Document Outline

• Contents
• Overview
  • 1.1 Hardware Overview
    • 1.1.1 Physical Specifications
      • 1.1.1.1 Power Cord Specifications
      • 1.1.1.2 Power Protection
      • 1.1.1.3 Cabling Requirements
    • 1.1.2 System Status LED Codes
      • 1.1.2.1 Start Up
      • 1.1.2.2 Primary
      • 1.1.2.3 Standby
      • 1.1.2.4 Error Codes
    • 1.1.3 10/100/1000 Port Status LED Codes
  • 1.2 Software Overview
    • 1.2.1 Infrastructure Features
      • 1.2.1.1 Installation Feature
      • 1.2.1.2 Licensing Support
      • 1.2.1.3 Configuration Management
      • 1.2.1.4 Diagnostics
      • 1.2.1.5 Serviceability
      • 1.2.1.6 Tracing / Logging
      • 1.2.1.7 Process Monitor
      • 1.2.1.8 Hardware Abstraction Layer and Drivers
      • 1.2.1.9 Redundancy
      • 1.2.1.10 Secure Network Time Protocol (SNTP)
      • 1.2.1.11 Password Recovery
    • 1.2.2 Wireless Switching
      • 1.2.2.1 Physical Layer Features
      • 1.2.2.2 Rate Limiting
      • 1.2.2.3 Proxy-ARP
      • 1.2.2.4 HotSpot / IP Redirect
      • 1.2.2.5 IDM (Identity Driven Management)
      • 1.2.2.6 Voice Prioritization
      • 1.2.2.7 Self Healing
      • 1.2.2.8 Wireless Capacity
      • 1.2.2.9 AP and MU Load Balancing
      • 1.2.2.10 Wireless Roaming
      • 1.2.2.11 Power Save Polling
      • 1.2.2.12 QoS
      • 1.2.2.13 Wireless Layer 2 Switching
      • 1.2.2.14 Automatic Channel Selection
      • 1.2.2.15 WMM-Unscheduled APSD
    • 1.2.3 Wired Switching
      • 1.2.3.1 DHCP Servers
      • 1.2.3.2 DDNS
      • 1.2.3.3 GRE Tunneling
      • 1.2.3.4 VLAN Enhancements
      • 1.2.3.5 Interface Management
      • 1.2.3.6 Multiple WLAN Support
    • 1.2.4 Management Features
    • 1.2.5 Security Features
      • 1.2.5.1 Encryption and Authentication
      • 1.2.5.2 MU Authentication
      • 1.2.5.3 Secure Beacon
      • 1.2.5.4 MU to MU Allow
      • 1.2.5.5 MU to MU Disallow
      • 1.2.5.6 Switch-to-Wired
      • 1.2.5.7 802.1x Authentication
      • 1.2.5.8 IEEE 802.1AB LLDP
      • 1.2.5.9 WIPS
      • 1.2.5.10 Rogue AP Detection
      • 1.2.5.11 ACLs
      • 1.2.5.12 Local Radius Server
      • 1.2.5.13 IPSec VPN
      • 1.2.5.14 NAT
      • 1.2.5.15 Certificate Management
    • 1.2.6 Access Port Support
• Switch Web UI Access and Image Upgrades
  • 2.1 Accessing the Switch Web UI
    • 2.1.1 Web UI Requirements
    • 2.1.2 Connecting to the Switch Web UI
  • 2.2 Switch Password Recovery
  • 2.3 Upgrading the Switch Image
    • 2.3.1 Upgrading the Switch Image from 1.4.x or 2.x to Version 3.x
  • 2.4 Auto Installation
  • 2.5 Downgrading the Switch Image
  • 2.6 AP-4131 Access Point to Access Port Conversion
• Switch Information
  • 3.1 Viewing the Switch Interface
    • 3.1.1 Viewing the Switch Configuration
      • 3.1.1.1 Viewing Dashboard Details
    • 3.1.2 Viewing Switch Statistics
  • 3.2 Viewing Switch Port Information
    • 3.2.1 Viewing the Port Configuration
      • 3.2.1.1 Editing the Port Configuration
    • 3.2.2 Viewing the Ports Runtime Status
    • 3.2.3 Viewing the Ports Statistics
      • 3.2.3.1 Detailed Port Statistics
      • 3.2.3.2 Viewing the Port Statistics Graph
  • 3.3 Viewing Switch Configurations
    • 3.3.1 Viewing the Detailed Contents of a Config File
