points increase their transmit power. WLAN healing is configured per security profile group and is active among access points that share a common security configuration. You can configure centralized RF management for the basic profile group on the basic RF Management screen. If you use advanced profile groups, you can use the advanced RF Management screen to customize settings for each advanced profile group.
ProSAFE Wireless Controller WC7600 2. Enter your user name and password. If you have not yet personalized your user name and password, enter admin for the user name and password for the password, both in lowercase letters. 3. Click the Login button. The wireless controller’s web management interface opens and displays the Summary screen. 4. Select Configuration > Wireless > Basic > RF Management.
ProSAFE Wireless Controller WC7600 Setting Description Automatic Tx Power Control Select the enable radio button to enable automatic Tx power control: • When a client attempts to connect to an access point at low power, the access point’s Tx power is automatically increased above the default level. • When coverage areas overlap, the access point’s Tx power is automatically decreased below default level. By default, automatic Tx power control is enabled.
ProSAFE Wireless Controller WC7600 To configure RF management for access points in an advanced profile group: 1. Open a web browser. In the browser’s address field, type the http:// followed by the IP address that you assigned to the wireless controller. By default, the IP address is 192.168.0.250. If you have not yet assigned another IP address to the wireless controller, type http://192.168.0.250. The wireless controller’s login screen displays. 2. Enter your user name and password.
ProSAFE Wireless Controller WC7600 6. Configure the settings as described in the following table. Setting Description TX Power Settings Default Tx Power Make a selection from the menu to specify how the transmission (Tx) power is configured on the access points: Full, Half, Quarter, Eighth, or Minimum. By default, the selection from the menu is Half. When automatic Tx power control is enabled, the selection from the menu is used as the initial power level for the access points.
ProSAFE Wireless Controller WC7600 Manage the Preferred Bands This feature applies only to WNDAP620 access points. The WNDAP620 access point can function in either the 802.11b/bg/ng band or the 802.11a/na band, but does not support concurrent band operation. The preferred band feature lets you switch between the bands. The selected band applies to all WNDAP620 access points in one profile group.
ProSAFE Wireless Controller WC7600 5. Select one of the following radio buttons: • 802.11b/bg/ng. The WNDAP620 access points function in the combined 802.11b, 802.11bg, and 802.11ng band. By default, the 802.11b/bg/ng radio button is selected. • 802.11a/na. The WNDAP620 access points function in the combined 802.11a and 802.11na band. 6. Click the Apply button. All WNDAP620 access points in the basic profile group now operate in the selected band.
ProSAFE Wireless Controller WC7600 The advanced Preferred Band screen displays: 5. Select one of the following radio buttons: • 802.11b/bg/ng. The WNDAP620 access points function in the combined 802.11b, 802.11bg, and 802.11ng band. By default, the 802.11b/bg/ng radio button is selected. • 802.11a/na. The WNDAP620 access points function in the combined 802.11a and 802.11na band. 6. Click the Apply button. All WNDAP620 access points in the selected advanced profile group now operate in the selected band.
ProSAFE Wireless Controller WC7600 • Best Effort. The medium priority queue with medium delay is given to this queue. Most standard IP applications use this queue. • Background. Low priority queue with high throughput. Applications, such as FTP, that are not time-sensitive but require high throughput can use this queue. QoS prioritization and coordination of wireless medium access is enabled automatically.
ProSAFE Wireless Controller WC7600 The Advanced QoS Settings screen displays: 5. Click the tab for the profile group for which you want to configure the QoS settings. 6. Click the tab for the radio for which you want to configure the QoS settings. 7. Configure the settings as described in the following table: Setting Description AIFS Specify a wait time (in milliseconds) for data frames. Valid values for arbitration inter-frame space (AIFS) are 1 through 255.
ProSAFE Wireless Controller WC7600 Setting Description CwMin Specify an upper limit (in milliseconds) of a range from which the initial random backoff wait time is determined. Valid values for this field are 1, 3, 7, 15, 31, 63, 127, 255, 511, or 1023. The value for the minimum contention window (CwMin) must be lower than the value for the maximum contention window (CwMax). The following are the default values for the AP EDCA parameters: • Data 0 (Best Effort). 15 • Data 1 (Background).
ProSAFE Wireless Controller WC7600 Manage Load Balancing Load balancing lets you balance wireless clients over the managed access points of one model, taking the following aspects into account: • The maximum number of clients that can connect to the access point model. • The received signal strength indicator (RSSI) of the wireless clients.
ProSAFE Wireless Controller WC7600 Configure Load Balancing You can configure load balancing for each model of the managed access points. To configure load balancing for all access points of one model: 1. Open a web browser. In the browser’s address field, type the http:// followed by the IP address that you assigned to the wireless controller. By default, the IP address is 192.168.0.250. If you have not yet assigned another IP address to the wireless controller, type http://192.168.0.250.
ProSAFE Wireless Controller WC7600 6. Configure the settings as described in the following table: Setting Description Max Client Drag the slider to specify or enter the maximum number of wireless clients that can connect to each radio of an access point at one time. You can select a value of 64 to allow the maximum number of clients that a radio of an access point can support.
ProSAFE Wireless Controller WC7600 Configure Rate Limiting for the Basic Profile Group In the basic profile group, for each radio mode (802.11b/bg/ng mode and 802.11a/na mode), rate limiting per profile adds up to a maximum of 100 percent. (It can be less than 100 percent.) To configure rate limiting for the basic profile group: 1. Open a web browser. In the browser’s address field, type the http:// followed by the IP address that you assigned to the wireless controller.
