Page 2 - Trademark Information
Configuration Guide PN: 1725-36082-001_F.doc 2 Trademark Information Polycom® and the logo designs SpectraLink® LinkPlus Link NetLink SVP Are trademarks and registered trademarks of Polycom, Inc. in the United States of America and various countries. All other trademarks used herein are the property...
Page 3 - Introduction; Certified Product Summary; WLAN Security Switches; Service Information
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_F.doc 3 Introduction Polycom’s Voice Interoperability for Enterprise Wireless (VIEW) Certification Program is designed to ensure interoperability and high performance between SpectraLink 8000 Wireless Telephones and wireless LA...
Page 4 - Contacting Nortel Technical Support; Known Limitations
Configuration Guide PN: 1725-36082-001_F.doc 4 Contacting Nortel Technical Support If you purchased a service contract for your Nortel product from a distributor or authorized reseller, contact the technical support staff for that distributor or reseller for assistance. Additional information about ...
Page 5 - Network Topology
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_F.doc 5 Network Topology The following topology was tested during VIEW Certification. It is important to note that these do not necessarily represent all “Certified” configurations. Both Layer-2 and Layer-3 roaming were tested....
Page 6 - Access Point Capacity and Positioning; Handset range; Radio Standard; Number of handset calls per AP
Configuration Guide PN: 1725-36082-001_F.doc 6 Access Point Capacity and Positioning Each site is unique in its AP requirements. Therefore, please take the following points into account when determining how many APs are needed and where they should be placed in the facility: Handset range There must...
Page 7 - LAN bandwidth
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_F.doc 7 the available bandwidth per call for 1 Mb/s operation, approximately 10 % of the available bandwidth per call for 2 Mb/s operation, approximately 7 % of the available bandwidth per call for 5.5 Mb/s operation, and appro...
Page 8 - None; WLAN Security Switch 2300 Series Quick Start Guide
Configuration Guide PN: 1725-36082-001_F.doc 8 Configuring a New WLAN Security Switch Starting from Factory Defaults 1. Using the supplied DB-9 male to DB-9 female standard RS-232 cable, connect the WLAN Security Switch to the serial port of a terminal or PC. 2. Run a terminal emulation program (suc...
Page 9 - Connecting APs; Directly connected APs; Nortel WLAN Security Switch 2300 Series
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_F.doc 9 Connecting APs To configure the WLAN Security Switch (WSS) to support an AP, you must first determine how the AP will connect to the switch. There are two types of AP-to-WSS connection: direct and distributed. Directly ...
Page 10 - Text Style; Typed command
Configuration Guide PN: 1725-36082-001_F.doc 10 Command, comment, and screen text key In the sections below you will find commands, comments and system responses or other screen-displayed information involved in the configuration process. This key explains the text styles and symbols used to denote ...
Page 11 - Configuration Example – CLI; AP configuration; To add a distributed AP-2330 to a WSS using CLI:; VLAN configuration; # Creates a new VLAN ID and defines the name.
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_F.doc 11 Configuration Example – CLI AP configuration To add a directly connected AP-2330 attached to port 1 on a WSS using CLI: set port type ap 1 model 2330 poe enable # Defines the port number on the switch that the AP is co...
Page 12 - Service profile / SSID configuration; same name for both the service profile and SSID
Configuration Guide PN: 1725-36082-001_F.doc 12 Service profile / SSID configuration To create a SSID named Voice using WPA-PSK that will be advertised on 802.11a/b/g radios using CLI: set service-profile Voice ssid-name Voice # Creates a new service profile and SSID named Voice. Note it’s a best pr...
Page 13 - Radio Profile configuration; # Maps the voice service profile and SSID to the; Access control list; marks it with a CoS 7.
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_F.doc 13 set service-profile Voice auth-dot1x disable # Disables 802.1x authentication. set service-profile Voice attr vlan-name Voice # Specifies the VLAN name to map the voice handsets traffic to. Radio Profile configuration ...
Page 14 - marks it with a CoS 7; commit security acl SpectraLink; Saving changes; To save the current changes to a WSS using CLI:
Configuration Guide PN: 1725-36082-001_F.doc 14 # Applies the ACL to the Voice VLAN for ingress and egress traffic. To create an ACL that allows and prioritizes IP protocol 119 (SVP) with a Class of Service (CoS) 7 and denies all other IP traffic on the Voice VLAN using CLI: set security acl ip Spec...
Page 15 - Adding a WLAN Security Switch to the Network Plan; Nortel WLAN Management Software; Configuration; Network Plan Tasks; select; Upload WSS; In the; IP Address; field, type the IP address for the WLAN Security
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_F.doc 15 Configuration Example – WLAN Management Software Adding a WLAN Security Switch to the Network Plan Before WLAN Management Software can be used to configure a WLAN Security Switch, the WSS must be added to the WMS serve...
Page 16 - Nortel WLAN Security Switch 2300 Series Configuration Guide
Configuration Guide PN: 1725-36082-001_F.doc 16 5. In the Enable Password field, type the enable password for the WLAN Security Switch. The enable password must match the enable password that was defined in the Quick Start Wizard. For more information, see the Nortel WLAN Security Switch 2300 Series...
