Zcom WS5G2 User manual

Revision: 3.2.1

Hyperion Series Wireless LAN Controller User Manual
58-150008-IQN_V1.0 Page ii
TABLE OF CONTENTS
Chapter 1. Introduction ..................................................................................................................................................................................1
1.1. Manual Statement .................................................................................................................................................................................1
1.1.1. Syntax Declaration .......................................................................................................................................................................1
1.1.2. Graphical UI Declaration ............................................................................................................................................................2
1.1.3. Sign Declaration ...........................................................................................................................................................................2
1.1.4. Glossary...........................................................................................................................................................................................2
Chapter 2. Hardware Components.............................................................................................................................................................3
2.1. Package Contents ..................................................................................................................................................................................3
2.2. Physical Ports ..........................................................................................................................................................................................3
2.3. LED Indicators.........................................................................................................................................................................................4
Chapter 3. System Foundation.....................................................................................................................................................................5
3.1. System Architecture ..............................................................................................................................................................................5
3.2. Connection and Configuration ..........................................................................................................................................................6
3.3. Entrance of Web Mode Provision .....................................................................................................................................................7
3.4. System Basic............................................................................................................................................................................................8
3.4.1. Information Overview .................................................................................................................................................................8
3.4.2. Quick Setting .................................................................................................................................................................................8
Chapter 4. Network Configuration ..........................................................................................................................................................13
4.1. Port Classification ................................................................................................................................................................................13
4.2. AP Access Port ......................................................................................................................................................................................14
4.3. Management Port................................................................................................................................................................................15
4.4. VLAN Creation ......................................................................................................................................................................................16
4.5. Port VLAN ..............................................................................................................................................................................................18
4.6. VLAN Interface .....................................................................................................................................................................................19
4.7. L2GRE Tunnel ........................................................................................................................................................................................20
4.8. IPSec / VPN............................................................................................................................................................................................22
4.9. DHCP Settings ......................................................................................................................................................................................26
4.10. NAT ........................................................................................................................................................................................................28
4.11. Static Route .........................................................................................................................................................................................29
4.12. Dynamic Route...................................................................................................................................................................................30
Chapter 5. IPv6 Configuration ...................................................................................................................................................................31
5.1. DHCP Server..........................................................................................................................................................................................31
5.2. Route Advertisement..........................................................................................................................................................................32
Chapter 6. Thin AP Configuration Profiles............................................................................................................................................35
6.1. AP Grouping..........................................................................................................................................................................................35
6.2. Common Profile ...................................................................................................................................................................................37
6.3. Wireless Profile .....................................................................................................................................................................................41
6.4. VAP Profile .............................................................................................................................................................................................44

Hyperion Series Wireless LAN Controller User Manual
58-150008-IQN_V1.0 Page iii
6.5. Bandwidth Control ..............................................................................................................................................................................46
6.6. AP License ..............................................................................................................................................................................................47
6.7. AP FW Upgrade....................................................................................................................................................................................48
6.8. Optimization .........................................................................................................................................................................................48
Chapter 7. WLC Configuration ...................................................................................................................................................................53
7.1. TimeZone and Date.............................................................................................................................................................................53
7.2. Graphic Stat Platform .........................................................................................................................................................................54
7.3. Samba .....................................................................................................................................................................................................55
7.4. DPI............................................................................................................................................................................................................55
7.5. Packet Capture......................................................................................................................................................................................56
7.6. Log Server..............................................................................................................................................................................................57
7.7. Change Password.................................................................................................................................................................................57
7.8. WLC FW Upgrade ................................................................................................................................................................................58
7.9. Backup / Restore ..................................................................................................................................................................................59
Chapter 8. Authentication............................................................................................................................................................................60
8.1. OTP SMS Gateway ...............................................................................................................................................................................60
8.2. Portal Server..........................................................................................................................................................................................60
8.3. Radius Server ........................................................................................................................................................................................62
8.4. LDAP Server...........................................................................................................................................................................................64
8.5. MAC Access Control............................................................................................................................................................................66
8.6. Access Time Control............................................................................................................................................................................67
Chapter 9. Statistics ........................................................................................................................................................................................70
9.1. Thin AP List ............................................................................................................................................................................................70
9.2. Station List .............................................................................................................................................................................................70
9.3. DPI............................................................................................................................................................................................................71
9.4. IoT List.....................................................................................................................................................................................................72
9.5. Realtime Log .........................................................................................................................................................................................72
Chapter 10. Technical Specifications .......................................................................................................................................................73
Chapter 11. Appendix....................................................................................................................................................................................74
11.1. Warranty...............................................................................................................................................................................................74
11.1.1. General Warranty.....................................................................................................................................................................74
11.1.2. Warranty Conditions...............................................................................................................................................................74
11.1.3. Disclaimer...................................................................................................................................................................................74
11.2. Certifications and Compliance ......................................................................................................................................................75
11.2.1. CE Marking ................................................................................................................................................................................75
11.2.2. RoHS Compliance Statement ...............................................................................................................................................75
11.3. Declaration of Conformity ..............................................................................................................................................................75
11.4. List of Compatibility..........................................................................................................................................................................75

