D-Link DWS-1008 User manual

DWS-1008 User’s Manual
D-Link Systems, Inc. I
Table of Contents
Table of Contents
Product Contents
System Requirements
Introduction
Hardware Overview
Features
Installation Overview
Getting Started
Installation
Configuration
CLI Quickstart Command
Accessing the CLI
Configuration Overview
Configuring for Authenticating Users
Configuring APs for Wireless Users
Configuring a Service Profile
Configuring AAA For Administrative and Local Access
Overview of AAA Access
Types of Administrative Access
First-Time Configuration via the Console
Customizing AAA with Globs and Groups
Configuring and Managing Ports and VLANs
Setting the Port Type
Displaying Port Statistics
Configuring and Managing VLANs
Managing the Layer 2 Forwarding Database
Configuring the Aging Timeout Period
Port and VLAN Configuration Scenario
Configuring and Managing IP Interfaces and Services
MTU Support
Configuring and Managing IP Interfaces
Configuring and Managing IP Routes
Managing the Management Services
Managing SSH
Managing Telnet
Configuring and Managing DNS
Configuring and Managing Aliases
Configuring and Managing Time Parameters
Configuring and Managing NTP
Managing the ARP Table
1
1
2
3
4
5
7
8
11
12
17
18
28
29
37
52
53
54
54
56
63
63
69
73
78
81
81
86
86
86
90
93
94
97
99
101
102
105
107

DWS-1008 User’s Manual
D-Link Systems, Inc. II
Logging In to a Remote Device
Tracing a Route
IP Interfaces and Services Configuration Scenario
Configuring SNMP
Enabling SNMP Versions
Setting SNMP Security
Configuring a Notification Profile
Configuring a Notification Target
Enabling the SNMP Service
Displaying SNMP Information
Configuring DWL-8220AP Access Points
Overview
Service Profiles
Radio Profiles
Configuring Access Points
Specifying the Country of Operation
Configuring AP Port Parameters
Configuring Security
Configuring a Service Profile
Configuring Radio-Specific Parameters
Assigning a Radio Profile and Enabling Radios
Disabling or Reenabling Radios
Displaying AP Configuration Information
Configuring User Encryption
Configuring WPA
Configuring RSN
Configuring WEP
Encryption Configuration Scenarios
Configuring RF Auto-Tuning
RF AutoTuning Overview
Changing RF AutoTuning Settings
Displaying RF AutoTuning Settings
Wi-Fi Multimedia
How WMM Works in MSS
Disabling or Reenabling WMM
Displaying WMM Information
Configuring and Managing Spanning Tree Protocol
Enabling the Spanning Tree Protocol
Changing Standard Spanning Tree Parameters
Configuring and Managing STP Fast Convergence Features
Displaying Spanning Tree Information
Spanning Tree Configuration Scenario
109
110
111
115
116
120
121
125
127
128
130
130
139
143
146
146
152
156
159
166
168
168
170
176
178
185
188
190
197
197
203
205
208
208
209
209
211
211
211
216
219
223

DWS-1008 User’s Manual
D-Link Systems, Inc. III
Configuring and Managing IGMP Snooping
Disabling or Reenabling IGMP Snooping
Disabling or Reenabling Proxy Reporting
Enabling the Pseudo-Querier
Changing IGMP Timers
Enabling Router Solicitation
Configuring Static Multicast Ports
Displaying Multicast Information
Configuring and Managing Security ACLs
About Security Access Control Lists
Creating and Committing a Security ACL
Mapping Security ACLs
Modifying a Security ACL
Using ACLs to Change CoS
Enabling Prioritization for Legacy Voice over IP
Security ACL Configuration Scenario
Managing Keys and Certificates
Why Use Keys and Certificates?
About Keys and Certificates
Creating Keys and Certificates
Displaying Certificate and Key Information
Key and Certificate Configuration Scenarios
Configuring AAA for Network Users
About AAA for Network Users
AAA Tools for Network Users
Configuring 802.1X Authentication
Configuring Authentication and Authorization by MAC Address
Configuring Last-Resort Access
Configuring AAA for Users of Third-Party APs
Assigning Authorization Attributes
Overriding or Adding Attributes Locally with a Location Policy
Configuring Accounting for Wireless Network Users
Displaying the AAA Configuration
Avoiding AAA Problems in Configuration Order
Configuring a Mobility Profile
Network User Configuration Scenarios
Configuring Communication with RADIUS
RADIUS Overview
Before You Begin
Configuring RADIUS Servers
Configuring RADIUS Server Groups
RADIUS and Server Group Configuration Scenario
225
225
225
225
226
227
228
228
232
232
234
242
245
249
251
253
255
255
256
259
263
264
270
270
275
280
285
289
290
294
303
306
309
310
312
313
320
320
320
320
323
326