Page 17 - Available Ports; For distributed APs, enter the; Name; and; Serial Number; Click the; Next
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_F.doc 17 5. For directly connected APs, select an available port on the switch from the Available Ports drop-down list. Click the Next button. 6. For distributed APs, enter the Name and Serial Number of the AP. Click the Next b...
Page 19 - default
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_F.doc 19 9. To configure the 802.11a Radio , a. Select default for the Radio Profile . b. Specify the Channel Number and Transmit Power the radio should use, as determined by the site survey performed on the facility. 10. Click...
Page 22 - Voice
Configuration Guide PN: 1725-36082-001_F.doc 22 9. The Voice VLAN 2 is now 802.1Q tagged to the uplink port P08. a. Highlight the Voice VLAN. b. In the Network Plan Tasks panel, select IGMP. 10. In the VLAN Properties window, disable IGMP by clearing the Enabled check box. Click the OK button.
Page 23 - Service Profile / SSID configuration
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_F.doc 23 Service Profile / SSID configuration To create a SSID named Voice using WPA-PSK or WPA2-PSK that will be advertised on 802.11a/b/g radios using WMS: 1. In WMS click Configuration on the tool bar. 2. In the Organizer pa...
Page 24 - Selecting the vendor
Configuration Guide PN: 1725-36082-001_F.doc 24 6. Set the SSID Type to Encrypted and use the default Vendor type SpectraLink . Click the Next button. Selecting the vendor SpectraLink tells WMS what ACLs to create to prioritize the voice traffic later in the wizard. 7. Select the Open Access check b...
Page 25 - Settings for; Wireless Security; To support handsets using WPA-PSK security, select the; WPA; To support handsets using WPA2-PSK, select the
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_F.doc 25 8. Settings for Wireless Security : a. To support handsets using WPA-PSK security, select the WPA check box. b. To support handsets using WPA2-PSK, select the RSN (WPA2) check box.
Page 26 - Wireless Encryption Cipher; To support handsets using WPA-PSK with TKIP, select the; TKIP
Configuration Guide PN: 1725-36082-001_F.doc 26 9. Click the Next button. 10. Settings for Wireless Encryption Cipher Suite : a. To support handsets using WPA-PSK with TKIP, select the TKIP check box.
Page 28 - Generate
Configuration Guide PN: 1725-36082-001_F.doc 28 12. Enter a hexadecimal pre-shared key or passphrase. a. If a passphrase is entered, click the Generate button to generate the hexadecimal pre-shared key. 13. Click the Next button. The pre-shared key must match on both the WSS and handsets or the hand...
Page 29 - SVP; ) traffic with the Class of Service level
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_F.doc 29 15. A default ACL will be generated which will allow and prioritize IP protocol 119 ( SVP ) traffic with the Class of Service level 7 and pass all other IP traffic on the Voice VLAN. a. (Optional) Modify the default AC...
Page 30 - Assign the; Voice Service Profile; to the; Radio Profile. This will; Finish
Configuration Guide PN: 1725-36082-001_F.doc 30 16. Assign the Voice Service Profile to the default Radio Profile. This will determine which 802.11a and 802.11g radios will advertise the Voice SSID. For this example the default Radio Profile will be used which is assigned to all 802.11a/g radios. Th...
Page 32 - Radio Profile Properties; Clear the; Enable Active Scan; check box. This disables active
Configuration Guide PN: 1725-36082-001_F.doc 32 4. In the Radio Profile Properties window, click the Radio Profile tab. 5. Clear the Enable Active Scan check box. This disables active scanning, which prevents the radios from going off-channel and disrupting voice services.
Page 33 - Auto Tune; Tune Channel; Tune Transmit Power
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_F.doc 33 6. Click the Auto Tune tab. 7. Clear the Tune Channel and Tune Transmit Power check boxes. This disables automatic channel assignment for radios assigned to the radio profile. A static channel configuration is recommen...
Page 34 - Voice Configuration
Configuration Guide PN: 1725-36082-001_F.doc 34 8. Click the Voice Configuration tab. Verify that the QoS Mode is set to SVP . WMM support is not currently available on the SpectraLink 8000 Wireless Telephones. 9. Click the OK button.
Page 35 - Deploying changes; In WMS click
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_F.doc 35 Deploying changes Deploying the changes in WMS will upload and save the configuration to the WSS. To deploy the changes in WMS: 1. In WMS click Devices on the tool bar. 2. In the Local Changes Task List panel, select D...
Page 36 - When the; Deploy; option is selected, WMS will send, apply and
Configuration Guide PN: 1725-36082-001_F.doc 36 3. When the Deploy option is selected, WMS will send, apply and save the configuration changes to the WSS.
Page 37 - Example Configuration Files (For Reference Only)
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_F.doc 37 Example Configuration Files (For Reference Only) The following configuration file provides an example configuration to support SpectraLink 8000 Wireless Telephones using WPA-PSK: # Configuration nvgen'd at 2007-7-26 22...