view juniper wlan controllers 0

8/17/2019 VIEW Juniper WLAN Controllers 0

1/93

September 2012 | 1725-36194-001 Rev H

Polycom VIEW Certified Configuration Guide

Juniper Networks

Juniper WLAN Controllers WLC2, 8, 200, 216, 800, 880, 2800

with WLA372, 422, 432, 522, 522E, 532, 532E APs

(formerly Trapeze Networks MX2, 8, 200, 216, 800, 2800

with MP372, 422, 432, 522, 522E, 532)


2/93

2

Trademarks

©2012, Polycom, Inc. All rights reserved.

POLYCOM®, the Polycom "Triangles" logo and the names and marks associated with Polycom products aretrademarks and/or service marks of Polycom, Inc. and are registered and/or common law marks in the United Statesand various other countries. All other trademarks are property of their respective owners. No portion hereof may be

reproduced or transmitted in any form or by any means, for any purpose other than the recipient's personal use,without the express written permission of Polycom.

Disclaimer

While Polycom uses reasonable efforts to include accurate and up-to-date information in this document, Polycommakes no warranties or representations as to its accuracy. Polycom assumes no liability or responsibility for anytypographical or other errors or omissions in the content of this document.

Limitation of Liability

Polycom and/or its respective suppliers make no representations about the suitability of the information contained inthis document for any purpose. Information is provided "as is" without warranty of any kind and is subject to changewithout notice. The entire risk arising out of its use remains with the recipient. In no event shall Polycom and/or itsrespective suppliers be liable for any direct, consequential, incidental, special, punitive or other damages whatsoever(including without limitation, damages for loss of business profits, business interruption, or loss of businessinformation), even if Polycom has been advised of the possibility of such damages.

Customer Feedback

We are striving to improve the quality of our documentation and we appreciate your feedback. Email your opinionsand comments to [email protected].

Visit support.polycom.com for software downloads, product documents, product licenses, troubleshooting tips,service requests, and more.

http://support.polycom.com/?subject=Document%20Titlehttp://support.polycom.com/?subject=Document%20Titlehttp://support.polycom.com/?subject=Document%20Titlemailto:[email protected]:[email protected]:[email protected]:[email protected]://support.polycom.com/?subject=Document%20Title


3/93

3

Contents

Chapter 1: Overview ........................................................................................ 5

Certified Product Summary .................................................................................................................. 5

Service Information............................................................................................................................... 6

Known Limitations ................................................................................................................................ 6

Access Point Capacity and Positioning .................................................................................................. 6

Test Network Topology ......................................................................................................................... 7

Chapter 2: High-Level Concepts ........................................................................ 9

Radio Profile .......................................................................................................................................... 9

Service Profile ..................................................................................................................................... 10

Radio Profiles on an AP ....................................................................................................................... 13

Chapter 3: Configure Controller from Factory Defaults................................... 15

Configuring Communication through the Console Port ..................................................................... 15

Configuring Communication through the Web Server ....................................................................... 15

Upgrade Firmware using WebView .................................................................................................... 16

Reset to Factory Defaults using WebView .......................................................................................... 17

Chapter 4: Configure VLAN, Ports and Security .............................................. 19

Common Parameters .......................................................................................................................... 19WMM Parameters .............................................................................................................................. 20

SVP Parameters (for use with SpectraLink 8020/8030 only) .............................................................. 21

Chapter 5: Configure Radio Profile ................................................................. 23

Common Parameters .......................................................................................................................... 23

WMM Parameters .............................................................................................................................. 25

SVP Parameters (for use with SpectraLink 8020/8030 only) ............................................................. 26

Review Settings ................................................................................................................................... 27

Chapter 6: Configure Service Profile ............................................................... 29

WMM Parameters .............................................................................................................................. 30

SVP Parameters (for use with SpectraLink 8020/8030 only) ............................................................. 31

Open Parameters (No Security – Security is “None”) ........................................................................ 31

WEP Parameters ................................................................................................................................. 32

WPA-PSK Parameters .......................................................................................................................... 33


4/93

Polycom VIEW Certified Configuration Guide: Juniper Networks

4

WPA2-PSK Parameters ........................................................................................................................ 35

WPA2-Enterprise Parameters ............................................................................................................. 37

Review Settings ................................................................................................................................... 38

Chapter 7: Configure APs ............................................................................... 41

Review Settings ................................................................................................................................... 42

Chapter 8: Configure RADIUS Server Example (WPA2-Enterprise Only) ......... 45

Chapter 9: Configure QoS ............................................................................... 47

Chapter 10: Configure Subnet Roaming .......................................................... 49

Chapter 11: Monitoring .................................................................................. 51

QoS ...................................................................................................................................................... 51WPA2-Enterprise................................................................................................................................. 52

Radio Performance ............................................................................................................................. 53

Appendix ....................................................................................................... 57

Configuration Example #1: Minimal Configuration on a Single MX with WMM and SVP ................. 57

Configuration Example #2: SVP Configuration for Single MX ............................................................ 64

Configuration Example #3: WMM Configuration for Multiple MXs .................................................. 72

Configuration Example #4: SVP Configuration For Multiple MXs (Subnet Roaming) ........................ 77


5/93


6/93


6

Service Information

If you encounter difficulties or have questions regarding the configuration process, please contact

Juniper Networks at 1-888-314-5822.

Known Limitations

SpectraLink 8020/8030 handsets using the TDM protocol through a SpectraLink Telephony Gateway

(phone type 30 on the 8020/8030) can not use WPA2-Enterprise Security and Wi-Fi Standard QoS

settings.

• Heavy multicast, broadcast or push-to-talk (PTT) traffic may impair voice quality.

• Voice and data must be separated onto separate service set identifiers (SSIDs) (service profiles

within the Juniper) to obtain the best voice performance.

•

Ensure that the RSSI for handset clients as indicated at the AP does not exceed -30 dBm to avoidpotential radio issues.

• The SVP QoS mode is not recommended for use with WLA532, 532E model AP’s.

Note: RADIUS server configuration

This document does not cover the steps involved to configure a RADIUS server required for using

WPA2-Enterprise.

Access Point Capacity and Positioning

Please refer to the Polycom Deploying Enterprise-Grade Wi-Fi Telephony white paper, available at

http://www.polycom.com/products/voice/wireless_solutions/wifi_communications/handsets/spectralin

k_8020_wireless.html . This document covers the security, coverage, capacity and QoS considerations

necessary for ensuring excellent voice quality with enterprise Wi-Fi networks.

For more detailed information on wireless LAN layout, network infrastructure, QoS, security and

subnets, please see the Best Practices Guide to Network Design Considerations for SpectraLink Wireless

Telephones, available at http://support.polycom.com/PolycomService/support/us/support/voice/wi-

fi/index.html. This document identifies issues and solutions based on Polycom’s extensive experience in

nterprise-class Wi-Fi telephony. It provides recommendations for ensuring that a network environment

is adequately optimized for use with SpectraLink Wireless Telephones.

http://www.juniper.net/us/en/http://www.juniper.net/us/en/http://www.juniper.net/us/en/http://www.juniper.net/us/en/http://www.juniper.net/us/en/


7/93

Overview

7

Test Network Topology

Note: Your configuration may differ

This configuration is not applicable to all customer environments.


8/93


9/93

9

Chapter 2: High-Level Concepts

Juniper WLAN controller’s configuration has two profiles:

• Radio

• Service

Radio Profile

This is where parameters like DTIM interval and QoS mechanisms are customized. There can be only

one radio profile assigned to one of the two radios in an AP. However, as can be seen in the example

below there can be more than one service profile assigned to a radio profile. In this case the service

profiles common and wpa2 have been associated with the radio profile wmmps.

The output of the show command below provides an example of a radio profile configured for WMM-

Power Save QoS mode:

MX-200-AB48EE# show radio-profile

Options

QoS mode: wmm

WMM powersave: enabled

Weighted-fair-queuing: disabled

Rate-enforcement: disabledAuto tune: None

802.11

Beacon interval: 100 Max Tx lifetime: 2000

DTIM interval: 2 Max Rx lifetime: 2000

RTS threshold: 65535 Frag threshold: 2346

Long-preamble: disabled

11n

Channel width (11na): 40MHz

Auto tune

Tune channel range (11a): lower-bands

Tune power interval: 600

Tune channel interval: 3600 Power ramp interval: 60

Channel holddown: 900


10/93


10

RF-scanning

Mode: PASSIVE

Channel-scope: OPERATING

CTS-to-self: disabled

RFID: disabled

Other

Countermeasures: none

DFS channels: enabled

Client tx power constraint: none

WMM CAC Parameters:

Queue ACM Max % Police

Background NO 0 YES

BestEffort NO 0 YES

Video YES 0 YES

Voice YES 0 YES

Service profiles: s1

Snoop filters: none

Service Profile

The service profile is where attributes like the SSID name and security options are defined. A service

profile is never directly associated with a particular radio on an AP. A service profile is only active when

it is associated with a radio profile and the radio profile is associated with an AP.

