Extreme Networks Summit 300-48 User Manual
Page 92
92
Summit 300-48 Switch Software User Guide
Unified Access Security
To configure the VLAN, addresses, and RF profiles, follow these steps:
1
Create the wireless management VLAN.
create vlan wireless-mgmt
2
Remove the wireless port from the default VLAN.
configure vlan default delete ports 1:5
3
Add the wireless port to the management VLAN.
configure vlan wireless-mgmt add ports 1:5
4
Configure this VLAN as the management VLAN.
configure wireless vlan wireless-mgmt
5
Assign an IP address to the VLAN.
configure vlan wireless-mgmt ip-address 192.168.0.1
6
Assign an IP address on the VLAN for each wireless port (port 1:5 in the example).
configure wireless port 1:5 ip-address 192.168.0.105
7
Create an RF profile for the A interfaces by copying from the default profile.
create rf-profile RF_A copy DEFAULT_A
8
Assign a network name (
ess-name
) to the RF-profile for the A interface.
configure rf-profile RF_A ess-name 80211_A
9
Create an RF profile for the G interfaces by copying from the default profile.
create rf-profile RF_G copy DEFAULT_G
10
Assign network name (
ess-name
) to the RF-profile for the G interface.
configure rf-profile RF_G ess-name 80211_G
To configure WEP security, follow these steps:
1
Create a security profile (
wep-secure
) by copying from the default unsecure profile.
create security-profile wep-secure copy unsecure
2
Create a WEP VLAN. This is the VLAN in to which all WEP traffic will be classified.
create vlan wep-vlan
3
Configure the tag for the WEP VLAN
configure vlan wep-vlan tag 10
4
Add the wireless port to be a tagged port on the WEP-VLAN. The port can be a tagged port or an
untagged port of the WEP VLAN. If the port is a tagged port, the traffic flowing from the AP to the
switch will be tagged with the specified VLAN, else it will be untagged.
configure vlan wep-vlan add ports 1:5 tagged
5
Turn on WEP authentication in this security profile and assign the VLAN.
configure security-profile wep-secure wep authentication on vlan wep-vlan
6
Configure the security profile for WEP encryption length of 64.
configure security-profile wep-secure encryption-length 64
7
Configure the first WEP key (0) with the hex encryption code 1234567891.
configure security-profile wep-secure wep key add 0 hex 1234567891