Hyperion Series Wireless LAN Controller User Manual
58-150008-IQN_V1.0 Page 1
Chapter 1. INTRODUCTION
Hyperion is a Wireless LAN Controller (WLC) product series which includes three models of WS5G2, WS7G2 and
WS10G2, particularly suitable for the SMB and IoT applications. This series of products is designed based on Intel Atom
platform, providing 1G and 10G Ethernet ports in the form of RJ45 and SFP+ to meet with the requirements in every
kind of applications. The Hyperion series WLC mainly faces the small scale Wi-Fi network where the deployed access
points are not exceeding 1000. In this scenario, the wireless clients could be regular user endpoints and also the IoT
sensors, such as mobile phone, notebook computer, IP-CAM, and industrial sensors and controllers. In the era of
industry 4.0, the artificial intelligence and internet of everything depending on wireless network communication will
grow up explosively, so that the Wi-Fi coverage infrastructure and even the long range Wi-Fi bridge could be possibly
expanding in a large scale. This means that the Hyperion series WLC will have much more application opportunities in
the new era.
WLC is such a product which helps customer to centralized manage and provision wireless access points in a way of
migrating the management function originally resided in each access point to WLC while the AP only remains its
fundamental wireless access and security capabilities. Hence, the WLC focuses on AP’s configuration, user
authentication, traffic forwarding, radio resource management, access control, QoS and load balancing; while the thin
AP focuses on the underlying functions defined by IEEE802.11 specifications. For a complicated Wi-Fi system, this
architecture is an ideal model that is controllable and manageable. In the Wi-Fi system with WLC, thin AP has zero
configurations initially; it is configured by downloading profiles from WLC. Thin AP and WLC are connected through
CAPWAP tunnel which is established by thin AP during its DHCP discovery process with option43 response.
In SMB and IoT applications, the capacity of the access point is usually less than 1000, and the total traffic throughput is
less than 20Gbps. Therefore, a small-sized WLC is required as the centralized controller. Hyperion series WLC based on
Intel Atom platform (such as WS5G2, WS7G2 and WS10G2) was born for these deployments.
1.1. MANUAL STATEMENT
1.1.1. SYNTAX DECLARATION
Syntax conventions in the command line:
Format Meaning
Bold Command names are represented by bold characters.
Italics Command arguments (the values following the command name) are represented
by italic characters.
[ ] Represents the optional parts in the command line.
// Represents comments without action.
| Represent the OR logic for multiple parameter options.

