Brocade Communications Systems Mobility RFS6000 User manual

53-1002515-01
14 May 2012
®
Brocade Mobility RFS4000,
RFS6000, and RFS7000
System Reference Guide
Supporting software release 4.4.0.0 and later

Copyright © 2012 Brocade Communications Systems, Inc. All Rights Reserved.
Brocade, Brocade Assurance, the B-wing symbol, DCX, Fabric OS, MLX, SAN Health, VCS, and VDX are registered trademarks, and
AnyIO, Brocade One, CloudPlex, Effortless Networking, ICX, NET Health, OpenScript, and The Effortless Network are trademarks of
Brocade Communications Systems, Inc., in the United States and/or in other countries. Other brands, products, or service names
mentioned may be trademarks of their respective owners.
Notice: This document is for informational purposes only and does not set forth any warranty, expressed or implied, concerning
any equipment, equipment feature, or service offered or to be offered by Brocade. Brocade reserves the right to make changes to
this document at any time, without notice, and assumes no responsibility for its use. This informational document describes
features that may not be currently available. Contact a Brocade sales office for information on feature and product availability.
Export of technical data contained in this document may require an export license from the United States government.
The authors and Brocade Communications Systems, Inc. shall have no liability or responsibility to any person or entity with
respect to any loss, cost, liability, or damages arising from the information contained in this book or the computer programs that
accompany it.
The product described by this document may contain “open source” software covered by the GNU General Public License or other
open source license agreements. To find out which open source software is included in Brocade products, view the licensing
terms applicable to the open source software, and obtain a copy of the programming source code, please visit
http://www.brocade.com/support/oscd.
Brocade Communications Systems, Incorporated
Document History
Corporate and Latin American Headquarters
Brocade Communications Systems, Inc.
130 Holger Way
San Jose, CA 95134
Tel: [phone]
Fax: [phone]
E-mail: inf[email protected]
Asia-Pacific Headquarters
Brocade Communications Systems China HK, Ltd.
No. 1 Guanghua Road
Chao Yang District
Units 2718 and 2818
Beijing 100020, China
Tel: [phone]
Fax: [phone]
E-mail: [email protected]
European Headquarters
Brocade Communications Switzerland Sàrl
Centre Swissair
Tour B - 4ème étage
29, Route de l'Aéroport
Case Postale 105
CH-1215 Genève 15
Switzerland
Tel: [phone]
Fax: [phone]
E-mail: emea-inf[email protected]
Asia-Pacific Headquarters
Brocade Communications Systems Co., Ltd. (Shenzhen WFOE)
Citic Plaza
No. 233 Tian He Road North
Unit 1308 – 13th Floor
Guangzhou, China
Tel: [phone]
Fax: [phone]
E-mail: [email protected]
Title Publication number Summary of changes Date
Brocade Mobility RFS4000, RFS6000,
and RFS7000 System Reference Guide
53-1002312-01 New Additions for software
version 4.3.0.0
September 2010
Brocade Mobility RFS4000, RFS6000,
and RFS7000 System Reference Guide
53-1002515-01 New Additions for software
version 4.4.0.0
May 2012

Brocade Mobility RFS4000, RFS6000, and RFS7000 System Reference Guide iii
53-1002515-01
Contents
About This Document
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi
Supported hardware and software . . . . . . . . . . . . . . . . . . . . . . . . . . . xi
Document conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi
Text formatting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi
Notes, cautions, and warnings . . . . . . . . . . . . . . . . . . . . . . . . . . xii
Related publications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xii
Getting technical help. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xii
Chapter 1 Overview
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
Hardware Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
Physical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
Software Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
Infrastructure Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
Wireless Switching . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Wired Switching . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Management Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .18
Security Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Supported Access Ports/Points . . . . . . . . . . . . . . . . . . . . . . . . . 26
IEEE Standards Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Standards Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Chapter 2 Switch Web UI Access and Image Upgrades
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Accessing the Switch Web UI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .33
Web UI Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Connecting to the Switch Web UI . . . . . . . . . . . . . . . . . . . . . . . . 33
Switch Password Recovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .35
Upgrading the Switch Image. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
Auto Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .35
Chapter 3 Switch Information
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

