Nortel 2300 Series User manual

January 2008 Edition
1725-36082-001
Version F
VIEW Certified Configuration Guide
Nortel
WLAN Security Switch 2300 Series
with AP-2330

Configuration Guide
PN: 1725-36082-001_F.doc
2
Trademark Information
Polycom® and the logo designs
SpectraLink®
LinkPlus
Link
NetLink
SVP
Are trademarks and registered trademarks of
Polycom, Inc. in the United States of America
and various countries. All other trademarks
used herein are the property of their respective
owners.
Patent Information
The accompanying product is protected by one
or more US and foreign patents and/or pending
patent applications held by Polycom, Inc.
Copyright Notice
Copyright © 2005 to 2008 Polycom, Inc.
All rights reserved under the International and
pan-American copyright Conventions.
No part of this manual, or the software
described herein, may be reproduced or
transmitted in any form or by any means, or
translated into another language or format, in
whole or in part, without the express written
permission of Polycom, Inc.
Do not remove (or allow any third party to
remove) any product identification, copyright or
other notices.
Every effort has been made to ensure that the
information in this document is accurate.
Polycom, Inc. is not responsible for printing or
clerical errors. Information in this document is
subject to change without notice and does not
represent a commitment on the part of Polycom,
Inc.
Notice
Polycom, Inc. has prepared this document for
use by Polycom personnel and customers. The
drawings and specifications contained herein
are the property of Polycom and shall be neither
reproduced in whole or in part without the prior
written approval of Polycom, nor be implied to
grant any license to make, use, or sell equipment
manufactured in accordance herewith.
Polycom reserves the right to make changes in
specifications and other information contained
in this document without prior notice, and the
reader should in all cases consult Polycom to
determine whether any such changes have been
made.
No representation or other affirmation of fact
contained in this document including but not
limited to statements regarding capacity,
response-time performance, suitability for use,
or performance of products described herein
shall be deemed to be a warranty by Polycom
for any purpose, or give rise to any liability of
Polycom whatsoever.
Contact Information
Please contact your Polycom Authorized
Reseller for assistance.
Polycom, Inc.
4750 Willow Road,
Pleasanton, CA 94588
http://www.polycom.com

Nortel: WLAN Security Switch 2300 Series with AP-2330
PN: 1725-36082-001_F.doc 3
Introduction
Polycom’s Voice Interoperability for Enterprise Wireless (VIEW)
Certification Program is designed to ensure interoperability and high
performance between SpectraLink 8000 Wireless Telephones and
wireless LAN (WLAN) infrastructure products. The products listed
below have been thoroughly tested in Polycom’s lab and have passed
VIEW Certification. This document details how to configure the
Nortel WLAN Security Switch 2300 Series and WLAN AP-
2330/2330A/2330B with SpectraLink 8000 Wireless Telephones.
Certified Product Summary
Manufacturer: Nortel: www.nortel.com
WLAN Security Switches Access pointsApproved products: 2380
2361†
2360
2350
2330†
2330A
2330B
Security: WPA-PSK and WPA2-PSK
2300 software version tested: Release 5.0.11.4
SpectraLink handset models tested: e340/h340/i640 8020/8030
SpectraLink handset software tested: 89.119 122.010 or greater
SpectraLink radio mode: 802.11b 802.11b 802.11a
Maximum telephone calls per AP: 10 10 12 *
Recommended network topology: Switched Ethernet (required)
† Denotes products directly used in Certification testing.
* Maximum calls tested during VIEW Certification. The certified product may actually support a higher
number of maximum calls for 802.11a radio modes.
Service Information
The access point (AP) must support SpectraLink Voice Priority
(SVP). Contact your AP vendor if you need to upgrade the AP
software.

