D-Link DWC-1000 User manual

User’s Guide
FastFind Links
Product Overview
Unpacking and Installation
Basic Configuration
Viewing Status and Statistics
Maintenance
Troubleshooting
DWC-1000 Wireless Controller

ii
DWC-1000 Wireless Controller User’s Guide
CONTENTS
Preface.................................................................................................................... vii
Audience ....................................................................................................................vii
Document Revision Level..........................................................................................viii
Changes in this Revision...........................................................................................viii
Related Documents...................................................................................................viii
Document Conventions..............................................................................................ix
Safety and Warnings..................................................................................................ix
Typographic Conventions...........................................................................................ix
1. Product Overview............................................................................................. 10
Features and Benefits...............................................................................................11
Scalable architecture with stacking and redundancy ................................................11
Centralized management and configuration..............................................................11
Security .....................................................................................................................11
2. Unpacking and Installation.............................................................................. 12
Unpacking .................................................................................................................13
Package Contents.....................................................................................................13
Required Tools and Information................................................................................13
Selecting a Location..................................................................................................14
Front Panel Ports and LEDs......................................................................................15
One RJ-45 Console Port....................................................................................15
Two Gigabit Option Ports...................................................................................15
Four Gigabit Ethernet LAN Ports .......................................................................16
Two USB 2.0 Ports.............................................................................................16
Power LED.........................................................................................................16
Rear Panel ................................................................................................................17
Using the Reset Button........................................................................................17
Bottom Panel (Default IP Address) ...........................................................................18
Licenses....................................................................................................................18
Installing the Wireless Controller...............................................................................18
Rack-Mounting the Wireless Controller...............................................................18
Connecting the Wireless Controller.....................................................................19
Sample Applications..................................................................................................21
Connecting to a Secured Network.......................................................................21

Contents
iii
DWC-1000 Wireless Controller User’s Guide
Authenticating to an Authentication Server .........................................................22
Logging In to a Captive Portal.............................................................................24
Where to Go from Here.............................................................................................25
3. Basic Configuration ......................................................................................... 26
Logging In to the Web Management Interface..........................................................27
Web Management Interface Layout..........................................................................30
Basic Configuration Procedures................................................................................31
Basic Configuration Step #1. Enable DHCP Server (Optional)...........................32
Basic Configuration Step #2. Select the Access Points to be Managed .............33
Basic Configuration Step #3. Change the SSID Name and Set Up Security ......35
Basic Configuration Step #4. Confirm Access Point Profile is Associated..........39
Basic Configuration Step #5. Configure Captive Portal Settings.........................40
1. Create a captive portal group....................................................................40
2. Add captive portal users............................................................................41
3. Associate the captive portal group to an interface.....................................44
4. Customize the captive portal login page....................................................45
Basic Configuration Step #6. Use SSID with RADIUS ........................................48
Where to Go from Here.............................................................................................48
4. Advanced Configuration Settings................................................................... 49
QoS Configuration.....................................................................................................50
Enabling QoS Mode ............................................................................................50
Defining DSCP and CoS Settings .......................................................................52
Configuring DSCP Priorities ..........................................................................52
Configuring CoS Priorities .............................................................................53
VLANs.......................................................................................................................56
Enabling VLANs ..................................................................................................56
Creating VLANs...................................................................................................57
Editing VLANs .....................................................................................................59
Deleting VLANs...................................................................................................61
Port VLANs..........................................................................................................62
MultiVLAN Subnets .............................................................................................63
DMZ Settings.............................................................................................................66
Configuring a Port to Operate as a DMZ.............................................................66
Configuring DMZ Settings ...................................................................................67
Static Routing............................................................................................................69
Adding a Static Route..........................................................................................69
Editing Static Routes...........................................................................................71
Deleting Static Routes.........................................................................................72
Auto-Failover Settings...............................................................................................73
Load Balancing Settings............................................................................................75

