Siemens HiPath C10, HiPath C1000, HiPath C2400, HiPath AP2610, HiPath AP2620 User Manual

...

HiPath Wireless Controller, Access Points and Convergence Software, V4.0

C10/C100/C1000 User Guide

*1PA31003-W1040-U101-1-7619*

1P A31003-W1040-U101-1-7619

The information provided in this document contains merely general descriptions or characteristics of performance which in case of actual use do not always apply as described or which may change as a result of further development of the products. An obligation to provide the respective characteristics shall only exist if expressly agreed in the terms of contract. The trademarks used are owned by Siemens AG or their respective owners.

Warning

Hackers who unlawfully gain access to customer telecommunications systems are criminals. Currently, we do not know of any telecommunications system that is immune to this type of criminal activity. Siemens AG will not accept liability for any damages which result from unauthorized use. Although Siemens has designed security features into its products, it is your sole responsibility to use the security features and to establish security practices within your company, including training, security awareness, and call auditing.

Siemens sales and service personnel, as well as Siemens business partners, are available to work with you to help you guard against this unauthorized use of your telecommunications system.

July 2006 No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by any means, mechanical, electronic, photocopying, recording, or otherwise, without prior written permission of Siemens. The software described in this publication is furnished under a license agreement and may be used only in accordance with the terms of that agreement.

Request Siemens publications from your Siemens representative or the Siemens branch serving you.

●

Siemens Communications,

hwc1000_user_guidetoc.fm

Nur für den internen Gebrauch Content

Content 0

1 About this Guide. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

1.1 Who should use this guide. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

1.2 What is in this guide. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

1.3 Formatting conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

1.4 Documentation feedback . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

1.5 Safety Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

1.6 Sicherheitshinweise . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12

1.7 Consignes de sécurité . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

2 Regulatory information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

2.1 WLAN HiPath Wireless Controller C10/C100/C1000/C2400. . . . . . . . . . . . . . . . . . . . . 17

2.2 AP2610 Internal Antenna AP, AP2620 External Antenna AP . . . . . . . . . . . . . . . . . . . . 18

2.2.1 United States - FCC Declaration of Conformity Statement . . . . . . . . . . . . . . . . . . . 18

2.2.1.1 FCC RF Radiation Exposure Statement. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20

2.2.2 Canada - Department of Communications Compliance Statement. . . . . . . . . . . . . 20

2.2.3 European Community . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

2.2.3.1 Declaration of Conformity in Languages of the European Community. . . . . . . 22

2.2.4 Conditions of Use in the European Community . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

2.2.5 Certifications of Other Countries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

3 Overview of the Controller, Access Points and Convergence Software solution . . 29

3.1 Conventional wireless LANS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29

3.2 Elements of the solution . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30

3.3 Controller, Access Points and Convergence Software and your network . . . . . . . . . . . 33

3.3.1 Network traffic flow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

3.3.2 Network security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

3.3.2.1 Authentication. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36

3.3.2.2 Privacy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

3.3.3 Virtual Network Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

3.3.4 Static routing and routing protocols. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

3.3.5 Packet filtering policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

3.3.6 Mobility and roaming . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

3.3.7 Network availability . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

3.3.8 Quality of Service (QoS) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

3.4 System Configuration Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40

4 Configuring the HiPath Wireless Controller. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43

4.1 System configuration overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44

4.2 Performing the first-time setup of the HiPath Wireless Controller . . . . . . . . . . . . . . . . . 47

4.2.1 Accessing the HiPath Wireless Controller. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47

4.2.1.1 Changing the administrator password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51

4.2.2 Connecting the HiPath Wireless Controller to your enterprise network . . . . . . . . . 51

A31003-W1040-U101-1-7619, July 2006 DRAFT HiPath Wireless Controller, Access Points and Convergence Software V4.0, C10/C100/C1000 User Guide