DWS-1008 User’s Manual
D-Link Systems, Inc. IV
Managing 802.1X
Managing 802.1X on Wired Authentication Ports
Managing 802.1X Encryption Keys
Managing 802.1X Client Reauthentication
Managing Other Timers
Displaying 802.1X Information
Managing Sessions
About the Session Manager
Displaying and Clearing Administrative Sessions
Displaying and Clearing Network Sessions
Rogue Detection and Countermeasures
About Rogues and RF Detection
Summary of Rogue Detection Features
Configuring Rogue Detection Lists
Enabling Countermeasures
Disabling or Reenabling Active Scan
Enabling AP Signatures
Disabling or Reenabling Logging of Rogues
Enabling Rogue and Countermeasures Notifications
IDS and DoS Alerts
Displaying RF Detection Information
Managing System Files
About System Files
Working with Files
Managing Configuration Files
Backing Up and Restoring the System
Appendix A - Troubleshooting
Fixing Common Setup Problems
Recovering the System Password
Configuring and Managing the System Log
Running Traces
Using Show Commands
Remotely Monitoring Traffic
Capturing System Information for Technical Support
Appendix B - Supported RADIUS Attribites
Supported Standard and Extended Attributes
Appendix C - DHCP Server
How the MSS DHCP Server Works
Configuring the DHCP Server
Displaying DHCP Server Information
Appendix D - Glossary
Appendix E - Technical Specifications
Appendix F - Warranty
Appendix G - Registration
328
328
329
332
334
335
338
338
338
340
345
345
348
350
355
355
356
356
356
356
362
366
366
368
372
376
378
378
380
380
387
391
392
399
400
400
405
406
406
407
409
441
444
449

1
DWS-1008 User’s Manual
D-Link Systems, Inc.
Product Contents
Product Contents
DWS-1008 8-Port Wireless Switch
Power Supply
Serial Cable for Connection to Console
Rack-Mount Brackets (2)
Rubber Feet (4)
Screws (6)
Install Guide
Manual and Reference Guide on CD
System Requirements
An existing 10/100 Ethernet network
DWL-8220AP Access Point(s)
Warning: Installation must be performed by qualified service personnel only.
Please follow all warning notices and instructions marked on the product or
included in the documentation. The manufacturer is not responsible for any radio
or TV interference caused by unauthorized modifications to this equipment.
Such modifications could void the user’s authority to operate the equipment.
The DWS-1008 switch has been designed and tested to be installed in an
operating ambient temperature of 0° C to +40° C (32° F to 104° F). To reduce
the risk of equipment damage, install equipment with consideration to these
ambient conditions.