Contents
iv
DWC-1000 Wireless Controller User’s Guide
Additional Advanced Configuration Settings .............................................................77
5. Securing Your Network.................................................................................... 79
Managing Clients.......................................................................................................80
Viewing Known Clients and Adding Clients.........................................................80
Editing Clients......................................................................................................83
Deleting Clients ...................................................................................................84
Content Filtering........................................................................................................85
Enabling Content Filtering...................................................................................85
Specifying Approved URLs..................................................................................86
Specifying Blocked Keywords .............................................................................88
Exporting Web Filters..........................................................................................89
Additional Security Settings.......................................................................................91
6. VPN Settings..................................................................................................... 92
Configuring VPN Clients............................................................................................93
Configuring IPsec Policies.........................................................................................95
Adding IPsec Policies..........................................................................................95
Example of a Manual Policy........................................................................103
Editing IPsec Policies........................................................................................104
Enabling IPsec Policies.....................................................................................105
Disabling IPsec Policies ....................................................................................106
Exporting IPsec Policies....................................................................................107
Deleting IPsec Policies......................................................................................108
Mode Config Settings..............................................................................................109
DHCP Range...........................................................................................................112
PPTP/LT2P Tunnels................................................................................................113
PPTP Tunnel Support........................................................................................113
Configuring PPTP Clients............................................................................113
Configuring PPTP Servers ..........................................................................114
L2TP Tunnel Support ........................................................................................118
OpenVPN Support.............................................................................................121
Additional VPN Settings..........................................................................................123
7. Viewing Status and Statistics........................................................................ 124
Viewing CPU and Memory Utilization......................................................................126
Viewing System Status............................................................................................128
Viewing Managed Access Point Information...........................................................130
Viewing Cluster Information ....................................................................................132
Viewing Hardware and Usage Statistics .................................................................134
Wired Port Statistics................................................................................................136
Managed Access Points and Associated Clients Statistics.....................................137

Contents
v
DWC-1000 Wireless Controller User’s Guide
LAN-Associated Clients...........................................................................................139
WLAN-Associated Clients.......................................................................................141
Sessions through the Wireless Controller...............................................................142
Associated Clients...................................................................................................143
LAN Clients .............................................................................................................145
Detected Clients......................................................................................................146
Access Point Status ................................................................................................148
Access Point Summary...........................................................................................150
Managed Access Point............................................................................................152
Authentication Failure Status ..................................................................................154
AP RF Scan Status .................................................................................................156
Global Status...........................................................................................................158
Peer Controller Status.............................................................................................161
Peer Controller Configuration Status.......................................................................163
Peer Controller Managed AP Status.......................................................................164
IP Discovery............................................................................................................166
Configuration Receive Status..................................................................................168
AP Hardware Capability..........................................................................................170
Client Status............................................................................................................171
Associated Client Status .........................................................................................173
Associated Client SSID Status................................................................................175
Associated Client VAP Status .................................................................................177
Controller Associated Client Status.........................................................................179
Detected Client Status.............................................................................................181
Pre-Authorization History ........................................................................................183
Detected Client Roam History.................................................................................184
8. Maintenance.................................................................................................... 185
Group Management ................................................................................................186
Adding User Groups..........................................................................................186
Editing User Groups..........................................................................................189
Deleting User Groups........................................................................................189
Configuring Login Policies.................................................................................190
Configuring Browser Policies.............................................................................191
Configuring IP Policies ......................................................................................193
User Management...................................................................................................196
Adding Users Manually......................................................................................196
Importing Users.................................................................................................198
Editing Users.....................................................................................................199
Deleting Users...................................................................................................200
Backing Up Configuration Settings..........................................................................201
Restoring Configuration Settings.............................................................................202

Contents
vi
DWC-1000 Wireless Controller User’s Guide
Restoring Factory Default Settings..........................................................................203
Rebooting the Wireless Controller...........................................................................204
Upgrading Firmware................................................................................................205
Access Point Firmware Upgrade.......................................................................205
Wireless Controller Firmware Upgrade .............................................................206
Activating Licenses..................................................................................................208
Using the Command Line Interface.........................................................................210
9. Troubleshooting............................................................................................. 211
LED Troubleshooting...............................................................................................212
Power LED is OFF.............................................................................................212
LAN Port LEDs Not ON.....................................................................................212
Troubleshooting the Web Management Interface...................................................213
Using the Reset Button to Restore Default Settings ...............................................213
Problems with Date and Time.................................................................................214
Discovery Problems with Access Points .................................................................214
Connection Problems..............................................................................................214
Network Performance and Rogue Access Point Detection.....................................215
Using Diagnostic Tools on the Wireless Controller.................................................215
Pinging an IP Address.......................................................................................215
Using Traceroute...............................................................................................216
Performing DNS Lookups..................................................................................217
Capturing Log Packets......................................................................................218
Checking Log Settings.......................................................................................219
Defining What to Log...................................................................................219
Tracking Traffic..................................................................................................221
Remote Logging................................................................................................223
Wireless Controller Event Log...........................................................................226
IPsec VPN Log Messages.................................................................................227
Appendix A. Basic Planning Worksheet............................................................ 228
Appendix B. Factory Default Settings................................................................ 231
Appendix C. Glossary ......................................................................................... 233
Appendix D. Limited Lifetime Warranty............................................................. 235
(USA and Canada Only)..........................................................................................235
Index..................................................................................................................... 237