Hyperion Series Wireless LAN Controller User Manual
58-150008-IQN_V1.0 Page 2
1.1.2. GRAPHICAL UI DECLARATION
Buttons and interfaces involved in the web page configuration are as follows.
Format Meaning
/ The multiple level menu delimiter.
1.1.3. SIGN DECLARATION
This manual uses a variety of eye-catching signs to emphasize the importance in the configuration process.
Warning: Careful attention must be paid to the warning message next to this sign. Not heeding to this
advice could lead to improper operation and may cause injury.
Note: Attention can be paid to the message next to this sign. The information included is usually important,
very helpful, or a quick summary.
1.1.4. GLOSSARY
Term Meaning
STA (Station or Terminal) WLAN (Wireless LAN) stations such as the handsets, PCs, notebooks, or other CPE
equipment are referred to as STAs.
UE (User Endpoint) Small mobile devices such as the handsets, PCs, notebooks, or other CPE equipment
with Wi-Fi capabilities are referred to as UEs.
AP (Access Point) Base station equipment for STAs, to access the wired network, or other STAs from
the wireless network are referred to as APs.
TAP (Thin Access Point) The Access Point managed by the WLC.
WLC (Wireless LAN Controller) Edge gateway equipment between Wi-Fi APs and the core network are referred to
as WLCs. The WLC is used for access control, security, management, centralized
data forwarding, and switching.
SSID (Service Set Identifier) The SSID is used to identify a group of STAs and its associated AP. Only those STAs
and their AP, in the same SSID, can communicate with each other, something like
the concept of VLANs (Virtual LANs) in wired networks.
Captive Portal A server that pushes a web page to user endpoint for entering the user name and
password for authentication.
Radius A server that authenticates the user legitimacy with secure methods.
OTP One time password which is delivered in short message service for user
authentication.
LDAP A server that uses the Light Directory Access Protocol for user authentication.
SMS Short message service provided by mobile communication operator.

Hyperion Series Wireless LAN Controller User Manual
58-150008-IQN_V1.0 Page 3
Chapter 2. HARDWARE COMPONENTS
2.1. PACKAGE CONTENTS
Carefully remove all the items from the packing of Hyperion series WLC. The following items should be included in the
packaging:
Package Content WS5G2 WS7G2 WS10G2
Power Adapter (DC)
1
1
1
Power Cord (AC)
1
1
1
Mounting Screws (For Disk Drive)
Yes
Yes
Yes
SATA Cables (Data Cable & Power Cable)
Yes
Yes
Yes
Plastic Stand (For Stack-up)
Yes
Yes
Yes
10G SPF+ Optical Transceiver Module
-
-
-
LC-LC Multi-Mode Optical Fiber
-
-
-
Note: If any of the items, mentioned above, is not included in the packaging or are damaged in any way,
contact your reseller immediately.
2.2. PHYSICAL PORTS
The following physical ports and LED indicators are available on the WS5/7/10G2.
Front Panels
WS5G2
WS7G2
WS10G2
Rear Panels
WS5G2
WS7G2
WS10G2
The following table describes the hardware components available on the rear panel of the WLC.
WS5G2 WS7G2 WS10G2
Power Switch
1 1
1
DC Power Port
1 1
1

Hyperion Series Wireless LAN Controller User Manual
58-150008-IQN_V1.0 Page 4
WS5G2 WS7G2 WS10G2
Reset Switch
1 1
1
Default Switch
1 1
1
SFP+ Ports (10 Gbps)
- 2
4
RJ45 LAN Ports (1 Gbps)
4
6
6
Console Port (RJ45)
1
1
1
USB 2.0 Ports
2 2
2
Hardware Component Description
Power WS5/7G2: One 12V/5A DC adapter
WS10G2: One 12V/7A DC adapter
Reset Switch One
Default Switch One
SFP+ Ports The default IP address of the WLC through the VIF SFP+ ports is 192.168.3.228.
Note: All 10G SFP+ Ports in WLC support mono mode optic fiber.
RJ45 Ports
•The management port must be the first RJ45 1GbE port. The default IP address
of the WLC through the Mgmt port is 192.168.2.228.
•The WLAN port is for thin AP accessing and wireless clients’ data tunnel, which
could be a RJ45 port other than the Management Port.
Console Port The Console Port is for debug or troubleshooting by IT staff.
USB 2.0 Ports Two USB 2.0 ports, which are reserved for further applications.
2.3. LED INDICATORS
The following table describes the LED indicators available on the front panel of the WS5/7/10G2.
LED Indicator Color Behavior Description
Power Green
Solid On
The system is powered on.
Off
The system is powered off.
HDD Green
Blinking
Data transfer activity is taking place.
Off
No data transfer activity is taking place.
SFP+ LEDs
Orange
Solid On (Right)
Connection active at 1 Gbps
Blinking (Left)
Sending and receiving data
Off
No connection active or port is disabled.
RJ45 LAN LEDs
Green Solid On (Right)
Connection active at 10/100 Mbps
Orange Blinking (Left)
Sending and receiving data
Off
No connection active or port is disabled.