The output of the show command below provides an example of a service profile with settings specific

to WMM-Power Save QoS:

MX-200-AB48EE# show serviceprofile s1

General attributes

SSID name: s1

SSID type: crypto

11n attributes

11n Mode (na): enabled

11n Mode (ng): disabled

Guard Interval: long

Frame aggregation mode: enabled

MSDU Max length: 4k

MPDU Max length: 64k

Options

Auth: Fallthru none

Mesh: None


11/93

High-Level Concepts

11

L2: None

802.11: Beacon, Idle-client-probing

Crypto

RSN-IE

Authentication: 802.1X

Encryption: RSN

Cipher: CCMP

SSID attributes

Vlan name: default

Qos profile: sip

WEP

Active-unicast-index: 1

Active-multicast-index: 1

Preset keys: None

Web Portal

Logout mode: disabled

Session timeout: 5

SODA

Enforce checks: enabled

Miscellaneous

CAC: None

CAC max-sessions: 14

CAC VoIP max-calls: 12

Short retry counter: 3

Long retry counter: 5

Max bandwidth: unlimited

User idle timeout: 180 s

Active call timeout: 120 s

Handshake timeout: no timeout

802.11 settings

11a

Beacon rate: 6

Multicast rate: 24

Mandatory rates: 6, 12, 24

Standard rates: 9, 18, 36, 48, 54

Disabled rates: None

11b

Beacon rate: 5.5

Multicast rate: 11

Mandatory rates: 5.5, 11

Standard rates: None


12/93


12

Disabled rates: 1, 2

11g

Beacon rate: 5.5

Multicast rate: 11


Standard rates: 6, 9, 12, 18, 24, 36, 48, 54


11na

Beacon rate: 6

Multicast rate: 24


Standard rates: 9, 18, 36, 48, 54, m0, m1, m2, m3, m4, m5, m6, m7, m8,

m9, m10, m11, m12, m13, m14, m15, m16, m17, m18,

m19,m20, m21, m22, m23


11ng

Beacon rate: 1

Multicast rate: 11


Standard rates: 9, 18, 36, 48, 54, m0, m1, m2, m3, m4, m5, m6, m7, m8,

m9, m10, m11, m12, m13, m14, m15, m16, m17, m18,

m19,m20, m21, m22, m23

Disabled rates: 1,2


13/93

High-Level Concepts

13

Radio Profiles on an AP

This summary shows two APs and the radio profiles associated with the two radios. Radio 1 is the

2.4GHz (802.11b/g/n) radio band and Radio 2 is the 5GHz (802.11a/n) radio band. In the configuration

below the view radio profile is associated with all of the A-Band and B/G-Band radios.

Purpose:

To view which radio profiles are configured on the APs, use the following show command:

Command:

show ap conf i g

Result:

AP AP Name Model Mode Radi o 1 prof i l e Radi o 2 prof i l e

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

1 AP01 MP- 522 vi ew vi ew



14/93


15/93

15

Chapter 3: Configure Controller from

Factory Defaults

Configuring Communication through the Console Port

1 Using a standard RS-232 cable, connect the WLC to the serial port of a terminal or PC.

2 Run a terminal emulation program (such as Putty or HyperTerminal) or use a VT-100 terminal with

the following configuration:

Bits per second: 9600

Data bits: 8

Parity: None

Stop bits: 1

Flow control: None

3 Press Enter three times to display the WLC login screen, and to get past the Username prompt

and the Password prompt. There are no default usernames or passwords.

4 Type enabl e to enter privileged mode. The default password is blank.

Configuring Communication through the Web Server

The Juniper Web interface is known as WebView. This interface provides rudimentary configuration and

monitoring, but many of the advanced configuration options need to be set through the command line

interface.

Below is the set of commands enabling WebView. Note that the embedded Web server uses HTTPS, so

the configuration of the crypto functions is required.

Purpose:

Enable Web server.

Command:

set i p ht t ps ser ver enabl e


16/93


16

Purpose

Generate keys for security. Assuming username of admin, which is the default. Answer prompts as

needed. Answer to Common Name prompt must be admin.cert

Command:

cr ypto gener at e key admi n 1024

Purpose:

Generate self-signed certificate.

Command:

cr ypt o gener at e sel f - si gned admi n

Note: WebView username and password

The username for WebView is "admin" and the password the enable password. The password for

the "admin" user will not work as the password for WebView.

Upgrade Firmware using WebView

Using WebView, click the Maintain tab and select Update System Software in the navigation pane on

the left (see below). The wizard will guide you through the upgrade process.


17/93

Configure Controller from Factory Defaults

17

Reset to Factory Defaults using WebView

Using WebView, click the Configure tab and select Quick Start in the navigation pane on the left (see

below). The wizard will guide you to enter a minimal set of starting parameters. The other parameters

will be set to their default values.


18/93


19/93

19

Chapter 4: Configure VLAN, Ports and

Security

Common Parameters

Purpose:

Set controller name.

Command:

set syst em name

Purpose:

Set controller IP address.

Command:

set syst emi p- addr ess

Purpose:

Set controller default gateway.

Command:

set i p r out e def aul t

Purpose:

Configure VLAN IP address.

Command:set i nt er f ace i p

Purpose:

Set vlan route.


20/93


20

Command:

set i p r out e

Purpose:

Configure VLAN on ports used for APs and connected to the LAN.

Command:

set vl an 1 por t

Purpose:

Enable Power-Over-Ethernet on ports used for APs.

Command:

set por t poe enabl e

Purpose:

Enable Telnet. This is optional, but allows configuration through the CLI without requiring a serial cable.

Command:

set i p t el net ser ver enabl e

WMM Parameters

No WMM specific VLAN or security settings required.


21/93

Configure VLAN, Ports and Security

21

SVP Parameters

(for use with SpectraLink 8020/8030 only)

Purpose:

Place all SVP traffic (protocol 119) traffic in the class-of-service (CoS) queue 6.

Command:

set secur i t y acl i p svp per mi t cos 6 119 0. 0. 0. 0 255. 255. 255. 255 0. 0. 0. 0

255. 255. 255. 255

Purpose:

(Optional) If data traffic is to be shared with voice traffic, it must be explicitly enabled.

Commands:

set secur i t y acl name svp permi t 0. 0. 0. 0 255. 255. 255. 255

commi t secur i t y acl svp

set secur i t y acl map svp vl an 1 out

set secur i t y acl map svp vl an 1 i n

Purpose:Disable Internet Group Management Protocol (IGMP) snooping on a designated VLAN. IGMP snooping

must be disabled only when running SpectraLink Radio Protocol (SRP), which is used with the

SpectraLink 8000 Telephony Gateway. SRP uses multicast packets to do an SRP Check-In. These packets

are not forwarded through the Mobility Exchange Switch when IGMP snooping is enabled. NOTE: SRP

does not support SpectraLink Wi-Fi Release 3.0 features, which means that neither Wi-Fi Standard QoS

nor WPA2-Enterprise may be used in these deployments.

Note: IGMP snooping

When a tunneled virtual LAN (VLAN) is configured over a Layer-3 network, IGMP snooping isturned on by default. IGMP snooping must be disabled each time the tunnel is established.

Command:

set i gmp di sabl e vl an


22/93


23/93

23

Chapter 5: Configure Radio Profile

The radio profile configuration is described below and divided between the two types of QoS supported

by the handsets. The handsets and an AP radio can only support one type of QoS mode (WMM-Power

Save or SVP) at one time. There is a section for configuring the AP radios common radio-profile to both

QoS modes and for each of the QoS modes.

The string should be substituted with the radio profile name desired. The example

configuration in the appendix uses vi ewfor the WMM-Power Save QoS mode radio profile and svp for

the SVP QoS mode radio profile.

Common Parameters

Purpose:

Setting the DTIM interval to 2.

Command:

set r adi o- pr of i l e dt i m- i nt er val 2

Purpose:

Prevent the AP from going off-channel to scan.

Commands:

set r adi o- pr of i l e r f - scanni ng channel - scope oper at i ng

set r adi o- pr of i l e r f - scanni ng mode passi ve

Purpose:

Disable auto tune power.

Command:set r adi o- pr of i l e aut o- t une power - conf i g di sabl e

Purpose:

Enable DFS (radar avoidance) channels


24/93


24

Command:

set r adi o- pr of i l e df s- channel s enabl e

Purpose:

Enable service-profiles (SSID’s) on a given radio. More than one service-profile may be assigned to a

radio profile

Command:

set r adi o- pr of i l e ser vi ce- pr of i l e

( t o r emove cl ear r adi o- pr of i l e ser vi ce- pr of i l e )

Purpose:

Set or clear paired channel width if desired for 5 GHz.

Command:

set r adi o- pr of i l e channel - wi dt h- na .

Note: 2.4 GHz and paired channels

Paired channels (40 Mhz) are not provided for 2.4 GHz radios.


25/93

Configure Radio Profile

25

WMM Parameters

Purpose:

Enable WMM-Power Save (UAPSD).

Command:

set r adi o- prof i l e wmm- powersave enabl e

Purpose:

Enable WMM QoS.

Command:

set r adi o- prof i l e qos- mode wmm

Purpose:

Enable Voice/Video admission control, disable policing, and configure max-utilization for each of the

WMM access category queues. This setting is required if the handset is configured forMandatory

admission control (recommended) and optional if the handset is configured for Optional admission

control. Enabling admission control for Voice/Video provides enterprise grade quality of service.

Admission control is disabled by default for all access categories.

Commands:

set r adi o- pr of i l e cac voi ce mode enabl e

set r adi o- pr of i l e cac vi deo mode enabl e

Purpose:

Disable policing for all access categories. The maximum utilization settings are set to recommended

values for each access category. Policing is enabled by default on all access categories.

Commands:

set r adi o- pr of i l e cac voi ce pol i ci ng di sabl eset r adi o- pr of i l e cac vi deo pol i ci ng di sabl e

set r adi o- pr of i l e cac best - ef f or t pol i ci ng di sabl e

set r adi o- pr of i l e cac backgr ound pol i ci ng di sabl e


26/93


26

Purpose:

Set the maximum utilization settings are set to recommended values for each access category.