vii
DWC-1000 Wireless Controller User’s Guide
PREFACE
Thank you for purchasing the D-Link DWC-1000 Wireless Controller. The DWC-1000
Wireless Controller lets you configure, manage, monitor, and troubleshoot D-LINK access
points in your wireless network (WLAN) from a central point.
The DWC-1000 is part of D-Link’s Unified Wireless Solution. This Solution consists of:
•A D-Link DWC-1000 Wireless Controller
•A collection of D-Link DWL-3600, DWL-6600, and/or DWL-8600 access points
A single wireless controller can manage 24 DWL-3600, DWL-6600, or DWL-8600 access
points. Six access points are supported out of the box. Licenses can be purchased in 6
access point increments to support 18 additional access points for a single wireless
controller. For greater scalability, four wireless controllers can be interconnected to create a
cluster that manages up to 96 access points. Adding redundant wireless controllers also
requires you to purchase licenses to support the required number of access points on the
redundant wireless controllers.
All access points associated with a wireless controller can be concurrently configured and
managed by an HTTP full-featured web user interface or command-line interface (CLI). This
guide describes how to use the web user interface. For information about using the CLI,
refer to the Wireless Controller CLI Reference Guide: DWC-1000.
Before using this manual, familiarize yourself with the Table of Contents on page ii. Set up of
a wireless controller should not be attempted without reading Chapter 2 and Chapter 3. All
first-time users should read Chapter 1. Users who want to use the wireless controller’s
advanced features should read Chapter 4, Chapter 5, and Chapter 6. Users responsible for
monitoring and maintaining the wireless controller should read Chapter 7 and Chapter 8. A
glossary of terms appears in Appendix C and troubleshooting suggestions are in Chapter 9.
Audience
This guide is designed for the person who installs, configures, deploys, and maintains the
wireless controller. This document assumes the reader has moderate hardware, computer,
and Internet skills.

Preface
viii
DWC-1000 Wireless Controller User’s Guide
Document Revision Level
This section provides a history of the revision changes to this document.
Revision Document Version Date Description
A Version 1 8/14/2012 Initial release
Changes in this Revision
N/A - this is first version of this document.
Related Documents
In addition to this guide, you may find the following additional documents helpful:
•DWL-3600 Access Point User Manual
•DWL-6600 Access Point User Manual
•DWL-8600 Access Point User Manual
•Wireless Controller CLI Reference Guide: DWC-1000

Preface
ix
DWC-1000 Wireless Controller User’s Guide
Document Conventions
This guide uses the following conventions to draw your attention to certain information.
Safety and Warnings
This guide uses the following symbols to draw your attention to certain information.
Symbol Meaning Description
Note Notes emphasize or supplement important points of the main text.
Tip Tips provide helpful information, guidelines, or suggestions for performing tasks more
effectively.
Warning Warnings indicate that failure to take a specified action could result in damage to the
device, or could result in serious bodily injury.
Electric Shock Hazard This symbol warns users of electric shock hazard. Failure to take appropriate
precautions such as not opening or touching hazardous areas of the equipment could
result in injury or death.
Typographic Conventions
This guide also uses the following typographic conventions.
Convention Description
Bold Indicates text on a window, other than the window title, including menus, menu options, buttons, fields, and labels.
Italic Indicates a variable, which is a placeholder for actual text provided by the user or system. Angled brackets (< >)
are also used to indicate variables.
screen/code
Indicates text that is displayed on screen or entered by the user.
< > angled
brackets Indicates a variable, which is a placeholder for actual text provided by the user or system. Italic font is also used to indicate variables.
[ ] square
brackets Indicates optional values.
{ } braces Indicates required or expected values.
| vertical bar Indicates that you have a choice between two or more options or arguments.