iv Brocade Mobility RFS4000, RFS6000, and RFS7000 System Reference Guide
53-1002515-01
Viewing the Switch Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .39
Setting the Switch Country Code . . . . . . . . . . . . . . . . . . . . . . . . 40
Viewing the Switch Configuration . . . . . . . . . . . . . . . . . . . . . . . . 40
Switch Dashboard Details . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42
Viewing Switch Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .49
Viewing Switch Port Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51
Viewing the Port Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . 52
Viewing the Ports Runtime Status . . . . . . . . . . . . . . . . . . . . . . .54
Reviewing Port Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55
Power over Ethernet (PoE). . . . . . . . . . . . . . . . . . . . . . . . . . . . . .60
Editing Port PoE Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
Configuring WAN Interface Cards . . . . . . . . . . . . . . . . . . . . . . . . 62
Viewing Switch Configurations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .63
Viewing the Detailed Contents of a Config File . . . . . . . . . . . . .65
Transferring a Config File. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .67
Viewing Switch Firmware Information . . . . . . . . . . . . . . . . . . . . . . . . 68
Editing the Switch Firmware . . . . . . . . . . . . . . . . . . . . . . . . . . . .69
Enabling Global Settings for the Image Failover . . . . . . . . . . . . 70
Updating the Switch Firmware . . . . . . . . . . . . . . . . . . . . . . . . . . 71
Switch File Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72
Transferring Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .72
Viewing Files. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77
Configuring Automatic Updates . . . . . . . . . . . . . . . . . . . . . . . . . . . . .78
Viewing the Switch Alarm Log. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80
Viewing Alarm Log Details . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81
Viewing Switch Licenses. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82
How to use the Filter Option . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .84
Chapter 4 Network Setup
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85
Displaying the Network Interface. . . . . . . . . . . . . . . . . . . . . . . . . . . .85
Viewing Network IP Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . .86
Configuring DNS. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87
Configuring IP Forwarding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89
Viewing Address Resolution . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91
Viewing and Configuring Layer 2 Virtual LANs . . . . . . . . . . . . . . . . . 92
Viewing and Configuring VLANs by Port . . . . . . . . . . . . . . . . . . .93
Editing the Details of an Existing VLAN by Port . . . . . . . . . . . . .94
Viewing and Configuring Ports by VLAN . . . . . . . . . . . . . . . . . . . 95
Configuring Switch Virtual Interfaces . . . . . . . . . . . . . . . . . . . . . . . . 97
Configuring the Virtual Interface. . . . . . . . . . . . . . . . . . . . . . . . . 97
Viewing Virtual Interface Statistics . . . . . . . . . . . . . . . . . . . . . .101

Brocade Mobility RFS4000, RFS6000, and RFS7000 System Reference Guide v
53-1002515-01
Viewing and Configuring Switch WLANs . . . . . . . . . . . . . . . . . . . . .105
Configuring WLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .106
Viewing WLAN Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .140
Configuring WMM . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .146
Configuring the NAC Inclusion List . . . . . . . . . . . . . . . . . . . . . .150
Configuring the NAC Exclusion List . . . . . . . . . . . . . . . . . . . . . .154
NAC Configuration Examples Using the Switch CLI . . . . . . . . .157
Viewing Associated client Details. . . . . . . . . . . . . . . . . . . . . . . . . . .160
Viewing client Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .160
Configuring Mobile Units . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .164
Viewing client Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .165
Viewing client Voice Statistics . . . . . . . . . . . . . . . . . . . . . . . . . .169
Viewing Access Port Information . . . . . . . . . . . . . . . . . . . . . . . . . . . 171
Configuring Access Port Radios . . . . . . . . . . . . . . . . . . . . . . . . 171
Viewing AP Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .184
Configuring WLAN Assignment . . . . . . . . . . . . . . . . . . . . . . . . .188
Configuring WMM . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .190
Configuring Access Point Radio Bandwidth . . . . . . . . . . . . . . .193
Configuring Radio Groups for client Load Balancing. . . . . . . .194
Viewing Active Calls (AC) Statistics . . . . . . . . . . . . . . . . . . . . . .195
Viewing Mesh Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .196
Smart RF. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .198
Voice Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .207
Viewing Access Port Adoption Defaults . . . . . . . . . . . . . . . . . . . . . .209
Configuring AP Adoption Defaults. . . . . . . . . . . . . . . . . . . . . . .209
Configuring Layer 3 Access Port Adoption . . . . . . . . . . . . . . . .216
Configuring WLAN Assignment . . . . . . . . . . . . . . . . . . . . . . . . .216
Configuring WMM . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .218
Configuring Access Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .220
Viewing Adopted Access Ports . . . . . . . . . . . . . . . . . . . . . . . . .220
Viewing Unadopted Access Ports . . . . . . . . . . . . . . . . . . . . . . .222
Access Port Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . .224
Viewing Sensor Information . . . . . . . . . . . . . . . . . . . . . . . . . . .227
Configuring Secure WiSPe. . . . . . . . . . . . . . . . . . . . . . . . . . . . .229
Configuring Adaptive AP Firmware . . . . . . . . . . . . . . . . . . . . . .230
Multiple Spanning Tree . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .234
Configuring a Bridge . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .235
Viewing and Configuring Bridge Instance Details . . . . . . . . . .238
Configuring a Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .239
Viewing and Configuring Port Instance Details . . . . . . . . . . . .243
IGMP Snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .244
IGMP Snoop Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . .245
IGMP Snoop Querier Configuration. . . . . . . . . . . . . . . . . . . . . .245
Wired Hotspot . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 247
Wired Hotspot Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . 247
Chapter 5 Switch Services
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .259