2
DWS-1008 User’s Manual
D-Link Systems, Inc.
Introduction
The D-Link® AirPremier® MobileLAN™ DWS-1008 is a wireless LAN switch optimized for
deployment in the Small-Medium Enterprise (SME) environment. The DWS-1008 is designed
to allow easy user installation and operation yet support advanced wireless switch features
such as secure mobility, policy enforcement, and AAA and 802.1x offload capabilities.
The D-Link MobileLAN solution is powered by Trapeze Networks and executes Trapeze
Networks’ Mobility System Software (MSS), which maintains the intelligence of the MobileLAN
system. In addition to managing users’ identities as they roam, the DWS-1008 configures
and controls all aspects of the complementing DWL-8220AP Wireless Switch Dualband
Access Points.
AAA Authentication Offloading Capability
The MobileLAN DWS-1008 supports Administration, Authorization, and Authentication (AAA)
policies to ensure maximum security. Rather than checking the identity of a connecting user
from the switch’s local database, user authentication policies can be sent back to an AAA
server for complete verification. This offloading capability ensures that the WLAN will not
overload when clients are simultaneously connecting to the network.
User-Based Authentication Services
This wireless switch delivers Identity-based Networking, which provides user-based services
such as virtual private group membership, personal firewall filters, time-of-day/day-of-week
access, encryption type, authentication, usage tracking, location tracking, and associated
network statistics.
Easy Deployment
The DWS-1008 includes eight 10/100 Mbps ports with integrated PoE to enable network
connectivity to any connected DWL-8220AP. It is designed for distributed deployments in
the wiring closet or small or medium offices. It can support up to six directly connected
DWL-8220APs and up to six more DWL-8220APs connected indirectly.
Maximum Performance With Load Balancing Capabilities
The DWS-1008 performs Layer 2 forwarding and also comes with extensive Layer 3-4 and
identity-tracking capabilities. It integrates seamlessly with wired infrastructures and offers
redundant load-sharing links, 802.1q trunking, spanning tree and per-VLAN spanning tree
(PVST+). It also supports IGMP snooping, which is vital to supporting IP multicast streams.
Introduction

3
DWS-1008 User’s Manual
D-Link Systems, Inc.
Hardware Overview
Hardware Overview (Front Panel)
Console Port:
The serial console port provides a direct management connection to a DWS-1008 switch’s
command-line interface (CLI). The port has a DB-9 female connector and supports the
EIA-232D signaling standard.
Ethernet Ports (1-6):
The 10/100 Ethernet ports on the DWS-1008 switch provide automatic MDI/MDX, which
automatically crosses over the send and receive signals if required. Ports 1-6 support PoE.
Uplink Ports (7 & 8):
Ports 7 and 8 on the DWS-1008 switch are uplink ports only and do not support PoE.
LEDS:
Link (1-8):
Solid green 100Mbps link is operational.
Solid amber 10Mbps link is operational.
Blinking green Traffic is active on the 100Mbps link.
Blinking amber Traffic is active on the 10Mbps link.
AP (1-6):
Solid green For an DWL-8220AP’s active link, with PoE enabled, all the following
are true:
• Access point has booted.
• Access point has received a valid configuration from the switch.
• Management link with an access point is operational.
Alternating green Access point is booting with an image received from the switch.
and amber If the LED remains in this state indefinitely, the boot or configuration
attempt has failed.
Solid amber PoE is on but no access point is connected to the link.
Blinking amber Access point is not connected or is unresponsive, or there is a PoE
problem.
Unlit Port is not configured as an AP access port, or PoE is off.

4
DWS-1008 User’s Manual
D-Link Systems, Inc.
Features
Power Features
Power supplies - The DWS-1008 switch contains one 100-120 VAC auto-sensing AC
power supply.
Management Features
• Serial and network command-line interface (CLI) access—You can access the CLI
through a direct serial connection or through the network using Secure Shell (SSH) or
Telnet.
• Web View manager - Web View is a Web-based application for configuring and
managing a single DWS-1008 switch through a Web browser. Web View creates a
secure connection by using Hypertext Transfer Protocol over Secure Sockets Layer
(HTTPS).
IP Services
• IP interfaces - You can configure an IP interface for each VLAN.
• IP ping and traceroute - You can test IP connectivity between the switch and other
devices.
• Domain Name Service (DNS) - You can configure the switch to use DNS servers for
name resolution. You also can configure a default domain name to append to
hostnames.
• Network Time Protocol (NTP) - The DWS-1008 switch can sets its time and date
by polling an NTP server.
• System log - The DWS-1008 generates log messages to log system events. The log
messages are stored locally and also can be exported to syslog servers.
• Simple Network Management Protocol (SNMP) - A DWS-1008 switch can be
configured to generate SNMP traps for major system events.
Features