Hyperion Series Wireless LAN Controller User Manual
58-150008-IQN_V1.0 Page 5
Chapter 3. SYSTEM FOUNDATION
3.1. SYSTEM ARCHITECTURE
The Wi-Fi system architecture using Hyperion series WLC and Thin APs is illustrated below.
Figure 3-1 Wi-Fi System Architecture using WLC
The WLC has a southbound interface named the WLAN port. This port is the accessing port for all Thin APs connecting
to WLC；while the northbound ports based on WLC internal VLAN Interfaces (VIF) connect to the Portal / Radius for user
authentication and Internet for user services.
Two types of tunnel are established from Thin AP to WLC and will take charge of all communications:
The CAPWAP tunnel, an access stratum management tunnel, focuses on provisioning AP and all statistics
reports.
The WLTP data tunnel focuses on UE (User Endpoint) non-access stratum data transmission, including service
traffic and authentication messages.

Hyperion Series Wireless LAN Controller User Manual
58-150008-IQN_V1.0 Page 6
Both tunnels start at the thin AP.
The Thin AP has zero configurations in its initial state. During its power-on stage, it firstly discovers the WLC by DHCP
protocol and obtains up to 4 WLC IP addresses settled in DHCP Option 43, and then uses the first WLC IP address to
establish the primary CAPWAP tunnel, and the others as the redundant WLC purpose. Then, thin AP downloads the
profiles from the WLC through the CAPWAP tunnel to complete its configuration; while user clients associate to thin AP
and start authentication and data services through WLTP tunnel.
The 1’st internet service initiated by user client through WLTP data tunnel will be intercepted by WLC to check whether
it is an legal user, if not, this accessing will be redirected to the Captive Portal where the user name and password input
and then authenticated by Radius server.
3.2. CONNECTION AND CONFIGURATION
There are two configuration modes for WLC management: one is the CLI (Command Line Interface) mode which is
entered by SSH, Telnet and RS232 serial console accessing; another is the web mode which is entered by using browser
to access the management web page for provisioning.
The Web provisioning mode (HTTP/HTTPS) is a user-friendly management method and can be accessed by using any
standard Web browsing software, like Internet Explorer or Chrome. The Web interface simplifies system management
and configuration, even if the administrator is a junior engineer. The CLI mode, however, is for the advanced customer
and can be entered by SSH, Telnet, and the RS-232 console accessing. More knowledge about network communication
protocols and command instructions are required to effectively configure and manage the WLC through the CLI mode.
The following section will briefly explain how to connect WLC for its configuration and management:
•Ethernet Connection
：
Configuration host connects to the WLC Mgmt port over Ethernet cable.
•RS232 Serial Connection
：
Configuration host connects to the WLC console port over RJ45-RS232 serial cable. The
console port serial baud rate is 38400.
Ethernet
192.168.2.228/192.168.3.228
192.168.2.100/192.168.3.100
RJ45-RS232
Configuration
Host
WLC
Figure 3-2 Configuration host Connects to the WLC for Management
The following default IP addresses are preset in the WLC:
•The default management IP address of the WLC through the Mgmt port is 192.168.2.228. The host PC or
notebook must be assigned with an IP address in the same subnet, for example, 192.168.2.100.
•The default service IP address of the WLC through the VIF port is 192.168.3.228. The host PC or notebook must be
assigned with an IP address in the same subnet, for example, 192.168.3.100.
Software tools which support SSH, Telnet and Serial communications, such as SecureCRT, XShell, or PuTTY, can be