vi Brocade Mobility RFS4000, RFS6000, and RFS7000 System Reference Guide
53-1002515-01
Displaying the Services Interface. . . . . . . . . . . . . . . . . . . . . . . . . . .259
DHCP Server Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .261
Configuring the Switch DHCP Server . . . . . . . . . . . . . . . . . . . .261
Viewing the Attributes of Existing Host Pools. . . . . . . . . . . . . .268
Configuring Excluded IP Address Information . . . . . . . . . . . . .269
Configuring the DHCP Server Relay . . . . . . . . . . . . . . . . . . . . .270
Viewing DDNS Bindings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .273
Viewing DHCP Bindings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 274
Reviewing DHCP Dynamic Bindings . . . . . . . . . . . . . . . . . . . . .275
Configuring the DHCP User Class . . . . . . . . . . . . . . . . . . . . . . . 276
Configuring DHCP Pool Class . . . . . . . . . . . . . . . . . . . . . . . . . .279
Configuring Secure NTP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .282
Defining the SNTP Configuration . . . . . . . . . . . . . . . . . . . . . . .282
Configuring Symmetric Key . . . . . . . . . . . . . . . . . . . . . . . . . . . .284
Defining a NTP Neighbor Configuration . . . . . . . . . . . . . . . . . .286
Adding an NTP Neighbor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .287
Viewing NTP Associations . . . . . . . . . . . . . . . . . . . . . . . . . . . . .289
Viewing NTP Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .291
Configuring Switch Redundancy & Clustering. . . . . . . . . . . . . . . . .293
Configuring Redundancy Settings. . . . . . . . . . . . . . . . . . . . . . .295
Reviewing Redundancy Status . . . . . . . . . . . . . . . . . . . . . . . . .297
Configuring Redundancy Group Membership . . . . . . . . . . . . .300
Redundancy Group License Aggregation Rules . . . . . . . . . . . .304
Managing Clustering Using the Web UI . . . . . . . . . . . . . . . . . .304
Layer 3 Mobility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .305
Configuring Layer 3 Mobility . . . . . . . . . . . . . . . . . . . . . . . . . . .306
Defining the Layer 3 Peer List . . . . . . . . . . . . . . . . . . . . . . . . . .308
Reviewing Layer 3 Peer List Statistics . . . . . . . . . . . . . . . . . . .309
Reviewing Layer 3 client Status . . . . . . . . . . . . . . . . . . . . . . . .311
Configuring Self Healing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .311
Configuring Self Healing Neighbor Details . . . . . . . . . . . . . . . .312
Configuring Switch Discovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .315
Configuring Discovery Profiles. . . . . . . . . . . . . . . . . . . . . . . . . .315
Viewing Discovered Switches . . . . . . . . . . . . . . . . . . . . . . . . . .318
Locationing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .320
RTLS Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .321
SOLE - Smart Opportunistic Location Engine. . . . . . . . . . . . . .321
Defining Site Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . .321
Configuring SOLE Parameters. . . . . . . . . . . . . . . . . . . . . . . . . .323
Configuring Aeroscout Parameters. . . . . . . . . . . . . . . . . . . . . .325
Configuring Ekahau Parameters . . . . . . . . . . . . . . . . . . . . . . . .327
Chapter 6 Switch Security
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .331
Displaying the Main Security Interface . . . . . . . . . . . . . . . . . . . . . .331

Brocade Mobility RFS4000, RFS6000, and RFS7000 System Reference Guide vii
53-1002515-01
Access Point Detection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .332
Enabling and Configuring AP Detection . . . . . . . . . . . . . . . . . .333
Authorized / Ignored APs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .335
Unauthorized APs (AP Reported) . . . . . . . . . . . . . . . . . . . . . . .336
Unauthorized APs (client Reported) . . . . . . . . . . . . . . . . . . . . .338
AP Containment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .338
Wireless Intrusion Detection / Protection . . . . . . . . . . . . . . . . . . . .340
Configuring Wireless Intrusion Detection / Protection . . . . . .340
Viewing Filtered Clients . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .342
Configuring Firewalls and Access Control Lists. . . . . . . . . . . . . . . .343
ACL Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .344
Attaching an ACL on a WLAN Interface/Port . . . . . . . . . . . . . .348
Attaching an ACL Layer 2/Layer 3 Configuration. . . . . . . . . . .349
Configuring the Role Based Firewall. . . . . . . . . . . . . . . . . . . . .351
Attaching Adaptive AP WLANs . . . . . . . . . . . . . . . . . . . . . . . . . .353
Attaching Adaptive AP LANs . . . . . . . . . . . . . . . . . . . . . . . . . . .356
Configuring Wireless Filters. . . . . . . . . . . . . . . . . . . . . . . . . . . .357
Editing an Existing Wireless Filter. . . . . . . . . . . . . . . . . . . . . . .359
Adding a new Wireless Filter . . . . . . . . . . . . . . . . . . . . . . . . . . .360
Associating an ACL with WLAN . . . . . . . . . . . . . . . . . . . . . . . . .361
Configuring the Firewall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .362
Configuring Layer 2 Firewall . . . . . . . . . . . . . . . . . . . . . . . . . . .367
Configuring WLAN Firewall rules . . . . . . . . . . . . . . . . . . . . . . . .369
Configuring Denial of Service (DoS) Attack Firewall Rules . . .372
Configuring the Role . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 374
Configuring Firewall Logging Options . . . . . . . . . . . . . . . . . . . .377
Reviewing Firewall and ACL Statistics. . . . . . . . . . . . . . . . . . . .381
Configuring NAT Information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .385
Defining Dynamic NAT Translations . . . . . . . . . . . . . . . . . . . . .386
Defining Static NAT Translations. . . . . . . . . . . . . . . . . . . . . . . .389
Configuring NAT Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . .391
Viewing NAT Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .393
Configuring IKE Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .393
Defining the IKE Configuration . . . . . . . . . . . . . . . . . . . . . . . . .394
Setting IKE Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .395
Viewing SA Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .398
Configuring IPSec VPN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .399
Defining the IPSec Configuration . . . . . . . . . . . . . . . . . . . . . . .401
Defining the IPSec VPN Remote Configuration . . . . . . . . . . . .404
Configuring IPSEC VPN Authentication. . . . . . . . . . . . . . . . . . .406
Configuring Crypto Maps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .408
Viewing IPSec Security Associations. . . . . . . . . . . . . . . . . . . . . 416
Configuring the Radius Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 417
Radius Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 418
Using the Switch’s Radius Server Versus an External Radius 420
Defining the Radius Configuration . . . . . . . . . . . . . . . . . . . . . .421
Configuring Radius Authentication and Accounting . . . . . . . .424
Configuring Radius Users . . . . . . . . . . . . . . . . . . . . . . . . . . . . .426
Configuring Radius User Groups. . . . . . . . . . . . . . . . . . . . . . . .429
Viewing Radius Accounting Logs. . . . . . . . . . . . . . . . . . . . . . . .432