hwc1000_user_guidetoc.fm

Content Nur für den internen Gebrauch

4.2.3 Applying the product license key . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52

4.2.4 Setting up the data ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

4.2.5 Setting up static routes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57

4.2.6 Setting up OSPF Routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59

4.2.7 Filtering at the interface level . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62

4.2.8 Built-in port-based exception filters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62

4.2.9 User defined port-based exception filters. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64

4.3 Completing the system configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67

4.4 Ongoing Operations of the Controller, Access Points and Convergence Software . . . 67

5 Configuring the wireless AP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69

5.1 Wireless AP overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69

5.2 Discovery and registration overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71

5.2.1 Wireless AP discovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71

5.2.2 Registration after discovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73

5.2.2.1 Default AP configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73

5.2.3 Understanding the wireless AP LED status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73

5.3 Configuring the wireless APs for the first time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75

5.3.1 Defining properties for the discovery process . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77

5.3.2 Connecting the Wireless AP to a power source and initiating the discovery and regis-

tration process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80

5.4 Adding and registering a Wireless AP manually . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80

5.5 Modifying wireless AP settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81

5.5.1 Modifying a Wireless AP’s status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82

5.5.2 Configuring the default AP settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83

5.5.3 Modifying a wireless AP’s properties . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86

5.5.4 Modifying the wireless AP’s radio properties . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88

5.5.5 Setting up the wireless AP using static configuration. . . . . . . . . . . . . . . . . . . . . . . 93

5.5.6 Configuring Dynamic Radio Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96

5.6 Modifying a wireless AP’s properties based on a default AP configuration . . . . . . . . . 98

5.7 Modifying the wireless AP’s default setting using the Copy to Defaults feature . . . . . . 98

5.8 Configuring APs simultaneously . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 99

5.9 Performing wireless AP software maintenance. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 101

6 Virtual Network Services. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107

6.1 VNS overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107

6.2 Setting up a VNS checklist . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108

6.3 Topology of a VNS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110

6.4 RF assignment for a VNS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111

6.5 Authentication for a VNS. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 112

6.5.1 Authentication with SSID network assignment. . . . . . . . . . . . . . . . . . . . . . . . . . . 112

6.5.2 Authentication with AAA (802.1x) network assignment . . . . . . . . . . . . . . . . . . . . 113

6.6 Filtering for a VNS. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114

6.6.1 Final filter rule. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114

6.6.2 Filtering sequence . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115

A31003-W1040-U101-1-7619, July 2006 DRAFT

4 HiPath Wireless Controller, Access Points and Convergence Software V4.0, C10/C100/C1000 User Guide

hwc1000_user_guidetoc.fm

Nur für den internen Gebrauch Content

6.7 Data protection on a VNS—WEP and WPA . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 116

6.8 VNS global settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 116

6.9 Setting up a new VNS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 121

7 Virtual Network configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 123

7.1 Topology for a VNS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 124

7.1.1 Configuring topology for a VNS for Captive Portal . . . . . . . . . . . . . . . . . . . . . . . . 125

7.1.1.1 Defining session timeout parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 125

7.1.1.2 Enabling management traffic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 126

7.1.1.3 Enabling third-party APs on a VNS. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 127

7.1.1.4 Defining a next hop route and OSPF advertisement for a VNS . . . . . . . . . . . 128

7.1.1.5 Defining the IP address for the VNS (for the DHCP server on the controller) 128

7.1.1.6 Modifying time limits for IP assignments. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 130

7.1.1.7 Setting the name server configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 131

7.1.1.8 Using a DHCP relay for the VNS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 131

7.1.2 Configuring topology for a VNS for AAA . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 132

7.1.3 Saving your topology properties . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133

7.2 Assigning Wireless AP radios to a VNS. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133

7.3 Authentication for a VNS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 135

7.3.1 Vendor Specific Attributes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 136

7.3.2 Defining authentication for a VNS for Captive Portal . . . . . . . . . . . . . . . . . . . . . . 137

7.3.2.1 Defining the RADIUS server priority for RADIUS redundancy . . . . . . . . . . . . 140

7.3.2.2 Configuring Captive Portal for internal or external authentication . . . . . . . . . 141

7.3.3 Defining authentication for a VNS for AAA . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 145

7.3.4 Defining MAC-based authentication for a VNS . . . . . . . . . . . . . . . . . . . . . . . . . . . 148

7.4 Defining accounting methods for a VNS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 150

7.5 Defining RADIUS filter policy for VNSs and VNS groups . . . . . . . . . . . . . . . . . . . . . . 151

7.6 Configuring filtering rules for a VNS. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 153

7.6.1 Filtering rules for an exception filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 153

7.6.2 Defining non-authenticated filters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 156

7.6.2.1 Non-authenticated filter examples . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 158

7.6.3 Filtering rules for a filter ID group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 159

7.6.3.1 Filtering rules by filter ID examples. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 161

7.6.4 Filtering rules for a default filter. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 162

7.6.4.1 Default filter examples . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 163

7.6.4.2 Filtering rules for an AAA child group VNS. . . . . . . . . . . . . . . . . . . . . . . . . . . 164

7.6.4.3 Filtering rules between two wireless devices . . . . . . . . . . . . . . . . . . . . . . . . . 164

7.7 Enabling multicast for a VNS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 165

7.8 Configuring privacy for a VNS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 167

7.8.1 Privacy for a VNS for Captive Portal . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 167

7.8.2 Privacy for a VNS for AAA. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 170

7.8.2.1 Dynamic WEP privacy for an AAA VNS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 172

7.8.2.2 Wi-Fi Protected Access (WPA v1 and WPA v2) Privacy for an AAA VNS . . . 172

7.9 Defining a VNS with no authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 175

7.10 Defining priority level for VNS traffic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 176

A31003-W1040-U101-1-7619, July 2006 DRAFT HiPath Wireless Controller, Access Points and Convergence Software V4.0, C10/C100/C1000 User Guide

hwc1000_user_guidetoc.fm

Content Nur für den internen Gebrauch

7.10.1 Setting up a VNS for voice traffic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 176

7.11 Configuring Quality of Service (QoS) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 180

7.11.1 Defining the service class for the VNS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 183

7.12 Bridging traffic locally . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 185

8 Availability, mobility, and controller functionality . . . . . . . . . . . . . . . . . . . . . . . . . . 189

8.1 Availability overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 189

8.1.1 Availability prerequisites. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 191

8.1.2 Viewing the Wireless AP availability display. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 194

8.1.3 Viewing SLP activity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 194

8.1.4 Events and actions during a failover. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 195

8.2 Mobility manager. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 196

8.2.1 Displays for the mobility manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 202

8.3 Defining management users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 202

8.4 Configuring network time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 204

8.5 Configuring Check Point event logging. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 205

8.5.1 ELA Management Station events. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 207

8.6 Enabling SNMP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 208

8.6.1 MIB support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 208

8.6.2 Enabling SNMP on the HiPath Wireless Controller . . . . . . . . . . . . . . . . . . . . . . . 209

8.7 Using controller utilities . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 210

8.8 Configuring Web session timeouts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 211

9 Working with third-party APs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 213

10 Working with the Mitigator . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 217

10.1 Mitigator overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 217

10.2 Enabling the Analysis and data collector engines. . . . . . . . . . . . . . . . . . . . . . . . . . . 218

10.3 Running Mitigator scans . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 219

10.4 Analysis engine overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 222

10.5 Working with Mitigator scan results. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 222

10.6 Working with friendly APs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 225

10.7 Viewing the Mitigator list of third-party APs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 226

10.8 Maintaining the Mitigator list of APs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 227

10.9 Viewing the Scanner Status report . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 229

11 Working with reports and displays . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 231

11.1 Viewing the displays . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 231

11.1.1 Viewing the Wireless AP availability display. . . . . . . . . . . . . . . . . . . . . . . . . . . . 233

11.1.2 Viewing statistics for Wireless APs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 233

11.1.3 Viewing displays for the mobility manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 236

11.2 Viewing reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 239

12 Performing system maintenance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 241

12.1 Performing wireless AP client management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 241

12.1.1 Disassociating a client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 241

12.1.2 Blacklisting a client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 242

A31003-W1040-U101-1-7619, July 2006 DRAFT

6 HiPath Wireless Controller, Access Points and Convergence Software V4.0, C10/C100/C1000 User Guide

hwc1000_user_guidetoc.fm

Nur für den internen Gebrauch Content

12.2 Resetting the AP to its factory default settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 246

12.3 Performing system maintenance tasks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 246

12.4 Performing HiPath Wireless Controller software maintenance . . . . . . . . . . . . . . . . . 250

12.4.1 Updating HiPath Wireless Controller software . . . . . . . . . . . . . . . . . . . . . . . . . . 250

12.4.2 Updating operating system software. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 252

12.4.3 Backing up HiPath Wireless Controller software. . . . . . . . . . . . . . . . . . . . . . . . . 254

12.4.4 Restoring HiPath Wireless Controller software . . . . . . . . . . . . . . . . . . . . . . . . . . 257

12.4.5 Upgrading a HiPath Wireless Controller using SFTP . . . . . . . . . . . . . . . . . . . . . 259

12.4.6 Configuring the controller for interaction with the HiPath Wireless Manager . . . 260

12.4.7 Configuring Controller, Access Points and Convergence Software logs and traces. . 262

12.4.8 Viewing log, alarm and trace messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 262

12.4.8.1 Logs including alarms. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 262

13 Glossary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 267

13.1 Networking terms and abbreviations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 267

13.2 Controller, Access Points and Convergence Software terms and abbreviations. . . . 288

A31003-W1040-U101-1-7619, July 2006 DRAFT HiPath Wireless Controller, Access Points and Convergence Software V4.0, C10/C100/C1000 User Guide

hwc1000_user_guidetoc.fm

Content Nur für den internen Gebrauch

A31003-W1040-U101-1-7619, July 2006 DRAFT

8 HiPath Wireless Controller, Access Points and Convergence Software V4.0, C10/C100/C1000 User Guide

hwc_pref.fm

About this Guide

Who should use this guide

1 About this Guide

This guide describes how to install, configure, and manage the Controller, Access Points and Convergence Software software. This guide is also available as an online help system.