Configuration Guide
PN: 1725-36082-001_F.doc
4
Contacting Nortel Technical Support
If you purchased a service contract for your Nortel product from a
distributor or authorized reseller, contact the technical support staff
for that distributor or reseller for assistance.
Additional information about the Nortel Technical Solutions Centers
is available from http://www.nortel.com/contactus.
An Express Routing Code (ERC) is available for many Nortel
products and services. When you use an ERC, your call is routed to a
technical support person who specializes in supporting that product
or service. To locate an ERC for your product or service, go to
http://www.nortel.com/erc.
If you purchased a Nortel service program, contact one of the
following Nortel Technical Solutions Centers:
Europe, Middle East, and Africa - 00800 8008 9009 or
[phone]
North America - (800) 4NORTEL or [phone]
Asia Pacific - (61) (2) 9927-8800
China - [phone]
Known Limitations
During VIEW Certification testing, the following limitations were
discovered.
•RF Active Scan must be disabled on AP radios that are providing
voice services, including SpectraLink 8000 Wireless Telephones.
•You must disable Internet Group Management Protocol (IGMP)
snooping when running SpectraLink Radio Protocol (SRP), which
is used with the SpectraLink 8000 Telephony Gateway. SRP uses
multicast packets to do an SRP Check-In, which are not forwarded
through the WLAN Security Switch (WSS) when IGMP snooping
is enabled. When a tunneled virtual LAN (VLAN) is configured
over a Layer-3 network, IGMP snooping must be disabled each
time the tunnel is established, because the virtual VLAN is
established with IGMP snooping turned on by default.

Nortel: WLAN Security Switch 2300 Series with AP-2330
PN: 1725-36082-001_F.doc 5
Network Topology
The following topology was tested during VIEW Certification. It is
important to note that these do not necessarily represent all
“Certified” configurations.
Both Layer-2 and Layer-3 roaming were tested. Layer-3 roaming of
SpectraLink 8000 Wireless Telephones requires the use of a generic
routing encapsulation (GRE) tunnel.
WSS2380
SpectraLink 8000
Wireless Telephones
SpectraLink 8000
SVP Server
SpectraLink 8000
Telephony Gateway
SpectraLink 8000
Wireless Telephones SpectraLink 8000 Wireless Telephones

Configuration Guide
PN: 1725-36082-001_F.doc
6
Access Point Capacity and Positioning
Each site is unique in its AP requirements. Therefore, please take the
following points into account when determining how many APs are
needed and where they should be placed in the facility:
Handset range
There must be WLAN coverage wherever the SpectraLink 8000
Wireless Telephones will be used. Adequate coverage for a
SpectraLink 8000 Wireless Telephone can be determined by using the
Site Survey mode on the handset that displays dBm signal levels and
channel when the handset is in range of an AP.
For setting up the data rates, please consult your facility’s RF site
survey, designed for voice traffic, to determine if you have sufficient
coverage to support all data rates. SpectraLink 8000 Wireless
Telephones require the following minimum dBm reading to support
the corresponding “Required” data rate setting in the access point.
802.11
Radio Standard Minimum Available Signal Strength (RSSI) Maximum "Required" Data Rate
-70 dBm 1 Mb/s
802.11b -60 dBm 11 Mb/s
-63 dBm 6 Mb/s
802.11g -47 dBm 54 Mb/s
-60 dBm 6 Mb/s
802.11a -45 dBm 54 Mb/s
All SpectraLink 8000 Wireless Telephones on the WLAN network
must be configured for a single radio standard (802.11a, or 802.11b,
or 802.11g). Handsets configured for different radio standards will
not work together.
Number of handset calls per AP
The number of handsets that can be in-call simultaneously was
determined based on call quality within a lab environment. Since call
quality is impacted by packet retry rate and missed packets, test
criteria were established for the maximum data rate (11Mb/s) for
handsets in-range of the AP.
As the handsets move near the limits of optimal RF coverage from the
AP, they will automatically drop to lower Mb/s operation.
SpectraLink 8000 Wireless Telephones require approximately 15 % of

Nortel: WLAN Security Switch 2300 Series with AP-2330
PN: 1725-36082-001_F.doc
7
the available bandwidth per call for 1 Mb/s operation, approximately
10 % of the available bandwidth per call for 2 Mb/s operation,
approximately 7 % of the available bandwidth per call for 5.5 Mb/s
operation, and approximately 5 % of the available bandwidth per call
for 11 Mb/s operations.
LAN bandwidth
Estimate anticipated peak call volume to ensure that the LAN has
enough bandwidth to handle the network traffic generated by all of
the wireless devices.
WLAN bandwidth
The SpectraLink 8000 Wireless Telephones share bandwidth with
other wireless devices. To ensure adequate RF bandwidth availability,
consider the number of wireless data devices in use per AP when
estimating the necessary number of devices.