10
DWC-1000 Wireless Controller User’s Guide
1. PRODUCT OVERVIEW
The DWC-1000 Wireless Controller is intended to provide small-to-medium-sized
businesses with a mechanism for configuring, managing, and monitoring up to 24 D-LINK
DWL-3600, DWL-6600, and/or DWL-8600 access points from a central location.
Using the wireless controller and the access points with which it is associated lets you:
•Discover and configure D-LINK access points on the WLAN
•Optimize wireless access point performance with centralized RF management, security,
Quality of Service (QoS), and other configuration features
•Streamline security configuration tasks and set up guest access
•Monitor network status and statistics
•Perform maintenance tasks and firmware updates for the wireless management system
and for D-Link access points on the WLAN
•Conduct troubleshooting procedures
Configuration is performed using configuration profiles. A configuration profile allows a
wireless controller to distribute a set of radio, Service Set Identifier (SSID), and QoS
parameters to the access points associated with that profile.
The wireless controller comes with one profile predefined. You can use this profile as is, edit
it to suit your requirements, or create new configuration profiles as necessary. For example:
•An office building might have one configuration profile for access points located in one
area of a facility (such as a general work area) and a different profile for access points in
another area of the facility (for example, in the Human Resources department).
•A shopping mall might need several configuration profiles if several businesses share a
WLAN, but each business has its own network.
•Large networks that need different policies per building or department could have access
points configured for security policies for each building and department ( for example, one
for guests, one for management, one for sales, and so on).

Product Overview
11
DWC-1000 Wireless Controller User’s Guide
Features and Benefits
The DWC-1000 Wireless Controller is intended for campuses, branch offices, and small-to-
medium businesses. In a stacked configuration with the appropriate licenses, a wireless
controller can support up to 96 access points. The wireless controller allows you to manage
your wireless network from a central point, implement security and QoS features centrally,
configure a guest access captive portal, and support Voice over Wi-Fi.
Scalable architecture with stacking and redundancy
•Supports for 6 access points on a single wireless controller with no additional license.
•Purchased license packs (DWC-1000-AP6-LIC) in increments of 6 access points allow for
support of up to 24 access points on a single wireless controller.
•Maximum of 4 wireless controllers allows for up to 96 access points in a single network.
•Supports auto-failover redundancy.
•Supports IEEE 802.11a, 802.11b, 802.11g, and 802.11n protocols.
Centralized management and configuration
•Auto-discovery of access points in L2 and L3 domains.
•Single point of management for the entire wireless network.
•Simplified profile-based configuration.
•DHCP server for dynamic IP address provisioning.
•Configurable management VLAN.
•Real-time monitoring of access points and associated client stations.
•System alarms and statistics reports on managed access points for managing, controlling,
and optimizing network performance.
Security
•Identity-based security authentication with an external RADIUS server or an internal
authentication server.
•Rogue access point detection, classification, and mitigation.
•Guest access and captive portal access.
•Purchased license pack (DWC-1000-VPN-LIC) enables VPN, router, and firewall
functionality via two Gigabit Ethernet Option ports.

12
DWC-1000 Wireless Controller User’s Guide
2. UNPACKING AND INSTALLATION
A DWC-1000 wireless controller system consists of one or more wireless controllers and a
collection of DWL-3600, DWL-6600, and/or DWL-8600 access points that are organized into
groups based on location or network access. This chapter describes how to unpack and
install the wireless controller system.
The topics covered in this chapter are:
Unpacking (page 13)
Package Contents (page 13)
Required Tools and Information (page 13)
Selecting a Location (page 14)
Front Panel Ports and LEDs (page 15)
Rear Panel (page 17)
Bottom Panel (Default IP Address) (page 18)
Licenses (page 18)
Installing the Wireless Controller (page 18)
Sample Applications (page 21)
Where to Go from Here (page 25)