5
DWS-1008 User’s Manual
D-Link Systems, Inc.
Installation Overview
Installation Overview
Caution: The DWS-1008 switch has been designed and tested to be installed in an operating
ambient temperature of 0° C to +40° C (32° F to 104° F). To reduce the risk of equipment
damage, install equipment with consideration to these ambient conditions.
Serial Console Cable
The serial console port has a female DB-9 connector and supports the EIA-232D signaling
standard. You need a standard DB-9-male-to-DB-9-female PC modem cable.
Serial Console Pin Signals
Switch Pin Usage PC Pin Usage
2 Receive 3 Transmit
3 Transmit 2 Receive
5 Ground 5 Ground
10/100 Ethernet Cable Wiring
Connections on the 10/100 ports require CAT5 cable based on the EIA/TIA-586 standard.
The 10/100 Ethernet ports on the DWS-1008 switch provide automatic MDI/MDX, which
automatically crosses over the send and receive signals if required.
The table below lists the pin signals for 10/100 Ethernet straight-through wiring. Pins 4, 5,
7, and 8 are used only when Power over Ethernet (PoE) is enabled on the port. RD means
Receive Data and TD means Transmit Data.
DWS Switch Other Device
Pin Function Pin Function
1 RD+ 1 TD+
2 RD- 2 TD-
3 TD+ 3 RD+
4 PoE+ 4 PoE+
5 PoE+ 5 PoE+
6 TD- 6 RD-
7 PoE- 7 PoE-
8 PoE- 8 PoE-
Note: Mounting a DWL-8220AP access point on a solid surface requires CAT5 cable that
does not have strain relief. For installation on all other surfaces, you can use CAT5 cable
with or without strain relief.

6
DWS-1008 User’s Manual
D-Link Systems, Inc.
Installation Hardware and Tools
Caution: To reduce the risk of equipment damage, make sure the switch is installed so that
the mechanical load on the device is evenly distributed. For example, make sure the switch
is level in the equipment rack, is evenly fastened by screws on either side, and does not
have a heavy object resting on one side of the switch.
Mounting Option Required Hardware and Tools Included
Front-mount option Mounting brackets Yes
Four rack-mount screws No*
Screwdriver No
Power cord Yes
Serial console cable Yes
Tabletop Four adhesive rubber feet Yes
Power cord Yes
Serial console cable Yes
* Equipment racks vary, and the screw and screwdriver type depend on the equipment
rack.
You can mount the DWS-1008 switch in a standard 48.26-cm (19-inch) equipment rack or
on a tabletop. Each switch is shipped with two brackets for rack mounting and four adhesive
rubber feet for tabletop mounting. The mounting brackets support front mounting only.
Warning: Earth grounding is required for a DWS-1008 switch installed in a rack. If you are
relying on the rack to provide ground, the rack itself must be grounded with a ground strap to
the earth ground. Metal screws attaching the switch to the rack provide ground attachment
to the rack.
In the U.S., overcurrent protection must be provided by the installation. Branch circuit
protection in accordance with National Fire Protection Association (NFPA) 70, National
Electrical Code (NEC) is required. Consideration must be given to the electrical ratings
on the switch and branch circuit protection. Do not install equipment such that the branch
circuit current and voltage protection is exceeded. Pay particular attention to the earthing
connection for the supply connections. When using an extension cord or power strip, pay
attention to the grounding type.