Maximum utilization is disabled (set to 0) by default.

Commands:

For 2.4 GHz Radio:

8400 series with the codecs G722, G711M-law, or G711A-law codecs (not high definition audio):

set r adi o- pr of i l e cac voi ce max- ut i l i zat i on 40

8020/8030:


set r adi o- pr of i l e cac vi deo max- ut i l i zat i on 20

For 5 GHz Radio:

8400 series with the codecs G722, G711M-law, or G711A-law codecs (not high definition audio):


8020/8030:


For Both Radios:

set r adi o- pr of i l e cac best - ef f or t max- ut i l i zat i on 0

set r adi o- pr of i l e cac backgr ound max- ut i l i zat i on 0

SVP Parameters


Purpose:

Enable SVP QoS.

Command:

set r adi o- pr of i l e qos- mode svp


27/93

Configure Radio Profile

27

Review Settings

Purpose:

Review the radio profile settings. The results below are shown for a radio profile configured for WMM-

Power Save.

Command:

show r adi o- pr of i l e

Result

MX-200-AB48EE# show radio-profile view

Options

QoS mode: wmm

WMM powersave: enabledWeighted-fair-queuing: disabled

Rate-enforcement: disabled

Auto tune: None

802.11

Beacon interval: 100 Max Tx lifetime: 2000

DTIM interval: 2 Max Rx lifetime: 2000

RTS threshold: 65535 Frag threshold: 2346

Long-preamble: disabled

11n

Channel width (11na): 40MHz

Auto tune

Tune channel range (11a): lower-bands Tune power interval: 600

Tune channel interval: 3600 Power ramp interval: 60

Channel holddown: 900

RF-scanning

Mode: PASSIVE Channel-scope: OPERATINGCTS-to-self: disabled RFID: disabled

Other

Countermeasures: none

DFS channels: enabled

Client tx power constraint: none


28/93


28

WMM CAC Parameters:

Queue ACM Max % Police

Background NO 0 YES

BestEffort NO 0 YES

Video YES 0 YES

Voice YES 0 YES

Service profiles: s1

Snoop filters: none


29/93

29

Chapter 6: Configure Service Profile

Common Parameters

Purpose:

Set frame aggregation for 11n mode to allow both msdu and mpdu operation.

Command:

set ser vi ce- pr of i l e 11n f r ame- aggr egat i on al l

Purpose:

Allow short guard band interval.

Command:

set ser vi ce- pr of i l e 11n shor t - guar d- i nt er val enabl e

Purpose:

Set data rates.

Note: Minimum dBm readings

1.0 and 2.0 Mbps rates are disabled on 2.4 GHz to increase throughput and improve network

performance. This could lower the range of the AP’s in the network. For setting up the Data

Rates, please consult your facility’s RF site survey, designed for voice traffic, to determine if you

have sufficient coverage to support all data rates. SpectraLink Wireless Telephones require the

following minimum dBm reading to support the corresponding Mandatory data rate setting in the

access point.


30/93


30

802.11

Radio Standard

Minimum Available

Signal Strength (RSSI)

Maximum

"Mandatory" Data Rate

802.11b -63 dBm 5.5 Mb/s

-60 dBm 11 Mb/s

802.11g -63 dBm 6 Mb/s

-47 dBm 54 Mb/s

802.11a -60 dBm 6 Mb/s

-45 dBm 54 Mb/s

Commands:

set ser vi ce- pr of i l e t r ansmi t - r at es 11b mandat ory 5. 5, 11. 0di sabl ed 1. 0, 2. 0 5. 5, 11. 0 beacon- r at e 5. 5 mul t i cast - r at e 11. 0

set ser vi ce- pr of i l e t r ansmi t - r at es 11g mandat ory 5. 5, 11. 0

di sabl ed 1. 0, 2. 0 beacon- r at e 5. 5 mul t i cast - r at e 11. 0

set ser vi ce- pr of i l e t r ansmi t - r at es 11a mandat ory

6. 0, 12. 0, 24. 0 beacon- r at e 6. 0 mul t i cast - r at e 24. 0

set servi ce- pr of i l e t r ansmi t - r at es 11na mandatory

6. 0, 12. 0, 24. 0 beacon- r at e 6. 0 mul t i cast - r at e 24. 0

set ser vi ce- pr of i l e t r ansmi t - r at es 11ng mandatory 5. 5, 11. 0

di sabl ed 1. 0, 2. 0 beacon- r at e 1. 0 mul t i cast - r at e 11. 0

Purpose:

Enable Proxy-ARP. This eliminates delays in audio at the start of a call and may be necessary for a phone

in standby to ring when called.

Command:

set ser vi ce- pr of i l e pr oxy- ar p enabl e

WMM ParametersNo specific service profile parameter settings are necessary for the WMM QoS mode.


31/93

Configure Service Profile

31

SVP Parameters


Purpose:

Sets the number of short retires to 3

Command:

set ser vi ce- pr of i l e shor t - r et r y- count 3

Open Parameters

(No Security – Security is “None”)

Purpose:Configure SSID name.

Command:

set ser vi ce- prof i l e ssi d- name

Purpose:

Authentication set to open access.

Command:

set ser vi ce- pr of i l e aut h- f al l t hr u l ast - r esor t

set ser vi ce- pr of i l e ssi d- t ype cl ear

Purpose:

Associate the service profile with a VLAN

Command:

set ser vi ce- prof i l e at t r vl an- name


32/93


32

WEP Parameters

Note: WEP and WPA-PSK disable 11n

Setting an SSID in WEP or WPA-PSK security disables 11n packet elements and rates on the radio

to which the service profile is assigned.

Purpose:

Configure SSID name.

Command:


Purpose:


Command:


Purpose:

Authentication set to shared access.

Command:

set ser vi ce- pr of i l e shar ed- key- aut h enabl e

Purpose:

Set to 40-bit WEP security.

Command:

set servi ce- pr of i l e ci pher - wep40 enabl e

Purpose:

Set to 104-bit WEP security (called 128-bit in the phone).


33/93


33

Command:

set servi ce- pr of i l e ci pher - wep104 enabl e

Purpose:

Choose the key index and the key. Note: if a key index greater than 1 is used, the lower keys must be

filled with a value of the correct number of digits.

Command:

set servi ce- prof i l e wep key- i ndex 1 key

Purpose:

Associate the service profile with a VLAN

Command:

set ser vi ce- prof i l e at t r vl an- name

WPA-PSK Parameters

Note: WEP and WPA-PSK disable 11n

Setting an SSID in WEP or WPA-PSK security disables 11n packet elements and rates on the radio

to which the service profile is assigned.

Purpose:


Command:


Purpose:


Command:



34/93


34

Purpose:

Disable RSN-IE security.

Command:set ser vi ce- pr of i l e r sn- i e di sabl e

Purpose:

Set to WPA security.

Command:

set ser vi ce- pr of i l e wpa ci pher - t ki p enabl e

Purpose:

Enable WPA Security.

Command:

set ser vi ce- pr of i l e wpa- i e enabl e

Purpose:

Configure Pre-Shared Key passphrase.

Command:

set servi ce- prof i l e psk- phrase

Purpose:

Enable Pre-Shared Key Authentication.

Command:set servi ce- pr of i l e wpa aut h- psk enabl e

Purpose:

Disable dot1x Authentication.


35/93


35

Command:

set servi ce- pr of i l e wpa aut h- dot1x di sabl e

Purpose:

Disable 802.1X Authentication.

Command:

set ser vi ce- pr of i l e aut h- dot 1x di sabl e

Purpose:

Associate the service profile with a VLAN.

Command:set ser vi ce- prof i l e at t r vl an- name

WPA2-PSK Parameters

Purpose:


Command:


Purpose:


Command:


Purpose:

Enable WPA2-PSK Security cipher (AES-CCMP).

Command:

set servi ce- pr of i l e ci pher - ccmp enabl e


36/93


36

Purpose:

Enable WPA2 Security.

Command:set ser vi ce- pr of i l e r sn- i e enabl e

Purpose:

Configure PSK passphrase.

Command:

set servi ce- prof i l e psk- phrase

Purpose:

Enable Pre-Shared Key Authentication.

Command:

set ser vi ce- pr of i l e aut h- psk enabl e

Purpose:

Disable 802.1X Authentication.

Command:

set ser vi ce- pr of i l e aut h- dot 1x di sabl e

Purpose:

Associate the service profile with a VLAN.

Command:set ser vi ce- pr of i l e at t r vl an- name def aul t


37/93


37

WPA2-Enterprise Parameters

Purpose:

Set a timeout to use if something goes wrong during an enterprise authentication (recommended value

is 60 ms).

Command:

set dot 1x t i meout handshake 60

Purpose:

Configure the SSID name.

Command:


Purpose:

Enable WPA2-Enterprise (802.1X) Security.

Commands:

set servi ce- pr of i l e ci pher - ccmp enabl e

set ser vi ce- pr of i l e r sn- i e enabl e

set ser vi ce- pr of i l e at t r vl an- name def aul t


38/93


38

Review Settings

Purpose:

Review the service profile settings. The results below are shown for a radio profile configured for

WMM-Power Save and WPA2-Enterprise security.