ProSAFE Wireless Controller WC7600 Configure Rate Limiting for an Advanced Profile Group For each profile group, and for each radio mode (802.11b/bg/ng mode and 802.11a/na mode), rate limiting per profile adds up to a maximum of 100 percent. (It can be less than 100 percent.) To configure rate limiting for an advanced profile group: 1. Open a web browser. In the browser’s address field, type the http:// followed by the IP address that you assigned to the wireless controller.
ProSAFE Wireless Controller WC7600 7. For each profile on a wireless radio in the selected profile group, specify the rate limit as a percentage. You can drag the sliders to adjust the values in the Rate Limit fields to the right of the sliders. Make sure that the total percentages of all profiles on one wireless radio in the selected profile group do not exceed 100 percent. 8. Click the Apply button.
10.
ProSAFE Wireless Controller WC7600 Manage the Configuration File This section includes the following subsections: • Back Up the Configuration File • Restore the Configuration File • Upgrade the Firmware The configuration settings of the wireless controller are stored in a configuration file on the wireless controller. This file can be saved (backed up) to a computer, retrieved (restored) from the computer, cleared to factory default settings, and replaced by a newer version (upgraded).
ProSAFE Wireless Controller WC7600 The Backup/Restore screen displays: 5. Click the Backup button. A dialog box displays, showing the file name of the backup file. The backup file has the following format: backup.tar.gz. 6. To save the configuration file, follow the instructions of your browser. Restore the Configuration File Restore only settings that were backed up from a WC7600 wireless controller.
ProSAFE Wireless Controller WC7600 WARNING: When you click the Apply button to restore the configuration file, do not try to go online, turn off the wireless controller, shut down the computer, or do anything else to the wireless controller until the wireless controller finishes rebooting. When the Status LED turns green, wait a few more seconds before you do anything. 7. Click the Apply button. The configuration file is loaded onto the wireless controller, and the wireless controller reboots.
ProSAFE Wireless Controller WC7600 If you have not yet personalized your user name and password, enter admin for the user name and password for the password, both in lowercase letters. 4. Click the Login button. The wireless controller’s web management interface opens and displays the Summary screen. 5. Select Maintenance > Upgrade > Firmware Upgrade. The Firmware Upgrade screen displays. The following figure shows the fields that display when you select the FTP radio button.
ProSAFE Wireless Controller WC7600 Setting Description Server Parameters section (TFTP and FTP only) Server IP Enter the IP address of the TFTP or FTP server. File Name Enter the file name of the firmware. User Name (FTP only) Enter the user name to access the FTP server. Password (FTP only) Enter the password to access the FTP server. Boot Information section Active Partition This field is an informational field that displays the active partition and the current firmware version.
ProSAFE Wireless Controller WC7600 Note: After you have upgraded the firmware, if the browser does not display the latest features of the web management interface, clear the browser’s cache, and refresh the screen. Reboot the Wireless Controller The Reboot/Reset Controllers screen lets you reset the wireless controller. To reboot the wireless controller: 1. Open a web browser. In the browser’s address field, type the http:// followed by the IP address that you assigned to the wireless controller.
ProSAFE Wireless Controller WC7600 Reset the Wireless Controller You can perform a hard or soft reset of the wireless controller: • Hard reset. The settings of the wireless controller are restored to factory default settings. This reset has the same function as the Reset button on the front panel. • Soft reset. Saves the IP and VLAN addresses and managed access point list but clears all other settings such as profiles, profile groups, and authentication servers.
ProSAFE Wireless Controller WC7600 WARNING: When you have selected the hard radio button and you click the Apply button, do not try to go online, turn off the wireless controller, shut down the computer, or do anything else to the wireless controller until the wireless controller finishes rebooting. When the Status LED turns green, wait a few more seconds before you do anything. 7. Click the Apply button.
ProSAFE Wireless Controller WC7600 Manage Remote Access Enable SNMP to allow SNMP network management software, such as HP OpenView, to monitor the wireless controller by using SNMPv1 or SNMPv2c protocol. You can configure the wireless controller through SNMP, except for the following features: • Guest access management • RF management • Stacking management Note: The wireless controller supports SSH through the console port.
ProSAFE Wireless Controller WC7600 5. Enable SNMP and configure the settings as described in the following table: Setting Description SNMP Select the SNMP check box to enable SNMP for the wireless controller. Read-Only Community Name Enter the community string that allows the SNMP manager to read the wireless controller’s MIB objects. The default setting is public.
ProSAFE Wireless Controller WC7600 Specify Session Time-Outs If an HTTP session times out, the user is redirected to the login screen for password verification. To specify the length of the HTTP session time-out for the wireless controller: 1. Open a web browser. In the browser’s address field, type the http:// followed by the IP address that you assigned to the wireless controller. By default, the IP address is 192.168.0.250.
ProSAFE Wireless Controller WC7600 Query the System Logs The information that is stored in the system logs and that you can query depends on the log settings. For information about how to configure which information is recorded and stored in the logs, see Configure Log Settings on page 75. To query the system logs for an access point, client, or SSID: 1. Open a web browser. In the browser’s address field, type the http:// followed by the IP address that you assigned to the wireless controller.
ProSAFE Wireless Controller WC7600 5. (Optional) In the Search field, enter the status (for example, Connected or Disconnected), IP address, MAC address, model, or name of an access point for which you want to query the logs. The table displays only the access point or access points that match the information that you entered in the Search field. 6.
