Motorola WiNG 5.4.2 User manual

Motorola Solutions
WiNG 5.4.2
ACCESS POINT
SYSTEM REFERENCE GUIDE

MOTOROLA SOLUTIONS WING 5.4.2
ACCESS POINT
SYSTEM REFERENCE GUIDE
72E-172112-01
Revision A
February 2013

ii WiNG 5.4.2 Access Point System Reference Guide
No part of this publication may be reproduced or used in any form, or by any electrical or mechanical means, without
permission in writing from Motorola Solutions. This includes electronic or mechanical means, such as photocopying,
recording, or information storage and retrieval systems. The material in this manual is subject to change without notice.
The software is provided strictly on an “as is” basis. All software, including firmware, furnished to the user is on a licensed
basis. Motorola Solutions grants to the user a non-transferable and non-exclusive license to use each software or firmware
program delivered hereunder (licensed program). Except as noted below, such license may not be assigned, sublicensed,
or otherwise transferred by the user without prior written consent of Motorola Solutions. No right to copy a licensed program
in whole or in part is granted, except as permitted under copyright law. The user shall not modify, merge, or incorporate any
form or portion of a licensed program with other program material, create a derivative work from a licensed program, or use
a licensed program in a network without written permission from Motorola Solutions. The user agrees to maintain Motorola
Solution’s copyright notice on the licensed programs delivered hereunder, and toinclude the same on any authorized copies
it makes, in whole or in part. The user agrees not to decompile, disassemble, decode, or reverse engineer any licensed
program delivered to the user or any portion thereof.
Motorola Solutions reserves the right to make changes to any software or product to improve reliability, function, or design.
Motorola Solutions does not assume any product liability arising out of, or in connection with, the application or use of any
product, circuit, or application described herein.
No license is granted, either expressly or by implication, estoppel, or otherwise under any Motorola Solutions, Inc.,
intellectual property rights. An implied license only exists for equipment, circuits, and subsystems contained in Motorola
Solutions products

TABLE OF CONTENTS
About this Guide
Chapter 1, Overview
1.1 About the Motorola Solutions WiNG 5 Software ........................................................................................................1-3
Chapter 2, Web User Interface Features
2.1 Accessing the Web UI ..................................................................................................................................................2-2
2.1.1 Browser and System Requirements ...................................................................................................................2-2
2.1.2 Connecting to the Web UI ..................................................................................................................................2-2
2.2 Icon Glossary ................................................................................................................................................................2-4
2.2.1 Global Icons ........................................................................................................................................................2-4
2.2.2 Dialog Box Icons .................................................................................................................................................2-5
2.2.3 Table Icons ..........................................................................................................................................................2-5
2.2.4 Status Icons ........................................................................................................................................................2-6
2.2.5 Configurable Objects ..........................................................................................................................................2-6
2.2.6 Configuration Objects .........................................................................................................................................2-9
2.2.7 Configuration Operation Icons ............................................................................................................................2-9
2.2.8 Access Type Icons .............................................................................................................................................2-10
2.2.9 Administrative Role Icons .................................................................................................................................2-10
2.2.10 Device Icons ....................................................................................................................................................2-11
Chapter 3, Quick Start
3.1 Using the Initial Setup Wizard .....................................................................................................................................3-2
3.1.1 Virtual Controller AP Mode .................................................................................................................................3-6
3.1.2 Standalone Mode ...............................................................................................................................................3-6
3.1.3 Adopt to a controller .........................................................................................................................................3-17