Command:

show servi ce- pr of i l e

Result:

MX-200-AB48EE# show service-profile s1

General attributes

SSID name: s1

SSID type: crypto

11n attributes

11n Mode (na): enabled

11n Mode (ng): disabled

Guard Interval: short

Frame aggregation mode: all

MSDU Max length: 4k

MPDU Max length: 64k

Options

Auth: Fallthru none

Mesh: None

L2: Proxy-ARP

802.11: Beacon, Idle-client-probing

Crypto

RSN-IE

Authentication: 802.1X

Encryption: RSN

Cipher: CCMP

SSID attributes

Vlan name: default

Qos profile: sip

WEP

Active-unicast-index: 1

Active-multicast-index: 1

Preset keys: None

Web Portal

Logout mode: disabled

Session timeout: 5


39/93


39

SODA

Enforce checks: enabled

Miscellaneous

CAC: None

CAC max-sessions: 14

CAC VoIP max-calls: 12

Short retry counter: 3

Long retry counter: 5

Max bandwidth: unlimited

User idle timeout: 180 s

Active call timeout: 120 s

Handshake timeout: no timeout

802.11 settings

11a

Beacon rate: 6

Multicast rate: 24


Standard rates: 9, 18, 36, 48, 54


11b

Beacon rate: 5.5

Multicast rate: 11.0


Standard rates: None


11g

Beacon rate: 5.5

Multicast rate: 11


Standard rates: 6, 9, 12, 18, 24, 36, 48, 54


11na

Beacon rate: 6

Multicast rate: 24


Standard rates: 9, 18, 36, 48, 54, m0, m1, m2, m3, m4, m5, m6, m7, m8, m9, m10,

m11, m12, m13, m14, m15, m16, m17, m18, m19,m20, m21, m22,

m23


11ng

Beacon rate: 1

Multicast rate: 11


40/93


40

Mandatory rates: 1, 2, 5.5, 11

Standard rates: 6, 9, 12, 18, 24, 36, 48, 54, m0, m1, m2, m3, m4, m5, m6, m7, m8, m9,

m10, m11, m12, m13, m14, m15, m16, m17, m18, m19, m20, m21,

m22, m23

Disabled rates: 1,2


41/93

41

Chapter 7: Configure APs

Purpose:

Set AP model and port.

Command:

set ap por t model

Purpose:

Configure B-Band Radio (known as radio 1). In this example, the B-Radio is disabled.. The A-Band radio

is known as radio 2.

Command:

set ap r adi o 1 mode di sabl e

Purpose:

Disable load balancing between APs. Repeat for all APs and radios.

Command:

set ap r adi o l oad- bal anci ng di sabl e

Purpose:

Configure A-Band Radio (known as radio 2). In this example, the A-Band radio is enabled, set to Channel

161 at 15dBm. The radio profile associated with the radio will be one that was configured for SVP or

WMM-Power Save QoS.

Command:

set ap r adi o 2 channel 161 radi o- prof i l e mode enabl e

t x- power 15


42/93


42

Review Settings

Purpose:

Review AP configuration settings.

Command:

show ap conf i g

Result:

MX-200-AB48EE# show ap config 12

AP 12 (AP12)

Model: MP-522

Mode:

Bias: high

Options: upgrade-firmware, led-auto

Connection: network

Serial number: a28102000040

Fingerprint:

Communication timeout: 25

Location:

Contact:

Description:

Vlan-profile:

Tunnel affinity: 4

Radio 1 (802.11ng)

Mode: enabled Radio profile: view

Channel: 8 Load balancing: NO

Tx power: 5 Load balancing group:

Auto tune max power: default Force rebalance: NO

Antenna location: indoors Antenna type: INTERNAL

Service profiles:

s1

Snoop filters on radio: none

Snoop filters on radio profile: none

Radio 2 (802.11na)

Mode: disabled Radio profile: view

Channel: 44 Load balancing: NO

Tx power: 5 Load balancing group:

Auto tune max power: default Force rebalance: NO

Antenna location: indoors Antenna type: INTERNAL

Service profiles:

s1


43/93

Configure APs

43

Snoop filters on radio: none

Snoop filters on radio profile: none

Purpose:

Summary of all APs’ configuration settings. When the AP number is left out of the command a brief

summary is displayed, as shown below.

Command:

show ap conf i g

Result:

AP AP Name Model Mode Radi o 1 prof i l e Radi o 2 prof i l e

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -




44/93


45/93

45

Chapter 8: Configure RADIUS Server

Example

(WPA2-Enterprise Only)

Purpose:

Configure a RADIUS server to be used by the WLAN controller. Timeout, retransmit, and deadtime

parameters may be customized as desired. The values in the command example are valid, but other

values may also be used.

Command:

set r adi us server address t i meout 5 r et r ansmi t 3 deadt i me 0 key

Purpose:

Create a server group.

Command:

set ser ver gr oup member s

Purpose:

Associate server group with an SSID configured for WPA2-Enterprise security using a server group as an

external RADIUS server.

Command:

set aut hent i cat i on dot 1x ssi d ** pass- t hrough


46/93


47/93

47

Chapter 9: Configure QoS

In addition to QoS parameters present in the radio and service profiles, there are system-wide settings.

Only ingress (packets from the wire side of the switch) needs to be configured.

Purpose:

Set COS/DSCP Mappings for Voice packets. The specific values depend on how the call server is

configured. Common values for DSCP values are 46 and 48.

Command:

set qos dscp- t o- cos- map cos 6

Purpose:

Set COS/DSCP Mappings for Control packets. The specific values depend on how the call server is


Command:

set qos dscp- t o- cos- map cos 4

Purpose:

Set DSCP/DSCP Mappings for Voice packets. The specific values depend on how the call server is


Command:

set qos cos- t o- dscp- map 6 dscp

Purpose:

Set DSCP/COS Mappings for Control packets. The specific values depend on how the call server is


Command:

set qos cos- t o- dscp- map 4 dscp


48/93


48

Purpose:

Enable SIP Aware so that all SIP traffic will be prioritized

Commands:set qos- pr of i l e cos 0

set qos- pr of i l e t r af f i c- cl ass voi p- dat a cos 6

Command to map to service profile:

set ser vi ce- pr of i l e at t r qos- pr of i l e


49/93

49

Chapter 10: Configure Subnet Roaming

If more than one MX switch is used, then subnet roaming needs to be configured.

To set up subnet roaming between two switches, a mobility domain must be configured on both

switches. Choose one of the switches to be the “seed MX switch.”

Note: IP addressing for mobility domain configuration

The IP addresses used in mobility domain configuration must use the system IP address of each

switch.

The following commands are performed on the “seed MX switch”

Purpose:

Configure the “seed MX switch” for a domain member.

Commands:


set mobi l i t y- domai n mode seed domai n- name

set mobi l i t y- domai n member

The following commands are performed on the other (member) MX switch:

Purpose:

Configure the “member MX switch” for a seed MX switch.

Commands:


set mobi l i t y- domai n mode member seed- i p

Purpose:

Disable IGMP snooping temporarily on the MX that does NOT have the VLAN statically configured.

Command:

set i gmp di sabl e vl an


50/93


50

Purpose:

Clear an existing mobility domain before defining a new one.

Command:

cl ear mobi l i t y- domai n

Purpose:

Check the mobility domain.

Command:

show mobi l i t y- domai n

Response

Mobi l i t y Domai n name: def aul t

Member St at e

1. 1. 1. 1 STATE_UP SEED

1. 1. 3. 1 STATE_UP MEMBER


51/93

51

Chapter 11: Monitoring

QoS

Purpose:

Monitor which CoS queue traffic is being sent. Most of the traffic should be in the voice queue. If there

is no traffic in the voice queue when voice traffic is present, then the DSCP mapping isn’t working

properly. This could be a result of missing DSCP values in the packets or a misconfigured WLAN

controller.

Command:

show ap qos- st ats

Response

CoS Queue Rx Rx Tx Tx Tx Tx Tx Tx

kb/ s % kb/ s % %Req %Max Packet s Dr opped

=====================================================================

1, 2 Backgr ound


52/93


52

WPA2-Enterprise

Purpose:

View clients authenticated with the WLAN controller APs. The response below shows two clients

authenticated with WPA2-Enterprise and four with no WPA2-Enterprise-based authentication and nocipher for encrypting data.

Command:

show dot1x cl i ent s

ResponseMAC Addr ess St ate Vl an I dent i t y ci pher

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

00: 90: 7a: 06: e8: 9c Authent i cated def aul t eapuser CCMP ( RSN)

00: 90: 7a: 06: e7: ad Authent i cated def aul t eapuser CCMP ( RSN)

00: 90: 7a: 07: 95: 8a Aut hent i cat ed def aul t l ast - r esor t NO- CI PHER

00: 90: 7a: 05: 42: f b Aut hent i cat ed def aul t l ast - r esort NO- CI PHER

00: 90: 7a: 05: 42: eb Aut hent i cat ed def aul t l ast - r esor t NO- CI PHER

00: 90: 7a: 07: 11: c1 Aut hent i cat ed def aul t l ast - r esor t NO- CI PHER


53/93

Monitoring

53

Radio Performance

Purpose:

View counters on an AP and radio basis to inspect radio and other 802.11-related performance

counters.