ProSAFE Wireless Controller WC7600 Save the System Logs You can save the system logs to a zipped log file on your computer. To save all system logs: 1. Open a web browser. In the browser’s address field, type the http:// followed by the IP address that you assigned to the wireless controller. By default, the IP address is 192.168.0.250. If you have not yet assigned another IP address to the wireless controller, type http://192.168.0.250. The wireless controller’s login screen displays. 2.
ProSAFE Wireless Controller WC7600 The wireless controller’s web management interface opens and displays the Summary screen. 4. Select Maintenance > Logs & Alerts > Logs. The Query System Logs screen displays. 5. Click the Clear button. View Alerts and Events The wireless controller lets you view the following alerts and events: • System alerts. System alerts such as an access point coming up or being shut down, the wireless controller coming up or being shut down, and a firmware upgrade. • RF events.
ProSAFE Wireless Controller WC7600 4. Select Maintenance > Logs & Alerts > System Alerts. The System Alerts screen displays: 5. If the table contains many entries, navigate through the table by using the following buttons and menu that display at the bottom of the table: • To move to the next page, click the Next button. • To move to the previous page, click the Previous button. • To change the number of entries onscreen, from the Entry Per Page menu, select 20, or 40, or 60, and so on, or All. 6.
ProSAFE Wireless Controller WC7600 The wireless controller’s login screen displays. 2. Enter your user name and password. If you have not yet personalized your user name and password, enter admin for the user name and password for the password, both in lowercase letters. 3. Click the Login button. The wireless controller’s web management interface opens and displays the Summary screen. 4. Select Maintenance > Logs & Alerts > RF Events. The RF Events screen displays: 5.
ProSAFE Wireless Controller WC7600 To view load-balancing events: 1. Open a web browser. In the browser’s address field, type the http:// followed by the IP address that you assigned to the wireless controller. By default, the IP address is 192.168.0.250. If you have not yet assigned another IP address to the wireless controller, type http://192.168.0.250. The wireless controller’s login screen displays. 2. Enter your user name and password.
ProSAFE Wireless Controller WC7600 NETGEAR recommends that you save the events before you clear them. • Export. Saves the events to your computer. To save the events, follow the directions of your browser. View Rate-Limit Events The wireless controller generates alerts for rate-limit events such as the violation of a rate-limit threshold. To view rate-limit events: 1. Open a web browser.
ProSAFE Wireless Controller WC7600 5. If the table contains many entries, navigate through the table by using the following buttons and menu that display at the bottom of the table: • To move to the next page, click the Next button. • To move to the previous page, click the Previous button. • To change the number of entries onscreen, from the Entry Per Page menu, select 20, or 40, or 60, and so on, or All. 6. (Optional) Click one of the following buttons: • Refresh. Displays the latest events onscreen.
ProSAFE Wireless Controller WC7600 The wireless controller’s web management interface opens and displays the Summary screen. 4. Select Maintenance > Logs & Alerts > Stacking. The Stacking screen displays: 5. If the table contains many entries, navigate through the table by using the following buttons and menu that display at the bottom of the table: • To move to the next page, click the Next button. • To move to the previous page, click the Previous button.
ProSAFE Wireless Controller WC7600 • Registration. Allows you to register your licenses. For information, see Register Your Licenses with the License Server on page 72. • Advanced. Lets you retrieve your licenses. This screen displays relevant information only if you have received a replacement unit from NETGEAR. Under normal circumstances, you do not need this screen. For information, see Retrieve Your Licenses on page 222.
ProSAFE Wireless Controller WC7600 The Inventory screen displays: The following table describes the fields of the screen: Setting Description Summary section Total AP License The number of access points that your licenses support. Nmode License Status Availability of the 802.11n mode license. (This license is available by default, indicated by either Preinstalled or Available.) Used License Count The number of access points that are used from the total number that your licenses support.
ProSAFE Wireless Controller WC7600 Setting Description Key Type The type of the key that determines the number of access points that are supported and the mode that is supported. Key Status The status of the key (Registering key with server or Registered). 6. (Optional) Click the Refresh button. Your license information is refreshed onscreen.
ProSAFE Wireless Controller WC7600 The Advanced screen displays. 8. Click the Replace button. The wireless controller connects to the license update server and retrieves your licenses. Reboot Access Points Under normal circumstances, you do not need to reboot an access point. If a problem occurs with an access point, you can reboot it to see if this resolves the problem. To reboot an access point: 1. Open a web browser.
ProSAFE Wireless Controller WC7600 The Reboot Access Points screen displays: 5. (Optional) In the Search field, enter the IP address, MAC address, model, or name of an access point that you want to reboot, or enter other information to narrow down the information that is displayed in the table. The table displays only the access point or access points that match the information that you entered in the Search field. 6.
ProSAFE Wireless Controller WC7600 Change the Multicast Firmware Upgrade Settings By default, the wireless controller uses IP range 239.255.0.0–239.255.0.255 for the multicast firmware upgrade process. If your network requires that the wireless controller uses a different multicast IP range, you can configure the IP range on the AP Upgrade Settings screen. To configure another multicast IP address range and port for the firmware upgrade process: 1. Open a web browser.
ProSAFE Wireless Controller WC7600 Disable Multicast Firmware Upgrade There might be network configurations in which you cannot use multicast. If you disable multicast on the AP Upgrade Setting screen, the firmware upgrade process uses unicast, which is a slower process because the firmware upgrade is applied to groups of access points instead of simultaneously to all access points.
11.