ii WiNG 5.4.2 Access Point System Reference Guide
Chapter 4, Dashboard
4.1 Dashboard .....................................................................................................................................................................4-2
4.1.1 Dashboard Conventions ......................................................................................................................................4-2
4.1.1.1 Health ........................................................................................................................................................4-3
4.1.1.2 Inventory ....................................................................................................................................................4-6
4.2 Network View .............................................................................................................................................................4-10
4.2.1 Network View Display Options ........................................................................................................................4-11
4.2.2 Device Specific Information ..............................................................................................................................4-12
Chapter 5, Device Configuration
5.1 RF Domain Configuration ..............................................................................................................................................5-2
5.1.1 RF Domain Sensor Configuration ........................................................................................................................5-3
5.2 System Profile Configuration ........................................................................................................................................5-5
5.2.1 General Profile Configuration .............................................................................................................................5-6
5.2.2 Profile Radio Power ............................................................................................................................................5-7
5.2.3 Profile Adoption (Auto Provisioning) Configuration ............................................................................................5-9
5.2.4 Profile Interface Configuration .........................................................................................................................5-11
5.2.4.1 Ethernet Port Configuration ....................................................................................................................5-12
5.2.4.2 Virtual Interface Configuration ...............................................................................................................5-20
5.2.4.3 Port Channel Configuration .....................................................................................................................5-24
5.2.4.4 Access Point Radio Configuration ...........................................................................................................5-30
5.2.4.5 PPPoE Configuration ................................................................................................................................5-40
5.2.4.6 WAN Backhaul Configuration .................................................................................................................5-43
5.2.5 Profile Network Configuration ..........................................................................................................................5-46
5.2.5.1 DNS Configuration ..................................................................................................................................5-47
5.2.5.2 ARP ..........................................................................................................................................................5-48
5.2.5.3 L2TPv3 Profile Configuration ...................................................................................................................5-50
5.2.5.4 IGMP Snooping .......................................................................................................................................5-59
5.2.5.5 Quality of Service (QoS) ..........................................................................................................................5-61
5.2.5.6 Spanning Tree Configuration ..................................................................................................................5-63
5.2.5.7 Routing ....................................................................................................................................................5-66
5.2.5.8 Dynamic Routing (OSPF) ..........................................................................................................................5-68
5.2.5.9 Forwarding Database ..............................................................................................................................5-75
5.2.5.10 Bridge VLAN ..........................................................................................................................................5-77
5.2.5.11 Cisco Discovery Protocol Configuration ................................................................................................5-80
5.2.5.12 Link Layer Discovery Protocol Configuration ........................................................................................5-81
5.2.5.13 Miscellaneous Network Configuration .................................................................................................5-82
5.2.5.14 Profile Network Configuration and Deployment Considerations .........................................................5-83
5.2.6 Profile Security Configuration ...........................................................................................................................5-84
5.2.6.1 Defining Profile VPN Settings .................................................................................................................5-85
5.2.6.2 Auto IPSec Tunnel .................................................................................................................................5-100
5.2.6.3 Defining Profile Security Settings .........................................................................................................5-101
5.2.6.4 Setting the Certificate Revocation List (CRL) Configuration .................................................................5-102
5.2.6.5 Setting the Profile’s NAT Configuration ...............................................................................................5-103
5.2.6.6 Setting the Profile’s Bridge NAT Configuration ....................................................................................5-111
5.2.6.7 Profile Security Configuration and Deployment Considerations ..........................................................5-113