Command:

show ap count er s 16

Responseshow ap count er s 16

AP: 16 r adi o: 1

=================================

Last packet t r ansf er r ate:

Tx packet s count : 0 Rx packet s count : 0

Cl i ent s i n power save mode: 0 Mul t i packets drop: 0Last packet Rx si gnal st r engt h: Mul t i byt es drop: 0

Last packet si gnal noi se r at i o: 0 User sessi ons: 0

TKI P packet s t r ansf er count : 0 MI C er r or count : 0

TKI P packet s r epl ays: 0 TKI P decr ypt er r or s: 0

CCMP packet s decr ypt er r or s: 0 CCMP packet s r epl ays: 0

CCMP packets t r ansf er count : 0 Radi o r eset s: 0

Radi o r ecei ve physi cal er r or s: 0 Tr ansmi t r et r i es: 0

Radi o adj ust ed Tx power : 0 Noi se f l oor : 0

802. 3 Tx packet s count : 0 802. 3 Rx packet s count : 0

No r ecei ve descr i pt or: 0 I nval i d Rat es 0


54/93


54

TxUni cast TxMul t i cast Undcr ypt

Pkt s Byt es Pkt s Byt es RxPkt s RxByt es Pkt s Byt es PhyEr r

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

1. 0: 0 0 0 0 0 0 0 0 0

2. 0: 0 0 0 0 0 0 0 0 0

5. 5: 0 0 0 0 0 0 0 0 0

6. 0: 0 0 0 0 0 0 0 0 09. 0: 0 0 0 0 0 0 0 0 0

11. 0: 0 0 0 0 0 0 0 0 0

12. 0: 0 0 0 0 0 0 0 0 0

18. 0: 0 0 0 0 0 0 0 0 0

24. 0: 0 0 0 0 0 0 0 0 0

36. 0: 0 0 0 0 0 0 0 0 0

48. 0: 0 0 0 0 0 0 0 0 0

54. 0: 0 0 0 0 0 0 0 0 0

m0: 0 0 0 0 0 0 0 0 0

m1: 0 0 0 0 0 0 0 0 0

m2: 0 0 0 0 0 0 0 0 0

m3: 0 0 0 0 0 0 0 0 0

m4: 0 0 0 0 0 0 0 0 0

m5: 0 0 0 0 0 0 0 0 0

m6: 0 0 0 0 0 0 0 0 0

m7: 0 0 0 0 0 0 0 0 0

m8: 0 0 0 0 0 0 0 0 0

m9: 0 0 0 0 0 0 0 0 0

m10: 0 0 0 0 0 0 0 0 0

m11: 0 0 0 0 0 0 0 0 0

m12: 0 0 0 0 0 0 0 0 0

m13: 0 0 0 0 0 0 0 0 0

m14: 0 0 0 0 0 0 0 0 0m15: 0 0 0 0 0 0 0 0 0

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

TOTL: 0 0 0 0 0 0 0 0 0


55/93

Monitoring

55

AP: 16 r adi o: 2

=================================

Last packet t r ansf er r at e: 54

Tx packet s count : 429034 Rx packet s count : 70280

Cl i ent s i n power save mode: 2 Mul t i packets drop: 0

Last packet Rx si gnal st r engt h: - 27 Mul t i bytes dr op: 0

Last packet si gnal noi se r at i o: 68 User sessi ons: 2 TKI P packet s t r ansf er count : 0 MI C er r or count : 0

TKI P packet s r epl ays: 0 TKI P decr ypt er r or s: 0

CCMP packet s decr ypt er r or s: 0 CCMP packet s r epl ays: 0

CCMP packets t r ansf er count : 76 Radi o r eset s: 0

Radi o r ecei ve physi cal er r or s: 0 Tr ansmi t r et r i es: 3328

Radi o adj ust ed Tx power : 11 Noi se f l oor : - 96

802. 3 Tx packet s count : 0 802. 3 Rx packet s count : 0

No r ecei ve descr i pt or: 0 I nval i d Rat es 0


56/93


56

TxUni cast TxMul t i cast Undcr ypt

Pkts Byt es Pkts Byt es RxPkt s RxByt es Pkt s Byt es PhyEr r

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

6. 0: 11314 2660308 288678 77221365 0 0 0 0 17982

9. 0: 1 236 0 0 0 0 0 0 0

12. 0: 173 42410 2787 360393 0 0 0 0 4

18. 0: 186 42606 2315 296529 0 0 0 0 824. 0: 170 33708 1435 189818 1289 134889 0 0 122

36. 0: 170 27604 2687 344545 377 66766 0 0 17

48. 0: 1476 294852 3058 389195 389 67417 0 0 5

54. 0: 89123 16205320 24641 3207296 68225 14064722 0 0 161

m0: 0 0 0 0 0 0 0 0 8

m1: 0 0 0 0 0 0 0 0 0

m2: 0 0 0 0 0 0 0 0 0

m3: 0 0 0 0 0 0 0 0 0

m4: 0 0 0 0 0 0 0 0 0

m5: 0 0 0 0 0 0 0 0 0

m6: 0 0 0 0 0 0 0 0 0

m7: 0 0 0 0 0 0 0 0 0

m8: 0 0 0 0 0 0 0 0 0

m9: 0 0 0 0 0 0 0 0 0

m10: 0 0 0 0 0 0 0 0 1

m11: 0 0 0 0 0 0 0 0 0

m12: 0 0 0 0 0 0 0 0 0

m13: 0 0 0 0 0 0 0 0 0

m14: 0 0 0 0 0 0 0 0 0

m15: 0 0 0 0 0 0 0 0 0

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

TOTL: 102613 19307044 325601 82009141 70280 14333794 0 0 18308


57/93

57

Appendix

Configuration Example #1:Minimal Configuration on a Single MX with WMM and

SVP

Use the command show configuration to display all non-default configuration parameters, as shown

below. To include the default parameters in this output, use the commandshow configuration all.

This configuration contains radio profiles for both QoS methods supported (WMM and SVP); however,

recall that only one method can be used on any one radio at a time. This configuration shows only

WMM QoS being used on APs "4" and "5" on the 2.4GHz radio (radio "1") and the 5GHz radio (radio

"2").

# Conf i gurat i on nvgen' d at 2011- 2- 25 14: 09: 26

# I mage 7. 3. 4. 4. 0

# Model MX- 216

# Last change occur r ed at 2011- 2- 25 13: 43: 25

set i p r out e def aul t 172. 29. 104. 1 1

set i p r out e 172. 29. 104. 0 255. 255. 255. 0 172. 29. 104. 1 1

set dot1x t i meout handshake 60

set syst em name Syst emTest Tr apeze

set syst em i p- addr ess 172. 29. 104. 150

set syst em l ocat i on Bat t er y

set syst emcountr ycode US

set t i mezone mountai n - 8 0

set qos- pr of i l e si p cos 0

set qos- pr of i l e s i p t r af f i c-cl ass voi p- dat a cos 6

set ser vi ce- pr of i l e 1X ssi d- name 1X

set ser vi ce- pr of i l e 1X shor t - r et r y- count 3

set ser vi ce- pr of i l e 1X pr oxy- ar p enabl e

set ser vi ce- pr of i l e 1X ci pher - ccmp enabl e

set ser vi ce- pr of i l e 1X r sn- i e enabl e

set ser vi ce- pr of i l e 1X t r ansmi t - r at es 11g mandat or y 5. 5, 11. 0 di sabl ed

1. 0, 2. 0 beacon- r at e 5. 5 mul t i cast - r at e 11. 0

set ser vi ce- pr of i l e 1X t r ansmi t - r at es 11na mandat ory 6. 0, 12. 0, 24. 0 beacon-

r at e 6. 0 mul t i cast - r at e 24. 0


58/93


58

set ser vi ce- pr of i l e 1X t r ansmi t - r at es 11ng mandat or y 5. 5, 11. 0 di sabl ed


set ser vi ce- pr of i l e 1X at t r vl an- name def aul t

set servi ce- prof i l e OPEN ssi d- name OPEN

set ser vi ce- pr of i l e OPEN shor t - r et r y- count 3

set ser vi ce- pr of i l e OPEN ssi d- t ype cl ear

set ser vi ce- pr of i l e OPEN pr oxy- ar p enabl e

set ser vi ce- pr of i l e OPEN aut h- f al l t hr u l ast - r esor t

set ser vi ce- pr of i l e OPEN aut h- dot1x di sabl e

set ser vi ce- pr of i l e OPEN t r ansmi t - r at es 11g mandat ory 5. 5, 11. 0 di sabl ed


set ser vi ce- pr of i l e OPEN t r ansmi t - r at es 11na mandat ory 6. 0, 12. 0, 24. 0

beacon- r at e 6. 0 mul t i cast - r at e 24. 0

set ser vi ce- pr of i l e OPEN t r ansmi t - r at es 11ng mandat ory 5. 5, 11. 0 di sabl ed


set ser vi ce- pr of i l e OPEN at t r vl an- name def aul tset ser vi ce- prof i l e WEPO128 ss i d- name WEPO128

set ser vi ce- pr of i l e WEP0128 shor t - r et r y- count 3

set servi ce- pr of i l e WEPO128 pr oxy- ar p enabl e

set servi ce- pr of i l e WEPO128 aut h- f al l t hr u l ast - r esor t

set servi ce- prof i l e WEPO128 wep key- i ndex 1 key encr ypt ed

12485744465a5e577e7a767b676470405347515202080a00005b55


12485744465a5e577e7a767b676470405347515202080a00005b55


1446405858517c7c7c7163647040534355560e000802065d574d40set servi ce- pr of i l e WEPO128 wep act i ve- uni cast - i ndex 3

set ser vi ce- pr of i l e WEPO128 wep act i ve- mul t i cast - i ndex 3

set servi ce- prof i l e WEPO128 ci pher - wep104 enabl e

set servi ce- pr of i l e WEPO128 aut h- dot1x di sabl e

set servi ce- pr of i l e WEP0128 t r ansmi t - r at es 11g mandatory 5. 5, 11. 0 di sabl ed


set servi ce- pr of i l e WEP0128 t r ansmi t - r at es 11na mandat ory 6. 0, 12. 0, 24. 0


set servi ce- pr of i l e WEP0128 t r ansmi t - r at es 11ng mandat ory 5. 5, 11. 0 di sabl ed