ProSAFE Wireless Controller WC7600 Stacking Concepts The wireless controller supports stacking of up to three units for management of up to 150 access points through purchased licensing (see Licenses on page 20). In a stack, one wireless controller functions as the master controller, and the other two wireless controllers function as slave controllers.
ProSAFE Wireless Controller WC7600 For ease of management, you can configure location-based profiles on the master controller and assign a location to each slave controller. Stacking allows wireless clients to roam from an access point that is managed by one of the controllers in the stacking group to any access point managed by the other controllers in the same stacking group. The master and slave controllers in a stack have the following capacities: • • Master controller.
ProSAFE Wireless Controller WC7600 Configure a Stack A stack can consist of up to three wireless controllers, one of which is the master controller and two of which are slave controllers. The following procedure assumes that you have already configured the system settings, profiles, security settings, and wireless settings on the master controller, and that you have already configured the system settings on the slave controller.
ProSAFE Wireless Controller WC7600 The Add Settings pop-up screen displays: 6. Configure the settings as explained in the following table: Setting Description Controller IP Enter the IP address of the controller. UserName The user name field is a nonconfigurable field that displays the user name with which you logged in to the web management interface of the wireless controller. Password Enter the password to access the controller. 7. Click the Add button.
ProSAFE Wireless Controller WC7600 Setting Description Local IP The local IP address of the wireless controller in the stacking group. This IP address remains constant. The role of the wireless controller (that is, master or slave) does not affect the local IP address. Master IP The IP address of the master in the stack. 9. (Optional) Synchronize the profiles, captive portals, and user management settings of the master controller to the slave controller in the stack: a.
ProSAFE Wireless Controller WC7600 The wireless controller’s web management interface opens and displays the Summary screen. 4. Select Stacking > Stacking. The Stacking screen displays: 5. In the Stacking table, select the radio button for the slave controller that you want to delete. Note: You cannot delete the master controller. 6. Click the Delete button. The slave controller is removed from the stack.
ProSAFE Wireless Controller WC7600 To select a wireless controller for configuration in a stack with two controllers: 1. Open a web browser. In the browser’s address field, type the http:// followed by the IP address that you assigned to the wireless controller. By default, the IP address is 192.168.0.250. If you have not yet assigned another IP address to the wireless controller, type http://192.168.0.250. The wireless controller’s login screen displays. 2. Enter your user name and password.
ProSAFE Wireless Controller WC7600 The IP address of the other wireless controller in the stack displays in the controller selection menu. 6. In the controller selection menu, click the IP address (192.168.0.7) of the other wireless controller in the stack. The web management interface accesses the other wireless controller in the stack. The controller selection menu shows the IP address of the other wireless controller to the left. Self is no longer shown.
ProSAFE Wireless Controller WC7600 In the controller selection menu, Self displays to the left of the IP address. 8. In the controller selection menu, click Self. The web management interface accesses the original wireless controller in the stack. The controller selection menu once again shows Self and the IP address of the other wireless controller is no longer shown.
ProSAFE Wireless Controller WC7600 Manage Redundancy for a Single Controller <>The wireless controller supports N:1 redundancy with failover <> . Redundancy is implemented through the use of the Virtual Router Redundancy Protocol (VRRP). VRRP Redundancy Concepts You can configure two controllers to form a redundancy group. You then designate one controller in the redundancy group as the primary controller and the other wireless controller as the redundant controller.
ProSAFE Wireless Controller WC7600 Before failover Primary controller controller IP 192.168.1.3 local IP 192.168.1.7 AP cloud VRRP ID 1 Redundant controller local IP 192.168.1.6 Figure 21. The following figure shows the settings on the Stacking/Redundancy screen before a failover has occurred. Figure 22.
ProSAFE Wireless Controller WC7600 After failover Down controller local IP 192.168.1.7 VRRP ID 1 Active controller AP cloud controller IP 192.168.1.3 local IP 192.168.1.6 Figure 23. Configure a Single Controller with Redundancy To enable redundancy, configure the redundancy settings on both the primary and redundant controllers. To configure a single controller with redundancy: 1. Log in to the wireless controller. For more information, see Log In to the Wireless Controller on page 52. 2.
ProSAFE Wireless Controller WC7600 4. Configure the settings as explained in the following table: Setting Description Controller IP Enter the local IP address of the redundant controller. This IP address remains assigned to the redundant controller to allow it to be identified before and after a failover. UserName The user name is a nonconfigurable field that displays the user name with which you logged in to the web management interface of the wireless controller.
ProSAFE Wireless Controller WC7600 Setting Description VRRP ID [1-255] For the primary controller, enter a number from 1 through 255 as the VRRP ID. Local IP For the primary controller, enter a local IP address. If a failover occurs, this IP address remains assigned to the primary controller and does not transfer to the redundant controller to let you identify the primary controller before and after the failover.
ProSAFE Wireless Controller WC7600 When the primary controller that went down and for which the redundant controller took over comes back up and is stable, a switchback occurs automatically, in which case ownership of the controller IP address is returned to the primary controller that came back up. The redundant controller reassumes its passive position, and redundancy is once again available for all primary controllers in the redundancy group.
ProSAFE Wireless Controller WC7600 Figure 24. The following figure shows the N:1 settings on the Stacking/Redundancy screen before a failover has occurred. Figure 25.