    • 3.3.2 Editing a Config File
    • 3.3.3 Transferring a Config File
  • 3.4 Viewing Switch Firmware Information
    • 3.4.1 Editing the Switch Firmware
    • 3.4.2 Enabling Global Settings for the Failover Image
    • 3.4.3 Updating the Switch Firmware
  • 3.5 Configuring Automatic Updates
  • 3.6 Viewing the Switch Alarm Log
    • 3.6.1 Viewing Alarm Log Details
  • 3.7 Viewing Switch Licenses
  • 3.8 How to use the Filter Option
• Network Setup
  • 4.1 Displaying the Network Interface
  • 4.2 Viewing Network IP Information
    • 4.2.1 Configuring DNS
      • 4.2.1.1 Adding an IP Address for a DNS Server
      • 4.2.1.2 Configuring Global Settings
    • 4.2.2 Configuring IP Forwarding
      • 4.2.2.1 Adding a New Static Route
    • 4.2.3 Viewing Address Resolution
  • 4.3 Viewing and Configuring Layer 2 Virtual LANs
    • 4.3.1 Editing the Details of an Existing VLAN
  • 4.4 Configuring Switch Virtual Interfaces
    • 4.4.1 Configuring the Virtual Interface
      • 4.4.1.1 Adding a Virtual Interface
      • 4.4.1.2 Modifying a Virtual Interface
    • 4.4.2 Viewing Virtual Interface Statistics
      • 4.4.2.1 Viewing Virtual Interface Statistics
      • 4.4.2.2 Viewing the Virtual Interface Statistics Graph
  • 4.5 Viewing and Configuring Switch WLANs
    • 4.5.1 Configuring WLANs
      • 4.5.1.1 Editing the WLAN Configuration
      • 4.5.1.2 Configuring Authentication Types
      • 4.5.1.3 Configuring Different Encryption Types
    • 4.5.2 Viewing WLAN Statistics
      • 4.5.2.1 Viewing WLAN Statistics in Detail
      • 4.5.2.2 Viewing WLAN Statistics in a Graphical Format
      • 4.5.2.3 Viewing WLAN Switch Statistics
    • 4.5.3 Viewing VLAN/Tunnel Assignments
    • 4.5.4 Configuring WMM
      • 4.5.4.1 Editing WMM Settings
  • 4.6 Viewing Associated MU Details
    • 4.6.1 Viewing MU Status
      • 4.6.1.1 Viewing MU Details
    • 4.6.2 Viewing MU Statistics
      • 4.6.2.1 Viewing MU Statistics in Detail
      • 4.6.2.2 View a MU Statistics Graph
  • 4.7 Viewing Access Port Information
    • 4.7.1 Configuring Access Port Radios
      • 4.7.1.1 Configuring an AP’s Global Settings
      • 4.7.1.2 Editing AP Settings
      • 4.7.1.3 Adding APs
    • 4.7.2 Viewing AP Statistics
      • 4.7.2.1 Viewing AP Statistics in Detail
      • 4.7.2.2 Viewing AP Statistics in Graphical Format
    • 4.7.3 Configuring WLAN Assignment
      • 4.7.3.1 Editing a WLAN Assignment
    • 4.7.4 Configuring WMM
      • 4.7.4.1 Editing WMM Settings
  • 4.8 Viewing Access Port Adoption Defaults
    • 4.8.1 Configuring AP Adoption Defaults
      • 4.8.1.1 Editing Default Radio Adoption Settings
    • 4.8.2 Configuring Layer 3 Access Port Adoption
    • 4.8.3 Configuring WLAN Assignment
    • 4.8.4 Configuring WMM
      • 4.8.4.1 Editing Access Port Adoption WMM Settings
  • 4.9 Viewing Access Port Status
    • 4.9.1 Viewing Adopted Access Ports
    • 4.9.2 Viewing Unadopted Access Ports
• Switch Services
  • 5.1 Displaying the Services Interface
  • 5.2 DHCP Server Settings
    • 5.2.1 Configuring the Switch DHCP Server
      • 5.2.1.1 Editing the Properties of an Existing DHCP Pool
      • 5.2.1.2 Adding a New DHCP Pool
      • 5.2.1.3 Configuring DHCP Global Options