Hyperion Series Wireless LAN Controller User Manual
58-150008-IQN_V1.0 Page 7
used to configure and manage WLC in CLI mode.
The default login credentials for WLC management is as the following:
•Username: admin
•Password: password
3.3. ENTRANCE OF WEB MODE PROVISION
Compared with the CLI mode configuration, the WLC provides a more user-friendly management interface called the
Web mode provisioning that can be accessed by any standard Web browser software like Internet Explorer or Chrome
using the HTTP/HTTPS protocol.
To access the Web provisioning, entering the default IP address (192.168.2.228 accessing in the management port or
192.168.3.228 accessing in the WLAN port) in the address bar of the web browser and press the Enter key to get into
the login page, as shown below.
Figure 3-3 Web Interface (Login Page)
Enter the Username, Password and verification code, select the appropriate language in the pull-down menu, and click
the Login button to enter the Web provisioning page of the WLC.
Note: The default Username is admin and Password is password.

Hyperion Series Wireless LAN Controller User Manual
58-150008-IQN_V1.0 Page 8
3.4. SYSTEM BASIC
The [system basic] menu provides two functions of ‘System Information Overview’ and ‘System Quick Setting’.
3.4.1. INFORMATION OVERVIEW
The [system Information] menu provides a information summary page, shown as below. It is displayed immediately
after a successful login.
Figure 3-4 System Information Overview Page
In this system information overview page, it provides the hardware information and firmware information of WLC, and
also reports the statistics information of Thin APs and user endpoints through charts and graphics.
3.4.2. QUICK SETTING
The [Quick Setting] is a shortcut way for junior customer to provision WLC in a simple mode with few parameters
configuration. It can help customers use WLC to build their Wi-Fi system in a short time.

Hyperion Series Wireless LAN Controller User Manual
58-150008-IQN_V1.0 Page 9
Select [System Basic > Quick Setting] in the menu to enter the configuration page. In [Quick Setting] page, those
basic parameters including wireless, network and authentication are uniformly configured, they are sufficient for WLC to
operate in a simple mode.
Figure 3-5 Quick Setting for WLC
These parameters in [Quick Setting] page are described in details as following:
Parameter Description
Network Configuration WLAN Port IP Address: WLAN port is the southbound port for WLC to
connect Thin APs. Thin AP establishes CAPWAP management tunnel to this
WLAN port. This IP address is actually the CAPWAP tunnel termination IP.
Default value is 192.168.3.228.
WLAN Port Netmask: The netmask is used to divide which subnet the
WLAN port is belonged to.

