Zcom WS5G2 User manual

Revision: 3.2.1

Hyperion Series Wireless LAN Controller User Manual
58-150008-IQN_V1.0 Page ii
TABLE OF CONTENTS
Chapter 1. Introduction ..................................................................................................................................................................................1
1.1. Manual Statement .................................................................................................................................................................................1
1.1.1. Syntax Declaration .......................................................................................................................................................................1
1.1.2. Graphical UI Declaration ............................................................................................................................................................2
1.1.3. Sign Declaration ...........................................................................................................................................................................2
1.1.4. Glossary...........................................................................................................................................................................................2
Chapter 2. Hardware Components.............................................................................................................................................................3
2.1. Package Contents ..................................................................................................................................................................................3
2.2. Physical Ports ..........................................................................................................................................................................................3
2.3. LED Indicators.........................................................................................................................................................................................4
Chapter 3. System Foundation.....................................................................................................................................................................5
3.1. System Architecture ..............................................................................................................................................................................5
3.2. Connection and Configuration ..........................................................................................................................................................6
3.3. Entrance of Web Mode Provision .....................................................................................................................................................7
3.4. System Basic............................................................................................................................................................................................8
3.4.1. Information Overview .................................................................................................................................................................8
3.4.2. Quick Setting .................................................................................................................................................................................8
Chapter 4. Network Configuration ..........................................................................................................................................................13
4.1. Port Classification ................................................................................................................................................................................13
4.2. AP Access Port ......................................................................................................................................................................................14
4.3. Management Port................................................................................................................................................................................15
4.4. VLAN Creation ......................................................................................................................................................................................16
4.5. Port VLAN ..............................................................................................................................................................................................18
4.6. VLAN Interface .....................................................................................................................................................................................19
4.7. L2GRE Tunnel ........................................................................................................................................................................................20
4.8. IPSec / VPN............................................................................................................................................................................................22
4.9. DHCP Settings ......................................................................................................................................................................................26
4.10. NAT ........................................................................................................................................................................................................28
4.11. Static Route .........................................................................................................................................................................................29
4.12. Dynamic Route...................................................................................................................................................................................30
Chapter 5. IPv6 Configuration ...................................................................................................................................................................31
5.1. DHCP Server..........................................................................................................................................................................................31
5.2. Route Advertisement..........................................................................................................................................................................32
Chapter 6. Thin AP Configuration Profiles............................................................................................................................................35
6.1. AP Grouping..........................................................................................................................................................................................35
6.2. Common Profile ...................................................................................................................................................................................37
6.3. Wireless Profile .....................................................................................................................................................................................41
6.4. VAP Profile .............................................................................................................................................................................................44

Hyperion Series Wireless LAN Controller User Manual
58-150008-IQN_V1.0 Page iii
6.5. Bandwidth Control ..............................................................................................................................................................................46
6.6. AP License ..............................................................................................................................................................................................47
6.7. AP FW Upgrade....................................................................................................................................................................................48
6.8. Optimization .........................................................................................................................................................................................48
Chapter 7. WLC Configuration ...................................................................................................................................................................53
7.1. TimeZone and Date.............................................................................................................................................................................53
7.2. Graphic Stat Platform .........................................................................................................................................................................54
7.3. Samba .....................................................................................................................................................................................................55
7.4. DPI............................................................................................................................................................................................................55
7.5. Packet Capture......................................................................................................................................................................................56
7.6. Log Server..............................................................................................................................................................................................57
7.7. Change Password.................................................................................................................................................................................57
7.8. WLC FW Upgrade ................................................................................................................................................................................58
7.9. Backup / Restore ..................................................................................................................................................................................59
Chapter 8. Authentication............................................................................................................................................................................60
8.1. OTP SMS Gateway ...............................................................................................................................................................................60
8.2. Portal Server..........................................................................................................................................................................................60
8.3. Radius Server ........................................................................................................................................................................................62
8.4. LDAP Server...........................................................................................................................................................................................64
8.5. MAC Access Control............................................................................................................................................................................66
8.6. Access Time Control............................................................................................................................................................................67
Chapter 9. Statistics ........................................................................................................................................................................................70
9.1. Thin AP List ............................................................................................................................................................................................70
9.2. Station List .............................................................................................................................................................................................70
9.3. DPI............................................................................................................................................................................................................71
9.4. IoT List.....................................................................................................................................................................................................72
9.5. Realtime Log .........................................................................................................................................................................................72
Chapter 10. Technical Specifications .......................................................................................................................................................73
Chapter 11. Appendix....................................................................................................................................................................................74
11.1. Warranty...............................................................................................................................................................................................74
11.1.1. General Warranty.....................................................................................................................................................................74
11.1.2. Warranty Conditions...............................................................................................................................................................74
11.1.3. Disclaimer...................................................................................................................................................................................74
11.2. Certifications and Compliance ......................................................................................................................................................75
11.2.1. CE Marking ................................................................................................................................................................................75
11.2.2. RoHS Compliance Statement ...............................................................................................................................................75
11.3. Declaration of Conformity ..............................................................................................................................................................75
11.4. List of Compatibility..........................................................................................................................................................................75

