Page 2 - Trademark Information
Configuration Guide PN: 1725-36082-001_G.doc 2 Trademark Information Polycom® and the logo designs SpectraLink® LinkPlus Link NetLink SVP Are trademarks and registered trademarks of Polycom, Inc. in the United States of America and various countries. All other trademarks used herein are the property...
Page 3 - Introduction; Certified Product Summary; WLAN Security Switches; Service Information
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_G.doc 3 Introduction Polycom’s Voice Interoperability for Enterprise Wireless (VIEW) Certification Program is designed to ensure interoperability and high performance between SpectraLink Wireless Telephones and wireless LAN (WL...
Page 4 - Contacting Nortel Technical Support; Known Limitations
Configuration Guide PN: 1725-36082-001_G.doc 4 Contacting Nortel Technical Support If you purchased a service contract for your Nortel product from a distributor or authorized reseller, contact the technical support staff for that distributor or reseller for assistance. Additional information about ...
Page 5 - Network Topology
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_G.doc 5 Network Topology The following topology was tested during VIEW Certification. It is important to note that these do not necessarily represent all “Certified” configurations. Both Layer-2 and Layer-3 roaming were tested....
Page 6 - Access Point Capacity and Positioning; Radio Standard
Configuration Guide PN: 1725-36082-001_G.doc 6 Access Point Capacity and Positioning Please refer to the Polyco
Page 7 - None; WLAN Security Switch 2300 Series Quick Start Guide
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_G.doc 7 Configuring a New WLAN Security Switch Starting from Factory Defaults 1. Using the supplied DB-9 male to DB-9 female standard RS-232 cable, connect the WLAN Security Switch to the serial port of a terminal or PC. 2. Run...
Page 8 - Connecting APs; Directly connected APs; Nortel WLAN Security Switch 2300 Series
Configuration Guide PN: 1725-36082-001_G.doc 8 Connecting APs To configure the WLAN Security Switch (WSS) to support an AP, you must first determine how the AP will connect to the switch. There are two types of AP-to-WSS connection: direct and distributed. Directly connected APs In direct connection...
Page 9 - Text Style; Typed command
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_G.doc 9 Command, comment, and screen text key In the sections below you will find commands, comments and system responses or other screen-displayed information involved in the configuration process. This key explains the text s...
Page 10 - Configuration Example – CLI; AP configuration; To add a distributed AP-2330 to a WSS using CLI:; VLAN configuration; # Creates a new VLAN ID and defines the name.
Configuration Guide PN: 1725-36082-001_G.doc 10 Configuration Example – CLI AP configuration To add a directly connected AP-2330 attached to port 1 on a WSS using CLI: set port type ap 1 model 2330 poe enable # Defines the port number on the switch that the AP is connected to, the model number of th...
Page 11 - Service profile / SSID configuration; same name for both the service profile and SSID
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_G.doc 11 Service profile / SSID configuration To create a SSID named Voice using WPA-PSK that will be advertised on 802.11a/b/g radios using CLI: set service-profile Voice ssid-name Voice # Creates a new service profile and SSI...
Page 12 - Radio Profile configuration; optimum RF environment for the handsets.; Access control list; # Creates an ACL that matches all traffic and ports.
Configuration Guide PN: 1725-36082-001_G.doc 12 # Enables pre-shared-key authentication. set service-profile Voice auth-dot1x disable # Disables 802.1x authentication. set service-profile Voice attr vlan-name Voice # Specifies the VLAN name to map the voice handsets traffic to. Radio Profile configu...
Page 13 - # Applies the ACL to the Voice VLAN for ingress and; commit security acl SpectraLink; Saving changes; To save the current changes to a WSS using CLI:
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_G.doc 13 set security acl map SpectraLink vlan Voice in set security acl map SpectraLink vlan Voice out # Applies the ACL to the Voice VLAN for ingress and egress traffic. To create an ACL that allows and prioritizes IP protoco...
Page 14 - Adding a WLAN Security Switch to the Network Plan; Nortel WLAN Management Software; Configuration; In the; Network Plan Tasks; select; Upload WSS
Configuration Guide PN: 1725-36082-001_G.doc 14 Configuration Example – WLAN Management Software Adding a WLAN Security Switch to the Network Plan Before WLAN Management Software can be used to configure a WLAN Security Switch, the WSS must be added to the WMS server. To add a WLAN Security Switch t...