ProSAFE Wireless Controller WC7600 The following figure shows an N:1 configuration with three primary controllers and one redundant controller after a failover has occurred: Figure 26. Configure a Redundancy Group with N:1 Redundancy To enable N:1 redundancy, configure the redundancy settings on the primary and redundant controllers. In a N:1 redundancy group, there are two or three primary controllers. To configure N:1 redundancy: 1. Log in to the wireless controller.
ProSAFE Wireless Controller WC7600 4. Configure the settings as explained in the following table: Setting Description Controller IP Enter the local IP address of the redundant controller. This IP address remains assigned to the redundant controller to allow it to be identified before and after a failover. UserName The user name is a nonconfigurable field that displays the user name with which you logged in to the web management interface of the wireless controller.
ProSAFE Wireless Controller WC7600 Setting Description VRRP ID [1-255] For each primary controller in the redundancy group, enter a number from 1 through 255 as the VRRP ID. This enables each primary controller to have a unique relationship with the redundant controller. Local IP For each primary controller in the redundancy group, enter a local IP address.
ProSAFE Wireless Controller WC7600 3. Change the settings as explained in the following table. Setting Description Controller IP Enter the local IP address of the redundant controller. This IP address remains assigned to the redundant controller to allow it to be identified before and after a failover. UserName The user name is a nonconfigurable field that displays the user name with which you logged in to the web management interface of the wireless controller.
12. Monitor the Wireless Network and Its Components 12 This chapter includes the following sections: • Monitor the Network • Monitor the Wireless Controller • Monitor the SSIDs on the Wireless Controller • Monitor Local Clients in the Network Note: The information that is shown in the figures in this chapter is not always consistent. That is, the information in one figure might be for a different network configuration than the information in another figure.
ProSAFE Wireless Controller WC7600 Monitor the Network Note: The Network configuration menu tab displays under the Monitor main navigation menu tab only if you have configured stacking. If you have not configured stacking, see Monitor the Wireless Controller on page 264. You can view a summary of the status of all wireless controllers in the network and their components and view individual components: • Summary. See View the Network Summary Screen. • Controllers.
ProSAFE Wireless Controller WC7600 4. Select Monitor > Network > Summary. The following table describes the fields of the Stacking/Redundancy Status table, the Network Status table, and the Rogue Access Points section of the screen. Item Description Stacking/Redundancy Status Role The role of the wireless controller in a stacking configuration (Master or Slave). Service IP The service IP address of the wireless controller.
ProSAFE Wireless Controller WC7600 Item Access Points Description Up The number of access points that a wireless controller manages and that are running correctly. This number is shown for each wireless controller in the stack and for all wireless controllers together. Down The number of access points that a wireless controller manages but cannot ping. This number is shown for each wireless controller in the stack and for all wireless controllers together.
ProSAFE Wireless Controller WC7600 2. Enter your user name and password. If you have not yet personalized your user name and password, enter admin for the user name and password for the password, both in lowercase letters. 3. Click the Login button. The wireless controller’s web management interface opens and displays the Summary screen. 4. Select Monitor > Network > Controller.
ProSAFE Wireless Controller WC7600 View the Access Points in the Network You can monitor all managed access points in the network and see which wireless controller manages a particular access point. To view the network Access Point screen: 1. Open a web browser. In the browser’s address field, type the http:// followed by the IP address that you assigned to the wireless controller. By default, the IP address is 192.168.0.250.
ProSAFE Wireless Controller WC7600 The following table describes the fields of the Access Point table: Item Description Select The radio button that lets you select the access point. Status The status of the access point (healthy or down). Name The name of the access point (see Change Access Point Information on the Managed AP List on page 133). Model The model of the access point (WNAP210v2, WNAP320, WNDAP350, WNDAP360, WNDAP380R, WNDAP620, or WNDAP660). MAC The MAC address of the access point.
ProSAFE Wireless Controller WC7600 Item Description 2.4/5 GHz Channel The active 2.4 GHz or 5 GHz channel on the access point. This information can change after initial configuration of the access point because of automatic channel allocation. The color coding specifies the channel utilization on each radio and has the following meaning: • Green. 0–40 percent utilization. • Light green. 41–60 percent utilization. • Orange. 61–80 percent utilization. • Red. 81–100 percent utilization. • NA.
ProSAFE Wireless Controller WC7600 The AP Details pop-up screen displays.
ProSAFE Wireless Controller WC7600 The following table describes the fields of the AP Details screen: Item Description AP Info This information is self-explanatory. Profile Info For each security profile that is configured on the selected access point, the following information displays: Type The type of profile (802.11b/bg/ng or 802.11a/na). SSID The wireless network SSID for the security profile. Security The security mode (Open, WEP, WPA, WPA2, or WPA/WPA2) for the security profile.
ProSAFE Wireless Controller WC7600 11. Click the OK button. The AP Details screen closes, and the network Access Point screen displays again. View the Clients in the Network You can view all clients that are connected to managed access points and see which wireless controller manages a particular access point. To view the network Clients screen: 1. Open a web browser. In the browser’s address field, type the http:// followed by the IP address that you assigned to the wireless controller.
ProSAFE Wireless Controller WC7600 Because this screen is a wide screen, it is shown in the following two figures: Monitor the Wireless Network and Its Components 259
ProSAFE Wireless Controller WC7600 The following table describes the fields of the network Clients table: Item Description Select The radio button that lets you select the client. MAC The MAC address of the wireless client. IP The IP address of the wireless client. Note the following: • If clients and the access point to which they are connected are in the same VLAN, all receive an IP address from the same DHCP server.