viii Brocade Mobility RFS4000, RFS6000, and RFS7000 System Reference Guide
53-1002515-01
Creating Server Certificates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .433
Using Trustpoints to Configure Certificates . . . . . . . . . . . . . . .434
Configuring Trustpoint Associated Keys . . . . . . . . . . . . . . . . . .442
Configuring Enhanced Beacons and Probes. . . . . . . . . . . . . . . . . .444
Configuring the Beacon Table . . . . . . . . . . . . . . . . . . . . . . . . . .445
Configuring the Probe Table . . . . . . . . . . . . . . . . . . . . . . . . . . .447
Reviewing Found Beacons . . . . . . . . . . . . . . . . . . . . . . . . . . . .449
Reviewing Found Probes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .449
Chapter 7 Switch Management
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .451
Displaying the Management Access Interface . . . . . . . . . . . . . . . .451
Configuring Access Control. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .452
Configuring SNMP Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .454
Configuring SNMP v1/v2 Access . . . . . . . . . . . . . . . . . . . . . . .455
Configuring SNMP v3 Access . . . . . . . . . . . . . . . . . . . . . . . . . .456
Accessing SNMP v2/v3 Statistics. . . . . . . . . . . . . . . . . . . . . . .458
Message Parameters. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .459
Configuring SNMP Traps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .460
Enabling Trap Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . .461
Configuring Trap Thresholds . . . . . . . . . . . . . . . . . . . . . . . . . . .464
Configuring SNMP Trap Receivers . . . . . . . . . . . . . . . . . . . . . . . . . .466
Editing SNMP Trap Receivers . . . . . . . . . . . . . . . . . . . . . . . . . .468
Adding SNMP Trap Receivers . . . . . . . . . . . . . . . . . . . . . . . . . .468
Creating and Managing Users . . . . . . . . . . . . . . . . . . . . . . . . . . . . .469
Configuring Local Users. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .469
Configuring Switch Authentication . . . . . . . . . . . . . . . . . . . . . . 474
Chapter 8 Diagnostics
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .481
Displaying the Main Diagnostic Interface . . . . . . . . . . . . . . . . . . . .481
Switch Environment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .482
CPU Performance. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .483
Switch Memory Allocation . . . . . . . . . . . . . . . . . . . . . . . . . . . . .484
Switch Disk Allocation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .485
Switch Memory Processes . . . . . . . . . . . . . . . . . . . . . . . . . . . .485
Other Switch Resources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .486
Configuring System Logging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .487
Log Options. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .487
File Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .489
Reviewing Core Snapshots . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .493
Transferring Core Snapshots. . . . . . . . . . . . . . . . . . . . . . . . . . .494
Reviewing Panic Snapshots . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .496
Viewing Panic Details . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .497
Transferring Panic Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .497