To access the online help system:

1. In the HiPath Wireless Assistant Main Menu bar, click Help. The About HiPath Wireless Assistant screen appears.

2. In the left pane, click Controller Documentation. The online help system is launched.

1.1 Who should use this guide

This guide is a reference for system administrators who install and manage the Controller, Access Points and Convergence Software system.

Any administrator performing tasks described in this guide must have an account with full administrative privileges.

1.2 What is in this guide

This guide contains the following:

● Chapter 1, “About this Guide”, describes the target audience and content of the guide, the

formatting conventions used in it, and how to provide feedback on the guide.

● Chapter 2, “Regulatory information”, provides the regulatory information for the HiPath

C10/C100/C1000/C2400 Wireless LAN Controllers and the AP2610 and AP2620 wireless

access points.

● Chapter 3, “Overview of the Controller, Access Points and Convergence Software

solution”, provides an overview of the product, its features and functionality.

● Chapter 4, “Configuring the HiPath Wireless Controller”, describes how to perform the

installation, first-time setup and configuration of the HiPath Wireless Controller, as well as configuring the data ports and defining routing.

● Chapter 5, “Configuring the wireless AP”, describes how to install the Wireless AP, how it

discovers and registers with the HiPath Wireless Controller, how to view and modify the radio configuration, and how to enable Dynamic Radio Frequency Management.

● Chapter 6, “Virtual Network Services”, provides an overview of Virtual Network Services

(VNS), the mechanism by which the Controller, Access Points and Convergence Software controls and manages network access.

A31003-W1040-U101-1-7619, July 2006 DRAFT HiPath Wireless Controller, Access Points and Convergence Software V4.0, C10/C100/C1000 User Guide

hwc_pref.fm

About this Guide

Formatting conventions

● Chapter 7, “Virtual Network configuration”, provides detailed instructions in how to

configure a VNS, its topology, authentication, accounting, RADIUS policy, multicast, filtering and privacy. Both Captive Portal and AAA types of VNS are described.

● Chapter 8, “Availability, mobility, and controller functionality”, describes how to set up the

features that provide availability in the event of a controller failover, and mobility for a wireless device user.

● Chapter 9, “Working with third-party APs”, describes how to use the Controller, Access

Points and Convergence Software features with third-party wireless APs.

● Chapter 10, “Working with the Mitigator”, explains the security tool that scans for, detects

and reports on rogue access points.

● Chapter 12, “Performing system maintenance”, describes maintenance activities, such as

software upgrades on both the HiPath Wireless Controller and the Wireless AP. This chapter also includes information on the logs, traces, reports and displays available.

● Chapter 13, “Glossary”, contains a list of terms and definitions for the HiPath Wireless

Controller and the Wireless AP as well as standard industry terms used in this guide.

● Appendix A, “System states and LEDs”, provides a reference on the LED displays and their

significance.

1.3 Formatting conventions

The Controller, Access Points and Convergence Software documentation uses the following formatting conventions to make it easier to find information and follow procedures:

● Bold text is used to identify components of the management interface, such as menu items

and section of pages, as well as the names of buttons and text boxes. For example: Click Logout.

● Monospace font is used in code examples and to indicate text that you type.

For example: Type https://<hwc-address>[:mgmt-port>]

● The following symbols are used to draw your attention to additional information:

Notes identify useful information that is not essential, such as reminders, tips, or

other ways to perform a task.

Warnings identify information that is essential. Ignoring a warning can adversely

affect the operation of your equipment or software.

A31003-W1040-U101-1-7619, July 2006 DRAFT

10 HiPath Wireless Controller, Access Points and Convergence Software V4.0, C10/C100/C1000 User Guide

hwc_pref.fm

About this Guide

Documentation feedback

1.4 Documentation feedback

If you have any problems using this document, please contact your next level of support:

● Siemens employees should contact the interactive Customer Engagement Team (i-CET).

● Customers should contact the Siemens Customer Support Center.

When you call, please have the following information ready. This will help us to identify the document that you are referring to.

● Title: HiPath Wireless Controller, Access Points and Convergence Software V4.0 C10/

C100/C1000 User Guide

● Part Number: A31003-W1040-U101-1-7619

1.5 Safety Information

Dangers

● Replace the power cable immediately if it shows any sign of damage.

● Replace any damaged safety equipment (covers, labels and protective cables)

immediately.

● Use only original accessories or components approved for the system. Failure to observe

these instructions may damage the equipment or even violate safety and EMC regulations.

● Only authorized Siemens service personnel are permitted to service the system.

Warnings

● This device must not be connected to a LAN segment with outdoor wiring.

● Ensure that all cables are run correctly to avoid strain.

● Replace the power supply adapter immediately if it shows any sign of damage.

● Disconnect all power before working near power supplies unless otherwise instructed by a

maintenance procedure.

● Exercise caution when servicing the hot swappable power supply of the HiPath Wireless

Controller (C100/C1000).

● Exercise caution when servicing hot swappable HiPath Wireless Controller components:

power supplies or fans. Rotating fans can cause serious personal injury.

A31003-W1040-U101-1-7619, July 2006 DRAFT HiPath Wireless Controller, Access Points and Convergence Software V4.0, C10/C100/C1000 User Guide

hwc_pref.fm

About this Guide

Sicherheitshinweise

● This unit may have more than one power supply cord. To avoid electrical shock, disconnect

all power supply cords before servicing. In the case of unit failure of one of the power supply modules, the module can be replaced without interruption of power to the HiPath Wireless Controller. However, this procedure must be carried out with caution. Wear gloves to avoid contact with the module, which will be extremely hot.

● There is a risk of explosion if a lithium battery is not correctly replaced. The lithium battery

must be replaced only by an identical battery or one recommended by the manufacturer.

● Always dispose of lithium batteries properly.

● Do not attempt to lift objects that you think are too heavy for you.

Cautions

● Check the nominal voltage set for the equipment (operating instructions and type plate).

High voltages capable of causing shock are used in this equipment. Exercise caution when

measuring high voltages and when servicing cards, panels, and boards while the system is powered on.

● Only use tools and equipment that are in perfect condition. Do not use equipment with

visible damage.

● To protect electrostatic sensitive devices (ESD), wear a wristband before carrying out any

work on hardware.

● Lay cables so as to prevent any risk of them being damaged or causing accidents, such as

tripping.

1.6 Sicherheitshinweise

Gefahrenhinweise

● Sollte das Netzkabel Anzeichen von Beschädigungen aufweisen, tauschen Sie es sofort

aus.

● Tauschen Sie beschädigte Sicherheitsausrüstungen (Abdeckungen, Typenschilder und

Schutzkabel) sofort aus.