Hyperion Series Wireless LAN Controller User Manual
58-150008-IQN_V1.0 Page 1
Chapter 1. INTRODUCTION
Hyperion is a Wireless LAN Controller (WLC) product series which includes three models of WS5G2, WS7G2 and
WS10G2, particularly suitable for the SMB and IoT applications. This series of products is designed based on Intel Atom
platform, providing 1G and 10G Ethernet ports in the form of RJ45 and SFP+ to meet with the requirements in every
kind of applications. The Hyperion series WLC mainly faces the small scale Wi-Fi network where the deployed access
points are not exceeding 1000. In this scenario, the wireless clients could be regular user endpoints and also the IoT
sensors, such as mobile phone, notebook computer, IP-CAM, and industrial sensors and controllers. In the era of
industry 4.0, the artificial intelligence and internet of everything depending on wireless network communication will
grow up explosively, so that the Wi-Fi coverage infrastructure and even the long range Wi-Fi bridge could be possibly
expanding in a large scale. This means that the Hyperion series WLC will have much more application opportunities in
the new era.
WLC is such a product which helps customer to centralized manage and provision wireless access points in a way of
migrating the management function originally resided in each access point to WLC while the AP only remains its
fundamental wireless access and security capabilities. Hence, the WLC focuses on AP’s configuration, user
authentication, traffic forwarding, radio resource management, access control, QoS and load balancing; while the thin
AP focuses on the underlying functions defined by IEEE802.11 specifications. For a complicated Wi-Fi system, this
architecture is an ideal model that is controllable and manageable. In the Wi-Fi system with WLC, thin AP has zero
configurations initially; it is configured by downloading profiles from WLC. Thin AP and WLC are connected through
CAPWAP tunnel which is established by thin AP during its DHCP discovery process with option43 response.
In SMB and IoT applications, the capacity of the access point is usually less than 1000, and the total traffic throughput is
less than 20Gbps. Therefore, a small-sized WLC is required as the centralized controller. Hyperion series WLC based on
Intel Atom platform (such as WS5G2, WS7G2 and WS10G2) was born for these deployments.
1.1. MANUAL STATEMENT
1.1.1. SYNTAX DECLARATION
Syntax conventions in the command line:
Format Meaning
Bold Command names are represented by bold characters.
Italics Command arguments (the values following the command name) are represented
by italic characters.
[ ] Represents the optional parts in the command line.
// Represents comments without action.
| Represent the OR logic for multiple parameter options.