Brocade Mobility RFS4000, RFS6000, and RFS7000 System Reference Guide ix
53-1002515-01
Debugging the Applet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .498
Configuring a Ping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .500
Modifying the Configuration of an Existing Ping Test . . . . . . .502
Adding a New Ping Test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .502
Viewing Ping Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .503
Chapter A Adaptive AP
Adaptive AP Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .505
Where to Go From Here . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .505
Adaptive AP Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . .506
Types of Adaptive APs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .506
Licensing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .507
Switch Discovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .507
Securing a Configuration Channel Between Switch and AP . .508
Adaptive AP WLAN Topology . . . . . . . . . . . . . . . . . . . . . . . . . . .508
Configuration Updates. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .509
Securing Data Tunnels between the Switch and AAP . . . . . . .509
Adaptive AP Switch Failure . . . . . . . . . . . . . . . . . . . . . . . . . . . .509
Remote Site Survivability (RSS) . . . . . . . . . . . . . . . . . . . . . . . . 510
Adaptive Mesh Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .510
AAP Radius Proxy Support. . . . . . . . . . . . . . . . . . . . . . . . . . . . .512
Supported Adaptive AP Topologies . . . . . . . . . . . . . . . . . . . . . . . . .513
Topology Deployment Considerations . . . . . . . . . . . . . . . . . . .513
Extended WLANs Only . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 514
Independent WLANs Only . . . . . . . . . . . . . . . . . . . . . . . . . . . . .514
Extended WLANs with Independent WLANs. . . . . . . . . . . . . . . 514
Extended VLAN with Mesh Networking. . . . . . . . . . . . . . . . . . .514
How the AP Receives its Adaptive Configuration . . . . . . . . . . . . . . 514
Adaptive AP Pre-requisites . . . . . . . . . . . . . . . . . . . . . . . . . . . .515
Configuring the Adaptive AP for Adoption by the Switch . . . . .515
Configuring the Switch for Adaptive AP Adoption . . . . . . . . . .515
Establishing Basic Adaptive AP Connectivity. . . . . . . . . . . . . . . . . . 516
Adaptive AP Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 516
Switch Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .518
Adaptive AP Deployment Considerations . . . . . . . . . . . . . . . . .521
Sample Switch Configuration File for IPSec and Independent WLAN
522
Chapter B Troubleshooting Information
General Troubleshooting. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .527
Wireless Switch Issues . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .527
Access Port Issues . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .529
Mobile Unit Issues . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .530
Miscellaneous Issues . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .532
System Logging Mechanism . . . . . . . . . . . . . . . . . . . . . . . . . . .533

x Brocade Mobility RFS4000, RFS6000, and RFS7000 System Reference Guide
53-1002515-01
Troubleshooting SNMP Issues . . . . . . . . . . . . . . . . . . . . . . . . . . . . .533
MIB Browser not able to contact the agent . . . . . . . . . . . . . . .533
Not able to SNMP WALK for a GET . . . . . . . . . . . . . . . . . . . . . .533
MIB not visible in the MIB browser . . . . . . . . . . . . . . . . . . . . . .533
SNMP SETs not working. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .533
Not receiving SNMP traps . . . . . . . . . . . . . . . . . . . . . . . . . . . . .534
Additional Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .534
Security Issues . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .534
Switch Password Recovery . . . . . . . . . . . . . . . . . . . . . . . . . . . .534
RADIUS Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .535
Troubleshooting RADIUS Accounting Issues . . . . . . . . . . . . . .537
Rogue AP Detection Troubleshooting. . . . . . . . . . . . . . . . . . . . . . . .537
Troubleshooting Firewall Configuration Issues . . . . . . . . . . . . . . . .538

Brocade Mobility RFS4000, RFS6000, and RFS7000 System Reference Guide xi
53-1002515-01
About This Document
In this chapter
•Supported hardware and software. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi
•Document conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi
•Related publications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xii
•Getting technical help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xii
Supported hardware and software
The following hardware platforms are supported by this release of this guide:
•Brocade Mobility RFS4000 Controller software release 4.4 and later
•Brocade Mobility RFS6000 Controller software release 4.4 and later
•Brocade Mobility RFS7000 Controller software release 4.4 and later
Document conventions
This section describes text formatting conventions and important notice formats used in this
document.
Text formatting
The narrative-text formatting conventions that are used are as follows:
bold text Identifies command names
Identifies the names of user-manipulated GUI elements
Identifies keywords
Identifies text to enter at the GUI or CLI
italic text Provides emphasis
Identifies variables
Identifies document titles
code text Identifies CLI output

xii Brocade Mobility RFS4000, RFS6000, and RFS7000 System Reference Guide
53-1002515-01
For readability, command names in the narrative portions of this guide are presented in mixed
lettercase: for example, controllerShow. In actual examples, command lettercase is often all
lowercase. Otherwise, this manual specifically notes those cases in which a command is case
sensitive.
.Notes, cautions, and warnings
The following notices and statements are used in this manual. They are listed below in order of
increasing severity of potential hazards.
NOTE
A note provides a tip, guidance or advice, emphasizes important information, or provides a reference
to related information.
CAUTION
A Caution statement alerts you to situations that can be potentially hazardous to you or cause
damage to hardware, firmware, software, or data.
DANGER
A Danger statement indicates conditions or situations that can be potentially lethal or extremely
hazardous to you. Safety labels are also attached directly to products to warn of these conditions
or situations.
Related publications
The following Brocade Communications Systems, Inc. documents supplement the information in
this guide and can be located at http://www.brocade.com/ethernetproducts.
•Brocade Mobility RFS4000, RFS6000, and RFS7000 System Reference Guide
(this document) - Describes configuration of the Brocade wireless controllers using the Web UI.
•Brocade Mobility RFS4000, RFS6000 and RFS7000 CLI Reference Guide - Describes the
Command Line Interface (CLI) and Management Information Base (MIB) commands used to
configure the Brocade controllers.
If you find errors in the guide, send an e-mail to do[email protected].
Getting technical help
To contact Technical Support, go to http://www.brocade.com/services-support/index.page for the
latest e-mail and telephone contact information.