Configuration Guide
PN: 1725-36082-001_F.doc
8
Configuring a New WLAN Security Switch
Starting from Factory Defaults
1. Using the supplied DB-9 male to DB-9 female standard RS-232
cable, connect the WLAN Security Switch to the serial port of a
terminal or PC.
2. Run a terminal emulation program (such as HyperTerminal) or
use a VT-100 terminal with the following configuration:
Bits per second: 9600
Data bits: 8
Parity: None
Stop bits: 1
Flow control: None
3. Power-on the WLAN Security Switch. The status of the boot
process will appear in the console as the switch is powering up.
Once the switch is operational you will be presented with a login
prompt.
4. A Quick Start Wizard provides for an easy means to perform
initial WLAN Security Switch setup and configuration. Refer to
the WLAN Security Switch 2300 Series Quick Start Guide found at
Nortel’s Technical Support site. This document contains a detailed
explanation of using the Startup Wizard:
http://support.nortel.com/go/main.jsp?cscat=DOCDETAIL&id=
583095&poid=16021
5. Once the WLAN Security Switch has been configured via the
Quick Start Wizard, the remaining configuration can be
performed using command line interface (CLI), Web View or
WLAN Management Software (WMS). Configuration examples
will be provided for both CLI and WMS.
6. If necessary, the WLAN Security Switch may be reset to factory
defaults. To reset the WLAN Security Switch to factory defaults,
you must issue the “clear boot config” command via the console.

Nortel: WLAN Security Switch 2300 Series with AP-2330
PN: 1725-36082-001_F.doc 9
Connecting APs
To configure the WLAN Security Switch (WSS) to support an AP, you
must first determine how the AP will connect to the switch. There are
two types of AP-to-WSS connection: direct and distributed.
Directly connected APs
In direct connection, an AP connects to one or two 10/100 ports on a
WSS. The WSS port is then configured specifically for a direct
attachment to an AP. There is no intermediate networking equipment
between the WSS and AP, and only one AP is connected to the WSS
port. The WSS 10/100 port provides power over Ethernet (PoE) to the
AP. The WSS also forwards data only to and from the configured AP
on that port. The port numbers on the WSS which are configured for
directly attached APs reference a particular AP.
Distributed APs
An AP that is not directly connected to a WSS is considered a
distributed AP. There may be intermediate Layer 2 switches or Layer
3 IP routers between the WSS and the AP. The WSS may
communicate to the distributed AP through any network port. (A
network port is any port connecting the switch to other networking
devices, such as switches and routers, and it can also be configured
for 802.1Q VLAN tagging.) The WSS contains a configuration for a
distributed AP based on the AP’s serial number. Similar to ports
configured for directly connected APs, distributed AP configurations
are numbered and can reference a particular AP. These numbered
configurations do not, however, reference any physical port.
During VIEW Certification, the 2330 access points were tested while
directly connected to a port on the WLAN Security Switch (e.g. port
1), but both methods are supported.
For more information on how to configure the network to support a
distributed AP, see the Nortel WLAN Security Switch 2300 Series
Configuration Guide.

Configuration Guide
PN: 1725-36082-001_F.doc
10
Command, comment, and screen text key
In the sections below you will find commands, comments and system
responses or other screen-displayed information involved in the
configuration process. This key explains the text styles and symbols
used to denote them.
Text Style Denotes:
xxxxxxxx Typed command
<xxxxxxxx> Encryption key, domain name or other information
specific to your system that needs to be entered
# xxxxxxxx Comment about a command or set of commands
xxxxxxxx System response or other displayed information