Hyperion Series Wireless LAN Controller User Manual
58-150008-IQN_V1.0 Page 2
1.1.2. GRAPHICAL UI DECLARATION
Buttons and interfaces involved in the web page configuration are as follows.
Format Meaning
/ The multiple level menu delimiter.
1.1.3. SIGN DECLARATION
This manual uses a variety of eye-catching signs to emphasize the importance in the configuration process.
Warning: Careful attention must be paid to the warning message next to this sign. Not heeding to this
advice could lead to improper operation and may cause injury.
Note: Attention can be paid to the message next to this sign. The information included is usually important,
very helpful, or a quick summary.
1.1.4. GLOSSARY
Term Meaning
STA (Station or Terminal) WLAN (Wireless LAN) stations such as the handsets, PCs, notebooks, or other CPE
equipment are referred to as STAs.
UE (User Endpoint) Small mobile devices such as the handsets, PCs, notebooks, or other CPE equipment
with Wi-Fi capabilities are referred to as UEs.
AP (Access Point) Base station equipment for STAs, to access the wired network, or other STAs from
the wireless network are referred to as APs.
TAP (Thin Access Point) The Access Point managed by the WLC.
WLC (Wireless LAN Controller) Edge gateway equipment between Wi-Fi APs and the core network are referred to
as WLCs. The WLC is used for access control, security, management, centralized
data forwarding, and switching.
SSID (Service Set Identifier) The SSID is used to identify a group of STAs and its associated AP. Only those STAs
and their AP, in the same SSID, can communicate with each other, something like
the concept of VLANs (Virtual LANs) in wired networks.
Captive Portal A server that pushes a web page to user endpoint for entering the user name and
password for authentication.
Radius A server that authenticates the user legitimacy with secure methods.
OTP One time password which is delivered in short message service for user
authentication.
LDAP A server that uses the Light Directory Access Protocol for user authentication.
SMS Short message service provided by mobile communication operator.

Hyperion Series Wireless LAN Controller User Manual
58-150008-IQN_V1.0 Page 3
Chapter 2. HARDWARE COMPONENTS
2.1. PACKAGE CONTENTS
Carefully remove all the items from the packing of Hyperion series WLC. The following items should be included in the
packaging:
Package Content WS5G2 WS7G2 WS10G2
Power Adapter (DC)
1
1
1
Power Cord (AC)
1
1
1
Mounting Screws (For Disk Drive)
Yes
Yes
Yes
SATA Cables (Data Cable & Power Cable)
Yes
Yes
Yes
Plastic Stand (For Stack-up)
Yes
Yes
Yes
10G SPF+ Optical Transceiver Module
-
-
-
LC-LC Multi-Mode Optical Fiber
-
-
-
Note: If any of the items, mentioned above, is not included in the packaging or are damaged in any way,
contact your reseller immediately.
2.2. PHYSICAL PORTS
The following physical ports and LED indicators are available on the WS5/7/10G2.
Front Panels
WS5G2
WS7G2
WS10G2
Rear Panels
WS5G2
WS7G2
WS10G2
The following table describes the hardware components available on the rear panel of the WLC.
WS5G2 WS7G2 WS10G2
Power Switch
1 1
1
DC Power Port
1 1
1

Hyperion Series Wireless LAN Controller User Manual
58-150008-IQN_V1.0 Page 4
WS5G2 WS7G2 WS10G2
Reset Switch
1 1
1
Default Switch
1 1
1
SFP+ Ports (10 Gbps)
- 2
4
RJ45 LAN Ports (1 Gbps)
4
6
6
Console Port (RJ45)
1
1
1
USB 2.0 Ports
2 2
2
Hardware Component Description
Power WS5/7G2: One 12V/5A DC adapter
WS10G2: One 12V/7A DC adapter
Reset Switch One
Default Switch One
SFP+ Ports The default IP address of the WLC through the VIF SFP+ ports is 192.168.3.228.
Note: All 10G SFP+ Ports in WLC support mono mode optic fiber.
RJ45 Ports
•The management port must be the first RJ45 1GbE port. The default IP address
of the WLC through the Mgmt port is 192.168.2.228.
•The WLAN port is for thin AP accessing and wireless clients’ data tunnel, which
could be a RJ45 port other than the Management Port.
Console Port The Console Port is for debug or troubleshooting by IT staff.
USB 2.0 Ports Two USB 2.0 ports, which are reserved for further applications.
2.3. LED INDICATORS
The following table describes the LED indicators available on the front panel of the WS5/7/10G2.
LED Indicator Color Behavior Description
Power Green
Solid On
The system is powered on.
Off
The system is powered off.
HDD Green
Blinking
Data transfer activity is taking place.
Off
No data transfer activity is taking place.
SFP+ LEDs
Orange
Solid On (Right)
Connection active at 1 Gbps
Blinking (Left)
Sending and receiving data
Off
No connection active or port is disabled.
RJ45 LAN LEDs
Green Solid On (Right)
Connection active at 10/100 Mbps
Orange Blinking (Left)
Sending and receiving data
Off
No connection active or port is disabled.