1. 0, 2. 0 beacon- r at e 5. 5 mul t i cast - r at e 11. 0set ser vi ce- pr of i l e WEPO128 at t r vl an- name def aul t

set ser vi ce- prof i l e WEPO40 ss i d- name WEPO40

set ser vi ce- pr of i l e WEPO40 shor t - r et r y- count 3

set servi ce- pr of i l e WEPO40 pr oxy- ar p enabl e

set ser vi ce- pr of i l e WEPO40 aut h- f al l t hr u l ast - r esor t


59/93

Appendix

59


014254570f 5e505879151e

set servi ce- prof i l e WEPO40 ci pher- wep40 enabl e

set ser vi ce- pr of i l e WEPO40 aut h- dot1x di sabl e

set servi ce- pr of i l e WEP040 t r ansmi t - r at es 11g mandat ory 5. 5, 11. 0 di sabl ed

1. 0, 2. 0 beacon- r at e 5. 5 mul t i cast - r at e 11. 0set servi ce- pr of i l e WEP040 t r ansmi t - r at es 11na mandatory 6. 0, 12. 0, 24. 0


set servi ce- pr of i l e WEP040 t r ansmi t - r at es 11ng mandatory 5. 5, 11. 0 di sabl ed


set ser vi ce- pr of i l e WEPO40 at t r vl an- name def aul t

set ser vi ce- prof i l e WEPS128 ss i d- name WEPS128

set ser vi ce- pr of i l e WEPS128 short - r et r y- count 3

set ser vi ce- pr of i l e WEPS128 aut h- f al l t hr u l ast - r esor t

set servi ce- pr of i l e WEPS128 wep key- i ndex 1 key encr ypt ed

091d1c5a4d5041455355547b79777c6663754b5e465253050d0d05set servi ce- pr of i l e WEPS128 wep key- i ndex 2 key encr ypt ed

075e731f 1a5c4f 524f 4b5b5d56797f 717e646d7b4356445055030f


1446405858517c7c7c7163647040534355560e000802065d574d40


014254570f 5e505879151e584b5643475d5b5c737b757a60617745

set ser vi ce- pr of i l e WEPS128 wep act i ve- uni cast - i ndex 4

set ser vi ce- pr of i l e WEPS128 wep act i ve- mul t i cast - i ndex 4

set servi ce- pr of i l e WEPS128 ci pher - wep104 enabl e

set servi ce- pr of i l e WEPS128 shar ed- key- aut h enabl eset ser vi ce- pr of i l e WEPS128 aut h- dot1x di sabl e

set servi ce- pr of i l e WEPS128 t r ansmi t - r at es 11g mandat ory 5. 5, 11. 0 di sabl ed


set servi ce- pr of i l e WEPS128 t r ansmi t - r at es 11na mandat ory 6. 0, 12. 0, 24. 0


set servi ce- pr of i l e WEPS128 t r ansmi t - r at es 11ng mandat ory 5. 5, 11. 0 di sabl ed


set ser vi ce- pr of i l e WEPS128 at t r vl an- name def aul t

set ser vi ce- prof i l e WEPS40 ss i d- name WEPS40

set ser vi ce- pr of i l e WEPS40 shor t - r et r y- count 3

set servi ce- pr of i l e WEPS40 pr oxy- ar p enabl e

set ser vi ce- pr of i l e WEPS40 aut h- f al l t hr u l ast - r esor t

set servi ce- prof i l e WEPS40 wep key- i ndex 1 key encr ypt ed

06575d72181b5f 4e5d4e42

set servi ce- prof i l e WEPS40 wep key- i ndex 2 key encr ypt ed

101f 5b4a5142445c545d7a

set ser vi ce- pr of i l e WEPS40 wep act i ve- uni cast - i ndex 2


60/93


60

set ser vi ce- pr of i l e WEPS40 wep act i ve- mul t i cast - i ndex 2

set servi ce- prof i l e WEPS40 ci pher- wep40 enabl e

set servi ce- pr of i l e WEPS40 shar ed- key- aut h enabl e

set ser vi ce- pr of i l e WEPS40 aut h- dot 1x di sabl e

set servi ce- pr of i l e WEPS40 t r ansmi t - r at es 11g mandat ory 5. 5, 11. 0 di sabl ed


set servi ce- pr of i l e WEPS40 t r ansmi t - r at es 11na mandatory 6. 0, 12. 0, 24. 0


set servi ce- pr of i l e WEPS40 t r ansmi t - r at es 11ng mandatory 5. 5, 11. 0 di sabl ed


set servi ce- pr of i l e WEPS40 11n f r ame- aggr egat i on di sabl e

set ser vi ce- pr of i l e WEPS40 at t r vl an- name def aul t

set servi ce- prof i l e WMM ssi d- name WMM

set ser vi ce- pr of i l e WEPS40 shor t - r et r y- count 3

set ser vi ce- pr of i l e WMM pr oxy- ar p enabl e

set servi ce- pr of i l e WMM ci pher- ccmp enabl e

set ser vi ce- pr of i l e WMM wpa- i e enabl e

set ser vi ce- pr of i l e WMM r sn- i e enabl e

set ser vi ce- pr of i l e WMM t r ansmi t - r at es 11g mandat or y 5. 5, 11. 0 di sabl ed


set servi ce- pr of i l e WMM t r ansmi t - r at es 11na mandat ory 6. 0, 12. 0, 24. 0 beacon-


set ser vi ce- pr of i l e WMM t r ansmi t - r at es 11ng mandat ory 5. 5, 11. 0 di sabl ed


set ser vi ce- pr of i l e WMM at t r vl an- name def aul t

set servi ce- prof i l e WPA ssi d- name WPA

set ser vi ce- pr of i l e WPA shor t - r et r y- count 3

set ser vi ce- pr of i l e WPA pr oxy- ar p enabl e

set ser vi ce- pr of i l e WPA aut h- f al l t hr u l ast - r esor t

set ser vi ce- pr of i l e WPA ci pher - t ki p enabl e

set ser vi ce- pr of i l e WPA wpa- i e enabl e

set ser vi ce- pr of i l e WPA t r ansmi t - r at es 11g mandat ory 5. 5, 11. 0 di sabl ed


set servi ce- pr of i l e WPA t r ansmi t - r at es 11na mandat ory 6. 0, 12. 0, 24. 0 beacon-


set ser vi ce- pr of i l e WPA t r ansmi t - r at es 11ng mandat ory 5. 5, 11. 0 di sabl ed1. 0, 2. 0 beacon- r at e 5. 5 mul t i cast - r at e 11. 0

set ser vi ce- pr of i l e WPA psk- encr ypt ed

091c4f 5d4a5c1644085a557a737d2c3165744a544e005803010e060256014e130d0e5100535

7025f 5d07535a525315

5f 000209055d78141c5c41064247520a507d

set ser vi ce- pr of i l e WPA aut h- psk enabl e


61/93

Appendix

61

set ser vi ce- pr of i l e WPA aut h- dot1x di sabl e

set ser vi ce- pr of i l e WPA at t r vl an- name def aul t

set ser vi ce- prof i l e WPA2 ssi d- name WPA2

set ser vi ce- pr of i l e WPA2 shor t - r et r y- count 3

set ser vi ce- pr of i l e WPA2 pr oxy- ar p enabl e

set ser vi ce- pr of i l e WPA2 aut h- f al l t hr u l ast - r esor t

set servi ce- pr of i l e WPA2 ci pher - ccmp enabl e

set ser vi ce- pr of i l e WPA2 r sn- i e enabl e

set ser vi ce- pr of i l e WPA2 t r ansmi t - r ates 11g mandat ory 5. 5, 11. 0 di sabl ed


set ser vi ce- pr of i l e WPA2 t r ansmi t - r ates 11na mandat ory 6. 0, 12. 0, 24. 0


set servi ce- pr of i l e WPA2 t r ansmi t - r ates 11ng mandat ory 5. 5, 11. 0 di sabl ed


set servi ce- pr of i l e WPA2 psk- encr ypt ed

045f 5a575b7319165f 4c004e135c0d017f 28212a67367a4253415154520b0f 0a0508521e46080155040a57055e5a0