      • 5.2.1.4 Configuring DHCP Server DDNS Values
    • 5.2.2 Viewing the Attributes of Existing Host Pools
    • 5.2.3 Configuring Excluded IP Address Information
    • 5.2.4 Configuring DHCP Server Relay Information
    • 5.2.5 Viewing DHCP Server Status
  • 5.3 Configuring Secure NTP
    • 5.3.1 Defining the SNTP Configuration
    • 5.3.2 Adding a New SNTP Symmetric Key
    • 5.3.3 Defining a SNTP Neighbor Configuration
    • 5.3.4 Adding an NTP Neighbor
    • 5.3.5 Viewing SNTP Associations
    • 5.3.6 Viewing SNTP Status
  • 5.4 Configuring Switch Redundancy
    • 5.4.1 Reviewing Redundancy Status
    • 5.4.2 Configuring Redundancy Group Membership
      • 5.4.2.1 Displaying Redundancy Member Details
      • 5.4.2.2 Adding a Redundancy Group Member
    • 5.4.3 Redundancy Group License Aggregation Rules
  • 5.5 Layer 3 Mobility
    • 5.5.1 Configuring Layer 3 Mobility
    • 5.5.2 Defining the Layer 3 Peer List
    • 5.5.3 Reviewing Layer 3 Peer List Statistics
    • 5.5.4 Reviewing Layer 3 MU Status
  • 5.6 Configuring GRE Tunnels
    • 5.6.1 Editing the Properties of a GRE Tunnel
    • 5.6.2 Adding a New GRE Tunnel
  • 5.7 Configuring Self Healing
    • 5.7.1 Configuring Self Healing Neighbor Details
      • 5.7.1.1 Editing the Properties of a Neighbor
  • 5.8 Configuring Switch Discovery
    • 5.8.1 Configuring Discovery Profiles
      • 5.8.1.1 Adding a New Discovery Profile
    • 5.8.2 Viewing Discovered Switches
• Switch Security
  • 6.1 Displaying the Main Security Interface
  • 6.2 AP Intrusion Detection
    • 6.2.1 Enabling and Configuring AP Detection
      • 6.2.1.1 Adding or Editing an Allowed AP
    • 6.2.2 Approved APs (Reported by APs)
    • 6.2.3 Unapproved APs (Reported by APs)
    • 6.2.4 Unapproved APs (Reported by MUs)
  • 6.3 MU Intrusion Detection
    • 6.3.1 Configuring MU Intrusion Detection
    • 6.3.2 Viewing Filtered MUs
  • 6.4 Configuring Wireless Filters
    • 6.4.1 Editing an Existing Wireless Filter
    • 6.4.2 Adding a new Wireless Filter
    • 6.4.3 Associating an ACL with WLAN
  • 6.5 Configuring ACLs
    • 6.5.1 ACL Overview
      • 6.5.1.1 Router ACLs
      • 6.5.1.2 Port ACLs
      • 6.5.1.3 Wireless LAN ACLs
      • 6.5.1.4 ACL Actions
      • 6.5.1.5 Precedence Order
    • 6.5.2 Configuring an ACL
      • 6.5.2.1 Adding a New ACL
      • 6.5.2.2 Adding a New ACL Rule
      • 6.5.2.3 Editing an Existing Rule
    • 6.5.3 Attaching an ACL
      • 6.5.3.1 Adding a New ACL Configuration
    • 6.5.4 Attaching an ACL on a WLAN Interface/Port
      • 6.5.4.1 Adding a New ACL WLAN Configuration
    • 6.5.5 Reviewing ACL Statistics
  • 6.6 Configuring NAT Information
    • 6.6.1 Defining Dynamic NAT Translations
      • 6.6.1.1 Adding a New Dynamic NAT Configuration
    • 6.6.2 Defining Static NAT Translations
      • 6.6.2.1 Adding a New Static NAT Configuration
    • 6.6.3 Configuring NAT Interfaces
    • 6.6.4 Viewing NAT Status
  • 6.7 Configuring IKE Settings
    • 6.7.1 Defining the IKE Configuration
    • 6.7.2 Setting IKE Policies
    • 6.7.3 Viewing SA Statistics
  • 6.8 Configuring IPSec VPN
    • 6.8.1 Defining the IPSec Configuration
      • 6.8.1.1 Editing an Existing Transform Set
      • 6.8.1.2 Adding a New Transform Set