Brocade Mobility RFS4000, RFS6000, and RFS7000 System Reference Guide 1
53-1002515-01
Chapter
1
Overview
In this chapter
•Hardware Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
•Software Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
•IEEE Standards Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
•Standards Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
A Brocade Wireless Controller is a centralized management solution for wireless networking. It
connects to non-legacy Access Ports through Layer 2 or Layer 3 (Layer 2 is preferable, if the
situation allows it).
Access ports function as radio antennas for data traffic management and routing. System
configuration and intelligence for the wireless network resides with the switch. The switch uses
Access Ports to bridge data to and from wireless devices. The wireless switch applies appropriate
policies to data packets before forwarding them to their destination.
All data packets to and from wireless devices are processed by the switch, where appropriate
policies are applied before they are decapsulated and sent to their destination.
Access port configuration is managed by the switch through a Web UI Graphical User Interface
(GUI), SNMP or the switch Command Line Interface (CLI).
NOTE
The discussion of the switch GUI within this guide is presented generically, making it equally relevant
to the Brocade Mobility RFS4000, Brocade Mobility RFS6000, and Brocade Mobility RFS7000
switch platforms. However, some subtle differences do exist amongst these baselines. These
differences are noted within the specific GUI elements impacted. When these differences are noted,
the options available to each switch baseline are described in detail.
Hardware Overview
The Brocade Mobility RFS4000, Brocade Mobility RFS6000 and Brocade Mobility RFS7000 are
rack-mountable devices that manage all inbound and outbound traffic on the wireless network.
They provide security, network service and system management applications.
Unlike traditional wireless infrastructure devices that reside at the edge of a network, the switch
uses centralized, policy-based management to apply sets of rules or actions to all devices on the
wireless network. The switch collects management “intelligence” from individual Access
Ports/Points and moves the collected information to the centralized switch.
Access ports (APs) are 48V Power-over-Ethernet devices connected to the switch by an Ethernet
cable. An Access Port receives 802.11x data from clients and forwards the data to the switch which
applies the appropriate policies and routes the packets to their destinations.

2 Brocade Mobility RFS4000, RFS6000, and RFS7000 System Reference Guide
53-1002515-01
1
Access ports do not have software or firmware upon initial receipt from the factory. When the
Access Port is first powered on and cleared for the network, the switch initializes the Access Port
and installs a small firmware file automatically. Therefore, installation and firmware upgrades are
automatic and transparent.
Physical Specifications
The physical dimensions and operating parameters of the Brocade Mobility RFS4000 include:
The physical dimensions and operating parameters of the Brocade Mobility RFS6000 include:
The physical dimensions and operating parameters of the Brocade Mobility RFS7000 include:
A power cord is not supplied with a Brocade Mobility RFS4000, Brocade Mobility RFS6000 or
Brocade Mobility RFS7000 model switch. Use only a correctly rated power cord certified for the
country of operation.
Width 304.8mm (12.0 in)
Height 44.45mm (1.75 in)
Depth 254mm (10.0 in)
Weight 2.15 Kg (4.75 lbs)
Operating Temperature 0°C - 40°C (32°F - 104°F)
Operating Humidity 5% - 85% RH, non-condensing
Width 440mm (17.32 in)
Height 44.45mm (1.75 in)
Depth 390.8mm (15.38 in)
Weight 6.35 Kg (14 lbs)
Operating Temperature 0°C - 40°C (32°F - 104°F)
Operating Humidity 5% - 85% RH, non-condensing
Width 440mm (17.32 in)
Height 44.45mm (1.75 in)
Depth 390.8mm (15.38 in)
Weight 6.12 Kg (13.5 lbs)
Operating Temperature 0°C - 40°C (32°F - 104°F)
Operating Humidity 5% - 85% RH, non-condensing

Brocade Mobility RFS4000, RFS6000, and RFS7000 System Reference Guide 3
53-1002515-01
1
Power Consumption
The power consumption for Brocade Mobility RFS7000, Brocade Mobility RFS6000, and Brocade
Mobility RFS4000 are as follows:
Power Protection
To best protect the switch from unexpected power surges or other power-related problems, ensure
the switch installation meets the following guidelines:
•If possible, use a dedicated circuit to protect data processing equipment. Commercial
electrical contractors are familiar with wiring for data processing equipment and can help with
the load balancing of dedicated circuits.
•Install surge protection. Use a surge protection device between the electricity source and the
switch.
•Install an Uninterruptible Power Supply (UPS). A UPS provides continuous power during a
power outage. Some UPS devices have integral surge protection. UPS equipment requires
periodic maintenance to ensure reliability.
Cabling Requirements
A minimum of one category 6 Ethernet cables (not supplied) are required to connect the switch to
the LAN and WLAN. The cable(s) are used with the Ethernet ports on the front panel of the switch.
NOTE
On an Brocade Mobility RFS6000 and Brocade Mobility RFS7000, Brocade recommends connecting
via the Management Ethernet (ME) interface to better ensure secure and easier management. The
ME interface is connected to the management VLAN, and is therefore separate from production
VLANs.
NOTE
On the Brocade Mobility RFS4000 and Brocade Mobility RFS6000 the Uplink (UP) port is the
preferred method of connecting the switch to the network. The Uplink port has its own dedicated
1Gbps connection which is unaffected by internal traffic across the GE ports.
The console cable included with the switch connects the switch to a computer running a serial
terminal emulator program to access the switch’s Command Line Interface (CLI) for initial
configuration. An initial configuration is described within the Installation Guide shipped with each
switch.
Software Overview
The switch includes a robust set of features. The features are listed and described in the following
sections:
Brocade Mobility RFS7000 Maximum Power Consumption: 100W
Brocade Mobility RFS6000 Maximum Power Consumption: 300W
Brocade Mobility RFS4000 AC Input Voltage: 100-240 VAC 50/60 Hz
Maximum Power Consumption: 120W