Table of Contents iii
5.2.7 Virtual Router Redundancy Protocol (VRRP) Configuration ............................................................................5-114
5.2.8 Profile Critical Resources ................................................................................................................................5-119
5.2.9 Profile Services Configuration ........................................................................................................................5-122
5.2.9.1 Profile Services Configuration and Deployment Considerations ..........................................................5-123
5.2.10 Profile Management Configuration ..............................................................................................................5-124
5.2.10.1 Upgrading AP6532 Firmware from 5.1 ................................................................................................5-129
5.2.10.2 Profile Management Configuration and Deployment Considerations ................................................5-129
5.2.11 Advanced Profile Configuration ....................................................................................................................5-130
5.2.11.1 Advanced Profile Client Load Balancing .............................................................................................5-131
5.2.11.2 Configuring MINT ................................................................................................................................5-135
5.2.11.3 Advanced Profile Miscellaneous Configuration .................................................................................5-141
5.2.12 Mesh Point Configuration .............................................................................................................................5-143
5.2.12.1 Vehicle Mounted Modem (VMM) Deployment Consideration ...........................................................5-145
5.3 Managing Virtual Controllers ...................................................................................................................................5-146
5.4 Overriding a Device Configuration ...........................................................................................................................5-148
5.4.1 Basic Configuration .........................................................................................................................................5-148
5.4.2 Certificate Management .................................................................................................................................5-150
5.4.2.1 Manage Certificates .............................................................................................................................5-153
5.4.3 RF Domain Overrides ......................................................................................................................................5-166
5.4.4 Profile Overrides .............................................................................................................................................5-168
5.4.4.1 Radio Power Overrides ..........................................................................................................................5-170
5.4.4.2 Adoption Overrides ...............................................................................................................................5-172
5.4.4.3 Profile Interface Override Configuration ...............................................................................................5-175
5.4.4.4 Overriding the Network Configuration ..................................................................................................5-209
5.4.4.5 Overriding a Security Configuration ......................................................................................................5-246
5.4.5 Overriding the Virtual Router Redundancy Protocol (VRRP) Configuration ....................................................5-264
5.4.5.1 Overriding a Services Configuration .....................................................................................................5-272
5.4.5.2 Overriding a Management Configuration .............................................................................................5-273
5.4.5.3 Overriding an Advanced Configuration .................................................................................................5-278
5.4.5.4 Overriding Mesh Point Configuration ...................................................................................................5-288
5.5 Managing an Event Policy ........................................................................................................................................5-291
Chapter 6, Wireless Configuration
6.1 Wireless LANs ..............................................................................................................................................................6-3
6.1.1 Basic WLAN Configuration................................................................................................................................. 6-5
6.1.1.1 WLAN Basic Configuration Deployment Considerations .........................................................................6-7
6.1.2 Configuring WLAN Security ................................................................................................................................6-8
6.1.2.1 802.1x EAP, EAP PSK and EAP MAC .........................................................................................................6-9
6.1.2.2 MAC Authentication ...............................................................................................................................6-10
6.1.2.3 PSK / None ..............................................................................................................................................6-12
6.1.2.4 Captive Portal ..........................................................................................................................................6-12
6.1.2.5 MAC Registration ....................................................................................................................................6-12
6.1.2.6 External Controller ..................................................................................................................................6-13
6.1.2.7 WPA/WPA2-TKIP ....................................................................................................................................6-13
6.1.2.8 WPA2-CCMP ...........................................................................................................................................6-16
6.1.2.9 WEP 64 ....................................................................................................................................................6-19