● Verwenden Sie ausschließlich Originalzubehör oder systemspezifisch zugelassene

Komponenten. Die Nichtbeachtung dieser Hinweise kann zur Beschädigung der Ausrüstung oder zur Verletzung von Sicherheits- und EMV-Vorschriften führen.

● Das System darf nur von autorisiertem Siemens-Servicepersonal gewartet werden.

A31003-W1040-U101-1-7619, July 2006 DRAFT

12 HiPath Wireless Controller, Access Points and Convergence Software V4.0, C10/C100/C1000 User Guide

hwc_pref.fm

About this Guide

Sicherheitshinweise

Warnhinweise

● Dieses Gerät darf nicht über Außenverdrahtung an ein LAN-Segment angeschlossen

werden.

● Stellen Sie sicher, dass alle Kabel korrekt geführt werden, um Zugbelastung zu vermeiden.

● Sollte das Netzteil Anzeichen von Beschädigung aufweisen, tauschen Sie es sofort aus.

● Trennen Sie alle Stromverbindungen, bevor Sie Arbeiten im Bereich der Stromversorgung

vornehmen, sofern dies nicht für eine Wartungsprozedur anders verlangt wird.

● Gehen Sie vorsichtig vor, wenn Sie an der Hotswap-fähigen Stromversorgung des HiPath

Wireless Controllers (C100/C1000) Servicearbeiten durchführen.

● Gehen Sie vorsichtig vor, wenn Sie an Hotswap-fähigen HiPath Wireless Controller-

Komponenten (Stromversorgungen oder Lüftern) Servicearbeiten durchführen. Rotierende Lüfter können ernsthafte Verletzungen verursachen.

● Dieses Gerät ist möglicherweise über mehr als ein Netzkabel angeschlossen. Um die

Gefahr eines elektrischen Schlages zu vermeiden, sollten Sie vor Durchführung von Servicearbeiten alle Netzkabel trennen. Falls eines der Stromversorgungsmodule ausfällt, kann es ausgetauscht werden, ohne die Stromversorgung zum HiPath Wireless Controller zu unterbrechen. Bei dieser Prozedur ist jedoch mit Vorsicht vorzugehen. Das Modul kann extrem heiß sein. Tragen Sie Handschuhe, um Verbrennungen zu vermeiden.

● Bei unsachgemäßem Austausch der Lithium-Batterie besteht Explosionsgefahr. Die

Lithium-Batterie darf nur durch identische oder vom Händler empfohlene Typen ersetzt werden.

● Achten Sie bei Lithium-Batterien auf die ordnungsgemäße Entsorgung.

● Versuchen Sie niemals, ohne Hilfe schwere Gegenstände zu heben.

Vorsichtshinweise

● Überprüfen Sie die für die Ausrüstung festgelegte Nennspannung (Bedienungsanleitung

und Typenschild). Diese Ausrüstung arbeitet mit Hochspannung, die mit der Gefahr eines elektrischen Schlages verbunden ist. Gehen Sie mit großer Vorsicht vor, wenn Sie bei

eingeschaltetem System Hochspannungen messen oder Karten, Schalttafeln und Baugruppen warten.

● Verwenden Sie nur Werkzeuge und Ausrüstung in einwandfreiem Zustand. Verwenden Sie

keine Ausrüstung mit sichtbaren Beschädigungen.

● Tragen Sie bei Arbeiten an Hardwarekomponenten ein Armband, um elektrostatisch

gefährdete Bauelemente (EGB) vor Beschädigungen zu schützen.

● Verlegen Sie Leitungen so, dass sie keine Unfallquelle (Stolpergefahr) bilden und nicht

beschädigt werden.

A31003-W1040-U101-1-7619, July 2006 DRAFT HiPath Wireless Controller, Access Points and Convergence Software V4.0, C10/C100/C1000 User Guide

hwc_pref.fm

About this Guide

Consignes de sécurité

1.7 Consignes de sécurité

Dangers

● Si le cordon de raccordement au secteur est endommagé, remplacez-le immédiatement.

● Remplacez sans délai les équipements de sécurité endommagés (caches, étiquettes et

conducteurs de protection).

● Utilisez uniquement les accessoires d'origine ou les modules agréés spécifiques au

système. Dans le cas contraire, vous risquez d'endommager l'installation ou d'enfreindre les consignes en matière de sécurité et de compatibilité électromagnétique.

● Seul le personnel de service Siemens est autorisé à maintenir/réparer le système.

Avertissements

● Cet appareil ne doit pas être connecté à un segment de LAN à l'aide d'un câblage

extérieur.

● Vérifiez que tous les câbles fonctionnent correctement pour éviter une contrainte

excessive.

● Si l'adaptateur d'alimentation présente des dommages, remplacez-le immédiatement.

● Coupez toujours l'alimentation avant de travailler sur les alimentations électriques, sauf si

la procédure de maintenance mentionne le contraire.

● Prenez toutes les précautions nécessaires lors de l'entretien/des réparations du module

d'alimentation du HiPath Wireless Controller pouvant être branché à chaud (C100/C1000).

● Prenez toutes les précautions nécessaires lors de l'entretien/réparations des modules du

HiPath Wireless Controller pouvant être branchés à chaud : alimentations électriques ou ventilateurs.Les ventilateurs rotatifs peuvent provoquer des blessures graves.

● Cette unité peut avoir plusieurs cordons d'alimentation.Pour éviter tout choc électrique,

débranchez tous les cordons d'alimentation avant de procéder à la maintenance.En cas de panne d'un des modules d'alimentation, le module défectueux peut être changé sans éteindre le HiPath Wireless Controller. Toutefois, ce remplacement doit être effectué avec précautions. Portez des gants pour éviter de toucher le module qui peut être très chaud.

● Le remplacement non conforme de la batterie au lithium peut provoquer une explosion.

Remplacez la batterie au lithium par un modèle identique ou par un modèle recommandé par le revendeur.

● Sa mise au rebut doit être conforme aux prescriptions en vigueur.

● N'essayez jamais de soulever des objets qui risquent d'être trop lourds pour vous.

A31003-W1040-U101-1-7619, July 2006 DRAFT

14 HiPath Wireless Controller, Access Points and Convergence Software V4.0, C10/C100/C1000 User Guide

hwc_pref.fm

About this Guide

Consignes de sécurité

Précautions

● Contrôlez la tension nominale paramétrée sur l'installation (voir le mode d'emploi et la

plaque signalétique). Des tensions élevées pouvant entraîner des chocs électriques sont utilisées dans cet équipement. Lorsque le système est sous tension, prenez toutes les

précautions nécessaires lors de la mesure des hautes tensions et de l'entretien/réparation des cartes, des panneaux, des plaques.

● N'utilisez que des appareils et des outils en parfait état. Ne mettez jamais en service des

appareils présentant des dommages visibles.

● Pour protéger les dispositifs sensibles à l'électricité statique, portez un bracelet

antistatique lors du travail sur le matériel.