7
DWS-1008 User’s Manual
D-Link Systems, Inc.
Please read the following before you begin:
Mobility System Software* (MSS) operates a D-Link Mobility System wireless LAN (WLAN)
consisting of DWS-1008 switches, and DWL-8220AP access points (AP). MSS has a
command-line interface (CLI) on the switch that you can use to configure and manage the
switch and its attached access points.
You configure the DWS-1008 switch and DWL-8220AP access points primarily with set,
clear, and show commands. Use set commands to change parameters. Use clear commands
to reset parameters to their defaults. In many cases, you can overwrite a parameter with
another set command. Use show commands to display the current configuration and monitor
the status of network operations.
* The Mobility System Software is built-in to the firmware on the DWS-1008 switch. No additional software is
required.
The switch supports two connection modes:
• Administrative access mode, which enables the network administrator to connect to
the switch and configure the network.
• Network access mode, which enables network users to connect through the switch
to access the network.
The D-Link Mobility System consists of the following components:
• DWS-1008 switch - Distributed, intelligent machines for managing user connectivity,
connecting and powering DWL-8220AP access points, and connecting the WLAN to
the wired network backbone.
• DWL-8220AP access points - Wireless access points (APs) that transmit and receive
radio frequency (RF) signals to and from wireless users and connect them to a
DWS-1008 switch.
• Mobility System Software™ (MSS™) - The operating system (firmware) that runs
all D-Link DWS-1008 switches and DWL-8220AP access points in a WLAN, and is
accessible through a command-line interface (CLI) or the Web View interface.
Getting Started
Getting Started

8
DWS-1008 User’s Manual
D-Link Systems, Inc.
Installation
Installation
Equipment Rack Installation
1. Remove the four bracket screws from each side of the switch.
2. Align a bracket over the screw holes:
• For a front-mount equipment rack, align the bracket so that the bracket flange is flush
with the switch’s front panel and extends away from the switch.
• For a center-mount equipment rack, align the bracket so that the bracket flange is
located near the center screw holes.
3. Reinsert the screws to secure the brackets to the switch.
4. Repeat for the other bracket.
5. Lift the switch into position in the equipment rack.
6. Insert the bottom rack-mount screws into the bracket flanges to secure the switch to the
equipment rack, then insert the top screws.
Warning: To prevent the switch from slipping, do not release the switch until all the
rack-mount screws are tight.
Tabletop Installation
1. On a clean work surface with no debris, carefully turn the switch upside down.
2. Wipe the four placement locations for the rubber feet to clear away any oil or dust. The
location areas are marked by X’s.
3. Attach the four rubber adhesive feet over the X’s.
4. Turn the switch right-side up, and place the switch in position on the table.
Powering On a DWS-1008 Switch
Warning: The switch relies on the building’s installation for overcurrent protection. Ensure
that a fuse or circuit breaker no larger than 120 VAC, 15 A U.S. (240 VAC, 10 A international)
is used on the phase conductors.
1. Make sure any insertable power supply is fully seated in the switch.
2. Attach a power cord to an AC power source.
3 Plug the power cord into the power supply. The switch will begin booting as soon as you
plug in the power cord(s).

9
DWS-1008 User’s Manual
D-Link Systems, Inc.
Installation (continued)
Installation
Powering On a DWS-1008 Switch (continued)
4. Observe the power supply LED for each connected power supply to verify that the LED is
steadily glowing green. This indicates normal power supply operation.
Connecting to a Serial Management Console
Initial configuration of the DWS-1008 switch requires a connection to the switch’s CLI through
the serial console port.
To connect a PC to the serial console port:
1. Insert the serial cable into the PC port.
2. Insert the other end of the cable into the serial console port on the switch.
3. Start a standard VT100 terminal emulation application on the PC, and configure the
following modem settings:
• 9600 bps
• 8 bits
• 1 stop
• No parity
• Hardware flow control off or disabled
4. Open a connection on a serial port. If the switch is already powered on, press Enter three
times to display a command prompt. Refer to the “Accessing the CLI” for more
information.
Troubleshooting Serial Management
Connection
1. Verify that the switch is powered on.
2. Verify that the serial cable is fully inserted in the PC and switch’s console ports.
3. Verify that the correct modem settings are configured in the terminal emulation application
as shown in step 3 above.
4. Verify that you opened the connection on the PC port connected to the switch. For example,
if you inserted the cable in PC port COM1, make sure you open the connection on COM1
instead of COM2 or another port. If none of the previous steps results in a management
connection, use another serial cable.