4 Brocade Mobility RFS4000, RFS6000, and RFS7000 System Reference Guide
53-1002515-01
1
•Infrastructure Features
•Wireless Switching
•Wired Switching
•Management Features
•Security Features
•Supported Access Ports/Points
NOTE
The Brocade RF Management Software is a recommended utility to plan the deployment of the
switch and view its configuration once operational in the field. Brocade RFMS can help optimize the
positioning and configuration of a switch in respect to a WLAN’s client throughput requirements and
can help detect rogue devices. For more information, refer to the Brocade Website.
Infrastructure Features
The switch includes the following Infrastructure features:
•Installation Feature
•Configuration Management
•Diagnostics
•Serviceability
•Tracing / Logging
•Process Monitor
•Hardware Abstraction Layer and Drivers
•Redundancy
•Secure Network Time Protocol (SNTP)
•Password Recovery
Installation Feature
The upgrade/downgrade of the switch can be performed at boot time using one of the following
methods:
•Web UI
•DHCP
•CLI
•SNMP
•Patches
The switch has sufficient non-volatile memory to store two firmware images. Having a second
firmware image provides a backup in case of failure of the primary image. It also allows for testing
of new firmware on a switch with the ability to easily revert to a previous image.

Brocade Mobility RFS4000, RFS6000, and RFS7000 System Reference Guide 5
53-1002515-01
1
Configuration Management
The switch supports the redundant storage of configuration files to protect against corruption
during a write operation and ensure (at any given time) a valid configuration file exists. If writing the
configuration file fails, it is rolled back and a pre-write file is used.
Text Based Configuration
The configuration is stored a in human readable format (as a set of CLI commands).
Diagnostics
The following diagnostics are available:
1. In-service Diagnostics – In-service diagnostics provide a range of automatic health monitoring
features ensuring both the system hardware and software are in working order.
In-service-diagnostics continuously monitor available physical characteristics (as detailed
below) and issue log messages when warning or error thresholds are reached. There are
three types of in-service diagnostics:
•Hardware – Ethernet ports, chip failures, system temperature via the temperature sensors
provided by the hardware, etc.
•Software – CPU load, memory usage, etc.
•Environmental – CPU and air temperature, fans speed, etc.
2. Out-of-service Diagnostics – Out-of-service diagnostics are a set of intrusive tests run from the
user interface. Out-of-service diagnostics cannot be run while the switch is in operation.
Intrusive tests include:
•Ethernet loopback tests
•RAM tests, Real Time Clock tests, etc.
3. Manufacturing Diagnostics – Manufacturing diagnostics are a set of diagnostics used by
manufacturing to inspect quality of hardware.
Serviceability
A special set of Service CLI commands are available to provide additional troubleshooting
capabilities for service personnel (access to Linux services, panic logs, etc.). Only authorized users
or service personnel are provided access to the Service CLI.
A built-in Packet Sniffer enables service personnel and users to capture incoming and outgoing
packets in a buffer.
The switch also collects statistics for RF activity, Ethernet port activity etc. RF statistics include
roaming stats, packet counters, octets tx/rx, signal, noise SNR, retry, and information for each
client.
Tracing / Logging
Log messages are well-defined and documented system messages with various destinations. They
are numbered and referenced by ID. Each severity level group, can be configured separately to go
to either the serial console, telnet interface, log file or remote syslog server.