● Acheminez les câbles de manière à ce qu'ils ne puissent pas être endommagés et qu'ils

ne constituent pas une source de danger (par exemple, en provoquant la chute de personnes).

A31003-W1040-U101-1-7619, July 2006 DRAFT HiPath Wireless Controller, Access Points and Convergence Software V4.0, C10/C100/C1000 User Guide

hwc_pref.fm

About this Guide

Consignes de sécurité

A31003-W1040-U101-1-7619, July 2006 DRAFT

16 HiPath Wireless Controller, Access Points and Convergence Software V4.0, C10/C100/C1000 User Guide

hwc_regulatory_information.fm

Regulatory information

WLAN HiPath Wireless Controller C10/C100/C1000/C2400

2 Regulatory information

Warnings identify essential information. Ignoring a warning can lead to problems

This chapter provides the regulatory information for the HiPath Wireless Controller

C10/C100/C1000/C2400 and the AP2610 and AP2620 (AP26XX series) wireless access

points. Configuration of the AP26XX frequencies and power output are controlled by the regional

software purchased with the HiPath Wireless Controller and is downloaded from the server upon initial set-up. Customers are only allowed to download the software related to that customers geographic location, thus allowing the proper set-up of Access Points in accordance with local laws and regulations. The AP26XX must not be operated until proper regional software is downloaded and properly configured.

with the application.

Changes or modifications made to the HiPath Wireless Controller or the Wireless

APs which are not expressly approved by Siemens could void the user's authority to operate the equipment. Only authorized Siemens service personnel are permitted to service the system. Procedures that should be performed only by Siemens personnel are clearly identified in this guide.

2.1 WLAN HiPath Wireless Controller C10/C100/C1000/C2400

The HiPath Wireless Controllers are in compliance with the European Directive

Conformance Standards

Safety

● cULus Listed Device UL 60950:2000, 3rd Edition (North America)

● CSA C22.2 No.60950:2000, 3rd Edition (Canadian Safety)

2002/95/EC on the restriction of the use of certain hazardous substances (RoHS) in electrical and electronic equipment.

● 73/23/EEC Low Voltage Directive (LVD)

● EN 60950-1:2001 (European Safety)

● CB Certification: IEC 60950:1999, 3rd Edition with applicable National Differences

A31003-W1040-U101-1-7619, July 2006 DRAFT HiPath Wireless Controller, Access Points and Convergence Software V4.0, C10/C100/C1000 User Guide

hwc_regulatory_information.fm

Regulatory information

AP2610 Internal Antenna AP, AP2620 External Antenna AP

● AS/NZS 3260 (Australia/New Zealand ACMA Safety of ITE)

● US 21 CFR Subpart J 1002.10, 1002.12 (Safety of Laser Products)

● CDRH Letter of Approval (US FDA Laser Approval)

● IEC/EN 60825 (Safety of Laser Products)

EMC (Emissions / Immunity)

● FCC Part 15, Subpart B, Class A (North America)

● ICES-003, Class A (Canadian Emissions)

● 89/336/EEC EMC Directive

● EN 55022:1998 A2:2003 Class A (European Emissions)

● EN 55024:1998 A2:2003 includes EN 61000-2,3,4,5,6,11 (European Immunity)

● EN 61000-3-2:2000 Class A (Harmonics)

● EN 61000-3-3:1995 A1:2001 (Flicker)

● IEC/CISPR 22:1997 Class A (International Emissions)

● IEC/CISPR 24:1998 includes IEC/EN 61000-4-2,3,4,5,6,11 (International Immunity)

● Australia/New Zealand AS/NZS 3548 via EU standards (ACMA)

RoHS

● European Directive 2002/95/EC

2.2 AP2610 Internal Antenna AP, AP2620 External Antenna AP

The AP26XX is Wi-Fi certified under Certification ID # WOO2422 for operation in accordance with IEEE 802.11a/b/g. The AP26XX wireless access points with Internal and External antennas are designed and intended to be used indoors.

Operation in the European Community and rest of the world may be dependant on

securing local licenses/certifications/regulatory approvals.

2.2.1 United States - FCC Declaration of Conformity Statement

This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions:

A31003-W1040-U101-1-7619, July 2006 DRAFT

18 HiPath Wireless Controller, Access Points and Convergence Software V4.0, C10/C100/C1000 User Guide

hwc_regulatory_information.fm

Regulatory information

AP2610 Internal Antenna AP, AP2620 External Antenna AP

● This device may not cause harmful interference.

● This device must accept any interference received, including interference that may cause

undesired operation.

This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a residential and business environment. This equipment generates, uses, and radiates radio frequency energy, and if not installed and used in accordance with instructions, may cause harmful interference. However, there is no guarantee that interference will not occur. If this equipment does cause harmful interference, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures:

● Reorient or relocate the receiving antenna.

● Increase the separation between the equipment or devices.

● Connect the equipment to an outlet other than the receiver's.

● Consult a dealer or an experienced radio/TV technician for suggestions.

This equipment meets the following conformance standards:

USA Conformance Standards

Safety

● UL 60950-1:2003, 1st Edition

● UL 2043 Plenum Rated as part of UL 60950. Suitable for use in environmental air space in

accordance with Section 300.22.C of the National Electrical Code.

EMC

● FCC CFR 47 Part 15, Class B

Radio Transceiver

● FCC ID: REB-APXXX1

● CFR 47 Part 15.247, Subpart C (2.4 GHz)

● CFR 47 Part 15.407, Subpart E (5 GHz)

Other

● IEEE 802.11a (5 Ghz)

● IEEE 802.11b/g (2.4 GHz)

A31003-W1040-U101-1-7619, July 2006 DRAFT HiPath Wireless Controller, Access Points and Convergence Software V4.0, C10/C100/C1000 User Guide

hwc_regulatory_information.fm

Regulatory information

AP2610 Internal Antenna AP, AP2620 External Antenna AP

● IEEE 802.3af (PoE)

The AP26XX must be installed and used in strict accordance with the manufacturer's

instructions as described in this guide and the quick start guide for the device to which AP26XX is connected. Any other installation or use of the product violates FCC Part 15 regulations.

According to FCC, the AP2610 with internal antenna can use the UNII 5.15 - 5.25 GHz band only with indoor installations in accordance with 47 CFR 15.407(e). AP2620 with external antenna is not allowed to operate in this band in accordance with 47 CFR 15.407(d).

This Part 15 radio device operates on a non-interference basis with other devices operating at the same frequency when using antennas provided or other Siemens certified antennas. Any changes or modification to the product not expressly approved by Siemens could void the user's authority to operate this device.

2.2.1.1 FCC RF Radiation Exposure Statement

The AP26XX access point complies with FCC RF radiated exposure limits set forth for an uncontrolled environment. End users must follow the specific operating instructions for satisfying RF exposure compliance. This device has been tested and has demonstrated compliance when simultaneously operated in the 2.4 GHz and 5 GHz frequency ranges. This device must not be co-located or operated in conjunction with any other antenna or transmitter.