10
DWS-1008 User’s Manual
D-Link Systems, Inc.
Connecting to the Network
Use the following procedures to connect a DWS-1008 switch to DWL-8220AP access points
or other 10/100 Ethernet devices.
Connecting to a DWL-8220AP or Other 10/100 Ethernet Devices
Note: The 10/100 Ethernet ports are configured as wired network ports by default. You must
change the port type for locally connected DWL-8220AP access points, and for wired end
stations that use AAA through the DWS-1008 switch to access the network.
For installations in Japan: Provide an earthing connection before you connect the mains plug
to the mains. When disconnecting the earthing connection, make sure to disconnect only
after you pull out the mains plug for the mains.
1. Insert a CAT5 cable with a standard RJ-45 connector. The 10/100 Ethernet ports on the
DWS-1008 switch provide automatic MDI/MDX.
2. If the cable is directly attached to a DWL-8220AP access point:
• For a first-time installation, set the port type to activate the link.
• If the port type is already set for an access point, observe the appearance of the AP
LED for the port.
3. If the cable is attached to a wired end station that uses AAA through the switch to access
the network:
• For a first-time installation, set the port type to activate the link.
• If the port type is already set for a wired authentication port, go on to step 4.
4. If the cable is directly attached to a device other than an DWL-8220AP access point:
• Observe the appearance of the Link LED for the port.
• If the Link LED is unlit, check the cable and verify that the device at the other end
of the link is operating.
Installation (continued)
Installation

11
DWS-1008 User’s Manual
D-Link Systems, Inc.
Configuration
Configuration
You can use CLI (Command Line Interface) to configure a new switch or to continue
configuration of a partially configured switch:
CLI (Command Line Interface)
You can configure a switch using the CLI by attaching a PC to the switch’s Console port.
After you configure the switch for SSH or Telnet access, you also can use these protocols to
access the CLI.

12
DWS-1008 User’s Manual
D-Link Systems, Inc.
Configuration (continued)
Configuration
CLI Quickstart Command
The quickstart command runs a script that interactively helps you configure the following
items:
• System name
• Country code (regulatory domain)
• System IP address
• Default route
• Administrative users and passwords
• Unencrypted (clear) SSID names
• Encrypted (crypto) SSID names and dynamic WEP encryption for encrypted SSIDs’
wireless traffic
• Usernames and passwords for secure access using 802.1X authentication using
PEAP-MSCHAP-V2 and secure wireless data encryption using dynamic Wired
Equivalent Privacy (WEP)
• Directly connected DWL-8220AP access points
• Distributed access points
The quickstart command displays a prompt for each of these items, and lists the default
if applicable. You can advance to the next item, and accept the default if applicable, by
pressing Enter. Depending on your input, the command also automatically generates the
following key pairs and self-signed certificates:
• SSH key pair (always generated)
• Admin key pair and self-signed certificate (always generated)
• EAP (802.1X) key pair and self-signed certificate (generated if you type
usernames and passwords for users of encrypted SSIDs)
The command automatically places all ports that are not used for directly connected access
points into the default VLAN (VLAN 1).
Caution: The quickstart command is for configuration of a new switch only. After prompting
you for verification, the command erases the switch’s configuration before continuing. If you
run this command on a switch that already has a configuration, the configuration will be
erased. In addition, error messages such as Critical AP Notice for directly connected MPs
can appear.

13
DWS-1008 User’s Manual
D-Link Systems, Inc.
Configuration (continued)
Configuration
To run the quickstart command:
1. Attach a PC to the DWS-1008 switch’s serial console port. Use the following modem
settings: 9600 bps, 8 bits, 1 stop, no parity, hardware flow control disabled.
2. Press Enter three times, to display a username prompt (Username:), a password prompt
(Password:), and then a command prompt such as the following:
DWS-1008-aabbcc>
Each switch has a unique system name that contains the model number and the last half of
the switch’s MAC address.
3. Access the enabled level (the configuration level) of the CLI:
DWS-1008-aabbcc> enable
4. Press Enter at the Enter password prompt.
5. Type quickstart. The command asks you a series of questions. You can type ? for more
help. To quit, press Ctrl+C.
One of the questions the script asks is the country code. For a list of valid country codes,
refer to the section “Appendix: Country of Operation”.
Another question the script asks is, “Do you wish to configure wireless?” If you answer y,
the script goes on to ask you for SSID and user information, for unencrypted and encrypted
SSIDs. If you answer n, the script generates key pairs for SSH and the administrative users
you entered, generates a self-signed administrative certificate, and then ends.
Quickstart Example
This example configures the following parameters:
• System name: DWS-1008-Corp
• Country code (regulatory domain): US
• System IP address: 10.10.10.4, on IP interface 10.10.10.4 255.255.255.0
Note: The quickstart script asks for an IP address and subnet mask for the system IP address,
and converts the input into an IP interface with a subnet mask, and a system IP address that
uses that interface. Likewise, if you configure this information manually instead of using the
quickstart command, you must configure the interface and system IP address separately.
• Default route: 10.10.10.1