    • 6.8.2 Defining the IPSec VPN Remote Configuration
    • 6.8.3 Configuring IPSEC VPN Authentication
    • 6.8.4 Configuring Crypto Maps
      • 6.8.4.1 Crypto Map Entries
      • 6.8.4.2 Crypto Map Peers
      • 6.8.4.3 Crypto Map Manual SAs
      • 6.8.4.4 Crypto Map Transform Sets
      • 6.8.4.5 Crypto Map Interfaces
    • 6.8.5 Viewing IPSec Security Associations
  • 6.9 Configuring the Radius Server
    • 6.9.1 Radius Overview
      • 6.9.1.1 User Database
      • 6.9.1.2 Authentication of Terminal/Management User(s)
      • 6.9.1.3 Access Policy
      • 6.9.1.4 Proxy to External Radius Server
      • 6.9.1.5 LDAP
      • 6.9.1.6 Accounting
    • 6.9.2 Using the Switch’s Radius Server Versus an External Radius
    • 6.9.3 Defining the Radius Configuration
      • 6.9.3.1 Radius Client Configuration
      • 6.9.3.2 Radius Proxy Server Configuration
    • 6.9.4 Configuring Radius Authentication and Accounting
    • 6.9.5 Configuring Radius Users
    • 6.9.6 Configuring Radius User Groups
    • 6.9.7 Viewing Radius Accounting Logs
  • 6.10 Creating Server Certificates
    • 6.10.1 Using Trustpoints to Configure Certificates
      • 6.10.1.1 Creating a Server / CA Root Certificate
    • 6.10.2 Configuring Trustpoint Associated Keys
      • 6.10.2.1 Adding a New Key
      • 6.10.2.2 Transferring Keys
• Switch Management
  • 7.1 Displaying the Management Access Interface
  • 7.2 Configuring Access Control
  • 7.3 Configuring SNMP Access
    • 7.3.1 Configuring SNMP v1/v2 Access
      • 7.3.1.1 Editing an Existing SNMP v1/v2 Community Name
    • 7.3.2 Configuring SNMP v3 Access
      • 7.3.2.1 Editing a SNMP v3 Authentication and Privacy Password
    • 7.3.3 Accessing SNMP v2/v3 Statistics
  • 7.4 Configuring SNMP Traps
    • 7.4.1 Enabling Trap Configuration
    • 7.4.2 Configuring Trap Thresholds
      • 7.4.2.1 Wireless Trap Threshold Values
  • 7.5 Configuring SNMP Trap Receivers
    • 7.5.1 Editing SNMP Trap Receivers
    • 7.5.2 Adding SNMP Trap Receivers
  • 7.6 Configuring Management Users
    • 7.6.1 Configuring Local Users
      • 7.6.1.1 Creating a New Local User
      • 7.6.1.2 Modifying an Existing Local User
      • 7.6.1.3 Creating a Guest Admin and Guest User
    • 7.6.2 Configuring Switch Authentication
      • 7.6.2.1 Modifying the Properties of an Existing Radius Server
      • 7.6.2.2 Adding a New Radius Server
• Diagnostics
  • 8.1 Displaying the Main Diagnostic Interface
    • 8.1.1 Switch Environment
    • 8.1.2 CPU Performance
    • 8.1.3 Switch Memory Allocation
    • 8.1.4 Switch Disk Allocation
    • 8.1.5 Switch Memory Processes
    • 8.1.6 Other Switch Resources
  • 8.2 Configuring System Logging
    • 8.2.1 Log Options
    • 8.2.2 File Management
      • 8.2.2.1 Viewing the Entire Contents of Individual Log Files
      • 8.2.2.2 Transferring Log Files
  • 8.3 Reviewing Core Snapshots
    • 8.3.1 Transferring Core Snapshots
  • 8.4 Reviewing Panic Snapshots
    • 8.4.1 Viewing Panic Details
    • 8.4.2 Transferring Panic Files
  • 8.5 Debugging the Applet
  • 8.6 Configuring a Ping
    • 8.6.1 Modifying the Configuration of an Existing Ping Test
    • 8.6.2 Adding a New Ping Test
    • 8.6.3 Viewing Ping Statistics