iv WiNG 5.4.2 Access Point System Reference Guide
6.1.2.10 WEP 128 and KeyGuard ........................................................................................................................ 6-21
6.1.3 Configuring WLAN Firewall Support ................................................................................................................6-23
6.1.4 Configuring Client Settings ...............................................................................................................................6-30
6.1.5 Configuring WLAN Accounting Settings ..........................................................................................................6-32
6.1.6 Configuring Client Load Balancing ...................................................................................................................6-35
6.1.7 Configuring Advanced WLAN Settings ............................................................................................................6-37
6.1.8 Configuring Autoshutdown Settings ................................................................................................................6-40
6.2 WLAN QoS Policy .......................................................................................................................................................6-43
6.2.1 Configuring QoS WMM Settings ......................................................................................................................6-45
6.2.2 Configuring a WLAN’s QoS Rate Limit Settings ..............................................................................................6-49
6.3 Radio QoS Policy .........................................................................................................................................................6-57
6.3.1 Configuring a Radio’s QoS Policy .....................................................................................................................6-58
6.4 AAA Policy ..................................................................................................................................................................6-67
6.5 Association ACL ..........................................................................................................................................................6-77
6.5.1 Association ACL Deployment Considerations ..................................................................................................6-79
6.6 SMART RF ...................................................................................................................................................................6-80
6.6.1 Smart RF Configuration and Deployment Considerations ................................................................................6-91
6.7 MeshConnex Policy ....................................................................................................................................................6-92
6.8 Mesh QoS Policy .........................................................................................................................................................6-99
Chapter 7, Network configuration
7.1 Policy Based Routing (PBR) ...........................................................................................................................................7-2
7.2 L2TP V3 Configuration ..................................................................................................................................................7-8
7.3 Network Deployment Considerations ........................................................................................................................7-11
Chapter 8, Security Configuration
8.1 Wireless Firewall ..........................................................................................................................................................8-2
8.1.1 Defining a Firewall Configuration .......................................................................................................................8-2
8.2 Configuring IP Firewall Rules .....................................................................................................................................8-13
8.3 Configuring MAC Firewall Rules ................................................................................................................................8-16
8.4 Wireless IPS (WIPS) ...................................................................................................................................................8-19
8.5 Device Categorization .................................................................................................................................................8-28
8.6 Security Deployment Considerations .........................................................................................................................8-30
Chapter 9, Services Configuration
9.1 Configuring Captive Portal Policies ..............................................................................................................................9-2
9.1.1 Configuring a Captive Portal Policy ....................................................................................................................9-2
9.2 Setting the DNS Whitelist Configuration ...................................................................................................................9-14
9.3 Setting the DHCP Server Configuration .....................................................................................................................9-15
9.3.1 Defining DHCP Pools .........................................................................................................................................9-15
9.3.2 Defining DHCP Server Global Settings .............................................................................................................9-23
9.3.3 DHCP Class Policy Configuration ......................................................................................................................9-25
9.4 Setting the RADIUS Configuration .............................................................................................................................9-27
9.4.1 Creating RADIUS Groups ..................................................................................................................................9-27

Table of Contents v
9.4.1.1 Creating RADIUS Groups ........................................................................................................................9-30
9.4.2 Defining User Pools ..........................................................................................................................................9-32
9.4.3 Configuring the RADIUS Server ........................................................................................................................9-35
9.5 Services Deployment Considerations .........................................................................................................................9-44
Chapter 10, Management Access
10.1 Creating Administrators and Roles .........................................................................................................................10-2
10.2 Setting the Access Control Configuration ................................................................................................................10-5
10.3 Setting the Authentication Configuration ................................................................................................................10-8
10.4 Setting the SNMP Configuration ..............................................................................................................................10-9
10.5 SNMP Trap Configuration ......................................................................................................................................10-11
10.6 Management Access Deployment Considerations ................................................................................................10-12
Chapter 11, Diagnostics
11.1 Fault Management ...................................................................................................................................................11-2
11.2 Crash Files ................................................................................................................................................................11-6
11.3 Advanced ..................................................................................................................................................................11-7
11.3.1 UI Debugging ..................................................................................................................................................11-7
11.3.1.1 Schema Browser ...................................................................................................................................11-8
11.3.2 View UI Logs ...................................................................................................................................................11-9
11.3.3 View Sessions ...............................................................................................................................................11-10
Chapter 12, Operations
12.1 Devices .....................................................................................................................................................................12-2
12.1.1 Managing Firmware and Configuration Files .................................................................................................12-2
12.1.1.1 Managing Running Configuration .........................................................................................................12-3
12.1.1.2 Managing Startup Configuration ..........................................................................................................12-6
12.1.1.3 Managing Crash Dump Files .................................................................................................................12-9
12.1.2 Rebooting the Device ....................................................................................................................................12-10
12.1.3 Locating the Device ......................................................................................................................................12-11
12.1.4 Upgrading Device Firmware .........................................................................................................................12-12
12.1.5 Viewing Device Summary Information .........................................................................................................12-14
12.1.6 AP Upgrades .................................................................................................................................................12-16
12.1.7 File Management ..........................................................................................................................................12-21
12.1.8 Adopted AP Restart ......................................................................................................................................12-27
12.1.9 Captive Portal Pages .....................................................................................................................................12-28
12.2 Certificates .............................................................................................................................................................12-34
12.2.1 Certificate Management ...............................................................................................................................12-34
12.2.2 RSA Key Management ..................................................................................................................................12-39
12.2.3 Certificate Creation .......................................................................................................................................12-44
12.2.4 Generating a Certificate Signing Request (CSR) ..........................................................................................12-46
12.3 Smart RF .................................................................................................................................................................12-49
12.3.1 Managing Smart RF for a RF Domain ...........................................................................................................12-49
12.4 Operations Deployment Considerations .................................................................................................................12-53