Hyperion Series Wireless LAN Controller User Manual
58-150008-IQN_V1.0 Page 5
Chapter 3. SYSTEM FOUNDATION
3.1. SYSTEM ARCHITECTURE
The Wi-Fi system architecture using Hyperion series WLC and Thin APs is illustrated below.
Figure 3-1 Wi-Fi System Architecture using WLC
The WLC has a southbound interface named the WLAN port. This port is the accessing port for all Thin APs connecting
to WLC；while the northbound ports based on WLC internal VLAN Interfaces (VIF) connect to the Portal / Radius for user
authentication and Internet for user services.
Two types of tunnel are established from Thin AP to WLC and will take charge of all communications:
The CAPWAP tunnel, an access stratum management tunnel, focuses on provisioning AP and all statistics
reports.
The WLTP data tunnel focuses on UE (User Endpoint) non-access stratum data transmission, including service
traffic and authentication messages.

Hyperion Series Wireless LAN Controller User Manual
58-150008-IQN_V1.0 Page 6
Both tunnels start at the thin AP.
The Thin AP has zero configurations in its initial state. During its power-on stage, it firstly discovers the WLC by DHCP
protocol and obtains up to 4 WLC IP addresses settled in DHCP Option 43, and then uses the first WLC IP address to
establish the primary CAPWAP tunnel, and the others as the redundant WLC purpose. Then, thin AP downloads the
profiles from the WLC through the CAPWAP tunnel to complete its configuration; while user clients associate to thin AP
and start authentication and data services through WLTP tunnel.
The 1’st internet service initiated by user client through WLTP data tunnel will be intercepted by WLC to check whether
it is an legal user, if not, this accessing will be redirected to the Captive Portal where the user name and password input
and then authenticated by Radius server.
3.2. CONNECTION AND CONFIGURATION
There are two configuration modes for WLC management: one is the CLI (Command Line Interface) mode which is
entered by SSH, Telnet and RS232 serial console accessing; another is the web mode which is entered by using browser
to access the management web page for provisioning.
The Web provisioning mode (HTTP/HTTPS) is a user-friendly management method and can be accessed by using any
standard Web browsing software, like Internet Explorer or Chrome. The Web interface simplifies system management
and configuration, even if the administrator is a junior engineer. The CLI mode, however, is for the advanced customer
and can be entered by SSH, Telnet, and the RS-232 console accessing. More knowledge about network communication
protocols and command instructions are required to effectively configure and manage the WLC through the CLI mode.
The following section will briefly explain how to connect WLC for its configuration and management:
•Ethernet Connection
：
Configuration host connects to the WLC Mgmt port over Ethernet cable.
•RS232 Serial Connection
：
Configuration host connects to the WLC console port over RJ45-RS232 serial cable. The
console port serial baud rate is 38400.
Ethernet
192.168.2.228/192.168.3.228
192.168.2.100/192.168.3.100
RJ45-RS232
Configuration
Host
WLC
Figure 3-2 Configuration host Connects to the WLC for Management
The following default IP addresses are preset in the WLC:
•The default management IP address of the WLC through the Mgmt port is 192.168.2.228. The host PC or
notebook must be assigned with an IP address in the same subnet, for example, 192.168.2.100.
•The default service IP address of the WLC through the VIF port is 192.168.3.228. The host PC or notebook must be
assigned with an IP address in the same subnet, for example, 192.168.3.100.
Software tools which support SSH, Telnet and Serial communications, such as SecureCRT, XShell, or PuTTY, can be

Hyperion Series Wireless LAN Controller User Manual
58-150008-IQN_V1.0 Page 7
used to configure and manage WLC in CLI mode.
The default login credentials for WLC management is as the following:
•Username: admin
•Password: password
3.3. ENTRANCE OF WEB MODE PROVISION
Compared with the CLI mode configuration, the WLC provides a more user-friendly management interface called the
Web mode provisioning that can be accessed by any standard Web browser software like Internet Explorer or Chrome
using the HTTP/HTTPS protocol.
To access the Web provisioning, entering the default IP address (192.168.2.228 accessing in the management port or
192.168.3.228 accessing in the WLAN port) in the address bar of the web browser and press the Enter key to get into
the login page, as shown below.
Figure 3-3 Web Interface (Login Page)
Enter the Username, Password and verification code, select the appropriate language in the pull-down menu, and click
the Login button to enter the Web provisioning page of the WLC.
Note: The default Username is admin and Password is password.