6 Brocade Mobility RFS4000, RFS6000, and RFS7000 System Reference Guide
53-1002515-01
1
Trace messages are more free-form and are used mainly by support personnel for tracking
problems. They are enabled or disabled via CLI commands. Trace messages can go to a log file, the
serial console, or the current tty.
Log and trace messages are interleaved in the same log file, so chronological order is preserved.
Log and trace messages from different processes are similarly interleaved in the same file for the
same reason.
Log message format is similar to the format used by syslog messages (RFC 3164). Log messages
include message severity, source (facility), the time the message was generated and a textual
message describing the situation triggering the event. For more information on using the switch
logging functionality, see Configuring System Logging on page 8-487.
Process Monitor
The switch Process Monitor checks to ensure processes under its control are up and running. Each
monitored process sends periodic heartbeat messages. A process that is down (due to a software
crash or stuck in an endless loop) is detected when its heartbeat is not received. Such a process is
terminated (if still running) and restarted (if configured) by the Process Monitor.
Hardware Abstraction Layer and Drivers
The Hardware Abstraction Layer (HAL) provides an abstraction library with an interface hiding
hardware/platform specific data. Drivers include platform specific components such as Ethernet,
Flash Memory storage and thermal sensors.
Redundancy
Using switch redundancy, up to 12 switches can be configured in a redundancy group (and provide
group monitoring). In the event of a switch failure, an existing cluster member assumes control.
Therefore, the switch supported network is always up and running even if a switch fails or is
removed for maintenance or a software upgrade.
The following redundancy features are supported:
•Up to 12 switch redundancy members are supported in a single group. Each member is
capable of tracking statistics for the entire group in addition to their own.
•Each redundancy group is capable of supporting an Active/Active configuration responsible for
group load sharing.
•Members within the same redundancy group can be deployed across different subnets.
•APs are load balanced across members of the group.
•Licenses are aggregated across the group. When a new member joins the group, the new
member can leverage the Access Port adoption license(s) of existing members.
•Each member of the redundancy group (including the reporting switch) is capable of displaying
cluster performance statistics for all members in addition to their own.
•Centralized redundancy group management using the switch CLI.
For more information on configuring the switch for redundancy support, see
Configuring Switch Redundancy & Clustering on page 5-293.

Brocade Mobility RFS4000, RFS6000, and RFS7000 System Reference Guide 7
53-1002515-01
1
Secure Network Time Protocol (SNTP)
Secure Network Time Protocol (SNTP) manages time and/or network clock synchronization within
the switch managed network. SNTP is a client/server implementation. The switch (a SNTP client)
periodically synchronizes its clock with a master clock (an NTP server). For example, the switch
resets its clock to 07:04:59 upon reading a time of 07:04:59 from its designated NTP server. Time
synchronization is recommended for the switch’s network operations. The following holds true:
•The switch can be configured to provide NTP services to NTP clients.
•The switch can provide NTP support for user authentication.
•Secure Network Time Protocol (SNTP) clients can be configured to synchronize switch time with
an external NTP server.
For information on configuring the switch to support SNTP, see Configuring Secure NTP on page
5-282.
Password Recovery
The access point has a means of restoring its password to its default value. Doing so also reverts
the access point’s security, radio and power management configuration to their default settings.
Only an installation professional should reset the access point’s password and promptly define a
new restrictive password.
To contact Brocade Support in the event of a password reset requirement, go to
http://www.brocade.com/support
CAUTION
Only a qualified installation professional should set or restore the access point’s radio and power
management configuration in the event of a password reset.
Wireless Switching
The switch supports the following wireless switching features:
•Adaptive AP
•Physical Layer Features
•Rate Limiting
•Proxy-ARP
•HotSpot / IP Redirect
•IDM (Identity Driven Management)
•Voice Prioritization
•Self Healing
•Wireless Capacity
•AP and client Load Balancing
•Wireless Roaming
•Power Save Polling
•QoS

8 Brocade Mobility RFS4000, RFS6000, and RFS7000 System Reference Guide
53-1002515-01
1
•Wireless Layer 2 Switching
•Automatic Channel Selection
•WMM-Unscheduled APSD
•Multiple VLANs per WLAN
Adaptive AP
An adaptive AP (AAP) is a Brocade Mobility 7131 Series Access Point adopted by a wireless switch.
The management of an AAP is conducted by the switch, once the Access Point connects to the
switch and receives its AAP configuration.
An AAP provides:
•local 802.11 traffic termination
•local encryption/decryption
•local traffic bridging
•tunneling of centralized traffic to the wireless switch
The connection between the AAP and the switch can be secured using IPSec depending on whether
a secure WAN link from a remote site to the central site already exists.
The switch can be discovered using one of the following mechanisms:
•DHCP
•Switch fully qualified domain name (FQDN)
•Static IP addresses
The benefits of an AAP deployment include:
•Centralized Configuration Management & Compliance - Wireless configurations across
distributed sites can be centrally managed by the wireless switch or cluster.
•WAN Survivability - Local WLAN services at a remote sites are unaffected in the case of a WAN
outage.
•Securely extend corporate WLAN's to stores for corporate visitors - Small home or office
deployments can utilize the feature set of a corporate WLAN from their remote location.
•Maintain local WLAN's for specific applications - WLANs created and supported locally can be
concurrently supported with your existing infrastructure.
For an overview of AAP and how it is configured and deployed using the switch and Access Point,
see
Adaptive AP Overview.
Physical Layer Features
802.11a
•DFS Radar Avoidance – Dynamic Frequency Selection (DFS) is mandatory for WLAN equipment
intended to operate in the frequency bands 5150 MHz to 5350 MHz and 5470 MHz to 5725
MHz when in countries of the EU.
The purpose of DFS is:
•Detect interference from other systems and avoid co-channeling with those systems (most
notably radar systems).