Unpacking and Installation
13
DWC-1000 Wireless Controller User’s Guide
Unpacking
Follow these steps to unpack the wireless controller and prepare it for operation:
1. Open the shipping container and carefully remove the contents.
2. Return all packing materials to the shipping container and save it.
3. Confirm that all items listed in the "Package Contents" section are included in the
shipment. Check each item for damage. If any item is damaged or missing, notify your
authorized D-Link representative.
Package Contents
Each wireless controller package contains the following items:
•One D-Link DWC-1000 Wireless Controller
•One power cord
•One RJ-45 to DB-9 console cable
•One 3-foot Ethernet Category 5 UTP/straight-through cable
•One Reference CD-ROM containing product documentation in PDF format
•Two rack-mounting brackets
Required Tools and Information
You will need the following additional items to install your wireless controller:
•D-Link DWL-3600, DWL-6600, and/or DWL-8600 access points
•A Power over Ethernet (PoE) switch
•A personal computer (PC) with one of the web browsers on page 27 installed

Unpacking and Installation
14
DWC-1000 Wireless Controller User’s Guide
Selecting a Location
Selecting the proper location for the wireless controller is essential for its successful
operation. To ensure optimum performance, D-LINK recommends that you perform a site
survey. A site survey should enable you to:
•Identify how Wi-Fi coverage should be provided.
•Determine access point placement locations, and identify areas with weak signal or dead
spots that require additional access points.
•Determine areas of heavier usage that might require dense access point coverage.
•Determine the indoor propagation of RF signals.
•Identify potential RF obstructions and interference sources.
•Run a spectrum analysis of channels of the site to ascertain current RF behavior, and
detect both 802.11 and non-802.11 noise.
•Run an access point-to-client connectivity test to determine maximum throughput
achievable on the client.
Note: D-Link offers a virtual site survey if a live survey cannot be performed. For more
information, contact your D-Link representative.
After the site survey is complete, use the collected data to set up an RF plan using the Basic
Planning Worksheet in Appendix A.
After you complete the Basic Planning Worksheet, select a location for the wireless
controller. The ideal location should:
•Be flat and clean, with no dust, water, moisture, or exposure to direct sunlight or
vibrations.
•Be fairly cool and dry, and does not exceed 104°F (40°C).
•Not be prone to variations in temperature and humidity, or close to strong magnetic fields
or a device that generates electric noise.
•Not place the wireless controller next to, on top off, or below any device that generates
heat or will block the free flow of air through the wireless controller’s ventilation slots.
Leave at least 3 feet (91.4 cm) clear on both sides and rear of the controller.
•Allow you to reach the wireless controller and all cables attached to it.
•Have a working AC power outlet that is not controlled by a wall switch that can
accidentally remove power to the outlet.

Unpacking and Installation
15
DWC-1000 Wireless Controller User’s Guide
Front Panel Ports and LEDs
Figure 2-1. Front Panel Ports and Power LED

One RJ-45 Console Port
The RJ-45 labeled Console lets you connect a PC console to access the wireless
controller’s command-line interface.

Two Gigabit Option Ports
Two Gigabit Ethernet ports labeled Option let you connect the wireless controller to a
backbone (requires DWC-1000-VPN-LIC License Pack upgrade – see page 18). Each port
has an Activity LED (left) and Link LED (right) – see Table 2-1.
Table 2-1. Activity and Link LEDs
LED Color Description
Link LED
1000M
100M Orange ON = port is operating at 1000 Mbps (1 Gbps).
Green ON = port is operating at 100 Mbps.
OFF = port is operating at 10 Mbps.
Activity LED Green ON = port link status is present.
Blink = port is sending or receiving data.
OFF = port has no link.






Unpacking and Installation
16
DWC-1000 Wireless Controller User’s Guide

Four Gigabit Ethernet LAN Ports
Four Gigabit Ethernet ports labeled LAN 1 through LAN 4 let you connect Ethernet devices
such as computers, switches, and hubs. Each port has an Activity LED (left) and Link LED
(right) – see Table 2-2.

Two USB 2.0 Ports
Two Universal Serial Bus (USB) 2.0 ports are provided for connecting USB flash drives, hard
drives, computers, and printers. Each port has an LED.
Table 2-2. USB LEDs
LED Color Description
USB LED Green ON = link is good.
Blink = there is activity on the port.
OFF = device is powered off.