Page 15 - Nortel WLAN Security Switch 2300 Series Configuration Guide
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_G.doc 15 4. In the IP Address field, type the IP address for the WLAN Security Switch. 5. In the Enable Password field, type the enable password for the WLAN Security Switch. The enable password must match the enable password t...
Page 16 - Available Ports; For distributed APs, enter the; Name; and; Serial Number; Click the; Next
Configuration Guide PN: 1725-36082-001_G.doc 16 5. For directly connected APs, select an available port on the switch from the Available Ports drop-down list. Click the Next button. 6. For distributed APs, enter the Name and Serial Number of the AP. Click the Next button.
Page 18 - default
Configuration Guide PN: 1725-36082-001_G.doc 18 9. To configure the 802.11a Radio , a. Select default for the Radio Profile . b. Specify the Channel Number and Transmit Power the radio should use, as determined by the site survey performed on the facility. 10. Click the Finish button. 11. The AP has...
Page 21 - Voice
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_G.doc 21 9. The Voice VLAN 2 is now 802.1Q tagged to the uplink port P08. a. Highlight the Voice VLAN. b. In the Network Plan Tasks panel, select IGMP. 10. In the VLAN Properties window, disable IGMP by clearing the Enabled che...
Page 22 - Service Profile / SSID configuration
Configuration Guide PN: 1725-36082-001_G.doc 22 Service Profile / SSID configuration To create a SSID named Voice using WPA-PSK or WPA2-PSK that will be advertised on 802.11a/b/g radios using WMS: 1. In WMS click Configuration on the tool bar. 2. In the Organizer panel expand the WSS and select Wire...
Page 23 - Selecting the vendor
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_G.doc 23 4. In the New Voice Service Profile introduction screen click the Next button. 5. Specify a Name and SSID for the Voice Service Profile. 6. Set the SSID Type to Encrypted and use the default Vendor type SpectraLink . C...
Page 24 - Select the; Open Access; check box. Click the; Settings for; Wireless Security; To support handsets using WPA-PSK security, select the; WPA
Configuration Guide PN: 1725-36082-001_G.doc 24 7. Select the Open Access check box. Click the Next button. MAC authentication may optionally be selected but will require that the MAC addresses for each handset be defined in the local AAA database on the WSS. 8. Settings for Wireless Security : a. T...
Page 25 - To support handsets using WPA2-PSK, select the; Wireless Encryption Cipher; To support handsets using WPA-PSK with TKIP, select the; TKIP
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_G.doc 25 b. To support handsets using WPA2-PSK, select the RSN (WPA2) check box. 9. Click the Next button. 10. Settings for Wireless Encryption Cipher Suite : a. To support handsets using WPA-PSK with TKIP, select the TKIP chec...
Page 26 - check box and click the; Enter a hexadecimal pre-shared key or passphrase.; Generate; button to generate
Configuration Guide PN: 1725-36082-001_G.doc 26 b. To support handsets using WPA2-PSK with AES/CCMP, select the AES (CCMP) check box and click the Next button. 11. Enter a hexadecimal pre-shared key or passphrase. a. If a passphrase is entered, click the Generate button to generate the hexadecimal p...
Page 29 - Assign the; Voice Service Profile; to the; Radio Profile. This will; Finish
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_G.doc 29 17. Assign the Voice Service Profile to the default Radio Profile. This will determine which 802.11a and 802.11g radios will advertise the Voice SSID. For this example the default Radio Profile will be used which is as...
Page 32 - Voice Configuration
Configuration Guide PN: 1725-36082-001_G.doc 32 8. Click the Voice Configuration tab. Verify that the QoS Mode is set to SVP . WMM support is not currently available on the SpectraLink Wireless Telephones. 9. Click the OK button.
Page 33 - Deploying changes; In WMS click
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_G.doc 33 Deploying changes Deploying the changes in WMS will upload and save the configuration to the WSS. To deploy the changes in WMS: 1. In WMS click Devices on the tool bar. 2. In the Local Changes Task List panel, select D...
Page 34 - When the; Deploy; option is selected, WMS will send, apply and
Configuration Guide PN: 1725-36082-001_G.doc 34 3. When the Deploy option is selected, WMS will send, apply and save the configuration changes to the WSS.
Page 35 - Example Configuration Files (For Reference Only)
Nortel: WLAN Security Switch 2300 Series with AP-2330 PN: 1725-36082-001_G.doc 35 Example Configuration Files (For Reference Only) The following configuration file provides an example configuration to support SpectraLink Wireless Telephones using WPA-PSK: # Configuration nvgen'd at 2007-7-26 22:51:5...