The radiated output power of the AP26XX is far below the FCC radio frequency

exposure limits as specified in "Guidelines for Human Exposure to Radio Frequency Electromagnetic Fields" (OET Bullet 65, Supplement C). This equipment should be installed and operated with a minimum distance of 20 centimeters (8 inches) between the radiator and your body or other co-located operating antennas.

2.2.2 Canada - Department of Communications Compliance Statement

This digital apparatus does not exceed the Class B limits for radio noise emissions from digital apparatus as set out in the interference-causing equipment standard entitled "Digital Apparatus," ICES-003 of the Department of Communications.

Cet appareil numerique respecte les limites de bruits radioelectriques applicables aux appareils numeriques de Classe B prescrites dans la norme sur le materiel brouilleur: "Appareils Numeriques," NMB-003 edictee par le ministere des Communications.

A31003-W1040-U101-1-7619, July 2006 DRAFT

20 HiPath Wireless Controller, Access Points and Convergence Software V4.0, C10/C100/C1000 User Guide

hwc_regulatory_information.fm

Regulatory information

AP2610 Internal Antenna AP, AP2620 External Antenna AP

This device complies with Part 15 of the FCC Rules and Canadian Standard RSS-210. Operation is subject to the following conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. This Class B digital apparatus complies with Canadian ICES-003.

This equipment meets the following conformance standards:

Canada Conformance Standards

Safety

● cULus Listed C22.2 No.60950-1-03, 1st Edition

● UL 2043 Plenum Rated as part of UL 60950. Suitable for use in environmental air space in

accordance with Sections 2-128, 12-010(3) and 12-100 of the Canadian Electrical Code, Part 1, C22.1

EMC

● ICES-003, Class B

Radio Transceiver

● IC: 4702A-APXXXX

● RSS-210 (2.4 GHz and 5GHz)

Other

● IEEE 802.11a (5 GHz)

● IEEE 802.11b/g (2.4 GHz)

● IEEE 802.3af (PoE)

A31003-W1040-U101-1-7619, July 2006 DRAFT HiPath Wireless Controller, Access Points and Convergence Software V4.0, C10/C100/C1000 User Guide

hwc_regulatory_information.fm

Regulatory information

AP2610 Internal Antenna AP, AP2620 External Antenna AP

2.2.3 European Community

The AP26XX are wireless access points designed for use in the European Union and other countries with similar regulatory restrictions where the end user or installer is allowed to configure the wireless access point for operation by entry of a country code relative to a specific country. Upon connection to the controller, the software will prompt the user to enter a country code. After the country code is entered, the controller will set up the wireless access point with the proper frequencies and power outputs for that country code.

Although outdoor use may be allowed and may be restricted to certain frequencies and/or may require a license for operation, the AP26XX is intended for indoor use and must be installed in a proper indoor location. Use the installation utility provided with the controller software to insure proper set-up in accordance with all European spectrum usage rules. Contact local Authority for procedure to follow and regulatory information. For more details on legal combinations of frequencies, power levels and antennas, contact Siemens.

Declaration of Conformity with R&TTE Directive of the European Union 1999/5/EC The following symbol indicates compliance with the Essential Requirements of the R&TTE

Directive of the European Union (1999/5/EC).

The wireless APs are in compliance with the European Directive 2002/95/EC on the

2.2.3.1 Declaration of Conformity in Languages of the European Community

English Hereby, Siemens, declares that this Radio LAN device is in compliance with the

Finnish Valmistaja Siemens vakuuttaa täten että Radio LAN device tyyppinen laite on

Dutch Hierbij verklaart Siemens dat het toestel Radio LAN device in overeenstemming

restriction of the use of certain hazardous substances (RoHS) in electrical and electronic equipment.

essential requirements and other relevant provisions of Directive 1999/5/EC.

direktiivin 1999/5/EY oleellisten vaatimusten ja sitä koskevien direktiivin muiden ehtojen mukainen.

is met de essentiële eisen en de andere relevante bepalingen van richtlijn 1999/ 5/EG.

Bij deze verklaart Siemens dat deze Radio LAN device voldoet aan de essentiële eisen en aan de overige relevante bepalingen van Richtlijn 1999/5/ EC.

A31003-W1040-U101-1-7619, July 2006 DRAFT

22 HiPath Wireless Controller, Access Points and Convergence Software V4.0, C10/C100/C1000 User Guide

hwc_regulatory_information.fm

Regulatory information

AP2610 Internal Antenna AP, AP2620 External Antenna AP

French Par la présente Siemens déclare que l'appareil Radio LAN device est conforme

aux exigences essentielles et aux autres dispositions pertinentes de la directive 1999/5/CE.

Par la présente, Siemens déclare que ce Radio LAN device est conforme aux exigences essentielles et aux autres dispositions de la directive 1999/5/CE qui lui sont applicables.

Swedish Härmed intygar Siemens att denna Radio LAN device står I överensstämmelse

med de väsentliga egenskapskrav och övriga relevanta bestämmelser som framgår av direktiv 1999/5/EG.

Danish Undertegnede Siemens erklærer herved, at følgende udstyr Radio LAN device

overholder de væsentlige krav og øvrige relevante krav i direktiv 1999/5/EF.

German Hiermit erklärt Siemens, dass sich dieser/diese/dieses Radio LAN device in

Übereinstimmung mit den grundlegenden Anforderungen und den anderen relevanten Vorschriften der Richtlinie 1999/5/EG befindet". (BMWi)

Hiermit erklärt Siemens die Übereinstimmung des Gerätes Radio LAN device mit den grundlegenden Anforderungen und den anderen relevanten Festlegungen der Richtlinie 1999/5/EG. (Wien).

Greek ΜΕ ΤΗΝ ΠΑΡΟΥΣΑ Siemens ΔΗΛΩΝΕΙ ΟΤΙ Radio LAN device

ΣΥΜΜΟΡΦΩΝΕΤΑΙ ΠΡΟΣ ΤΙΣ ΟΥΣΙΩΔΕΙΣ ΑΠΑΙΤΗΣΕΙΣ ΚΑΙ ΤΙΣ ΛΟΙΠΕΣ ΣΧΕΤΙΚΕΣ ΔΙΑΤΑΞΕΙΣ ΤΗΣ ΟΔΗΓΙΑΣ 1999/5/ΕΚ.

Icelandic Siemens lysir her med yfir að thessi bunadur, Radio LAN device, uppfyllir allar

grunnkrofur, sem gerdar eru i R&TTE tilskipun ESB nr 1999/5/EC.

Italian Con la presente Siemens dichiara che questo Radio LAN device è conforme ai

requisiti essenziali ed alle altre disposizioni pertinenti stabilite dalla direttiva 1999/5/CE.

Spanish Por medio de la presente Siemens declara que el Radio LAN device cumple con

los requisitos esenciales y cualesquiera otras disposiciones aplicables o exigibles de la Directiva 1999/5/CE.