14
DWS-1008 User’s Manual
D-Link Systems, Inc.
Configuration (continued)
Configuration
• Administrative user admin1, with password letmein. The only management access
the switch allows by default is CLI access through the serial connection.
• System Time and date parameters:
• Date: 15th of August, 2005
• Time: 6:58 PM
• Timezone: PST (Pacific Standard Time), with an offset of -8 hours from
Universal Coordinated Time (UTC)
• Unencrypted SSID name: public
• Encrypted SSID name: corporate
• Username alice and password alicepass for 802.1X authentication; username bob
and password bobpass for 802.1X authentication
• Directly connected DWL-8220AP access points on port 2 and 3
The IP addresses, usernames, and passwords in this document are examples. Use values
that are appropriate for your organization.
If you configure time and date parameters, you will be required to enter a name for the
timezone, and then enter the value of the timezone (the offset from UTC) separately. You can
use a string of up to 32 alphabetic characters as the timezone name.
The image below shows an example. Users bob and alice can access encrypted SSID
corporate on either of the DWL-8220AP access points. Users user1 and user2 can use the
same APs to access unencrypted SSID public. Although the same hardware supports both
SSIDs and sets of users, AAA ensures that only the users who are authorized to access an
SSID can access that SSID. Users of separate SSIDs can even be in the same VLAN, as
they are in this example.

15
DWS-1008 User’s Manual
D-Link Systems, Inc.
Configuration (continued)
Configuration
DWS-1008-aabbcc# quickstart
This will erase any existing config. Continue? [n]: y
Answer the following questions. Enter ‘?’ for help. ^C to break out
System Name [DWS-1008]: DWS-1008-Corp
Country Code [US]: US
System IP address []: 10.10.10.4
System IP address netmask []: 255.255.255.0
Default route []: 10.10.10.1
Admin username [admin]: admin1
Admin password []: letmein
Do you wish to set the time? [y]: y
Enter the date (dd/mm/yy) []: 15/08/05
Enter the time (hh:mm:ss) []: 18:58:00
Enter the timezone []: PST
Enter the offset from GMT for ‘PST’ in hh:mm [0:0]: -8
Do you wish to configure wireless? [y]: y
Enter a clear SSID to use: public
Do you want to do 802.1x and PEAP-MSCHAPv2? [y]: y
Enter a crypto SSID to use: corporate
Enter a username with which to do PEAP-MSCHAPv2, <cr> to exit: alice
Enter a password for alice: alicepass
Enter a username with which to do PEAP-MSCHAPv2, <cr> to exit: bob
Enter a password for bob: bobpass
Enter a username with which to do PEAP-MSCHAPv2, <cr> to exit:
Do you wish to configure access points? [y]: y
Enter a port number [1-20] on which an AP resides, <cr> to exit: 2
Enter AP model on port 2: DWL-8220AP
Enter a port number [1-20] on which an AP resides, <cr> to exit: 3
Enter AP model on port 3: DWL-8220AP
Enter a port number [1-20] on which an AP resides, <cr> to exit:
Do you wish to configure distributed access points? [y]: n
success: created keypair for ssh
success: created keypair for admin
success: created self-signed certificate for admin
success: created keypair for eap
success: created self-signed certificate for eap
success: remember to save this config
DWS-1008-aabbcc# save config