vi WiNG 5.4.2 Access Point System Reference Guide
Chapter 13, Statistics
13.1 System Statistics .....................................................................................................................................................13-2
13.1.1 Health ..............................................................................................................................................................13-2
13.1.2 Inventory .........................................................................................................................................................13-5
13.1.3 Adopted Devices .............................................................................................................................................13-6
13.1.4 Pending Adoptions ..........................................................................................................................................13-8
13.1.5 Offline Devices ..............................................................................................................................................13-10
13.1.6 Licenses ........................................................................................................................................................13-11
13.2 RF Domain Statistics ..............................................................................................................................................13-14
13.2.1 Health ............................................................................................................................................................13-14
13.2.2 Inventory .......................................................................................................................................................13-17
13.2.3 Access Points ...............................................................................................................................................13-19
13.2.4 AP Detection .................................................................................................................................................13-20
13.2.5 Wireless Clients ............................................................................................................................................13-21
13.2.6 Wireless LANs ..............................................................................................................................................13-23
13.2.7 Radios ...........................................................................................................................................................13-24
13.2.7.1 Status ..................................................................................................................................................13-24
13.2.7.2 RF Statistics ........................................................................................................................................13-26
13.2.7.3 Traffic Statistics ..................................................................................................................................13-27
13.2.8 Mesh .............................................................................................................................................................13-29
13.2.9 Mesh Point ....................................................................................................................................................13-30
13.2.10 SMART RF ...................................................................................................................................................13-41
13.2.11 WIPS ...........................................................................................................................................................13-43
13.2.11.1 WIPS Client Blacklist ........................................................................................................................13-44
13.2.11.2 WIPS Events ......................................................................................................................................13-45
13.2.12 Captive Portal ..............................................................................................................................................13-46
13.2.13 Historical Data ............................................................................................................................................13-47
13.2.13.1 Viewing Smart RF History .................................................................................................................13-47
13.3 Access Point Statistics ...........................................................................................................................................13-49
13.3.1 Health ............................................................................................................................................................13-49
13.3.2 Device ...........................................................................................................................................................13-52
13.3.3 AP Upgrade ...................................................................................................................................................13-55
13.3.4 Adoption ........................................................................................................................................................13-57
13.3.4.1 Adopted APs ........................................................................................................................................13-57
13.3.4.2 AP Adoption History ............................................................................................................................13-59
13.3.4.3 AP Self Adoption History ....................................................................................................................13-59
13.3.4.4 Pending Adoptions ..............................................................................................................................13-60
13.3.5 AP Detection .................................................................................................................................................13-61
13.3.6 Wireless Clients ............................................................................................................................................13-63
13.3.7 Wireless LANs ..............................................................................................................................................13-65
13.3.8 Policy Based Routing ....................................................................................................................................13-67
13.3.9 Radios ...........................................................................................................................................................13-69
13.3.9.1 Status ..................................................................................................................................................13-70
13.3.9.2 RF Statistics ........................................................................................................................................13-71
13.3.9.3 Traffic Statistics ..................................................................................................................................13-72
13.3.10 Mesh ...........................................................................................................................................................13-74
13.3.11 Mesh Point ..................................................................................................................................................13-75