Portuguese Siemens declara que este Radio LAN device está conforme com os requisitos

essenciais e outras disposições da Directiva 1999/5/CE.

Malti Hawnhekk, Siemens, jiddikjara li dan Radio LAN device jikkonforma mal-htigijiet

essenzjali u ma provvedimenti ohrajn relevanti li hemm fid-Dirrettiva 1999/5/EC.

New Member States requirements of Declaration of Conformity

Estonian Käesolevaga kinnitab Siemens seadme Radio LAN device vastavust direktiivi

1999/5/EÜ põhinõuetele ja nimetatud direktiivist tulenevatele teistele asjakohastele sätetele.

A31003-W1040-U101-1-7619, July 2006 DRAFT HiPath Wireless Controller, Access Points and Convergence Software V4.0, C10/C100/C1000 User Guide

hwc_regulatory_information.fm

Regulatory information

AP2610 Internal Antenna AP, AP2620 External Antenna AP

Hungary Alulírott, Siemens nyilatkozom, hogy a Radio LAN device megfelel a vonatkozó

alapvetõ követelményeknek és az 1999/5/EC irányelv egyéb elõírásainak.

Slovak Siemens týmto vyhlasuje, _e Radio LAN device spåòa základné po_iadavky a

všetky príslušné ustanovenia Smernice 1999/5/ES.

Czech Siemens tímto prohlašuje, _e tento Radio LAN device je ve shodì se

základními po_adavky a dalšími pøíslušnými ustanoveními smìrnice 1999/5/ES."

Slovenian Šiuo Siemens deklaruoja, kad šis Radio LAN device atitinka esminius

reikalavimus ir kitas 1999/5/EB Direktyvos nuostatas.

Latvian Ar ðo Siemens deklarç, ka Radio LAN device atbilst Direktîvas 1999/5/EK

bûtiskajâm prasîbâm un citiem ar to saistîtajiem noteikumiem

Lithuanian Siemens deklaruoja, kad Radio LAN device atitinka 1999/5/EC Direktyvos

esminius reikalavimus ir kitas nuostatas".

Polish Niniejszym, Siemens, deklarujê, ¿e Radio LAN device spe³nia wymagania

zasadnicze oraz stosowne postanowienia zawarte Dyrektywie 1999/5/ EC.

European Conformance Standards

Safety

● 73/23/EEC Low Voltage Directive (LVD)

● CB Scheme, IEC 60950-1:2001, 1st Edition with all available National Differences

● Plenum Rated Enclosure

EMC (Emissions / Immunity)

● 89/336/EEC EMC Directive

● EN 55011/CISPR 11, Class B, Group 1 ISM

● EN 55022/CISPR 22, Class B

● EN 55024:1998 Class A, includes IEC/EN 61000-4-2,3,4,5,6,11

● EN 61000-3-2 and -3-3

● EN 60601-1-2 (EMC immunity for medical equipment)

● EN 50385 (EMF)

● EN/ETSI 301 489-1 & -17

A31003-W1040-U101-1-7619, July 2006 DRAFT

24 HiPath Wireless Controller, Access Points and Convergence Software V4.0, C10/C100/C1000 User Guide

AP2610 Internal Antenna AP, AP2620 External Antenna AP

Radio Transceiver

● R&TTE Directive 1999/5/EC

● ETSI/EN 300 328-2 2003-04 (2.4 GHz)

● ETSI/EN 301 893-1 2002-07 (5 GHz)

Other

● IEEE 802.11a (5 Ghz)

● IEEE 802.11b/g (2.4 GHz)

● IEEE 802.3af (PoE)

RoHS

● European Directive 2002/95/EC

hwc_regulatory_information.fm

Regulatory information

2.2.4 Conditions of Use in the European Community

The AP26XX wireless access points with Internal and External antennas are designed and intended to be used indoors. Some EU countries allow outdoor operation with limitations and restrictions, which are described in this section. It is the responsibility of the end user to insure operation in accordance with these rules, frequencies, and transmitter power output. The AP26XX must not be operated until proper regional software is downloaded.

The user or installer is responsible to ensure that he AP26XX is operated according

to channel limitations, indoor / outdoor restrictions, license requirements, and within power level limits for the current country of operation. A configuration utility has been provided with the HiPath Wireless Controller to allow the end user to check the configuration and make necessary configuration changes to ensure proper operation in accordance with the spectrum usage rules for compliance with the European R&TTE directive 1999/5/EC.

The AP26XX wireless access points with Internal and External antennas are designed to be operated only indoors within all countries of the European Community. Some countries require limited channels of operation for indoor use. These restrictions are described in this section.

The AP26XX is completely configured and managed by the HiPath Wireless

Controller connected to the network. Please follow the instructions in this software User Guide to properly configure the AP26XX.

A31003-W1040-U101-1-7619, July 2006 DRAFT HiPath Wireless Controller, Access Points and Convergence Software V4.0, C10/C100/C1000 User Guide

hwc_regulatory_information.fm

Regulatory information

AP2610 Internal Antenna AP, AP2620 External Antenna AP

● The AP2610 and AP2620 wireless access points require the end user or

installer to ensure that they have a valid license prior to operating the AP26XX. The license contains the region and the region exposes the country codes which allow for proper configuration in conformance with European National spectrum usage laws.

● There is a default group of settings that each AP26XX receives when it connects

to the controller. There is the ability to change these settings. The user or installer is responsible to ensure that each wireless AP is properly configured.

● The software within the controller will automatically limit the allowable channels

and output power determined by the current country code entered. Incorrectly entering the country of operation or identifying the proper antenna used, may result in illegal operation and may cause harmful interference to other systems.

● This device employs a radar detection feature required for European

Community operation in the 5 GHz band. This feature is automatically enabled when the country of operation is correctly configured for any European Community country. The presence of nearby radar operation may result in temporary interruption of operation of this device. The radar detection feature will automatically restart operation on a channel free of radar.

● The 5 GHz Turbo Mode feature is not enabled for use on the AP2610 and

AP2620 access points.

● The AutoChannelSelect/SmartSelect setting of the 5 GHz described in this user

guide must always remain enabled to ensure that automatic 5 GHz channel selection complies with European requirements.

● The 5150- 5350 MHz band, channels 36, 40, 44, 48, 52, 56, 60, or 64, are

restricted to indoor use only.

● The AP2620 with external antenna must be used only with the factory installed

antennas, which are certified by Siemens.

● The 2.4 GHz band, channels 1 - 13, may be used for indoor or outdoor use but

there may be some channel restrictions.

● In Italy, the end user must apply for a license from the national spectrum

authority to operate outdoors.

● In Belgium, outdoor operation is only permitted using the 2.46 - 2.4835 GHz

band: Channel 13.

● In France, outdoor operation is only permitted using the 2.4 - 2.454 GHz band:

Channels 1 - 7.