2515d0000425254085250597815485c1f 0041

set r adi us server ci scoacs addr ess 172. 29. 65. 9 encr ypt ed- key

121d001b04021e05

set server gr oup ci scoacsgrp members ci scoacs

set enabl epass passwor d b6b706525e1814394621eeb2a1c4d5803f cf

set aut hent i cat i on mac ssi d any * l ocal

set aut hent i cat i on dot1x ssi d WMM ** pass- t hr ough ci scoacsgr p

set aut hent i cat i on dot1x ssi d 1X ** pass- t hr ough ci scoacsgr p

set user admi n passwor d encr ypt ed 11081d081e1c

set user eapuser passwor d encr ypted 011607144b1c

set r adi o- pr of i l e SVP

set r adi o- pr of i l e SVP dt i m- i nt er val 2

set r adi o- pr of i l e SVP r t s- t hr eshol d 2347

set r adi o- pr of i l e SVP aut o- t une channel - conf i g di sabl e

set r adi o- pr of i l e SVP r f - scanni ng mode passi ve

set r adi o- pr of i l e SVP r f - scanni ng channel - scope oper at i ng

set r adi o- pr of i l e SVP qos- mode svp

set r adi o- pr of i l e SVP ser vi ce- pr of i l e OPEN

set r adi o- pr of i l e SVP ser vi ce- pr of i l e WPA2

set r adi o- pr of i l e SVP ser vi ce- pr of i l e WEPO40

set r adi o- pr of i l e SVP ser vi ce- pr of i l e 1X

set r adi o- pr of i l e SVP ser vi ce- pr of i l e WEPO128

set r adi o- pr of i l e SVP ser vi ce- pr of i l e WEPS40

set r adi o- pr of i l e SVP ser vi ce- pr of i l e WEPS128


62/93


62

set r adi o- pr of i l e SVP ser vi ce- pr of i l e WPA

set r adi o- prof i l e WMMa8400

set r adi o- pr of i l e WMMa8400 dt i m- i nt erval 2

set r adi o- pr of i l e WMMa8400 r f - scanni ng mode passi ve

set r adi o- pr of i l e WMMa8400 r f - scanni ng channel - scope oper at i ng

set r adi o- prof i l e WMMa8400 wmm- power save enabl e

set r adi o- prof i l e WMMa8400 cac vi deo mode enabl e

set r adi o- prof i l e WMMa8400 cac voi ce mode enabl e

set r adi o- pr of i l e WMMa8400 cac vi deo max- ut i l i zat i on 20

set r adi o- pr of i l e WMMa8400 cac voi ce max- ut i l i zat i on 50

set r adi o- pr of i l e WMMa8400 cac backgr ound pol i ci ng di sabl e

set r adi o- pr of i l e WMMa8400 cac best - ef f or t pol i ci ng di sabl e

set r adi o- pr of i l e WMMa8400 cac vi deo pol i ci ng di sabl e

set r adi o- pr of i l e WMMa8400 cac voi ce pol i ci ng di sabl e

set r adi o- pr of i l e WMMa8400 ser vi ce- pr of i l e OPENset r adi o- pr of i l e WMMa8400 ser vi ce- prof i l e WEPO40

set r adi o- pr of i l e WMMa8400 servi ce- pr of i l e 1X

set r adi o- pr of i l e WMMa8400 ser vi ce- prof i l e WEPS40

set r adi o- pr of i l e WMMa8400 ser vi ce- prof i l e WEPO128

set r adi o- pr of i l e WMMa8400 ser vi ce- prof i l e WEPS128

set r adi o- pr of i l e WMMa8400 ser vi ce- pr of i l e WPA

set r adi o- pr of i l e WMMa8400 ser vi ce- pr of i l e WPA2

set r adi o- prof i l e WMMb8400

set r adi o- pr of i l e WMMb8400 dt i m- i nt er val 2

set r adi o- pr of i l e WMMb8400 r f - scanni ng mode passi ve

set r adi o- pr of i l e WMMb8400 r f - scanni ng channel - scope operat i ng

set r adi o- prof i l e WMMb8400 wmm- power save enabl e

set r adi o- prof i l e WMMb8400 cac vi deo mode enabl e

set r adi o- prof i l e WMMb8400 cac voi ce mode enabl e

set r adi o- pr of i l e WMMb8400 cac vi deo max- ut i l i zat i on 20

set r adi o- pr of i l e WMMb8400 cac voi ce max- ut i l i zat i on 40

set r adi o- pr of i l e WMMb8400 cac backgr ound pol i ci ng di sabl e

set r adi o- pr of i l e WMMb8400 cac best - ef f or t pol i ci ng di sabl e

set r adi o- pr of i l e WMMb8400 cac vi deo pol i ci ng di sabl eset r adi o- pr of i l e WMMb8400 cac voi ce pol i ci ng di sabl e

set r adi o- pr of i l e WMMb8400 ser vi ce- pr of i l e OPEN

set r adi o- pr of i l e WMMb8400 ser vi ce- prof i l e WEPO40

set r adi o- pr of i l e WMMb8400 servi ce- pr of i l e 1X

set r adi o- pr of i l e WMMb8400 ser vi ce- prof i l e WEPS40

set r adi o- pr of i l e WMMb8400 ser vi ce- prof i l e WEPO128


63/93

Appendix

63

set r adi o- pr of i l e WMMb8400 ser vi ce- prof i l e WEPS128

set r adi o- pr of i l e WMMb8400 ser vi ce- pr of i l e WPA

set r adi o- pr of i l e WMMb8400 ser vi ce- pr of i l e WPA2

set ap 4 por t 4 model MP- 372

set ap 4 radi o 1 r adi o- pr of i l e WMM mode di sabl e


set ap 5 por t 5 model MP- 372


set ap 5 radi o 1 l oad- bal anci ng di sabl e

set ap 5 r adi o 2 channel 60 r adi o- pr of i l e WMM mode di sabl e t x- power 5


set por t poe 1 enabl e



set por t poe 4 enabl eset por t poe 5 enabl e


set vl an 1 port 3

set vl an 1 port 6

set vl an 1 port 7

set vl an 1 port 8

set i nt er f ace 1 i p 172. 29. 104. 150 255. 255. 255. 0

set secur i t y acl name svp permi t cos 6 119 0. 0. 0. 0 255. 255. 255. 255 0. 0. 0. 0

255. 255. 255. 255

set secur i t y acl name svp permi t 0. 0. 0. 0 255. 255. 255. 255commi t secur i t y acl svp



set qos dscp- t o- cos- map 26 cos 4


set nt p enabl e

set nt p server 172. 29. 65. 2


64/93


65/93

Appendix

65

set ser vi ce- pr of i l e SvpVoi p ssi d- name voi p

set ser vi ce- pr of i l e SvpVoi p ssi d- t ype cl ear

set ser vi ce- pr of i l e SvpVoi p beacon enabl e

set ser vi ce- pr of i l e SvpVoi p pr oxy- ar p di sabl e

set ser vi ce- pr of i l e SvpVoi p dhcp- r est r i ct di sabl e

set ser vi ce- pr of i l e SvpVoi p no- br oadcast di sabl e

set ser vi ce- pr of i l e SvpVoi p shor t - r et r y- count 3

set ser vi ce- pr of i l e SvpVoi p l ong- r et r y- count 5

set ser vi ce- pr of i l e SvpVoi p aut h- f al l t hr u l ast- r esor t

set servi ce- pr of i l e SvpVoi p soda mode di sabl e

set ser vi ce- pr of i l e SvpVoi p soda enf or ce- checks enabl e

set servi ce- pr of i l e SvpVoi p max- bw 0

set servi ce- pr of i l e SvpVoi p cac- mode none

set ser vi ce- pr of i l e SvpVoi p cac- sessi on 14

set ser vi ce- pr of i l e SvpVoi p user - i dl e- t i meout 180set ser vi ce- pr of i l e SvpVoi p i dl e- cl i ent - pr obi ng enabl e

set ser vi ce- pr of i l e SvpVoi p keep- i ni t i al - vl an enabl e

set ser vi ce- pr of i l e SvpVoi p web- por t al - sessi on- t i meout 5

set ser vi ce- pr of i l e SvpVoi p wep act i ve- uni cast - i ndex 1

set ser vi ce- pr of i l e SvpVoi p wep act i ve- mul t i cast - i ndex 1

set ser vi ce- pr of i l e SvpVoi p ci pher - t ki p di sabl e

set ser vi ce- pr of i l e SvpVoi p ci pher - ccmp enabl e

set ser vi ce- pr of i l e SvpVoi p ci pher - wep104 di sabl e

set ser vi ce- pr of i l e SvpVoi p ci pher - wep40 di sabl e

set ser vi ce- pr of i l e SvpVoi p wpa- i e di sabl e

set ser vi ce- pr of i l e SvpVoi p r sn- i e enabl e

set servi ce- pr of i l e SvpVoi p psk- encr ypt ed

set ser vi ce- pr of i l e SvpVoi p aut h- psk enabl e

set ser vi ce- pr of i l e SvpVoi p shar ed- key- aut h di sabl e

set ser vi ce- pr of i l e SvpVoi p tki p- mc- t i me 60000

set ser vi ce- pr of i l e SvpVoi p aut h- dot 1x di sabl e

set servi ce- pr of i l e SvpVoi p mesh mode di sabl e

set ser vi ce- pr of i l e SvpVoi p br i dgi ng di sabl e

set ser vi ce- pr of i l e SvpVoi p l oad- bal anci ng- exempt di sabl eset ser vi ce- pr of i l e SvpVoi p web- por t al - l ogout mode di sabl e

set servi ce- pr of i l e SvpVoi p 11n mode- na enabl e

set servi ce- pr of i l e SvpVoi p 11n mode- ng enabl e

set ser vi ce- pr of i l e SvpVoi p 11n shor t - guar d- i nt er val enabl e

set ser vi ce- pr of i l e SvpVoi p 11n f r ame- aggr egat i on al l

set servi ce- pr of i l e SvpVoi p 11n a- msdu- max- l engt h 4k


66/93


66

set servi ce- prof i l e SvpVoi p 11n a- mpdu- max- l engt h 64k

set ser vi ce- pr of i l e SvpVoi p acti ve- cal l - i dl e- t i meout 120

set ser vi ce- pr of i l e SvpVoi p t r ansmi t - r at e 11a mandat or y 6. 0, 12. 0, 24. 0

beacon- r at e 6. 0 mul t i cast - r at e AUTO

set ser vi ce- pr of i l e SvpVoi p t r ansmi t - r at e 11b mandat or y 5. 5, 11. 0 di sabl ed