ProSAFE Wireless Controller WC7600 • To move to the previous page, click the Previous button. • To change the number of entries onscreen, from the Entry Per Page menu, select 20, or 40, or 60, and so on, or All. 8. To display the latest information onscreen, click the Refresh button. 9. To export the table: a. Click the Export button. b. To save the file, follow the directions of your browser. 10. To display details about a client: a.
ProSAFE Wireless Controller WC7600 Item Description Auth The security mode that the wireless client is using to connect to the access point (Open, WEP, WPA, WPA2, or WPA/WPA2). Client Type The wireless mode that the wireless client is using to connect to the access point (802.11ng, 802.11bg, 802.11b, 802.11na, or 802.11a). Cipher The type of encryption that the wireless client is using (WEP, AES, TKIP, or TKIP + AES). AID The association ID of the client.
ProSAFE Wireless Controller WC7600 The wireless controller’s web management interface opens and displays the Summary screen. 4. Select Monitor > Network > Profiles. The following table describes the fields of the Profiles table: Item Description SSID The wireless network SSID for the security profile. Profile Name The name of the security profile. Security The security mode (Open, WEP, WPA, WPA2, or WPA/WPA2) for the security profile. Radio Mode The wireless mode for the security profile (802.
ProSAFE Wireless Controller WC7600 7. If the table contains many entries, navigate through the table by using the following buttons and menu that display at the bottom of the table: • To move to the next page, click the Next button. • To move to the previous page, click the Previous button. • To change the number of entries onscreen, from the Entry Per Page menu, select 20, or 40, or 60, and so on, or All. 8. To display the latest information onscreen, click the Refresh button. 9.
ProSAFE Wireless Controller WC7600 The wireless controller’s login screen displays. 2. Enter your user name and password. If you have not yet personalized your user name and password, enter admin for the user name and password for the password, both in lowercase letters. 3. Click the Login button. The wireless controller’s web management interface opens and displays the Summary screen. 4. Select Monitor > Controller > Summary.
ProSAFE Wireless Controller WC7600 Item Description WPA2 The number of wireless clients that are connected to managed access points using security profiles configured with WPA2. Most Active APs For the most active access points, the following information displays: Name The name of the access point (see Change Access Point Information on the Managed AP List on page 133). Model The model of the access point (WNAP210v2, WNAP320, WNDAP350, WNDAP360, WNDAP380R, WNDAP620, or WNDAP660).
ProSAFE Wireless Controller WC7600 The wireless controller’s login screen displays. 2. Enter your user name and password. If you have not yet personalized your user name and password, enter admin for the user name and password for the password, both in lowercase letters. 3. Click the Login button. The wireless controller’s web management interface opens and displays the Summary screen. 4. Select Monitor > Controller > Usage. Data for the 2.4 GHz network (for the combined 802.11b-, 802.11bg-, and 802.
ProSAFE Wireless Controller WC7600 View Access Points that the Wireless Controller Manages You can monitor all access points that the wireless controller manages. To view the Access Point screen: 1. Open a web browser. In the browser’s address field, type the http:// followed by the IP address that you assigned to the wireless controller. By default, the IP address is 192.168.0.250. If you have not yet assigned another IP address to the wireless controller, type http://192.168.0.250.
ProSAFE Wireless Controller WC7600 The following table describes the fields of the Access Point table: Item Description Select The radio button that lets you select the access point. Status The status of the access point (healthy or down). Name The name of the access point (see Change Access Point Information on the Managed AP List on page 133). Model The model of the access point (WNAP210v2, WNAP320, WNDAP350, WNDAP360, WNDAP380R, WNDAP620, or WNDAP660). MAC The MAC address of the access point.
ProSAFE Wireless Controller WC7600 Item Description 2.4/5 GHz Channel The active 2.4 GHz or 5 GHz channel on the access point. This information can change after initial configuration of the access point because of automatic channel allocation. The color coding specifies the channel utilization on each radio and has the following meaning: • Green. 0–40 percent utilization. • Light green. 41–60 percent utilization. • Orange. 61–80 percent utilization. • Red. 81–100 percent utilization. • NA.
ProSAFE Wireless Controller WC7600 The AP Details pop-up screen displays.
ProSAFE Wireless Controller WC7600 The following table describes the fields of the AP Details screen: Item Description AP Info This information is self-explanatory. Profile Info For each security profile that is configured on the selected access point, the following information displays: Type The type of profile (802.11b/bg/ng or 802.11a/na). SSID The wireless network SSID for the security profile. Security The security mode (Open, WEP, WPA, WPA2, or WPA/WPA2) for the security profile.
ProSAFE Wireless Controller WC7600 11. Click the OK button. The AP Details screen closes, and the Access Point screen displays again. View Clients on Access Points that the Wireless Controller Manages You can view all clients that are connected to access points that the wireless controller manages. To view the Clients screen: 1. Open a web browser. In the browser’s address field, type the http:// followed by the IP address that you assigned to the wireless controller. By default, the IP address is 192.
ProSAFE Wireless Controller WC7600 Because this screen is a wide screen, it is shown in the following two figures: Monitor the Wireless Network and Its Components 274
ProSAFE Wireless Controller WC7600 The following table describes the fields of the Clients table: Item Description Select The radio button that lets you select the client. MAC The MAC address of the wireless client. IP The IP address of the wireless client. Note the following: • If clients and the access point to which they are connected are in the same VLAN, all receive an IP address from the same DHCP server.