Power LED
Facing the front of the wireless controller, the Power LED is located on the far left side. This
LED provides a visual indication of the wireless controller’s power-on or power-off state.
Table 2-3. Power LED
LED Color Description
Power LED Green ON = power-on process complete.
OFF= wireless controller is powered OFF.
Blink = system is defective and firmware upgrades have failed.
Orange ON = power-on process in progress.
OFF= wireless controller is in recovery mode following a crash.

Unpacking and Installation
17
DWC-1000 Wireless Controller User’s Guide
Rear Panel
Figure 2-2 and Table 2-4 describe the components on the rear panel of the wireless
controller.
Figure 2-2. Rear Panel Ports
Table 2-4. Rear Panel (Viewed from Right to Left)
Legend Description

ON/OFF switch

AC socket
Reset button
Using the Reset Button
Using the reset button on the rear panel, you can perform a factory default reset. This
operation removes all overrides made to the wireless controller’s factory default
configuration and returns the wireless controller to its original factory default settings. To
protect against accidental resets, the reset button is recessed on the wireless controller’s
rear panel.
Note: You can also revert the wireless controller to its factory default settings from the
FIRMWARE page (see “Restoring Factory Default Settings” on page 203).
To use the reset button to perform a factory default reset:
1. Leave power plugged into the wireless controller.




Unpacking and Installation
18
DWC-1000 Wireless Controller User’s Guide
2. Find the reset button on the back panel, and then use a thin object to press and hold the
reset button for at least 15 seconds.
3. Release the reset button.
Bottom Panel (Default IP Address)
The bottom of the wireless controller enclosure has a product label that shows the wireless
controller’s serial number, regulatory compliance, and other information.
Licenses
Two types of licenses are available for upgrading the wireless controller.
•DWC-1000-AP6-LIC License Packs. Allow the wireless controller to manage 6 additional
access points. You can upgrade the wireless controller 3 times with these license packs,
enabling it to support a maximum of 24 access points.
•DWC-1000-VPN-LIC License Pack. Allows the wireless controller to support VPN,
firewall, and routing functions via its two Gigabit Ethernet Option ports.
For more information about licenses, visit http://www.dlink.com and see “Activating
Licenses” on page 208.
Installing the Wireless Controller
Rack-Mounting the Wireless Controller
The wireless controller can be mounted in a standard 19-inch equipment rack.
1. Attach the mounting brackets to each side of the chassis (see Figure 2-3) and secure them
with the supplied screws.
Figure 2-3. Attaching the Rack-Mount Brackets

Unpacking and Installation
19
DWC-1000 Wireless Controller User’s Guide
2. Use the screws provided with the equipment rack to mount the wireless controller in the
rack (see Figure 2-4).
Figure 2-4. Install the Wireless Controller in a Standard-Sized Equipment Rack
Connecting the Wireless Controller
To install the wireless controller, perform the following procedure (and see Figure 2-5 on
page 20).
1. Install the switch and access points according to the instructions in their documentation.
2. Connect one end of an Ethernet LAN cable to one of the ports labeled LAN (1-4) on the
front of the wireless controller. Connect the other end of the cable to an available RJ-45
port on the PoE switch in the LAN network segment.
3. Connect one of the wireless controller ports labeled LAN (1-4) to the network or directly to
a PC.
Your installation should resemble the one in Figure 2-5.

Unpacking and Installation
20
DWC-1000 Wireless Controller User’s Guide
Figure 2-5. Wireless Controller Installation
4. If you purchased a VPN/Firewall/Router License Pack, use the Option1 and Option2 ports
on the front of the wireless controller as follows:
– Option1 = WAN port for connecting to a cable or DSL modem.
– Option2 = WAN or DMZ port for dual WAN connections or internal server farm
purposes. If used as a DMZ port, the port’s IP address must be different than the IP
address of the wireless controller’s LAN interface.
5. Using the supplied power cord, connect the wireless controller to a working AC outlet.
6. Set the ON/OFF switch on the rear panel of the wireless controller to the ON position. The
green Power LED to the left of the front panel USB ports goes ON. If the LED is not ON,
see “Power LED is OFF” on page 212.