A31003-W1040-U101-1-7619, July 2006 DRAFT

26 HiPath Wireless Controller, Access Points and Convergence Software V4.0, C10/C100/C1000 User Guide

hwc_regulatory_information.fm

Regulatory information

AP2610 Internal Antenna AP, AP2620 External Antenna AP

2.2.5 Certifications of Other Countries

The AP2610 and AP2620 wireless access points have been certified for use in the countries listed in the table below. When the AP26XX is connected to the Siemens controller, the user is prompted to enter a country code. Once the correct country code is entered, the controller automatically sets up the AP26XX with the proper frequencies and power outputs for that country code.

It is the responsibility of the end user to enter the proper country code for the country

Other Country Specific Compliance Standards, Approvals and Declarations

Australia and New Zealand

the device will be operated within.

● AS/NZS 4288 (Radio via EU standards)

● AS/NZX 3260 (Safety via EU standards - ACMA)

● AS/NZS 3548 (Emissions via EU standards - ACMA)

● IEEE 802.11a/b/g

● IEEE 802.3af (PoE)

● EN 300 328-2:2003-04 (2.4 GHz)

● EN 301 893-1:2003-08 (5 GHz)

● EN 301 489-17:2002-08 (RLAN)

● IEC 60950-1:2001, 1st Edition with Australian Deviations

List of Supported 5 GHz Channels

Countries Supported Frequency

Supported Channel Numbers

Bands

Kuwait, Pakistan, Russia, Thailand,

5 GHz Operation Not Supported

None

U.A.E., Venezuela, Vietnam

Australia 5.15-5.35 GHz

5.725-5.825 GHz

36, 40, 44, 48, 52, 56, 60, 64, 149, 153, 157, 161

Table 1 List of Permitted 5 GHz Channels for Other Countries

A31003-W1040-U101-1-7619, July 2006 DRAFT HiPath Wireless Controller, Access Points and Convergence Software V4.0, C10/C100/C1000 User Guide

hwc_regulatory_information.fm

Regulatory information

AP2610 Internal Antenna AP, AP2620 External Antenna AP

Countries Supported Frequency

Supported Channel Numbers

Bands

Brazil 5.15-5.35 GHz

5.470-5.725 GHz

36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112, 116, 120, 124, 128, 132, 136, 140, 149, 153, 157, 161, 165

Chile, Hong Kong, India, New Zealand,

5.15-5.35 GHz

5.725-5.850 GHz

36, 40, 44, 48, 52, 56, 60, 64,149, 153, 157, 161, 165

Singapore Argentina, China,

5.725-5.850 GHz 149, 153, 157, 161, 165

Macau Japan, Mexico, Turkey 5.15-5.35 GHz 36, 40, 44, 48, 52, 56, 60, 64 Malaysia 5.25-5.35 GHz

52, 56, 60, 64, 149, 153, 157, 161, 165

5.725-5.850 GHz

S. Africa 5.15-5.35 GHz

5.470-5-725 GHz

36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112, 116, 120, 124, 128, 132, 136, 140

S. Korea 5.15-5.35 GHz

5.47-5.60 GHz

36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112, 116, 149, 153, 157, 161

5.725-5.825 GHz

Taiwan 5.25-5.35 GHz

5.470-5.725 GHz

5.725-5.825 GHz

56, 60, 64, 100, 104, 108, 112, 116, 120, 124, 128, 132, 136, 140,149, 153, 157, 161

Table 1 List of Permitted 5 GHz Channels for Other Countries

A31003-W1040-U101-1-7619, July 2006 DRAFT

28 HiPath Wireless Controller, Access Points and Convergence Software V4.0, C10/C100/C1000 User Guide

hwc_intro.fm

Overview of the Controller, Access Points and Convergence Software solution

Conventional wireless LANS

3 Overview of the Controller, Access Points and

Convergence Software solution

This chapter describes HiPath Controller, Access Points and Convergence Software concepts, including:

● Conventional wireless LANS

● Elements of the solution

● Controller, Access Points and Convergence Software and your network

● System Configuration Overview

The next generation of Siemens wireless networking devices provides a truly scalable WLAN solution. Siemens Wireless APs are fit access points controlled through a sophisticated network device, the HiPath Wireless Controller. This solution provides the security and manageability required by enterprises and service providers.

The Controller, Access Points and Convergence Software system is a highly scalable Wireless Local Area Network (WLAN) solution developed by Siemens. Based on a third generation WLAN topology, the Controller, Access Points and Convergence Software system makes wireless practical for service providers as well as medium and large-scale enterprises.

The Controller, Access Points and Convergence Software system provides a secure, highly scalable, cost-effective solution based on the IEEE 802.11 standard. The system is intended for enterprise networks operating on multiple floors in more than one building, and is ideal for public environments, such as airports and convention centers that require multiple access points.

This chapter provides an overview of the fundamental principles of the Controller, Access Points and Convergence Software system.

3.1 Conventional wireless LANS

Wireless communication between multiple computers requires that each computer is equipped with a receiver/transmitter—a WLAN Network Interface Card (NIC)—capable of exchanging digital information over a common radio frequency. This is called an ad hoc network configuration. An ad hoc network configuration allows wireless devices to communicate together. This setup is defined as an independent basic service set (IBSS).

An alternative to the ad hoc configuration is the use of an access point. This may be a dedicated hardware bridge or a computer running special software. Computers and other wireless devices communicate with each other through this access point. The 802.11 standard defines access point communications as devices that allow wireless devices to communicate with a distribution system. This setup is defined as a basic service set (BSS) or infrastructure network.

A31003-W1040-U101-1-7619, July 2006 DRAFT HiPath Wireless Controller, Access Points and Convergence Software V4.0, C10/C100/C1000 User Guide

hwc_intro.fm

Overview of the Controller, Access Points and Convergence Software solution

Elements of the solution

To allow the wireless devices to communicate with computers on a wired network, the access points must be connected to the wired network providing access to the networked computers. This topology is called bridging. With bridging, security and management scalability is often a concern.

Figure 1 Standard wireless network solution example

The wireless devices and the wired networks communicate with each other using standard networking protocols and addressing schemes. Most commonly, Internet Protocol (IP) addressing is used.

3.2 Elements of the solution

The Controller, Access Points and Convergence Software solution consists of two devices:

● HiPath Wireless Controller

● wireless APs

This architecture allows a single HiPath Wireless Controller to control many Wireless APs, making the administration and management of large networks much easier.

There can be several HiPath Wireless Controllers in the network, each with a set of registered Wireless APs. The HiPath Wireless Controllers can also act as backups to each other, providing stable network availability.

In addition to the HiPath Wireless Controllers and Wireless APs, the solution requires three other components, all of which are standard for enterprise and service provider networks:

● RADIUS Server (Remote Access Dial-In User Service) or other authentication server

● DHCP Server (Dynamic Host Configuration Protocol)

A31003-W1040-U101-1-7619, July 2006 DRAFT

30 HiPath Wireless Controller, Access Points and Convergence Software V4.0, C10/C100/C1000 User Guide

+ 270 hidden pages