ProSAFE Wireless Controller WC7600 • To change the number of entries onscreen, from the Entry Per Page menu, select 20, or 40, or 60, and so on, or All. 8. To display the latest information onscreen, click the Refresh button. 9. To export the table: a. Click the Export button. b. To save the file, follow the directions of your browser. 10. To display details about a client: a. Select the radio button that corresponds to the clients for which you want to see the details. b. Click the Details button.
ProSAFE Wireless Controller WC7600 Item Description Auth The security mode that the wireless client is using to connect to the access point (Open, WEP, WPA, WPA2, or WPA/WPA2). Client Type The wireless mode that the wireless client is using to connect to the access point (802.11ng, 802.11bg, 802.11b, 802.11na, or 802.11a). Cipher The type of encryption that the wireless client is using (WEP, AES, TKIP, or TKIP + AES). AID The association ID of the client.
ProSAFE Wireless Controller WC7600 The wireless controller’s web management interface opens and displays the Summary screen. 4. Select Monitor > Controller > Neighboring Clients. The following table describes the fields of the Neighboring Clients table: Item Description Locate Not applicable. The location functionality will be added in a later release. MAC The MAC address of the neighboring client. RSSI The received signal strength indicator (RSSI) of the neighboring client.
ProSAFE Wireless Controller WC7600 Note: The Locate button is not functional in this release. The location functionality will be added in a later release. View Neighboring Access Points that the Wireless Controller Does Not Manage You can monitor the access points that the wireless controller detects but does not manage. To view the Rogue AP screen: 1. Open a web browser. In the browser’s address field, type the http:// followed by the IP address that you assigned to the wireless controller.
ProSAFE Wireless Controller WC7600 Item Description Last Beacon The last beacon that the access point transmitted. Type The category that the access point belongs to (Neighbor AP or Rogue AP). Classification The status of the access point (Known or Unknown). Name The name of the access point, if a name is assigned. 5. To sort the table, click the double triangle icon or single triangle icon next to a column header. 6.
ProSAFE Wireless Controller WC7600 The wireless controller’s web management interface opens and displays the Summary screen. 4. Select Monitor > Controller > Profiles. The following table describes the fields of the Profiles table: Item Description SSID The wireless network SSID for the security profile. Profile Name The name of the security profile. Security The security mode (Open, WEP, WPA, WPA2, or WPA/WPA2) for the security profile. Radio Mode The wireless mode for the security profile (802.
ProSAFE Wireless Controller WC7600 • To move to the previous page, click the Previous button. • To change the number of entries onscreen, from the Entry Per Page menu, select 20, or 40, or 60, and so on, or All. 8. To display the latest information onscreen, click the Refresh button. 9. To export the table: a. Click the Export button. b. To save the file, follow the directions of your browser.
ProSAFE Wireless Controller WC7600 The following table describes the fields of the DHCP Leases table: Item Description Host Name The host name of the DHCP client. IP The IP address that is allocated to the DHCP client. End Time The DHCP lease end time for the DHCP client. End Date The DHCP lease end date for the DHCP client. MAC The MAC address of the DHCP client. VLAN The VLAN name or number that the DHCP server and DHCP client are using to connect. 5.
ProSAFE Wireless Controller WC7600 If you have not yet personalized your user name and password, enter admin for the user name and password for the password, both in lowercase letters. 3. Click the Login button. The wireless controller’s web management interface opens and displays the Summary screen. 4. Select Monitor > Controller > Captive Portal Users. The following table describes the fields of the Captive Portal Users table: Item Description User Name The login name of the user.
ProSAFE Wireless Controller WC7600 9. To clear all information from the screen and from memory, click the Clear All button. NETGEAR recommends that you save the information before you clear the information. 10. To export the table: a. Click the Export button. b. To save the file, follow the directions of your browser. Monitor the SSIDs on the Wireless Controller You can monitor all access points that function in an SSID. To monitor an active SSID in the network: 1. Open a web browser.
ProSAFE Wireless Controller WC7600 The Active SSID table for the selected SSID displays. Because this screen is a wide screen, it is shown in the following two figures: The following table describes the fields of the Active SSID table with access points: Item Description Select The radio button that lets you select the access point. Name The name of the access point (see Change Access Point Information on the Managed AP List on page 133).
ProSAFE Wireless Controller WC7600 Item Description IP The IP address of the access point. Model The model of the access point (WNAP210v2, WNAP320, WNDAP350, WNDAP360, WNDAP380R, WNDAP620, or WNDAP660). Building The building designation is always Building-1. Floor The floor designation is always Floor-1. 2.4 GHz Channel The configured 2.4 GHz channel on the access point. This information can change after initial configuration of the access point because of automatic channel allocation.
ProSAFE Wireless Controller WC7600 The AP Details pop-up screen displays.
ProSAFE Wireless Controller WC7600 The following table describes the fields of the AP Details screen: Item Description AP Info This information is self-explanatory. Profile Info For each security profile that is configured on the selected access point, the following information displays: Type The type of profile (802.11b/bg/ng or 802.11a/na). SSID The wireless network SSID for the security profile. Security The security mode (Open, WEP, WPA, WPA2, or WPA/WPA2) for the security profile.
ProSAFE Wireless Controller WC7600 11. Click the OK button. The AP Details screen closes, and the SSID Mapping screen displays again. Monitor Local Clients in the Network You can monitor the clients that have been accepted into the wireless network. The Local Client List screen shows all clients in the network, that is, all clients that all wireless controllers in the network manage.