Management Port IP Address: The management port is 1’st 1GbE port in

Hyperion Series Wireless LAN Controller User Manual
58-150008-IQN_V1.0 Page 10
Parameter Description
WLC. It is used for customer to configure or maintain the WLC. However, in
practical applications, it is also used as the heartbeat port for 1+1 backup.
Default value is 192.168.2.228.
Management Port Netmask: The netmask is used to divide which subnet
the management port is belonged to.
Default Gateway IP Address: The default gateway is used to process data
packets whose destination IP address is not in the same subnet as the
current network. If it is necessary to route data packets to another subnet
or the Internet, you must specify it.
DNS Server IP Address: The DNS server is used to convert domain names
into IP addresses during Internet access. Entering the available DNS IP
address here.
DHCP Configuration Enable Internal DHCP: WLC has the DHCP server built in. In practical
applications, DHCP server could be either provided externally or internally.
If no external DHCP server provided, customer can use WLC built-in DHCP
server here by enabling it.
DHCP Option43: This is an option for DHCP protocol. Option 43 of DHCP
is used to deliver the WLC IP address to tell thin AP where to establish the
CAPWAP management tunnel.
DHCP Pool Start-End IP Addresses: The built-in DHCP server of WLC uses
this IP address pool to allocate IP addresses to thin APs and user clients.
The start IP and end IP limit the range of available IP addresses.
DHCP Default Gateway IP Address: This default gateway IP address can
be allocated to thin APs or user clients through the built-in DHCP server.
Authentication Configuration Authentication Server: Select whether using the WLC built-in Portal /
Radius server or external Portal / Radius server for authentication purpose:
oInternal Portal&Radius: WLC built-in Portal / Radius server as the
authentication server.
oExternal Portal&Radius: External 3’rd party Portal / Radius server as
the authentication server.
OTP SMS Gateway: OTP stands for ‘One Time Password’. The password
generated by WLC will be delivered in the short message for user to input it
in the Captive Portal page for authentication. Therefore, the SMS gateway
providing OTP service must be designated. Here now have two options of
‘aliyun’ and ‘every8D’ for customer to select.
Note: Before this configuration, customer must have registered as
the legal subscriber of SMS gateway and have the user name and
password officially released.
Radius Configuration: This is a hyperlink to Radius Server configuration
page. Customer can get there to have related parameters set.
Portal Configuration: This is a hyperlink to Portal Server configuration
page. Customer can get there to have related parameters set.

Hyperion Series Wireless LAN Controller User Manual
58-150008-IQN_V1.0 Page 11
Parameter Description
Wireless Configuration In the thin AP of 802.11ac, there are two radio modules in 2.4GHz band and 5GHz
band so that they should be configured respectively.
2.4GHz
Module
2.4GHz SSID: Allocate a SSID for 2.4GHz radio module in
thin AP to identify its service for wireless clients operating in
2.4GHz band to discover.
Local Switching: This tells the 2.4GHz module in thin AP
whether the user service traffic from user clients is local
directly forwarding to internet or centralized to WLC for
forwarding:
oYes: 2.4GHz module in thin AP Locally forwarding.
oNo: WLC centralized forwarding.
Service VLAN ID: Due to thin AP has the access stratum
tunnel CAPWAP for AP management, and the non-access
stratum tunnel WLTP for user service traffic and
authentication, therefore, it is necessary to distinguish them
by VLAN. Here to assign the service VLAN ID to user traffic
path for 2.4GHz module in thin AP.
2.4GHz Security: There are three types of wireless security
provided for 2.4GHz radio module to select:
oOpen System: When the wireless client associates
with the 2.4GHz radio module, only SSID are required
for authentication and the authentication does not
require encryption.
oWPA2-PSK: When wireless client associates with the
2.4GHz radio module in thin AP, it must be
authenticated by WPA2 with the preset PSK key
encryption.
oWPA2&Radius: When wireless client associates with
the 2.4GHz radio module in thin AP, it must be
authenticated by WPA2, and the encryption key for
authentication is issued by Radius server temporarily
rather than the preset like the WPA2-PSK.
2.4GHz WPA Key: If WPA2-PSK security selected for 2.4GHz
radio module, the preset PSK key must be entered here in
the form of character string.
5GHz
Module
5GHz SSID: Allocate a SSID for 5GHz radio module in thin
AP to identify its service for wireless clients operating in
5GHz band to discover.
Local Switching: This tells the 5GHz module in thin AP
whether the user service traffic from user clients is local
directly forwarding to internet or centralized to WLC for
forwarding:
o
Yes: 5GHz module in thin AP Locally forwarding.