1. 0, 2. 0 beacon- r at e 5. 5 mul t i cast - r at e 11. 0set ser vi ce- pr of i l e SvpVoi p t r ansmi t - r at e 11g mandat or y 5. 5, 11. 0 di sabl ed


set ser vi ce- pr of i l e SvpVoi p t r ansmi t - r at e 11na mandat or y 6. 0, 12. 0, 24. 0

beacon- r at e 6. 0 mul t i cast - r at e AUTO

set ser vi ce- pr of i l e SvpVoi p t r ansmi t - r at e 11ng mandat or y 5. 5, 11. 0 di sabl ed


set ser vi ce- pr of i l e SvpVoi p at t r vl an- name Vl n

set r adi us deadt i me 0

set r adi us t i meout 5

set r adi us r et r ansmi t 3set r adi us das- por t 3799

set enabl epass passwor d

set aut hent i cat i on mac ssi d any * l ocal

set user admi n passwor d encr ypt ed

# AP Radi o Pr of i l e

set r adi o- pr of i l e def aul t beacon- i nt er val 100

set r adi o- pr of i l e def aul t dt i m- i nt er val 2

set r adi o- pr of i l e def aul t max- t x- l i f et i me 2000

set r adi o- pr of i l e def aul t max- r x- l i f et i me 2000

set r adi o- pr of i l e def aul t r t s- t hr eshol d 65535

set r adi o- pr of i l e def aul t f r ag- t hr eshol d 2346

set r adi o- pr of i l e def aul t pr eambl e- l engt h shor t

set r adi o- pr of i l e def aul t aut o- t une channel - conf i g di sabl e

set r adi o- pr of i l e def aul t aut o- t une 11a- channel - r ange l ower - bands

set r adi o- pr of i l e def aul t aut o- t une i gnor e- cl i ent s di sabl e

set r adi o- pr of i l e def aul t aut o- t une power - conf i g di sabl e

set r adi o- pr of i l e def aul t aut o- t une channel - i nt er val 3600

set r adi o- pr of i l e def aul t aut o- t une power - i nt er val 600set r adi o- pr of i l e def aul t aut o- t une power - r amp- i nt er val 60

set r adi o- pr of i l e def aul t aut o- t une channel - hol ddown 900

set r adi o- pr of i l e def aul t count er measur es none

set r adi o- pr of i l e def aul t r f - scanni ng mode act i ve

set r adi o- pr of i l e def aul t r f - scanni ng channel - scope oper at i ng

set r adi o- pr of i l e def aul t r f - scanni ng cts- t o- sel f di sabl e


67/93

Appendix

67

set r adi o- pr of i l e def aul t r f i d- mode di sabl e

set r adi o- pr of i l e def aul t wmm- power save di sabl e

set r adi o- pr of i l e def aul t qos- mode svp

set r adi o- pr of i l e def aul t wei ght ed- f ai r - queui ng di sabl e

set r adi o- pr of i l e def aul t r at e- enf or cement di sabl e

set r adi o- pr of i l e def aul t df s- channel s enabl e

set r adi o- pr of i l e def aul t 11n channel - wi dt h- na 40MHz

set r adi o- pr of i l e def aul t cac backgr ound mode di sabl e

set r adi o- pr of i l e def aul t cac best - ef f or t mode di sabl e

set r adi o- pr of i l e def aul t cac vi deo mode di sabl e

set r adi o- pr of i l e def aul t cac voi ce mode di sabl e

set r adi o- pr of i l e def aul t cac backgr ound max- ut i l i zat i on 0

set r adi o- pr of i l e def aul t cac best - ef f or t max- ut i l i zat i on 0

set r adi o- pr of i l e def aul t cac vi deo max- ut i l i zat i on 0

set r adi o- pr of i l e def aul t cac voi ce max- ut i l i zat i on 0set r adi o- pr of i l e def aul t cac backgr ound pol i ci ng di sabl e

set r adi o- pr of i l e def aul t cac best- ef f or t pol i c i ng di sabl e

set r adi o- pr of i l e def aul t cac vi deo pol i ci ng di sabl e

set r adi o- pr of i l e def aul t cac voi ce pol i ci ng di sabl e

set r adi o- pr of i l e def aul t ser vi ce- pr of i l e SvpVoi p

# AP Basi c Conf i gur at i on

set ap 1 por t 4 model MP- 422 radi ot ype 11g

set ap 1 name AP04

set ap 1 bi as hi gh

set ap 1 bl i nk di sabl e

set ap 1 upgr ade- f i r mware enabl e

set ap 1 f orce- i mage- downl oad di sabl e

set ap 1 t i meout 25

set ap 1 power - mode aut o

set ap 1 r adi o 1 channel 6 r adi o- pr of i l e def aul t mode enabl e ant enna-

l ocat i on i ndoor s ant ennatype I NTERNAL t x- power 9

set ap 1 radi o 1 aut o- t une max- power def aul t

set ap 1 r adi o 1 l oad- bal anci ng enabl e

set ap 1 r adi o 2 channel 36 r adi o- pr of i l e def aul t mode di sabl e ant enna-

l ocat i on i ndoor s ant ennatype I NTERNAL t x- power 18

set ap 1 radi o 2 aut o- t une max- power def aul t

set ap 1 r adi o 2 l oad- bal anci ng enabl e

set ap 1 l ocal - swi t chi ng mode di sabl e vl an- pr of i l e def aul t

# I P ser vi ces and por t conf i gur at i on


68/93


68

set arp agi ngt i me 1200

set i p ht t ps ser ver enabl e


set i p t el net 23

set i p snmp server di sabl e

set i p ssh server enabl e

set i p ssh 22

set l oad- bal anci ng mode di sabl e

set l oad- bal anci ng st r i ct ness l ow

set band- pref erence none

set port enabl e 1

set por t speed 1 AUTO

set por t dupl ex 1 f ul l

set por t t r ap 1 di sabl eset por t t r ap 1 NO

# Set addi t i onal por t s as appr opr i at e.

# SNMP Conf i gur at i on

set snmp pr ot ocol v1 enabl e

set snmp pr otocol v2c di sabl e

set snmp pr otocol usm di sabl e

# VLAN Conf i gur at i on

set vl an t agt ype dot 1q

set vl an 1 name Vl n t unnel - af f i ni t y 5

set vl an 1 port 1

set vl an 1 port 2

# add por t s t o vl an as appr opr i ate

set spant r ee backbonef ast di sabl e

set spant r ee upl i nkf ast di sabl e

set spant r ee f wddel ay 15 vl an 1

set spant r ee hel l o 2 vl an 1

set spant r ee maxage 20 vl an 1

set spant r ee pr i ori t y 32768 vl an 1set spant r ee di sabl e vl an 1

set spant r ee enabl e por t 1 1

set spant r ee por t pr i 1 pr i or i t y 128

set spant r ee port f ast 1 di sabl e

set i gmp di sabl e vl an 1

set i gmp pr oxy- r epor t enabl e vl an 1


69/93

Appendix

69

set i gmp quer i er di sabl e vl an 1

set i gmp mr sol di sabl e vl an 1

set i gmp versi on 2 vl an 1

set i gmp mr sol mr si 30 vl an 1

set i gmp qi 125 vl an 1

set i gmp oqi 255 vl an 1

set i gmp qr i 100 vl an 1

set i gmp l mqi 10 vl an 1

set i gmp rv 2 vl an 1

set i gmp mr out er por t 1 di sabl e

set i gmp r ecei ver por t 1 di sabl e

# di sabl e r out er and r ecei ver s on other port s as appr opr i ate

set f db agi ngt i me 1 age 300

set i nt er f ace 1 i p 172. 16. 1. 22 255. 255. 255. 0

set i nt er f ace 1 i p dhcp- ser ver di sabl e st ar t 192. 168. 100. 2 st op192. 168. 100. 254

set snmp not i f y pr of i l e def aul t dr op al l

set mobi l i t y- domai n mode seed domai n- name mobdom

set mobi l i t y- domai n member 172. 16. 2. 20

set r f det ect cl assi f i cat i on ssi d- masquer ade r ogue

set r f det ect cl assi f i cat i on seen- i n- net wor k r ogue

set r f det ect cl assi f i cat i on ad- hoc ski p- t est

set r f det ect cl assi f i cat i on def aul t - cl assi f i cat i on suspect

set r f det ect l og enabl e

set r f det ect countermeasur es mode nor malset r f det ect si gnat ur e enabl e

set r f det ect voi ce- ext snr - t hr eshol d 12

set secur i t y acl hi t - sampl e- r at e 0

set secur i t y acl name svp permi t cos 6 119 0. 0. 0. 0 255. 255. 255. 255 0. 0. 0. 0

255. 255. 255. 255

set secur i t y acl name svp permi t 0. 0. 0. 0 255. 255. 255. 255

commi t secur i t y acl svp











70/93


70















set qos dscp- t o- cos- map 22 cos 2set qos dscp- t o- cos- map 23 cos 2

























71/93

Appendix

71
















set qos cos- t o- dscp- map 1 dscp 8







set nt p di sabl e

set nt p updat e- i nt er val 64


72/93


72

Configuration Example #3:

WMM Configuration for Multiple MXsMX1 Seed

set i p r out e def aul t 172. 16. 233. 252 1

set i p r out e 10. 2. 106. 0 255. 255. 255. 0 10. 2. 28. 1 1

set i p r out e 10. 9. 0. 0 255. 255. 255. 0 10. 2. 28. 1 1

set i p r out e 10. 2. 30. 0 255. 255. 255. 0 10. 2. 28. 1 1

set i p r out e 10. 64. 84. 0 255. 255. 255. 0 10. 2. 28. 1 1

set l og consol e enabl e sever i t y debug

set dot 1x qui et - per i od 0

set dot 1x t i meout handshake 60

set sys t em name MX1

set pr ompt vi ew_cer t

set syst emi p- addr ess 172. 16. 233. 253set syst em i dl e- t i meout 0

set syst emcountr ycode US

set qos- pr of i l e si p cos 0

set qos-

view juniper wlan controllers 0

Documents