ProSAFE Wireless Controller WC7600 Because this screen is a wide screen, it is shown in the following two figures: Monitor the Wireless Network and Its Components 291
ProSAFE Wireless Controller WC7600 The following table describes the fields of the Clients table on the Local Client List screen: Item Description Select The radio button that lets you select the client. MAC The MAC address of the wireless client. IP The IP address of the wireless client. Location The location of the access point (see Change Access Point Information on the Managed AP List on page 133) to which the wireless client is connected.
ProSAFE Wireless Controller WC7600 9. To display details about a client: a. Select the radio button that corresponds to the clients for which you want to see the details. b. Click the Details button. The Client Details pop-up screen displays: The following table describes the fields of the Client Details screen: Item Description MAC The MAC address of the wireless client. Access Point The name of the access point to which the wireless client is connected.
ProSAFE Wireless Controller WC7600 Item Description RSSI The received signal strength indicator (RSSI) of the wireless client. Tx Power The transmit power of the wireless client. Tx Rate The transmit rate in Mbps of the wireless client. Tx Bytes The number of bytes that the wireless client transmitted. Rx Rate The receive rate in Mbps of the wireless client. Rx Bytes The number of bytes that the wireless client received. Tx packets The number of packets that the wireless client transmitted.
13.
ProSAFE Wireless Controller WC7600 Troubleshoot Basic Functioning After you turn on power to the wireless controller, the following sequence of events should occur: 1. When power is first applied, verify that the Power LED is lit green and that the Status LED is lit yellow. 2. After approximately two minutes, verify the following: a. The Status LED is lit green. b. The left Ethernet port LED is lit for any local port that is connected.
ProSAFE Wireless Controller WC7600 Ethernet Port LEDs Are Not Lit If the Ethernet LEDs do not light when the Ethernet connection is made, check the following: • Make sure that the Ethernet cable connections are secure at the wireless controller and at the hub, switch, or router. • Make sure that power is turned on to the connected hub, switch, or router. • Be sure that you are using the correct cables.
ProSAFE Wireless Controller WC7600 • Run an IP scanner application in your network to discover the IP address of the wireless controller. • Connect a serial cable between a computer and the wireless controller, and use the ipconfig command to discover the IP address of the wireless controller. Check the Internet Browser If the Ethernet cabling and IP address configuration are fine, the Internet browser might prevent you from accessing the web management interface.
ProSAFE Wireless Controller WC7600 Pinging with 32 bytes of data If the path is working, you see this message: Reply from < IP address >: bytes=32 time=NN ms TTL=xxx If the path is not working, you see this message: Request timed out If the path is not functioning correctly, you could have one of the following problems: • Wrong physical connections Make sure that the Ethernet LEDs are lit. If they are off, follow the instructions in Ethernet Port LEDs Are Not Lit on page 297.
ProSAFE Wireless Controller WC7600 When the date shown is January 1, 2000, the wireless controller has not yet successfully reached a network time server. Verify that the wireless controller can reach the Internet. If you have completed configuring the wireless controller, wait at least five minutes and check the date and time again. Resolve Problems with Access Points If you encounter access point discovery or connection problems, the information in this section might help you to resolve these problems.
ProSAFE Wireless Controller WC7600 If the network does not include a DHCP server or if the access point cannot reach the DHCP server, the access point remains in the Connecting state, attempting to obtain an IP address. If the network does not include a DHCP server, configure one on the wireless controller (see Manage the DHCP Server on page 65). When a DHCP server becomes available, the access point can transition from the Connecting state to the Connected state.
ProSAFE Wireless Controller WC7600 The Ping screen displays: 5. In the Ping Count field, enter the number of ping packets to be sent. The default number is 10. 6. From the Access Point menu, select the access point to be pinged. After you have made your selection, the IP address of the access point displays in the IP Address field. 7. Click the Start button. The results are shown in the Ping Result field.
ProSAFE Wireless Controller WC7600 3. Click the Login button. The wireless controller’s web management interface opens and displays the Summary screen. 4. Select Diagnostics > Trace Route. The Trace Route screen displays: 5. From the Access Point menu, select the access point for which you want to trace the route. After you have made your selection, the IP address of the access point displays in the IP Address field. 6. Click the Start button. The results are shown in the TraceRoute Result field.
A.
ProSAFE Wireless Controller WC7600 Factory Default Settings You can restore the wireless controller to its factory default settings on the Reboot/Reset Controllers screen (see Reboot the Wireless Controller on page 204) or by using the Reset button on the front panel (see Use the Reset Button to Restore Default Settings on page 299). The wireless controller returns to the factory configuration settings that are shown in the following table: Table 9.
ProSAFE Wireless Controller WC7600 Table 10. Technical and physical specifications (continued) Feature Default Setting Storage temperatures –20° to 70°C (–4° to 158°F) Storage humidity 95% maximum relative humidity, noncondensing Major regulatory compliance CCC Note: For more information, see the ProSAFE Wireless Controller WC7600 data sheet at http://support.netgear.com/product/WC7600. Password Requirements The following table lists the password requirements. Table 11.
ProSAFE Wireless Controller WC7600 Table 11. Password requirements (continued) Web Management Interface Path Basic profile: 3. Make a selection from the Network Authentication menu. WPA-PSK Restrictions Section in This Manual Allowed Characters Length Hexadecimal 10 fixed 128-bit WEP Hexadecimal 26 fixed 152-bit WEP Hexadecimal 32 fixed TKIP Alphanumerics and Up to 63 special characters, excluding quotes Shared Key 64-bit WEP 1. Select Configuration > Profile > Basic > Radio. 2.