Hyperion Series Wireless LAN Controller User Manual
58-150008-IQN_V1.0 Page 12
Parameter Description
o
No: WLC centralized forwarding.
Service VLAN ID: Due to thin AP has the access stratum
tunnel CAPWAP for AP management, and the non-access
stratum tunnel WLTP for user service traffic and
authentication, therefore, it is necessary to distinguish them
by VLAN. Here to assign the service VLAN ID to user traffic
path for 5GHz module in thin AP..
5GHz Security: There are three types of wireless security
provided for 5GHz radio module to select:
oOpen System: When the wireless client associates
with the 5GHz radio module, only SSID are required
for authentication and the authentication does not
require encryption.
oWPA2-PSK: When wireless client associates with the
5GHz radio module in thin AP, it must be
authenticated by WPA2 with the preset PSK key
encryption.
oWPA2&Radius: When wireless client associates with
the 5GHz radio module in thin AP, it must be
authenticated by WPA2, and the encryption key for
authentication is issued by Radius server temporarily
rather than the preset like the WPA2-PSK. .
5GHz WPA Key: If WPA2-PSK security selected for 5GHz
radio module, the preset PSK key must be entered here in
the form of character string.
Warning: [Quick Setting] is a one page mode for junior customer to configure WLC in an easy way by having
numbers of parameters hidden in their default values; however, it is possible to conflict with their
values configured in advanced setting mode. Strongly recommended that only one configuration
mode for customer to use for WLC setting.

Hyperion Series Wireless LAN Controller User Manual
58-150008-IQN_V1.0 Page 13
Chapter 4. NETWORK CONFIGURATION
4.1. PORT CLASSIFICATION
Hyperion series WLC includes WS5G2, WS7G2 and WS10G2 three models, and their panels have multiple 1G and 10G
physical Ethernet ports. Before using, it is necessary to specify which ports the WLC uses and which ports the other
applications use. The specifying port usage is called as Port Classification.
Select [Network > Port Classification] in the menu to enter the configuration page as following (here is the Port
Layout of WS7G2 as the example):
Figure 4-1 WLC Port Classification
These parameters in [Network > Port Classification]page is described in details as following:
Parameter Description
GE1 This is the default management port for WLC, also used as the heartbeat port for
1+1 backup.
GE2~6 There are five 1000Base-T ports in the form of RJ45. They can be classified into two
types according to the usage:
WLC: This port is specially allocated to WLC as the CAPWAP tunnel for thin
AP management and the central switching for user data traffic.
Non-WLC: This port is allocated to Linux OS or other applications running
in this platform.
XG1~2 There are two 10GBase-T ports in the form of SFP+. They can be classified into two
types according to the application:

WLC: This port is specially allocated to WLC as the CAPWAP tunnel for thin

Hyperion Series Wireless LAN Controller User Manual
58-150008-IQN_V1.0 Page 14
Parameter Description
AP management and the central switching for user data traffic.
Non-WLC: This port is allocated to Linux OS or other applications running
in this platform.
Click the Apply button to accept the changes.
Note: Usually one or two ports being allocated to WLC usage are sufficient for most of Wi-Fi system
networking requirements!
Note: If the Port Classification is changed, it must reboot WLC to make it being effective!
4.2. AP ACCESS PORT
The port in WLC used to connect the thin AP is the ‘AP Access Port’, and it is also called as WLAN port. This port is the
WLC southbound interface for establishing the CAPWAP tunnel with thin AP.
Select [Network > AP Access Port] in the menu to enter the configuration page as following:
Figure 4-2 AP Access Port Configuration
These parameters in [Network > AP Access Port]page is described in details as following:
Parameter Description
VLAN ID Allocate a VLAN ID to the ’AP Access Port’ for AP management which is distinguished
with service VLAN of user client.
Note: This VLAN ID cannot be any value, it must be an available VLAN which
is previously created in [Network > VLAN].
IPv6 Address It is necessary to allocate an IPv6 address to the ‘AP Access Port’ if the WLC is
deployed in an IPv6 network.
Primary IP Address Allocate an IPv4 address to the ‘AP Access Port’ as the primary IP address.
Secondary IP Address Allocate an IPv4 address to the ‘AP Access Port’ as the secondary IP address for

Hyperion Series Wireless LAN Controller User Manual
58-150008-IQN_V1.0 Page 15
Parameter Description
backup purpose.
Subnet Mask Allocate a netmask for the ‘AP Access Port’ to divide which subnet the WLAN port is
belonged to.
Designate AP Service Port The AP service port in the WLC is used for user client traffic, which is different from the
AP access port used for AP management. However, this port can be located on the
same physical port as the thin AP access port (TAP), and distinguished by VLAN ID; or
it can be located on other VLAN interfaces (VIF1~VIF8). The default value is the TAP
port.
Click the Apply button to accept the changes.
Click the Cancel button to discard the changes.
Note: If these parameters modified, it is necessary to Save Configuration and then reboot system to make
them to take effect.
4.3. MANAGEMENT PORT
The first 1000Base-T RJ45 port (that is, the GE1 port) must be the management port of the WLC. Customers mainly use
the management port to manage, maintain and configure WLC. The default IP address of the management port is
192.168.2.228.
Select [Network > Management Port] in the menu to enter the configuration page as following:
Figure 4-3 Management Port Configuration Page
These parameters in [Network > Management Port]page is described in details as following:
Parameter Description
VLAN ID If the external switching device or host connected to WLC is configured with a VLAN,
this port must be assigned a VLAN ID for WLC management and maintenance.
IPv6 Address It is necessary to allocate an IPv6 address to the ‘Management Port’ if the WLC is
deployed in an IPv6 network.

Hyperion Series Wireless LAN Controller User Manual
58-150008-IQN_V1.0 Page 16
Parameter Description
IP Address Assign an IPv4 address to the "management port" as the WLC management IP
address. The default IP address is 192.168.2.228.
Subnet Mask Allocate a netmask for the ‘Management Port’ to divide which subnet the WLC is
belonged to.
Click the Apply button to accept the changes.
Click the Cancel button to discard the changes.
4.4. VLAN CREATION
If the Wi-Fi system is deployed in a VLAN-configured network, it is needed to create VLANs in the WLC for user data
forwarding and WLC itself communication. Figure 4-4 shows the types of VLAN in WLC, where data plane VLANs are
used for physical ports and control plane VLANs are used for VIF interfaces.
Figure 4-4 The VLAN types in WLC

Hyperion Series Wireless LAN Controller User Manual
58-150008-IQN_V1.0 Page 17
Select [Network > VLAN Creation] in the menu to enter the configuration page as following:
Figure 4-5 VLAN Configuration Page
These parameters in [Network > VLAN Creation] page is described in details as following:
Parameter Description
VLAN NAME Assign a literal name for the new VLAN in order to mnemonic.
VLAN ID Allocate a numeric identifier to the new VLAN.
Uplink Bandwidth for STA User uplink traffic from wireless clients through this VLAN will be limited to a fixed
bandwidth during transmission.
Downlink Bandwidth for STA User downlink traffic to the wireless client through this VLAN will be limited to a
fixed bandwidth during transmission
Portal Server Bind the Portal server to the new VLAN, so user clients in this VLAN will use this
Portal server for authentication.
Physical Ports
Note:
Only those ports
which have been
classified to WLC type in
[Port Classification] can
be listed out here for
VLAN binding.
GE2 The egress of this GbE port can be configured as:
TAGGED: Outgoing packet with the VLAN tag.
UNTAGGED: Outgoing packet with the VLAN tag stripped off.
GE3 The egress of this GbE port can be configured as:
TAGGED: Outgoing packet with the VLAN tag.
UNTAGGED: Outgoing packet with the VLAN tag stripped off.
GE5 The egress of this GbE port can be configured as:
TAGGED: Outgoing packet with the VLAN tag.
UNTAGGED: Outgoing packet with the VLAN tag stripped off.
XG1 The egress of this 10G port can be configured as:
TAGGED: Outgoing packet with the VLAN tag.
UNTAGGED: Outgoing packet with the VLAN tag stripped off.